Skip to content

chore(main): release 0.1.9 - #58

Merged
beeme1mr merged 1 commit into
mainfrom
release-please--branches--main
Nov 27, 2024
Merged

chore(main): release 0.1.9#58
beeme1mr merged 1 commit into
mainfrom
release-please--branches--main

Conversation

@openfeaturebot

@openfeaturebot openfeaturebot commented Nov 5, 2024

Copy link
Copy Markdown
Contributor

🤖 I have created a release beep boop

0.1.9 (2024-11-27)

🧹 Chore

  • remove empty testutils package (#55) (9dc1d9f)
  • update back to previous mkdir permissions (#61) (515b534)

This PR was generated with Release Please. See documentation.

Signed-off-by: OpenFeature Bot <109696520+openfeaturebot@users.noreply.github.com>
@openfeaturebot
openfeaturebot force-pushed the release-please--branches--main branch from eaa8b72 to 2e937fa Compare November 27, 2024 12:43
@beeme1mr
beeme1mr added this pull request to the merge queue Nov 27, 2024
Merged via the queue into main with commit 79b36dd Nov 27, 2024
@openfeaturebot

Copy link
Copy Markdown
Contributor Author

anghelflorinm pushed a commit that referenced this pull request Nov 28, 2024
🤖 I have created a release *beep* *boop*
---


## [0.1.9](v0.1.8...v0.1.9)
(2024-11-27)


### 🧹 Chore

* remove empty testutils package
([#55](#55))
([9dc1d9f](9dc1d9f))
* update back to previous mkdir permissions
([#61](#61))
([515b534](515b534))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Signed-off-by: OpenFeature Bot <109696520+openfeaturebot@users.noreply.github.com>
anghelflorinm pushed a commit that referenced this pull request Nov 28, 2024
🤖 I have created a release *beep* *boop*
---


## [0.1.9](v0.1.8...v0.1.9)
(2024-11-27)


### 🧹 Chore

* remove empty testutils package
([#55](#55))
([9dc1d9f](9dc1d9f))
* update back to previous mkdir permissions
([#61](#61))
([515b534](515b534))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Signed-off-by: OpenFeature Bot <109696520+openfeaturebot@users.noreply.github.com>
This was referenced Feb 6, 2026
jonathannorris added a commit that referenced this pull request Jun 29, 2026
- vite ^6.4.2 -> ^6.4.3 (medium/high, alerts #57 #58)
- @babel/core transitive -> ^7.29.6 via override (low, alert #56)
- @angular/common, @angular/core, @angular/compiler 19.x -> 20.3.25 (high/medium, alerts #52 #53 #54 #55)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
jonathannorris added a commit that referenced this pull request Aug 17, 2026
* chore: resolve open dependabot security alerts

- vite ^6.4.2 -> ^6.4.3 (medium/high, alerts #57 #58)
- @babel/core transitive -> ^7.29.6 via override (low, alert #56)
- @angular/common, @angular/core, @angular/compiler 19.x -> 20.3.25 (high/medium, alerts #52 #53 #54 #55)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: align @openfeature/web-sdk with angular-sdk peer dependency

Address Copilot review feedback on PR #253: @openfeature/angular-sdk
1.3.1 requires @openfeature/web-sdk ^1.9.0 as a peer dependency, but
package.json still allowed ^1.7.3. Bump the declared range to match
and regenerate the lockfile.

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve additional dependabot alerts for fast-uri

- fast-uri ^3.1.2 -> ^3.1.4 (high, alert #59: host confusion via failed IDN canonicalization)
- fast-uri ^3.1.2 -> ^3.1.4 (high, alert #60: host confusion via literal backslash authority delimiter)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* fix(deps): regenerate OpenAPI client for oapi-codegen v2.8.0

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve postcss alert and pin fast-uri exactly

- postcss <= 8.5.17 -> ^8.5.18 override (high, alert #62)
- pin fast-uri override to exact 3.1.4 per CodeRabbit review suggestion

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: bump fast-uri to 3.1.5 for dependabot alert #64

- fast-uri 3.1.4 -> 3.1.5 (high, alert #64: host confusion via backslash authority introducer)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve open dependabot security alerts

- @angular/core 20.3.25 -> 20.3.28 (high, alert #75: XSS via event-handler attributes)
- @angular/compiler 20.3.25 -> 20.3.28 (high, alert #74: XSS via event-handler attributes)
- @angular/common 20.3.25 -> 20.3.28 (high, alert #73: cache-key ambiguity in HttpTransferCache)
- brace-expansion 2.1.0 -> 2.1.4 (high, alert #72: DoS via exponential-time expansion)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

---------

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
beeme1mr pushed a commit to joshhunt/cli that referenced this pull request Aug 18, 2026
* chore: resolve open dependabot security alerts

- vite ^6.4.2 -> ^6.4.3 (medium/high, alerts open-feature#57 open-feature#58)
- @babel/core transitive -> ^7.29.6 via override (low, alert open-feature#56)
- @angular/common, @angular/core, @angular/compiler 19.x -> 20.3.25 (high/medium, alerts open-feature#52 open-feature#53 open-feature#54 open-feature#55)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: align @openfeature/web-sdk with angular-sdk peer dependency

Address Copilot review feedback on PR open-feature#253: @openfeature/angular-sdk
1.3.1 requires @openfeature/web-sdk ^1.9.0 as a peer dependency, but
package.json still allowed ^1.7.3. Bump the declared range to match
and regenerate the lockfile.

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve additional dependabot alerts for fast-uri

- fast-uri ^3.1.2 -> ^3.1.4 (high, alert open-feature#59: host confusion via failed IDN canonicalization)
- fast-uri ^3.1.2 -> ^3.1.4 (high, alert open-feature#60: host confusion via literal backslash authority delimiter)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* fix(deps): regenerate OpenAPI client for oapi-codegen v2.8.0

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve postcss alert and pin fast-uri exactly

- postcss <= 8.5.17 -> ^8.5.18 override (high, alert open-feature#62)
- pin fast-uri override to exact 3.1.4 per CodeRabbit review suggestion

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: bump fast-uri to 3.1.5 for dependabot alert open-feature#64

- fast-uri 3.1.4 -> 3.1.5 (high, alert open-feature#64: host confusion via backslash authority introducer)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

---------

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants