Skip to content

fix(deps): update dependency video.js to v7.14.3 [security] - abandoned#47

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-video.js-vulnerability
Open

fix(deps): update dependency video.js to v7.14.3 [security] - abandoned#47
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-video.js-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Sep 8, 2021

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
video.js (source) 7.13.3 -> 7.14.3 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23414

This affects the package video.js before 7.14.3.
The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.


Release Notes

videojs/video.js

v7.14.3

Compare Source

Bug Fixes

v7.14.2

Compare Source

Bug Fixes
  • dom: in removeClass, check element for null in case of a disposed player (#​6701) (2990cc7)

v7.14.1

Compare Source

Bug Fixes
Chores
  • use setup-node cache and remove individual cache step (#​7310) (fab6e87)
Documentation
  • react: Added a functional React component using React.useEffect (#​7203) (2360236)

v7.14.0

Compare Source

Features

7.13.4 (2021-06-30)

Bug Fixes
Chores

7.13.3 (2021-06-23)

Chores
  • republish with VHS 2.9.1 (4b50f82)

7.13.2 (2021-06-22)

Bug Fixes

7.13.1 (2021-06-14)

Bug Fixes

v7.13.4

Compare Source

Bug Fixes
Chores

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Sep 8, 2021
@vercel
Copy link
Copy Markdown

vercel bot commented Sep 8, 2021

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/damienrobinson/barry/4nDEynoo9bJa2PsG4Ld91swVskB6
✅ Preview: Failed

[Deployment for daf19bd failed]

@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Mar 24, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@renovate renovate bot changed the title fix(deps): update dependency video.js to v7.14.3 [security] fix(deps): update dependency video.js to v7.14.3 [security] - abandoned Mar 27, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Mar 27, 2026

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant