Visitar URL original
Bump postgresql from 42.5.0 to 42.5.1 in /postgresw by dependabot[bot] · Pull Request #636 · ArcadeData/arcadedb · GitHub
Skip to content

Bump postgresql from 42.5.0 to 42.5.1 in /postgresw - #636

Merged
mergify[bot] merged 1 commit into
mainfrom
dependabot/maven/postgresw/org.postgresql-postgresql-42.5.1
Dec 11, 2022
Merged

mergify[bot] merged 1 commit into
mainfrom
dependabot/maven/postgresw/org.postgresql-postgresql-42.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 23, 2022

Copy link
Copy Markdown
Contributor

Bumps postgresql from 42.5.0 to 42.5.1.

Changelog

Sourced from postgresql's changelog.

Changelog

Notable changes since version 42.0.0, read the complete History of Changes.

The format is based on Keep a Changelog.

[Unreleased]

Changed

Added

Fixed

[42.5.1] (2022-11-21 15:21:59 -0500)

Security

  • security: StreamWrapper spills to disk if setText, or setBytea sends very large Strings or arrays to the server. createTempFile creates a file which can be read by other users on unix like systems (Not macos). This has been fixed in this version fixes CVE-2022-41946 see the security advisory for more details. Reported by Jonathan Leitschuh This has been fixed in versions 42.5.1, 42.4.3 42.3.8, 42.2.27.jre7. Note there is no fix for 42.2.26.jre6. See the security advisory for work arounds.

Fixed

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postgresql](https://github.com/pgjdbc/pgjdbc) from 42.5.0 to 42.5.1.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.5.0...REL42.5.1)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java labels Nov 23, 2022
@mergify
mergify Bot merged commit 80d874b into main Dec 11, 2022
@dependabot
dependabot Bot deleted the dependabot/maven/postgresw/org.postgresql-postgresql-42.5.1 branch December 11, 2022 15:59
mergify Bot added a commit that referenced this pull request Dec 8, 2025
….14 to 5.3.15 in /studio in the build-tools group [skip ci]

Bumps the build-tools group in /studio with 1 update: [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin).
Updates `terser-webpack-plugin` from 5.3.14 to 5.3.15
Release notes

*Sourced from [terser-webpack-plugin's releases](https://github.com/webpack/terser-webpack-plugin/releases).*

> v5.3.15
> -------
>
> ### [5.3.15](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15) (2025-12-05)
>
> ### Bug Fixes
>
> * catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639)) ([586af0a](webpack/minimizer-webpack-plugin@586af0a))
> * respect errors and warnings from minimizer without code ([8607f79](webpack/minimizer-webpack-plugin@8607f79))


Changelog

*Sourced from [terser-webpack-plugin's changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md).*

> ### [5.3.15](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15) (2025-12-05)
>
> ### Bug Fixes
>
> * catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639)) ([586af0a](webpack/minimizer-webpack-plugin@586af0a))
> * respect errors and warnings from minimizer without code ([8607f79](webpack/minimizer-webpack-plugin@8607f79))


Commits

* [`f337cee`](webpack/minimizer-webpack-plugin@f337cee) chore(release): 5.3.15
* [`8607f79`](webpack/minimizer-webpack-plugin@8607f79) fix: respect errors and warnings from minimizer without code
* [`30182a3`](webpack/minimizer-webpack-plugin@30182a3) chore(deps): bump js-yaml ([#640](https://redirect.github.com/webpack/terser-webpack-plugin/issues/640))
* [`db35463`](webpack/minimizer-webpack-plugin@db35463) docs: update contributing
* [`586af0a`](webpack/minimizer-webpack-plugin@586af0a) fix: catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639))
* [`15ccc60`](webpack/minimizer-webpack-plugin@15ccc60) chore: migrate from contrib ([#638](https://redirect.github.com/webpack/terser-webpack-plugin/issues/638))
* [`17bb741`](webpack/minimizer-webpack-plugin@17bb741) chore: update github actions/checkout from v4 to v5 ([#637](https://redirect.github.com/webpack/terser-webpack-plugin/issues/637))
* [`00c75dc`](webpack/minimizer-webpack-plugin@00c75dc) chore: eslint migration ([#636](https://redirect.github.com/webpack/terser-webpack-plugin/issues/636))
* [`c46400a`](webpack/minimizer-webpack-plugin@c46400a) chore(deps-dev): bump form-data from 3.0.1 to 3.0.4 ([#635](https://redirect.github.com/webpack/terser-webpack-plugin/issues/635))
* [`b3c9d33`](webpack/minimizer-webpack-plugin@b3c9d33) docs: improving typos in ISSUE\_TEMPLATE files ([#633](https://redirect.github.com/webpack/terser-webpack-plugin/issues/633))
* Additional commits viewable in [compare view](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=terser-webpack-plugin&package-manager=npm\_and\_yarn&previous-version=5.3.14&new-version=5.3.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
tae898 pushed a commit to humemai/arcadedb-embedded-python that referenced this pull request Jun 28, 2026
…stgresw/org.postgresql-postgresql-42.5.1

Bump postgresql from 42.5.0 to 42.5.1 in /postgresw
tae898 pushed a commit to humemai/arcadedb-embedded-python that referenced this pull request Jun 28, 2026
….14 to 5.3.15 in /studio in the build-tools group [skip ci]

Bumps the build-tools group in /studio with 1 update: [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin).
Updates `terser-webpack-plugin` from 5.3.14 to 5.3.15
Release notes

*Sourced from [terser-webpack-plugin's releases](https://github.com/webpack/terser-webpack-plugin/releases).*

> v5.3.15
> -------
>
> ### [5.3.15](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15) (2025-12-05)
>
> ### Bug Fixes
>
> * catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639)) ([586af0a](webpack/minimizer-webpack-plugin@586af0a))
> * respect errors and warnings from minimizer without code ([8607f79](webpack/minimizer-webpack-plugin@8607f79))


Changelog

*Sourced from [terser-webpack-plugin's changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md).*

> ### [5.3.15](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15) (2025-12-05)
>
> ### Bug Fixes
>
> * catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639)) ([586af0a](webpack/minimizer-webpack-plugin@586af0a))
> * respect errors and warnings from minimizer without code ([8607f79](webpack/minimizer-webpack-plugin@8607f79))


Commits

* [`f337cee`](webpack/minimizer-webpack-plugin@f337cee) chore(release): 5.3.15
* [`8607f79`](webpack/minimizer-webpack-plugin@8607f79) fix: respect errors and warnings from minimizer without code
* [`30182a3`](webpack/minimizer-webpack-plugin@30182a3) chore(deps): bump js-yaml ([#640](https://redirect.github.com/webpack/terser-webpack-plugin/issues/640))
* [`db35463`](webpack/minimizer-webpack-plugin@db35463) docs: update contributing
* [`586af0a`](webpack/minimizer-webpack-plugin@586af0a) fix: catch error when loading minimizers ([#639](https://redirect.github.com/webpack/terser-webpack-plugin/issues/639))
* [`15ccc60`](webpack/minimizer-webpack-plugin@15ccc60) chore: migrate from contrib ([#638](https://redirect.github.com/webpack/terser-webpack-plugin/issues/638))
* [`17bb741`](webpack/minimizer-webpack-plugin@17bb741) chore: update github actions/checkout from v4 to v5 ([#637](https://redirect.github.com/webpack/terser-webpack-plugin/issues/637))
* [`00c75dc`](webpack/minimizer-webpack-plugin@00c75dc) chore: eslint migration ([ArcadeData#636](https://redirect.github.com/webpack/terser-webpack-plugin/issues/636))
* [`c46400a`](webpack/minimizer-webpack-plugin@c46400a) chore(deps-dev): bump form-data from 3.0.1 to 3.0.4 ([ArcadeData#635](https://redirect.github.com/webpack/terser-webpack-plugin/issues/635))
* [`b3c9d33`](webpack/minimizer-webpack-plugin@b3c9d33) docs: improving typos in ISSUE\_TEMPLATE files ([ArcadeData#633](https://redirect.github.com/webpack/terser-webpack-plugin/issues/633))
* Additional commits viewable in [compare view](webpack/minimizer-webpack-plugin@v5.3.14...v5.3.15)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=terser-webpack-plugin&package-manager=npm\_and\_yarn&previous-version=5.3.14&new-version=5.3.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
mergify Bot added a commit that referenced this pull request Jul 19, 2026
…0.0-rc.9 [skip ci]

Bumps [io.github.jbellis:jvector](https://github.com/jbellis/jvector) from 4.0.0-rc.8-hf1 to 4.0.0-rc.9.
Changelog

*Sourced from [io.github.jbellis:jvector's changelog](https://github.com/datastax/jvector/blob/main/CHANGELOG.md).*

> #### [4.0.0-rc.9](datastax/jvector@4.0.0-rc.8-hf1...4.0.0-rc.9)
>
> * 4.0.0-rc.9 [`[#698](https://github.com/jbellis/jvector/issues/698)`](https://redirect.github.com/datastax/jvector/pull/698)
> * Expose NVQ from its graph feature [`[#693](https://github.com/jbellis/jvector/issues/693)`](https://redirect.github.com/datastax/jvector/pull/693)
> * Add support for empty graphs [`[#685](https://github.com/jbellis/jvector/issues/685)`](https://redirect.github.com/datastax/jvector/pull/685)
> * Add release notes for PR [#681](https://redirect.github.com/jbellis/jvector/issues/681) [`[#683](https://github.com/jbellis/jvector/issues/683)`](https://redirect.github.com/datastax/jvector/pull/683)
> * Disable graph search pruning [`[#686](https://github.com/jbellis/jvector/issues/686)`](https://redirect.github.com/datastax/jvector/pull/686)
> * Allow bench workflow to run on PRs from forks [`[#688](https://github.com/jbellis/jvector/issues/688)`](https://redirect.github.com/datastax/jvector/pull/688)
> * Use bulk writes instead of per-element writes in vector serialization [`[#681](https://github.com/jbellis/jvector/issues/681)`](https://redirect.github.com/datastax/jvector/pull/681)
> * Streaming N:1 compaction [`[#659](https://github.com/jbellis/jvector/issues/659)`](https://redirect.github.com/datastax/jvector/pull/659)
> * Release docs [`[#677](https://github.com/jbellis/jvector/issues/677)`](https://redirect.github.com/datastax/jvector/pull/677)
> * Release perf artifact [`[#673](https://github.com/jbellis/jvector/issues/673)`](https://redirect.github.com/datastax/jvector/pull/673)
> * Revert "Update buckets ([#672](https://redirect.github.com/jbellis/jvector/issues/672))" [`[#675](https://github.com/jbellis/jvector/issues/675)`](https://redirect.github.com/datastax/jvector/pull/675)
> * Record index build time in buildInMemory path [`[#667](https://github.com/jbellis/jvector/issues/667)`](https://redirect.github.com/datastax/jvector/pull/667)
> * Add NVQ example [`[#663](https://github.com/jbellis/jvector/issues/663)`](https://redirect.github.com/datastax/jvector/pull/663)
> * Add offheap memory tracking to Bench YAML reports [`[#671](https://github.com/jbellis/jvector/issues/671)`](https://redirect.github.com/datastax/jvector/pull/671)
> * Update buckets [`[#672](https://github.com/jbellis/jvector/issues/672)`](https://redirect.github.com/datastax/jvector/pull/672)
> * Adding memory stats to regression benchmarks [`[#670](https://github.com/jbellis/jvector/issues/670)`](https://redirect.github.com/datastax/jvector/pull/670)
> * Add openai 1 million vector datasets [`[#669](https://github.com/jbellis/jvector/issues/669)`](https://redirect.github.com/datastax/jvector/pull/669)
> * Replace \_\_cpuid\_check for AVX512 with compiler builtin cpu features [`[#655](https://github.com/jbellis/jvector/issues/655)`](https://redirect.github.com/datastax/jvector/pull/655)
> * Update regression datasets [`[#658](https://github.com/jbellis/jvector/issues/658)`](https://redirect.github.com/datastax/jvector/pull/658)
> * Improve performance and checking of recall and precision measurements [`[#647](https://github.com/jbellis/jvector/issues/647)`](https://redirect.github.com/datastax/jvector/pull/647)
> * Catalog-driven dataset loader [`[#654](https://github.com/jbellis/jvector/issues/654)`](https://redirect.github.com/datastax/jvector/pull/654)
> * Make benchmark dataset scrubbing metadata-driven and unify HDF5/MFD load behavior [`[#653](https://github.com/jbellis/jvector/issues/653)`](https://redirect.github.com/datastax/jvector/pull/653)
> * Fix for bug causing tests to use FP vectors in search [`[#645](https://github.com/jbellis/jvector/issues/645)`](https://redirect.github.com/datastax/jvector/pull/645)
> * add DataSetInfo and some guards around loading errors [`[#637](https://github.com/jbellis/jvector/issues/637)`](https://redirect.github.com/datastax/jvector/pull/637)
> * Extend benchmark logging to include build and search compressor information [`[#641](https://github.com/jbellis/jvector/issues/641)`](https://redirect.github.com/datastax/jvector/pull/641)
> * Added link to JV tutorials in the README [`[#644](https://github.com/jbellis/jvector/issues/644)`](https://redirect.github.com/datastax/jvector/pull/644)
> * Multidirectory [`[#634](https://github.com/jbellis/jvector/issues/634)`](https://redirect.github.com/datastax/jvector/pull/634)
> * Add quantization timing metrics to YAML benchmarking [`[#636](https://github.com/jbellis/jvector/issues/636)`](https://redirect.github.com/datastax/jvector/pull/636)
> * Add tutorials and a guide for running benchmarks [`[#617](https://github.com/jbellis/jvector/issues/617)`](https://redirect.github.com/datastax/jvector/pull/617)
> * Fix file-handle leak by closing BenchmarkDiagnostics (WatchService/inotify) [`[#631](https://github.com/jbellis/jvector/issues/631)`](https://redirect.github.com/datastax/jvector/pull/631)
> * Introduce run.yml policy and run-scoped experiment logging for Grid benchmarks [`[#625](https://github.com/jbellis/jvector/issues/625)`](https://redirect.github.com/datastax/jvector/pull/625)
> * Start development on 4.0.0-rc.9-SNAPSHOT [`[#628](https://github.com/jbellis/jvector/issues/628)`](https://redirect.github.com/datastax/jvector/pull/628)
> * added policy for rebasing on main [`a03dd60`](datastax/jvector@a03dd60)
> * add ashkrisk to CODEOWNERS [`c852384`](datastax/jvector@c852384)


Commits

* [`b030c76`](datastax/jvector@b030c76) chore: update changelog for 4.0.0-rc.9 ([#699](https://redirect.github.com/jbellis/jvector/issues/699))
* [`177c17d`](datastax/jvector@177c17d) 4.0.0-rc.9 ([#698](https://redirect.github.com/jbellis/jvector/issues/698))
* [`325b97d`](datastax/jvector@325b97d) Expose NVQ from its graph feature ([#693](https://redirect.github.com/jbellis/jvector/issues/693))
* [`838d74a`](datastax/jvector@838d74a) Add support for empty graphs ([#685](https://redirect.github.com/jbellis/jvector/issues/685))
* [`26b31bb`](datastax/jvector@26b31bb) Add release notes for PR [#681](https://redirect.github.com/jbellis/jvector/issues/681) ([#683](https://redirect.github.com/jbellis/jvector/issues/683))
* [`f094cc7`](datastax/jvector@f094cc7) Disable graph search pruning ([#686](https://redirect.github.com/jbellis/jvector/issues/686))
* [`b86a94c`](datastax/jvector@b86a94c) Allow bench workflow to run on PRs from forks ([#688](https://redirect.github.com/jbellis/jvector/issues/688))
* [`c059e86`](datastax/jvector@c059e86) Use bulk writes instead of per-element writes in vector serialization ([#681](https://redirect.github.com/jbellis/jvector/issues/681))
* [`f801a52`](datastax/jvector@f801a52) Streaming N:1 compaction ([#659](https://redirect.github.com/jbellis/jvector/issues/659))
* [`47ebe61`](datastax/jvector@47ebe61) Release docs ([#677](https://redirect.github.com/jbellis/jvector/issues/677))
* Additional commits viewable in [compare view](datastax/jvector@4.0.0-rc.8-hf1...4.0.0-rc.9)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=io.github.jbellis:jvector&package-manager=maven&previous-version=4.0.0-rc.8-hf1&new-version=4.0.0-rc.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify Bot added a commit that referenced this pull request Jul 29, 2026
…o 5.24.4 in /studio [skip ci]

Bumps [enhanced-resolve](https://github.com/webpack/enhanced-resolve) from 5.24.3 to 5.24.4.
Release notes

*Sourced from [enhanced-resolve's releases](https://github.com/webpack/enhanced-resolve/releases).*

> v5.24.4
> -------
>
> ### Patch Changes
>
> * Keep the original request resolvable when `extensionAlias` lists its own extension. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#641](https://redirect.github.com/webpack/enhanced-resolve/pull/641))
> * Fix string `restrictions` boundary checks: a restriction ending with a separator no longer rejects everything inside it, restrictions are normalized before they are compared, and a Windows path now matches the way `path.win32` does, treating `/` and `\` as interchangeable and comparing case-insensitively, while `\` stays a filename character in a posix path. The same comparison backs `tsconfig` path matching. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#643](https://redirect.github.com/webpack/enhanced-resolve/pull/643))
> * Treat a UNC path (`\\server\share\…`) as a Windows path, so it normalizes, joins and walks up with `path.win32` semantics instead of being taken for a bare module request. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#644](https://redirect.github.com/webpack/enhanced-resolve/pull/644))


Changelog

*Sourced from [enhanced-resolve's changelog](https://github.com/webpack/enhanced-resolve/blob/main/CHANGELOG.md).*

> 5.24.4
> ------
>
> ### Patch Changes
>
> * Keep the original request resolvable when `extensionAlias` lists its own extension. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#641](https://redirect.github.com/webpack/enhanced-resolve/pull/641))
> * Fix string `restrictions` boundary checks: a restriction ending with a separator no longer rejects everything inside it, restrictions are normalized before they are compared, and a Windows path now matches the way `path.win32` does, treating `/` and `\` as interchangeable and comparing case-insensitively, while `\` stays a filename character in a posix path. The same comparison backs `tsconfig` path matching. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#643](https://redirect.github.com/webpack/enhanced-resolve/pull/643))
> * Treat a UNC path (`\\server\share\…`) as a Windows path, so it normalizes, joins and walks up with `path.win32` semantics instead of being taken for a bare module request. (by [`@​alexander-akait`](https://github.com/alexander-akait) in [#644](https://redirect.github.com/webpack/enhanced-resolve/pull/644))


Commits

* [`24c3521`](webpack/enhanced-resolve@24c3521) chore(release): new release ([#642](https://redirect.github.com/webpack/enhanced-resolve/issues/642))
* [`10fcea0`](webpack/enhanced-resolve@10fcea0) fix: route UNC paths through win32 instead of posix ([#644](https://redirect.github.com/webpack/enhanced-resolve/issues/644))
* [`d8693b6`](webpack/enhanced-resolve@d8693b6) fix: correct string `restrictions` path boundary checks ([#643](https://redirect.github.com/webpack/enhanced-resolve/issues/643))
* [`5e2e296`](webpack/enhanced-resolve@5e2e296) fix: keep the original request resolvable when extensionAlias lists its own e...
* [`2bcac6e`](webpack/enhanced-resolve@2bcac6e) chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the dependencies gr...
* [`9997401`](webpack/enhanced-resolve@9997401) chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 ([#636](https://redirect.github.com/webpack/enhanced-resolve/issues/636))
* [`d5f925d`](webpack/enhanced-resolve@d5f925d) chore(deps-dev): bump axios from 1.17.0 to 1.18.1 ([#635](https://redirect.github.com/webpack/enhanced-resolve/issues/635))
* [`a52eed3`](webpack/enhanced-resolve@a52eed3) chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
* See full diff in [compare view](webpack/enhanced-resolve@v5.24.3...v5.24.4)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=enhanced-resolve&package-manager=npm\_and\_yarn&previous-version=5.24.3&new-version=5.24.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant