Pull Request Overview
- Opened on September 10, 2026
- Status Open
- Commit count 1 with first commit September 10, 2026
Total Delta
Open Days
Test Delta
How long has this pull request spent in each phase of its lifecycle?
| Fraction of total time | Business days | Phase |
|---|---|---|
|
|
0.0 days | Authoring 1 commit before pull request opened for review |
|
|
0.0 days | Awaiting first review |
|
|
7.0 days | Revising work with 0 commits in response to 1 review that left 2 comments |
Total time for pull request still awaiting merge (longer than repo's target): 7.0 business days
Bump joi from 17.13.3 to 17.13.6
Bumps joi from 17.13.3 to 17.13.6.
Commits
-
850be1e17.13.6 -
9faeeccMerge pull request #3139 from hapijs/chore/backport-messages-proto -
8d0b808fix: prevent messages proto injection -
566e73f17.13.5 -
3f3907cMerge pull request #3135 from hapijs/chore/backport-rename-proto -
172ececfix: prevent proto on renames -
30766a2chore: deny prototype pollution in objects by restoring prototype -
3d3ab7617.13.4 -
4bcdf36Merge pull request #3123 from hapijs/chore/backport-3113 -
97bd51dchore: backport #3113 to v17 - See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/react-native-windows/network/alerts).
###### Microsoft Reviewers: Open in CodeFlow
Comments Threads Pending Resolution
Copilot wasn't able to review any files in this pull request.
---
π‘ Add a `code-review` agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Resolved Comment Threads
No resolved comments have been left on this PR.