Skip to content

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2#143

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/basic-ftp-5.2.2
Closed

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2#143
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/basic-ftp-5.2.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps basic-ftp from 5.2.0 to 5.2.2.

Release notes

Sourced from basic-ftp's releases.

5.2.2

5.2.1

Changelog

Sourced from basic-ftp's changelog.

5.2.2

5.2.1

Commits
  • e9d09d6 Bump version
  • 20327d3 Move prevention of control character injection to more central place
  • ba40f9d Update dev dependencies
  • 6b0008b Bump version
  • 2ecc8e2 Reject control character injection attempts using paths
  • 515d21f Update security policy and reporting instructions
  • 9744254 Link to security advisory
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by patrickjuchli, a new releaser for basic-ftp since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.2.0 to 5.2.2.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](patrickjuchli/basic-ftp@v5.2.0...v5.2.2)

---
updated-dependencies:
- dependency-name: basic-ftp
  dependency-version: 5.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 10, 2026
@dependabot dependabot bot requested a review from garybrowndev as a code owner April 10, 2026 04:17
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 10, 2026
@github-actions github-actions bot added the github GitHub configuration, actions, and repository settings label Apr 10, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 10, 2026

🤖 Automated PR Report for f8619d8

Bundle Size Report (ci-bundle-analysis.yml)

Metric Size
Total dist size 2.59 MB
Main JS bundle 305.37 KB
Main CSS bundle 43.85 KB
Total assets 7 files

Recommendations

  • 🎯 Keep main JS bundle under 200 KB for optimal performance
  • 🎨 Keep CSS bundle under 50 KB
  • 📁 Keep total dist size under 2 MB

Bundle analysis completed at 2026-04-10T04:26:21.085Z

View Workflow Run

Chromium Browser Test Results (ci-chromium-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 24.22s
Accessibility Tests ✅ PASS 7 7 0 8.37s

View Workflow Run

Code Coverage Results (ci-coverage-reporting.yml)

Category Lines Statements Functions Branches
Total 62.73% 63.38% 74.26% 60.8%

View Workflow Run

Code Quality Results (ci-code-quality.yml)

Check Status
ESLint ✅ Passed
Prettier ✅ Passed

📊 Code Statistics

Metric Count
Files 29
Lines 16239

View Workflow Run

CodeQL Security Analysis (security-codeql-security-analysis.yml)

Total Alerts: 0

Severity Breakdown

Severity Count
🔴 Error 0
⚠️ Warning 0
ℹ️ Note 0

✅ No security alerts found.

View Workflow Run

Dependency Review (security-dependency-review.yml)

✅ No vulnerabilities or denied packages found.

View Workflow Run

Firefox Browser Test Results (ci-firefox-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 29.11s
Accessibility Tests ✅ PASS 7 7 0 12.02s

View Workflow Run

Lighthouse Audit - Desktop (ci-lighthouse-desktop.yml)

📊 Desktop Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Mobile (ci-lighthouse-mobile.yml)

📊 Mobile Lighthouse Results

Tested URL: http://localhost:9222/pinball-trainer-standalone.html

Metric Score
Performance 91%
Accessibility 100%
Best Practices 96%
SEO 100%

Reports:

View Workflow Run

Lighthouse Audit - Surge Desktop (cd-deploy-pr-preview.yml)

🖥️ Desktop Lighthouse Results

Tested URL: https://pinball-trainer-pr-143.surge.sh/

Metric Score
Performance 100%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

Lighthouse Audit - Surge Mobile (cd-deploy-pr-preview.yml)

📱 Mobile Lighthouse Results

Tested URL: https://pinball-trainer-pr-143.surge.sh/

Metric Score
Performance 90%
Accessibility 100%
Best Practices 96%
SEO 63%

Reports:

View Workflow Run

npm Audit Results (security-npm-audit.yml)

⚠️ Found 20 vulnerabilities.

Severity Count
Moderate 5
High 5
Total 10

View Workflow Run

OWASP Dependency Check (security-owasp-dependency-check.yml)

Total Vulnerabilities: 0

Severity Breakdown

Severity Count
🔴 High/Critical 0
⚠️ Medium 0
ℹ️ Low 0

✅ No vulnerabilities found.

View Workflow Run

Preview Deployment (cd-deploy-pr-preview.yml)

Your preview deployment is ready!

🔗 Preview URL: https://pinball-trainer-pr-143.surge.sh

What's included:

  • ✅ Standalone HTML build (same as production)
  • ✅ All assets embedded inline
  • ✅ Fully offline-capable
  • ✅ Production optimizations

Testing checklist:

  • Test dark mode toggle
  • Test preset loading
  • Test practice mode
  • Test recall mode
  • Test PWA install prompt
  • Test offline functionality

Preview will be updated on each new commit to this PR.


Deployed at 2026-04-10T04:23:16.431Z

View Workflow Run

Pull Request Labeler (automation-label-pull-request.yml)

PR: chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 (#143)

Current Labels

  • dependencies
  • github

View Workflow Run

Standalone Build Results (ci-standalone-build.yml)

File Size
pinball-trainer-standalone.html 0.80 MB

View Workflow Run

Trivy Security Scan (security-trivy-scan.yml)

Trivy scan completed. Results have been uploaded to the GitHub Security tab.

Scanned Categories

  • ✅ Vulnerabilities (CRITICAL, HIGH)
  • ✅ Secrets / Credentials
  • ✅ Infrastructure Configuration

View Workflow Run

Unit Test Results (ci-unit-tests.yml)

Suite Status Tests Failures Errors Time
Unit Tests ✅ PASS 253 0 0 145s
Accessibility Tests ✅ PASS 7 0 0 1s

View Workflow Run

Visual Regression Results (ci-visual-regression-tests.yml)

Suite Status Total Passed Failed Time
Visual Comparison ✅ PASS 24 24 0 53.74s

View Workflow Run

WebKit Browser Test Results (ci-webkit-browser-tests.yml)

Suite Status Total Passed Failed Time
E2E Tests ✅ PASS 11 11 0 65.4s
Accessibility Tests ✅ PASS 7 7 0 16.46s

View Workflow Run

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 10, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 12, 2026

Looks like basic-ftp is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Apr 12, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/basic-ftp-5.2.2 branch April 12, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github GitHub configuration, actions, and repository settings

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants