Skip to content

Commit c99590c

Browse files
chore(deps): bump the npm_and_yarn group across 3 directories with 3 updates (#38981)
Bumps the npm_and_yarn group with 2 updates in the / directory: [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) and [http-cache-semantics](https://github.com/kornelski/http-cache-semantics). Bumps the npm_and_yarn group with 1 update in the /packages/@aws-cdk-testing/framework-integ/test/aws-route53-targets/test/integ.elastic-beanstalk-environment-target-assets directory: [proxy-addr](https://github.com/jshttp/proxy-addr). Bumps the npm_and_yarn group with 1 update in the /packages/@aws-cdk-testing/framework-integ/test/aws-route53-targets/test/integ.elastic-beanstalk-environment-target.js.snapshot/asset.d7a78a153245008bfd939d014432059dda6472aeb860364e38275597c53be2bd.elastic-beanstalk-environment-target-assets directory: [proxy-addr](https://github.com/jshttp/proxy-addr). Updates `nx` from 23.1.0 to 23.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nrwl/nx/releases">nx's releases</a>.</em></p> <blockquote> <h2>23.2.1 (2026-09-09)</h2> <h3>🚀 Features</h3> <ul> <li><strong>core:</strong> report the cache location alongside usage (<a href="https://redirect.github.com/nrwl/nx/pull/36959">#36959</a>)</li> <li><strong>repo:</strong> add a .NET example for <code>@​nx/dotnet</code> (<a href="https://redirect.github.com/nrwl/nx/pull/36701">#36701</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>angular:</strong> correct declaration maps and exports of buildable libraries (<a href="https://redirect.github.com/nrwl/nx/pull/36373">#36373</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36357">#36357</a>)</li> <li><strong>core:</strong> separate daemon runtime env from graph identity (<a href="https://redirect.github.com/nrwl/nx/pull/36565">#36565</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36564">#36564</a>)</li> <li><strong>core:</strong> validate the migrations path before extracting package migrations (<a href="https://redirect.github.com/nrwl/nx/pull/36887">#36887</a>)</li> <li><strong>core:</strong> release per-run process listeners and task history results (<a href="https://redirect.github.com/nrwl/nx/pull/36866">#36866</a>)</li> <li><strong>core:</strong> read the pnpm 12 min-release-age policy instead of deferring to an install (<a href="https://redirect.github.com/nrwl/nx/pull/36915">#36915</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36914">#36914</a>)</li> <li><strong>core:</strong> carry minimumReleaseAge into pruned pnpm deploy output (<a href="https://redirect.github.com/nrwl/nx/pull/36900">#36900</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36899">#36899</a>)</li> <li><strong>core:</strong> report how a plugin worker was lost instead of always calling it an exit (<a href="https://redirect.github.com/nrwl/nx/pull/36894">#36894</a>)</li> <li><strong>core:</strong> keep the cache in the workspace on CI (<a href="https://redirect.github.com/nrwl/nx/pull/36922">#36922</a>)</li> <li><strong>core:</strong> restore the wasm walker imports dropped by a stray cfg attribute (<a href="https://redirect.github.com/nrwl/nx/pull/36924">#36924</a>)</li> <li><strong>core:</strong> avoid mutating target options when resolving configurations (<a href="https://redirect.github.com/nrwl/nx/pull/36934">#36934</a>)</li> <li><strong>js:</strong> resolve tsconfig to absolute path so ${configDir} paths type-check without baseUrl (<a href="https://redirect.github.com/nrwl/nx/pull/36445">#36445</a>)</li> <li><strong>misc:</strong> scan package projects for env vars (<a href="https://redirect.github.com/nrwl/nx/pull/36847">#36847</a>)</li> <li><strong>release:</strong> exclude AI coding agents from the changelog Thank You section (<a href="https://redirect.github.com/nrwl/nx/pull/36892">#36892</a>)</li> <li><strong>release:</strong> use the release group name when resolving the previous tag for fixed groups (<a href="https://redirect.github.com/nrwl/nx/pull/36554">#36554</a>)</li> <li><strong>repo:</strong> provision JDK 17 for Gradle builds with mise (<a href="https://redirect.github.com/nrwl/nx/pull/36965">#36965</a>)</li> <li><strong>repo:</strong> guard JAVA17_HOME against an uninstalled JDK (<a href="https://redirect.github.com/nrwl/nx/pull/36969">#36969</a>)</li> <li><strong>rspack:</strong> write the normalized cache option in NxAppRspackPlugin (<a href="https://redirect.github.com/nrwl/nx/pull/36905">#36905</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36878">#36878</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>AgentEnder <a href="https://github.com/AgentEnder"><code>@​AgentEnder</code></a></li> <li>Caleb Ukle</li> <li>Claude</li> <li>Craigory Coppola <a href="https://github.com/AgentEnder"><code>@​AgentEnder</code></a></li> <li>Denis Frenademetz <a href="https://github.com/skrtheboss"><code>@​skrtheboss</code></a></li> <li>Eduardo Speroni <a href="https://github.com/edusperoni"><code>@​edusperoni</code></a></li> <li>Federico Bartoli</li> <li>FrozenPandaz <a href="https://github.com/FrozenPandaz"><code>@​FrozenPandaz</code></a></li> <li>Jack Stevenson</li> <li>Jason Jean <a href="https://github.com/FrozenPandaz"><code>@​FrozenPandaz</code></a></li> <li>Jupiter Jayna <a href="https://github.com/sdjayna"><code>@​sdjayna</code></a></li> <li>Juri Strumpflohner <a href="https://github.com/juristr"><code>@​juristr</code></a></li> <li>Leosvel Pérez Espinosa <a href="https://github.com/leosvelperez"><code>@​leosvelperez</code></a></li> <li>Nicolas Beaussart <a href="https://github.com/beaussan"><code>@​beaussan</code></a></li> <li>ShwethaSundar</li> <li>Stephen Jayna</li> </ul> <h2>23.2.0 (2026-09-02)</h2> <h3>🚀 Features</h3> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nrwl/nx/commit/4008ffd1a523bc86413480f53a7fcfec974d9e46"><code>4008ffd</code></a> chore(repo): check the wasm target on PRs that touch rust (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36925">#36925</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/6e7f8278ca47c10d0470f444a8c4004967a85b64"><code>6e7f827</code></a> feat(core): report the cache location alongside usage (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36959">#36959</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/0a267e4e461bf53763c7716be0849b426cb780ff"><code>0a267e4</code></a> fix(core): avoid mutating target options when resolving configurations (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36934">#36934</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/f9ba81b5b2f2d78993b025132d6546cce9a81039"><code>f9ba81b</code></a> fix(core): restore the wasm walker imports dropped by a stray cfg attribute (...</li> <li><a href="https://github.com/nrwl/nx/commit/9469e56d032b6a3c419fd427e53c6016456f910a"><code>9469e56</code></a> fix(core): keep the cache in the workspace on CI (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36922">#36922</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/c0b2f2d8419c735f7dadb46f1e26f514d4b91445"><code>c0b2f2d</code></a> fix(core): report how a plugin worker was lost instead of always calling it a...</li> <li><a href="https://github.com/nrwl/nx/commit/90aab1728d8b662bf4abe482093ce449e72aaf84"><code>90aab17</code></a> fix(core): carry minimumReleaseAge into pruned pnpm deploy output (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36900">#36900</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/4871a959b9fe421616a271f41b71db782d9b0279"><code>4871a95</code></a> fix(core): read the pnpm 12 min-release-age policy instead of deferring to an...</li> <li><a href="https://github.com/nrwl/nx/commit/0ae906996ec7d299706a1e18851e89634e04b51e"><code>0ae9069</code></a> fix(core): release per-run process listeners and task history results (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36866">#36866</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/de37c5ebd1852fac700d70726326236ac398af3f"><code>de37c5e</code></a> fix(core): validate the migrations path before extracting package migrations ...</li> <li>Additional commits viewable in <a href="https://github.com/nrwl/nx/commits/23.2.1/packages/nx">compare view</a></li> </ul> </details> <br /> Updates `http-cache-semantics` from 4.2.0 to 4.3.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/kornelski/http-cache-semantics/commits">compare view</a></li> </ul> </details> <br /> Updates `proxy-addr` from 2.0.7 to 2.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/releases">proxy-addr's releases</a>.</em></p> <blockquote> <h2>2.0.8</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>Add OSSF scorecard action by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li>Fix ci pipeline and add missing Node.JS versions by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/26">jshttp/proxy-addr#26</a></li> <li>[StepSecurity] Apply security best practices by <a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/31">jshttp/proxy-addr#31</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/32">jshttp/proxy-addr#32</a></li> <li>build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/33">jshttp/proxy-addr#33</a></li> <li>build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/35">jshttp/proxy-addr#35</a></li> <li>build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/34">jshttp/proxy-addr#34</a></li> <li>build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/36">jshttp/proxy-addr#36</a></li> <li>chore: add funding to package.json by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/41">jshttp/proxy-addr#41</a></li> <li>build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/43">jshttp/proxy-addr#43</a></li> <li>build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/42">jshttp/proxy-addr#42</a></li> <li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/47">jshttp/proxy-addr#47</a></li> <li>build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/46">jshttp/proxy-addr#46</a></li> <li>build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/50">jshttp/proxy-addr#50</a></li> <li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/49">jshttp/proxy-addr#49</a></li> <li>build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/48">jshttp/proxy-addr#48</a></li> <li>build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/56">jshttp/proxy-addr#56</a></li> <li>build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/55">jshttp/proxy-addr#55</a></li> <li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/57">jshttp/proxy-addr#57</a></li> <li>build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/58">jshttp/proxy-addr#58</a></li> <li>Fix &quot;arugment&quot; typo in README by <a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li>build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/64">jshttp/proxy-addr#64</a></li> <li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/63">jshttp/proxy-addr#63</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/45">jshttp/proxy-addr#45</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/39">jshttp/proxy-addr#39</a></li> <li>chore(ci): npm-publish via reusable workflows by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> <li>refresh CI by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/69">jshttp/proxy-addr#69</a></li> <li>fix: typo by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/71">jshttp/proxy-addr#71</a></li> <li>Release: 2.0.8 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/70">jshttp/proxy-addr#70</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/carpasse"><code>@​carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li><a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li><a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li><a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li><a href="https://github.com/sheplu"><code>@​sheplu</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md">proxy-addr's changelog</a>.</em></p> <blockquote> <h1>2.0.8</h1> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610"><code>a11ad82</code></a> 2.0.8 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/70">#70</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965"><code>780911d</code></a> fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d"><code>92e103e</code></a> fix(ci): use publised as release trigger event (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/71">#71</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9"><code>3e5ac75</code></a> ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/69">#69</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c"><code>4b9db81</code></a> chore(ci): npm-publish via workflows (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/54">#54</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5"><code>655e895</code></a> build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/39">#39</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f"><code>50ce4d0</code></a> build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/45">#45</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24"><code>0fd347f</code></a> build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/63">#63</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55"><code>6a517fa</code></a> build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/64">#64</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd"><code>0d45e2a</code></a> Fix &quot;arugment&quot; typo in README (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/61">#61</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for proxy-addr since your current version.</p> </details> <br /> Updates `proxy-addr` from 2.0.7 to 2.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/releases">proxy-addr's releases</a>.</em></p> <blockquote> <h2>2.0.8</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>Add OSSF scorecard action by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li>Fix ci pipeline and add missing Node.JS versions by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/26">jshttp/proxy-addr#26</a></li> <li>[StepSecurity] Apply security best practices by <a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/31">jshttp/proxy-addr#31</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/32">jshttp/proxy-addr#32</a></li> <li>build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/33">jshttp/proxy-addr#33</a></li> <li>build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/35">jshttp/proxy-addr#35</a></li> <li>build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/34">jshttp/proxy-addr#34</a></li> <li>build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/36">jshttp/proxy-addr#36</a></li> <li>chore: add funding to package.json by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/41">jshttp/proxy-addr#41</a></li> <li>build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/43">jshttp/proxy-addr#43</a></li> <li>build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/42">jshttp/proxy-addr#42</a></li> <li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/47">jshttp/proxy-addr#47</a></li> <li>build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/46">jshttp/proxy-addr#46</a></li> <li>build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/50">jshttp/proxy-addr#50</a></li> <li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/49">jshttp/proxy-addr#49</a></li> <li>build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/48">jshttp/proxy-addr#48</a></li> <li>build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/56">jshttp/proxy-addr#56</a></li> <li>build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/55">jshttp/proxy-addr#55</a></li> <li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/57">jshttp/proxy-addr#57</a></li> <li>build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/58">jshttp/proxy-addr#58</a></li> <li>Fix &quot;arugment&quot; typo in README by <a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li>build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/64">jshttp/proxy-addr#64</a></li> <li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/63">jshttp/proxy-addr#63</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/45">jshttp/proxy-addr#45</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/39">jshttp/proxy-addr#39</a></li> <li>chore(ci): npm-publish via reusable workflows by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> <li>refresh CI by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/69">jshttp/proxy-addr#69</a></li> <li>fix: typo by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/71">jshttp/proxy-addr#71</a></li> <li>Release: 2.0.8 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/70">jshttp/proxy-addr#70</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/carpasse"><code>@​carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li><a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li><a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li><a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li><a href="https://github.com/sheplu"><code>@​sheplu</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md">proxy-addr's changelog</a>.</em></p> <blockquote> <h1>2.0.8</h1> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610"><code>a11ad82</code></a> 2.0.8 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/70">#70</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965"><code>780911d</code></a> fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d"><code>92e103e</code></a> fix(ci): use publised as release trigger event (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/71">#71</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9"><code>3e5ac75</code></a> ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/69">#69</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c"><code>4b9db81</code></a> chore(ci): npm-publish via workflows (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/54">#54</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5"><code>655e895</code></a> build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/39">#39</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f"><code>50ce4d0</code></a> build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/45">#45</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24"><code>0fd347f</code></a> build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/63">#63</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55"><code>6a517fa</code></a> build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/64">#64</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd"><code>0d45e2a</code></a> Fix &quot;arugment&quot; typo in README (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/61">#61</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for proxy-addr since your current version.</p> </details> <br /> Updates `proxy-addr` from 2.0.7 to 2.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/releases">proxy-addr's releases</a>.</em></p> <blockquote> <h2>2.0.8</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>Add OSSF scorecard action by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li>Fix ci pipeline and add missing Node.JS versions by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/26">jshttp/proxy-addr#26</a></li> <li>[StepSecurity] Apply security best practices by <a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/31">jshttp/proxy-addr#31</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/32">jshttp/proxy-addr#32</a></li> <li>build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/33">jshttp/proxy-addr#33</a></li> <li>build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/35">jshttp/proxy-addr#35</a></li> <li>build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/34">jshttp/proxy-addr#34</a></li> <li>build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/36">jshttp/proxy-addr#36</a></li> <li>chore: add funding to package.json by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/41">jshttp/proxy-addr#41</a></li> <li>build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/43">jshttp/proxy-addr#43</a></li> <li>build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/42">jshttp/proxy-addr#42</a></li> <li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/47">jshttp/proxy-addr#47</a></li> <li>build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/46">jshttp/proxy-addr#46</a></li> <li>build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/50">jshttp/proxy-addr#50</a></li> <li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/49">jshttp/proxy-addr#49</a></li> <li>build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/48">jshttp/proxy-addr#48</a></li> <li>build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/56">jshttp/proxy-addr#56</a></li> <li>build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/55">jshttp/proxy-addr#55</a></li> <li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/57">jshttp/proxy-addr#57</a></li> <li>build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/58">jshttp/proxy-addr#58</a></li> <li>Fix &quot;arugment&quot; typo in README by <a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li>build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/64">jshttp/proxy-addr#64</a></li> <li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/63">jshttp/proxy-addr#63</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/45">jshttp/proxy-addr#45</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/39">jshttp/proxy-addr#39</a></li> <li>chore(ci): npm-publish via reusable workflows by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> <li>refresh CI by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/69">jshttp/proxy-addr#69</a></li> <li>fix: typo by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/71">jshttp/proxy-addr#71</a></li> <li>Release: 2.0.8 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/70">jshttp/proxy-addr#70</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/carpasse"><code>@​carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li><a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li><a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li><a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li><a href="https://github.com/sheplu"><code>@​sheplu</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md">proxy-addr's changelog</a>.</em></p> <blockquote> <h1>2.0.8</h1> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610"><code>a11ad82</code></a> 2.0.8 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/70">#70</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965"><code>780911d</code></a> fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d"><code>92e103e</code></a> fix(ci): use publised as release trigger event (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/71">#71</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9"><code>3e5ac75</code></a> ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/69">#69</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c"><code>4b9db81</code></a> chore(ci): npm-publish via workflows (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/54">#54</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5"><code>655e895</code></a> build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/39">#39</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f"><code>50ce4d0</code></a> build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/45">#45</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24"><code>0fd347f</code></a> build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/63">#63</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55"><code>6a517fa</code></a> build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/64">#64</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd"><code>0d45e2a</code></a> Fix &quot;arugment&quot; typo in README (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/61">#61</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for proxy-addr since your current version.</p> </details> <br /> Updates `proxy-addr` from 2.0.7 to 2.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/releases">proxy-addr's releases</a>.</em></p> <blockquote> <h2>2.0.8</h2> <h2>Important</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>Add OSSF scorecard action by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li>Fix ci pipeline and add missing Node.JS versions by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/26">jshttp/proxy-addr#26</a></li> <li>[StepSecurity] Apply security best practices by <a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li>build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li>build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/31">jshttp/proxy-addr#31</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/32">jshttp/proxy-addr#32</a></li> <li>build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/33">jshttp/proxy-addr#33</a></li> <li>build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/35">jshttp/proxy-addr#35</a></li> <li>build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/34">jshttp/proxy-addr#34</a></li> <li>build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/36">jshttp/proxy-addr#36</a></li> <li>chore: add funding to package.json by <a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li>build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/41">jshttp/proxy-addr#41</a></li> <li>build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/43">jshttp/proxy-addr#43</a></li> <li>build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/42">jshttp/proxy-addr#42</a></li> <li>build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/47">jshttp/proxy-addr#47</a></li> <li>build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/46">jshttp/proxy-addr#46</a></li> <li>build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/50">jshttp/proxy-addr#50</a></li> <li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/49">jshttp/proxy-addr#49</a></li> <li>build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/48">jshttp/proxy-addr#48</a></li> <li>build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/56">jshttp/proxy-addr#56</a></li> <li>build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/55">jshttp/proxy-addr#55</a></li> <li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/57">jshttp/proxy-addr#57</a></li> <li>build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/58">jshttp/proxy-addr#58</a></li> <li>Fix &quot;arugment&quot; typo in README by <a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li>build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/64">jshttp/proxy-addr#64</a></li> <li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/63">jshttp/proxy-addr#63</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/45">jshttp/proxy-addr#45</a></li> <li>build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/39">jshttp/proxy-addr#39</a></li> <li>chore(ci): npm-publish via reusable workflows by <a href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> <li>refresh CI by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/69">jshttp/proxy-addr#69</a></li> <li>fix: typo by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/71">jshttp/proxy-addr#71</a></li> <li>Release: 2.0.8 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/70">jshttp/proxy-addr#70</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/carpasse"><code>@​carpasse</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/27">jshttp/proxy-addr#27</a></li> <li><a href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/29">jshttp/proxy-addr#29</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/30">jshttp/proxy-addr#30</a></li> <li><a href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/40">jshttp/proxy-addr#40</a></li> <li><a href="https://github.com/schiwekM"><code>@​schiwekM</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/61">jshttp/proxy-addr#61</a></li> <li><a href="https://github.com/sheplu"><code>@​sheplu</code></a> made their first contribution in <a href="https://redirect.github.com/jshttp/proxy-addr/pull/54">jshttp/proxy-addr#54</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md">proxy-addr's changelog</a>.</em></p> <blockquote> <h1>2.0.8</h1> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-90711">CVE-2026-90711</a> (<a href="https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h">GHSA-jqcg-44mw-7w3h</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jshttp/proxy-addr/commit/a11ad82545698af5c33e59f3ed0b52eab79bf610"><code>a11ad82</code></a> 2.0.8 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/70">#70</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965"><code>780911d</code></a> fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/92e103e3f3ab0467c8846cacea71f27dfc81091d"><code>92e103e</code></a> fix(ci): use publised as release trigger event (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/71">#71</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/3e5ac75d275d82606d33d6ac47c0ff43c2eccee9"><code>3e5ac75</code></a> ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/69">#69</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/4b9db8190923840eb732b752a70f3e5ff713768c"><code>4b9db81</code></a> chore(ci): npm-publish via workflows (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/54">#54</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/655e8950435ac457c586e8287da4d5993b7d0db5"><code>655e895</code></a> build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/39">#39</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/50ce4d09132a4c34f5485b52740ce879a9223b1f"><code>50ce4d0</code></a> build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/45">#45</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0fd347f5b342e7502da58a512dc998d4a59cea24"><code>0fd347f</code></a> build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/63">#63</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/6a517fa25c741cc107a90019df458b34f580ce55"><code>6a517fa</code></a> build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/64">#64</a>)</li> <li><a href="https://github.com/jshttp/proxy-addr/commit/0d45e2a88e82a2faf1148956b6457e3a6c99ebcd"><code>0d45e2a</code></a> Fix &quot;arugment&quot; typo in README (<a href="https://redirect.github.com/jshttp/proxy-addr/issues/61">#61</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for proxy-addr since your current version.</p> </details> <br />
1 parent ff25def commit c99590c

3 files changed

Lines changed: 239 additions & 85 deletions

File tree

  • packages/@aws-cdk-testing/framework-integ/test/aws-route53-targets/test
    • integ.elastic-beanstalk-environment-target-assets
    • integ.elastic-beanstalk-environment-target.js.snapshot/asset.d7a78a153245008bfd939d014432059dda6472aeb860364e38275597c53be2bd.elastic-beanstalk-environment-target-assets

‎packages/@aws-cdk-testing/framework-integ/test/aws-route53-targets/test/integ.elastic-beanstalk-environment-target-assets/package-lock.json‎

Lines changed: 8 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎packages/@aws-cdk-testing/framework-integ/test/aws-route53-targets/test/integ.elastic-beanstalk-environment-target.js.snapshot/asset.d7a78a153245008bfd939d014432059dda6472aeb860364e38275597c53be2bd.elastic-beanstalk-environment-target-assets/package-lock.json‎

Lines changed: 8 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)