github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-05-06 07:48:22 -05:00
Code Issues 1.1k Packages Projects Releases 122 Wiki Activity

[PR #3183] [CLOSED] [deps]: Update gh-pages to v5 [SECURITY] #34577

New Issue
Closed
opened 2026-04-21 02:07:25 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-21 02:07:25 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/bitwarden/android/pull/3183
Author: @renovate[bot]
Created: 4/23/2024
Status: ❌ Closed

Base: main ← Head: renovate/npm-gh-pages-vulnerability

📝 Commits (10+)

  • 3552616 Adding missing IDs for Set Password and Update Password pages (#2748)
  • 9026dd1 [PM-3593] Fix enable biometric on autofill when there is not MP (#2717)
  • 5961a00 [PM-3551] Expired SSO token cached (#2718)
  • b0f1dd0 Autosync the updated translations (#2751)
  • 382eee2 [PM-3556] Change anonaddy to addy io (#2711)
  • 3e2005e [PM-3606] TDE user with 2FA isn't able to autofill on iOS (#2723)
  • efd1671 Autosync the updated translations (#2771)
  • b932824 Make dept-development-mobile default code owner (#2780)
  • a6f0533 [PM-3393] Excessive Invalid Biometric unlock attempts should automatically log out TDE users (#2747)
  • 11922c6 [PM-3522] Keep variable value after logout. (#2761)

📊 Changes

2 files changed (+26 additions, -44 deletions)

View changed files

📝 package-lock.json (+25 -43)
📝 package.json (+1 -1)

📄 Description

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
gh-pages 3.2.3 -> 5.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js.

Release Notes

tschaub/gh-pages (gh-pages)

v5.0.0

Compare Source

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

v4.0.0

Compare Source

This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/bitwarden/android/pull/3183 **Author:** [@renovate[bot]](https://github.com/apps/renovate) **Created:** 4/23/2024 **Status:** ❌ Closed **Base:** `main` ← **Head:** `renovate/npm-gh-pages-vulnerability` --- ### 📝 Commits (10+) - [`3552616`](https://github.com/bitwarden/android/commit/355261679dee08911c58d1ade5f9fbbdfe75b9cd) Adding missing IDs for Set Password and Update Password pages (#2748) - [`9026dd1`](https://github.com/bitwarden/android/commit/9026dd10e5f6659203266e14a721018363801454) [PM-3593] Fix enable biometric on autofill when there is not MP (#2717) - [`5961a00`](https://github.com/bitwarden/android/commit/5961a001ab7df88790d7c6681da44225b5a63f6f) [PM-3551] Expired SSO token cached (#2718) - [`b0f1dd0`](https://github.com/bitwarden/android/commit/b0f1dd00eebd8c6640367ab7c711b89ff0c810ee) Autosync the updated translations (#2751) - [`382eee2`](https://github.com/bitwarden/android/commit/382eee2ed36fcabbafc69dd279333cffb163bafc) [PM-3556] Change anonaddy to addy io (#2711) - [`3e2005e`](https://github.com/bitwarden/android/commit/3e2005e5ed918ebedc856e331fb5674e18881fbe) [PM-3606] TDE user with 2FA isn't able to autofill on iOS (#2723) - [`efd1671`](https://github.com/bitwarden/android/commit/efd1671f489186e529ed9ff199b99c74b7bb9a21) Autosync the updated translations (#2771) - [`b932824`](https://github.com/bitwarden/android/commit/b932824b5a809558dc25179d19f800d3c06325dd) Make dept-development-mobile default code owner (#2780) - [`a6f0533`](https://github.com/bitwarden/android/commit/a6f05338c266e8453f5558d598e055ad2ad1b779) [PM-3393] Excessive Invalid Biometric unlock attempts should automatically log out TDE users (#2747) - [`11922c6`](https://github.com/bitwarden/android/commit/11922c6f4926ec3f9e644b1476ba356ed69f98e7) [PM-3522] Keep variable value after logout. (#2761) ### 📊 Changes **2 files changed** (+26 additions, -44 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+25 -43) 📝 `package.json` (+1 -1) </details> ### 📄 Description [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [gh-pages](https://togithub.com/tschaub/gh-pages) | [`3.2.3` -> `5.0.0`](https://renovatebot.com/diffs/npm/gh-pages/3.2.3/5.0.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/gh-pages/5.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/gh-pages/5.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/gh-pages/3.2.3/5.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/gh-pages/3.2.3/5.0.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2022-37611](https://nvd.nist.gov/vuln/detail/CVE-2022-37611) Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js. --- ### Release Notes <details> <summary>tschaub/gh-pages (gh-pages)</summary> ### [`v5.0.0`](https://togithub.com/tschaub/gh-pages/blob/HEAD/changelog.md#v500) [Compare Source](https://togithub.com/tschaub/gh-pages/compare/v4.0.0...v5.0.0) Potentially breaking change: the `publish` method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users. Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether. - [#&#8203;438](https://togithub.com/tschaub/gh-pages/pull/438) - Remove quotation marks ([@&#8203;Vicropht](https://togithub.com/Vicropht)) - [#&#8203;459](https://togithub.com/tschaub/gh-pages/pull/459) - Bump async from 2.6.4 to 3.2.4 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;454](https://togithub.com/tschaub/gh-pages/pull/454) - Bump email-addresses from 3.0.1 to 5.0.0 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;455](https://togithub.com/tschaub/gh-pages/pull/455) - Bump actions/setup-node from 1 to 3 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;453](https://togithub.com/tschaub/gh-pages/pull/453) - Bump actions/checkout from 2 to 3 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;445](https://togithub.com/tschaub/gh-pages/pull/445) - Update README to clarify project site configuration requirements with tools like CRA, webpack, Vite, etc. ([@&#8203;Nezteb](https://togithub.com/Nezteb)) - [#&#8203;452](https://togithub.com/tschaub/gh-pages/pull/452) - Assorted updates ([@&#8203;tschaub](https://togithub.com/tschaub)) ### [`v4.0.0`](https://togithub.com/tschaub/gh-pages/blob/HEAD/changelog.md#v400) [Compare Source](https://togithub.com/tschaub/gh-pages/compare/v3.2.3...v4.0.0) This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10. - [#&#8203;432](https://togithub.com/tschaub/gh-pages/pull/432) - Updated dev dependencies and formatting ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;430](https://togithub.com/tschaub/gh-pages/pull/430) - Bump ansi-regex from 3.0.0 to 3.0.1 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;431](https://togithub.com/tschaub/gh-pages/pull/431) - Bump path-parse from 1.0.6 to 1.0.7 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;427](https://togithub.com/tschaub/gh-pages/pull/427) - Bump async from 2.6.1 to 2.6.4 ([@&#8203;tschaub](https://togithub.com/tschaub)) - [#&#8203;423](https://togithub.com/tschaub/gh-pages/pull/423) - Bump minimist from 1.2.5 to 1.2.6 ([@&#8203;tschaub](https://togithub.com/tschaub)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/bitwarden/android). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQxMy4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-21 02:07:25 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#34577
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?