-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): bump the npm_and_yarn group across 2 directories with 14 updates #2221
Open
dependabot
wants to merge
1
commit into
main
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-5091dcbbb9
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
the
dependencies
Pull requests that update a dependency file
label
Aug 28, 2024
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
✅ Deploy Preview for flanksource-demo-stable ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for goofy-euclid-75956c ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for clerk-saas-ui ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-5091dcbbb9
branch
2 times, most recently
from
August 29, 2024 21:47
0c11fcd
to
08875b4
Compare
… updates Bumps the npm_and_yarn group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ory/client](https://github.com/ory/sdk) | `1.4.2` | `1.14.4` | | [@ory/integrations](https://github.com/ory/integrations) | `1.1.5` | `1.2.1` | | [recharts](https://github.com/recharts/recharts) | `2.1.12` | `2.12.7` | | [postcss](https://github.com/postcss/postcss) | `8.4.31` | `8.4.32` | | [@adobe/css-tools](https://github.com/adobe/css-tools) | `4.3.1` | `4.4.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [d3-color](https://github.com/d3/d3-color) | `2.0.0` | `3.1.0` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.3` | `1.15.6` | | [ws](https://github.com/websockets/ws) | `8.14.2` | `8.18.0` | | [ws](https://github.com/websockets/ws) | `6.2.2` | `8.18.0` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `8.18.0` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `6.1.1` | `6.1.3` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `6.1.3` | Bumps the npm_and_yarn group with 1 update in the /e2e directory: [braces](https://github.com/micromatch/braces). Updates `@ory/client` from 1.4.2 to 1.14.4 - [Release notes](https://github.com/ory/sdk/releases) - [Commits](https://github.com/ory/sdk/commits) Updates `@ory/integrations` from 1.1.5 to 1.2.1 - [Release notes](https://github.com/ory/integrations/releases) - [Commits](ory/integrations@1.1.5...v1.2.1) Updates `recharts` from 2.1.12 to 2.12.7 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/3.x/CHANGELOG.md) - [Commits](recharts/recharts@v2.1.12...v2.12.7) Updates `postcss` from 8.4.31 to 8.4.32 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.32) Updates `@adobe/css-tools` from 4.3.1 to 4.4.0 - [Changelog](https://github.com/adobe/css-tools/blob/main/History.md) - [Commits](https://github.com/adobe/css-tools/commits) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `d3-color` from 2.0.0 to 3.1.0 - [Release notes](https://github.com/d3/d3-color/releases) - [Commits](d3/d3-color@v2.0.0...v3.1.0) Updates `d3-interpolate` from 2.0.1 to 3.0.1 - [Release notes](https://github.com/d3/d3-interpolate/releases) - [Commits](d3/d3-interpolate@v2.0.1...v3.0.1) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `follow-redirects` from 1.15.3 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.3...v1.15.6) Updates `ws` from 8.14.2 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.14.2...8.18.0) Updates `ws` from 6.2.2 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.14.2...8.18.0) Updates `ws` from 7.5.9 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.14.2...8.18.0) Updates `tough-cookie` from 2.5.0 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v4.1.3) Updates `webpack-dev-middleware` from 6.1.1 to 6.1.3 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v6.1.3/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v6.1.1...v6.1.3) Updates `webpack-dev-middleware` from 5.3.3 to 6.1.3 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v6.1.3/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v6.1.1...v6.1.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: "@ory/client" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@ory/integrations" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: recharts dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@adobe/css-tools" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: d3-color dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: d3-interpolate dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
moshloop
force-pushed
the
dependabot/npm_and_yarn/npm_and_yarn-5091dcbbb9
branch
from
September 2, 2024 15:22
08875b4
to
376c7ba
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the / directory:
1.4.2
1.14.4
1.1.5
1.2.1
2.1.12
2.12.7
8.4.31
8.4.32
4.3.1
4.4.0
3.0.2
3.0.3
2.0.0
3.1.0
3.1.9
3.1.10
4.18.2
4.19.2
1.15.3
1.15.6
8.14.2
8.18.0
6.2.2
8.18.0
7.5.9
8.18.0
6.1.1
6.1.3
5.3.3
6.1.3
Bumps the npm_and_yarn group with 1 update in the /e2e directory: braces.
Updates
@ory/client
from 1.4.2 to 1.14.4Commits
Updates
@ory/integrations
from 1.1.5 to 1.2.1Release notes
Sourced from
@ory/integrations
's releases.Commits
781878c
chore(actions): upgrade release workflow to use node v18 (#63)31e745b
fix: update packages & replace request dependency (#60)Updates
recharts
from 2.1.12 to 2.12.7Release notes
Sourced from recharts's releases.
... (truncated)
Changelog
Sourced from recharts's changelog.
... (truncated)
Commits
2074e2e
2.12.71e9e032
fix: guard against accidental undefined access in Brush239b3ae
fix(area-dot): regressionon in parameters passed to custom area dot22064ed
2.12.6504518d
Added js suffix to main module and jsnext:main paths in package json (#4431)a705024
fix: The box size of the Tooltip is 0 at the first rendering of TooltipBoundi...bdad6ec
2.12.5ed95633
fix(layer-types): use SVGAttributes instead of SVGProps in forwardRef compone...3d2e8b9
feat(BarChart): support percentage for barSize. Fixes #3640 (#4407)981eb8f
2.12.4Maintainer changes
This version was pushed to npm by ckifer, a new releaser for recharts since your current version.
Updates
postcss
from 8.4.31 to 8.4.32Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
a0d9f10
Release 8.4.32 version0146b3e
Add Node.js 21 to CI2398534
Update dependencies1918533
Merge pull request #1902 from ferreira-tb/main395e6dc
FixProcessOptions
interfacefa8cd15
Update dependencies199a7c4
Typo2528047
Update EM linkUpdates
@adobe/css-tools
from 4.3.1 to 4.4.0Changelog
Sourced from
@adobe/css-tools
's changelog.Commits
Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
d3-color
from 2.0.0 to 3.1.0Release notes
Sourced from d3-color's releases.
Commits
7a1573e
3.1.075c19c4
update LICENSEef94e01
update dependencies5e9f757
method shorthande4bc34e
formatHex8 (#103)ac660c6
{rgb,hsl}.clamp() (#102)70e3a04
clamp HSL format (#101)994d8fd
avoid backtracking (#100)7d61bbe
3.0.193bc4ff
related d3/d33; extract copyrights from LICENSEUpdates
d3-interpolate
from 2.0.1 to 3.0.1Release notes
Sourced from d3-interpolate's releases.
Commits
6562b85
3.0.1f5f6b74
update dependencies9569bdb
related d3/d33; extract copyrights from LICENSE38346a4
3.0.047f9564
Adopt type=module (#93)e8cddfd
Update README.Updates
ejs
from 3.1.9 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807d
Version 3.1.109ee26dd
Mocha TDDe469741
Basic pollution protection715e950
Merge pull request #756 from Jeffrey-mu/maincabe314
Include advanced usage examples29b076c
Added header11503c7
Merge branch 'main' of github.com:mde/ejs into main7690404
Added security banner to READMEf47d7ae
Update SECURITY.md828cea1
Update SECURITY.mdUpdates
express
from 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
follow-redirects
from 1.15.3 to 1.15.6Commits
35a517c
Release version 1.15.6 of the npm package.c4f847f
Drop Proxy-Authorization across hosts.8526b4a
Use GitHub for disclosure.b1677ce
Release version 1.15.5 of the npm package.d8914f7
Preserve fragment in responseUrl.6585820
Release version 1.15.4 of the npm package.7a6567e
Disallow bracketed hostnames.05629af
Prefer native URL instead of deprecated url.parse.1cba8e8
Prefer native URL instead of legacy url.resolve.72bc2a4
Simplify _processResponse error handling.Updates
ws
from 8.14.2 to 8.18.0Release notes
Sourced from ws's releases.
... (truncated)
Commits
976c53c
[dist] 8.18.059b9629
[feature] Add support forBlob
(#2229)0d1b5e6
[security] Use more descriptive text for 2017 vulnerability link15f11a0
[security] Add new DoS vulnerability to SECURITY.md3c56601
[dist] 8.17.1e55e510
[security] Fix crash when the Upgrade header cannot be read (#2231)6a00029
[test] Increase code coverageddfe4a8
[perf] Reduce the amount ofcrypto.randomFillSync()
callsb73b118
[dist] 8.17.029694a5
[test] Use thehighWaterMark
variableUpdates
ws
from 6.2.2 to 8.18.0Release notes
Sourced from ws's releases.
... (truncated)
Commits
976c53c
[dist] 8.18.059b9629
[feature] Add support forBlob
(#2229)0d1b5e6
[security] Use more descriptive text for 2017 vulnerability link15f11a0
[security] Add new DoS vulnerability to SECURITY.md3c56601
[dist] 8.17.1e55e510
[security] Fix crash when the Upgrade header cannot be read (#2231)6a00029
[test] Increase code coverageddfe4a8
[perf] Reduce the amount ofcrypto.randomFillSync()
callsb73b118
[dist] 8.17.029694a5
[test] Use thehighWaterMark
variableUpdates
ws
from 7.5.9 to 8.18.0Release notes
Sourced from ws's releases.
... (truncated)
Commits
976c53c
[dist] 8.18.059b9629
[feature] Add support forBlob
(#2229)0d1b5e6
[security] Use more descriptive text for 2017 vulnerability link15f11a0
[security] Add new DoS vulnerability to SECURITY.md3c56601
[dist] 8.17.1e55e510
[security] Fix crash when the Upgrade header cannot be read (#2231)6a00029
[test] Increase code coverageddfe4a8
[perf] Reduce the amount ofcrypto.randomFillSync()
callsb73b118
[dist] 8.17.029694a5
[test] Use thehighWaterMark
variableUpdates
tough-cookie
from 2.5.0 to 4.1.3Release notes
Sourced from tough-cookie's releases.
... (truncated)
Commits
4ff4d29
4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)12d4747
Prevent prototype pollution in cookie memstore (#283)f06b72d
Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...b1a8898
fix: allow set cookies with localhost (#253)ec70796
4.1.1 Patch -- allow special use domains by default (#250)d4ac580
fix: allow special use domains by default (#249)79c2f7d
4.1.0 release to NPM (#245)4fafc17
Prepare tough-cookie 4.1 for publishing (updated GitHub actions, move Dockerf...aa4396d
fix: distinguish between no samesite and samesite=none (#240)b8d7511
Modernize README (#234)Maintainer changes
This version was pushed to npm by awaterma, a new releaser for tough-cookie since your current version.
Updates
webpack-dev-middleware
from 6.1.1 to 6.1.3Release notes
Sourced from webpack-dev-middleware's releases.
Changelog
Sourced from webpack-dev-middleware's changelog.
Commits
4537522
chore(release): 6.1.35a4d9e8
fix: security problem (#1799)54e4a96
chore(release): 6.1.29670b34
fix(security): do not allow to read files above (#1778)Updates
webpack-dev-middleware
from 5.3.3 to 6.1.3Release notes
Sourced from webpack-dev-middleware's releases.
Changelog
Sourced from webpack-dev-middleware's changelog.
Commits