build(deps): update xss requirement from ^1.0.14 to ^1.0.15 in /superset-frontend/plugins/plugin-chart-table #27835
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
|
@mistercrunch I'm still stumped why the actions don't have permissions to push to the branch. Curious if you have any theories. |
Updates the requirements on [xss](https://github.com/leizongmin/js-xss) to permit the latest version. - [Changelog](https://github.com/leizongmin/js-xss/blob/master/CHANGELOG.md) - [Commits](leizongmin/js-xss@v1.0.14...v1.0.15) --- updated-dependencies: - dependency-name: xss dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
mistercrunch
force-pushed
the
dependabot/npm_and_yarn/superset-frontend/plugins/plugin-chart-table/xss-tw-1.0.15
branch
from
422ecc7 to
d5bac37
Compare
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Do you mean this? -> looks ok to me. But in general about permissions to push to the repo you'll need something like |
|
For the record here I forced rebased the damn thing, not sure what was wrong with it prior to that |
|
It seems for some reason like the action can't push the commit until one of us humanoids commits or force-pushes the thing. Previously I was pulling the branch, doing |
Attempting permissions to address this issue #27835 (comment)
dependabot
bot
deleted the
dependabot/npm_and_yarn/superset-frontend/plugins/plugin-chart-table/xss-tw-1.0.15
branch
…set-frontend/plugins/plugin-chart-table (apache#27835) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: GitHub-Actions[bot] <github-actions[bot]@users.noreply.github.com>
…set-frontend/plugins/plugin-chart-table (apache#27835) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: GitHub-Actions[bot] <github-actions[bot]@users.noreply.github.com>
…set-frontend/plugins/plugin-chart-table (apache#27835) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: GitHub-Actions[bot] <github-actions[bot]@users.noreply.github.com>
…set-frontend/plugins/plugin-chart-table (apache#27835) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: GitHub-Actions[bot] <github-actions[bot]@users.noreply.github.com>
…set-frontend/plugins/plugin-chart-table (apache#27835) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: GitHub-Actions[bot] <github-actions[bot]@users.noreply.github.com>
mistercrunch
added
🏷️ bot
Updates the requirements on xss to permit the latest version.
Changelog
Sourced from xss's changelog.
Commits
9c92272publish: v1.0.15ae15483feat: add <kbd> to default whitelist (#279)bedb0c0feat: single-quoted attribute value syntax support (#287)8884b21feat: Allow loading attribute on img (#278)4c3c758chore: fix typo (#272)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)