Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): update dependency happy-dom to v15.10.2 [SECURITY] #186

Merged
merged 1 commit into from
Nov 18, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 6, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
happy-dom 15.7.3 -> 15.10.2 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-51757

Impact

Consumers of the NPM package happy-dom

Patches

The security vulnerability has been patched in v15.10.2

Workarounds

No easy workarounds to my knowledge

References

#​1585


Release Notes

capricorn86/happy-dom (happy-dom)

v15.10.2

Compare Source

👷‍♂️ Patch fixes
  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #​1585
    • There was a case that was missed with the first patch

v15.10.1

Compare Source

👷‍♂️ Patch fixes
  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #​1585

v15.10.0

Compare Source

🎨 Features
  • Adds a new setting called disableSameOriginPolicy that makes it possible to bypass the same-origin policy in fetch requests - By @​OlaviSau in task #​1553

v15.9.0

Compare Source

🎨 Features
  • Adds support for "aspect-ratio" to CSSStyleDeclaration - By @​yinm in task #​1147

v15.8.5

Compare Source

👷‍♂️ Patch fixes
  • Fixes bug where Node.getRootNode() returned null when it was within a ShadowRoot that previously been disconnected from the Document - By @​capricorn86 in task #​1581

v15.8.4

Compare Source

👷‍♂️ Patch fixes
  • Fixes bug where child nodes of HTMLSelectElement and HTMLFormElement had the wrong reference to the parent - By @​capricorn86 in task #​1578

v15.8.3

Compare Source

👷‍♂️ Patch fixes
  • Toggle "open" attribute on HTMLDetailsElement when dispatching a click event on a summary element which is a child of the details element - By @​mikedidomizio in task #​1534

v15.8.2

Compare Source

👷‍♂️ Patch fixes
  • Use globalThis instead of global to make Happy DOM work in other runtimes such as Cloudflare workers - By @​mattallty in task #​1546

v15.8.1

Compare Source

👷‍♂️ Patch fixes

v15.8.0

Compare Source

v15.7.4

Compare Source

👷‍♂️ Patch fixes
  • Fixes incorrect handling of non-node items inserted using replaceWith(), before() and after() - By @​BenjaminAster in task #​1533

Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the deps label Nov 6, 2024
@renovate renovate bot force-pushed the renovate/npm-happy-dom-vulnerability branch from 60ba9a8 to 1c1ec0a Compare November 6, 2024 22:40
@renovate renovate bot changed the title build(deps): update dependency happy-dom to v15.10.1 [SECURITY] build(deps): update dependency happy-dom to v15.10.2 [SECURITY] Nov 6, 2024
@renovate renovate bot force-pushed the renovate/npm-happy-dom-vulnerability branch 2 times, most recently from 71621ce to 8691e0c Compare November 18, 2024 10:02
@renovate renovate bot force-pushed the renovate/npm-happy-dom-vulnerability branch from 8691e0c to dec2e7c Compare November 18, 2024 12:16
@cre8ivejp cre8ivejp merged commit 66dd0ab into main Nov 18, 2024
2 checks passed
@cre8ivejp cre8ivejp deleted the renovate/npm-happy-dom-vulnerability branch November 18, 2024 12:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant