-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(dependency maintenance): update dependency passport to v0.6.0 [security] #787
base: master
Are you sure you want to change the base?
Conversation
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: package-lock.json
|
922b40e
to
94bce2f
Compare
03accaf
to
49dd3f7
Compare
c14e0a7
to
b78010d
Compare
b78010d
to
18f78ac
Compare
fb83e03
to
924171a
Compare
e56bda4
to
93a0981
Compare
813fb79
to
f7bcf5a
Compare
|
7f37e37
to
15efba5
Compare
15efba5
to
95d9f86
Compare
5c4e869
to
bb754c9
Compare
ee0ab8c
to
e5bf226
Compare
9b3f5e4
to
b537f07
Compare
6ddfbd3
to
a375671
Compare
446f944
to
97ecacd
Compare
85b181a
to
f441d52
Compare
4592f39
to
c660f81
Compare
c660f81
to
6444c96
Compare
6444c96
to
077939a
Compare
This PR contains the following updates:
0.5.3
->0.6.0
GitHub Vulnerability Alerts
CVE-2022-25896
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.
Release Notes
jaredhanson/passport (passport)
v0.6.0
Compare Source
Added
authenticate()
,req#login
, andreq#logout
accept akeepSessionInfo: true
option to keep session information after regeneratingthe session.
Changed
req#login()
andreq#logout()
regenerate the the session and clear sessioninformation by default.
req#logout()
is now an asynchronous function and requires a callbackfunction as the last argument.
Security
physical access to the same system or the application is susceptible to
cross-site scripting (XSS).
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.