Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Chore(deps): security updates for February 2025 #3597

Open
wants to merge 17 commits into
base: dev
Choose a base branch
from
Open

Chore(deps): security updates for February 2025 #3597

wants to merge 17 commits into from

Conversation

Mnickii
Copy link
Contributor

@Mnickii Mnickii commented Feb 11, 2025 •
edited
Loading

This pull request primarily focuses on upgrading various dependencies to their latest versions.

Dependency updates:

  • Updated @babel/runtime from version 7.26.0 to 7.26.7.
  • Updated @fluentui/react-components from version 9.56.8 to 9.58.3, @fluentui/react-icons from version 2.0.270 to 2.0.274, and @fluentui/react from version 8.122.4 to 8.122.9.
  • Updated bfj from version 8.0.0 to 9.1.2.
  • Updated fs-extra from version 11.2.0 to 11.3.0.
  • Updated sass from version 1.83.1 to 1.84.0 and typescript from version 5.7.2 to 5.7.3.

Development dependency updates:

  • Updated @playwright/test from version 1.49.1 to 1.50.1.
  • Updated @types/selenium-webdriver from version 4.1.27 to 4.1.28, @typescript-eslint/eslint-plugin from version 8.16.0 to 8.24.0, and @typescript-eslint/parser from version 8.16.0 to 8.22.0.
  • Updated chromedriver from version 131.0.1 to 133.0.0.
  • Updated selenium-webdriver from version 4.27.0 to 4.28.1 and start-server-and-test from version 2.0.9 to 2.0.10.Bump start-server-and-test from 2.0.9 to 2.0.10

@dependabot
Chore(deps-dev): Bump start-server-and-test from 2.0.9 to 2.0.10 (#3562)
8b0255e 
Bumps [start-server-and-test](https://github.com/bahmutov/start-server-and-test) from 2.0.9 to 2.0.10.
- [Release notes](https://github.com/bahmutov/start-server-and-test/releases)
- [Commits](bahmutov/start-server-and-test@v2.0.9...v2.0.10)

---
updated-dependencies:
- dependency-name: start-server-and-test
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Mnickii Mnickii requested a review from a team as a code owner February 11, 2025 13:28
Mnickii and others added 8 commits February 11, 2025 16:29
@Mnickii
Merge branch 'dev' into dependabot-upgrades
81821ad
@dependabot
Chore(deps-dev): Bump @typescript-eslint/parser from 8.16.0 to 8.22.0 (…
8f546b7 
…#3563)

Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.16.0 to 8.22.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.22.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump @babel/runtime from 7.26.0 to 7.26.7 (#3564)
693756c 
Bumps [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) from 7.26.0 to 7.26.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.7/packages/babel-runtime)

---
updated-dependencies:
- dependency-name: "@babel/runtime"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump eslint-plugin-react from 7.37.2 to 7.37.4 (#3565)
5b5d741 
Bumps [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) from 7.37.2 to 7.37.4.
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.2...v7.37.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-react
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump typescript from 5.7.2 to 5.7.3 (#3568)
e712929 
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.7.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.7.2...v5.7.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps-dev): Bump selenium-webdriver and @types/selenium-webdriver (
2edd948 
#3569)

Bumps [selenium-webdriver](https://github.com/SeleniumHQ/selenium) and [@types/selenium-webdriver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/selenium-webdriver). These dependencies needed to be updated together.

Updates `selenium-webdriver` from 4.27.0 to 4.28.1
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](https://github.com/SeleniumHQ/selenium/commits)

Updates `@types/selenium-webdriver` from 4.1.27 to 4.1.28
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/selenium-webdriver)

---
updated-dependencies:
- dependency-name: selenium-webdriver
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/selenium-webdriver"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump @fluentui/react from 8.122.4 to 8.122.9 (#3570)
9af6680 
Bumps [@fluentui/react](https://github.com/microsoft/fluentui) from 8.122.4 to 8.122.9.
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Changelog](https://github.com/microsoft/fluentui/blob/master/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react_v8.122.4...@fluentui/react_v8.122.9)

---
updated-dependencies:
- dependency-name: "@fluentui/react"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump bfj from 8.0.0 to 9.1.2 (#3571)
949ac60 
Bumps [bfj](https://gitlab.com/philbooth/bfj) from 8.0.0 to 9.1.2.
- [Changelog](https://gitlab.com/philbooth/bfj/blob/master/HISTORY.md)
- [Commits](https://gitlab.com/philbooth/bfj/compare/8.0.0...9.1.2)

---
updated-dependencies:
- dependency-name: bfj
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added 8 commits February 11, 2025 18:57
@dependabot
Chore(deps): Bump sass from 1.83.1 to 1.84.0 (#3604)
e5c1204 
Bumps [sass](https://github.com/sass/dart-sass) from 1.83.1 to 1.84.0.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.83.1...1.84.0)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps-dev): Bump @playwright/test from 1.49.1 to 1.50.1 (#3579)
47c90ca 
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.49.1 to 1.50.1.
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.49.1...v1.50.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump fs-extra from 11.2.0 to 11.3.0 (#3580)
acbbdd2 
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) from 11.2.0 to 11.3.0.
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.2.0...11.3.0)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump @fluentui/react-icons from 2.0.270 to 2.0.274 (#3581)
a4dab7f 
Bumps [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) from 2.0.270 to 2.0.274.
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/fluentui-android-system-icons-release.yml)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

---
updated-dependencies:
- dependency-name: "@fluentui/react-icons"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump @fluentui/react-components from 9.56.8 to 9.58.3 (#…
488f613 
…3603)

Bumps [@fluentui/react-components](https://github.com/microsoft/fluentui) from 9.56.8 to 9.58.3.
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Changelog](https://github.com/microsoft/fluentui/blob/master/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.56.8...@fluentui/react-components_v9.58.3)

---
updated-dependencies:
- dependency-name: "@fluentui/react-components"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps-dev): Bump @typescript-eslint/eslint-plugin (#3600)
6d94d4a 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.16.0 to 8.24.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.24.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps-dev): Bump chromedriver from 131.0.1 to 133.0.0 (#3599)
f28a47e 
Bumps [chromedriver](https://github.com/giggio/node-chromedriver) from 131.0.1 to 133.0.0.
- [Commits](giggio/node-chromedriver@131.0.1...133.0.0)

---
updated-dependencies:
- dependency-name: chromedriver
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Chore(deps): Bump @babel/core from 7.26.0 to 7.26.8 (#3601)
0cc7fc8 
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.26.0 to 7.26.8.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.8/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ElinorW ElinorW ElinorW approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Mnickii @ElinorW