Grant Limberg
|
330ac161d4
|
Merge pull request #8 from zerotier/fix/dependabot-js-yaml-babel-core
Bump js-yaml to 3.15.0 and @babel/core to 7.29.7 to fix Dependabot alerts
|
2026-07-30 14:09:27 -07:00 |
|
 Grant LimbergandClaude Opus 4.8
|
512321a24d
|
Bump js-yaml to 3.15.0 and @babel/core to 7.29.7 to fix Dependabot alerts
Resolves open Dependabot alerts:
- #16 (medium): js-yaml < 3.15.0 — quadratic-complexity DoS in merge
key handling via repeated aliases (GHSA-h67p-54hq-rp68)
- #15 (low): @babel/core <= 7.29.0 — arbitrary file read via
sourceMappingURL comment (GHSA-4x5r-pxfx-6jf8)
Also sweeps remaining npm audit findings (all in-range, lockfile-only):
- brace-expansion 1.1.11 -> 1.1.16 (GHSA-v6h2-p8h4-qcjw, GHSA-f886-m6hf-6m8v)
- cross-spawn 7.0.3 -> 7.0.6 (GHSA-3xgq-45jj-v275)
- micromatch 4.0.5 -> 4.0.8 (GHSA-952p-6rrq-rcjv)
All updates are transitive devDependencies within existing semver
ranges; package.json is unchanged. npm audit now reports 0
vulnerabilities and the jest suite passes.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-20 14:10:21 +02:00 |
|
Grant Limberg
|
a07024188c
|
Merge pull request #7 from zerotier/dependabot/npm_and_yarn/npm_and_yarn-66413a1f6e
Bump picomatch from 2.3.1 to 2.3.2 in the npm_and_yarn group across 1 directory
|
2026-04-21 13:18:29 -07:00 |
|
Grant Limberg
|
494bb63eb1
|
Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-66413a1f6e
|
2026-04-21 13:17:53 -07:00 |
|
Grant Limberg
|
2786aca9ac
|
Merge pull request #6 from zerotier/dependabot/npm_and_yarn/minimatch-3.1.5
Bump minimatch from 3.1.2 to 3.1.5
|
2026-04-21 13:17:40 -07:00 |
|
dependabot[bot]
|
2948c2c947
|
Bump picomatch in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [picomatch](https://github.com/micromatch/picomatch).
Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-04-21 20:16:54 +00:00 |
|
dependabot[bot]
|
c9fb2f4f4d
|
Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-04-21 20:16:14 +00:00 |
|
Grant Limberg
|
a8faf19e40
|
Merge pull request #5 from zerotier/dependabot/npm_and_yarn/braces-3.0.3
Bump braces from 3.0.2 to 3.0.3
|
2026-02-12 11:49:22 -08:00 |
|
dependabot[bot]
|
557712a248
|
Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
---
updated-dependencies:
- dependency-name: braces
dependency-version: 3.0.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-12 19:48:38 +00:00 |
|
Grant Limberg
|
2001685c85
|
Merge pull request #4 from zerotier/dependabot/npm_and_yarn/js-yaml-3.14.2
Bump js-yaml from 3.14.1 to 3.14.2
|
2026-02-05 14:20:37 -08:00 |
|
dependabot[bot]
|
18796138ea
|
Bump js-yaml from 3.14.1 to 3.14.2
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2)
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-05 22:18:49 +00:00 |
|
Grant Limberg
|
e2061e623f
|
Merge pull request #3 from zerotier/ldr/style
add failing tests + clean up TS style
|
2023-10-27 10:03:05 -07:00 |
|
Grant Limberg
|
09f0f3020a
|
Merge branch 'main' into ldr/style
|
2023-10-27 10:01:32 -07:00 |
|
Lennon Day-Reynolds
|
ec49c2b472
|
add failing tests + clean up TS style
|
2023-10-27 09:59:52 -07:00 |
|
Grant Limberg
|
1e60573f00
|
Merge pull request #2 from zerotier/tl-add-action
Run test in github action, show test badge in readme
|
2023-10-27 09:58:26 -07:00 |
|
travisladuke
|
9583504e4a
|
put test badge in readme
|
2023-10-27 09:56:16 -07:00 |
|
travisladuke
|
f2b3a99c6d
|
workflow?
|
2023-10-27 09:55:49 -07:00 |
|
travisladuke
|
f550f7aa34
|
add a test for failing bad data
|
2023-10-27 09:45:01 -07:00 |
|
Grant Limberg
|
ea5434dba4
|
Merge pull request #1 from zerotier/license
add license file
|
2023-10-27 09:39:59 -07:00 |
|
Grant Limberg
|
1ae09521cb
|
add license file
|
2023-10-27 09:39:39 -07:00 |
|
Grant Limberg
|
d3a31b8eb8
|
version bump
|
2023-10-26 14:12:00 -07:00 |
|
Grant Limberg
|
16eff99ed6
|
remove redundant header
|
2023-10-26 14:08:05 -07:00 |
|
Grant Limberg
|
95a0349118
|
initial commit
|
2023-10-26 14:04:56 -07:00 |
|