Browse and test a REST API described with the OpenAPI 3.0 Specification

Last update: Apr 21, 2022

Overview

OpenAPI 3 viewer

This service is designed to easily browse and test a REST API described with the OpenAPI 3.0 Specification (fka Swagger Specification). This service mainly uses vue-openapi component. It also provides a simple nodeJS backend for proxy purpose.

See it in action :

https://koumoul.com/openapi-viewer/

Install

Clone this project and install dependencies with npm install or yarn then :

npm run dev

Launch the service with Docker

A Docker image is publicly available on dockerhub.

Run the following command :

docker run -p 8080:8080 koumoul/openapi-viewer

and go to this page

Query parameters

You can use the followings query parameters to prefill viewer

url : The location of the API documentation file to load, in OpenAPI v3 JSON format.
proxy : true or false if you want to fetch API documentation file using this service backend as a proxy. Defaults to false. Can be usefull if the API description can't be reached with CORS headers. Do not use the proxy if you want to access an API description located on localhost.
headers : URI encoded JSON dictionnary of headers that will be used to prefill parameters if they match. Can be usefull to prefill x-api-key or authorization headers.
query-params : URI encoded JSON dictionnary of query parameters that will be used to prefill parameters if they match. Can be usefull to prefill an organizationId parameter in a multi-tenant application.
hide-toolbar : true or false of you want to hide toolbar. This can be usefull for iframe integration. Defaults to false.

Comments

Can not show multiple example (examples) everywhere

Hi there. openapi-viewer can not show example when there is multiple examples defined by examples parameter everywhere, including parameters, requestBodies, responses, and schema. Hope it will be fixed soon. Thank you.

opened by 3mp3ri0r 6
Error when docs reference to external file

I've tried simple docs that contain reference to external file. The viewer only show blank page and in console show some error like this:

This is the main file: Main

This is the external file: External

Any update or recomendation will be helpful since only koumol can intrepet ref with example correctly in OAS 3. Thanks.

opened by 3mp3ri0r 2
Path Level Parameters

https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.1.md#pathItemObject

Path objects support defining global parameters for all operations it has. The openapi viewer displays this as if it's a separate operation (e.g. GET /foo, POST /foo, PARAMETERS /foo), and the parameters aren't added to the normal operations.

opened by Nessworthy 2
JS errors loading simple OpenAPI 3.0.0 spec
Steps: (1) Take this YAML file https://github.com/darrelmiller/cowpi/blob/master/COW1.0.0.yml (2) Convert to JSON (uploaded as api.json.txt) (3) Host this JSON and provide a copy to locally running "openapi-viewer" instance (4) Confirm that the JSON is being loaded correctly (using Chrome network inspector), but rendering fails. (5) JS Console has a pile of JS errors, starting from this:

[Vue warn]: Error in render function: "TypeError: Cannot read property 'replace' of undefined Please report this to https://github.com/chjj/marked." found in ---> <OpenApi> <App> <Root>

(context: trying this out at APIStrat, recommended on the OpenAPI IMPLEMENTATIONS.MD file)
opened by gunsch 2
chore(deps): bump follow-redirects from 1.5.0 to 1.14.7
Bumps follow-redirects from 1.5.0 to 1.14.7.

Commits

2ede36d Release version 1.14.7 of the npm package.

8b347cb Drop Cookie header across domains.

6f5029a Release version 1.14.6 of the npm package.

af706be Ignore null headers.

d01ab7a Release version 1.14.5 of the npm package.

40052ea Make compatible with Node 17.

86f7572 Fix: clear internal timer on request abort to avoid leakage

2e1eaf0 Keep Authorization header on subdomain redirects.

2ad9e82 Carry over Host header on relative redirects (#172)

77e2a58 Release version 1.14.4 of the npm package.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
chore(deps): bump ini from 1.3.4 to 1.3.7
Bumps ini from 1.3.4 to 1.3.7.

Commits

c74c8af 1.3.7

024b8b5 update deps, add linting

032fbaf Use Object.create(null) to avoid default object property hazards

2da9039 1.3.6

cfea636 better git push script, before publish instead of after

56d2805 do not allow invalid hazardous string as section name

738eca5 v1.3.5

da3e2c4 ignore coverage

9868eb4 package lock

6d8b7c8 auto-publish scripts

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
chore(deps-dev): bump eslint from 3.19.0 to 4.18.2
Bumps eslint from 3.19.0 to 4.18.2.

Release notes

Sourced from eslint's releases.

v4.18.2

6b71fd0 Fix: [email protected], because 4.0.3 needs "ajv": "^6.0.1" (#10022) (Mathieu Seiler)

3c697de Chore: fix incorrect comment about linter.verify return value (#10030) (Teddy Katz)

9df8653 Chore: refactor parser-loading out of linter.verify (#10028) (Teddy Katz)

f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #10002) (#10019) (Jamie Davis)

e4f52ce Chore: Simplify dataflow in linter.verify (#10020) (Teddy Katz)

33177cd Chore: make library files non-executable (#10021) (Teddy Katz)

558ccba Chore: refactor directive comment processing (#10007) (Teddy Katz)

18e15d9 Chore: avoid useless catch clauses that just rethrow errors (#10010) (Teddy Katz)

a1c3759 Chore: refactor populating configs with defaults in linter (#10006) (Teddy Katz)

aea07dc Fix: Make max-len ignoreStrings ignore JSXText (fixes #9954) (#9985) (Rachael Sim)

v4.18.1

f417506 Fix: ensure no-await-in-loop reports the correct node (fixes #9992) (#9993) (Teddy Katz)

3e99363 Docs: Fixed typo in key-spacing rule doc (#9987) (Jaid)

7c2cd70 Docs: deprecate experimentalObjectRestSpread (#9986) (Toru Nagashima)

v4.18.0

70f22f3 Chore: Apply memoization to config creation within glob utils (#9944) (Kenton Jacobsen)

0e4ae22 Update: fix indent bug with binary operators/ignoredNodes (fixes #9882) (#9951) (Teddy Katz)

47ac478 Update: add named imports and exports for object-curly-newline (#9876) (Nicholas Chua)

e8efdd0 Fix: support Rest/Spread Properties (fixes #9885) (#9943) (Toru Nagashima)

f012b8c Fix: support Async iteration (fixes #9891) (#9957) (Toru Nagashima)

74fa253 Docs: Clarify no-mixed-operators options (fixes #9962) (#9964) (Ivan Hayes)

426868f Docs: clean up key-spacing docs (fixes #9900) (#9963) (Abid Uzair)

4a6f22e Update: support eslint-disable-* block comments (fixes #8781) (#9745) (Erin)

777283b Docs: Propose fix typo for function (#9965) (John Eismeier)

bf3d494 Docs: Fix typo in max-len ignorePattern example. (#9956) (Tim Martin)

d64fbb4 Docs: fix typo in prefer-destructuring.md example (#9930) (Vse Mozhet Byt)

f8d343f Chore: Fix default issue template (#9946) (Kai Cataldo)

v4.17.0

1da1ada Update: Add "multiline" type to padding-line-between-statements (#8668) (Matthew Bennett)

bb213dc Chore: Use messageIds in some of the core rules (#9648) (Jed Fox)

1aa1970 Docs: remove outdated rule naming convention (#9925) (Teddy Katz)

3afaff6 Docs: Add prefer-destructuring variable reassignment example (#9873) (LePirlouit)

d20f6b4 Fix: Typo in error message when running npm (#9866) (Maciej Kasprzyk)

51ec6a7 Docs: Use GitHub Multiple PR/Issue templates (#9911) (Kai Cataldo)

dc80487 Update: space-unary-ops uses astUtils.canTokensBeAdjacent (fixes #9907) (#9906) (Kevin Partington)

084351b Docs: Fix the messageId example (fixes #9889) (#9892) (Jed Fox)

9cbb487 Docs: Mention the globals key in the no-undef docs (#9867) (Dan Dascalescu)

v4.16.0

e26a25f Update: allow continue instead of if wrap in guard-for-in (fixes #7567) (#9796) (Michael Ficarra)

af043eb Update: Add NewExpression support to comma-style (#9591) (Frazer McLean)

4f898c7 Build: Fix JSDoc syntax errors (#9813) (Matija Marohnić)

13bcf3c Fix: Removing curly quotes in no-eq-null report message (#9852) (Kevin Partington)

b96fb31 Docs: configuration hierarchy for CLIEngine options (fixes #9526) (#9855) (PiIsFour)

8ccbdda Docs: Clarify that -c configs merge with .eslintrc.* (fixes #9535) (#9847) (Kevin Partington)

978574f Docs: Fix examples for no-useless-escape (#9853) (Toru Kobayashi)

... (truncated)

Changelog

Sourced from eslint's changelog.

v4.18.2 - March 2, 2018

6b71fd0 Fix: [email protected], because 4.0.3 needs "ajv": "^6.0.1" (#10022) (Mathieu Seiler)

3c697de Chore: fix incorrect comment about linter.verify return value (#10030) (Teddy Katz)

9df8653 Chore: refactor parser-loading out of linter.verify (#10028) (Teddy Katz)

f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #10002) (#10019) (Jamie Davis)

e4f52ce Chore: Simplify dataflow in linter.verify (#10020) (Teddy Katz)

33177cd Chore: make library files non-executable (#10021) (Teddy Katz)

558ccba Chore: refactor directive comment processing (#10007) (Teddy Katz)

18e15d9 Chore: avoid useless catch clauses that just rethrow errors (#10010) (Teddy Katz)

a1c3759 Chore: refactor populating configs with defaults in linter (#10006) (Teddy Katz)

aea07dc Fix: Make max-len ignoreStrings ignore JSXText (fixes #9954) (#9985) (Rachael Sim)

v4.18.1 - February 20, 2018

f417506 Fix: ensure no-await-in-loop reports the correct node (fixes #9992) (#9993) (Teddy Katz)

3e99363 Docs: Fixed typo in key-spacing rule doc (#9987) (Jaid)

7c2cd70 Docs: deprecate experimentalObjectRestSpread (#9986) (Toru Nagashima)

v4.18.0 - February 16, 2018

70f22f3 Chore: Apply memoization to config creation within glob utils (#9944) (Kenton Jacobsen)

0e4ae22 Update: fix indent bug with binary operators/ignoredNodes (fixes #9882) (#9951) (Teddy Katz)

47ac478 Update: add named imports and exports for object-curly-newline (#9876) (Nicholas Chua)

e8efdd0 Fix: support Rest/Spread Properties (fixes #9885) (#9943) (Toru Nagashima)

f012b8c Fix: support Async iteration (fixes #9891) (#9957) (Toru Nagashima)

74fa253 Docs: Clarify no-mixed-operators options (fixes #9962) (#9964) (Ivan Hayes)

426868f Docs: clean up key-spacing docs (fixes #9900) (#9963) (Abid Uzair)

4a6f22e Update: support eslint-disable-* block comments (fixes #8781) (#9745) (Erin)

777283b Docs: Propose fix typo for function (#9965) (John Eismeier)

bf3d494 Docs: Fix typo in max-len ignorePattern example. (#9956) (Tim Martin)

d64fbb4 Docs: fix typo in prefer-destructuring.md example (#9930) (Vse Mozhet Byt)

f8d343f Chore: Fix default issue template (#9946) (Kai Cataldo)

v4.17.0 - February 2, 2018

1da1ada Update: Add "multiline" type to padding-line-between-statements (#8668) (Matthew Bennett)

bb213dc Chore: Use messageIds in some of the core rules (#9648) (Jed Fox)

1aa1970 Docs: remove outdated rule naming convention (#9925) (Teddy Katz)

3afaff6 Docs: Add prefer-destructuring variable reassignment example (#9873) (LePirlouit)

d20f6b4 Fix: Typo in error message when running npm (#9866) (Maciej Kasprzyk)

51ec6a7 Docs: Use GitHub Multiple PR/Issue templates (#9911) (Kai Cataldo)

dc80487 Update: space-unary-ops uses astUtils.canTokensBeAdjacent (fixes #9907) (#9906) (Kevin Partington)

084351b Docs: Fix the messageId example (fixes #9889) (#9892) (Jed Fox)

9cbb487 Docs: Mention the globals key in the no-undef docs (#9867) (Dan Dascalescu)

v4.16.0 - January 19, 2018

e26a25f Update: allow continue instead of if wrap in guard-for-in (fixes #7567) (#9796) (Michael Ficarra)

af043eb Update: Add NewExpression support to comma-style (#9591) (Frazer McLean)

... (truncated)

Commits

22ff6f3 4.18.2

817b84b Build: changelog update for 4.18.2

6b71fd0 Fix: [email protected], because 4.0.3 needs "ajv": "^6.0.1" (#10022)

3c697de Chore: fix incorrect comment about linter.verify return value (#10030)

9df8653 Chore: refactor parser-loading out of linter.verify (#10028)

f6901d0 Fix: remove catastrophic backtracking vulnerability (fixes #10002) (#10019)

e4f52ce Chore: Simplify dataflow in linter.verify (#10020)

33177cd Chore: make library files non-executable (#10021)

558ccba Chore: refactor directive comment processing (#10007)

18e15d9 Chore: avoid useless catch clauses that just rethrow errors (#10010)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Open API viewer redirects to koumoul.com
Hi,

I have a docker container with open-api viewer, integrated in a webapp. UI works fine, but when i refresh the page containing API Doc, i am redirected to koumoul.com

Steps to reproduce

https://my.website.fr/api-doc + F5 = https://my.website.fr/api-doc/?url=https://koumoul.com/s/geocoder/api/v1/api-docs.json&proxy=false

This do not happen in dev configuration. I suspect an issue with NGINX. Do you know if there are some specific settings to use with NGINX ?

Regards.
opened by bouchezb 1
chore(deps): bump mixin-deep from 1.3.1 to 1.3.2
Bumps mixin-deep from 1.3.1 to 1.3.2.

Commits

754f0c2 1.3.2

90ee1fa ensure keys are valid when mixing in values

See full diff in compare view

Maintainer changes

This version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
prefill authorization header with query parameter

Support for a query parameter 'authorization' that is used to prefill authorization parameter in headers if it exists. The value of this query parameter could be set in an input field too.

opened by nicolas-bonnel 0
Proxy call should be optionnal

Currently,the call for retrieving the open-api.json always uses proxy (this allows to bypass cors restrictions). But this makes impossible to read a local open-api.json file.

A checkbox button could be added to the UI with a label "use proxy". If ticked, it's the same behaviour as now, if unticked we call directly the URI given in the input.

opened by nicolas-bonnel 0
chore(deps): bump express from 4.16.3 to 4.17.3
Bumps express from 4.16.3 to 4.17.3.

Release notes

Sourced from express's releases.

4.17.3

deps: [email protected]~1.3.8

deps: [email protected]~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: [email protected]~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected].2.1

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1

Revert "Improve error message for null/undefined to res.status"

4.17.0

Add express.raw to parse bodies into Buffer

Add express.text to parse bodies into string

... (truncated)

Changelog

Sourced from express's changelog.

4.17.3 / 2022-02-16

deps: [email protected]~1.3.8

deps: [email protected]~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2 / 2021-12-16

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: [email protected]~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1 / 2019-05-25

... (truncated)

Commits

3d7fce5 4.17.3

f906371 build: update example dependencies

6381bc6 deps: [email protected]

a007863 deps: [email protected]

e98f584 Revert "build: use [email protected] for Node.js < 4"

a659137 tests: use strict mode

a39e409 tests: prevent leaking changes to NODE_ENV

82de4de examples: fix path traversal in downloads example

12310c5 build: use nyc for test coverage

884657d examples: remove bitwise syntax for includes check

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump engine.io from 3.2.0 to 6.2.1
Bumps engine.io from 3.2.0 to 6.2.1.

Release notes

Sourced from engine.io's releases.

6.2.1

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

6.2.0

Features

add the "maxPayload" field in the handshake details (088dcb4)

So that clients in HTTP long-polling can decide how many packets they have to send to stay under the maxHttpBufferSize value.

This is a backward compatible change which should not mandate a new major revision of the protocol (we stay in v4), as we only add a field in the JSON-encoded handshake data:

0{"sid":"lv_VI97HAXpY6yYWAAAC","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":5000,"maxPayload":1000000}

Links

Diff: https://github.com/socketio/engine.io/compare/6.1.3...6.2.0

Client release: 6.2.0

ws version: ~8.2.3

6.1.3

Bug Fixes

typings: allow CorsOptionsDelegate as cors options (#641) (a463d26)

uws: properly handle chunked content (#642) (3367440)

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.2.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

3.6.0 (2022-06-06)

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469), closes socketio/socket.io-client-swift#1309

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: https://github.com/advisories/GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

... (truncated)

Commits

24b847b chore(release): 6.2.1

425e833 fix: catch errors when destroying invalid upgrades (#658)

99adb00 chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...

d196f6a chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)

7c1270f chore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)

535a01d ci: add Node.js 18 in the test matrix

1b71a6f docs: remove "Vanilla JS" highlight from README (#656)

917d1d2 refactor: replace deprecated String.prototype.substr() (#646)

020801a chore: add changelog for version 3.6.0

ed1d6f9 test: make test script work on Windows (#643)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump loader-utils, babel-loader, vue-loader and webpack
Bumps loader-utils to 1.4.2 and updates ancestor dependencies loader-utils, babel-loader, vue-loader and webpack. These dependencies need to be updated together.

Updates loader-utils from 1.1.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

v1.4.0

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Commits

331ad50 chore(release): 1.4.2

17cbf8f fix: ReDoS problem (#226)

8f082b3 chore(release): 1.4.1

4504e34 fix: security problem (#220)

d95b8b5 chore(release): 1.4.0

cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)

06d36cf chore(release): 1.3.0

469eeba feat: support the [query] template for the interpolatedName method (#162)

909c99d chore: funding.yml config and CI fix (#159)

b5b74f0 Set up CI with Azure Pipelines

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.

Updates babel-loader from 6.4.1 to 9.1.0

Release notes

Sourced from babel-loader's releases.

v9.1.0

New features

Pass external dependencies from Babel to Webpack by @nicolo-ribaudo in babel/babel-loader#971

Full Changelog: https://github.com/babel/babel-loader/compare/v9.0.1...v9.1.0

v9.0.1

Bug Fixes

remove "node:" builtin prefix by @JLHwung in babel/babel-loader#970

Full Changelog: https://github.com/babel/babel-loader/compare/v9.0.0...v9.0.1

v9.0.0

What's Changed

update hash method mechanism so it doesn't fail on a fips enabled machine by @darmbrust in babel/babel-loader#939

Require babel ^7.12.0 and Node.js >= 14.15.0 versions by @JLHwung in babel/babel-loader#956

Remove dependency on loader-utils and drop webpack 4 support by @nied in babel/babel-loader#942

New Contributors

@darmbrust made their first contribution in babel/babel-loader#939

@nied made their first contribution in babel/babel-loader#942

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v9.0.0

v8.3.0

New features

Pass external dependencies from Babel to Webpack by @nicolo-ribaudo in babel/babel-loader#971

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0

v8.2.5

What's Changed

fix: respect inputSourceMap loader option by @alan-agius4 in babel/babel-loader#896

New Contributors

@alan-agius4 made their first contribution in babel/babel-loader#896

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5

v8.2.4

What's Changed

doc(README.md): fix a broken markdown link by @loveDstyle in babel/babel-loader#919

Bump loader-utils to 2.x by @stianjensen in babel/babel-loader#931

Use md5 hashing for OpenSSL 3 by @pathmapper in babel/babel-loader#924

Thanks @loveDstyle, @stianjensen and @pathmapper for your first PRs!

8.2.3

... (truncated)

Changelog

Sourced from babel-loader's changelog.

Changelog

For changes in version v7.0.0 and up please go to release

Old Changelog

Commits

15fbacf 9.1.0

6348e1c Pass external dependencies from Babel to Webpack (#971)

457b9ad Update webpack

f42ac9b 9.0.1

4f9c0bf remove "node:" builtin prefix (#970)

9ff288f 9.0.0

006a3dc Update README.md

daed88a Update README.md

0ed5fd6 Bump ini from 1.3.5 to 1.3.8 (#968)

b1749e3 Bump y18n from 4.0.0 to 4.0.3 (#967)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.

Updates vue-loader from 10.3.0 to 17.0.1

Release notes

Sourced from vue-loader's releases.

v17.0.1

Bug Fixes

add vue and @vue/compiler-sfc to optional peerDependencies (df0ded5), closes #1944

merge custom queries rather than appending (#1911) (9e4249a)

v17.0.0

Features

support reactivityTransform option (e07490e)

BREAKING CHANGES

remove refSugar option, require [email protected]^3.2.13

v16.8.3

Bug Fixes

HMR not working correctly with vue-class-component components (#1897) (76b1448)

v16.8.2

Bug Fixes

should allow chaining with loaders for non-vue files (#1889) (f32f953), closes #1879 #1883 #1890

plugin: use compiler.webpack when possible (#1884) (820d23c)

v16.8.1

Bug Fixes

fix template options resolving for ts (91f581b)

v16.8.0

Bug Fixes

hmr: fix hmr regression (bacc6a9)

Features

enableTsInTemplate option (7613534)

When used with ts-loader, due to ts-loader's cache invalidation behavior, it sometimes prevents the template from being hot-reloaded in isolation, causing the component to reload despite only the template being edited. If this is annoying, you can set this option to false (and avoid using TS expressions in templates).

Alternatively, leave this option on (by default) and use esbuild-loader to transpile TS instead, which doesn't suffer from this problem (it's also a lot faster). However, do note you will need to rely on TS type checking from other sources (e.g. IDE or vue-tsc).

v16.7.1

Bug Fixes

remove pure annotation for custom blocks (cd891e5)

... (truncated)

Changelog

Sourced from vue-loader's changelog.

17.0.1 (2022-10-28)

Bug Fixes

add vue and @vue/compiler-sfc to optional peerDependencies (df0ded5), closes #1944

merge custom queries rather than appending (#1911) (9e4249a)

17.0.0 (2021-12-12)

Features

support reactivityTransform option (e07490e)

BREAKING CHANGES

remove refSugar option, require [email protected]^3.2.13

16.8.3 (2021-11-04)

Bug Fixes

HMR not working correctly with vue-class-component components (#1897) (76b1448)

16.8.3 (2021-11-04)

Bug Fixes

HMR not working correctly with vue-class-component components (#1897) (76b1448)

16.8.2 (2021-10-26)

Bug Fixes

should allow chaining with loaders for non-vue files (#1889) (f32f953), closes #1879 #1883 #1890

plugin: use compiler.webpack when possible (#1884) (820d23c)

... (truncated)

Commits

75d2b5d 17.0.1

df0ded5 fix: add vue and @vue/compiler-sfc to optional peerDependencies

b3265c9 chore: add repository property to package.json (#1934)

0a02377 chore: fix typo (#2010)

9e4249a fix: merge custom queries rather than appending (#1911)

6a293df chore: changelog [ci skip]

e5c7ab4 v17.0.0

e931434 chore: lockfile

e07490e feat: support reactivityTransform option

b391b04 chore: remove unncessary log

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by soda, a new releaser for vue-loader since your current version.

Updates webpack from 1.15.0 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

experiments.* normalize to false when opt-out

avoid NaN%

show the correct error when using a conflicting chunk name in code

HMR code tests existance of window before trying to access it

fix eval-nosources-* actually exclude sources

fix race condition where no module is returned from processing module

fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node

add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin

add more typings

generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

8241da7 5.75.0

a91d923 Merge pull request #16458 from webpack/bugfix/semi

4608b11 Merge pull request #16457 from webpack/tooling/update

dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback

23b9a1c Merge pull request #16167 from exposir/fixts

6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose

f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64

761a542 fix semicolon position

2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources

c18203c update tooling

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump socket.io-parser from 3.1.3 to 4.2.1
Bumps socket.io-parser from 3.1.3 to 4.2.1.

Release notes

Sourced from socket.io-parser's releases.

4.2.1

Bug Fixes

check the format of the index of each attachment (b5d0cb7)

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.2.0...4.2.1

4.2.0

Features

allow the usage of custom replacer and reviver (#112) (b08bc1a)

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.1.2...4.2.0

4.1.2

Bug Fixes

allow objects with a null prototype in binary packets (#114) (7f6b262)

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.1.1...4.1.2

4.1.1

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.1.0...4.1.1

4.1.0

Features

provide an ESM build with and without debug (388c616)

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.1.0

4.0.5

Bug Fixes

check the format of the index of each attachment (b559f05)

Links

Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5

... (truncated)

Changelog

Sourced from socket.io-parser's changelog.

4.2.1 (2022-06-27)

Bug Fixes

check the format of the index of each attachment (b5d0cb7)

4.2.0 (2022-04-17)

Features

allow the usage of custom replacer and reviver (#112) (b08bc1a)

4.1.2 (2022-02-17)

Bug Fixes

allow objects with a null prototype in binary packets (#114) (7f6b262)

4.1.1 (2021-10-14)

4.1.0 (2021-10-11)

Features

provide an ESM build with and without debug (388c616)

4.0.4 (2021-01-15)

Bug Fixes

allow integers as event names (1c220dd)

4.0.3 (2021-01-05)

4.0.2 (2020-11-25)

... (truncated)

Commits

5a2ccff chore(release): 4.2.1

b5d0cb7 fix: check the format of the index of each attachment

c7514b5 chore(release): 4.2.0

931f152 chore: add Node.js 16 in the test matrix

6c9cb27 chore: bump @socket.io/component-emitter to version 3.1.0

b08bc1a feat: allow the usage of custom replacer and reviver (#112)

aed252c chore(release): 4.1.2

89209fa chore: bump cached-path-relative from 1.0.2 to 1.1.0 (#113)

0a3b556 chore: bump path-parse from 1.0.6 to 1.0.7 (#108)

7f6b262 fix: allow objects with a null prototype in binary packets (#114)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump set-value from 2.0.0 to 2.0.1
Bumps set-value from 2.0.0 to 2.0.1.

Commits

bb0f038 2.0.1

cb12f14 ensure only valid keys are used

See full diff in compare view

Maintainer changes

This version was pushed to npm by doowb, a new releaser for set-value since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0