Skip to content

chore(deps): Bump pbkdf2 from 3.1.3 to 3.1.7 - #1692

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pbkdf2-3.1.7
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/pbkdf2-3.1.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pbkdf2 from 3.1.3 to 3.1.7.

Changelog

Sourced from pbkdf2's changelog.

v3.1.7 - 2026-09-29

Commits

  • [Fix] hash long passwords once, not on every iteration 493d8d8
  • [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, @types/node, auto-changelog, tape bbc305e
  • [Tests] skip rmd160 in the long-password test on node 17 3905818

v3.1.6 - 2026-05-26

Commits

  • [New] add TypeScript type declarations fb1f747
  • [Fix] coerce -0 keylen to +0 7c4a495
  • [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore e3cce16
  • [eslint] fix an error f6b0e42
  • [Tests] fix npm run postlint b729629
  • [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog 5e0cf51
  • [Deps] update to-buffer 1c3b1f5
  • [readme] replace runkit CI badge with shields.io check-runs badge 528bd38

v3.1.5 - 2025-09-23

Commits

  • [Fix] only allow finite iterations 67bd94d
  • [Fix] restore node 0.10 support 8f59d96
  • [Fix] check parameters before the "no Promise" bailout d2dc5f0

v3.1.4 - 2025-09-22

Commits

  • [Deps] update create-hash, ripemd160, sha.js, to-buffer 8dbf49b
  • [meta] update repo URLs d15bc35
  • [Dev Deps] update @ljharb/eslint-config aaf870b
Commits
  • e09b47a v3.1.7
  • 3905818 [Tests] skip rmd160 in the long-password test on node 17
  • bbc305e [Dev Deps] update @arethetypeswrong/cli, @ljharb/eslint-config, `@types/n...
  • 493d8d8 [Fix] hash long passwords once, not on every iteration
  • ea4768b v3.1.6
  • b729629 [Tests] fix npm run postlint
  • 7c4a495 [Fix] coerce -0 keylen to +0
  • 5e0cf51 [Dev Deps] update @ljharb/eslint-config, @types/node, auto-changelog
  • 1c3b1f5 [Deps] update to-buffer
  • e3cce16 [Dev Deps] update @ljharb/eslint-config, @types/node, eslint, npmignore
  • Additional commits viewable in compare view

@dependabot dependabot Bot added 3. to review dependencies Pull requests that update a dependency file labels Oct 11, 2026
@CarlSchwan

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [pbkdf2](https://github.com/browserify/pbkdf2) from 3.1.3 to 3.1.7.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.3...v3.1.7)

---
updated-dependencies:
- dependency-name: pbkdf2
  dependency-version: 3.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump pbkdf2 from 3.1.3 to 3.1.7 chore(deps): Bump pbkdf2 from 3.1.3 to 3.1.7 Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/pbkdf2-3.1.7 branch from 1e6a17a to cac6348 Compare October 16, 2026 11:25

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant