Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency lottie-react to v2.4.1 #1300

Merged
merged 1 commit into from
Mar 7, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 6, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
lottie-react (source) 2.4.0 -> 2.4.1 age adoption passing confidence

Release Notes

Gamote/lottie-react (lottie-react)

v2.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: Gamote/lottie-react@v2.4.0...v2.4.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Mar 6, 2025
Copy link

netlify bot commented Mar 6, 2025

Deploy Preview for dev-astral canceled.

Name Link
🔨 Latest commit f6488fc
🔍 Latest deploy log https://app.netlify.com/sites/dev-astral/deploys/67cb3b14b34e7000084cfb14

Copy link

socket-security bot commented Mar 6, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Obfuscated code npm/@polkadot/[email protected] ⚠︎

View full report↗︎

Next steps

What is obfuscated code?

Obfuscated files are intentionally packed to hide their behavior. This could be a sign of malware.

Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/lottie-react-2.x-lockfile branch 5 times, most recently from 377f3d1 to 19dcc04 Compare March 7, 2025 18:24
Copy link

socket-security bot commented Mar 7, 2025

Report too large to display inline

View full report↗︎

@renovate renovate bot force-pushed the renovate/lottie-react-2.x-lockfile branch from 3303603 to f6488fc Compare March 7, 2025 18:29
@marc-aurele-besner marc-aurele-besner merged commit 95f2e67 into main Mar 7, 2025
10 checks passed
@marc-aurele-besner marc-aurele-besner deleted the renovate/lottie-react-2.x-lockfile branch March 7, 2025 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant