[PR #85] deps(deps-dev): Bump serve from 14.2.5 to 14.2.6 #157

New issue

Open

opened 2026-03-15 02:29:20 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 02:29:20 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/asalimonov/authelia-admin/pull/85
Author: @dependabot[bot]
Created: 3/9/2026
Status: 🔄 Open

Base: main ← Head: dependabot/npm_and_yarn/serve-14.2.6

📝 Commits (1)

56e49d8 deps(deps-dev): Bump serve from 14.2.5 to 14.2.6

📊 Changes

2 files changed (+101 additions, -35 deletions)

View changed files

📝 package-lock.json (+100 -34)
📝 package.json (+1 -1)

📄 Description

Bumps serve from 14.2.5 to 14.2.6.

Release notes

Sourced from serve's releases.

v14.2.6

Patch Changes

7fcb924: Bump ajv to 8.18.0

b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

Changelog

Sourced from serve's changelog.

14.2.6

Patch Changes

7fcb924: Bump ajv to 8.18.0

b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

Commits

f3c702c Version Packages (#846)
7fcb924 Add changeset for #842
a2fecb3 chore(deps): update ajv to v8.18.0 (#842)
b3888f9 Bump serve-handler to 6.1.7 (#845)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/asalimonov/authelia-admin/pull/85 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/9/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/serve-14.2.6` --- ### 📝 Commits (1) - [`56e49d8`](https://github.com/asalimonov/authelia-admin/commit/56e49d8b522c52f0fe4476a551913ea8c07a110f) deps(deps-dev): Bump serve from 14.2.5 to 14.2.6 ### 📊 Changes **2 files changed** (+101 additions, -35 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+100 -34) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [serve](https://github.com/vercel/serve) from 14.2.5 to 14.2.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/serve/releases">serve's releases</a>.</em></p> <blockquote> <h2>v14.2.6</h2> <h3>Patch Changes</h3> <ul> <li>7fcb924: Bump ajv to 8.18.0</li> <li>b3888f9: Update <code>serve-handler</code> to <code>6.1.7</code> to fix ReDoS vulnerabilities</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vercel/serve/blob/main/CHANGELOG.md">serve's changelog</a>.</em></p> <blockquote> <h2>14.2.6</h2> <h3>Patch Changes</h3> <ul> <li>7fcb924: Bump ajv to 8.18.0</li> <li>b3888f9: Update <code>serve-handler</code> to <code>6.1.7</code> to fix ReDoS vulnerabilities</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/serve/commit/f3c702c6bb312c6d6b05315721a6d3ea245d86b8"><code>f3c702c</code></a> Version Packages (<a href="https://redirect.github.com/vercel/serve/issues/846">#846</a>)</li> <li><a href="https://github.com/vercel/serve/commit/7fcb924e3632685480718bd5d6caa617f8a40cc8"><code>7fcb924</code></a> Add changeset for <a href="https://redirect.github.com/vercel/serve/issues/842">#842</a></li> <li><a href="https://github.com/vercel/serve/commit/a2fecb3b74f717069bc2bd45f9cd21a47e79032a"><code>a2fecb3</code></a> chore(deps): update ajv to v8.18.0 (<a href="https://redirect.github.com/vercel/serve/issues/842">#842</a>)</li> <li><a href="https://github.com/vercel/serve/commit/b3888f9a016d5a695d4c604946d4f403b5775bdb"><code>b3888f9</code></a> Bump <code>serve-handler</code> to <code>6.1.7</code> (<a href="https://redirect.github.com/vercel/serve/issues/845">#845</a>)</li> <li>See full diff in <a href="https://github.com/vercel/serve/compare/v14.2.5...v14.2.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serve&package-manager=npm_and_yarn&previous-version=14.2.5&new-version=14.2.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>