Skip to content

build(deps): bump pbkdf2 from 3.1.2 to 3.1.6 in /chat2db-community-client - #2011

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6
Closed

build(deps): bump pbkdf2 from 3.1.2 to 3.1.6 in /chat2db-community-client#2011
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps pbkdf2 from 3.1.2 to 3.1.6.

Changelog

Sourced from pbkdf2's changelog.

v3.1.6 - 2026-05-26

Commits

  • [New] add TypeScript type declarations fb1f747
  • [Fix] coerce -0 keylen to +0 7c4a495
  • [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore e3cce16
  • [eslint] fix an error f6b0e42
  • [Tests] fix npm run postlint b729629
  • [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog 5e0cf51
  • [Deps] update to-buffer 1c3b1f5
  • [readme] replace runkit CI badge with shields.io check-runs badge 528bd38

v3.1.5 - 2025-09-23

Commits

  • [Fix] only allow finite iterations 67bd94d
  • [Fix] restore node 0.10 support 8f59d96
  • [Fix] check parameters before the "no Promise" bailout d2dc5f0

v3.1.4 - 2025-09-22

Commits

  • [Deps] update create-hash, ripemd160, sha.js, to-buffer 8dbf49b
  • [meta] update repo URLs d15bc35
  • [Dev Deps] update @ljharb/eslint-config aaf870b

v3.1.3 - 2025-06-20

Commits

  • Only apps should have lockfiles 8b06730
  • [lint] fix whitespace 9a76e2f
  • [lint] fix parens/curlies/semis/etc 6fd84bf
  • [meta] add auto-changelog 796c38d
  • [Tests] fix tests in node 17 3661fb0
  • Revert "[Tests] fix tests in node < 3" 7431b57
  • [Tests] fix tests in node < 3 eb9f97a
  • [Fix] ensure unknown algorithms throw + known ones match node 26d4fd3
  • [Tests] add GHA, always run nyc 513906a
  • [lint] fix a few more rules ab04da8
  • [lint] switch to eslint 89694cf
  • [Tests] add coverage d0d534b
  • [Refactor] use to-buffer e3102a8
  • [readme] improve badges fca0c9d
  • [Tests] remove unused travis file a2c7d93
  • [meta] switch from files to npmignore 7f31fbc
  • [Tests] use .nycrc 8d628e8

... (truncated)

Commits
  • ea4768b v3.1.6
  • b729629 [Tests] fix npm run postlint
  • 7c4a495 [Fix] coerce -0 keylen to +0
  • 5e0cf51 [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog
  • 1c3b1f5 [Deps] update to-buffer
  • e3cce16 [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore
  • f6b0e42 [eslint] fix an error
  • fb1f747 [New] add TypeScript type declarations
  • 528bd38 [readme] replace runkit CI badge with shields.io check-runs badge
  • 3687905 v3.1.5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from openai0229 as a code owner July 24, 2026 06:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@openai0229 openai0229 moved this to In Review in Chat2DB Community Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6 branch 2 times, most recently from 689a079 to 20fc9b8 Compare July 24, 2026 18:25
@dependabot dependabot Bot changed the title chore(deps): bump pbkdf2 from 3.1.2 to 3.1.6 in /chat2db-community-client build(deps): bump pbkdf2 from 3.1.2 to 3.1.6 in /chat2db-community-client Jul 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6 branch from 20fc9b8 to 1abb0ac Compare July 25, 2026 15:23
Bumps [pbkdf2](https://github.com/browserify/pbkdf2) from 3.1.2 to 3.1.6.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.2...v3.1.6)

---
updated-dependencies:
- dependency-name: pbkdf2
  dependency-version: 3.1.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6 branch from 1abb0ac to 5de847d Compare July 26, 2026 05:51
@dependabot @github

dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@openai0229

Copy link
Copy Markdown
Contributor

Superseded by the repository-wide Dependabot security grouping configured in #2208. Closing this legacy per-dependency PR so Dependabot can regenerate security updates from the current .github/dependabot.yml. The underlying security alert remains open until a replacement update is merged.

@openai0229 openai0229 closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/chat2db-community-client/pbkdf2-3.1.6 branch July 27, 2026 04:53
@openai0229 openai0229 moved this from In Review to Done in Chat2DB Community Jul 27, 2026
@openai0229

Copy link
Copy Markdown
Contributor

Replacement created: #2232 contains the exact Dependabot head change from this PR as part of the npm security rollup tracked by #2231.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant