<https://github.com/cofacts/rumors-fb-bot/pull/42|#42 Bump json5 from 2.1.1 to 2.2.3>
Bumps <https://github.com/json5/json5|json5> from 2.1.1 to 2.2.3.
Release notes
_Sourced from <https://github.com/json5/json5/releases|json5's releases>._
> *v2.2.3*
>
> • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<https://github-redirect.dependabot.com/json5/json5/issues/299|#299>)
>
> *v2.2.2*
>
> • Fix: Properties with the name `__proto__` are added to objects and arrays. (<https://github-redirect.dependabot.com/json5/json5/issues/199|#199>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<https://github-redirect.dependabot.com/json5/json5/issues/295|#295>).
>
> *v2.2.1*
>
> • Fix: Removed dependence on minimist to patch <https://github.com/advisories/GHSA-xvch-5gv4-984h|CVE-2021-44906>. (<https://github-redirect.dependabot.com/json5/json5/issues/266|#266>)
>
> *v2.2.0*
>
> • New: Accurate and documented TypeScript declarations are now included. There is no need to install `@types/json5`. (<https://github-redirect.dependabot.com/json5/json5/issues/236|#236>, <https://github-redirect.dependabot.com/json5/json5/issues/244|#244>)
>
> *v2.1.3 [<https://github.com/json5/json5/tree/v2.1.3|code>, <https://github.com/json5/json5/compare/v2.1.2...v2.1.3|diff>]*
>
> • Fix: An out of memory bug when parsing numbers has been fixed. (<https://github-redirect.dependabot.com/json5/json5/issues/228|#228>, <https://github-redirect.dependabot.com/json5/json5/issues/229|#229>)
>
> *v2.1.2*
>
> • Fix: Bump `minimist` to `v1.2.5`. (<https://github-redirect.dependabot.com/json5/json5/issues/222|#222>)
Changelog
_Sourced from <https://github.com/json5/json5/blob/main/CHANGELOG.md|json5's changelog>._
> *v2.2.3 [<https://github.com/json5/json5/tree/v2.2.3|code>, <https://github.com/json5/json5/compare/v2.2.2...v2.2.3|diff>]*
>
> • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<https://github-redirect.dependabot.com/json5/json5/issues/299|#299>)
>
> *v2.2.2 [<https://github.com/json5/json5/tree/v2.2.2|code>, <https://github.com/json5/json5/compare/v2.2.1...v2.2.2|diff>]*
>
> • Fix: Properties with the name `__proto__` are added to objects and arrays. (<https://github-redirect.dependabot.com/json5/json5/issues/199|#199>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<https://github-redirect.dependabot.com/json5/json5/issues/295|#295>).
>
> *v2.2.1 [<https://github.com/json5/json5/tree/v2.2.1|code>, <https://github.com/json5/json5/compare/v2.2.0...v2.2.1|diff>]*
>
> • Fix: Removed dependence on minimist to patch <https://github.com/advisories/GHSA-xvch-5gv4-984h|CVE-2021-44906>. (<https://github-redirect.dependabot.com/json5/json5/issues/266|#266>)
>
> *v2.2.0 [<https://github.com/json5/json5/tree/v2.2.0|code>, <https://github.com/json5/json5/compare/v2.1.3...v2.2.0|diff>]*
>
> • New: Accurate and documented TypeScript declarations are now included. There is no need to install `@types/json5`. (<https://github-redirect.dependabot.com/json5/json5/issues/236|#236>, <https://github-redirect.dependabot.com/json5/json5/issues/244|#244>)
>
> *v2.1.3 [<https://github.com/json5/json5/tree/v2.1.3|code>, <https://github.com/json5/json5/compare/v2.1.2...v2.1.3|diff>]*
>
> • Fix: An out of memory bug when parsing numbers has been fixed. (<https://github-redirect.dependabot.com/json5/json5/issues/228|#228>, <https://github-redirect.dependabot.com/json5/json5/issues/229|#229>)
>
> *v2.1.2 [<https://github.com/json5/json5/tree/v2.1.2|code>, <https://github.com/json5/json5/compare/v2.1.1...v2.1.2|diff>]*
>
> • Fix: Bump `minimist` to `v1.2.5`. (<https://github-redirect.dependabot.com/json5/json5/issues/222|#222>)
Commits
• <https://github.com/json5/json5/commit/c3a75242772a5026a49c4017a16d9b3543b62776|`c3a7524`> 2.2.3
• <https://github.com/json5/json5/commit/94fd06d82eeed225fa172f6fb2ca27375cbd2e39|`94fd06d`> docs: update CHANGELOG for v2.2.3
• <https://github.com/json5/json5/commit/3b8cebf0c474a8b20c78bd75c89cca0c4dce84ce|`3b8cebf`> docs(security): use GitHub security advisories
• <https://github.com/json5/json5/commit/f0fd9e194dde282caff114a110f4fac635f3a62c|`f0fd9e1`> docs: publish a security policy
• <https://github.com/json5/json5/commit/6a91a05fffeda16ff6b3b5008b6b340d42d31ec0|`6a91a05`> docs(template): bug -> bug report
• <https://github.com/json5/json5/commit/14f8cb186e8abdfaccf6527171da7b1224374650|`14f8cb1`> 2.2.2
• <https://github.com/json5/json5/commit/10cc7ca9169b59c5e0f5afc03dbd870cd06bcc46|`10cc7ca`> docs: update CHANGELOG for v2.2.2
• <https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8|`7774c10`> fix: add *proto* to objects and arrays
• <https://github.com/json5/json5/commit/edde30abd8b22facf2c06c72586b9f6edf12700d|`edde30a`> Readme: slight tweak to intro
• <https://github.com/json5/json5/commit/97286f8bd542c89dcee096bc05dd28ed2dfc1e16|`97286f8`> Improve example in readme
• Additional commits viewable in <https://github.com/json5/json5/compare/v2.1.1...v2.2.3|compare view>
<https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score>
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
* * *
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• `@dependabot rebase` will rebase this PR
• `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
• `@dependabot merge` will merge this PR after your CI passes on it
• `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
• `@dependabot cancel merge` will cancel a previously requested merge and block automerging
• `@dependabot reopen` will reopen this PR if it is closed
• `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
• `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
• `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
• `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.
facebook.com 
5
5
聯合新聞網 
g0v.hackmd.io 
小資女的理財賺錢術 
