Skip to content

Bump smol-toml from 1.6.0 to 1.6.1#218

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/smol-toml-1.6.1
Open

Bump smol-toml from 1.6.0 to 1.6.1#218
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/smol-toml-1.6.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 26, 2026

Bumps smol-toml from 1.6.0 to 1.6.1.

Release notes

Sourced from smol-toml's releases.

v1.6.1

This release addresses a minor security vulnerability where an attacker-controlled TOML document can exploit an unrestricted recustion and cause a stack overflow error with a document that contains thousands of sucessive commented lines. Security advisory: GHSA-v3rj-xjv7-4jmq

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Mar 26, 2026

Deploying research-cloudflare-com with  Cloudflare Pages  Cloudflare Pages

Latest commit: 82a444c
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/smol-toml-1.6.1 branch from 4ac1704 to 45454d3 Compare April 24, 2026 14:53
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Apr 24, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
cloudflare-research 82a444c Commit Preview URL

Branch Preview URL
Apr 24 2026, 04:13 PM

Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: smol-toml
  dependency-version: 1.6.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/smol-toml-1.6.1 branch from 45454d3 to 82a444c Compare April 24, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants