Bump the npm_and_yarn group with 26 updates #41
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 26 updates: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `3.2.0` | `3.2.2` | | [axios](https://github.com/axios/axios) | `0.21.1` | `0.28.0` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `2.0.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.20` | `4.17.21` | | [moment](https://github.com/moment/moment) | `2.29.1` | `2.29.4` | | [qs](https://github.com/ljharb/qs) | `6.9.4` | `6.9.7` | | [ws](https://github.com/websockets/ws) | `7.4.2` | `7.5.10` | | [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.2.6` | `1.9.1` | | [electron](https://github.com/electron/electron) | `11.1.1` | `22.3.25` | | [webpack](https://github.com/webpack/webpack) | `4.44.1` | `5.94.0` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `3.7.2` | `5.3.4` | | [browserslist](https://github.com/browserslist/browserslist) | `4.16.0` | `4.23.3` | | [color-string](https://github.com/Qix-/color-string) | `1.5.4` | `1.9.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [ejs](https://github.com/mde/ejs) | `3.1.5` | `3.1.10` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.3` | `6.5.7` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.13.0` | `1.15.6` | | [jszip](https://github.com/Stuk/jszip) | `3.5.0` | `3.10.1` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.1` | `2.7.0` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [simple-get](https://github.com/feross/simple-get) | `3.1.0` | `3.1.1` | | [ssri](https://github.com/npm/ssri) | `6.0.1` | `8.0.0` | | [terser](https://github.com/terser/terser) | `4.8.0` | `5.31.6` | | [tmpl](https://github.com/daaku/nodejs-tmpl) | `1.0.4` | `1.0.5` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.21` | `0.7.38` | Updates `async` from 3.2.0 to 3.2.2 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.0...v3.2.2) Updates `axios` from 0.21.1 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.21.1...v0.28.0) Updates `ip` from 1.1.5 to 2.0.1 - [Commits](indutny/node-ip@v1.1.5...v2.0.1) Updates `lodash` from 4.17.20 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.20...4.17.21) Updates `moment` from 2.29.1 to 2.29.4 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.29.1...2.29.4) Updates `qs` from 6.9.4 to 6.9.7 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.4...v6.9.7) Updates `ws` from 7.4.2 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.2...7.5.10) Updates `@actions/core` from 1.2.6 to 1.9.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Updates `electron` from 11.1.1 to 22.3.25 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v11.1.1...v22.3.25) Updates `webpack` from 4.44.1 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v4.44.1...v5.94.0) Updates `webpack-dev-middleware` from 3.7.2 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v5.3.4) Updates `browserslist` from 4.16.0 to 4.23.3 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.16.0...4.23.3) Updates `color-string` from 1.5.4 to 1.9.1 - [Release notes](https://github.com/Qix-/color-string/releases) - [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md) - [Commits](Qix-/color-string@1.5.4...1.9.1) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `ejs` from 3.1.5 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.5...v3.1.10) Updates `elliptic` from 6.5.3 to 6.5.7 - [Commits](indutny/elliptic@v6.5.3...v6.5.7) Updates `follow-redirects` from 1.13.0 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.0...v1.15.6) Updates `jszip` from 3.5.0 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.5.0...v3.10.1) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `node-fetch` from 2.6.1 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.1...v2.7.0) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `simple-get` from 3.1.0 to 3.1.1 - [Commits](feross/simple-get@v3.1.0...v3.1.1) Updates `ssri` from 6.0.1 to 8.0.0 - [Release notes](https://github.com/npm/ssri/releases) - [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md) - [Commits](npm/ssri@v6.0.1...v8.0.0) Updates `terser` from 4.8.0 to 5.31.6 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/commits) Updates `tmpl` from 1.0.4 to 1.0.5 - [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5) Updates `ua-parser-js` from 0.7.21 to 0.7.38 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@0.7.21...0.7.38) --- updated-dependencies: - dependency-name: async dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ip dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: moment dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@actions/core" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: electron dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: browserslist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: color-string dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: simple-get dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ssri dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmpl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
This was referenced Aug 31, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 26 updates:
3.2.03.2.20.21.10.28.01.1.52.0.14.17.204.17.212.29.12.29.46.9.46.9.77.4.27.5.101.2.61.9.111.1.122.3.254.44.15.94.03.7.25.3.44.16.04.23.31.5.41.9.10.2.00.2.23.1.53.1.106.5.36.5.71.13.01.15.63.5.03.10.11.2.51.2.82.6.12.7.01.0.61.0.73.1.03.1.16.0.18.0.04.8.05.31.61.0.41.0.50.7.210.7.38Updates
asyncfrom 3.2.0 to 3.2.2Changelog
Sourced from async's changelog.
Commits
acc084eVersion 3.2.2acd7316Update built filesb50d648update changelog for 3.2.2e1ecdbfFix prototype pollution vulnerabilityfc9ba65Fix(docs): use pluralcallbacksword inlib/map.js(#1765)b1b69b0regen docscac52e3update changelogd1af045Version 3.2.1b31840eUpdate built files159a119Enhance examples for Collections methods. (#1726)Updates
axiosfrom 0.21.1 to 0.28.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
3b7635a[Release] v0.28.0 (#6211)27c0076feat(backport): added ability for paramsSerializer to handle function; (#6227)80c3d74chore(ci): backported publish action; (#6224)2755df5fix(security): fixed CVE-2023-45857 by backportingwithXSRFTokenoption to ...880b42edocs: Fix a typo in READMEc4bf0a4Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)1e2679ffix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...80b546cfix: loosing request header (#4858) (#4871)6acb5effeat: brower platform add data protocol. (#4814)bbb2264fix(typing): axios response headers can be undefined (#4813)Maintainer changes
This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.
Updates
ipfrom 1.1.5 to 2.0.1Commits
3b0994a2.0.132f468flib: fixed CVE-2023-42282 and added unit test4b2f4e72.0.0369d56dlib: use Buffer.allocaf82ef41.1.6dba19f6package: exclude test folder from publishing7cd7f30ci: use github workflows4de50aelib: node 18 supportUpdates
lodashfrom 4.17.20 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionUpdates
momentfrom 2.29.1 to 2.29.4Changelog
Sourced from moment's changelog.
Commits
000ac18Build 2.24.4f2006b6Bump version to 2.24.4536ad0cUpdate changelog for 2.29.49a3b589[bugfix] Fix redos in preprocessRFC2822 regex (#6015)6374fd8Merge branch 'master' into developb4e6153Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"7aebb16[bugfix] Fix redos in preprocessRFC2822 regex (#6015)57c9062Build 2.29.3aaf50b6Fixup release complaints26f4aefBump version to 2.29.3Updates
qsfrom 6.9.4 to 6.9.7Changelog
Sourced from qs's changelog.
Commits
4cd0032v6.9.7e799ba5[Fix]parse: ignore__proto__keys (#428)02ca358[Robustness]stringify: avoid relying on a globalundefined(#427)4a17709[Fix]stringify: avoid encoding arrayformat comma when `encodeValuesOnly = ...c0e13e9[readme] remove travis badge; add github actions/codecov badges; update URLs4113a5f[Tests] clean up stringify tests slightly749a584[Docs] add note and links for coercing primitive values (#408)cce2082[meta] fix README.md (#399)c44f0c5Revert "[meta] ignore eclint transitive audit warning"e6cfd8b[actions] backport actions from mainUpdates
wsfrom 7.4.2 to 7.5.10Release notes
Sourced from ws's releases.
... (truncated)
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)8a78f87[dist] 7.5.90435e6e[security] Fix same host check for ws+unix: redirects4271f07[dist] 7.5.8dc1781b[security] Drop sensitive headers when following insecure redirects2758ed3[fix] Abort the handshake if the Upgrade header is invalida370613[dist] 7.5.71f72e2e[security] Drop sensitive headers when following redirects (#2013)8ecd890[dist] 7.5.6Updates
@actions/corefrom 1.2.6 to 1.9.1Changelog
Sourced from
@actions/core's changelog.Commits
Updates
electronfrom 11.1.1 to 22.3.25Commits
1c1c132chore: cherry-pick 3fbd1dca6a4d from libvpx (#40026)d892c2bbuild: fixup autoninja (#39899)6132e80build: run on circle hosts for forks (#39865)a953199build: use aks backed runners for linux builds (#39838)056eacfchore: cherry-pick b2eab7500a18 from chromium (#39827)5f8ef81fix: ensure app load is limited to real asar files when appropriate (#39811)4995c9echore: cherry-pick 1 changes from Release-3-M116 (#39758)e29cdacbuild: fix depot_tools patch application (#39751)b58903dchore: cherry-pick 1 changes from Release-2-M116 (#39689)33f9dcechore: cherry-pick 2 changes from Release-1-M116 (#39648)Updates
webpackfrom 4.44.1 to 5.94.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
eabf85dchore(release): 5.94.0955e057security: fix DOM clobbering in auto public path9822387test: fixcbb86edtest: fix5ac3d7ffix: unexpected asi generation with sequence expression2411661security: fix DOM clobbering in auto public pathb8c03d4fix: unexpected asi generation with sequence expressionf46a03crevert: do not use heuristic fallback for "module-import"60f1898fix: do not use heuristic fallback for "module-import"66306aaRevert "fix: module-import get fallback from externalsPresets"Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Updates
webpack-dev-middlewarefrom 3.7.2 to 5.3.4Release notes
Sourced from webpack-dev-middleware's releases.
... (truncated)
Changelog
Sourced from webpack-dev-middleware's changelog.
... (truncated)
Commits
86071eachore(release): 5.3.4189c4acfix(security): do not allow to read files above (#1779)f3c62b8chore(release): 5.3.3eeb8aa8fix: types forRequestandResponse(#1271)1a45388chore(release): 5.3.2b8fb945chore(deps): memfs force update (#1269)f88067dchore: update deps and ci (#1260)7186318chore(deps-dev): bump@commitlint/cli57c50efci: updatecheckout,setup-node, andcodecovactions (#1267)840146achore(deps-dev): bump@babel/preset-envUpdates
browserslistfrom 4.16.0 to 4.23.3Release notes
Sourced from browserslist's releases.
Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
ee095bdRelease 4.32.3 version0f4e6f7Update dependencies8f87b3cfix: browser ray gt or gte compare with latest version (#836)cdcfbc0Release 4.23.2 version9e8188bUpdate dependencies543fc48Update Firefox ESRedd5309Release 4.23.1 version9e8ca3dSimplify codebbe6821Update locka36e1adUpdate ESLint and dependenciesUpdates
color-stringfrom 1.5.4 to 1.9.1Release notes
Sourced from color-string's releases.
... (truncated)
Commits
d9b04bb1.9.1937b690fix to.keyword returning Object.prototype values (#67)4daceef1.9.094a429eadd parsing of exponential alpha values for HWB and HSLfc2f8801.8.232f3e00fix incorrect handling of optional comma in rgb() regex (fixes #65)0766ca71.8.10710543Fix rgb alpha percentage parsing from int to floatab299a71.8.0bea8702add anchors to keyword regexUpdates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
ejsfrom 3.1.5 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807dVersion 3.1.109ee26ddMocha TDDe469741Basic pollution protection715e950Merge pull request #756 from Jeffrey-mu/maincabe314Include advanced usage examples29b076cAdded header11503c7Merge branch 'main' of github.com:mde/ejs into main7690404Added security banner to READMEf47d7aeUpdate SECURITY.md828cea1Update SECURITY.mdUpdates
ellipticfrom 6.5.3 to 6.5.7Commits
3e46a486.5.7accb61elib: DER signature decoding correction