⬆️ Bump the npm_and_yarn group across 1 directory with 23 updates - #23
Open
dependabot[bot] wants to merge 1 commit into
Open
⬆️ Bump the npm_and_yarn group across 1 directory with 23 updates#23dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [semantic-release](https://github.com/semantic-release/semantic-release) | `17.2.3` | `19.0.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.11.0` | `7.24.7` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `26.2.1` | `29.7.0` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.6` | `4.7.8` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [json5](https://github.com/json5/json5) | `2.1.3` | `2.2.3` | | [lodash](https://github.com/lodash/lodash) | `4.17.19` | `4.17.21` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [parse-path](https://github.com/IonicaBizau/parse-path) | `4.0.1` | `7.0.0` | | [semantic-release-gitmoji](https://github.com/momocow/semantic-release-gitmoji) | `1.3.4` | `1.6.5` | Updates `semantic-release` from 17.2.3 to 19.0.3 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v17.2.3...v19.0.3) Updates `@babel/traverse` from 7.11.0 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-traverse) Updates `ajv` from 5.5.2 to 6.12.3 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v5.5.2...v6.12.3) Updates `ansi-regex` from 2.1.1 to 5.0.0 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v5.0.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `jest` from 26.2.1 to 29.7.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest) Updates `handlebars` from 4.7.6 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.6...v4.7.8) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `tough-cookie` from 2.4.3 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v2.5.0) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `json5` from 2.1.3 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.1.3...v2.2.3) Updates `lodash` from 4.17.19 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.19...4.17.21) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `node-fetch` from 2.6.1 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.1...v2.7.0) Updates `npm-user-validate` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/npm/npm-user-validate/releases) - [Changelog](https://github.com/npm/npm-user-validate/blob/main/CHANGELOG.md) - [Commits](npm/npm-user-validate@v1.0.0...v1.0.1) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `request` from 2.88.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `tar` from 4.4.13 to 6.1.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.13...v6.1.11) Updates `y18n` from 4.0.0 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...v5.0.8) Updates `parse-path` from 4.0.1 to 7.0.0 - [Release notes](https://github.com/IonicaBizau/parse-path/releases) - [Commits](IonicaBizau/parse-path@4.0.1...7.0.0) Updates `semantic-release-gitmoji` from 1.3.4 to 1.6.5 - [Release notes](https://github.com/momocow/semantic-release-gitmoji/releases) - [Changelog](https://github.com/momocow/semantic-release-gitmoji/blob/main/.releaserc.js) - [Commits](momocow/semantic-release-gitmoji@v1.3.4...v1.6.5) Updates `parse-url` from 5.0.1 to 8.1.0 - [Release notes](https://github.com/IonicaBizau/parse-url/releases) - [Commits](IonicaBizau/parse-url@5.0.1...8.1.0) --- updated-dependencies: - dependency-name: semantic-release dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jest dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm-user-validate dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: request dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-path dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semantic-release-gitmoji dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: parse-url dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This was referenced Jun 16, 2024
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 13 updates in the / directory:
17.2.319.0.37.11.07.24.73.0.23.0.326.2.129.7.04.7.64.7.80.2.30.4.01.4.11.4.22.1.32.2.34.17.194.17.211.2.51.2.86.5.26.5.34.0.17.0.01.3.41.6.5Updates
semantic-releasefrom 17.2.3 to 19.0.3Release notes
Sourced from semantic-release's releases.
... (truncated)
Commits
58a226ffix(log-repo): use the original form of the repo url to remove the need to ma...17d60d3build(deps): bump npm from 8.3.1 to 8.12.0 (#2447)ab45ab1chore(lint): disabled rules that dont apply to this project (#2408)ea389c3chore(deps): update dependency yargs-parser to 13.1.2 [security] (#2402)fa994dbbuild(deps): bump node-fetch from 2.6.1 to 2.6.7 (#2399)b79116bbuild(deps): bump trim-off-newlines from 1.0.1 to 1.0.36fd7e56build(deps): bump minimist from 1.2.5 to 1.2.62b94bb4docs: update broken link to CI config recipes (#2378)b4bc191docs: Correct circleci workflow (#2365)2c30e26Merge pull request #2333 from semantic-release/nextUpdates
@babel/traversefrom 7.11.0 to 7.24.7Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
bf1e9a3v7.24.74463aa5fix: incorrectconstantViolationswith destructuring (#16522)07bd000ImprovegetBindingIdentifiers(#16544)17a5502[Babel 8] Removeextra.shorthand(#16521)7934963Usetype: modulein allpackage.jsons (#16535)9630250v7.24.61f010dfExplicitly defineNodePath.prototype.*(#16488)6e3539b[babel 8] Publish.d.tsfiles for every package (#16416)e37e64dUse eslint v9 (#16479)3ff20b9Statically generate boilerplate for bitfield accessors (#16482)Updates
ajvfrom 5.5.2 to 6.12.3Release notes
Sourced from ajv's releases.
... (truncated)
Commits
521c3a56.12.3bd7107bMerge pull request #1229 from ajv-validator/dependabot/npm_and_yarn/mocha-8.0.19c26bb2Merge pull request #1234 from ajv-validator/dependabot/npm_and_yarn/eslint-7.3.1c6a6daaMerge branch 'master' into dependabot/npm_and_yarn/mocha-8.0.115eda23Merge branch 'master' into dependabot/npm_and_yarn/eslint-7.3.1d6aabb8test: remove node 8 from travis testc4801caMerge pull request #1242 from ajv-validator/refactor988982dignore proto propertiesf2b1e3dwhitespace65e3678Merge pull request #1239 from GrahamLea/patch-1Updates
ansi-regexfrom 2.1.1 to 5.0.0Release notes
Sourced from ansi-regex's releases.
Commits
2b56fb05.0.0f26f7feMeta tweakse77ea17Add TypeScript definition (#32)166a0d5Require Node.js 8f115fcaTidelift tasksa079ab24.1.096200bbSupport more escape types like links (#29)e076cd1Add Tidelift mention in the readmea1d92464.0.0ced7421Require Node.js 6Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
jestfrom 26.2.1 to 29.7.0Release notes
Sourced from jest's releases.
... (truncated)
Changelog
Sourced from jest's changelog.
... (truncated)
Commits
4e56991v29.7.055cd6a0v29.6.4fb7d95cv29.6.349bacb9chore: update jest repo organisation in urls (#14413)0fd5b1cv29.6.21f019afv29.6.1c1e5b8av29.6.06ffa48dchore: upgrade TypeScript to v5 (#14155)a95eeb6chore: update tsd runner (#14020)39f3bedv29.5.0Updates
handlebarsfrom 4.7.6 to 4.7.8Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
Commits
8dc3d25v4.7.8668c4fbFix browser tests in CI pipelinec65c6ccTest on Node 183d3796cMake library compatible with workers075b354Fix sync issue with npm lock-file30dbf04Fix compiling of each block params in strict modee3a5448Fix bundler issue with webpack 58e23642Fix integration-tests issue with npm >= 788ac068use https instead of git for mustache submodulec68bc08Fix typoMaintainer changes
This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.
Updates
inifrom 1.3.5 to 1.3.8Commits
a2c5da81.3.8af5c6bbDo not use Object.create(null)8b648a1don't test where our devdeps don't even workc74c8af1.3.7024b8b5update deps, add linting032fbafUse Object.create(null) to avoid default object property hazards2da90391.3.6cfea636better git push script, before publish instead of after56d2805do not allow invalid hazardous string as section nameMaintainer changes
This version was pushed to npm by isaacs, a new releaser for ini since your current version.
Updates
tough-cookiefrom 2.4.3 to 2.5.0Commits
7c1fdf12.5.09ff4ba5Qualify the store.removeAllCookies documentation1855bf3Additional documentation for removeAllCookies5cc9bd2Extract tests, cover multiple error path28f0808Only call removeAllCookies if actually implemented62802efremove all cookies from cookie jar at once (#115)8783d46Remove left-over mention of MPL from README8302ebcMerge pull request #121 from salesforce/punycode-2.1d6ea115Merge pull request #120 from salesforce/no-package-lockb897b49Merge pull request #119 from salesforce/inline-versionUpdates
json-schemafrom 0.2.3 to 0.4.0Commits
f6f6a3bUse a little more robust method of checking instancesef60987Update versionb62f1daProtect against constructor modification, #84fb427cdLink to json-schema-org repository in addition to site, fixes #5422f1461Don't allow proto property to be used for schema default/coerce, fixes #84c52a27cGet basic test to passb3f42b3Add security policy3b0cec3Update versionc28470fUpdate readme to acknowledge the state of the package7dff9cdMerge pull request #81 from hodovani/patch-1Updates
jsprimfrom 1.4.1 to 1.4.2Changelog
Sourced from jsprim's changelog.
Commits
5c8475fjoyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.xMaintainer changes
This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.
Updates
json5from 2.1.3 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
lodashfrom 4.17.19 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.