Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.x] Bump nanoid from 3.1.30 to 3.2.0 (#1173) #1378

Merged
merged 1 commit into from
Apr 14, 2022

Conversation

kavilla
Copy link
Member

@kavilla kavilla commented Mar 24, 2022

Description

Bumps nanoid from 3.1.30 to 3.2.0.


updated-dependencies:

  • dependency-name: nanoid
    dependency-type: indirect
    ...

Backport PR:
#1173

Signed-off-by: dependabot[bot] support@github.com

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.2.0.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.1.30...3.2.0)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Backport PR:
opensearch-project#1173

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@kavilla
Copy link
Member Author

kavilla commented Mar 24, 2022

This was missed in 1.3 and the backport mechanism was failing.

@kavilla kavilla added cve Security vulnerabilities detected by Dependabot or Mend v1.4.0 labels Mar 24, 2022
@kavilla kavilla mentioned this pull request Mar 24, 2022
16 tasks
@tmarkley tmarkley added v1.3.1 and removed v1.4.0 labels Mar 26, 2022
@kavilla kavilla added v1.4.0 and removed v1.3.1 labels Apr 5, 2022
@kavilla
Copy link
Member Author

kavilla commented Apr 5, 2022

Removing 1.3.1 label as it missed the code freeze.

@tmarkley tmarkley requested a review from a team April 12, 2022 18:40
@tmarkley tmarkley merged commit 3f81862 into opensearch-project:1.x Apr 14, 2022
@tmarkley tmarkley added v1.3.2 and removed v1.4.0 labels Apr 28, 2022
@ashwin-pc ashwin-pc changed the title [1.x] Bump nanoid from 3.1.30 to 3.2.0 (#1173) [Backport 1.x] Bump nanoid from 3.1.30 to 3.2.0 (#1173) Nov 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend v1.3.2
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants