Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases Wiki Activity
26,791 Commits 2 Branches 0 Tags
imgbot
Commit Graph
28 Commits
Author SHA1 Message Date
dependabot[bot] b2ef218213 Bump js-yaml from 4.3.0 to 4.3.1 in /tools/fleet-slackbot (#50746) 2026-08-07 09:58:47 -05:00
dependabot[bot] 49c0e80b77 Bump fast-uri from 3.1.4 to 3.1.5 in /tools/fleet-slackbot (#50505) 2026-08-04 13:04:16 -05:00
dependabot[bot] 4e7cebf5ac Bump hono from 4.12.32 to 4.13.0 in /tools/fleet-slackbot (#50500) 2026-08-04 13:03:30 -05:00
dependabot[bot] 09d2431055 Bump ip-address from 10.2.0 to 10.4.0 in /tools/fleet-slackbot (#50480) 2026-08-04 09:56:38 -05:00
Luke Heath 7cd67856aa Fix medium-severity code scanning alerts (#50346) 2026-08-04 09:56:00 -05:00
dependabot[bot] b81d277e11 Bump js-yaml from 4.2.0 to 4.3.0 in /tools/fleet-slackbot (#49956) 2026-07-30 07:57:08 -05:00
dependabot[bot] 902d3503bc Bump hono from 4.12.25 to 4.12.32 in /tools/fleet-slackbot (#49950) 2026-07-30 07:56:49 -05:00
dependabot[bot] c2d427006c Bump fast-uri from 3.1.2 to 3.1.4 in /tools/fleet-slackbot (#49948) 2026-07-30 07:56:28 -05:00
dependabot[bot] fe341cae29 Bump body-parser from 2.2.2 to 2.3.0 in /tools/fleet-slackbot (#49721) 2026-07-30 07:50:35 -05:00
dependabot[bot] edc95cf79b Bump axios from 1.16.1 to 1.18.1 in /tools/fleet-slackbot (#49601) 2026-07-30 07:49:10 -05:00
dependabot[bot] 926ecd8f2e Bump ws from 8.20.1 to 8.21.0 in /tools/fleet-slackbot (#47967) 2026-06-20 08:22:43 -07:00
dependabot[bot] a85b1d5200 Bump js-yaml from 4.1.1 to 4.2.0 in /tools/fleet-slackbot (#47798) 2026-06-20 08:00:23 -07:00
dependabot[bot] 4e00816216 Bump form-data from 4.0.5 to 4.0.6 in /tools/fleet-slackbot (#47797) 2026-06-20 08:00:02 -07:00
dependabot[bot] 3d212455a6 Bump hono from 4.12.22 to 4.12.25 in /tools/fleet-slackbot (#47766) 2026-06-17 12:56:20 -07:00
Luke Heath 23370ced56 Bump @slack/bolt, axios, and dompurify (SCA fixes) (#46278) 2026-05-29 14:29:46 -05:00
Luke Heath 5c6b61a991 Bump js-cookie, uuid, and axios to fix high-severity CVEs (#46053) 2026-05-22 10:37:30 -05:00
dependabot[bot] d1b11974a1 Bump ws from 8.20.0 to 8.20.1 in /tools/fleet-slackbot (#45770) 2026-05-18 19:04:57 -05:00
Luke Heath 35e235fe04 Add fleet-mcp and fleet-slackbot to dependabot config (#45243) 2026-05-13 10:41:53 -05:00
dependabot[bot] 4ffeb3b69c Bump fast-uri from 3.1.0 to 3.1.2 in /tools/fleet-slackbot (#45083) 2026-05-11 12:38:55 -05:00
Luke Heath 018a048535 fleet-slackbot: make MAX_TOOL_CALLS configurable, default to 100 (#44607) 2026-05-01 13:52:48 -05:00
Luke Heath 60f7485654 fleet-slackbot: graceful tool-budget fallback and MCP prompt coverage (#44598) 2026-05-01 13:28:12 -05:00
dependabot[bot] 5cc283c258 Bump follow-redirects from 1.15.11 to 1.16.0 in /tools/fleet-slackbot (#43730) 2026-04-21 16:04:37 -05:00
dependabot[bot] 1cef0d0be7 Bump hono from 4.12.12 to 4.12.14 in /tools/fleet-slackbot (#43653) 2026-04-21 16:04:07 -05:00
dependabot[bot] 156a6e65f5 Bump axios from 1.13.6 to 1.15.0 in /tools/fleet-slackbot (#43446) 2026-04-14 14:29:18 -05:00
dependabot[bot] 9b439fff6d Bump @hono/node-server from 1.19.11 to 1.19.13 in /tools/fleet-slackbot (#43206) 2026-04-14 14:27:54 -05:00
dependabot[bot] 5fbe59664d Bump hono from 4.12.8 to 4.12.12 in /tools/fleet-slackbot (#43205) 2026-04-14 14:27:32 -05:00
dependabot[bot] 1c9ba1a514 Bump path-to-regexp from 8.3.0 to 8.4.0 in /tools/fleet-slackbot (#42623) 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from
8.3.0 to 8.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pillarjs/path-to-regexp/releases">path-to-regexp's
releases</a>.</em></p>
<blockquote>
<h2>8.4.0</h2>
<p><strong>Important</strong></p>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2026-4926">CVE-2026-4926</a>
(<a
href="https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-j3q9-mxjg-w52f">GHSA-j3q9-mxjg-w52f</a>)</li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2026-4923">CVE-2026-4923</a>
(<a
href="https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-27v5-c462-wpq7">GHSA-27v5-c462-wpq7</a>)</li>
</ul>
<p><strong>Fixed</strong></p>
<ul>
<li>Restricts wildcard backtracking when using more than 1 in a path (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/pull/421">pillarjs/path-to-regexp#421</a>)</li>
</ul>
<p><strong>Changed</strong></p>
<ul>
<li>Dedupes regex prefixes (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/pull/422">pillarjs/path-to-regexp#422</a>)
<ul>
<li>This will result in shorter regular expressions for some cases using
optional groups</li>
</ul>
</li>
<li>Rejects large optional route combinations (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/pull/424">pillarjs/path-to-regexp#424</a>)
<ul>
<li>When using groups such as <code>/users{/delete}</code> it will
restrict the number of generated combinations to &lt; 256, equivalent to
8 top-level optional groups and unlikely to occur in a real world
application, but avoids exploding the regex size for applications that
accept user created routes</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/34cb451ddaeea4783a2fe60579ffb3e4ccfc73a7"><code>34cb451</code></a>
8.4.0</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/22a967901afc8b2b42eefe456faa7b6773dcc415"><code>22a9679</code></a>
Reject large optional route combinations (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/424">#424</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/8881a88930cf96ebaa00412a8e87cdd601bb3f3d"><code>8881a88</code></a>
Byte optimization (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/423">#423</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/43669ac637fe70fad33693d145a74d98179152ce"><code>43669ac</code></a>
Dedupe regex prefixes (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/422">#422</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/48646547da685c1ccb76a95fe23373975a91e200"><code>4864654</code></a>
Restrict repeated wildcard backtracking (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/421">#421</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/05a5a973702a863fb69415294503d13cb9d18b20"><code>05a5a97</code></a>
Remove dependabot config (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/404">#404</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/5b635cd1bd1d6d7ed6023d8834ae6e6a1e22461f"><code>5b635cd</code></a>
Remove <code>package-lock.json</code> (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/407">#407</a>)</li>
<li>See full diff in <a
href="https://github.com/pillarjs/path-to-regexp/compare/v8.3.0...v8.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=path-to-regexp&package-manager=npm_and_yarn&previous-version=8.3.0&new-version=8.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-28 14:39:30 -05:00
Luke Heath 3f70b7219f Add Fleet slackbot to tools directory (#42163) 2026-03-27 12:07:27 -05:00