Skip to content

Bump the npm_and_yarn group across 1 directory with 13 updates #214

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 12, 2025

Bumps the npm_and_yarn group with 11 updates in the / directory:

Package From To
cookie 0.4.2 0.7.1
@nestjs/platform-express 10.4.3 10.4.15
@nestjs/platform-socket.io 10.3.7 10.4.15
express 4.21.0 4.21.2
cross-spawn 7.0.3 7.0.6
nanoid 3.3.7 3.3.8
phin 2.9.3 removed
node-vibrant 3.1.6 4.0.3
rollup 4.14.2 4.34.6
undici 6.11.1 removed
@angular-devkit/build-angular 17.3.9 19.1.6

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates @nestjs/platform-express from 10.4.3 to 10.4.15

Release notes

Sourced from @​nestjs/platform-express's releases.

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

  • common
    • #14256 chore(common): Add type declaration for RawBody decorator with pipes (@​sapenlei)

Dependencies

Committers: 3

v10.4.12 (2024-11-29)

Bug fixes

Dependencies

... (truncated)

Commits

Updates @nestjs/platform-socket.io from 10.3.7 to 10.4.15

Release notes

Sourced from @​nestjs/platform-socket.io's releases.

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

  • common
    • #14256 chore(common): Add type declaration for RawBody decorator with pipes (@​sapenlei)

Dependencies

Committers: 3

v10.4.12 (2024-11-29)

Bug fixes

Dependencies

... (truncated)

Commits

Updates express from 4.21.0 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates path-to-regexp from 0.1.10 to 0.1.12

Release notes

Sourced from path-to-regexp's releases.

Fix backtracking (again)

Fixed

  • Improved backtracking protection for 0.1.x, will break some previously valid paths (see previous advisory: GHSA-9wv6-86v2-598j)

pillarjs/path-to-regexp@v0.1.11...v0.1.12

Error on bad input

Changed

  • Add error on bad input values 8f09549

pillarjs/path-to-regexp@v0.1.10...v0.1.11

Commits

Updates nanoid from 3.3.7 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Removes phin

Updates node-vibrant from 3.1.6 to 4.0.3

Release notes

Sourced from node-vibrant's releases.

v4.0.2

What's Changed

New Contributors

Full Changelog: Vibrant-Colors/node-vibrant@v4.0.1...v4.0.2

v4.0.1

What's Changed

Full Changelog: Vibrant-Colors/node-vibrant@v4.0.0...v4.0.1

v4.0.0

The first stable release in 4 years!

This is a huge release with a ton of internal stability improvements, bug fixes, and more.

There's even a docs site now: https://vibrant.dev

The codebase has never been in as good as a place as it is today; even in the early 3.15 days.

Breaking Changes

  • You now must import from node-vibrant/browser, node-vibrant/node, or node-vibrant/worker to get the correct environment-specific implementation
  • Vibrant class is now a named export
  • Node 18+ is now required
  • ES5 support is dropped
  • Vibrant.getPalette no longer accepts a name or callback API
    • Please migrate to the promise-based API to replace the callback API
    • Please let us know if you were using the name API: https://github.com/Vibrant-Colors/node-vibrant/issues
      • It was unclear how this was used in practice. We can reconsider adding it back if there's usecases I wasn't aware of
  • Vibrant.getPalettes no longer accepts a names or callback API
    • Please migrate to the promise-based API to replace the callback API
    • Please let us know if you were using the names API: https://github.com/Vibrant-Colors/node-vibrant/issues
      • It was unclear how this was used in practice. We can reconsider adding it back if there's usecases I wasn't aware of
  • Builder.getSwatches alias was removed in favor of calling Builder.getPalette
  • Removed the deprecated Builder.getHex API, use the Builder.hex property instead
  • Removed the deprecated Builder.getPopulation API, use the Builder.population property instead
  • Removed the deprecated Builder.getHsl API, use the Builder.hsl property instead
  • Removed the deprecated Builder.getRgb API, use the Builder.rgb property instead
  • Workers are imported differently using the ?worker import fix alias
Changelog

Sourced from node-vibrant's changelog.

v4.0.0

node-vibrant's internal packaging is now vastly more stable and improved. We'll continue to ship the default package with the same API as before, but now you can also import individual modules for more control over your environment.

Breaking Changes

  • You now must import from node-vibrant/browser, node-vibrant/node, or node-vibrant/worker to get the correct environment-specific implementation
  • Vibrant class is now a named export
  • Node 18+ is now required
  • ES5 support is dropped
  • Vibrant.getPalette no longer accepts a name or callback API
    • Please migrate to the promise-based API to replace the callback API
    • Please let us know if you were using the name API: https://github.com/Vibrant-Colors/node-vibrant/issues
      • It was unclear how this was used in practice. We can reconsider adding it back if there's usecases I wasn't aware of
  • Vibrant.getPalettes no longer accepts a names or callback API
    • Please migrate to the promise-based API to replace the callback API
    • Please let us know if you were using the names API: https://github.com/Vibrant-Colors/node-vibrant/issues
      • It was unclear how this was used in practice. We can reconsider adding it back if there's usecases I wasn't aware of
  • Builder.getSwatches alias was removed in favor of calling Builder.getPalette
  • Removed the deprecated Builder.getHex API, use the Builder.hex property instead
  • Removed the deprecated Builder.getPopulation API, use the Builder.population property instead
  • Removed the deprecated Builder.getHsl API, use the Builder.hsl property instead
  • Removed the deprecated Builder.getRgb API, use the Builder.rgb property instead
  • Workers are imported differently using the ?worker import fix alias

v3.2.0

node-vibrant is now a monorepo. Building blocks of node-vibrant has been separated into multiple small packages under @vibrant/* scope. The goal is to make it more flexible, allowing alternative algorithms, additional image format support and etc to be implemented by 3rd party packages.

The node-vibrant package still provides default experience out-of-box.

Breaking Changes

  • strickNullChecks flag is now enabled.
  • Prebuilt bundle will not be provided. You should use your own webpack workflow.

3.1.0

  • Fix empty swatches sometimes showing up for images
  • Update deps
  • Moved from Bluebird to native promises
  • Fix issue with dist folder not appearing on install
  • Fix issue with images not loading properly

3.0.0

New WebWorker support in v3.0

Quantization is the most time-consuming stage in node-vibrant. In v3.0, the quantization can be run in the WebWorker to avoid freezing the UI thread.

... (truncated)

Commits

Updates rollup from 4.14.2 to 4.34.6

Release notes

Sourced from rollup's releases.

v4.34.6

4.34.6

2025-02-07

Bug Fixes

  • Retain "void 0" in the output for smaller output and fewer surprises (#5838)

Pull Requests

v4.34.5

4.34.5

2025-02-07

Bug Fixes

  • Ensure namespace reexports always include all properties of all exports (#5837)

Pull Requests

v4.34.4

4.34.4

2025-02-05

Bug Fixes

  • Do not tree-shake properties if a rest element is used in destructuring (#5833)

Pull Requests

v4.34.3

4.34.3

2025-02-05

Bug Fixes

  • Ensure properties of "this" are included in getters (#5831)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.34.6

2025-02-07

Bug Fixes

  • Retain "void 0" in the output for smaller output and fewer surprises (#5838)

Pull Requests

4.34.5

2025-02-07

Bug Fixes

  • Ensure namespace reexports always include all properties of all exports (#5837)

Pull Requests

4.34.4

2025-02-05

Bug Fixes

  • Do not tree-shake properties if a rest element is used in destructuring (#5833)

Pull Requests

4.34.3

2025-02-05

Bug Fixes

  • Ensure properties of "this" are included in getters (#5831)

Pull Requests

... (truncated)

Commits

Removes undici

Updates @angular-devkit/build-angular from 17.3.9 to 19.1.6

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v19.1.6

19.1.6 (2025-02-05)

@​schematics/angular

Commit Description
fix - 3f7042672 remove additional newline after standalone property
fix - e9778dba0 skip ssr migration when @angular/ssr is not a dependency

@​angular/build

Commit Description
fix - 27f833186 avoid pre-transform errors with Vite pre-bundling
fix - 8f6ee7ed9 ensure full rebuild after initial error build in watch mode
fix - 2b9c00f68 prevent fallback to serving main.js for unknown requests
fix - 45abd15b7 prevent server manifest generation when no server features are enabled

@​angular/ssr

Commit Description
fix - 5bf5e5fd2 prioritize the first matching route over subsequent ones

v19.1.5

19.1.5 (2025-01-29)

@​schematics/angular

Commit Description
fix - 14e3a71e4 update library schematic to use @angular-devkit/build-angular:ng-packagr

@​angular/build

Commit Description
fix - d53d25fc1 allow tailwindcss 4.x as a peer dependency
fix - bd9d379f0 disable TypeScript removeComments option
fix - e73e9102e handle empty module case to avoid TypeError
fix - bb413456e keep background referenced HMR update chunks
fix - 2011d3428 support template updates that also trigger global stylesheet changes
fix - 688019946 update vite to version 6.0.11

@​angular/ssr

Commit Description
fix - 94643d54d enhance dynamic route matching for better performance and accuracy
fix - 747557aa0 redirect to locale pathname instead of full URL
fix - bbbc1eb7a rename provideServerRoutesConfig to provideServerRouting

v19.1.4

19.1.4 (2025-01-22)

@​angular-devkit/schematics

Commit Description
fix - aa6f0d051 ensure collections can be resolved via test runner in pnpm workspaces

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.1.6 (2025-02-05)

@​schematics/angular

Commit Type Description
3f7042672 fix remove additional newline after standalone property
e9778dba0 fix skip ssr migration when @angular/ssr is not a dependency

@​angular/build

Commit Type Description
27f833186 fix avoid pre-transform errors with Vite pre-bundling
8f6ee7ed9 fix ensure full rebuild after initial error build in watch mode
2b9c00f68 fix prevent fallback to serving main.js for unknown requests
45abd15b7 fix prevent server manifest generation when no server features are enabled

@​angular/ssr

Commit Type Description
5bf5e5fd2 fix prioritize the first matching route over subsequent ones

19.2.0-next.1 (2025-01-29)

@​schematics/angular

Commit Type Description
cae068be3 fix update library schematic to use @angular-devkit/build-angular:ng-packagr

@​angular/build

Commit Type Description
694ef8e6e fix allow tailwindcss 4.x as a peer dependency
1a3ef3b60 fix disable TypeScript removeComments option
d4ee36065 fix keep background referenced HMR update chunks
531dcdca4 fix support template updates that also trigger global stylesheet changes
f836be9e6 fix support Vite allowedHosts option for development server
0ddf6aafa fix utilize bazel stamp instead of resolving peer dependency versions

@​angular/ssr

| Commit | Type | Description |

... (truncated)

Commits
  • f4de3d2 release: cut the v19.1.6 release
  • 8f6ee7e fix(@​angular/build): ensure full rebuild after initial error build in watch mode
  • 27f8331 fix(@​angular/build): avoid pre-transform errors with Vite pre-bundling
  • 58c2122 refactor(@​angular/build): allow component update invalidation from client
  • de66572 refactor(@​angular/ssr): simplify preload append logic in metadata
  • e9778db fix(@​schematics/angular): skip ssr migration when @angular/ssr is not a dep...
  • 4b4eeca build: Preserve newlines when gathering stdout
  • 3f70426 fix(@​schematics/angular): remove additional newline after standalone property
  • 5bf5e5f fix(@​angular/ssr): prioritize the first matching route over subsequent ones
  • 2dec1e7 ci: empty default permissions for CodeQL action
  • Additional commits viewable in compare view

Updates vite from 5.1.7 to 6.0.11

Release notes

Sourced from vite's releases.

v6.0.11

Please refer to CHANGELOG.md for details.

v6.0.10

Please refer to CHANGELOG.md for details.

v6.0.9

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v6.0.8

Please refer to CHANGELOG.md for details.

v6.0.7

Please refer to CHANGELOG.md for details.

v6.0.6

Please refer to CHANGELOG.md for details.

v6.0.5

Please refer to CHANGELOG.md for details.

v6.0.4

Please refer to CHANGELOG.md for details.

v6.0.3

Please refer to CHANGELOG.md for details.

v6.0.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.0.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.0.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced ...

Description has been truncated

Bumps the npm_and_yarn group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `0.7.1` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `10.4.3` | `10.4.15` |
| [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `10.3.7` | `10.4.15` |
| [express](https://github.com/expressjs/express) | `4.21.0` | `4.21.2` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` |
| [phin](https://github.com/ethanent/phin) | `2.9.3` | `removed` |
| [node-vibrant](https://github.com/Vibrant-Colors/node-vibrant/tree/HEAD/packages/node-vibrant) | `3.1.6` | `4.0.3` |
| [rollup](https://github.com/rollup/rollup) | `4.14.2` | `4.34.6` |
| [undici](https://github.com/nodejs/undici) | `6.11.1` | `removed` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `17.3.9` | `19.1.6` |



Updates `cookie` from 0.4.2 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.2...v0.7.1)

Updates `@nestjs/platform-express` from 10.4.3 to 10.4.15
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v10.4.15/packages/platform-express)

Updates `@nestjs/platform-socket.io` from 10.3.7 to 10.4.15
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v10.4.15/packages/platform-socket.io)

Updates `express` from 4.21.0 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.21.0...4.21.2)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `path-to-regexp` from 0.1.10 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.10...v0.1.12)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

Removes `phin`

Updates `node-vibrant` from 3.1.6 to 4.0.3
- [Release notes](https://github.com/Vibrant-Colors/node-vibrant/releases)
- [Changelog](https://github.com/Vibrant-Colors/node-vibrant/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Vibrant-Colors/node-vibrant/commits/v4.0.3/packages/node-vibrant)

Updates `rollup` from 4.14.2 to 4.34.6
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.14.2...v4.34.6)

Removes `undici`

Updates `@angular-devkit/build-angular` from 17.3.9 to 19.1.6
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@17.3.9...19.1.6)

Updates `vite` from 5.1.7 to 6.0.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.0.11/packages/vite)

---
updated-dependencies:
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@nestjs/platform-express"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@nestjs/platform-socket.io"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: phin
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-vibrant
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants