Skip to content

build(deps): bump min-document from 2.19.0 to 2.19.2 in /chat2db-community-client - #2028

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2
Closed

build(deps): bump min-document from 2.19.0 to 2.19.2 in /chat2db-community-client#2028
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps min-document from 2.19.0 to 2.19.2.

Commits
  • 0d14150 2.19.2
  • 49c2e06 Merge pull request #56 from wasabina67/fix/prototype-pollution-removeAttribut...
  • 9666461 Fix prototype pollution vulnerability in removeAttributeNS
  • 4490b40 2.19.1
  • 2cd5871 update ignore
  • fe32e8d Merge pull request #55 from jameswassink/fix/prototype-pollution-removeAttrib...
  • 6c5f31a Better prototype pollution fix
  • 0d4e819 Fix prototype pollution in removeAttributeNS
  • bf7b691 Update package.json
  • 1b5402d Merge pull request #49 from PixnBits/patch-1
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
@dependabot
dependabot Bot requested a review from openai0229 as a code owner July 24, 2026 08:34
@dependabot dependabot Bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Jul 24, 2026
@openai0229 openai0229 moved this to In Review in Chat2DB Community Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2 branch from 8a49db4 to 108e14e Compare July 24, 2026 18:28
@dependabot @github

dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot dependabot Bot changed the title chore(deps): bump min-document from 2.19.0 to 2.19.2 in /chat2db-community-client build(deps): bump min-document from 2.19.0 to 2.19.2 in /chat2db-community-client Jul 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2 branch from 108e14e to 2ffe5bc Compare July 26, 2026 05:52
Bumps [min-document](https://github.com/Raynos/min-document) from 2.19.0 to 2.19.2.
- [Commits](Raynos/min-document@v2.19.0...v2.19.2)

---
updated-dependencies:
- dependency-name: min-document
  dependency-version: 2.19.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2 branch from 2ffe5bc to 9cc38f3 Compare July 26, 2026 07:31
@openai0229

Copy link
Copy Markdown
Contributor

Superseded by the repository-wide Dependabot security grouping configured in #2208. Closing this legacy per-dependency PR so Dependabot can regenerate security updates from the current .github/dependabot.yml. The underlying security alert remains open until a replacement update is merged.

@openai0229 openai0229 closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/chat2db-community-client/min-document-2.19.2 branch July 27, 2026 04:53
@openai0229 openai0229 moved this from In Review to Done in Chat2DB Community Jul 27, 2026
@openai0229

Copy link
Copy Markdown
Contributor

Replacement created: #2232 contains the exact Dependabot head change from this PR as part of the npm security rollup tracked by #2231.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant