- [CVE-2022-2499] Resolve qs from 6.5.2 and 6.7.0 to 6.11.0 in 1.x (#3451)
- [CVE-2020-36632] [REQUIRES PLUGIN VALIDATION] Bump flat from 4.1.1 to 5.0.2 (#3539). To the best of our knowledge, this is a non-breaking change, but if your plugin relies on
mocha
tests, validate that they still work correctly (and plan to migrate them tojest
in preparation formocha
deprecation. - [CVE-2023-25653] Bump node-jose to 2.2.0 (#3445)
- [CVE-2021-23807] Bump jsonpointer from 4.1.0 to 5.0.1 (#3535)
- [CVE-2021-23424] Bump ansi-html from 0.0.7 to 0.0.8 (#3536)
- [CVE-2022-24999] Bump express from 4.17.1 to 4.18.2 (#3542)
- [I18n] Register ru, ru-RU locale (#2817)
- [TSVB] Fix the link to "serial differencing aggregation" documentation (#3503)