{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":296424009,"defaultBranch":"main","name":"release-please-action","ownerLogin":"yoshi-code-bot","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2020-09-17T19:32:34.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/70984784?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1715708342.0","currentOid":""},"activityList":{"items":[{"before":"b95ea4222b563a6e44ec4eef3f3ea888e2c562ef","after":"bad09892da448c4b76733533aed2681fb0d9557f","ref":"refs/heads/release-please--branches--main--components--release-please-action","pushedAt":"2024-05-14T20:31:09.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore(main): release 5.0.0","shortMessageHtmlLink":"chore(main): release 5.0.0"}},{"before":"ddca6831a9799f19b32cd7a956c28de6cd9334cc","after":"b95ea4222b563a6e44ec4eef3f3ea888e2c562ef","ref":"refs/heads/release-please--branches--main--components--release-please-action","pushedAt":"2024-05-14T20:28:40.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore(main): release 5.0.0","shortMessageHtmlLink":"chore(main): release 5.0.0"}},{"before":"2c88140dc7946007fe27e31612b78abd2f26f0e6","after":"ddca6831a9799f19b32cd7a956c28de6cd9334cc","ref":"refs/heads/release-please--branches--main--components--release-please-action","pushedAt":"2024-05-14T20:15:49.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore(main): release 5.0.0","shortMessageHtmlLink":"chore(main): release 5.0.0"}},{"before":"e38465df9f6cea222149b946554c370fc2a6717e","after":"f3969c04a4ec81d7a9aa4010d84ae6a7602f86a7","ref":"refs/heads/main","pushedAt":"2024-05-14T20:15:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore(main): release 4.1.1 (#994)\n\n:robot: I have created a release *beep* *boop*\n---\n\n\n##\n[4.1.1](https://github.com/googleapis/release-please-action/compare/v4.1.0...v4.1.1)\n(2024-05-14)\n\n\n### Bug Fixes\n\n* bump release-please from 16.10.0 to 16.10.2\n([#969](https://github.com/googleapis/release-please-action/issues/969))\n([aa764e0](https://github.com/googleapis/release-please-action/commit/aa764e0b5db70af7b607fa690b4d1799ceb802d6))\n* bump the npm_and_yarn group with 1 update\n([#967](https://github.com/googleapis/release-please-action/issues/967))\n([ce529d4](https://github.com/googleapis/release-please-action/commit/ce529d4a4014c4760ec75d3ba6482e3b80d58862))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).","shortMessageHtmlLink":"chore(main): release 4.1.1 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2296032406\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googleapis/release-please-action/issues/994\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googleapis/release-please-action/pull/994/hovercard\" href=\"https://github.com/googleapis/release-please-action/pull/994\">googleapis#994</a>)"}},{"before":"e38465df9f6cea222149b946554c370fc2a6717e","after":"2c88140dc7946007fe27e31612b78abd2f26f0e6","ref":"refs/heads/release-please--branches--main--components--release-please-action","pushedAt":"2024-05-14T17:44:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore(main): release 4.1.1","shortMessageHtmlLink":"chore(main): release 4.1.1"}},{"before":null,"after":"e38465df9f6cea222149b946554c370fc2a6717e","ref":"refs/heads/release-please--branches--main--components--release-please-action","pushedAt":"2024-05-14T17:44:06.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore: build dist (#993)\n\nBuild dist","shortMessageHtmlLink":"chore: build dist (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2296022319\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googleapis/release-please-action/issues/993\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googleapis/release-please-action/pull/993/hovercard\" href=\"https://github.com/googleapis/release-please-action/pull/993\">googleapis#993</a>)"}},{"before":"ce529d4a4014c4760ec75d3ba6482e3b80d58862","after":"e38465df9f6cea222149b946554c370fc2a6717e","ref":"refs/heads/main","pushedAt":"2024-05-14T17:44:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore: build dist (#993)\n\nBuild dist","shortMessageHtmlLink":"chore: build dist (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2296022319\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googleapis/release-please-action/issues/993\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googleapis/release-please-action/pull/993/hovercard\" href=\"https://github.com/googleapis/release-please-action/pull/993\">googleapis#993</a>)"}},{"before":"948e96bff62ccb5930ae7530c504fe98176f2594","after":"26834fda3f23820fb13c25679baaf45e4cfcdea2","ref":"refs/heads/build-dist","pushedAt":"2024-05-14T17:39:12.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore: build dist","shortMessageHtmlLink":"chore: build dist"}},{"before":"ce529d4a4014c4760ec75d3ba6482e3b80d58862","after":"948e96bff62ccb5930ae7530c504fe98176f2594","ref":"refs/heads/build-dist","pushedAt":"2024-05-14T17:39:04.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"chore: build dist","shortMessageHtmlLink":"chore: build dist"}},{"before":null,"after":"ce529d4a4014c4760ec75d3ba6482e3b80d58862","ref":"refs/heads/build-dist","pushedAt":"2024-05-14T17:39:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"fix: bump the npm_and_yarn group with 1 update (#967)\n\nBumps the npm_and_yarn group with 1 update:\n[undici](https://github.com/nodejs/undici).\n\nUpdates `undici` from 5.27.2 to 5.28.4\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/nodejs/undici/releases\">undici's\nreleases</a>.</em></p>\n<blockquote>\n<h2>v5.28.4</h2>\n<h2>:warning: Security Release :warning:</h2>\n<ul>\n<li>Fixes <a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7\">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a>\nCVE-2024-30260</li>\n<li>Fixes <a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672\">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a>\nCVE-2024-30261</li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4\">https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4</a></p>\n<h2>v5.28.3</h2>\n<h2>⚠️ Security Release ⚠️</h2>\n<p>Fixes:</p>\n<ul>\n<li><a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-3787-6prv-h9w3\">CVE-2024-24758\nProxy-Authorization header not cleared on cross-origin redirect in\nfetch</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3\">https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3</a></p>\n<h2>v5.28.2</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>fix: remove optional chainning for compatible with Nodejs12 and\nbelow by <a href=\"https://github.com/bugb\"><code>@​bugb</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2470\">nodejs/undici#2470</a></li>\n<li>fix: remove <code>node:</code> prefix by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2471\">nodejs/undici#2471</a></li>\n<li>perf: avoid Headers initialization by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2468\">nodejs/undici#2468</a></li>\n<li>fix: handle SharedArrayBuffer correctly by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2466\">nodejs/undici#2466</a></li>\n<li>fix: Add <code>null</code> type to <code>signal</code> in\n<code>RequestInit</code> by <a\nhref=\"https://github.com/gebsh\"><code>@​gebsh</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2455\">nodejs/undici#2455</a></li>\n<li>fix: correctly handle data URL with hashes. by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2475\">nodejs/undici#2475</a></li>\n<li>fix: check response for timinginfo allow flag by <a\nhref=\"https://github.com/ToshB\"><code>@​ToshB</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2477\">nodejs/undici#2477</a></li>\n<li>Make call to onBodySent conditional in RetryHandler by <a\nhref=\"https://github.com/MzUgM\"><code>@​MzUgM</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2478\">nodejs/undici#2478</a></li>\n<li>refactor: better integrity check by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2462\">nodejs/undici#2462</a></li>\n<li>fix: Added support for inline URL username:password proxy auth by <a\nhref=\"https://github.com/matt-way\"><code>@​matt-way</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2473\">nodejs/undici#2473</a></li>\n<li>build(deps-dev): bump jsdom from 22.1.0 to 23.0.0 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2472\">nodejs/undici#2472</a></li>\n<li>build(deps-dev): bump sinon from 16.1.3 to 17.0.1 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2405\">nodejs/undici#2405</a></li>\n<li>build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2396\">nodejs/undici#2396</a></li>\n<li>build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2395\">nodejs/undici#2395</a></li>\n<li>build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 by\n<a href=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in\n<a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2392\">nodejs/undici#2392</a></li>\n<li>build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2389\">nodejs/undici#2389</a></li>\n<li>build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2302\">nodejs/undici#2302</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/bugb\"><code>@​bugb</code></a> made their\nfirst contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2470\">nodejs/undici#2470</a></li>\n<li><a href=\"https://github.com/gebsh\"><code>@​gebsh</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2455\">nodejs/undici#2455</a></li>\n<li><a href=\"https://github.com/ToshB\"><code>@​ToshB</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2477\">nodejs/undici#2477</a></li>\n<li><a href=\"https://github.com/MzUgM\"><code>@​MzUgM</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2478\">nodejs/undici#2478</a></li>\n<li><a href=\"https://github.com/matt-way\"><code>@​matt-way</code></a>\nmade their first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2473\">nodejs/undici#2473</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2\">https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2</a></p>\n<h2>v5.28.1</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>perf: Improve <code>normalizeMethod</code> by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2456\">nodejs/undici#2456</a></li>\n<li>fix: dispatch error handling by <a\nhref=\"https://github.com/ronag\"><code>@​ronag</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2459\">nodejs/undici#2459</a></li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/fb983069071f52e0a7ea0e71078459c765aae172\"><code>fb98306</code></a>\nBumped v5.28.4</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055\"><code>2b39440</code></a>\nMerge pull request from GHSA-9qxr-qj54-h672</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f\"><code>64e3402</code></a>\nMerge pull request from GHSA-m4v8-wqvr-p9f7</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/723c4e728051aefd5eb5ae7193dfb18046009f83\"><code>723c4e7</code></a>\nRevert &quot;build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2389\">#2389</a>)&quot;</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/0e9d54b2c2a5ec0b58937114c857a9ed9fe22d5b\"><code>0e9d54b</code></a>\nskip failing test due to Node.js changes</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/e71cb4c88faae5670a129fde5552266afc2dbc39\"><code>e71cb4c</code></a>\nBumped v5.28.3</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/20c65b89f4fda588ebb3f2abf51c55726880820e\"><code>20c65b8</code></a>\nFix tests for Node.js v20.11.0 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2618\">#2618</a>)</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/8ec52cde66e288ea98f9f801c29e6e845bf4c5f1\"><code>8ec52cd</code></a>\nFix tests for Node.js v21 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2609\">#2609</a>)</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/d3aa574b1259c1d8d329a0f0f495ee82882b1458\"><code>d3aa574</code></a>\nMerge pull request from GHSA-3787-6prv-h9w3</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/9a14e5f32a118fa93e769cc15ae8de9de552f2e4\"><code>9a14e5f</code></a>\nBumped v5.28.2</li>\n<li>Additional commits viewable in <a\nhref=\"https://github.com/nodejs/undici/compare/v5.27.2...v5.28.4\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.27.2&new-version=5.28.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore <dependency name> major version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency's major version (unless you unignore this specific\ndependency's major version or upgrade to it yourself)\n- `@dependabot ignore <dependency name> minor version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency's minor version (unless you unignore this specific\ndependency's minor version or upgrade to it yourself)\n- `@dependabot ignore <dependency name>` will close this group update PR\nand stop Dependabot creating any more for the specific dependency\n(unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore <dependency name>` will remove all of the ignore\nconditions of the specified dependency\n- `@dependabot unignore <dependency name> <ignore condition>` will\nremove the ignore condition of the specified dependency and ignore\nconditions\nYou can disable automated security fix PRs for this repo from the\n[Security Alerts\npage](https://github.com/google-github-actions/release-please-action/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"fix: bump the npm_and_yarn group with 1 update (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2226044303\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googleapis/release-please-action/issues/967\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googleapis/release-please-action/pull/967/hovercard\" href=\"https://github.com/googleapis/release-please-action/pull/967\">googleapis#967</a>)"}},{"before":"ad9980e828052bed2c7bb73b262825f1c126c0fd","after":"ce529d4a4014c4760ec75d3ba6482e3b80d58862","ref":"refs/heads/main","pushedAt":"2024-05-14T17:39:01.000Z","pushType":"push","commitsCount":487,"pusher":{"login":"yoshi-code-bot","name":null,"path":"/yoshi-code-bot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/70984784?s=80&v=4"},"commit":{"message":"fix: bump the npm_and_yarn group with 1 update (#967)\n\nBumps the npm_and_yarn group with 1 update:\n[undici](https://github.com/nodejs/undici).\n\nUpdates `undici` from 5.27.2 to 5.28.4\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/nodejs/undici/releases\">undici's\nreleases</a>.</em></p>\n<blockquote>\n<h2>v5.28.4</h2>\n<h2>:warning: Security Release :warning:</h2>\n<ul>\n<li>Fixes <a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7\">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a>\nCVE-2024-30260</li>\n<li>Fixes <a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672\">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a>\nCVE-2024-30261</li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4\">https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4</a></p>\n<h2>v5.28.3</h2>\n<h2>⚠️ Security Release ⚠️</h2>\n<p>Fixes:</p>\n<ul>\n<li><a\nhref=\"https://github.com/nodejs/undici/security/advisories/GHSA-3787-6prv-h9w3\">CVE-2024-24758\nProxy-Authorization header not cleared on cross-origin redirect in\nfetch</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3\">https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3</a></p>\n<h2>v5.28.2</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>fix: remove optional chainning for compatible with Nodejs12 and\nbelow by <a href=\"https://github.com/bugb\"><code>@​bugb</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2470\">nodejs/undici#2470</a></li>\n<li>fix: remove <code>node:</code> prefix by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2471\">nodejs/undici#2471</a></li>\n<li>perf: avoid Headers initialization by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2468\">nodejs/undici#2468</a></li>\n<li>fix: handle SharedArrayBuffer correctly by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2466\">nodejs/undici#2466</a></li>\n<li>fix: Add <code>null</code> type to <code>signal</code> in\n<code>RequestInit</code> by <a\nhref=\"https://github.com/gebsh\"><code>@​gebsh</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2455\">nodejs/undici#2455</a></li>\n<li>fix: correctly handle data URL with hashes. by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2475\">nodejs/undici#2475</a></li>\n<li>fix: check response for timinginfo allow flag by <a\nhref=\"https://github.com/ToshB\"><code>@​ToshB</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2477\">nodejs/undici#2477</a></li>\n<li>Make call to onBodySent conditional in RetryHandler by <a\nhref=\"https://github.com/MzUgM\"><code>@​MzUgM</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2478\">nodejs/undici#2478</a></li>\n<li>refactor: better integrity check by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2462\">nodejs/undici#2462</a></li>\n<li>fix: Added support for inline URL username:password proxy auth by <a\nhref=\"https://github.com/matt-way\"><code>@​matt-way</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2473\">nodejs/undici#2473</a></li>\n<li>build(deps-dev): bump jsdom from 22.1.0 to 23.0.0 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2472\">nodejs/undici#2472</a></li>\n<li>build(deps-dev): bump sinon from 16.1.3 to 17.0.1 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2405\">nodejs/undici#2405</a></li>\n<li>build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2396\">nodejs/undici#2396</a></li>\n<li>build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2395\">nodejs/undici#2395</a></li>\n<li>build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 by\n<a href=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in\n<a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2392\">nodejs/undici#2392</a></li>\n<li>build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2389\">nodejs/undici#2389</a></li>\n<li>build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by <a\nhref=\"https://github.com/dependabot\"><code>@​dependabot</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2302\">nodejs/undici#2302</a></li>\n</ul>\n<h2>New Contributors</h2>\n<ul>\n<li><a href=\"https://github.com/bugb\"><code>@​bugb</code></a> made their\nfirst contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2470\">nodejs/undici#2470</a></li>\n<li><a href=\"https://github.com/gebsh\"><code>@​gebsh</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2455\">nodejs/undici#2455</a></li>\n<li><a href=\"https://github.com/ToshB\"><code>@​ToshB</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2477\">nodejs/undici#2477</a></li>\n<li><a href=\"https://github.com/MzUgM\"><code>@​MzUgM</code></a> made\ntheir first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2478\">nodejs/undici#2478</a></li>\n<li><a href=\"https://github.com/matt-way\"><code>@​matt-way</code></a>\nmade their first contribution in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2473\">nodejs/undici#2473</a></li>\n</ul>\n<p><strong>Full Changelog</strong>: <a\nhref=\"https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2\">https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2</a></p>\n<h2>v5.28.1</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>perf: Improve <code>normalizeMethod</code> by <a\nhref=\"https://github.com/tsctx\"><code>@​tsctx</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2456\">nodejs/undici#2456</a></li>\n<li>fix: dispatch error handling by <a\nhref=\"https://github.com/ronag\"><code>@​ronag</code></a> in <a\nhref=\"https://redirect.github.com/nodejs/undici/pull/2459\">nodejs/undici#2459</a></li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/fb983069071f52e0a7ea0e71078459c765aae172\"><code>fb98306</code></a>\nBumped v5.28.4</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055\"><code>2b39440</code></a>\nMerge pull request from GHSA-9qxr-qj54-h672</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f\"><code>64e3402</code></a>\nMerge pull request from GHSA-m4v8-wqvr-p9f7</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/723c4e728051aefd5eb5ae7193dfb18046009f83\"><code>723c4e7</code></a>\nRevert &quot;build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2389\">#2389</a>)&quot;</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/0e9d54b2c2a5ec0b58937114c857a9ed9fe22d5b\"><code>0e9d54b</code></a>\nskip failing test due to Node.js changes</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/e71cb4c88faae5670a129fde5552266afc2dbc39\"><code>e71cb4c</code></a>\nBumped v5.28.3</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/20c65b89f4fda588ebb3f2abf51c55726880820e\"><code>20c65b8</code></a>\nFix tests for Node.js v20.11.0 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2618\">#2618</a>)</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/8ec52cde66e288ea98f9f801c29e6e845bf4c5f1\"><code>8ec52cd</code></a>\nFix tests for Node.js v21 (<a\nhref=\"https://redirect.github.com/nodejs/undici/issues/2609\">#2609</a>)</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/d3aa574b1259c1d8d329a0f0f495ee82882b1458\"><code>d3aa574</code></a>\nMerge pull request from GHSA-3787-6prv-h9w3</li>\n<li><a\nhref=\"https://github.com/nodejs/undici/commit/9a14e5f32a118fa93e769cc15ae8de9de552f2e4\"><code>9a14e5f</code></a>\nBumped v5.28.2</li>\n<li>Additional commits viewable in <a\nhref=\"https://github.com/nodejs/undici/compare/v5.27.2...v5.28.4\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.27.2&new-version=5.28.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore <dependency name> major version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency's major version (unless you unignore this specific\ndependency's major version or upgrade to it yourself)\n- `@dependabot ignore <dependency name> minor version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency's minor version (unless you unignore this specific\ndependency's minor version or upgrade to it yourself)\n- `@dependabot ignore <dependency name>` will close this group update PR\nand stop Dependabot creating any more for the specific dependency\n(unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore <dependency name>` will remove all of the ignore\nconditions of the specified dependency\n- `@dependabot unignore <dependency name> <ignore condition>` will\nremove the ignore condition of the specified dependency and ignore\nconditions\nYou can disable automated security fix PRs for this repo from the\n[Security Alerts\npage](https://github.com/google-github-actions/release-please-action/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"fix: bump the npm_and_yarn group with 1 update (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2226044303\" data-permission-text=\"Title is private\" data-url=\"https://github.com/googleapis/release-please-action/issues/967\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/googleapis/release-please-action/pull/967/hovercard\" href=\"https://github.com/googleapis/release-please-action/pull/967\">googleapis#967</a>)"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAESeHQewA","startCursor":null,"endCursor":null}},"title":"Activity · yoshi-code-bot/release-please-action"}