Bump moment-timezone from 0.5.31 to 0.5.37
Closed
Number: #16
Type: Pull Request
State: Closed
Type: Pull Request
State: Closed
Author:
dependabot[bot]
Association: None
Comments: 1
Association: None
Comments: 1
Created:
August 31, 2022 at 01:23 AM UTC
(almost 4 years ago)
(almost 4 years ago)
Updated:
June 19, 2025 at 12:41 AM UTC
(12 months ago)
(12 months ago)
Closed:
June 19, 2025 at 12:41 AM UTC
(12 months ago)
(12 months ago)
Time to Close:
almost 3 years
Labels:
dependencies
dependencies
Description:
Bumps moment-timezone from 0.5.31 to 0.5.37.
Release notes
Sourced from moment-timezone's releases.
Release 0.5.34
- Updated data to IANA TZDB
2021eRelease 0.5.33
- Updated data to IANA TZDB
2021aRelease 0.5.32
- Updated data to IANA TZDB
2020d
Changelog
Sourced from moment-timezone's changelog.
0.5.372022.08-25
- Re-publish npm package, because of extra folder present in 0.5.36, check moment/moment-timezone#999
0.5.362022.08-25
- IANA TZDB 2022c
- improvements/fixes to data pipeline
0.5.352022-08-23
- Fix command injection in data pipeline https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9
- Fix cleartext transmission of sensitive information https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c
Thanks to the OpenSSF Alpha-Omega project for reporting these!
0.5.342020-11-10
- Updated data to IANA TZDB
2021e
0.5.332020-11-15
- Updated data to IANA TZDB
2021a
0.5.322020-11-14
- Updated data to IANA TZDB
2020d
Commits
ffe6f34Add changelog for 0.5.37450ca63Bump version to 0.5.3795f1a9bBuild moment-timezone 0.5.36abba28cAdd changelog for 0.5.36ac6de03Bump version to 0.5.367a5cadftests: Fix country tests for 2022c6754c75data: generate 2022c data+testsf74a364bugfix: Wipe tests/zones before generatione850f9fgrunt: do not bundle zone and contry testsf13e22bdata: automatically create data/*/VERSION.json for latest- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
0
0
Files Changed:
0
0
Additions:
+0
+0
Deletions:
-0
-0
Package Dependencies
Security Advisories
Command Injection in moment-timezone
GHSA-56x4-j7p9-fcf9
LOW
### Impact
All versions of moment-timezone from 0.1.0 contain build tasks vulnerable to command injection.
* if Alice uses tzdata pipeline to package moment-timezone on her own (for example via `...
Cleartext Transmission of Sensitive Information in moment-timezone
GHSA-v78c-4p63-2j6c
MODERATE
### Impact
* if Alice uses `grunt data` (or `grunt release`) to prepare a custom-build, moment-timezone with the latest tzdata from IANA's website
* and Mallory intercepts the request to IANA's un...
Technical Details
| ID: | 1881190 |
| UUID: | 1356606041 |
| Node ID: | PR_kwDOEFS4gc4-F8dU |
| Host: | GitHub |
| Repository: | codeecoffee/BarberShopAPI |