Release notes

Sourced from json5's releases.

\n
v1.0.2
\n
\n
Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)
\n
\n

Changelog

Sourced from json5's changelog.

\n
Unreleased [code, diff]
\n
v2.2.3 [code, diff]
\n
\n
Fix: json5@2.2.3 is now the 'latest' release according to npm instead of\nv1.0.2. (#299)
\n
\n
v2.2.2 [code, diff]
\n
\n
Fix: Properties with the name __proto__ are added to objects and arrays.\n(#199) This also fixes a prototype pollution vulnerability reported by\nJonathan Gregson! (#295).
\n
\n
v2.2.1 [code, diff]
\n
\n
Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
\n
\n
v2.2.0 [code, diff]
\n
\n
New: Accurate and documented TypeScript declarations are now included. There\nis no need to install @types/json5. (#236, #244)
\n
\n
v2.1.3 [code, diff]
\n
\n
Fix: An out of memory bug when parsing numbers has been fixed. (#228,\n#229)
\n
\n
v2.1.2 [code, diff]
\n\n

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

\n
\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json5&package-manager=npm_and_yarn&previous-version=1.0.1&new-version=1.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n

Dependabot commands and options

\n
\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/iamnbutler/iamnbutler.github.io/network/alerts).\n\n

","dependabot[bot]","documentNavigation","repo","iamnbutler/iamnbutler.github.io","repoId","ownerId","user:1714999","site","nexthub","private","admin","settings","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[524,525,526,527,528,529,530,531,532,533,534,535,536],"navigation",{"_408":409,"_486":487,"_488":489,"_490":491,"_492":493,"_494":495,"_90":496},"sources",[],"meta",{"_354":480,"_481":482,"_483":484,"_397":22,"_360":448,"_485":22,"_402":403,"_404":24},"branches",[424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479],"tags",[422,423],"cloneUrl","https://git.nexthub.sh/iamnbutler/iamnbutler.github.io.git","v18.0.0","v19.0.0","14-2","2017.3","add-gpui-extended-context-post","add-post-tags","backblaze-assets","dependabot/npm_and_yarn/defu-6.1.6","dependabot/npm_and_yarn/devalue-5.8.1","dependabot/npm_and_yarn/h3-1.15.10","dependabot/npm_and_yarn/multi-04ca55b44c","dependabot/npm_and_yarn/picomatch-2.3.2","dependabot/npm_and_yarn/postcss-8.5.14","dependabot/npm_and_yarn/rollup-4.59.0","dependabot/npm_and_yarn/smol-toml-1.6.1","dependabot/npm_and_yarn/svelte-5.55.7","dependabot/npm_and_yarn/svgo-4.0.1","dependabot/npm_and_yarn/vite-6.4.2","fix-backblaze-integration","fix-backblaze-issue-take2","glfs-test","global-tags","gpui-ui-post","import-and-sort","integrate-data-repo","lists","main","mellow-fjord/site-reliability-cleanup","nate-journal","revert-34-fix-backblaze-integration","tiny-search-2","unified-feed","update-nuxt","v-11","v-12","v-13","v-14","v-15","v-16","v-18","v-19","v-20","v-21","v-3","v-4","v11-newsprint","v14-1","v14-effect","v18","v19/add-mh-2","v21","v23","v5-04-21-06","v5-static","v8","v8_js","v9","v9-2020-eleventy","Personal Site","owner","iamnbutler","section","","empty","pins",[508,509,510],"documents",{"_505":506,"_507":403},"code",{"_23":502,"_503":504},"automations",{"_499":500,"_501":-5},"delivery",{"_497":403,"_498":-5},"ckQnXds0_OG2x4LL3veMKJ2xpXN","releases","applications","workflows",2,"deployments",822,"changes",11,"counts",{},"total",{"_347":503,"_512":522,"_43":503,"_514":523,"_406":376,"_516":22,"_517":376,"_518":504},{"_347":519,"_512":520,"_43":519,"_514":521,"_406":376,"_516":22,"_517":376,"_518":403},{"_347":511,"_512":513,"_43":511,"_514":515,"_406":376,"_516":22,"_517":376,"_518":403},"issues","name","Issues","filters",{},"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_347":503,"_512":522,"_43":503,"_514":567,"_406":376,"_516":22,"_517":376},{"_347":519,"_512":520,"_43":519,"_514":566,"_406":376,"_516":22,"_517":376},{"_347":511,"_512":513,"_43":511,"_514":565,"_406":376,"_516":22,"_517":376},{"_347":562,"_512":563,"_43":562,"_514":564,"_406":22,"_516":22,"_517":376},{"_347":559,"_512":560,"_43":559,"_514":561,"_406":22,"_516":22,"_517":376},{"_347":499,"_512":557,"_43":492,"_514":558,"_406":22,"_516":22,"_517":376},{"_347":501,"_512":554,"_43":555,"_514":556,"_406":22,"_516":22,"_517":376},{"_347":497,"_512":552,"_43":497,"_514":553,"_406":22,"_516":22,"_517":376},{"_347":548,"_512":549,"_43":550,"_514":551,"_406":22,"_516":22,"_517":376},{"_347":488,"_512":546,"_43":488,"_514":547,"_406":22,"_516":22,"_517":22},{"_347":543,"_512":544,"_43":543,"_514":545,"_406":22,"_516":22,"_517":22},{"_347":540,"_512":541,"_43":540,"_514":542,"_406":22,"_516":22,"_517":22},{"_347":537,"_512":538,"_43":537,"_514":539,"_406":22,"_516":22,"_517":22},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user",[],"now",1794435016824,"sidebar","expanded"]