profile
viewpoint
Karl Horky karlhorky @upleveled Vienna https://upleveled.io Founder, Teacher @upleveled. Canadian/Austrian. he/him

gatsbyjs/gatsby 46404

Build blazing fast, modern apps and websites with React

karlhorky/awesome-speakers 714

Awesome speakers in the programming and design communities

istarkov/babel-plugin-webpack-loaders 630

babel 6 plugin which allows to use webpack loaders

karlhorky/BlockCursorEverywhere 39

Sublime Text plugin to display a block cursor

karlhorky/chartist-plugin-line-tooltip 4

Plugin for Chartist.js Line Charts

cg50x/invoice-generator 2

A React app for generating an invoice document.

karlhorky/create-react-app 2

Create React apps with no build configuration.

Campus-Advisors/campus-advisor-training-karlhorky 0

campus-advisor-training-karlhorky created by GitHub Classroom

GitThomas/mydoc 0

My first Doc Website

issue openedkeepassxreboot/keepassxc

Flash of entries in locked database when returning to an auto-locked database

Overview

Hi, first of all, thanks again for your hard work on KeePassXC, really great app!

If a user has the option selected to "Lock databases when session is locked or lid is closed" (originally implemented in https://github.com/keepassxreboot/keepassxc/pull/545) and locks their computer with KeePassXC in the background and comes back to it and switches to KeePassXC, there is a chance that the entries of the locked database are shown on the screen for up to 0.5 seconds or so.

This issue has been around since I started using KeePassXC.

Caveats for reproduction: This issue can be difficult to reproduce. What I've found helps is:

  1. Large databases
  2. Multiple databases open
  3. Usage of other applications

Here's a slow motion video reproducing the issue (not a great example because the flash was very short - usually this is longer, to be visible to whoever is looking):

ezgif com-optimize

Steps to Reproduce

  1. Open KeePassXC with multiple large databases unlocked. Leave one database open with the entries listed out.
  2. Do other things with the computer in the foreground (leave KeePassXC unlocked in the background)
  3. Lock the computer
  4. Return to the computer and <kbb>cmd</kbd>-<kbd>tab</kbd> to KeePassXC
  5. See a flash of the entries on the screen before the database locks (which may be sensitive information)

Expected Behavior

There should be no flash of potentially sensitive content.

Actual Behavior

There is a flash of potentially sensitive content.

Context

KeePassXC 2.6.0 Revision: 0765954

Operating System: macOS Catalina Desktop Env: - Windowing System: -

created time in 2 hours

startedupleveled/ical-to-csv-move-events

started time in 8 hours

push eventupleveled/ical-to-csv-move-events

Karl Horky

commit sha 02b013bb4051ee9b20416988a92652d0b0f17549

Add link

view details

push time in 17 hours

push eventupleveled/ical-to-csv-move-events

Karl Horky

commit sha 3fb9cbef06bf04cdfb21891675beabe1681c3331

Switch to CSV generation

view details

push time in 17 hours

push eventupleveled/ical-move-events

Karl Horky

commit sha 60a116a9c4bcafdd48a70301c3eef267c306a2e6

Add first version with iCalendar generation

view details

push time in 18 hours

pull request commentyarnpkg/yarn

fix(hosted-git-resolver): ensure prepare script is executed for hosted git repo

@arcanis is it safe to assume that this PR will never land? (because Yarn 1 is no longer receiving features?)

3cp

comment created time in a day

PR opened sebbo2002/ical-generator

Make x key optional in type

Hi there, thanks for this library!

The first example in the readme currently fails with TypeScript (error message below):

Screen Shot 2020-08-14 at 14 46 38

Argument of type '{ start: moment.Moment; end: moment.Moment; summary: string; description: string; location: string; url: string; }' is not assignable to parameter of type 'EventData'.
  Property 'x' is missing in type '{ start: moment.Moment; end: moment.Moment; summary: string; description: string; location: string; url: string; }' but required in type 'EventData'.

It seems like the x key should be optional in the EventData interface.

+1 -1

0 comment

1 changed file

pr created time in a day

push eventkarlhorky/ical-generator

Karl Horky

commit sha c656e9fb5d91da7267ead6e0f867d8738fd1439a

Make x key optional in type

view details

push time in a day

fork karlhorky/ical-generator

ical-generator is a small piece of code which generates ical calendar files

fork in a day

startedjens-maus/node-ical

started time in a day

PR opened jens-maus/node-ical

Fix function name in types

Hi, thanks for this library!

A quick PR to fix the function name in the types.

+5 -5

0 comment

1 changed file

pr created time in a day

push eventkarlhorky/node-ical

Karl Horky

commit sha d4b463a7d3d2a2468169d5a0015284a9233c2092

Fix function name in types

view details

push time in a day

fork karlhorky/node-ical

NodeJS class for parsing iCalendar/ICS files

fork in a day

startedTypeStrong/ts-node

started time in a day

startedwhitecolor/ts-node-dev

started time in a day

issue openedremarkjs/remark-validate-links

Support Root-Relative Links (Absolute Links)?

Hi @wooorm ! 👋

Subject of the feature

What do you think about supporting root-relative links such as in the example below?

[abc](/docs/non-existent/)
[abc](/docs/exists/#non-existent2)

I suppose this could be configured with a configuration option, maybe named like basedir.

Problem

On large sites with a lot of moving files or large directory structures, updating relative links can be a pain.

Root relative links can also avoid any ambiguity that can be caused by using the same path ending and file name between multiple files.

Expected behaviour

It would be nice for these links to also be checked.

Alternatives

gatsby-remark-check-links, but:

  1. It's Gatsby-specific
  2. It runs as a Gatsby plugin and only warns in the console :(

gh-action-check-broken-links, but:

  1. It's wrapped in a GitHub Action
  2. It assumes everything is in a pages directory

created time in a day

delete branch karlhorky/talks

delete branch : renovate/dependencies-(non-major)

delete time in a day

push eventkarlhorky/talks

renovate[bot]

commit sha 007fd8725061015e3d19f7cc77289741ae67f0ef

Update dependency eslint-plugin-react to v7.20.6 (#70) Co-authored-by: Renovate Bot <bot@renovateapp.com>

view details

push time in a day

PR merged karlhorky/talks

Update dependency eslint-plugin-react to v7.20.6

This PR contains the following updates:

Package Type Update Change
eslint-plugin-react devDependencies patch 7.20.5 -> 7.20.6

Release Notes

<details> <summary>yannickcr/eslint-plugin-react</summary>

v7.20.6

Compare Source

Fixed
Changed
  • [no-unused-prop-types]: add test assigning this.props to a variable

</details>


Renovate configuration

:date: Schedule: "before 6am on friday" (UTC).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.


  • [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

+7 -7

0 comment

2 changed files

renovate[bot]

pr closed time in a day

delete branch upleveled/ical-move-events

delete branch : renovate/configure

delete time in 2 days

push eventupleveled/ical-move-events

Renovate Bot

commit sha 6ff5c9a37d6d20cd3f7d86337996d9e9c7fbefa5

Add renovate.json

view details

Karl Horky

commit sha eeff11f9df70305582b21c5d157b67f6f7f9a95f

Update renovate.json

view details

Karl Horky

commit sha 3e3e12350f5781a08d17009c97b84f55032ad5b0

Merge pull request #1 from upleveled/renovate/configure

view details

push time in 2 days

PR merged upleveled/ical-move-events

Configure Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

:vertical_traffic_light: To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Separate major versions of dependencies into individual branches/PRs
  • Do not separate patch and minor upgrades into separate PRs for the same dependency
  • Upgrade to unstable versions only if the existing version is unstable
  • Raise PRs immediately (after branch is created)
  • If semantic commits detected, use semantic commit type <code>fix</code> for dependencies and <code>chore</code> for all others
  • Keep existing branches updated even when not scheduled
  • Disable automerging feature - wait for humans to merge all PRs
  • Ignore node_modules, bower_components, vendor and various test/tests directories
  • Autodetect whether to pin dependencies or maintain ranges
  • Rate limit PR creation to a maximum of two per hour
  • Limit to maximum 20 open PRs at any time
  • Group known monorepo packages together
  • Use curated list of recommended non-monorepo package groupings

:abcd: Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.


:question: Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.


This PR has been generated by WhiteSource Renovate. View repository job log here.

+5 -0

0 comment

1 changed file

renovate[bot]

pr closed time in 2 days

push eventupleveled/ical-move-events

Karl Horky

commit sha eeff11f9df70305582b21c5d157b67f6f7f9a95f

Update renovate.json

view details

push time in 2 days

create barnchupleveled/ical-move-events

branch : master

created branch time in 2 days

created repositoryupleveled/ical-move-events

created time in 2 days

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Ah, understood. So the links in format of <a href=""></a> are not recognized as a link with a node.url by remark-mdx, I suppose...

karlhorky

comment created time in 2 days

push eventupleveled/next-js-example-may-2020

Karl Horky

commit sha 29ee36846423c60313fc84b12bd7f31b9a7d82a0

Add more technologies

view details

push time in 2 days

PR closed karlhorky/learn-to-program

Added workat.tech's free interactive course on C

workat.tech has a free interactive course on C with beginner-friendly content, quizzes, and coding problems.

+4 -0

1 comment

1 changed file

gcnit

pr closed time in 2 days

pull request commentkarlhorky/learn-to-program

Added workat.tech's free interactive course on C

Hi @gcnit, thanks for the contribution! This list is about a foundation in web development though, so not really the focus here. But happy to consider other contributions that are more web-related!

gcnit

comment created time in 2 days

PR opened davidtheclark/remark-lint-no-dead-urls

Fix option name

Quick PR to fix the option name in the example in the readme.

+1 -1

0 comment

1 changed file

pr created time in 2 days

push eventkarlhorky/remark-lint-no-dead-urls

Karl Horky

commit sha 253452f41468d79de79da6697ed3c3a7d71e4814

Fix option name

view details

push time in 2 days

fork karlhorky/remark-lint-no-dead-urls

Ensure that external links in your Markdown are alive

fork in 2 days

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Looking at remark-mdx, can't tell - does it work with remark-lint and remark-cli?

Edit: I guess it does - my package.json:

{
  "remarkConfig": {
    "plugins": [
      "remark-mdx",
      "remark-lint-no-dead-urls"
    ]
  }
}
karlhorky

comment created time in 2 days

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Hm, maybe I misunderstood your comment above:

If you want to ignore MDX, you can use the remark-mdx plugin. Although it won’t check href props

I don't want to ignore MDX - I want to check it :)

karlhorky

comment created time in 2 days

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Hmm... I guess I'll use patch-package to remove the " from the end of node.url. 😅

karlhorky

comment created time in 2 days

issue commentmdx-js/eslint-mdx

Support async processing

Looks like ESLint is getting parallel processing support: https://github.com/eslint/rfcs/pull/42

(eslint/rfcs#4 is closed now)

wooorm

comment created time in 2 days

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Right, thanks for the explanation 👍

I'm looking to lint all of my .mdx files for broken links, don't have any .md files at the moment...

karlhorky

comment created time in 2 days

issue closeddavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Hi @davidtheclark, thanks for this library!

When I run this with the following MDX content...

<a
  href="https://www.freecodecamp.org/news/a-beginners-guide-to-graphql-86f849ce1bec/"
  target="_blank"
>
  freeCodeCamp: A Beginner’s Guide to GraphQL
</a>

...it fails as in the error message below:

$ yarn remark index.md
index.md
  2:9-2:86  warning  Link to https://www.freecodecamp.org/news/a-beginners-guide-to-graphql-86f849ce1bec/" is dead  no-dead-urls  remark-lint

⚠ 1 warning

remark-lint-no-dead-urls appears to be taking the " at the end along with the link.

cc @wooorm

closed time in 2 days

karlhorky

issue commentdavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Ahh, sorry, just realized that this is an incompatibility between Markdown and MDX.

Markdown does not allow for that syntax (at least on https://markdownlivepreview.com/):

Screen Shot 2020-08-13 at 15 24 25

I guess that it wouldn't make sense for remark to support this.

I will see what I can do with gotOptions or something...

Closing.

karlhorky

comment created time in 2 days

issue openeddavidtheclark/remark-lint-no-dead-urls

Fails on Live URL

Hi @davidtheclark, thanks for this library!

When I run this with the following MDX content...

<a
  href="https://www.freecodecamp.org/news/a-beginners-guide-to-graphql-86f849ce1bec/"
  target="_blank"
>
  freeCodeCamp: A Beginner’s Guide to GraphQL
</a>

...it fails as in the error message below:

$ yarn remark index.md
index.md
  2:9-2:86  warning  Link to https://www.freecodecamp.org/news/a-beginners-guide-to-graphql-86f849ce1bec/" is dead  no-dead-urls  remark-lint

⚠ 1 warning

remark-lint-no-dead-urls appears to be taking the " at the end along with the link.

cc @wooorm

created time in 2 days

issue commentremarkjs/remark

Document path globs support

One thing that would be cool to have in the docs is a globby example for MDX files.

I am using remark-cli with remark-lint-no-dead-urls and I'm using the following in my package.json:

{
  "scripts": {
    "lint-md": "remark \"src/pages/**/*.mdx\""
  }
}
radek-holy

comment created time in 2 days

push eventupleveled/upleveled-vscode-eslint-base-config

Karl Horky

commit sha 70459d808b02a2dd513e680ebc6c9f3af9be31fb

Address serialize-javascript vulnerability

view details

push time in 2 days

push eventkarlhorky/learn-to-program

Karl Horky

commit sha 3a7f3ff054d7e47351d991c62bcac6f6c1478f21

Fix typos

view details

push time in 2 days

startededavis/hnrss

started time in 3 days

pull request commentfacebook/create-react-app

Upgrade dependencies

Ah Dan just upgraded again and published react-scripts@3.4.3: https://github.com/facebook/create-react-app/issues/9469#issuecomment-672991166

ianschmitz

comment created time in 3 days

issue commentikatyang/dts-jest

Upgrade yargs?

Thanks! 23.3.0 fixes it :)

karlhorky

comment created time in 3 days

issue commentikatyang/dts-jest

Upgrade yargs?

yargs@14.2.0 no longer depends on os-locale, so this would fix the issue in a different way, yes!

karlhorky

comment created time in 3 days

issue openedikatyang/dts-jest

Upgrade yargs?

Hi @ikatyang !

As I mentioned in my comment, would it be possible to upgrade yargs?

This would make it easier to upgrade mem for the security vulnerability (memory leak).

created time in 3 days

pull request commentikatyang/dts-jest

fix(deps): update dependency yargs to v15

@ikatyang what was your objection causing you to close this one here? Would you be open to reconsidering upgrading yargs?

yargs@^9 has a dependency on os-locale@^2, which depends on mem@^1.1.0, which has an open security vulnerability.

renovate[bot]

comment created time in 3 days

issue commentwooorm/refractor

Change prismjs to carat range?

Ok, understandable. Thanks for the answer :)

karlhorky

comment created time in 3 days

pull request commentfacebook/create-react-app

Upgrade dependencies

@ianschmitz will this change be published to npm soon?

The latest react-scripts@3.4.2 is not showing this change:

https://unpkg.com/react-scripts/package.json

Would actually be nice to bump terser-webpack-plugin to even newer, due to this security vulnerability with the transitive serialize-javascript dep. Here's an open PR that does that:

https://github.com/facebook/create-react-app/pull/9470

ianschmitz

comment created time in 3 days

issue openedwooorm/refractor

Change prismjs to carat range?

Hi @wooorm !

Maybe going forward, you would consider changing to a carat version range for prismjs?

It would help a lot for projects stuck with older dependencies which have refractor as a transitive dep (especially when things like security vulnerabilities with prismjs happen).

Anyway, thanks for the consideration!

created time in 3 days

delete branch karlhorky/module-federation.github.io

delete branch : patch-1

delete time in 3 days

pull request commentmodule-federation/module-federation.github.io

Fix typo

@ScriptedAlchemy Thanks for the merge!

karlhorky

comment created time in 3 days

issue commentzachflower/hyper-confirm

Default `confirmQuit` to true?

Nice one Zach, cheers!

karlhorky

comment created time in 3 days

delete branch karlhorky/shopify-landing-clone-sept-2019

delete branch : snyk-fix-655360ba444b2349fb16bb033c2883d8

delete time in 3 days

PR closed karlhorky/shopify-landing-clone-sept-2019

[Snyk] Security upgrade react-scripts from 3.4.1 to 3.4.2

<h3>Snyk has created this PR to fix one or more vulnerable packages in the yarn dependencies of this project.</h3>

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • yarn.lock

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000 <br/> Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 Denial of Service (DoS) <br/>SNYK-JS-SOCKJS-575261 No Proof of Concept
medium severity 387/1000 <br/> Why? Proof of Concept exploit, CVSS 5.6 Prototype Pollution <br/>SNYK-JS-YARGSPARSER-560381 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJkYmNmOGU2MC0zMjJkLTQ1MWEtOTBlYi0zYTY4MTY3ZGU4YjQiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImRiY2Y4ZTYwLTMyMmQtNDUxYS05MGViLTNhNjgxNjdkZThiNCJ9fQ==" width="0" height="0"/> 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

+77 -140

1 comment

2 changed files

snyk-bot

pr closed time in 3 days

pull request commentkarlhorky/shopify-landing-clone-sept-2019

[Snyk] Security upgrade react-scripts from 3.4.1 to 3.4.2

Turning off Snyk bot for this demo repo

snyk-bot

comment created time in 3 days

delete branch karlhorky/privacy-shared-cards-clone-feb-2020

delete branch : snyk-fix-e01b3e7371d325dd66968dabad948a83

delete time in 3 days

PR closed karlhorky/privacy-shared-cards-clone-feb-2020

[Snyk] Security upgrade react-scripts from 3.4.1 to 3.4.2

<h3>Snyk has created this PR to fix one or more vulnerable packages in the yarn dependencies of this project.</h3>

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • yarn.lock

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 586/1000 <br/> Why? Proof of Concept exploit, Has a fix available, CVSS 5.3 Denial of Service (DoS) <br/>SNYK-JS-SOCKJS-575261 No Proof of Concept
medium severity 387/1000 <br/> Why? Proof of Concept exploit, CVSS 5.6 Prototype Pollution <br/>SNYK-JS-YARGSPARSER-560381 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: <img src="https://app.snyk.io/badges/merge-advice/empty?pr_id=35fe1a39-220e-4cfe-90e4-bb9beeed54b5" width="1" height="1"/> <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiIzNWZlMWEzOS0yMjBlLTRjZmUtOTBlNC1iYjliZWVlZDU0YjUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjM1ZmUxYTM5LTIyMGUtNGNmZS05MGU0LWJiOWJlZWVkNTRiNSJ9fQ==" width="0" height="0"/> 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

+77 -172

1 comment

2 changed files

snyk-bot

pr closed time in 3 days

pull request commentkarlhorky/privacy-shared-cards-clone-feb-2020

[Snyk] Security upgrade react-scripts from 3.4.1 to 3.4.2

Turning off Snyk bot for this demo repo

snyk-bot

comment created time in 3 days

push eventkarlhorky/talks

Karl Horky

commit sha 04768ddef439ff3c92b55ae6ea314fd03907db53

Address security vulnerability in js-yaml

view details

push time in 3 days

push eventkarlhorky/talks

Karl Horky

commit sha 2d0fe70c03716206c4818ce7b3c763b64cafba69

Address serialize-javascript security vuln

view details

push time in 3 days

issue commentmicrosoft/vscode

Provide API to access and change editor tab labels

@RobKohr that is fine for a project that you own and control, but there are many, many codebases with this convention that you will not be able to change.

So this is not a complete workaround for many use cases.

chengjianhua

comment created time in 3 days

pull request commentpomber/code-surfer

Line Annotations

Hey @pomber, I didn't get a chance to try this out yet... Any news from your side on this feature?

karlhorky

comment created time in 3 days

push eventkarlhorky/talks

dependabot[bot]

commit sha 2332851b265c67745b1c66a4d995cd019892cb9c

Bump prismjs from 1.20.0 to 1.21.0 (#69) Bumps [prismjs](https://github.com/PrismJS/prism) from 1.20.0 to 1.21.0. - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/master/CHANGELOG.md) - [Commits](https://github.com/PrismJS/prism/compare/v1.20.0...v1.21.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

view details

push time in 3 days

PR merged karlhorky/talks

Bump prismjs from 1.20.0 to 1.21.0 dependencies

Bumps prismjs from 1.20.0 to 1.21.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PrismJS/prism/releases">prismjs's releases</a>.</em></p> <blockquote> <h2>v1.21.0</h2> <p>Release 1.21.0</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PrismJS/prism/blob/master/CHANGELOG.md">prismjs's changelog</a>.</em></p> <blockquote> <h2>1.21.0 (2020-08-06)</h2> <h3>New components</h3> <ul> <li><strong>.ignore</strong> & <strong>.gitignore</strong> & <strong>.hgignore</strong> & <strong>.npmignore</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2481">#2481</a>) <a href="https://github.com/PrismJS/prism/commit/3fcce6fe"><code>3fcce6fe</code></a></li> <li><strong>Agda</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2430">#2430</a>) <a href="https://github.com/PrismJS/prism/commit/3a127c7d"><code>3a127c7d</code></a></li> <li><strong>AL</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2300">#2300</a>) <a href="https://github.com/PrismJS/prism/commit/de21eb64"><code>de21eb64</code></a></li> <li><strong>Cypher</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2459">#2459</a>) <a href="https://github.com/PrismJS/prism/commit/398e2943"><code>398e2943</code></a></li> <li><strong>Dhall</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2473">#2473</a>) <a href="https://github.com/PrismJS/prism/commit/649e51e5"><code>649e51e5</code></a></li> <li><strong>EditorConfig</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2471">#2471</a>) <a href="https://github.com/PrismJS/prism/commit/ed8fff91"><code>ed8fff91</code></a></li> <li><strong>HLSL</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2318">#2318</a>) <a href="https://github.com/PrismJS/prism/commit/87a5c7ae"><code>87a5c7ae</code></a></li> <li><strong>JS stack trace</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2418">#2418</a>) <a href="https://github.com/PrismJS/prism/commit/ae0327b3"><code>ae0327b3</code></a></li> <li><strong>PeopleCode</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2302">#2302</a>) <a href="https://github.com/PrismJS/prism/commit/bd4d8165"><code>bd4d8165</code></a></li> <li><strong>PureBasic</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2369">#2369</a>) <a href="https://github.com/PrismJS/prism/commit/d0c1c70d"><code>d0c1c70d</code></a></li> <li><strong>Racket</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2315">#2315</a>) <a href="https://github.com/PrismJS/prism/commit/053016ef"><code>053016ef</code></a></li> <li><strong>Smali</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2419">#2419</a>) <a href="https://github.com/PrismJS/prism/commit/22eb5cad"><code>22eb5cad</code></a></li> <li><strong>Structured Text (IEC 61131-3)</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2311">#2311</a>) <a href="https://github.com/PrismJS/prism/commit/8704cdfb"><code>8704cdfb</code></a></li> <li><strong>UnrealScript</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2305">#2305</a>) <a href="https://github.com/PrismJS/prism/commit/1093ceb3"><code>1093ceb3</code></a></li> <li><strong>WarpScript</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2307">#2307</a>) <a href="https://github.com/PrismJS/prism/commit/cde5b0fa"><code>cde5b0fa</code></a></li> <li><strong>XML doc (.net)</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2340">#2340</a>) <a href="https://github.com/PrismJS/prism/commit/caec5e30"><code>caec5e30</code></a></li> <li><strong>YANG</strong> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2467">#2467</a>) <a href="https://github.com/PrismJS/prism/commit/ed1df1e1"><code>ed1df1e1</code></a></li> </ul> <h3>Updated components</h3> <ul> <li>Markup & JSON: Added new aliases (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2390">#2390</a>) <a href="https://github.com/PrismJS/prism/commit/9782cfe6"><code>9782cfe6</code></a></li> <li>Fixed several cases of exponential backtracking (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2268">#2268</a>) <a href="https://github.com/PrismJS/prism/commit/7a554b5f"><code>7a554b5f</code></a></li> <li><strong>APL</strong> <ul> <li>Added <code>⍥</code> (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2409">#2409</a>) <a href="https://github.com/PrismJS/prism/commit/0255cb6a"><code>0255cb6a</code></a></li> </ul> </li> <li><strong>AutoHotkey</strong> <ul> <li>Added missing <code>format</code> built-in (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2450">#2450</a>) <a href="https://github.com/PrismJS/prism/commit/7c66cfc4"><code>7c66cfc4</code></a></li> <li>Improved comments and other improvements (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2412">#2412</a>) <a href="https://github.com/PrismJS/prism/commit/ddf3cc62"><code>ddf3cc62</code></a></li> <li>Added missing definitions (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2400">#2400</a>) <a href="https://github.com/PrismJS/prism/commit/4fe03676"><code>4fe03676</code></a></li> </ul> </li> <li><strong>Bash</strong> <ul> <li>Added <code>composer</code> command (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2298">#2298</a>) <a href="https://github.com/PrismJS/prism/commit/044dd271"><code>044dd271</code></a></li> </ul> </li> <li><strong>Batch</strong> <ul> <li>Fix escaped double quote (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2485">#2485</a>) <a href="https://github.com/PrismJS/prism/commit/f0f8210c"><code>f0f8210c</code></a></li> </ul> </li> <li><strong>C</strong> <ul> <li>Improved macros and expressions (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2440">#2440</a>) <a href="https://github.com/PrismJS/prism/commit/8a72fa6f"><code>8a72fa6f</code></a></li> <li>Improved macros (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2320">#2320</a>) <a href="https://github.com/PrismJS/prism/commit/fdcf7ed2"><code>fdcf7ed2</code></a></li> </ul> </li> <li><strong>C#</strong> <ul> <li>Improved pattern matching (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2411">#2411</a>) <a href="https://github.com/PrismJS/prism/commit/7f341fc1"><code>7f341fc1</code></a></li> <li>Fixed adjacent string interpolations (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2402">#2402</a>) <a href="https://github.com/PrismJS/prism/commit/2a2e79ed"><code>2a2e79ed</code></a></li> </ul> </li> <li><strong>C++</strong> <ul> <li>Added support for default comparison operator (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2426">#2426</a>) <a href="https://github.com/PrismJS/prism/commit/8e9d161c"><code>8e9d161c</code></a></li> <li>Improved class name detection (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2348">#2348</a>) <a href="https://github.com/PrismJS/prism/commit/e3fe9040"><code>e3fe9040</code></a></li> <li>Fixed <code>enum class</code> class names (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2342">#2342</a>) <a href="https://github.com/PrismJS/prism/commit/30b4e254"><code>30b4e254</code></a></li> </ul> </li> <li><strong>Content-Security-Policy</strong> <ul> <li>Fixed directives (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2461">#2461</a>) <a href="https://github.com/PrismJS/prism/commit/537a9e80"><code>537a9e80</code></a></li> </ul> </li> <li><strong>CSS</strong> <ul> <li>Improved url and added keywords (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2432">#2432</a>) <a href="https://github.com/PrismJS/prism/commit/964de5a1"><code>964de5a1</code></a></li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PrismJS/prism/commit/187c8a607ee70c7914682870156faa31ed01f001"><code>187c8a6</code></a> 1.21.0</li> <li><a href="https://github.com/PrismJS/prism/commit/bf4f323391d546d4b2e1a388f05c512a27491e9c"><code>bf4f323</code></a> Changelog for v1.21.0 (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2507">#2507</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/8bba4880202ef6bd7a1e379fe9aebe69dd75f7be"><code>8bba488</code></a> Previewers: Fixed XSS (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2506">#2506</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/158caf52343e59a66c2351ff1d83648efe871e33"><code>158caf5</code></a> JSON: Greedy comments (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2479">#2479</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/f0f8210c1a9745c064d49bfb985544c654986b24"><code>f0f8210</code></a> Batch: Fix escaped double quote (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2485">#2485</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/649e51e56250a81dc0b0c4f5b3a4ea23e1c21834"><code>649e51e</code></a> Added support for Dhall (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2473">#2473</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/453079bf96746e0c44f90cb7cd90fcae9a5f94cc"><code>453079b</code></a> Line Numbers: Fixed class name on website</li> <li><a href="https://github.com/PrismJS/prism/commit/a0efa40bde420ac3923947be611ebe6b3f077dce"><code>a0efa40</code></a> Fixed Treeview page (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2484">#2484</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/78161d607fe7d493831ff19759aac951330134a1"><code>78161d6</code></a> VB: Added VBA alias (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2469">#2469</a>)</li> <li><a href="https://github.com/PrismJS/prism/commit/ed1df1e1208401a8b84330ecc39689fa37d0e9f6"><code>ed1df1e</code></a> Added support for YANG (<a href="https://github-redirect.dependabot.com/PrismJS/prism/issues/2467">#2467</a>)</li> <li>Additional commits viewable in <a href="https://github.com/PrismJS/prism/compare/v1.20.0...v1.21.0">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+6 -6

0 comment

1 changed file

dependabot[bot]

pr closed time in 3 days

push eventkarlhorky/shopify-landing-clone-sept-2019

snyk-bot

commit sha b9d9830475a23ad58805bd68c6f08d48f741e97d

fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SOCKJS-575261 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381

view details

push time in 4 days

push eventkarlhorky/privacy-shared-cards-clone-feb-2020

snyk-bot

commit sha 20458e521aff5d289e87e3a496b357f9b579b861

fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SOCKJS-575261 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381

view details

push time in 4 days

issue commentgatsbyjs/gatsby

Gatsby Plugin: Asset Manifest (for Server-Side Authentication in Front of Built Assets without client-side routes)

Another change to the static query paths by Sidhartha in https://github.com/gatsbyjs/gatsby/pull/26242 ...

Fixed in https://github.com/upleveled/gatsby-serverside-auth0/commit/85aae95cdf6b71824479809f4895d3d2b11e3cf4

karlhorky

comment created time in 8 days

delete branch upleveled/gatsby-serverside-auth0

delete branch : renovate/dependencies-(non-major)

delete time in 8 days

push eventupleveled/gatsby-serverside-auth0

Renovate Bot

commit sha 009c093f0ff06ae6e4d557415693f5250ece29f6

Update dependencies (non-major)

view details

Karl Horky

commit sha 6005f08a4a04be284736c03d7841af36aa1fbde7

Merge pull request #51 from upleveled/renovate/dependencies-(non-major) Update dependencies (non-major)

view details

push time in 8 days

PR merged upleveled/gatsby-serverside-auth0

Update dependencies (non-major)

This PR contains the following updates:

Package Type Update Change
@types/react devDependencies patch 16.9.43 -> 16.9.44
gatsby (changelog) dependencies patch 2.24.15 -> 2.24.34
gatsby-plugin-manifest dependencies patch 2.4.21 -> 2.4.22
gatsby-plugin-mdx dependencies patch 1.2.30 -> 1.2.34
gatsby-plugin-sharp dependencies patch 2.6.24 -> 2.6.25
gatsby-source-filesystem dependencies patch 2.3.23 -> 2.3.24

Release Notes

<details> <summary>gatsbyjs/gatsby</summary>

v2.24.34

Compare Source

v2.24.33

Compare Source

v2.24.32

Compare Source

v2.24.31

Compare Source

v2.24.30

Compare Source

v2.24.29

Compare Source

v2.24.28

Compare Source

v2.24.27

Compare Source

v2.24.26

Compare Source

v2.24.25

Compare Source

v2.24.24

Compare Source

v2.24.23

Compare Source

</details>


Renovate configuration

:date: Schedule: "before 6am on friday" (UTC).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

+1118 -552

0 comment

2 changed files

renovate[bot]

pr closed time in 8 days

push eventupleveled/gatsby-serverside-auth0

Karl Horky

commit sha 85aae95cdf6b71824479809f4895d3d2b11e3cf4

Fix static query path to updated location Ref: https://github.com/gatsbyjs/gatsby/pull/26242

view details

push time in 8 days

startedprisma-labs/nextjs-graphql-api-examples

started time in 8 days

delete branch karlhorky/talks

delete branch : renovate/dependencies-(non-major)

delete time in 8 days

push eventkarlhorky/talks

renovate[bot]

commit sha 753783d99f8802626aa460a1a5af45020d6303d6

Update dependencies (non-major) (#68) Co-authored-by: Renovate Bot <bot@renovateapp.com>

view details

push time in 8 days

PR merged karlhorky/talks

Update dependencies (non-major)

This PR contains the following updates:

Package Type Update Change
@babel/core (source) devDependencies patch 7.11.0 -> 7.11.1
@babel/runtime (source) dependencies patch 7.11.0 -> 7.11.2

Release Notes

<details> <summary>babel/babel</summary>

v7.11.1

Compare Source

:bug: Bug Fix
  • babel-parser
  • babel-core
  • babel-plugin-transform-block-scoping, babel-standalone
:memo: Documentation
:house: Internal

</details>


Renovate configuration

:date: Schedule: "before 6am on friday" (UTC).

:vertical_traffic_light: Automerge: Disabled by config. Please merge this manually once you are satisfied.

:recycle: Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

:ghost: Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

+17 -12

0 comment

2 changed files

renovate[bot]

pr closed time in 8 days

startedflorinpop17/app-ideas

started time in 8 days

issue commentcypress-io/cypress

Re-query elements that are found 'detached' from the DOM

@jennifer-shehane good to hear, thanks!

Didn't know about the ESLint plugin, cool! 💯

jennifer-shehane

comment created time in 8 days

issue commentcypress-io/cypress

Re-query elements that are found 'detached' from the DOM

If the Cypress team doesn't believe that any of these classes of issues are something to be fixed in Cypress itself (which seems like it would be the best case), maybe the "pit of success" could be achieved another way.

Some ideas:

  1. Improving heuristics around error messaging within Cypress to point devs in the right direction of writing tests how Cypress wants
  2. Adding to / improving / reorganizing the docs so that these types of problems are surfaced early and patterns shown to deal with them (this seems like it happens commonly)
  3. Creating a "linter" or similar for Cypress tests to check for bad patterns (could call it "baas" - Bahmutov As A Service 😅)
jennifer-shehane

comment created time in 10 days

issue commentcypress-io/cypress

Re-query elements that are found 'detached' from the DOM

Ok thank you for the response @bahmutov.

Regarding my other point about "pit of success", do you see any of these things as a potential deficiency that could be fixed in Cypress itself?

Ideally, users write tests how they expect them to work (probably based on the Cypress docs and also previous integration testing experience) and Cypress just works - the "detached" error doesn't happen. But it seems like complexities of how applications are built today lead to this happening a lot.

jennifer-shehane

comment created time in 10 days

startedjonstuebe/date-fns-holiday-us

started time in 11 days

issue commentcypress-io/cypress

Re-query elements that are found 'detached' from the DOM

@bahmutov did you see the example above here? https://github.com/cypress-io/cypress/issues/7306#issuecomment-668060445

I suppose I would suggest that the behavior of the pipe solution be the default using normal Cypress chaining + commands (eg. my example of cy.visit() and then cy.get('[data-cy="header-link"]').click()). Maybe this means adding retries up until the timeout for the cy.get in Cypress core (if an element is found to be detached).

Maybe what I'm suggesting is technically complex, but I think expanding the pit of success and reducing the amount of people possibly running into the detached errors is probably worth it. That "it just works" behavior reduces the barrier for people to write tests.

Most people will not find the blog posts (many will also not even search for elegant solutions like this), and over the lifetime of the open source project it will create a lot of effort by everyone to deal with this issue.

jennifer-shehane

comment created time in 11 days

push eventkarlhorky/dotfiles

Karl Horky

commit sha f17c984a607a770feb12a17fbf781c0cf11e29cb

Only link to movies and TV shows

view details

push time in 12 days

push eventkarlhorky/dotfiles

Karl Horky

commit sha dad6df9ec11403e6fc4801f58a0dfea043e2f646

Add userscript directory

view details

push time in 12 days

push eventupleveled/upleveled-vscode-eslint-base-config

Karl Horky

commit sha 675a4117723f84817e30327df3d1eab7ccbe9a25

Create codeql-analysis.yml

view details

push time in 12 days

issue commentcypress-io/cypress

Re-query elements that are found 'detached' from the DOM

@bahmutov here's a very simple Next.js example that I ran into, where I:

  1. Used cy.visit() to visit the initial page
  2. Used cy.get(selector).click() to get a header link and click on it

For step 2, I needed to use { force: true } to get non-flaky tests.

I suppose there are other methods for waiting for a specific element to be visible, but I guess from Cypress' "automatically retries" philosophy, it should just work out of the box?

Maybe I'm doing something wrong, but I would suggest expanding the "pit of success" here if possible...

https://github.com/upleveled/next-js-example-may-2020/blob/master/cypress/integration/navigation.spec.js#L8-L10

jennifer-shehane

comment created time in 12 days

startedpantharshit00/prisma-docs-generator

started time in 12 days

PR opened tobiaslins/tobi.sh

Improve casing and English

Nice simple website! Quick PR to improve casing and English.

+7 -7

0 comment

1 changed file

pr created time in 12 days

push eventkarlhorky/tobi.sh

Karl Horky

commit sha 60df55eb7e8647aa1b9a43999a1321e8e2894fb3

Improve casing and English

view details

push time in 12 days

push eventkarlhorky/dotfiles

Karl Horky

commit sha 06949c796d3deffedea427aa8398b6628e586adf

Add git pull.rebase config

view details

Karl Horky

commit sha df13696135302e867d169c9c20bbc521cf0e671f

Add Error Lens

view details

push time in 12 days

delete branch upleveled/web-tooling-babel-webpack-eslint

delete branch : dependabot/npm_and_yarn/elliptic-6.5.3

delete time in 12 days

push eventupleveled/web-tooling-babel-webpack-eslint

dependabot[bot]

commit sha 710e28d935380ac9f403777eb3aa03f82239522b

Bump elliptic from 6.5.2 to 6.5.3 Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.3. - [Release notes](https://github.com/indutny/elliptic/releases) - [Commits](https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3) Signed-off-by: dependabot[bot] <support@github.com>

view details

Karl Horky

commit sha 2f9e7fe6130899da8e251f6ff3552d4658f2e724

Merge pull request #2 from upleveled/dependabot/npm_and_yarn/elliptic-6.5.3

view details

push time in 12 days

PR merged upleveled/web-tooling-babel-webpack-eslint

Bump elliptic from 6.5.2 to 6.5.3 dependencies

Bumps elliptic from 6.5.2 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+3 -3

0 comment

1 changed file

dependabot[bot]

pr closed time in 12 days

delete branch upleveled/next-js-with-slonik-sept-2019

delete branch : dependabot/npm_and_yarn/elliptic-6.5.3

delete time in 12 days

PR merged upleveled/next-js-with-slonik-sept-2019

Bump elliptic from 6.5.1 to 6.5.3 dependencies

Bumps elliptic from 6.5.1 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li><a href="https://github.com/indutny/elliptic/commit/60489415e545efdfd3010ae74b9726facbf08ca8"><code>6048941</code></a> 6.5.2</li> <li><a href="https://github.com/indutny/elliptic/commit/9984964457c9f8a63b91b01ea103260417eca237"><code>9984964</code></a> package: bump dependencies</li> <li><a href="https://github.com/indutny/elliptic/commit/ec735edde187a43693197f6fa3667ceade751a3a"><code>ec735ed</code></a> utils: leak less information in <code>getNAF()</code></li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.1...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+6 -6

0 comment

1 changed file

dependabot[bot]

pr closed time in 12 days

more