Bump jsdom and @vue/cli-plugin-unit-jest #39
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps [jsdom](https://github.com/jsdom/jsdom) to 16.7.0 and updates ancestor dependency [@vue/cli-plugin-unit-jest](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-unit-jest). These dependencies need to be updated together. Updates `jsdom` from 16.2.2 to 16.7.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/master/Changelog.md) - [Commits](jsdom/jsdom@16.2.2...16.7.0) Updates `@vue/cli-plugin-unit-jest` from 4.4.6 to 5.0.8 - [Release notes](https://github.com/vuejs/vue-cli/releases) - [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md) - [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-plugin-unit-jest) --- updated-dependencies: - dependency-name: jsdom dependency-type: indirect - dependency-name: "@vue/cli-plugin-unit-jest" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
@dependabot merge
…On Tue, Oct 11, 2022 at 9:47 AM dependabot[bot] ***@***.***> wrote:
This automated pull request fixes a security vulnerability
<https://github.com/Silverium/popper-vue/security/dependabot/67>
(moderate severity).
Learn more about Dependabot security updates
<https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates>.
------------------------------
Bumps jsdom <https://github.com/jsdom/jsdom> to 16.7.0 and updates
ancestor dependency @vue/cli-plugin-unit-jest
***@***.***/cli-plugin-unit-jest>.
These dependencies need to be updated together.
Updates jsdom from 16.2.2 to 16.7.0
Release notes
*Sourced from jsdom's releases <https://github.com/jsdom/jsdom/releases>.*
Version 16.7.0
- Added AbortSignal.abort(). (ninevra)
- Added dummy x and y properties to the return value of
getBoundingClientRect(). (eiko)
- Implemented wrapping for textareaEl.value if the wrap="" attribute
is specified. (ninevra)
- Changed newline normalization in <textarea>s according to recent
HTML Standard updates
<https://blog.whatwg.org/newline-normalizations-in-form-submission>.
(ninevra)
- Fixed some bad cascade computation in getComputedStyle().
(romain-trotard)
Version 16.6.0
- Added parentNode.replaceChildren(). (@ninevra
<https://github.com/ninevra>)
- Fixed jsdom's handling of when code running inside the jsdom throws
null or undefined as an exception. (@mbest <https://github.com/mbest>)
- Removed the dependency on the deprecated request
<https://www.npmjs.com/package/request> package, in the process fixing
several issues with the XMLHttpRequest implementation around header
processing. Thanks go to @tobyhinloopen
<https://github.com/tobyhinloopen>, @andrewaylett
<https://github.com/andrewaylett>, and especially @vegardbb
<https://github.com/vegardbb>, for completing this months-long effort!
Version 16.5.3
- Fixed infinite recursion when using MutationObservers to observe
elements inside a MutationObserver callback.
Version 16.5.2
- Fixed Access-Control-Allow-Headers: * to work with XMLHttpRequest.
(silviot)
- Fixed xhr.response to strip any leading BOM when xhr.responseType is
"json".
- Fixed new Text() and new Comment() constructors to properly set the
resulting node's ownerDocument.
- Fixed customElements.whenDefined() to resolve its returned promise
with the custom element constructor, per recent spec updates. (ExE-Boss)
- Fixed parsing to ensure that <svg>\<template></template></svg> does
not throw an exception, but instead correctly produces a SVG-namespace
\<template> element.
- Fixed domParser.parseFromString() to treat <noscript> elements
appropriately.
- Fixed form control validity checking when the control was outside
the <form> element and instead associated using the form="" attribute.
- Fixed legendEl.form to return the correct result based on its parent
<fieldset>.
- Fixed optionEl.text to exclude <script> descendants.
- Fixed radio buttons and checkboxes to not fire input and change
events when disconnected.
- Fixed inputEl.indeterminate to reset to its previous value when
canceling a click event on a checkbox or radio button.
- Fixed the behavior of event handler attributes (e.g.
onclick="...code...") when there were global variables named element
or formOwner. (ExE-Boss)
- On Node.js v14.6.0+ where WeakRefs are available, fixed NodeIterator
to no longer stop working when more than ten NodeIterator instances
are created, and to use less memory due to inactive NodeIterators
sticking around. (ExE-Boss)
Version 16.5.1
- Fixed a regression that broke customElements.get() in v16.5.0.
(fdesforges)
- Fixed window.event to have a setter which overwrites the window.event
property with the given value, per the specification. This fixes an issue
where after upgrading to jsdom v16.5.0 you would no longer be able to set a
global variable named event in the jsdom context.
Version 16.5.0
- Added window.queueMicrotask().
- Added window.event.
- Added inputEvent.inputType. (diegohaz)
- Removed ondragexit from Window and friends, per a spec update.
- Fixed the URL of about:blank iframes. Previously it was getting set
to the parent's URL. (SimonMueller)
- Fixed the loading of subresources from the filesystem when they had
non-ASCII filenames.
- Fixed the hidden="" attribute to cause display: none per the
user-agent stylesheet. (ph-fritsche)
- Fixed the new File() constructor to no longer convert / to :, per a
pending spec update
<https://github-redirect.dependabot.com/w3c/FileAPI/issues/41>.
- Fixed mutation observer callbacks to be called with the
MutationObserver instance as their this value.
- Fixed <input type=checkbox> and <input type=radio> to be mutable
even when disabled, per a spec update
<https://github-redirect.dependabot.com/whatwg/html/pull/5805>.
- Fixed XMLHttpRequest to not fire a redundant final progress event if
a progress event was previously fired with the same loaded value. This
would usually occur with small files.
- Fixed XMLHttpRequest to expose the Content-Length header on
cross-origin responses.
- Fixed xhr.response to return null for failures that occur during the
middle of the download.
- Fixed edge cases around passing callback functions or event
handlers. (ExE-Boss)
- Fixed edge cases around the properties of proxy-like objects such as
localStorage or dataset. (ExE-Boss)
... (truncated)
Changelog
*Sourced from jsdom's changelog
<https://github.com/jsdom/jsdom/blob/master/Changelog.md>.*
16.7.0
- Added AbortSignal.abort(). (ninevra)
- Added dummy x and y properties to the return value of
getBoundingClientRect(). (eiko)
- Implemented wrapping for textareaEl.value if the wrap="" attribute
is specified. (ninevra)
- Changed newline normalization in <textarea>s according to recent
HTML Standard updates
<https://blog.whatwg.org/newline-normalizations-in-form-submission>.
(ninevra)
- Fixed some bad cascade computation in getComputedStyle().
(romain-trotard)
16.6.0
- Added parentNode.replaceChildren(). (ninevra)
- Fixed jsdom's handling of when code running inside the jsdom throws
null or undefined as an exception. (mbest)
- Removed the dependency on the deprecated request
<https://www.npmjs.com/package/request> package, in the process fixing
several issues with the XMLHttpRequest implementation around header
processing. Special thanks to vegardbb for completing this months-long
effort!
16.5.3
- Fixed infinite recursion when using MutationObservers to observe
elements inside a MutationObserver callback.
16.5.2
- Fixed Access-Control-Allow-Headers: * to work with XMLHttpRequest.
(silviot)
- Fixed xhr.response to strip any leading BOM when xhr.responseType is
"json".
- Fixed new Text() and new Comment() constructors to properly set the
resulting node's ownerDocument.
- Fixed customElements.whenDefined() to resolve its returned promise
with the custom element constructor, per recent spec updates. (ExE-Boss)
- Fixed parsing to ensure that <svg>\<template></template></svg> does
not throw an exception, but instead correctly produces a SVG-namespace
\<template> element.
- Fixed domParser.parseFromString() to treat <noscript> elements
appropriately.
- Fixed form control validity checking when the control was outside
the <form> element and instead associated using the form="" attribute.
- Fixed legendEl.form to return the correct result based on its parent
<fieldset>.
- Fixed optionEl.text to exclude <script> descendants.
- Fixed radio buttons and checkboxes to not fire input and change
events when disconnected.
- Fixed inputEl.indeterminate to reset to its previous value when
canceling a click event on a checkbox or radio button.
- Fixed the behavior of event handler attributes (e.g.
onclick="...code...") when there were global variables named element
or formOwner. (ExE-Boss)
- On Node.js v14.6.0+ where WeakRefs are available, fixed NodeIterator
to no longer stop working when more than ten NodeIterator instances
are created, and to use less memory due to inactive NodeIterators
sticking around. (ExE-Boss)
16.5.1
- Fixed a regression that broke customElements.get() in v16.5.0.
(fdesforges)
- Fixed window.event to have a setter which overwrites the window.event
property with the given value, per the specification. This fixes an issue
where after upgrading to jsdom v16.5.0 you would no longer be able to set a
global variable named event in the jsdom context.
16.5.0
- Added window.queueMicrotask().
- Added window.event.
- Added inputEvent.inputType. (diegohaz)
- Removed ondragexit from Window and friends, per a spec update.
- Fixed the URL of about:blank iframes. Previously it was getting set
to the parent's URL. (SimonMueller)
- Fixed the loading of subresources from the filesystem when they had
non-ASCII filenames.
- Fixed the hidden="" attribute to cause display: none per the
user-agent stylesheet. (ph-fritsche)
- Fixed the new File() constructor to no longer convert / to :, per a
pending spec update
<https://github-redirect.dependabot.com/w3c/FileAPI/issues/41>.
- Fixed mutation observer callbacks to be called with the
MutationObserver instance as their this value.
... (truncated)
Commits
- 1aa3cbc
<jsdom/jsdom@1aa3cbc>
Version 16.7.0
- df1f551
<jsdom/jsdom@df1f551>
Don't run WebSocketStream tests
- eb105b2
<jsdom/jsdom@eb105b2>
Fix browser tests by enabling SharedArrayBuffer
- 0dedfc0
<jsdom/jsdom@0dedfc0>
Fix some bad cascade computation in getComputedStyle()
- 8021a56
<jsdom/jsdom@8021a56>
Fix "configuation" typo (#3213
<https://github-redirect.dependabot.com/jsdom/jsdom/issues/3213>)
- a7febe3
<jsdom/jsdom@a7febe3>
Fix typo in level2/html.js (#3222
<https://github-redirect.dependabot.com/jsdom/jsdom/issues/3222>)
- c9896c0
<jsdom/jsdom@c9896c0>
Return x, y properties from Element.getBoundingClientRect (#3187
<https://github-redirect.dependabot.com/jsdom/jsdom/issues/3187>)
- 346ea98
<jsdom/jsdom@346ea98>
Update web-platform tests (#3203
<https://github-redirect.dependabot.com/jsdom/jsdom/issues/3203>)
- 364c77d
<jsdom/jsdom@364c77d>
Bump to ws 7.4.6
- 93ba6a0
<jsdom/jsdom@93ba6a0>
We are now on Matrix (#3207
<https://github-redirect.dependabot.com/jsdom/jsdom/issues/3207>)
- Additional commits viewable in compare view
<jsdom/jsdom@16.2.2...16.7.0>
Updates @vue/cli-plugin-unit-jest from 4.4.6 to 5.0.8
Release notes
*Sourced from @vue/cli-plugin-unit-jest's releases
<https://github.com/vuejs/vue-cli/releases>.*
v5.0.8 🐛 Bug Fix
- @vue/cli-service
- 0260e4d <vuejs/vue-cli@0260e4d> fix:
add devServer.server.type to useHttps judgement (vuejs/vue-cli#7222
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7222>)
- @vue/cli-ui
- 07052c4 <vuejs/vue-cli@07052c4> fix:
Vue CLI UI graphql subscription server error, fixes
vuejs/vue-cli#7221
<https://github-redirect.dependabot.com/vuejs/vue-cli/issues/7221>
v5.0.7
- @vue/cli-service
- #7202
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7202>, [
558dea2 <vuejs/vue-cli@558dea2>] fix:
support devServer.server option, avoid deprecation warnings (
@backrunner <https://github.com/backrunner>, @sodatea
<https://github.com/sodatea>)
- [beffe8a <vuejs/vue-cli@beffe8a>] fix:
allow disabling progress plugin via devServer.client.progress
- @vue/cli-ui
- #7210
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7210>
chore: upgrade to apollo-server-express 3.x
Committers: 2
- BackRunner (@backrunner <https://github.com/backrunner>)
- Haoqun Jiang (@sodatea <https://github.com/sodatea>)
v5.0.6
Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue
Loader 15.10 (currently in beta).
In Vue 2.7, vue-template-compiler is no longer a required peer
dependency. Rather, there's a new export under the main package as
vue/compiler-sfc.
v5.0.5 🐛 Bug Fix
- @vue/cli
- #7167
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7167>
fix(upgrade): prevent changing the structure of package.json file during
upgrade (@blzsaa <https://github.com/blzsaa>)
- @vue/cli-service
- #7023
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7023>
fix: windows vue.config.mjs support (@xiaoxiangmoe
<https://github.com/xiaoxiangmoe>)
- @vue/cli-plugin-e2e-cypress
- [697bb44] <vuejs/vue-cli@697bb44> fix:
should correctly resolve cypress bin path for Cypress 10 (Note that the
project is still created with Cypress 9 by default, but you can upgrade to
Cypress 10 on your own now)
Committers: 3
- Martijn Jacobs (@maerteijn <https://github.com/maerteijn>)
- ZHAO Jinxiang (@xiaoxiangmoe <https://github.com/xiaoxiangmoe>)
- @blzsaa <https://github.com/blzsaa>
v5.0.4 🐛 Bug Fix
- @vue/cli-service
- #7005
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7005>
Better handling of publicPath: 'auto' (@AndreiSoroka
<https://github.com/AndreiSoroka>)
- @vue/cli-shared-utils, @vue/cli-ui
- 75826d6 <vuejs/vue-cli@75826d6> fix:
replace node-ipc with @achrinza/node-ipc to further secure the
dependency chain
Committers: 1
- Andrei (@AndreiSoroka <https://github.com/AndreiSoroka>)
- Haoqun Jiang (@sodatea <https://github.com/sodatea>)
v5.0.3
... (truncated)
Changelog
*Sourced from @vue/cli-plugin-unit-jest's changelog
<https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md>.*
5.0.7 (2022-07-05)
- @vue/cli-service
- #7202
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7202>, [
558dea2 <vuejs/vue-cli@558dea2>] fix:
support devServer.server option, avoid deprecation warnings (
@backrunner <https://github.com/backrunner>, @sodatea
<https://github.com/sodatea>)
- [beffe8a <vuejs/vue-cli@beffe8a>] fix:
allow disabling progress plugin via devServer.client.progress
- @vue/cli-ui
- #7210
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7210>
chore: upgrade to apollo-server-express 3.x
Committers: 2
- BackRunner (@backrunner <https://github.com/backrunner>)
- Haoqun Jiang (@sodatea <https://github.com/sodatea>)
5.0.6 (2022-06-16)
Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue
Loader 15.10 (currently in beta).
In Vue 2.7, vue-template-compiler is no longer a required peer
dependency. Rather, there's a new export under the main package as
vue/compiler-sfc.
5.0.5 (2022-06-16) 🐛 Bug Fix
- @vue/cli
- #7167
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7167>
feat(upgrade): prevent changing the structure of package.json file during
upgrade (@blzsaa <https://github.com/blzsaa>)
- @vue/cli-service
- #7023
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7023>
fix: windows vue.config.mjs support (@xiaoxiangmoe
<https://github.com/xiaoxiangmoe>)
Committers: 3
- Martijn Jacobs (@maerteijn <https://github.com/maerteijn>)
- ZHAO Jinxiang (@xiaoxiangmoe <https://github.com/xiaoxiangmoe>)
- @blzsaa <https://github.com/blzsaa>
5.0.4 (2022-03-22) 🐛 Bug Fix
- @vue/cli-service
- #7005
<https://github-redirect.dependabot.com/vuejs/vue-cli/pull/7005>
Better handling of publicPath: 'auto' (@AndreiSoroka
<https://github.com/AndreiSoroka>)
- @vue/cli-shared-utils, @vue/cli-ui
- 75826d6 <vuejs/vue-cli@75826d6> fix:
replace node-ipc with @achrinza/node-ipc to further secure the
dependency chain
Committers: 1
... (truncated)
Commits
- b154dbd
<vuejs/vue-cli@b154dbd>
v5.0.8
- 4a0655f
<vuejs/vue-cli@4a0655f>
v5.0.7
- ef08a08
<vuejs/vue-cli@ef08a08>
v5.0.6
- 98c66c9
<vuejs/vue-cli@98c66c9>
v5.0.5
- ca97fc2
<vuejs/vue-cli@ca97fc2>
v5.0.4
- dd53f26
<vuejs/vue-cli@dd53f26>
v5.0.3
- a859b1f
<vuejs/vue-cli@a859b1f>
v5.0.2
- 92d80a8
<vuejs/vue-cli@92d80a8>
v5.0.1
- c913cdc
<vuejs/vue-cli@c913cdc>
v5.0.0
- 9be19f0
<vuejs/vue-cli@9be19f0>
test: fix tsx import
- Additional commits viewable in compare view
***@***.***/cli-plugin-unit-jest>
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting @dependabot
rebase.
------------------------------
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits
that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after
your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge
and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the
PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the
PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the PR
or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the
default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as
the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as
the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the
default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security
Alerts page <https://github.com/Silverium/popper-vue/network/alerts>.
------------------------------
You can view, comment on, or merge this pull request online at:
#39
Commit Summary
- 3f89855
<3f89855>
Bump jsdom and @vue/cli-plugin-unit-jest
File Changes
(2 files <https://github.com/Silverium/popper-vue/pull/39/files>)
- *M* package-lock.json
<https://github.com/Silverium/popper-vue/pull/39/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519>
(22360)
- *M* package.json
<https://github.com/Silverium/popper-vue/pull/39/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519>
(2)
Patch Links:
- https://github.com/Silverium/popper-vue/pull/39.patch
- https://github.com/Silverium/popper-vue/pull/39.diff
—
Reply to this email directly, view it on GitHub
<#39>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACQWTWFSVL435FBNZ3P5DZTWCULR3ANCNFSM6AAAAAARB752EA>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps jsdom to 16.7.0 and updates ancestor dependency @vue/cli-plugin-unit-jest. These dependencies need to be updated together.
Updates
jsdomfrom 16.2.2 to 16.7.0Release notes
Sourced from jsdom's releases.
... (truncated)
Changelog
Sourced from jsdom's changelog.
... (truncated)
Commits
1aa3cbcVersion 16.7.0df1f551Don't run WebSocketStream testseb105b2Fix browser tests by enabling SharedArrayBuffer0dedfc0Fix some bad cascade computation in getComputedStyle()8021a56Fix "configuation" typo (#3213)a7febe3Fix typo in level2/html.js (#3222)c9896c0Return x, y properties from Element.getBoundingClientRect (#3187)346ea98Update web-platform tests (#3203)364c77dBump to ws 7.4.693ba6a0We are now on Matrix (#3207)Updates
@vue/cli-plugin-unit-jestfrom 4.4.6 to 5.0.8Release notes
Sourced from
@vue/cli-plugin-unit-jest's releases.... (truncated)
Changelog
Sourced from
@vue/cli-plugin-unit-jest's changelog.... (truncated)
Commits
b154dbdv5.0.84a0655fv5.0.7ef08a08v5.0.698c66c9v5.0.5ca97fc2v5.0.4dd53f26v5.0.3a859b1fv5.0.292d80a8v5.0.1c913cdcv5.0.09be19f0test: fix tsx importYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @Silverium.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.