Skip to content

Update dependency chownr to v3 [SECURITY]#7

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-chownr-vulnerability
Open

Update dependency chownr to v3 [SECURITY]#7
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-chownr-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 9, 2025

This PR contains the following updates:

Package Change Age Confidence
chownr 03 age confidence

GitHub Vulnerability Alerts

CVE-2017-18869

A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.


Release Notes

isaacs/chownr (chownr)

v3.0.0

Compare Source

v2.0.0

Compare Source

v1.1.4

Compare Source

v1.1.3

Compare Source

v1.1.2

Compare Source

v1.1.1

Compare Source

v1.1.0

Compare Source

v1.0.1

Compare Source

v1.0.0

Compare Source


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from e2c117d to d4abe30 Compare January 11, 2025 11:48
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jan 11, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from d4abe30 to b091b3b Compare January 15, 2025 19:40
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Jan 15, 2025
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jan 17, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from b091b3b to 8f97c37 Compare January 17, 2025 11:45
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 8f97c37 to b857fa9 Compare January 25, 2025 11:49
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Jan 25, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from b857fa9 to e404ccd Compare January 26, 2025 06:13
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jan 26, 2025
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Jan 31, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch 2 times, most recently from 81d4cd5 to 3b87c63 Compare February 1, 2025 19:46
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Feb 1, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 3b87c63 to 94fdee2 Compare February 9, 2025 11:31
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Feb 9, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 94fdee2 to a00ad56 Compare February 12, 2025 07:54
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Feb 12, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from a00ad56 to 486a136 Compare March 5, 2025 03:43
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Mar 5, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 486a136 to e9d9ca7 Compare March 8, 2025 03:32
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Mar 8, 2025
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Mar 13, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch 2 times, most recently from cab8057 to 3d75a7c Compare March 15, 2025 11:18
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Mar 15, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 3d75a7c to e17a203 Compare March 19, 2025 23:58
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Mar 19, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from e17a203 to 1dd6baf Compare March 21, 2025 23:48
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Mar 21, 2025
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] May 10, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from e8545af to fd8c54a Compare May 17, 2025 04:01
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] May 17, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from fd8c54a to 74bc40e Compare May 18, 2025 19:27
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] May 18, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 74bc40e to bc4f6b5 Compare May 24, 2025 11:32
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] May 24, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from bc4f6b5 to 3b5a181 Compare May 25, 2025 11:37
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] May 25, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 3b5a181 to f75cdd9 Compare May 31, 2025 12:11
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] May 31, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from f75cdd9 to 23e5dca Compare June 1, 2025 19:14
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jun 1, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 23e5dca to aadc79b Compare June 6, 2025 18:22
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Jun 6, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from aadc79b to 18afd4c Compare June 8, 2025 10:34
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jun 8, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 18afd4c to 1dc1b40 Compare June 21, 2025 12:03
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Jun 21, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 1dc1b40 to 334bc32 Compare July 13, 2025 23:55
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Jul 13, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 334bc32 to 28ab24f Compare August 11, 2025 03:26
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Aug 11, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 28ab24f to 9eb4404 Compare August 16, 2025 11:48
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Aug 16, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 9eb4404 to 7e8d0ab Compare August 21, 2025 04:15
@renovate renovate bot changed the title Update dependency chownr to v1 [SECURITY] Update dependency chownr to v3 [SECURITY] Aug 21, 2025
@renovate renovate bot force-pushed the renovate/npm-chownr-vulnerability branch from 7e8d0ab to 1b7b2ef Compare August 24, 2025 04:11
@renovate renovate bot changed the title Update dependency chownr to v3 [SECURITY] Update dependency chownr to v1 [SECURITY] Aug 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants