Repository navigation
build(deps): bump proxy-addr from 2.0.7 to 2.0.8 - #2029
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM, straightforward dependency bump.
What was reviewed: the yarn.lock diff for the proxy-addr entry — confirmed only the version, resolution, and checksum fields changed (2.0.7 to 2.0.8) with the satisfying range ~2.0.7 unchanged; no source files or other dependencies touched.
Extended reasoning...
Single-file, mechanical yarn.lock update bumping the transitive dependency proxy-addr from 2.0.7 to 2.0.8 (version/resolution/checksum only), consistent with a routine dependabot security patch. No source code, auth, or security-sensitive logic is touched by this diff itself, and the change is small, self-contained, and follows the standard lockfile-bump pattern.
|
coverage: 87.341%. remained the same — dependabot/npm_and_yarn/proxy-addr-2.0.8 into main |
67b0a89 to
470a5b3
Compare
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8. - [Release notes](https://github.com/jshttp/proxy-addr/releases) - [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md) - [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8) --- updated-dependencies: - dependency-name: proxy-addr dependency-version: 2.0.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
470a5b3 to
031fb2e
Compare
This branch has not been deployed
1 participant
Bumps proxy-addr from 2.0.7 to 2.0.8.
Release notes
Sourced from proxy-addr's releases.
Changelog
Sourced from proxy-addr's changelog.
Commits
a11ad822.0.8 (#70)780911dfix: reject IPv4 trust via mapped IPv6 subnets with a short prefix92e103efix(ci): use publised as release trigger event (#71)3e5ac75ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (#69)4b9db81chore(ci): npm-publish via workflows (#54)655e895build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (#39)50ce4d0build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#45)0fd347fbuild(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#63)6a517fabuild(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (#64)0d45e2aFix "arugment" typo in README (#61)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for proxy-addr since your current version.