,url,repository_url,labels_url,comments_url,events_url,html_url,id,node_id,number,title,user,labels,state,locked,assignee,assignees,milestone,comments,created_at,updated_at,closed_at,author_association,active_lock_reason,pull_request,body,performed_via_github_app 0,https://api.github.com/repos/Napster/napster.js/issues/31,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/31/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/31/comments,https://api.github.com/repos/Napster/napster.js/issues/31/events,https://github.com/Napster/napster.js/pull/31,593853910,MDExOlB1bGxSZXF1ZXN0Mzk4NTU1NzM4,31,Bump mixin-deep from 1.3.1 to 1.3.2,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1961235505, 'node_id': 'MDU6TGFiZWwxOTYxMjM1NTA1', 'url': 'https://api.github.com/repos/Napster/napster.js/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",closed,False,,[],,2,2020-04-04T13:15:37Z,2020-04-04T13:49:39Z,2020-04-04T13:49:37Z,NONE,,"{'url': 'https://api.github.com/repos/Napster/napster.js/pulls/31', 'html_url': 'https://github.com/Napster/napster.js/pull/31', 'diff_url': 'https://github.com/Napster/napster.js/pull/31.diff', 'patch_url': 'https://github.com/Napster/napster.js/pull/31.patch'}","Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2.
Commits
Maintainer changes

This version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mixin-deep&package-manager=npm_and_yarn&previous-version=1.3.1&new-version=1.3.2)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Napster/napster.js/network/alerts).
", 1,https://api.github.com/repos/Napster/napster.js/issues/30,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/30/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/30/comments,https://api.github.com/repos/Napster/napster.js/issues/30/events,https://github.com/Napster/napster.js/issues/30,552239806,MDU6SXNzdWU1NTIyMzk4MDY=,30,the play() request was interrupted by a call to pause(),"{'login': 'hmpmarketing', 'id': 5598519, 'node_id': 'MDQ6VXNlcjU1OTg1MTk=', 'avatar_url': 'https://avatars0.githubusercontent.com/u/5598519?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/hmpmarketing', 'html_url': 'https://github.com/hmpmarketing', 'followers_url': 'https://api.github.com/users/hmpmarketing/followers', 'following_url': 'https://api.github.com/users/hmpmarketing/following{/other_user}', 'gists_url': 'https://api.github.com/users/hmpmarketing/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/hmpmarketing/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/hmpmarketing/subscriptions', 'organizations_url': 'https://api.github.com/users/hmpmarketing/orgs', 'repos_url': 'https://api.github.com/users/hmpmarketing/repos', 'events_url': 'https://api.github.com/users/hmpmarketing/events{/privacy}', 'received_events_url': 'https://api.github.com/users/hmpmarketing/received_events', 'type': 'User', 'site_admin': False}",[],open,False,,[],,0,2020-01-20T11:25:16Z,2020-01-20T11:25:16Z,,NONE,,,"Hi, I would like to leave some feedback about an issue I have noticed with the napster.js sdk. It seems some songs when not available in 192 bit rate ( I assume) will trigger this error when trying to call Napster..player.play() ""the play() request was interrupted by a call to pause()"" I took some time to look at napster.js and starting on line 56, this bit of code: ` this.streamingPlayer = new DrmStreamingPlayer({ id: ""napster-streaming-player"", apikey: h, token: m.member.accessToken, bitrate: 192, downgrade: !0, currentUser: {}, env: ""production"" })` There is a hardcoded option for bitrate at 192. By changing this value to something like 64, the SDK was able to play songs at different bitrates, just dont know whats done internally to select, but some songs will play at 320 or 192. Anyway to take a look at this and see why this error happens for certain songs? ", 2,https://api.github.com/repos/Napster/napster.js/issues/29,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/29/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/29/comments,https://api.github.com/repos/Napster/napster.js/issues/29/events,https://github.com/Napster/napster.js/issues/29,530741944,MDU6SXNzdWU1MzA3NDE5NDQ=,29,Streaming Player appears not to consider catalog,"{'login': 'walamana', 'id': 26465630, 'node_id': 'MDQ6VXNlcjI2NDY1NjMw', 'avatar_url': 'https://avatars0.githubusercontent.com/u/26465630?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/walamana', 'html_url': 'https://github.com/walamana', 'followers_url': 'https://api.github.com/users/walamana/followers', 'following_url': 'https://api.github.com/users/walamana/following{/other_user}', 'gists_url': 'https://api.github.com/users/walamana/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/walamana/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/walamana/subscriptions', 'organizations_url': 'https://api.github.com/users/walamana/orgs', 'repos_url': 'https://api.github.com/users/walamana/repos', 'events_url': 'https://api.github.com/users/walamana/events{/privacy}', 'received_events_url': 'https://api.github.com/users/walamana/received_events', 'type': 'User', 'site_admin': False}",[],open,False,,[],,0,2019-12-01T14:41:58Z,2019-12-01T14:41:58Z,,NONE,,,"I was trying to test the sdk with my napster account I got on a different distributor, in this case ALDI. They have a different catalog, so defining the catalog in api requests seem to work properly. However, if I want to play a track (e.g. tra.55620987 on catalog DE_ALDI_BOLT) it returns ""Error: No streams found"". I looked at the request and noticed that if I sent a request to the api with the catalog parameter it tells me that this track is streamable, but the request made by the streaming player does not add this parameter and returns that it is not streamable, even if I initialized the NapsterSDK with the catalog", 3,https://api.github.com/repos/Napster/napster.js/issues/28,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/28/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/28/comments,https://api.github.com/repos/Napster/napster.js/issues/28/events,https://github.com/Napster/napster.js/issues/28,509003103,MDU6SXNzdWU1MDkwMDMxMDM=,28,"ForbiddenError: ""User not allowed to stream"",""code"":""1005""","{'login': 'yuanchicai', 'id': 18401087, 'node_id': 'MDQ6VXNlcjE4NDAxMDg3', 'avatar_url': 'https://avatars3.githubusercontent.com/u/18401087?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/yuanchicai', 'html_url': 'https://github.com/yuanchicai', 'followers_url': 'https://api.github.com/users/yuanchicai/followers', 'following_url': 'https://api.github.com/users/yuanchicai/following{/other_user}', 'gists_url': 'https://api.github.com/users/yuanchicai/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/yuanchicai/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/yuanchicai/subscriptions', 'organizations_url': 'https://api.github.com/users/yuanchicai/orgs', 'repos_url': 'https://api.github.com/users/yuanchicai/repos', 'events_url': 'https://api.github.com/users/yuanchicai/events{/privacy}', 'received_events_url': 'https://api.github.com/users/yuanchicai/received_events', 'type': 'User', 'site_admin': False}",[],open,False,,[],,0,2019-10-18T10:46:55Z,2019-10-18T10:46:55Z,,NONE,,,"When I run the basic_example, all the music info is loaded(authorized successfully). But when I try to play any song, I get the 403 (Forbidden) info: ""User not allowed to stream""", 4,https://api.github.com/repos/Napster/napster.js/issues/27,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/27/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/27/comments,https://api.github.com/repos/Napster/napster.js/issues/27/events,https://github.com/Napster/napster.js/pull/27,500176801,MDExOlB1bGxSZXF1ZXN0MzIyNjk5MTk2,27,WEB-1714 Move streaming player to pitch/webclient servers,"{'login': 'cleio', 'id': 5399522, 'node_id': 'MDQ6VXNlcjUzOTk1MjI=', 'avatar_url': 'https://avatars2.githubusercontent.com/u/5399522?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/cleio', 'html_url': 'https://github.com/cleio', 'followers_url': 'https://api.github.com/users/cleio/followers', 'following_url': 'https://api.github.com/users/cleio/following{/other_user}', 'gists_url': 'https://api.github.com/users/cleio/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/cleio/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/cleio/subscriptions', 'organizations_url': 'https://api.github.com/users/cleio/orgs', 'repos_url': 'https://api.github.com/users/cleio/repos', 'events_url': 'https://api.github.com/users/cleio/events{/privacy}', 'received_events_url': 'https://api.github.com/users/cleio/received_events', 'type': 'User', 'site_admin': False}",[],closed,False,,[],,0,2019-09-30T10:04:28Z,2019-09-30T10:08:27Z,2019-09-30T10:08:27Z,CONTRIBUTOR,,"{'url': 'https://api.github.com/repos/Napster/napster.js/pulls/27', 'html_url': 'https://github.com/Napster/napster.js/pull/27', 'diff_url': 'https://github.com/Napster/napster.js/pull/27.diff', 'patch_url': 'https://github.com/Napster/napster.js/pull/27.patch'}",Update URL of streaming player., 5,https://api.github.com/repos/Napster/napster.js/issues/26,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/26/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/26/comments,https://api.github.com/repos/Napster/napster.js/issues/26/events,https://github.com/Napster/napster.js/pull/26,493418637,MDExOlB1bGxSZXF1ZXN0MzE3NDAyMzUw,26,Heroku Deploy,"{'login': 'Filtos', 'id': 38990142, 'node_id': 'MDQ6VXNlcjM4OTkwMTQy', 'avatar_url': 'https://avatars2.githubusercontent.com/u/38990142?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/Filtos', 'html_url': 'https://github.com/Filtos', 'followers_url': 'https://api.github.com/users/Filtos/followers', 'following_url': 'https://api.github.com/users/Filtos/following{/other_user}', 'gists_url': 'https://api.github.com/users/Filtos/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/Filtos/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/Filtos/subscriptions', 'organizations_url': 'https://api.github.com/users/Filtos/orgs', 'repos_url': 'https://api.github.com/users/Filtos/repos', 'events_url': 'https://api.github.com/users/Filtos/events{/privacy}', 'received_events_url': 'https://api.github.com/users/Filtos/received_events', 'type': 'User', 'site_admin': False}",[],closed,False,,[],,0,2019-09-13T16:38:03Z,2019-09-13T16:39:45Z,2019-09-13T16:39:42Z,CONTRIBUTOR,,"{'url': 'https://api.github.com/repos/Napster/napster.js/pulls/26', 'html_url': 'https://github.com/Napster/napster.js/pull/26', 'diff_url': 'https://github.com/Napster/napster.js/pull/26.diff', 'patch_url': 'https://github.com/Napster/napster.js/pull/26.patch'}","The react example app has been deployed to Heroku. A few small things were needed to be changed to make that work. The app is now visible at: https://napster-react-example-app.herokuapp.com", 6,https://api.github.com/repos/Napster/napster.js/issues/25,https://api.github.com/repos/Napster/napster.js,https://api.github.com/repos/Napster/napster.js/issues/25/labels{/name},https://api.github.com/repos/Napster/napster.js/issues/25/comments,https://api.github.com/repos/Napster/napster.js/issues/25/events,https://github.com/Napster/napster.js/pull/25,491834478,MDExOlB1bGxSZXF1ZXN0MzE2MTI1NDQ5,25,[NP-303] - Fixed playback session error,"{'login': 'Filtos', 'id': 38990142, 'node_id': 'MDQ6VXNlcjM4OTkwMTQy', 'avatar_url': 'https://avatars2.githubusercontent.com/u/38990142?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/Filtos', 'html_url': 'https://github.com/Filtos', 'followers_url': 'https://api.github.com/users/Filtos/followers', 'following_url': 'https://api.github.com/users/Filtos/following{/other_user}', 'gists_url': 'https://api.github.com/users/Filtos/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/Filtos/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/Filtos/subscriptions', 'organizations_url': 'https://api.github.com/users/Filtos/orgs', 'repos_url': 'https://api.github.com/users/Filtos/repos', 'events_url': 'https://api.github.com/users/Filtos/events{/privacy}', 'received_events_url': 'https://api.github.com/users/Filtos/received_events', 'type': 'User', 'site_admin': False}",[],closed,False,,[],,1,2019-09-10T18:39:36Z,2019-09-12T22:46:42Z,2019-09-12T22:46:42Z,CONTRIBUTOR,,"{'url': 'https://api.github.com/repos/Napster/napster.js/pulls/25', 'html_url': 'https://github.com/Napster/napster.js/pull/25', 'diff_url': 'https://github.com/Napster/napster.js/pull/25.diff', 'patch_url': 'https://github.com/Napster/napster.js/pull/25.patch'}","Story: https://napster.atlassian.net/browse/NP-303 - Moved the Napster.player.on(playtimer) into componendDidMount so we would only create one event listener instead of every time a song is clicked (this was causing the app to ignore the playback session error.) - Added the Napster.player.on(playsessionexpired) to componendDidMount so we can show the error message when we hit that error (doing the same thing we are doing on the Web App) - Fixed the tests that were failing due to the above changes", 7,https://api.github.com/repos/andrewnaguib/napster-filesharing-system/issues/2,https://api.github.com/repos/andrewnaguib/napster-filesharing-system,https://api.github.com/repos/andrewnaguib/napster-filesharing-system/issues/2/labels{/name},https://api.github.com/repos/andrewnaguib/napster-filesharing-system/issues/2/comments,https://api.github.com/repos/andrewnaguib/napster-filesharing-system/issues/2/events,https://github.com/andrewnaguib/napster-filesharing-system/issues/2,553052118,MDU6SXNzdWU1NTMwNTIxMTg=,2,Invalid Directory Path,"{'login': 'iashi', 'id': 59419708, 'node_id': 'MDQ6VXNlcjU5NDE5NzA4', 'avatar_url': 'https://avatars0.githubusercontent.com/u/59419708?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/iashi', 'html_url': 'https://github.com/iashi', 'followers_url': 'https://api.github.com/users/iashi/followers', 'following_url': 'https://api.github.com/users/iashi/following{/other_user}', 'gists_url': 'https://api.github.com/users/iashi/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/iashi/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/iashi/subscriptions', 'organizations_url': 'https://api.github.com/users/iashi/orgs', 'repos_url': 'https://api.github.com/users/iashi/repos', 'events_url': 'https://api.github.com/users/iashi/events{/privacy}', 'received_events_url': 'https://api.github.com/users/iashi/received_events', 'type': 'User', 'site_admin': False}",[],open,False,,[],,0,2020-01-21T18:28:07Z,2020-01-21T18:28:07Z,,NONE,,,I am facing the issue.. in register i have done all thing but after this it showing an invalid directory.. ? why, 8,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/events,https://github.com/zoharyAnd/musicables-angularJS/pull/8,693724691,MDExOlB1bGxSZXF1ZXN0NDgwMTkzNjA3,8,Bump node-sass from 4.13.0 to 4.14.1,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-09-04T22:14:30Z,2020-09-04T22:14:31Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/8', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8.patch'}","Bumps [node-sass](https://github.com/sass/node-sass) from 4.13.0 to 4.14.1.
Release notes

Sourced from node-sass's releases.

v4.14.1

Community

Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^, 14**^
Alpine Linux x64 6, 8, 10, 11, 12, 13, 14
FreeBSD i386 amd64 10, 12, 13

*Linux support refers to Ubuntu, Debian, and CentOS 5+ ** Not available on CentOS 5 ^ Only available on x64

v4.14.0

Features

Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^, 14**^
Alpine Linux x64 6, 8, 10, 11, 12, 13, 14
FreeBSD i386 amd64 10, 12, 13

*Linux support refers to Ubuntu, Debian, and CentOS 5+ ** Not available on CentOS 5 ^ Only available on x64

v4.13.1

Community

Changelog

Sourced from node-sass's changelog.

v4.14.0

https://github.com/sass/node-sass/releases/tag/v4.14.0

v4.13.1

https://github.com/sass/node-sass/releases/tag/v4.13.1

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node-sass&package-manager=npm_and_yarn&previous-version=4.13.0&new-version=4.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 9,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/events,https://github.com/zoharyAnd/musicables-angularJS/pull/7,660704626,MDExOlB1bGxSZXF1ZXN0NDUyNDQyMjMx,7,Bump lodash from 4.17.11 to 4.17.19,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-07-19T08:55:39Z,2020-07-19T08:55:41Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/7', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7.patch'}","Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.19.
Release notes

Sourced from lodash's releases.

4.17.16

Commits
Maintainer changes

This version was pushed to npm by mathias, a new releaser for lodash since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lodash&package-manager=npm_and_yarn&previous-version=4.17.11&new-version=4.17.19)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 10,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/events,https://github.com/zoharyAnd/musicables-angularJS/pull/6,641304006,MDExOlB1bGxSZXF1ZXN0NDM2NTU0NDIz,6,Bump angular from 1.7.5 to 1.8.0,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-06-18T15:25:32Z,2020-06-18T15:25:34Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/6', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6.patch'}","Bumps [angular](https://github.com/angular/angular.js) from 1.7.5 to 1.8.0.
Changelog

Sourced from angular's changelog.

1.8.0 nested-vaccination (2020-06-01)

This release contains a breaking change to resolve a security issue which was discovered by Krzysztof Kotowicz(@koto); and independently by Esben Sparre Andreasen (@esbena) while performing a Variant Analysis of CVE-2020-11022 which itself was found and reported by Masato Kinugawa (@masatokinugawa).

Bug Fixes

Breaking Changes

jqLite due to:

JqLite no longer turns XHTML-like strings like <div /><span /> to sibling elements <div></div><span></span> when not in XHTML mode. Instead it will leave them as-is. The browser, in non-XHTML mode, will convert these to: <div><span></span></div>.

This is a security fix to avoid an XSS vulnerability if a new jqLite element is created from a user-controlled HTML string. If you must have this functionality and understand the risk involved then it is posible to restore the original behavior by calling

angular.UNSAFE_restoreLegacyJqLiteXHTMLReplacement();

But you should adjust your code for this change and remove your use of this function as soon as possible.

Note that this only patches jqLite. If you use jQuery 3.5.0 or newer, please read the jQuery 3.5 upgrade guide for more details about the workarounds.

1.7.9 pollution-eradication (2019-11-19)

Bug Fixes

1.7.8 enthusiastic-oblation (2019-03-11)

... (truncated)
Commits
Maintainer changes

This version was pushed to npm by petebacondarwin, a new releaser for angular since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=angular&package-manager=npm_and_yarn&previous-version=1.7.5&new-version=1.8.0)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 11,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/events,https://github.com/zoharyAnd/musicables-angularJS/pull/5,610047229,MDExOlB1bGxSZXF1ZXN0NDExNTQ2NTQy,5,Bump jquery from 3.4.1 to 3.5.0,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-04-30T14:13:38Z,2020-04-30T14:13:39Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/5', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5.patch'}","Bumps [jquery](https://github.com/jquery/jquery) from 3.4.1 to 3.5.0.
Commits
Maintainer changes

This version was pushed to npm by mgol, a new releaser for jquery since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jquery&package-manager=npm_and_yarn&previous-version=3.4.1&new-version=3.5.0)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 12,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/events,https://github.com/zoharyAnd/musicables-angularJS/pull/4,601585772,MDExOlB1bGxSZXF1ZXN0NDA0ODI5ODg0,4,Bump https-proxy-agent from 2.2.1 to 2.2.4,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-04-16T23:23:00Z,2020-04-16T23:23:01Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/4', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4.patch'}","Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.1 to 2.2.4.
Release notes

Sourced from https-proxy-agent's releases.

2.2.4

Patches

Credits

Huge thanks to @lpinca for helping!

2.2.3

Patches

Credits

Huge thanks to @stoically, @lpinca, and @zkochan for helping!

2.2.2

Patches

Credits

Huge thanks to @marco-c, @tareqhs, @ianhowe76, and @BYK for helping!

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=https-proxy-agent&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.4)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 13,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/events,https://github.com/zoharyAnd/musicables-angularJS/pull/3,553198995,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTk5,3,Bump ecstatic from 3.3.0 to 3.3.2,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-01-21T23:05:49Z,2020-01-21T23:05:51Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/3', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3.patch'}","Bumps [ecstatic](https://github.com/jfhbrook/node-ecstatic) from 3.3.0 to 3.3.2.
Changelog *Sourced from [ecstatic's changelog](https://github.com/jfhbrook/node-ecstatic/blob/3.3.2/CHANGELOG.md).* > 2019/05/03 Version 3.3.2 > - Backport redirects bugfix > > 2019/02/10 Version 3.3.1 > - Publish via linux to hopefully fix [#238](https://github-redirect.dependabot.com/jfhbrook/node-ecstatic/issues/238) > > 2018/09/01 Version 3.3.0 > - Updated dependencies > - Added support for brotli encoding in addition to existing gzip support > > 2018/08/28 Version 3.2.2 > - Patchfix for improved accuracy when checking to see if gzip responses are allowed > - Updated tap and package-lock.json > > 2018/07/06 Version 3.2.1 > - Update package.json project description > - Move tools folder to scripts folder > - Linting now passes on windows if git converts newlines to CRLFs > - No longer return a 416 when input range header has extra untrimmed whitespace > - Remove extra double quotes in ETAGs > > 2018/02/03 Version 3.2.0 > - Add hidePermissions flag to hide file permissions from directory listings > > 2017/12/16 Version 3.1.1 > - Requires version of node-mime that patches regexp dos vulnerability > > 2017/12/09 Version 3.1.0 > - Minor tweaks/fixes to directory view > - Add a mess of dotfiles to .npmignore > > 2017/08/28 Version 3.0.0 > - Lint ./lib/ ./example and ./test against airbnb modified to support node 4.x > and a few quirky hard-to-fix idioms > - Change gzip behavior to default > - Change weak etags and weak etag comparisons to be on by default > - Remove support for 0.12.0 > - Remove union examples and test harnesses (support should have been removed > long ago) > - Fix icon styles in directory listing for small screens > - Update mime to ^v1.4.0 - This changes gzip responses to always have application/gzip as their content-type > > 2017/06/06 Version 2.2.1 > - Fix version number in CHANGELOG.md > > 2017/06/06 Version 2.2.0 > - Will now properly serve gzip files when defaulting the extension > - Will fall back to serving non-gzip files if file with .gz extension is > missing the magic bytes > - Updated he, url-join > ... (truncated)
Commits - [`07131c2`](https://github.com/jfhbrook/node-ecstatic/commit/07131c2c8e9f2d839e0a2102292010facad565a0) Release 3.3.2 - [`d0e2bcf`](https://github.com/jfhbrook/node-ecstatic/commit/d0e2bcf40e31d361f6cc419b4b5c2c7846e0dad6) Ho hum - [`b1ad801`](https://github.com/jfhbrook/node-ecstatic/commit/b1ad80189fcd7f2410efbc9347361fe69d165de8) Release 3.3.1 - [`7538ac5`](https://github.com/jfhbrook/node-ecstatic/commit/7538ac5fda216c6ecf2a3386051feaf11f6deb2d) Merge pull request [#236](https://github-redirect.dependabot.com/jfhbrook/node-ecstatic/issues/236) from 599316527/master - [`779df42`](https://github.com/jfhbrook/node-ecstatic/commit/779df4299ec6195498200ee549f30d6631d22244) Fix a spell error in README - See full diff in [compare view](https://github.com/jfhbrook/node-ecstatic/compare/3.3.0...3.3.2)
Maintainer changes This version was pushed to npm by [jfhbrook](https://www.npmjs.com/~jfhbrook), a new releaser for ecstatic since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ecstatic&package-manager=npm_and_yarn&previous-version=3.3.0&new-version=3.3.2)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 14,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/events,https://github.com/zoharyAnd/musicables-angularJS/pull/2,553198975,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTgx,2,Bump mixin-deep from 1.3.1 to 1.3.2,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-01-21T23:05:46Z,2020-01-21T23:05:47Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/2', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2.patch'}","Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2.
Commits - [`754f0c2`](https://github.com/jonschlinkert/mixin-deep/commit/754f0c20e1bc13ea5a21a64fbc7d6ba5f7b359b9) 1.3.2 - [`90ee1fa`](https://github.com/jonschlinkert/mixin-deep/commit/90ee1fab375fccfd9b926df718243339b4976d50) ensure keys are valid when mixing in values - See full diff in [compare view](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)
Maintainer changes This version was pushed to npm by [doowb](https://www.npmjs.com/~doowb), a new releaser for mixin-deep since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mixin-deep&package-manager=npm_and_yarn&previous-version=1.3.1&new-version=1.3.2)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 15,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/events,https://github.com/zoharyAnd/musicables-angularJS/pull/1,553198898,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTEy,1,Bump angular from 1.7.5 to 1.7.9,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",closed,False,,[],,1,2020-01-21T23:05:38Z,2020-06-18T15:25:38Z,2020-06-18T15:25:36Z,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/1', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1.patch'}","Bumps [angular](https://github.com/angular/angular.js) from 1.7.5 to 1.7.9.
Changelog *Sourced from [angular's changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md).* > # 1.7.9 pollution-eradication (2019-11-19) > > ## Bug Fixes > - **angular.merge:** do not merge __proto__ property > ([726f49](https://github.com/angular/angular.js/commit/726f49dcf6c23106ddaf5cfd5e2e592841db743a)) >
(Thanks to the [Snyk Security Research Team](https://snyk.io/blog/snyk-research-team-discovers-severe-prototype-pollution-security-vulnerabilities-affecting-all-versions-of-lodash/) for identifyng this issue.) > - **ngStyle:** correctly remove old style when new style value is invalid > ([5edd25](https://github.com/angular/angular.js/commit/5edd25364f617083363dc2bd61f9230b38267578), > [#16860](https://github-redirect.dependabot.com/angular/angular.js/issues/16860), > [#16868](https://github-redirect.dependabot.com/angular/angular.js/issues/16868)) > > > > # 1.7.8 enthusiastic-oblation (2019-03-11) > > > ## Bug Fixes > - **required:** correctly validate required on non-input element surrounded by ngIf > ([a4c7bd](https://github.com/angular/angular.js/commit/a4c7bdccd76c39c30e33f6215da9a00cc8acde2c), > [#16830](https://github-redirect.dependabot.com/angular/angular.js/issues/16830), > [#16836](https://github-redirect.dependabot.com/angular/angular.js/issues/16836)) > > > > # 1.7.7 kingly-exiting (2019-02-04) > > ## Bug Fixes > - **ngRequired:** set error correctly when inside ngRepeat and false by default > ([5ad4f5](https://github.com/angular/angular.js/commit/5ad4f5562c37b1cb575e3e5fddd96e9dd10408e2), > [#16814](https://github-redirect.dependabot.com/angular/angular.js/issues/16814), > [#16820](https://github-redirect.dependabot.com/angular/angular.js/issues/16820)) > > > > # 1.7.6 gravity-manipulation (2019-01-17) > > ## Bug Fixes > - **$compile:** fix ng-prop-* with undefined values > ([772440](https://github.com/angular/angular.js/commit/772440cdaf9a9bfa40de1675e20a5f0e356089ed), > [#16797](https://github-redirect.dependabot.com/angular/angular.js/issues/16797), > [#16798](https://github-redirect.dependabot.com/angular/angular.js/issues/16798)) > - **compile:** properly handle false value for boolean attrs with jQuery > ([27486b](https://github.com/angular/angular.js/commit/27486bd15e70946ece2ba713e4e8654b7f9bddad), > [#16778](https://github-redirect.dependabot.com/angular/angular.js/issues/16778), > [#16779](https://github-redirect.dependabot.com/angular/angular.js/issues/16779)) > - **ngRepeat:** > - fix reference to last collection value remaining across linkages > ([cf919a](https://github.com/angular/angular.js/commit/cf919a6fb7fc655f3fa37a74899a797ea5b8073e)) > - fix trackBy function being invoked with incorrect scope > ([d4d103](https://github.com/angular/angular.js/commit/d4d1031bcd9b30ae6a58bd60a79bcc9d20f0f2b7), > ... (truncated)
Commits - [`d257c45`](https://github.com/angular/angular.js/commit/d257c4564d069a279c5625ad6b68008d4a4dbb11) docs: release notes for 1.7.9 - [`1b1684c`](https://github.com/angular/angular.js/commit/1b1684c2b20a75df677426d4e4a61d51af3b5c44) docs($compile): fix typos and incorrect example - [`726f49d`](https://github.com/angular/angular.js/commit/726f49dcf6c23106ddaf5cfd5e2e592841db743a) fix(angular.merge): do not merge __proto__ property - [`8a187f1`](https://github.com/angular/angular.js/commit/8a187f16c37e0574b1a1fa7ccc54f3690d9d81ec) chore(saucelabs): switch to latest version of desktop Safari - [`d97e6f1`](https://github.com/angular/angular.js/commit/d97e6f169536fdb7bd8b0c7735b79348d5669213) chore(saucelabs): upgrade SauceConnect to 4.5.4 - [`26e893a`](https://github.com/angular/angular.js/commit/26e893a2faa5be9b563948963dc4ac71990e5100) docs(guide/migration): fix typo (misceallenous --> miscellaneous) - [`5edd253`](https://github.com/angular/angular.js/commit/5edd25364f617083363dc2bd61f9230b38267578) fix(ngStyle): correctly remove old style when new style value is invalid - [`019dded`](https://github.com/angular/angular.js/commit/019dded64b7a58d67994af5f0f5b532f1c97b908) chore(*): update jQuery from 3.2.1 to 3.4.0 - [`0007be1`](https://github.com/angular/angular.js/commit/0007be1ca2f3d3b8e1b914e2cdc3c943cbe16bc9) chore(*): make yarn.lock & GitHub templates identical between master & v1.7.x - [`863528f`](https://github.com/angular/angular.js/commit/863528f2999a32cfb16761258e94e03479e349e8) docs(DEVELOPERS): remove git revert misleading information - Additional commits viewable in [compare view](https://github.com/angular/angular.js/compare/v1.7.5...v1.7.9)
Maintainer changes This version was pushed to npm by [petebacondarwin](https://www.npmjs.com/~petebacondarwin), a new releaser for angular since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=angular&package-manager=npm_and_yarn&previous-version=1.7.5&new-version=1.7.9)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 16,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/8/events,https://github.com/zoharyAnd/musicables-angularJS/pull/8,693724691,MDExOlB1bGxSZXF1ZXN0NDgwMTkzNjA3,8,Bump node-sass from 4.13.0 to 4.14.1,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-09-04T22:14:30Z,2020-09-04T22:14:31Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/8', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/8.patch'}","Bumps [node-sass](https://github.com/sass/node-sass) from 4.13.0 to 4.14.1.
Release notes

Sourced from node-sass's releases.

v4.14.1

Community

Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^, 14**^
Alpine Linux x64 6, 8, 10, 11, 12, 13, 14
FreeBSD i386 amd64 10, 12, 13

*Linux support refers to Ubuntu, Debian, and CentOS 5+ ** Not available on CentOS 5 ^ Only available on x64

v4.14.0

Features

Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^, 14**^
Alpine Linux x64 6, 8, 10, 11, 12, 13, 14
FreeBSD i386 amd64 10, 12, 13

*Linux support refers to Ubuntu, Debian, and CentOS 5+ ** Not available on CentOS 5 ^ Only available on x64

v4.13.1

Community

Changelog

Sourced from node-sass's changelog.

v4.14.0

https://github.com/sass/node-sass/releases/tag/v4.14.0

v4.13.1

https://github.com/sass/node-sass/releases/tag/v4.13.1

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=node-sass&package-manager=npm_and_yarn&previous-version=4.13.0&new-version=4.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 17,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/7/events,https://github.com/zoharyAnd/musicables-angularJS/pull/7,660704626,MDExOlB1bGxSZXF1ZXN0NDUyNDQyMjMx,7,Bump lodash from 4.17.11 to 4.17.19,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-07-19T08:55:39Z,2020-07-19T08:55:41Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/7', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/7.patch'}","Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.19.
Release notes

Sourced from lodash's releases.

4.17.16

Commits
Maintainer changes

This version was pushed to npm by mathias, a new releaser for lodash since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lodash&package-manager=npm_and_yarn&previous-version=4.17.11&new-version=4.17.19)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 18,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/6/events,https://github.com/zoharyAnd/musicables-angularJS/pull/6,641304006,MDExOlB1bGxSZXF1ZXN0NDM2NTU0NDIz,6,Bump angular from 1.7.5 to 1.8.0,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-06-18T15:25:32Z,2020-06-18T15:25:34Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/6', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/6.patch'}","Bumps [angular](https://github.com/angular/angular.js) from 1.7.5 to 1.8.0.
Changelog

Sourced from angular's changelog.

1.8.0 nested-vaccination (2020-06-01)

This release contains a breaking change to resolve a security issue which was discovered by Krzysztof Kotowicz(@koto); and independently by Esben Sparre Andreasen (@esbena) while performing a Variant Analysis of CVE-2020-11022 which itself was found and reported by Masato Kinugawa (@masatokinugawa).

Bug Fixes

Breaking Changes

jqLite due to:

JqLite no longer turns XHTML-like strings like <div /><span /> to sibling elements <div></div><span></span> when not in XHTML mode. Instead it will leave them as-is. The browser, in non-XHTML mode, will convert these to: <div><span></span></div>.

This is a security fix to avoid an XSS vulnerability if a new jqLite element is created from a user-controlled HTML string. If you must have this functionality and understand the risk involved then it is posible to restore the original behavior by calling

angular.UNSAFE_restoreLegacyJqLiteXHTMLReplacement();

But you should adjust your code for this change and remove your use of this function as soon as possible.

Note that this only patches jqLite. If you use jQuery 3.5.0 or newer, please read the jQuery 3.5 upgrade guide for more details about the workarounds.

1.7.9 pollution-eradication (2019-11-19)

Bug Fixes

1.7.8 enthusiastic-oblation (2019-03-11)

... (truncated)
Commits
Maintainer changes

This version was pushed to npm by petebacondarwin, a new releaser for angular since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=angular&package-manager=npm_and_yarn&previous-version=1.7.5&new-version=1.8.0)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 19,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/5/events,https://github.com/zoharyAnd/musicables-angularJS/pull/5,610047229,MDExOlB1bGxSZXF1ZXN0NDExNTQ2NTQy,5,Bump jquery from 3.4.1 to 3.5.0,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-04-30T14:13:38Z,2020-04-30T14:13:39Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/5', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/5.patch'}","Bumps [jquery](https://github.com/jquery/jquery) from 3.4.1 to 3.5.0.
Commits
Maintainer changes

This version was pushed to npm by mgol, a new releaser for jquery since your current version.


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jquery&package-manager=npm_and_yarn&previous-version=3.4.1&new-version=3.5.0)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 20,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/4/events,https://github.com/zoharyAnd/musicables-angularJS/pull/4,601585772,MDExOlB1bGxSZXF1ZXN0NDA0ODI5ODg0,4,Bump https-proxy-agent from 2.2.1 to 2.2.4,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-04-16T23:23:00Z,2020-04-16T23:23:01Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/4', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/4.patch'}","Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.1 to 2.2.4.
Release notes

Sourced from https-proxy-agent's releases.

2.2.4

Patches

Credits

Huge thanks to @lpinca for helping!

2.2.3

Patches

Credits

Huge thanks to @stoically, @lpinca, and @zkochan for helping!

2.2.2

Patches

Credits

Huge thanks to @marco-c, @tareqhs, @ianhowe76, and @BYK for helping!

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=https-proxy-agent&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.4)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 21,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/3/events,https://github.com/zoharyAnd/musicables-angularJS/pull/3,553198995,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTk5,3,Bump ecstatic from 3.3.0 to 3.3.2,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-01-21T23:05:49Z,2020-01-21T23:05:51Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/3', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/3.patch'}","Bumps [ecstatic](https://github.com/jfhbrook/node-ecstatic) from 3.3.0 to 3.3.2.
Changelog *Sourced from [ecstatic's changelog](https://github.com/jfhbrook/node-ecstatic/blob/3.3.2/CHANGELOG.md).* > 2019/05/03 Version 3.3.2 > - Backport redirects bugfix > > 2019/02/10 Version 3.3.1 > - Publish via linux to hopefully fix [#238](https://github-redirect.dependabot.com/jfhbrook/node-ecstatic/issues/238) > > 2018/09/01 Version 3.3.0 > - Updated dependencies > - Added support for brotli encoding in addition to existing gzip support > > 2018/08/28 Version 3.2.2 > - Patchfix for improved accuracy when checking to see if gzip responses are allowed > - Updated tap and package-lock.json > > 2018/07/06 Version 3.2.1 > - Update package.json project description > - Move tools folder to scripts folder > - Linting now passes on windows if git converts newlines to CRLFs > - No longer return a 416 when input range header has extra untrimmed whitespace > - Remove extra double quotes in ETAGs > > 2018/02/03 Version 3.2.0 > - Add hidePermissions flag to hide file permissions from directory listings > > 2017/12/16 Version 3.1.1 > - Requires version of node-mime that patches regexp dos vulnerability > > 2017/12/09 Version 3.1.0 > - Minor tweaks/fixes to directory view > - Add a mess of dotfiles to .npmignore > > 2017/08/28 Version 3.0.0 > - Lint ./lib/ ./example and ./test against airbnb modified to support node 4.x > and a few quirky hard-to-fix idioms > - Change gzip behavior to default > - Change weak etags and weak etag comparisons to be on by default > - Remove support for 0.12.0 > - Remove union examples and test harnesses (support should have been removed > long ago) > - Fix icon styles in directory listing for small screens > - Update mime to ^v1.4.0 - This changes gzip responses to always have application/gzip as their content-type > > 2017/06/06 Version 2.2.1 > - Fix version number in CHANGELOG.md > > 2017/06/06 Version 2.2.0 > - Will now properly serve gzip files when defaulting the extension > - Will fall back to serving non-gzip files if file with .gz extension is > missing the magic bytes > - Updated he, url-join > ... (truncated)
Commits - [`07131c2`](https://github.com/jfhbrook/node-ecstatic/commit/07131c2c8e9f2d839e0a2102292010facad565a0) Release 3.3.2 - [`d0e2bcf`](https://github.com/jfhbrook/node-ecstatic/commit/d0e2bcf40e31d361f6cc419b4b5c2c7846e0dad6) Ho hum - [`b1ad801`](https://github.com/jfhbrook/node-ecstatic/commit/b1ad80189fcd7f2410efbc9347361fe69d165de8) Release 3.3.1 - [`7538ac5`](https://github.com/jfhbrook/node-ecstatic/commit/7538ac5fda216c6ecf2a3386051feaf11f6deb2d) Merge pull request [#236](https://github-redirect.dependabot.com/jfhbrook/node-ecstatic/issues/236) from 599316527/master - [`779df42`](https://github.com/jfhbrook/node-ecstatic/commit/779df4299ec6195498200ee549f30d6631d22244) Fix a spell error in README - See full diff in [compare view](https://github.com/jfhbrook/node-ecstatic/compare/3.3.0...3.3.2)
Maintainer changes This version was pushed to npm by [jfhbrook](https://www.npmjs.com/~jfhbrook), a new releaser for ecstatic since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ecstatic&package-manager=npm_and_yarn&previous-version=3.3.0&new-version=3.3.2)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 22,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/2/events,https://github.com/zoharyAnd/musicables-angularJS/pull/2,553198975,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTgx,2,Bump mixin-deep from 1.3.1 to 1.3.2,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",open,False,,[],,0,2020-01-21T23:05:46Z,2020-01-21T23:05:47Z,,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/2', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/2.patch'}","Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2.
Commits - [`754f0c2`](https://github.com/jonschlinkert/mixin-deep/commit/754f0c20e1bc13ea5a21a64fbc7d6ba5f7b359b9) 1.3.2 - [`90ee1fa`](https://github.com/jonschlinkert/mixin-deep/commit/90ee1fab375fccfd9b926df718243339b4976d50) ensure keys are valid when mixing in values - See full diff in [compare view](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2)
Maintainer changes This version was pushed to npm by [doowb](https://www.npmjs.com/~doowb), a new releaser for mixin-deep since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mixin-deep&package-manager=npm_and_yarn&previous-version=1.3.1&new-version=1.3.2)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
", 23,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1,https://api.github.com/repos/zoharyAnd/musicables-angularJS,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/labels{/name},https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/comments,https://api.github.com/repos/zoharyAnd/musicables-angularJS/issues/1/events,https://github.com/zoharyAnd/musicables-angularJS/pull/1,553198898,MDExOlB1bGxSZXF1ZXN0MzY1NTcyMTEy,1,Bump angular from 1.7.5 to 1.7.9,"{'login': 'dependabot[bot]', 'id': 49699333, 'node_id': 'MDM6Qm90NDk2OTkzMzM=', 'avatar_url': 'https://avatars0.githubusercontent.com/in/29110?v=4', 'gravatar_id': '', 'url': 'https://api.github.com/users/dependabot%5Bbot%5D', 'html_url': 'https://github.com/apps/dependabot', 'followers_url': 'https://api.github.com/users/dependabot%5Bbot%5D/followers', 'following_url': 'https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}', 'gists_url': 'https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}', 'starred_url': 'https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}', 'subscriptions_url': 'https://api.github.com/users/dependabot%5Bbot%5D/subscriptions', 'organizations_url': 'https://api.github.com/users/dependabot%5Bbot%5D/orgs', 'repos_url': 'https://api.github.com/users/dependabot%5Bbot%5D/repos', 'events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}', 'received_events_url': 'https://api.github.com/users/dependabot%5Bbot%5D/received_events', 'type': 'Bot', 'site_admin': False}","[{'id': 1801587619, 'node_id': 'MDU6TGFiZWwxODAxNTg3NjE5', 'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/labels/dependencies', 'name': 'dependencies', 'color': '0366d6', 'default': False, 'description': 'Pull requests that update a dependency file'}]",closed,False,,[],,1,2020-01-21T23:05:38Z,2020-06-18T15:25:38Z,2020-06-18T15:25:36Z,NONE,,"{'url': 'https://api.github.com/repos/zoharyAnd/musicables-angularJS/pulls/1', 'html_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1', 'diff_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1.diff', 'patch_url': 'https://github.com/zoharyAnd/musicables-angularJS/pull/1.patch'}","Bumps [angular](https://github.com/angular/angular.js) from 1.7.5 to 1.7.9.
Changelog *Sourced from [angular's changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md).* > # 1.7.9 pollution-eradication (2019-11-19) > > ## Bug Fixes > - **angular.merge:** do not merge __proto__ property > ([726f49](https://github.com/angular/angular.js/commit/726f49dcf6c23106ddaf5cfd5e2e592841db743a)) >
(Thanks to the [Snyk Security Research Team](https://snyk.io/blog/snyk-research-team-discovers-severe-prototype-pollution-security-vulnerabilities-affecting-all-versions-of-lodash/) for identifyng this issue.) > - **ngStyle:** correctly remove old style when new style value is invalid > ([5edd25](https://github.com/angular/angular.js/commit/5edd25364f617083363dc2bd61f9230b38267578), > [#16860](https://github-redirect.dependabot.com/angular/angular.js/issues/16860), > [#16868](https://github-redirect.dependabot.com/angular/angular.js/issues/16868)) > > > > # 1.7.8 enthusiastic-oblation (2019-03-11) > > > ## Bug Fixes > - **required:** correctly validate required on non-input element surrounded by ngIf > ([a4c7bd](https://github.com/angular/angular.js/commit/a4c7bdccd76c39c30e33f6215da9a00cc8acde2c), > [#16830](https://github-redirect.dependabot.com/angular/angular.js/issues/16830), > [#16836](https://github-redirect.dependabot.com/angular/angular.js/issues/16836)) > > > > # 1.7.7 kingly-exiting (2019-02-04) > > ## Bug Fixes > - **ngRequired:** set error correctly when inside ngRepeat and false by default > ([5ad4f5](https://github.com/angular/angular.js/commit/5ad4f5562c37b1cb575e3e5fddd96e9dd10408e2), > [#16814](https://github-redirect.dependabot.com/angular/angular.js/issues/16814), > [#16820](https://github-redirect.dependabot.com/angular/angular.js/issues/16820)) > > > > # 1.7.6 gravity-manipulation (2019-01-17) > > ## Bug Fixes > - **$compile:** fix ng-prop-* with undefined values > ([772440](https://github.com/angular/angular.js/commit/772440cdaf9a9bfa40de1675e20a5f0e356089ed), > [#16797](https://github-redirect.dependabot.com/angular/angular.js/issues/16797), > [#16798](https://github-redirect.dependabot.com/angular/angular.js/issues/16798)) > - **compile:** properly handle false value for boolean attrs with jQuery > ([27486b](https://github.com/angular/angular.js/commit/27486bd15e70946ece2ba713e4e8654b7f9bddad), > [#16778](https://github-redirect.dependabot.com/angular/angular.js/issues/16778), > [#16779](https://github-redirect.dependabot.com/angular/angular.js/issues/16779)) > - **ngRepeat:** > - fix reference to last collection value remaining across linkages > ([cf919a](https://github.com/angular/angular.js/commit/cf919a6fb7fc655f3fa37a74899a797ea5b8073e)) > - fix trackBy function being invoked with incorrect scope > ([d4d103](https://github.com/angular/angular.js/commit/d4d1031bcd9b30ae6a58bd60a79bcc9d20f0f2b7), > ... (truncated)
Commits - [`d257c45`](https://github.com/angular/angular.js/commit/d257c4564d069a279c5625ad6b68008d4a4dbb11) docs: release notes for 1.7.9 - [`1b1684c`](https://github.com/angular/angular.js/commit/1b1684c2b20a75df677426d4e4a61d51af3b5c44) docs($compile): fix typos and incorrect example - [`726f49d`](https://github.com/angular/angular.js/commit/726f49dcf6c23106ddaf5cfd5e2e592841db743a) fix(angular.merge): do not merge __proto__ property - [`8a187f1`](https://github.com/angular/angular.js/commit/8a187f16c37e0574b1a1fa7ccc54f3690d9d81ec) chore(saucelabs): switch to latest version of desktop Safari - [`d97e6f1`](https://github.com/angular/angular.js/commit/d97e6f169536fdb7bd8b0c7735b79348d5669213) chore(saucelabs): upgrade SauceConnect to 4.5.4 - [`26e893a`](https://github.com/angular/angular.js/commit/26e893a2faa5be9b563948963dc4ac71990e5100) docs(guide/migration): fix typo (misceallenous --> miscellaneous) - [`5edd253`](https://github.com/angular/angular.js/commit/5edd25364f617083363dc2bd61f9230b38267578) fix(ngStyle): correctly remove old style when new style value is invalid - [`019dded`](https://github.com/angular/angular.js/commit/019dded64b7a58d67994af5f0f5b532f1c97b908) chore(*): update jQuery from 3.2.1 to 3.4.0 - [`0007be1`](https://github.com/angular/angular.js/commit/0007be1ca2f3d3b8e1b914e2cdc3c943cbe16bc9) chore(*): make yarn.lock & GitHub templates identical between master & v1.7.x - [`863528f`](https://github.com/angular/angular.js/commit/863528f2999a32cfb16761258e94e03479e349e8) docs(DEVELOPERS): remove git revert misleading information - Additional commits viewable in [compare view](https://github.com/angular/angular.js/compare/v1.7.5...v1.7.9)
Maintainer changes This version was pushed to npm by [petebacondarwin](https://www.npmjs.com/~petebacondarwin), a new releaser for angular since your current version.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=angular&package-manager=npm_and_yarn&previous-version=1.7.5&new-version=1.7.9)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zoharyAnd/musicables-angularJS/network/alerts).
",