[MelvinBot]

Details

Bumps transitive joi 17.9.2 → 17.13.8 (and @sideway/address 4.1.4 → 4.1.5, required by it) in package-lock.json. Fixes Dependabot alerts #53, #74, #75, #79.

Usage: Not used by this library's code. It's a peer-only transitive dep: react-native → @react-native-community/cli-config / cli-types, which use joi to validate react-native.config.js. Not shipped in dist.

Change Log

• 17.10.0: uuidv6/7/8 guids; Buffer coercion from JSON; type fixes
• 17.10.1: any.error() return type fix
• 17.10.2: template reference / formula parsing fixes
• 17.11.0: custom expression functions
• 17.11.1: number().multiple() precision; TS type fixes; alternatives labels
• 17.12.0: 0x prefix for hex strings
• 17.12.1: domain TLD validation by default
• 17.12.2: State['path'] type fix
• 17.12.3: bigint in unique rule
• 17.13.0: URI encoding support
• 17.13.1: errors.label: false hides explicit labels
• 17.13.2: stripUnknown honors local .unknown(false)
• 17.13.3: alternatives error function type fix
• 17.13.4: security: RangeError on deeply nested link() schemas
• 17.13.5: security: prototype set via rename() template
• 17.13.6: security: __proto__ injection in messages
• 17.13.7: security: isoDate() regex backtracking
• 17.13.8: backport #3151

Related Issues

https://github.com/Expensify/Expensify/issues/695883

Manual Tests

1. npm ci succeeds and npm ls joi shows 17.13.8.
2. npm run build, npx eslint src, npm run ts pass.
3. npx react-native config (uses joi) runs without errors.

Linked PRs

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[amyevans]

@MelvinBot per #43 (comment) you need to post the phrase "I have read the CLA Document and I hereby sign the CLA" to sign the CLA

[melvin-bot]

I have read the CLA Document and I hereby sign the CLA

[amyevans]

recheck

[chiragsalian]

Archiving this repository so closing out this PR