Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm group across 1 directory with 8 updates #745

Merged
merged 2 commits into from
Jan 14, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 14, 2025

Bumps the npm group with 7 updates in the / directory:

Package From To
@biomejs/biome 1.7.3 1.9.4
axios 0.28.1 0.29.0
browserify 17.0.0 17.0.1
jasmine 5.1.0 5.5.0
karma 6.4.3 6.4.4
typescript 5.4.5 5.7.3
uglify-js 3.17.4 3.19.3

Updates @biomejs/biome from 1.7.3 to 1.9.4

Release notes

Sourced from @​biomejs/biome's releases.

CLI v1.9.4

Analyzer

Bug fixes

  • Improved the message for unused suppression comments. Contributed by @​dyc3

  • Fix #4228, where the rule a11y/noInteractiveElementToNoninteractiveRole incorrectly reports a role for non-interactive elements. Contributed by @​eryue0220

  • noSuspiciousSemicolonInJsx now catches suspicious semicolons in React fragments. Contributed by @​vasucp1207

CLI

Enhancements

  • The --summary reporter now reports parsing diagnostics too. Contributed by @​ematipico

  • Improved performance of GritQL queries by roughly 25-30%. Contributed by @​arendjr

Configuration

Bug fixes

  • Fix an issue where the JSON schema marked lint rules options as mandatory. Contributed by @​ematipico

Formatter

Bug fixes

  • Fix #4121. Respect line width when printing multiline strings. Contributed by @​ah-yu

Linter

New features

Bug Fixes

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

v1.9.4 (2024-10-17)

Analyzer

Bug fixes

  • Implement GraphQL suppression action. Contributed by @​vohoanglong0107

  • Improved the message for unused suppression comments. Contributed by @​dyc3

  • Fix #4228, where the rule a11y/noInteractiveElementToNoninteractiveRole incorrectly reports a role for non-interactive elements. Contributed by @​eryue0220

  • noSuspiciousSemicolonInJsx now catches suspicious semicolons in React fragments. Contributed by @​vasucp1207

  • The syntax rule noTypeOnlyImportAttributes now ignores .cts files (#4361).

    Since TypeScript 5.3, type-only imports can be associated to an import attribute in CommonJS-enabled files. See the TypeScript docs.

    The following code is no longer reported as a syntax error:

    import type { TypeFromRequire } from "pkg" with {
        "resolution-mode": "require"
    };

    Note that this is only allowed in files ending with the cts extension.

    Contributed by @​Conaclos

CLI

Enhancements

  • The --summary reporter now reports parsing diagnostics too. Contributed by @​ematipico

  • Improved performance of GritQL queries by roughly 25-30%. Contributed by @​arendjr

Configuration

Bug fixes

  • Fix an issue where the JSON schema marked lint rules options as mandatory. Contributed by @​ematipico

Editors

Formatter

Bug fixes

... (truncated)

Commits

Updates axios from 0.28.1 to 0.29.0

Release notes

Sourced from axios's releases.

v0.29.0

Release notes:

Bug Fixes

Contributors to this release

Changelog

Sourced from axios's changelog.

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

  • fix(backport): backport security fixes in commits #6167 and #6163 (#6402)
  • fix: omit nulls in params (#6394)
  • fix(backport): fix paramsSerializer function validation (#6361)
  • fix: regular expression denial of service (ReDoS) (#6708)
Commits

Updates browserify from 17.0.0 to 17.0.1

Release notes

Sourced from browserify's releases.

v17.0.1

  • Use hasown instead of has. (4b1a5dc)
  • Use String.prototype.slice instead of String.prototype.substr. (#2036)
  • Support relative paths in the noParse option. (#2080)
Changelog

Sourced from browserify's changelog.

17.0.1

  • Use hasown instead of has. (4b1a5dc)
  • Use String.prototype.slice instead of String.prototype.substr. (#2036)
  • Support relative paths in the noParse option. (#2080)
Commits
  • d1d3fed 17.0.1
  • c8f43c7 Merge pull request #2080 from goldim/pass-noparse-files-to-mdeps
  • 0bea7b7 Update test/noparse.js
  • 2557674 Update test/noparse.js
  • 7791742 Update test/noparse.js
  • 27d7564 Added regression test for noParse option with relative paths
  • dac674a Pass modified no parse full paths into module-deps
  • 4b1a5dc [Refactor] use hasown instead of has
  • 80d8c1e Merge pull request #2036 from CommanderRoot/refactor/rm-deprecated-substr
  • a084959 refactor: replace deprecated String.prototype.substr()
  • Additional commits viewable in compare view

Updates jasmine from 5.1.0 to 5.5.0

Release notes

Sourced from jasmine's releases.

v5.5.0

Please see the release notes.

v5.4.0

Please see the release notes.

v5.3.1

Please see the release notes.

v5.3.0

Please see the release notes.

v5.2.0

Please see the release notes.

Commits
  • 2cd62ca Bump version to 5.5.0
  • fab4c45 Support and generate .mjs config files
  • 1889c7c Set forbidDuplicateNames: true in newly generated configs
  • 86d27dc Don't suggest jasmine as a variable name, to avoid confusion with jasmine-core
  • 9066695 Bump version to 5.4.0
  • c590650 Bump version to 5.3.1
  • bff25e1 Fixed README formatting
  • 1bba22b Updated copyright date
  • 53a4077 Removed broken Fossa badge from Readme
  • 12fd347 Handle non-serializable expected and actual values in parallel mode
  • Additional commits viewable in compare view

Updates jasmine-core from 5.1.2 to 5.5.0

Release notes

Sourced from jasmine-core's releases.

v5.5.0

Please see the release notes.

v5.4.0

Please see the release notes.

v5.3.0

Please see the release notes.

v5.2.0

Please see the release notes.

Commits
  • 483d4ab Bump version to 5.5.0
  • 663dfe5 Updated release instructions
  • ce9c752 Added debug logging to flaky test
  • d5e7bc9 Optionally enforce uniqueness of spec and suite names
  • 744e765 Update copyright date
  • 29551ba Prettier
  • bd9a3b2 Include property value mismatches in diffs even when there are missing or ext...
  • c8c3325 Bump version to 5.4.0
  • 84c7e2b Fixed de-duplication of exception messages containing blank lines on Node and...
  • dda25bb Removed references to PhantomJS from StackTraceSpec.js
  • Additional commits viewable in compare view

Updates karma from 6.4.3 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

Commits

Updates typescript from 5.4.5 to 5.7.3

Release notes

Sourced from typescript's releases.

TypeScript 5.7.3

For release notes, check out the release announcement.

Downloads are available on npm

TypeScript 5.7

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.7 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.7 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.6.3

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

... (truncated)

Commits
  • a5e123d Update LKG
  • 8bc0204 🤖 Pick PR #60828 (Fix CodeQL configuration, releases) into release-5.7 (#60923)
  • 7aa63df 🤖 Pick PR #60393 (Don't try to add an implicit undefi...) into release-5.7 (#...
  • 9df7c36 Bump version to 5.7.3 and LKG
  • e167412 🤖 Pick PR #60794 (Harden sanitizeLog against incorr...) into release-5.7 (#...
  • 9ba364c Fix coverage build on release-5.7 (#60792)
  • 4b7441a 🤖 Pick PR #60680 (Mark the inherited any-based index ...) into release-5.7 (#...
  • e844dc3 Cherry-pick #60402, #60440, #60616 into release-5.7 (#60777)
  • 21b02a1 🤖 Pick PR #60749 (Do not require import attribute on ...) into release-5.7 (#...
  • b82fd16 🤖 Pick PR #60576 (Avoid incorrectly reusing assertion...) into release-5.7 (#...
  • Additional commits viewable in compare view

Updates uglify-js from 3.17.4 to 3.19.3

Release notes

Sourced from uglify-js's releases.

v3.19.3

Bug Fixes

  • assignment operator (abefd944eaebfd20d7f01e75353de2c5260bd586, cf87290819d87bfec842503ae655eafeffd5bdb6)
  • function call (4a92cdc4807a01bcaba9003a45a0e13c46653a8f)
  • function literal (303417cb64f145b52d8162ad2ffb8a48c56aac38)
  • property accessor (f34fbb2c36b2fd1cfe38aa12d103cdeb3916c73d, 23f98ba3e19b30bfd47de7c1a4740f8aa442b333, abefd944eaebfd20d7f01e75353de2c5260bd586, cf87290819d87bfec842503ae655eafeffd5bdb6)

v3.19.2

Features

  • improve compression of logical expressions (c7152b5e6618089c359d8f6c944572997271cfc9, cd0a8ec757156737a71be697b0cdd4a95a2dd6ab)
  • simplify collapsed assignment expressions (76803d6b45421699e201fbc4ee3173af1b1033df)
  • convert function literals to arrow functions (22550741b913e3c9fcdc3cf39395a8020c77c5f5)
  • support ascii_only on template literals (4661b3472e228c056f273977319009d6103feaff)
  • improve generation of Unicode escape sequences (80ebacbf51ccf449d47f5ce5a41fffeae4f9c454)

Bug Fixes

  • destructuring syntax (d82b7de5e885da712b43703810a521f22820ee26)
  • if statement (69f4e3a419fc1328eacadf89cbbece0497ad8957)
  • logical operator (69f4e3a419fc1328eacadf89cbbece0497ad8957)
  • optional chaining operator (15c8edb7564a0ab825fce19517f96e8d377a01a8, 8bbbc5178ebee10eb9fa69a706b29f40cc2aa3b9, 69f4e3a419fc1328eacadf89cbbece0497ad8957)
  • property accessor (e9cf8deb3352935328671df92ae21bf7b1e8a3b0)
  • switch statement (69f4e3a419fc1328eacadf89cbbece0497ad8957)
  • try statement (4bf9a4f0954c3fb2b2b2ab9d2def03cebbf0ac7b, 69f4e3a419fc1328eacadf89cbbece0497ad8957)

v3.19.1

Features

  • simplify nullish comparison of complex expressions (7a4fb85404f44bbf2e4db5892eb32b698bc53b6e)

Bug Fixes

  • if statement (fac0aa2b8aca8605835e604afe8b39903cc89b75)
  • switch statement (12475763a60ef92fed1cd625bbb0064c347cc84c, fac0aa2b8aca8605835e604afe8b39903cc89b75)

v3.19.0

Features

  • eliminate side-effect-free property access (9c80456634550045b51e921e59deb61e4e1dcab7, 95d3ede664598916e6dced8a5e0f5003efd3c77a, 205a1d1f19cfc128018cfd822c3332e6ee0a831f, 124c4d3fe364c825488528f9d90b68cb3b48178d)
  • improve hoist_vars efficiency (ce8ef52e2bcad2747b803faad68ab9c78cadf4d9)
  • improve compression around built-in function (8c5a899986e7f66cadd76bfcbd7c017e03508d36)
  • improve deconstruction of singular destructuring assignment (8c5a899986e7f66cadd76bfcbd7c017e03508d36)

Bug Fixes

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
axios [>= 1.a, < 2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 14, 2025
@Acconut
Copy link
Member

Acconut commented Jan 14, 2025

@dependabot rebase

Bumps the npm group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `1.7.3` | `1.9.4` |
| [axios](https://github.com/axios/axios) | `0.28.1` | `0.29.0` |
| [browserify](https://github.com/browserify/browserify) | `17.0.0` | `17.0.1` |
| [jasmine](https://github.com/jasmine/jasmine-npm) | `5.1.0` | `5.5.0` |
| [karma](https://github.com/karma-runner/karma) | `6.4.3` | `6.4.4` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.4.5` | `5.7.3` |
| [uglify-js](https://github.com/mishoo/UglifyJS) | `3.17.4` | `3.19.3` |



Updates `@biomejs/biome` from 1.7.3 to 1.9.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/cli/v1.9.4/packages/@biomejs/biome)

Updates `axios` from 0.28.1 to 0.29.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v0.29.0/CHANGELOG.md)
- [Commits](axios/axios@v0.28.1...v0.29.0)

Updates `browserify` from 17.0.0 to 17.0.1
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](browserify/browserify@v17.0.0...v17.0.1)

Updates `jasmine` from 5.1.0 to 5.5.0
- [Release notes](https://github.com/jasmine/jasmine-npm/releases)
- [Changelog](https://github.com/jasmine/jasmine-npm/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine-npm@v5.1.0...v5.5.0)

Updates `jasmine-core` from 5.1.2 to 5.5.0
- [Release notes](https://github.com/jasmine/jasmine/releases)
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine@v5.1.2...v5.5.0)

Updates `karma` from 6.4.3 to 6.4.4
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@v6.4.3...v6.4.4)

Updates `typescript` from 5.4.5 to 5.7.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.4.5...v5.7.3)

Updates `uglify-js` from 3.17.4 to 3.19.3
- [Release notes](https://github.com/mishoo/UglifyJS/releases)
- [Commits](mishoo/UglifyJS@v3.17.4...v3.19.3)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: axios
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: browserify
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: jasmine
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: jasmine-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: karma
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: uglify-js
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-334bf43119 branch from b563a1d to 6b4542b Compare January 14, 2025 09:41
@Acconut Acconut merged commit 72e12ad into main Jan 14, 2025
6 of 8 checks passed
@Acconut Acconut deleted the dependabot/npm_and_yarn/npm-334bf43119 branch January 14, 2025 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant