build(deps): bump the npm_and_yarn group across 2 directories with 18 updates #5
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… updates Bumps the npm_and_yarn group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `6.1.0` | `6.3.0` | | [qs](https://github.com/ljharb/qs) | `6.9.7` | `6.14.0` | | [@types/qs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qs) | `6.5.1` | `6.14.0` | | [form-data](https://github.com/form-data/form-data) | `3.0.0` | `3.0.4` | | [ws](https://github.com/websockets/ws) | `7.4.6` | `7.5.10` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.20.5` | `7.28.3` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [kind-of](https://github.com/jonschlinkert/kind-of) | `6.0.2` | `6.0.3` | | [url-parse](https://github.com/unshiftio/url-parse) | `1.4.6` | `1.4.7` | Bumps the npm_and_yarn group with 2 updates in the /packages/websockets directory: [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [ws](https://github.com/websockets/ws). Updates `path-to-regexp` from 6.1.0 to 6.3.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v6.1.0...v6.3.0) Updates `qs` from 6.9.7 to 6.14.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.7...v6.14.0) Updates `@types/qs` from 6.5.1 to 6.14.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qs) Updates `form-data` from 3.0.0 to 3.0.4 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/v3.0.4/CHANGELOG.md) - [Commits](form-data/form-data@v3.0.0...v3.0.4) Updates `ws` from 7.4.6 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.10) Updates `@babel/traverse` from 7.20.5 to 7.28.3 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.3/packages/babel-traverse) Updates `@octokit/plugin-paginate-rest` from 2.15.1 to 3.1.0 - [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases) - [Commits](octokit/plugin-paginate-rest.js@v2.15.1...v3.1.0) Updates `@octokit/request-error` from 2.1.0 to 3.0.3 - [Release notes](https://github.com/octokit/request-error.js/releases) - [Commits](octokit/request-error.js@v2.1.0...v3.0.3) Updates `@octokit/request` from 5.6.1 to 6.2.8 - [Release notes](https://github.com/octokit/request.js/releases) - [Commits](octokit/request.js@v5.6.1...v6.2.8) Updates `ansi-regex` from 2.1.1 to 3.0.0 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v3.0.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `kind-of` from 6.0.2 to 6.0.3 - [Changelog](https://github.com/jonschlinkert/kind-of/blob/master/CHANGELOG.md) - [Commits](jonschlinkert/kind-of@6.0.2...6.0.3) Updates `parse-path` from 4.0.1 to 7.1.0 - [Release notes](https://github.com/IonicaBizau/parse-path/releases) - [Commits](IonicaBizau/parse-path@4.0.1...7.1.0) Updates `parse-url` from 5.0.1 to 8.1.0 - [Release notes](https://github.com/IonicaBizau/parse-url/releases) - [Commits](IonicaBizau/parse-url@5.0.1...8.1.0) Updates `semver` from 5.3.0 to 5.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v5.7.1) Updates `tar` from 4.4.19 to 6.1.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.19...v6.1.11) Updates `tough-cookie` from 2.4.3 to 4.0.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v4.0.0) Updates `url-parse` from 1.4.6 to 1.4.7 - [Commits](unshiftio/url-parse@1.4.6...1.4.7) Updates `path-to-regexp` from 6.3.0 to 8.2.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v6.1.0...v6.3.0) Updates `ws` from 7.4.6 to 8.18.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.10) --- updated-dependencies: - dependency-name: path-to-regexp dependency-version: 6.3.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.14.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@types/qs" dependency-version: 6.14.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 3.0.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 7.5.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.28.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/plugin-paginate-rest" dependency-version: 3.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/request-error" dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/request" dependency-version: 6.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-version: 3.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: kind-of dependency-version: 6.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-path dependency-version: 7.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-url dependency-version: 8.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 5.7.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 6.1.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-version: 4.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: url-parse dependency-version: 1.4.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 8.2.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.18.3 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Review changes with Changed Files
|
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 9 updates in the / directory:
6.1.06.3.06.9.76.14.06.5.16.14.03.0.03.0.47.4.67.5.107.20.57.28.33.0.23.0.36.0.26.0.31.4.61.4.7Bumps the npm_and_yarn group with 2 updates in the /packages/websockets directory: path-to-regexp and ws.
Updates
path-to-regexpfrom 6.1.0 to 6.3.0Release notes
Sourced from path-to-regexp's releases.
Commits
75a92c36.3.0f1253b4Add backtrack protection to 6.x (#324)28a5b276.2.2270876dTest on min node 16d5a42b6Run tests on ubuntu1c265a1Upgrade dev deps, prettier formatc7ec332Fix readme example25da491Bump node v14 for tests980d1dbAdd v8 coveragee828000Update shield URLUpdates
qsfrom 6.9.7 to 6.14.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
32dcc63v6.14.04ec582b[Dev Deps] updatees-value-fixtures,has-bigintsa240c52[Tests] increase coverage25956a7[Refactor]parse: useutils.combinemoreb189ed4[patch]parse: add explicitthrowOnLimitExceededdefault1d590de[actions] simplify finisher6cd60a5[actions] use shared action89edfd2[Deps] updateside-channele26e7a8[Dev Deps] updatehas-proto,has-symbols51fdc98[actions] re-add finishersUpdates
@types/qsfrom 6.5.1 to 6.14.0Commits
Updates
form-datafrom 3.0.0 to 3.0.4Release notes
Sourced from form-data's releases.
Changelog
Sourced from form-data's changelog.
... (truncated)
Commits
9c82fcdv3.0.4e8c574c[Tests] handle predict-v8-randomness failures in node < 17 and node > 23c6ced61[Fix] Switch to usingcryptorandom for boundary values0150851[meta] actually ensure the readme backup isn’t publishedfc38b48[meta] fix readme capitalizationd2eb290[meta] addauto-changelogfc42bb9[meta] remove local commit hooksa14d09e[Dev Deps] remove unused deps002b9b0[Fix]append: avoid a crash on nullish values70bbaa0[Fix] validate boundary type insetBoundary()methodMaintainer changes
This version was pushed to npm by ljharb, a new releaser for form-data since your current version.
Updates
wsfrom 7.4.6 to 7.5.10Release notes
Sourced from ws's releases.
... (truncated)
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)8a78f87[dist] 7.5.90435e6e[security] Fix same host check for ws+unix: redirects4271f07[dist] 7.5.8dc1781b[security] Drop sensitive headers when following insecure redirects2758ed3[fix] Abort the handshake if the Upgrade header is invalida370613[dist] 7.5.71f72e2e[security] Drop sensitive headers when following redirects (#2013)8ecd890[dist] 7.5.6Updates
@babel/traversefrom 7.20.5 to 7.28.3Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
ef155f5v7.28.3741cbd2chore: fix various typos across codebase (#17476)5051613Type-check.d.tsfile withstrict: true(#17461)ccc5faev7.28.04b4e7e2Create babel-helper-globals (#17297)cf5ae03LVal coverage updates (Part 2) (#17391)6ca9df4Accept bigints int.bigIntLiteralfactory (#17378)75f0140Parse discard binding (#17163)4ce7dfdv7.27.76c8faf1add generateUidBasedOnNode test cases (#17381)Updates
@octokit/plugin-paginate-restfrom 2.15.1 to 3.1.0Release notes
Sourced from
@octokit/plugin-paginate-rest's releases.... (truncated)
Commits
da450cbfeat: add support for pagination in new `GET /enterprises/{enterprise}/code-s...a36af8abuild(deps): lock file maintenance (#422)3029372chore: auto-generatescripts/update-endpoints/generated/endpoints.json(#417)dd06721build(deps): lock file maintenance (#416)e11578cchore(deps): bump@octokit/typesto latest (v6.40.0) (#415)bf3da23chore: updatescripts/update-endpoints/generated/endpoints.jsonwith latest...d66ff08ci(action): update actions/setup-node digest to 2fddd88 (#413)8546ce9ci(action): update github/codeql-action digest to 3e7e3b3 (#412)b15adc3build(deps): updates pika/pack to a non vulnerable version (#411)b4852d6ci(action): update actions/setup-node digest to 5b949b5 (#410)Updates
@octokit/request-errorfrom 2.1.0 to 3.0.3Release notes
Sourced from
@octokit/request-error's releases.Commits
82c78fcfix(deps): update dependency@octokit/typesto v9 (#307)77c025dbuild(deps): lock file maintenance (#306)ff02c35chore(deps): update dependency prettier to v2.8.3faa94a9Default branch rename (#304)ef89a55🚧 Workflows have changed (#303)cb67bdcbuild(deps): lock file maintenance (#302)c0dda2cbuild(release.yml): set node-version to lts/*11ec169chore(deps): update dependency prettier to v2.8.2 (#301)aa91a4bbuild(deps): lock file maintenance (#299)e5d6520🚧 Workflows have changed (#300)Updates
@octokit/requestfrom 5.6.1 to 6.2.8Release notes
Sourced from
@octokit/request's releases.... (truncated)
Commits
9c9c6d7Revert "fix(deps): update dependency@octokit/request-errorto v4 (#593)"62f51d6fix(deps): update dependency@octokit/request-errorto v4 (#593)cbd121fdocs: replace references to Skypack CDN with esm.sh (#595)71d7488fix(deps): update dependency@octokit/tsconfigto v2, explicitly mark type ...ab33ea2chore(deps): update dependency esbuild to ^0.18.0 (#590)947d7a5fix(build): replace pika with esbuild and tsc (#584)3df1556fix: addsduplexoption when sending a body792a68fchore(deps): update dependency prettier to v2.8.82970f68ci(action): update actions/add-to-project action to v0.5.0 (#578)cdf3701[fix] addsduplexoption when sending a bodyUpdates
ansi-regexfrom 2.1.1 to 3.0.0Commits
0a8cc193.0.0d9d806eMinor tweaks69bebf6Support urxvt escapes (#13)3dff5e7Use Map instead of Object for the fixturesbaacbabRequire Node.js 4 and meta tweaksUpdates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
kind-offrom 6.0.2 to 6.0.3Changelog
Sourced from kind-of's changelog.
... (truncated)
Commits
abab0856.0.3a18459crun verb to generate README documentationdc6bea5only need to checktypeof val.constructor1df992cMerge pull request #31 from xiaofen9/master975c13afix type checking vul in ctorName4da96c0Delete FUNDING.yml28266f2Create FUNDING.ymlMaintainer changes
This version was pushed to npm by doowb, a new releaser for kind-of since your current version.
Updates
parse-pathfrom 4.0.1 to 7.1.0Release notes
Sourced from parse-path's releases.
... (truncated)
Commits
cc1e0eb⬆️ 7.1.0 🎉75ee6ee⬆️ 7.0.3 🎉d434132Updated docs6135017Merge branch 'feat/add-ts-types' of github.com:viceice/parse-path into new-ve...b40572d⬆️ 7.0.2 🎉a964a9cfeat: add typescript types87f71f2⬆️ 7.0.1 🎉c53b17eUpdated docsa0269b1⬆️ 7.0.0 🎉e3ee527⬆️ 6.1.0 🎉Updates
parse-urlfrom 5.0.1 to 8.1.0Release notes
Sourced from parse-url's releases.