Merge pull request #1738 from actions/prepare-v5.0.4

Merge pull request #1738 from actions/prepare-v5.0.4 · actions/cache@6682284

Commit 6682284

authored

Update dependencies & patch security vulnerabilities

2 parents 5656298 + e340396 commit 6682284

File tree

12 files changed

1161

475

lines changed

.licenses/npm
RELEASES.md
dist
- restore-only
  - index.js
- restore
  - index.js
- save-only
  - index.js
- save
  - index.js
package-lock.json
package.json

12 files changed

1161

475

lines changed

`‎.licenses/npm/fast-xml-builder.dep.yml‎`

Lines changed: 32 additions & 0 deletions

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎.licenses/npm/fast-xml-parser.dep.yml‎`

Lines changed: 1 addition & 1 deletion

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎.licenses/npm/minimatch.dep.yml‎`

Lines changed: 2 additions & 2 deletions

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎.licenses/npm/path-expression-matcher.dep.yml‎`

Lines changed: 32 additions & 0 deletions

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎.licenses/npm/undici.dep.yml‎`

Lines changed: 1 addition & 1 deletion

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

`‎RELEASES.md‎`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -25,6 +25,12 @@`
`25`	`25`
`26`	`26`	`## Changelog`
`27`	`27`
	`28`	`+### 5.0.4`
	`29`	`+`
	`30`	+- Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns)
	`31`	+- Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
	`32`	+- Bump `fast-xml-parser` to v5.5.6
	`33`	`+`
`28`	`34`	`### 5.0.3`
`29`	`35`
`30`	`36`	- Bump `@actions/cache` to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

0 commit comments

Comments

(0)

Navigation Menu

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Commit 6682284

File tree

12 files changed

12 files changed

`‎.licenses/npm/fast-xml-builder.dep.yml‎`

`‎.licenses/npm/fast-xml-parser.dep.yml‎`

`‎.licenses/npm/minimatch.dep.yml‎`

`‎.licenses/npm/path-expression-matcher.dep.yml‎`

`‎.licenses/npm/undici.dep.yml‎`

`‎RELEASES.md‎`

0 commit comments