Repository navigation
Conversation
|
Hi @05419323004! Thank you for your pull request and welcome to our community. Action RequiredIn order to merge any pull request (code, docs, etc.), we require contributors to sign our Contributor License Agreement, and we don't seem to have one on file for you. ProcessIn order for us to review and merge your suggested changes, please sign at https://code.facebook.com/cla. If you are contributing on behalf of someone else (eg your employer), the individual CLA may not be sufficient and your employer may need to sign the corporate CLA. Once the CLA is signed, our tooling will perform checks and validations. Afterwards, the pull request will be tagged with If you have received this in error or have any questions, please contact us at [email protected]. Thanks! |
Summary: Bumps [[https://github.com/jshttp/proxy-addr | proxy-addr]] from 2.0.7 to 2.0.8. == Release notes == //Sourced from [[https://github.com/jshttp/proxy-addr/releases | proxy-addr's releases]].// > **2.0.8** > > **Important** > > - Fix [[https://www.cve.org/CVERecord?id=CVE-2026-90711 | CVE-2026-90711]] ([[GHSA-jqcg-44mw-7w3h | GHSA-jqcg-44mw-7w3h]]) > > **What's Changed** > > - Add OSSF scorecard action by [[https://github.com/carpasse | @carpasse]] in [[jshttp/proxy-addr#27 | jshttp/proxy-addr#27]] > - Fix ci pipeline and add missing Node.JS versions by [[https://github.com/carpasse | @carpasse]] in [[jshttp/proxy-addr#26 | jshttp/proxy-addr#26]] > - [StepSecurity] Apply security best practices by [[https://github.com/step-security-bot | @step-security-bot]] in [[jshttp/proxy-addr#29 | jshttp/proxy-addr#29]] > - build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#30 | jshttp/proxy-addr#30]] > - build(deps): bump github/codeql-action from 2.23.2 to 3.28.18 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#31 | jshttp/proxy-addr#31]] > - build(deps-dev): bump eslint-plugin-import from 2.23.4 to 2.31.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#32 | jshttp/proxy-addr#32]] > - build(deps): bump ossf/scorecard-action from 2.0.6 to 2.4.2 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#33 | jshttp/proxy-addr#33]] > - build(deps): bump actions/upload-artifact from 3.1.3 to 4.6.2 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#35 | jshttp/proxy-addr#35]] > - build(deps-dev): bump deep-equal from 1.0.1 to 1.1.2 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#34 | jshttp/proxy-addr#34]] > - build(deps-dev): bump eslint-plugin-markdown from 2.2.0 to 2.2.1 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#36 | jshttp/proxy-addr#36]] > - chore: add funding to package.json by [[https://github.com/Phillip9587 | @Phillip9587]] in [[jshttp/proxy-addr#40 | jshttp/proxy-addr#40]] > - build(deps): bump github/codeql-action from 3.28.18 to 3.29.5 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#41 | jshttp/proxy-addr#41]] > - build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#43 | jshttp/proxy-addr#43]] > - build(deps): bump actions/checkout from 3.6.0 to 5.0.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#42 | jshttp/proxy-addr#42]] > - build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#47 | jshttp/proxy-addr#47]] > - build(deps): bump github/codeql-action from 3.29.11 to 4.31.2 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#46 | jshttp/proxy-addr#46]] > - build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#50 | jshttp/proxy-addr#50]] > - build(deps): bump github/codeql-action from 4.31.2 to 4.31.5 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#49 | jshttp/proxy-addr#49]] > - build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#48 | jshttp/proxy-addr#48]] > - build(deps): bump actions/checkout from 6.0.0 to 6.0.2 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#56 | jshttp/proxy-addr#56]] > - build(deps): bump github/codeql-action from 4.31.5 to 4.32.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#55 | jshttp/proxy-addr#55]] > - build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#57 | jshttp/proxy-addr#57]] > - build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#58 | jshttp/proxy-addr#58]] > - Fix "arugment" typo in README by [[https://github.com/schiwekM | @schiwekM]] in [[jshttp/proxy-addr#61 | jshttp/proxy-addr#61]] > - build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#64 | jshttp/proxy-addr#64]] > - build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#63 | jshttp/proxy-addr#63]] > - build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#45 | jshttp/proxy-addr#45]] > - build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 by [[https://github.com/dependabot | @dependabot]][bot] in [[jshttp/proxy-addr#39 | jshttp/proxy-addr#39]] > - chore(ci): npm-publish via reusable workflows by [[https://github.com/sheplu | @sheplu]] in [[jshttp/proxy-addr#54 | jshttp/proxy-addr#54]] > - refresh CI by [[https://github.com/UlisesGascon | @UlisesGascon]] in [[jshttp/proxy-addr#69 | jshttp/proxy-addr#69]] > - fix: typo by [[https://github.com/UlisesGascon | @UlisesGascon]] in [[jshttp/proxy-addr#71 | jshttp/proxy-addr#71]] > - Release: 2.0.8 by [[https://github.com/UlisesGascon | @UlisesGascon]] in [[jshttp/proxy-addr#70 | jshttp/proxy-addr#70]] > > **New Contributors** > > - [[https://github.com/carpasse | @carpasse]] made their first contribution in [[jshttp/proxy-addr#27 | jshttp/proxy-addr#27]] > - [[https://github.com/step-security-bot | @step-security-bot]] made their first contribution in [[jshttp/proxy-addr#29 | jshttp/proxy-addr#29]] > - [[https://github.com/dependabot | @dependabot]][bot] made their first contribution in [[jshttp/proxy-addr#30 | jshttp/proxy-addr#30]] > - [[https://github.com/Phillip9587 | @Phillip9587]] made their first contribution in [[jshttp/proxy-addr#40 | jshttp/proxy-addr#40]] > - [[https://github.com/schiwekM | @schiwekM]] made their first contribution in [[jshttp/proxy-addr#61 | jshttp/proxy-addr#61]] > - [[https://github.com/sheplu | @sheplu]] made their first contribution in [[jshttp/proxy-addr#54 | jshttp/proxy-addr#54]] > > **Full Changelog**: jshttp/proxy-addr@v2.0.7...v2.0.8 == Changelog == //Sourced from [[https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md | proxy-addr's changelog]].// > **2.0.8** > > - Fix [[https://www.cve.org/CVERecord?id=CVE-2026-90711 | CVE-2026-90711]] ([[GHSA-jqcg-44mw-7w3h | GHSA-jqcg-44mw-7w3h]]) == Commits == - [[jshttp/proxy-addr@a11ad82 | a11ad82]] 2.0.8 ([[jshttp/proxy-addr#70 | #70]]) - [[jshttp/proxy-addr@780911d | 780911d]] fix: reject IPv4 trust via mapped IPv6 subnets with a short prefix - [[jshttp/proxy-addr@92e103e | 92e103e]] fix(ci): use publised as release trigger event ([[jshttp/proxy-addr#71 | #71]]) - [[jshttp/proxy-addr@3e5ac75 | 3e5ac75]] ci: merge coverage via artifacts, disable fail-fast, add Node.js 23-26 ([[jshttp/proxy-addr#69 | #69]]) - [[jshttp/proxy-addr@4b9db81 | 4b9db81]] chore(ci): npm-publish via workflows ([[jshttp/proxy-addr#54 | #54]]) - [[jshttp/proxy-addr@655e895 | 655e895]] build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 ([[jshttp/proxy-addr#39 | #39]]) - [[jshttp/proxy-addr@50ce4d0 | 50ce4d0]] build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 ([[jshttp/proxy-addr#45 | #45]]) - [[jshttp/proxy-addr@0fd347f | 0fd347f]] build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ([[jshttp/proxy-addr#63 | #63]]) - [[jshttp/proxy-addr@6a517fa | 6a517fa]] build(deps): bump github/codeql-action from 4.32.4 to 4.36.0 ([[jshttp/proxy-addr#64 | #64]]) - [[jshttp/proxy-addr@0d45e2a | 0d45e2a]] Fix "arugment" typo in README ([[jshttp/proxy-addr#61 | #61]]) - Additional commits viewable in [[jshttp/proxy-addr@v2.0.7...v2.0.8 | compare view]] == Maintainer changes == This version was pushed to npm by [[https://www.npmjs.com/~GitHub%20Actions | GitHub Actions]], a new releaser for proxy-addr since your current version. Pull Request resolved: #159 Reviewed By: boujeepossum Differential Revision: D124273538 Pulled By: JacksonGL fbshipit-source-id: 6a06bb9ac8395ba2225ee76fab79fb9099bb16f1
No description provided.