Skip to content

chore: bump flatted from 3.3.3 to 3.4.2 in /plugin#75

Merged
jamesnrokt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/plugin/flatted-3.4.2
Jun 9, 2026
Merged

chore: bump flatted from 3.3.3 to 3.4.2 in /plugin#75
jamesnrokt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/plugin/flatted-3.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 21, 2026

Copy link
Copy Markdown
Contributor

Bumps flatted from 3.3.3 to 3.4.2.

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

@dependabot dependabot Bot requested a review from a team as a code owner March 21, 2026 10:29
@cursor

cursor Bot commented Mar 21, 2026

Copy link
Copy Markdown

PR Summary

Low Risk
Lockfile-only dev dependency bump with no application code changes; low risk aside from routine transitive tooling behavior.

Overview
Updates the plugin lockfile so transitive dev dependency flatted moves from 3.3.3 to 3.4.2 (resolved tarball and integrity in both node_modules and top-level lock entries).

Upstream 3.4.x includes a CWE-1321 (prototype pollution) fix; flatted is pulled in via flat-cache for lint/tooling, not runtime plugin behavior.

Reviewed by Cursor Bugbot for commit ac9721b. Bugbot is set up for automated code reviews on this repo. Configure here.

@jamesnrokt

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](WebReflection/flatted@v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/plugin/flatted-3.4.2 branch from a5c6bf9 to ac9721b Compare June 5, 2026 18:25
@jamesnrokt jamesnrokt merged commit a6d1284 into main Jun 9, 2026
10 of 11 checks passed
@jamesnrokt jamesnrokt deleted the dependabot/npm_and_yarn/plugin/flatted-3.4.2 branch June 9, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant