Skip to content

Bump form-data and mattermost-redux in /webapp - #591

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webapp/multi-ed0e2ff5bf
Closed

Bump form-data and mattermost-redux in /webapp#591
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webapp/multi-ed0e2ff5bf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2025

Copy link
Copy Markdown
Contributor

Bumps form-data to 4.0.4 and updates ancestor dependency mattermost-redux. These dependencies need to be updated together.

Updates form-data from 4.0.1 to 4.0.4

Changelog

Sourced from form-data's changelog.

v4.0.4 - 2025-07-16

Commits

  • [meta] add auto-changelog 811f682
  • [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76
  • [Fix] Switch to using crypto random for boundary values 3d17230
  • [Tests] fix linting errors 5e34080
  • [meta] actually ensure the readme backup isn’t published 316c82b
  • [Dev Deps] update @ljharb/eslint-config 58c25d7
  • [meta] fix readme capitalization 2300ca1

v4.0.3 - 2025-06-05

Fixed

Commits

  • [eslint] use a shared config 426ba9a
  • [eslint] fix some spacing issues 2094191
  • [Refactor] use hasown 81ab41b
  • [Fix] validate boundary type in setBoundary() method 8d8e469
  • [Tests] add tests to check the behavior of getBoundary with non-strings 837b8a1
  • [Dev Deps] remove unused deps 870e4e6
  • [meta] remove local commit hooks e6e83cc
  • [Dev Deps] update eslint 4066fd6
  • [meta] fix scripts to use prepublishOnly c4bbb13

v4.0.2 - 2025-02-14

Merged

Fixed

Commits

  • Merge tags v2.5.3 and v3.0.3 92613b9
  • [Tests] migrate from travis to GHA 806eda7
  • [Tests] migrate from travis to GHA 8fdb3bc

... (truncated)

Commits
  • 41996f5 v4.0.4
  • 316c82b [meta] actually ensure the readme backup isn’t published
  • 2300ca1 [meta] fix readme capitalization
  • 811f682 [meta] add auto-changelog
  • 5e34080 [Tests] fix linting errors
  • 1d11a76 [Tests] handle predict-v8-randomness failures in node < 17 and node > 23
  • 58c25d7 [Dev Deps] update @ljharb/eslint-config
  • 3d17230 [Fix] Switch to using crypto random for boundary values
  • d8d67dc v4.0.3
  • e6e83cc [meta] remove local commit hooks
  • Additional commits viewable in compare view

Updates mattermost-redux from 5.33.1 to 10.8.0

Release notes

Sourced from mattermost-redux's releases.

v10.8.0

Mattermost Platform Release 10.8.0 contains multiple new quality of life improvements.

v10.8.0-rc3

Mattermost Platform Release 10.8.0-rc3

v10.8.0-rc2

Mattermost Platform Release 10.8.0-rc2

v10.8.0-rc1

Mattermost Platform Release 10.8.0-rc1

v10.7.5-rc4

Mattermost Platform Release 10.7.5-rc4

v10.7.5-rc3

Mattermost Platform Release 10.7.5-rc3

v10.7.5-rc2

Mattermost Platform Release 10.7.5-rc2

v10.7.5-rc1

Mattermost Platform Release 10.7.5-rc1

v10.7.4

Mattermost Platform Release 10.7.4 contains high severity level security fixes.

v10.7.4-rc1

Mattermost Platform Release 10.7.4-rc1

v10.7.3

Mattermost Platform Release 10.7.3 contains medium to critical level security fixes.

v10.7.3-rc1

Mattermost Platform Release 10.7.3-rc1

v10.7.2

Mattermost Platform Release 10.7.2 contains low to medium level security fixes.

v10.7.2-rc1

Mattermost Platform Release 10.7.2-rc1

v10.7.1

Mattermost Platform Release 10.7.1 contains low to medium level security fixes.

v10.7.0

Mattermost Platform Release 10.7.0 contains multiple new quality of life improvements.

v10.7.0-rc2

Mattermost Platform Release 10.7.0-rc2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by hmhealey, a new releaser for mattermost-redux since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [form-data](https://github.com/form-data/form-data) to 4.0.4 and updates ancestor dependency [mattermost-redux](https://github.com/mattermost/mattermost/tree/HEAD/webapp/platform/mattermost-redux). These dependencies need to be updated together.


Updates `form-data` from 4.0.1 to 4.0.4
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.1...v4.0.4)

Updates `mattermost-redux` from 5.33.1 to 10.8.0
- [Release notes](https://github.com/mattermost/mattermost/releases)
- [Changelog](https://github.com/mattermost/mattermost/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mattermost/mattermost/commits/mattermost-redux@10.8.0/webapp/platform/mattermost-redux)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
- dependency-name: mattermost-redux
  dependency-version: 10.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2025

Copy link
Copy Markdown
Contributor Author

Reviewers

The following users could not be added as reviewers: manland. Either the username does not exist or it does not have the correct permissions to be added as a reviewer.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2025

Copy link
Copy Markdown
Contributor Author

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot Bot added the 2: Dev Review Requires review by a core committer label Jul 22, 2025
@dependabot
dependabot Bot requested review from spirosoik and wiggin77 as code owners July 22, 2025 05:53
@dependabot dependabot Bot added the 2: Dev Review Requires review by a core committer label Jul 22, 2025
@mm-prodsec-bot

mm-prodsec-bot commented Jul 22, 2025

Copy link
Copy Markdown
Contributor

Snyk checks have failed. 2 issues have been found so far.

Icon Severity Issues
Critical 0
High 0
Medium 2
Low 0

security/snyk check is complete. 2 issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@wiggin77 wiggin77 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CI Failing

@mattermost-build

Copy link
Copy Markdown
Contributor

This PR has been automatically labelled "stale" because it hasn't had recent activity.
A core team member will check in on the status of the PR to help with questions.
Thank you for your contribution!

@abbas-dependable-naqvi

Copy link
Copy Markdown
Contributor

Fixed in another PR

@dependabot @github

dependabot Bot commented on behalf of github Aug 26, 2025

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/webapp/multi-ed0e2ff5bf branch August 26, 2025 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

2: Dev Review Requires review by a core committer Lifecycle/1:stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants