Bump the npm_and_yarn group across 1 directory with 40 updates by dependabot[bot] · Pull Request #1 · Rodi26/refarch-cloudnative-bluecompute-web

dependabot · 2024-11-20T14:24:40Z

Bumps the npm_and_yarn group with 22 updates in the /StoreWebApp directory:

Package	From	To
bower	`1.8.4`	`1.8.9`
body-parser	`1.13.2`	`1.20.3`
debug	`2.2.0`	`2.6.9`
express	`4.13.1`	`4.20.0`
handlebars	`4.0.6`	`4.7.7`
morgan	`1.6.1`	`1.9.1`
ms	`0.7.2`	`2.1.3`
express-session	`1.13.0`	`1.18.1`
mocha	`2.3.4`	`10.8.2`
serve-favicon	`2.3.0`	`2.5.0`
open	`0.0.5`	`6.0.0`
request	`2.67.0`	`2.88.2`
aws-sdk	`2.238.1`	`2.1692.0`
base64url	`0.0.6`	`removed`
pkgcloud	`1.4.0`	`2.2.0`
cookie	`0.1.3`	`0.7.2`
cookie-parser	`1.3.5`	`1.4.7`
express	`4.20.0`	`4.21.1`
js-yaml	`3.2.7`	`4.0.0`
cfenv	`1.0.0`	`1.2.4`
json5	`0.4.0`	`1.0.2`
config	`1.19.0`	`1.31.0`
stringstream	`0.0.5`	`0.0.6`

Updates bower from 1.8.4 to 1.8.9

Release notes

Sourced from bower's releases.

v1.8.8

Fix security issue connected to extracting .tar.gz archives

This bug allows to write arbitrary file on filesystem when Bower extracts malicious package

Needlessly to say, please upgrade

v1.8.7

Fixes side effect of fix from v1.8.6 that caused improper permissions for extracted folders

bower/bower#2532

v1.8.6

Fix Zip Slip Vulnerability of decompress-zip package: https://snyk.io/research/zip-slip-vulnerability

Note: v1.8.5 has been unpublished because of missing files

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by sheerun, a new releaser for bower since your current version.

Updates body-parser from 1.13.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1 / 2022-10-06

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0 / 2022-04-02

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: http-errors@2.0.0

1.19.2 / 2022-02-15

deps: bytes@3.1.2

deps: qs@6.9.7

Fix handling of __proto__ keys

deps: raw-body@2.4.3

deps: bytes@3.1.2

1.19.1 / 2021-12-10

... (truncated)

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
ee91374 1.20.2
368a93a Fix strict json error message on Node.js 19+
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates debug from 2.2.0 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

Fix: Check for undefined on browser globals (#462, @marbemac)

2.6.7 / 2017-05-16

Fix: Update ms to 2.0.0 to fix regular expression denial of service vulnerability (#458, @hubdotcom)

Fix: Inline extend function in node implementation (#452, @dougwilson)

Docs: Fix typo (#455, @msasad)

2.6.5 / 2017-04-27

Fix: null reference check on window.documentElement.style.WebkitAppearance (#447, @thebigredgeek)

Misc: clean up browser reference checks (#447, @thebigredgeek)

Misc: add npm-debug.log to .gitignore (@thebigredgeek)

2.6.4 / 2017-04-20

Fix: bug that would occure if process.env.DEBUG is a non-string value. (#444, @LucianBuzzo)

Chore: ignore bower.json in npm installations. (#437, @joaovieira)

Misc: update "ms" to v0.7.3 (@tootallnate)

2.6.3 / 2017-03-13

Fix: Electron reference to process.env.DEBUG (#431, @paulcbetts)

Docs: Changelog fix (@thebigredgeek)

2.6.2 / 2017-03-10

Fix: DEBUG_MAX_ARRAY_LENGTH (#420, @slavaGanzin)

Docs: Add backers and sponsors from Open Collective (#422, @piamancini)

Docs: Add Slackin invite badge (@tootallnate)

2.6.1 / 2017-02-10

Fix: Module's export default syntax fix for IE8 Expected identifier error

Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @pi0)

... (truncated)

Commits

13abeae Release 2.6.9
f53962e remove ReDoS regexp in %o formatter (#504)
52e1f21 Release 2.6.8
2482e08 Check for undefined on browser globals (#462)
6bb07f7 release 2.6.7
15850cb Fix Regular Expression Denial of Service (ReDoS)
4a6c85c update "debug" to v1.0.0 (#454)
b68dbf8 Fix typo (#455)
1351d2f Inline extend function in node implementation (#452)
c211947 update version for component
Additional commits viewable in compare view

Updates express from 4.13.1 to 4.20.0

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

📝 update people, add ctcpip to TC by @ctcpip in expressjs/express#5683

remove minor version pinning from ci by @jonchurch in expressjs/express#5722

Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in expressjs/express#5762

Replace Appveyor windows testing with GHA by @jonchurch in expressjs/express#5599

Add OSSF Scorecard badge by @UlisesGascon in expressjs/express#5436

update scorecard link by @bjohansebas in expressjs/express#5814

Nominate @IamLizu to the triage team by @UlisesGascon in expressjs/express#5836

deps: path-to-regexp@0.1.8 by @blakeembrey in expressjs/express#5603

docs: specify new instructions for question and discuss by @IamLizu in expressjs/express#5835

4.x: Upgrade merge-descriptors dependency by @RobinTail in expressjs/express#5781

path-to-regexp@0.1.10 by @blakeembrey in expressjs/express#5902

New Contributors

@marco-ippolito made their first contribution in expressjs/express#5565

@inigomarquinez made their first contribution in expressjs/express#5590

@mertcanaltin made their first contribution in expressjs/express#5627

@ctcpip made their first contribution in expressjs/express#5690

@bjohansebas made their first contribution in expressjs/express#5814

Full Changelog: expressjs/express@4.19.1...4.20.0

... (truncated)

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

... (truncated)

Commits

21df421 4.20.0
4c9ddc1 feat: upgrade to serve-static@0.16.0
9ebe5d5 feat: upgrade to send@0.19.0 (#5928)
ec4a01b feat: upgrade to body-parser@1.20.3 (#5926)
54271f6 fix: don't render redirect values in anchor href
125bb74 path-to-regexp@0.1.10 (#5902)
2a980ad merge-descriptors@1.0.3 (#5781)
a3e7e05 docs: specify new instructions for question and discuss
c5addb9 deps: path-to-regexp@0.1.8 (#5603)
e35380a docs: add @IamLizu to the triage team (#5836)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.

Updates handlebars from 4.0.6 to 4.7.7

Changelog

Sourced from handlebars's changelog.

v4.7.7 - February 15th, 2021

fix weird error in integration tests - eb860c0

fix: check prototype property access in strict-mode (#1736) - b6d3de7

fix: escape property names in compat mode (#1736) - f058970

refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8

chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

v4.7.6 - April 3rd, 2020

Chore/Housekeeping:

#1672 - Switch cmd parser to latest minimist (@dougwilson

Compatibility notes:

Restored Node.js compatibility

Commits

v4.7.5 - April 2nd, 2020

Chore/Housekeeping:

~~Node.js version support has been changed to v6+~~ Reverted in 4.7.6

Compatibility notes:

~~Node.js < v6 is no longer supported~~ Reverted in 4.7.6

Commits

v4.7.4 - April 1st, 2020

Chore/Housekeeping:

#1666 - Replaced minimist with yargs for handlebars CLI (@aorinevo, @AviVahl & @fabb)

Compatibility notes:

... (truncated)

Commits

a9a8e40 v4.7.7
e66aed5 Update release notes
7d4d170 disable IE in Saucelabs tests
eb860c0 fix weird error in integration tests
b6d3de7 fix: check prototype property access in strict-mode (#1736)
f058970 fix: escape property names in compat mode (#1736)
77825f8 refator: In spec tests, use expectTemplate over equals and shouldThrow (#1683)
3789a30 chore: start testing on Node.js 12 and 13
e6ad93e v4.7.6
2bf4fc6 Update release notes
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by knappi, a new releaser for handlebars since your current version.

Updates morgan from 1.6.1 to 1.9.1

Release notes

Sourced from morgan's releases.

1.9.1

Fix using special characters in format

deps: depd@~1.1.2

perf: remove argument reassignment

1.9.0

Use res.headersSent when available

deps: basic-auth@~2.0.0

Use safe-buffer for improved Buffer API

deps: debug@2.6.9

deps: depd@~1.1.1

Remove unnecessary Buffer loading

1.8.2

deps: debug@2.6.8

Fix DEBUG_MAX_ARRAY_LENGTH

deps: ms@2.0.0

1.8.1

deps: debug@2.6.1

Fix deprecation messages in WebStorm and other editors

Undeprecate DEBUG_FD set to 1 or 2

1.8.0

Fix sending unnecessary undefined argument to token functions

deps: basic-auth@~1.1.0

deps: debug@2.6.0

Allow colors in workers

Deprecated DEBUG_FD environment variable

Fix error when running under React Native

Use same color for same namespace

deps: ms@0.7.2

perf: enable strict mode in compiled functions

1.7.0

Add digits argument to response-time token

deps: depd@~1.1.0

Enable strict mode in more places

Support web browser loading

deps: on-headers@~1.0.1

perf: enable strict mode

Changelog

Sourced from morgan's changelog.

1.9.1 / 2018-09-10

Fix using special characters in format

deps: depd@~1.1.2

perf: remove argument reassignment

1.9.0 / 2017-09-26

Use res.headersSent when available

deps: basic-auth@~2.0.0

Use safe-buffer for improved Buffer API

deps: debug@2.6.9

deps: depd@~1.1.1

Remove unnecessary Buffer loading

1.8.2 / 2017-05-23

deps: debug@2.6.8

Fix DEBUG_MAX_ARRAY_LENGTH

deps: ms@2.0.0

1.8.1 / 2017-02-04

deps: debug@2.6.1

Fix deprecation messages in WebStorm and other editors

Undeprecate DEBUG_FD set to 1 or 2

1.8.0 / 2017-02-04

Fix sending unnecessary undefined argument to token functions

deps: basic-auth@~1.1.0

deps: debug@2.6.0

Allow colors in workers

Deprecated DEBUG_FD environment variable

Fix error when running under React Native

Use same color for same namespace

deps: ms@0.7.2

perf: enable strict mode in compiled functions

1.7.0 / 2016-02-18

Add digits argument to response-time token

deps: depd@~1.1.0

Enable strict mode in more places

... (truncated)

Commits

572dd93 1.9.1
e02de38 lint: apply standard 12 style
e329663 Fix using special characters in format
eb1968a tests: use strict equality checks
310b206 build: use yaml eslint configuration
5810937 build: Node.js@9.11
f60afd5 build: Node.js@8.11
5295b0c build: eslint-plugin-standard@3.1.0
178daaf build: eslint-plugin-promise@3.8.0
7b08641 build: eslint-plugin-import@2.12.0
Additional commits viewable in compare view

Updates ms from 0.7.2 to 2.1.3

Release notes

Sourced from ms's releases.

2.1.3

Patches

Rename zeit to vercel: #151

Bump eslint from 4.12.1 to 4.18.2: #122

Add prettier as a dev dependency: #135 #153

Use GitHub Actions CI: #154

Credits

Huge thanks to @getsnoopy for helping!

2.1.2

Patches

Fixed negative decimals less than -10 don't work: #111

Support error in case of Infinity: #116

Update regexp for 10-.5 is invalid input: #117

Update chat badge: #119

Credits

Huge thanks to @yuler and @7ma7X for helping!

2.1.1

Patches

Add full support for negative numbers: #104

Credits

Huge thanks to @thevtm for helping!

2.1.0

Minor Changes

Add "week" / "w" support: a2caead13ac7f9931338a1a51ab4e36ddb505e00

Fixed match regex to support negative numbers: #96

Patches

Applied a few text improvements: 15dc8c5b5a9e8372555400485a749ec04cc02444

Fixed spelling of “millisecond” in description: #95

Lockfile added: 2425ebdefcdd1c2b726c06f6a65c4f2dea58dee7

Credits

Huge thanks to @yoavmmn and @binki for helping!

2.0.0

... (truncated)

Commits

1c6264b 2.1.3
82495ad Use GitHub Actions CI (#154)
1a13a88 Run prettier 2.x (#153)
1048042 Add prettier as a dev dependency (#135)
f2bfb40 Rename zeit to vercel (#151)
adf1eb2 Bump eslint from 4.12.1 to 4.18.2 (#122)
7920885 2.1.2
199ff78 Update chat badge (#119)
d1add60 Update regexp for 10-.5 is invalid input (#117)
d95e17f Support error in case of Infinity (#116)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by styfle, a new releaser for ms since your current version.

Updates express-session from 1.13.0 to 1.18.1

Release notes

Sourced from express-session's releases.

1.18.1

What's Changed

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/session#984

dep: cookie@0.7.2 by @knolleary in expressjs/session#997

Release: 1.18.1 by @UlisesGascon in expressjs/session#998

New Contributors

@inigomarquinez made their first contribution in expressjs/session#984

@knolleary made their first contribution in expressjs/session#997

@UlisesGascon made their first contribution in expressjs/session#998

Full Changelog: expressjs/session@v1.18.0...v1.18.1

1.18.0

Add debug log for pathname mismatch

Add partitioned to cookie options

Add priority to cookie options

Fix handling errors from setting cookie

Support any type in secret that crypto.createHmac supports

deps: cookie@0.6.0

Fix expires option to reject invalid dates

perf: improve default decode speed

perf: remove slow string split in parse

deps: cookie-signature@1.0.7

1.17.3

Fix resaving already-saved new session at end of request

deps: cookie@0.4.2

1.17.2

Fix res.end patch to always commit headers

deps: cookie@0.4.1

deps: safe-buffer@5.2.1

1.17.1

Fix internal method wrapping error on failed reloads

1.17.0

deps: cookie@0.4.0

Add SameSite=None support

deps: safe-buffer@5.2.0

1.16.2

Fix restoring cookie.originalMaxAge when store returns Date

deps: parseurl@~1.3.3

1.16.1

Fix error passing data option to Cookie constructor

Fix uncaught error from bad session data

... (truncated)

Changelog

Sourced from express-session's changelog.

1.18.1 / 2024-10-08

deps: cookie@0.7.2

Fix object assignment of hasOwnProperty

deps: cookie@0.7.1

Allow leading dot for domain

Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec

Add fast path for serialize without options, use obj.hasOwnProperty when parsing

deps: cookie@0.7.0

perf: parse cookies ~10% faster

fix: narrow the validation of cookies to match RFC6265

fix: add main to package.json for rspack

1.18.0 / 2024-01-28

Add debug log for pathname mismatch

Add partitioned to cookie options

Add priority to cookie options

Fix handling errors from setting cookie

Support any type in secret that crypto.createHmac supports

deps: cookie@0.6.0

Fix expires option to reject invalid dates

perf: improve default decode speed

perf: remove slow string split in parse

deps: cookie-signature@1.0.7

1.17.3 / 2022-05-11

Fix resaving already-saved new session at end of request

deps: cookie@0.4.2

1.17.2 / 2021-05-19

Fix res.end patch to always commit headers

deps: cookie@0.4.1

deps: safe-buffer@5.2.1

1.17.1 / 2020-04-16

Fix internal method wrapping error on failed reloads

1.17.0 / 2019-10-10

deps: cookie@0.4.0

... (truncated)

Commits

bbeca94 1.18.1
341b179 dep: cookie@0.7.2 (#997)
8f0a1c4 ci: add support for OSSF scorecard reporting (#984)
24d4972 1.18.0
855f21a docs: add connect-ottoman to the list of session stores
991b7ee Add debug log for pathname mismatch
408229e Add "partitioned" to cookie options
50e1429 build: Node.js@20.11
6153b3f build: Node.js@21.6
88e0f2e build: actions/checkout@v4
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express-session since your current version.

Updates mocha from 2.3.4 to 10.8.2

Release notes

Sourced from mocha's releases.

v10.8.2

10.8.2 (2024-10-30)

🩹 Fixes

support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)

test link in html reporter (#5224) (f054acc)

📚 Documentation

indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

deps: bump the github-actions group with 1 update (#5132) (e536ab2)

v10.8.1

10.8.1 (2024-10-29)

🩹 Fixes

handle case of invalid package.json with no explicit config (#5198) (f72bc17)

Typos on mochajs.org (#5237) (d8ca270)

use accurate test links in HTML reporter (#5228) (68803b6)

v10.8.0

10.8.0 (2024-10-29)

🌟 Features

highlight browser failures (#5222) (8ff4845)

🩹 Fixes

remove :is() from mocha.css to support older browsers (#5225) (#5227) (0a24b58)

📚 Documentation

... (truncated)

Changelog

Sourced from mocha's changelog.

10.8.2 (2024-10-30)

🩹 Fixes

support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)

test link in html reporter (#5224) (f054acc)

📚 Documentation

indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

deps: bump the github-actions group with 1 update (#5132) (e536ab2)

10.8.1 (2024-10-29)

🩹 Fixes

handle case of invalid package.json with no explicit config (#5198) (f72bc17)

Typos on mochajs.org (#5237) (d8ca270)

use accurate test links in HTML reporter (#5228) (68803b6)

10.8.0 (2024-10-29)

🌟 Features

highlight browser failures (#5222) (8ff4845)

🩹 Fixes

remove :is() from mocha.css to support older browsers (#5225) (#5227) (0a24b58)

📚 Documentation

add SECURITY.md pointing to Tidelift (#5210) (bd7e63a)

adopt Collective Funds Guidelines 0.1 (#5199) (2b03d86)

update README, LICENSE and fix outdated (#5197) (1203e0e)

... (truncated)

Commits

05097db chore(main): release 10.8.2 (#5239)
14e640e docs: indicate 'exports' interface does not work in browsers (#5181)
881e3b0 chore: fix docs builds by re-adding eleventy and ignoring gitignore again (#5...
f054acc fix: test link in html reporter (#5224)
e536ab2 build(deps): bump the github-actions group with 1 update (#5132)
ba0fefe fix: support errors with circular dependencies in object values with --parall...
f44f71b chore(main): release 10.8.1 (#5238...
Description has been truncated

Bumps the npm_and_yarn group with 22 updates in the /StoreWebApp directory: | Package | From | To | | --- | --- | --- | | [bower](https://github.com/bower/bower) | `1.8.4` | `1.8.9` | | [body-parser](https://github.com/expressjs/body-parser) | `1.13.2` | `1.20.3` | | [debug](https://github.com/debug-js/debug) | `2.2.0` | `2.6.9` | | [express](https://github.com/expressjs/express) | `4.13.1` | `4.20.0` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.6` | `4.7.7` | | [morgan](https://github.com/expressjs/morgan) | `1.6.1` | `1.9.1` | | [ms](https://github.com/vercel/ms) | `0.7.2` | `2.1.3` | | [express-session](https://github.com/expressjs/session) | `1.13.0` | `1.18.1` | | [mocha](https://github.com/mochajs/mocha) | `2.3.4` | `10.8.2` | | [serve-favicon](https://github.com/expressjs/serve-favicon) | `2.3.0` | `2.5.0` | | [open](https://github.com/sindresorhus/open) | `0.0.5` | `6.0.0` | | [request](https://github.com/request/request) | `2.67.0` | `2.88.2` | | [aws-sdk](https://github.com/aws/aws-sdk-js) | `2.238.1` | `2.1692.0` | | [base64url](https://github.com/brianloveswords/base64url) | `0.0.6` | `removed` | | [pkgcloud](https://github.com/pkgcloud/pkgcloud) | `1.4.0` | `2.2.0` | | [cookie](https://github.com/jshttp/cookie) | `0.1.3` | `0.7.2` | | [cookie-parser](https://github.com/expressjs/cookie-parser) | `1.3.5` | `1.4.7` | | [express](https://github.com/expressjs/express) | `4.20.0` | `4.21.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.2.7` | `4.0.0` | | [cfenv](https://github.com/cloudfoundry-community/node-cfenv) | `1.0.0` | `1.2.4` | | [json5](https://github.com/json5/json5) | `0.4.0` | `1.0.2` | | [config](https://github.com/node-config/node-config) | `1.19.0` | `1.31.0` | | [stringstream](https://github.com/mhart/StringStream) | `0.0.5` | `0.0.6` | Updates `bower` from 1.8.4 to 1.8.9 - [Release notes](https://github.com/bower/bower/releases) - [Changelog](https://github.com/bower/bower/blob/master/CHANGELOG.md) - [Commits](https://github.com/bower/bower/commits) Updates `body-parser` from 1.13.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.13.2...1.20.3) Updates `debug` from 2.2.0 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.2.0...2.6.9) Updates `express` from 4.13.1 to 4.20.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.13.1...4.20.0) Updates `handlebars` from 4.0.6 to 4.7.7 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.6...v4.7.7) Updates `morgan` from 1.6.1 to 1.9.1 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.6.1...1.9.1) Updates `ms` from 0.7.2 to 2.1.3 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@0.7.2...2.1.3) Updates `express-session` from 1.13.0 to 1.18.1 - [Release notes](https://github.com/expressjs/session/releases) - [Changelog](https://github.com/expressjs/session/blob/master/HISTORY.md) - [Commits](expressjs/session@v1.13.0...v1.18.1) Updates `mocha` from 2.3.4 to 10.8.2 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@2.3.4...v10.8.2) Updates `serve-favicon` from 2.3.0 to 2.5.0 - [Release notes](https://github.com/expressjs/serve-favicon/releases) - [Changelog](https://github.com/expressjs/serve-favicon/blob/master/HISTORY.md) - [Commits](expressjs/serve-favicon@v2.3.0...2.5.0) Updates `open` from 0.0.5 to 6.0.0 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](https://github.com/sindresorhus/open/commits/v6.0.0) Updates `request` from 2.67.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `aws-sdk` from 2.238.1 to 2.1692.0 - [Release notes](https://github.com/aws/aws-sdk-js/releases) - [Commits](aws/aws-sdk-js@v2.238.1...v2.1692.0) Removes `base64url` Updates `pkgcloud` from 1.4.0 to 2.2.0 - [Changelog](https://github.com/pkgcloud/pkgcloud/blob/master/CHANGELOG.md) - [Commits](https://github.com/pkgcloud/pkgcloud/commits) Updates `cookie` from 0.1.3 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.1.3...v0.7.2) Updates `cookie-parser` from 1.3.5 to 1.4.7 - [Release notes](https://github.com/expressjs/cookie-parser/releases) - [Changelog](https://github.com/expressjs/cookie-parser/blob/master/HISTORY.md) - [Commits](expressjs/cookie-parser@1.3.5...1.4.7) Updates `express` from 4.20.0 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.13.1...4.20.0) Updates `extend` from 1.3.0 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v1.3.0...v3.0.2) Updates `fast-json-patch` from 0.5.7 to 2.2.1 - [Release notes](https://github.com/Starcounter-Jack/JSON-Patch/releases) - [Commits](Starcounter-Jack/JSON-Patch@0.5.7...v2.2.1) Updates `fresh` from 0.3.0 to 0.5.2 - [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md) - [Commits](jshttp/fresh@v0.3.0...v0.5.2) Updates `growl` from 1.8.1 to 1.9.2 - [Changelog](https://github.com/tj/node-growl/blob/master/History.md) - [Commits](tj/node-growl@v1.8.1...v1.9.2) Updates `hawk` from 1.1.1 to 3.1.3 - [Release notes](https://github.com/mozilla/hawk/releases) - [Commits](mozilla/hawk@1.1.1...v3.1.3) Updates `hoek` from 0.9.1 to 2.16.3 - [Release notes](https://github.com/hapijs/hoek/releases) - [Commits](hapijs/hoek@v0.9.1...v2.16.3) Updates `ip` from 0.3.3 to 1.1.9 - [Commits](indutny/node-ip@v0.3.3...v1.1.9) Updates `js-yaml` from 3.2.7 to 4.0.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.2.7...4.0.0) Updates `cfenv` from 1.0.0 to 1.2.4 - [Commits](cloudfoundry-community/node-cfenv@1.0.0...1.2.4) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `json5` from 0.4.0 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v0.4.0...v1.0.2) Updates `config` from 1.19.0 to 1.31.0 - [Release notes](https://github.com/node-config/node-config/releases) - [Changelog](https://github.com/node-config/node-config/blob/master/History.md) - [Commits](https://github.com/node-config/node-config/commits) Updates `jsonpointer` from 4.0.1 to 5.0.1 - [Release notes](https://github.com/janl/node-jsonpointer/releases) - [Commits](janl/node-jsonpointer@4.0.1...v5.0.1) Updates `lodash` from 3.10.1 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@3.10.1...4.17.21) Updates `mime` from 1.2.11 to 1.6.0 - [Changelog](https://github.com/broofa/mime/blob/v1.6.0/CHANGELOG.md) - [Commits](broofa/mime@v1.2.11...v1.6.0) Updates `minimatch` from 0.2.14 to 0.3.0 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v0.2.14...v0.3.0) Updates `negotiator` from 0.5.3 to 0.6.3 - [Release notes](https://github.com/jshttp/negotiator/releases) - [Changelog](https://github.com/jshttp/negotiator/blob/master/HISTORY.md) - [Commits](jshttp/negotiator@0.5.3...0.6.3) Updates `path-to-regexp` from 0.1.6 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.6...v0.1.10) Updates `qs` from 1.0.2 to 5.2.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v1.0.2...v5.2.1) Updates `send` from 0.13.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.13.0...0.19.0) Updates `serve-static` from 1.10.3 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.10.3...v1.16.2) Updates `stringstream` from 0.0.5 to 0.0.6 - [Commits](mhart/StringStream@v0.0.5...v0.0.6) Updates `underscore` from 1.7.0 to 1.12.1 - [Commits](jashkenas/underscore@1.7.0...1.12.1) --- updated-dependencies: - dependency-name: bower dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: morgan dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ms dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express-session dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: serve-favicon dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: open dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: request dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: aws-sdk dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: base64url dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pkgcloud dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: extend dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-json-patch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fresh dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: growl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hawk dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hoek dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cfenv dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: config dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: jsonpointer dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mime dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: negotiator dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: stringstream dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 20, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the npm_and_yarn group across 1 directory with 40 updates#1

Bump the npm_and_yarn group across 1 directory with 40 updates#1
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/StoreWebApp/npm_and_yarn-fde6f0dcb4

dependabot bot commented on behalf of github Nov 20, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Nov 20, 2024

v1.8.8

v1.8.7

v1.8.6

1.20.3

What's Changed

Important

Other changes

New Contributors

1.20.2

1.20.1

1.20.0

1.20.3 / 2024-09-10

1.20.2 / 2023-02-21

1.20.1 / 2022-10-06

1.20.0 / 2022-04-02

1.19.2 / 2022-02-15

1.19.1 / 2021-12-10

2.6.9

Patches

Credits

release 2.6.7

release 2.6.6

release 2.6.5

release 2.6.4

release 2.6.3

release 2.6.2

release 2.6.1

release 2.6.0

release 2.5.2

release 2.5.1

release 2.4.5

release 2.4.4

release 2.4.3

release 2.4.2

2.6.9 / 2017-09-22

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

4.20.0

What's Changed

Important

Other Changes

New Contributors

4.20.0 / 2024-09-10

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

4.18.2 / 2022-10-08

v4.7.7 - February 15th, 2021

v4.7.6 - April 3rd, 2020

v4.7.5 - April 2nd, 2020

v4.7.4 - April 1st, 2020

1.9.1

1.9.0

1.8.2

1.8.1

1.8.0

1.7.0

1.9.1 / 2018-09-10

1.9.0 / 2017-09-26

1.8.2 / 2017-05-23

1.8.1 / 2017-02-04

1.8.0 / 2017-02-04

1.7.0 / 2016-02-18

2.1.3

Patches

Credits

2.1.2

Patches

Credits

2.1.1

Patches