chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed #1438

mend-for-github-com · 2024-10-09T02:21:21Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@open-wc/semantic-dom-diff (source)	`0.19.4` -> `0.19.9`
@storybook/addon-a11y (source)	`6.3.10` -> `6.3.13`
@storybook/addon-actions (source)	`6.3.10` -> `6.3.13`
@storybook/addon-controls (source)	`6.3.10` -> `6.3.13`
@storybook/addon-docs (source)	`6.3.10` -> `6.3.13`
@storybook/addon-viewport (source)	`6.3.10` -> `6.3.13`
@storybook/addons (source)	`6.3.10` -> `6.3.13`
@storybook/theming (source)	`6.3.10` -> `6.3.13`
@storybook/web-components (source)	`6.3.10` -> `6.3.13`
@types/ramda (source)	`0.27.44` -> `0.27.66`
@types/serve-handler (source)	`6.1.1` -> `6.1.4`
@whitespace/storybook-addon-html	`5.0.0` -> `5.0.3`
chai (source)	`4.3.4` -> `4.3.10`
chai-a11y-axe (source)	`1.3.1` -> `1.3.2`
chokidar	`3.5.2` -> `3.5.3`
command-line-args	`5.2.0` -> `5.2.1`
command-line-usage	`6.1.1` -> `6.1.3`
depcheck	`1.4.2` -> `1.4.7`
eslint-plugin-import	`2.25.2` -> `2.25.4`
fibers	`5.0.0` -> `5.0.3`
glob	`7.2.0` -> `7.2.3`
got	`11.8.2` -> `11.8.6`
husky	`7.0.2` -> `7.0.4`
immer	`9.0.6` -> `9.0.21`
jimp	`0.16.1` -> `0.16.13`
karma-chrome-launcher	`3.1.0` -> `3.1.1`
karma-file-fixtures-preprocessor	`3.0.1` -> `3.0.2`
karma-firefox-launcher	`2.1.1` -> `2.1.3`
lint-staged	`11.2.0` -> `11.2.6`
minimist	`1.2.6` -> `1.2.8`
standard-version	`9.3.1` -> `9.3.2`
style-dictionary	`3.0.1` -> `3.0.3`
stylelint-no-unsupported-browser-features	`5.0.2` -> `5.0.4`
ts-loader	`9.2.5` -> `9.2.9`
tslib (source)	`2.3.0` -> `2.3.1`
web-component-analyzer	`1.1.6` -> `1.1.7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

open-wc/open-wc (@open-wc/semantic-dom-diff)

`v0.19.9`

Compare Source

Patch Changes

9e49e7a: fix(deps): update @web/* dependencies

`v0.19.8`

Compare Source

Patch Changes

2629244: Change return type from Assertion to Promise

`v0.19.7`

Compare Source

Patch Changes

735b009: Avoid saving unchanged snapshots

`v0.19.6`

Patch Changes

a7e9c20: chore(semantic-dom-diff): updates dependencies

`v0.19.5`

Patch Changes

b9b11ad: support snapshot testing with Web Test Runner
b6e868d: Use latest dependencies
40837d1: - use latest axe-core
- allow not required attributes in role testing
580ce0e: Snapshot testing with WTR updated to not modify the snapshot files running the test

storybookjs/storybook (@storybook/addon-a11y)

`v6.3.13`

Compare Source

Dependency Upgrades

Bump cli-table3 to fix colors bug (#17180)

`v6.3.12`

Compare Source

Bug Fixes

CLI: Force sb upgrade to use latest version of npm-check-updates (#16336)

`v6.3.11`

Compare Source

Bug Fixes

CLI: Fix CRA version detection crash (#16308)

whitespace-se/storybook-addon-html (@whitespace/storybook-addon-html)

chaijs/chai (chai)

`v4.3.10`

Compare Source

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

upgrade all dependencies by @keithamus in https://github.com/chaijs/chai/pull/1540

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

`v4.3.9`

Compare Source

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

`v4.3.8`

Compare Source

What's Changed

4.x.x: Fix link to commit logs on GitHub by @bugwelle in https://github.com/chaijs/chai/pull/1487
build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @dependabot in https://github.com/chaijs/chai/pull/1488
Small typo in test.js by @mavaddat in https://github.com/chaijs/chai/pull/1459
docs: specify return type of objDisplay by @scarf005 in https://github.com/chaijs/chai/pull/1490
Update CONTRIBUTING.md by @matheus-rodrigues00 in https://github.com/chaijs/chai/pull/1521
Fix: update exports.version to current version by @peanutenthusiast in https://github.com/chaijs/chai/pull/1534

New Contributors

@bugwelle made their first contribution in https://github.com/chaijs/chai/pull/1487
@mavaddat made their first contribution in https://github.com/chaijs/chai/pull/1459
@scarf005 made their first contribution in https://github.com/chaijs/chai/pull/1490
@matheus-rodrigues00 made their first contribution in https://github.com/chaijs/chai/pull/1521
@peanutenthusiast made their first contribution in https://github.com/chaijs/chai/pull/1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

`v4.3.7`

Compare Source

What's Changed

fix: deep-eql bump package to support symbols comparison by @snewcomer in https://github.com/chaijs/chai/pull/1483

Full Changelog: chaijs/chai@v4.3.6...v4.3.7

`v4.3.6`

Compare Source

Update loupe to 2.3.1

`v4.3.5`

Compare Source

build chaijs fca5bb1
build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
fix package.json exports 022c2fa
fix: package.json - deprecation warning on exports field (#1400) 5276af6
feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

open-wc/open-wc (chai-a11y-axe)

`v1.3.2`

Patch Changes

40837d1: - use latest axe-core
- allow not required attributes in role testing
6940a3c: fix: override bad publication

paulmillr/chokidar (chokidar)

`v3.5.3`

Compare Source

What's Changed

types: use correct type def for ignored option by @iheyunfei in https://github.com/paulmillr/chokidar/pull/1140
Update chokidar-cli link in README.md by @mcecode in https://github.com/paulmillr/chokidar/pull/1142
handle promise rejection when a symlink's target does not exist. Fixe… by @nicks in https://github.com/paulmillr/chokidar/pull/1010
fix: improve add and unwatch TypeScript definitions by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1157
Enable dtslinting by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1158
style: delete yarn.lock by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1159

New Contributors

@iheyunfei made their first contribution in https://github.com/paulmillr/chokidar/pull/1140
@mcecode made their first contribution in https://github.com/paulmillr/chokidar/pull/1142
@nicks made their first contribution in https://github.com/paulmillr/chokidar/pull/1010
@alan-agius4 made their first contribution in https://github.com/paulmillr/chokidar/pull/1157

Full Changelog: paulmillr/chokidar@3.5.2...3.5.3

75lb/command-line-args (command-line-args)

`v5.2.1`

Compare Source

75lb/command-line-usage (command-line-usage)

`v6.1.3`

Compare Source

`v6.1.2`

Compare Source

depcheck/depcheck (depcheck)

`v1.4.7`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.6`

Compare Source

Full Changelog

Closed issues:

Add explicitResourceManagement to default TS babel config #833
Flag to make logs readable and less verbose #759

Merged pull requests:

Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
Support projects field in jest configuration #831 (dobesv)
Handle scoped package bin with default name #830 (dobesv)
feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
fix(sass): don't detect transitive dependencies #827 (miluoshi)
feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
fix(storybook): parse package names out of addons array #825 (miluoshi)

`v1.4.5`

Compare Source

Full Changelog

`v1.4.3`

Compare Source

Full Changelog

Fixed bugs:

Different results when running depcheck from npm install -g vs npx #689
Fails with Top-Level Await #671

Closed issues:

false alert on file src/server.js #655
Svelte Support #650
False positive: types-only dependencies #568

Merged pull requests:

feat(eslint): add support for .eslintrc.cjs #681 (shian15810)
feat(types): improve typings #680 (shian15810)
cli: --oneline option #679 (vanodevium)
fix: allow using @types-module for typescript type-only imports #670 (rexxars)
Support next.config.js with next-transpile-modules #660 (crossjs)
Fix scss parsing for non-import '@' keywords #658 (Dylanlan)
feat: detect deps used with -r in package.json #657 (Dylanlan)
Support babel.config.js(on) files #656 (crossjs)

import-js/eslint-plugin-import (eslint-plugin-import)

`v2.25.4`

Compare Source

Fixed

importType: avoid crashing on a non-string' ([#2305], thanks [@ljharb])
[first]: prevent crash when parsing angular templates ([#2210], thanks [@ljharb])
importType: properly resolve @/*-aliased imports as internal ([#2334], thanks [@ombene])
[named]/ExportMap: handle named imports from CJS modules that use dynamic import ([#2341], thanks [@ludofischer])

Changed

[no-default-import]: report on the token "default" instead of the entire node ([#2299], thanks [@pmcelhaney])
[Docs] [order]: Remove duplicate mention of default ([#2280], thanks [@johnthagen])
[Deps] update eslint-module-utils

`v2.25.3`

Compare Source

Fixed

[extensions]: ignore unresolveable type-only imports ([#2270], [#2271], thanks [@jablko])
importType: fix isExternalModule calculation ([#2282], thanks [@mx-bernhard])
[no-import-module-exports]: avoid false positives with a shadowed module or exports ([#2297], thanks [@ljharb])

Changed

[Docs] [order]: add type to the default groups ([#2272], thanks [@charpeni])
[readme] Add note to TypeScript docs to install appropriate resolver ([#2279], thanks [@johnthagen])
[Refactor] importType: combine redundant isScoped and isScopedModule (thanks [@ljharb])
[Docs] HTTP => HTTPS ([#2287], thanks [@Schweinepriester])

laverdet/node-fibers (fibers)

`v5.0.2`

Compare Source

`v5.0.1`

Compare Source

isaacs/node-glob (glob)

`v7.2.3`

Compare Source

`v7.2.2`

Compare Source

sindresorhus/got (got)

`v11.8.6`

Compare Source

Destroy request object after successful response

`v11.8.5`

Compare Source

Backport security fix sindresorhus/got@861ccd9
- CVE-2022-33987

`v11.8.3`

Compare Source

Bump cacheable-request dependency (#1921) 9463bb6
Fix HTTPError missing .code property (#1739) 0e167b8

typicode/husky (husky)

`v7.0.4`

Compare Source

No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.

`v7.0.3`

Compare Source

immerjs/immer (immer)

`v9.0.21`

Compare Source

Bug Fixes

ensure type exports is first in package.json export declaration (#1018) (b6ccd0f)

`v9.0.20`

Compare Source

Bug Fixes

patching maps failed when using number keys (#1025) (dd83e2e)

`v9.0.19`

Compare Source

Bug Fixes

don't freeze drafts returned from produce if they were passed in as draft (#917) (46867f8)
produce results should never be frozen when returned from nested produces, to prevent 'hiding' drafts. Fixes #935 (a810960)
release and publish from 'main' rather than 'master' branch (82acc40)
revert earlier fix (#990) for recursive types (#1014) (3eeb331)
Upgrade Github actions to Node 16 attempt 1 (9d4ea93)
Upgrade Github actions to Node 16 attempt 2 (082eecd)

`v9.0.18`

Compare Source

Bug Fixes

Preserve insertion order of Sets, fixes #819 (#976) (b3eeb69)
unnecessarily recursive Draft type (#990) (b9eae1d)

`v9.0.17`

Compare Source

Bug Fixes

special case NaN in setter (#912) (5721bb7)

`v9.0.16`

Compare Source

Bug Fixes

protect isDraftable against undefined constructor (#969) (ced4563)

`v9.0.15`

Compare Source

Bug Fixes

Add "types" to exports for TypeScript 4.7 (#946) (85ce6b7)

`v9.0.14`

Compare Source

Bug

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

github-actions · 2024-10-09T02:21:33Z

🚀

Latest successful build of the PR deployed here.

🚀

sonarqubecloud · 2025-07-26T03:04:34Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

mend-for-github-com bot added the patch release label Oct 9, 2024

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from 6610230 to f4cdd3c Compare October 16, 2024 02:33

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 5 times, most recently from 9c95a91 to c3d8e0c Compare October 23, 2024 02:23

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from d60fe88 to ac179b4 Compare October 30, 2024 03:01

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 11 times, most recently from a6a0961 to b804871 Compare November 6, 2024 14:07

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 8 times, most recently from d2c326b to b4a6b07 Compare July 5, 2025 03:05

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 7 times, most recently from 6a35335 to 0e65b8b Compare July 13, 2025 03:08

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from b19a849 to 917a76f Compare July 19, 2025 03:07

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 3 times, most recently from e4cb47b to 49cb17b Compare July 25, 2025 02:57

chore(deps): update devdependencies (non-major)

89fff5c

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch from 49cb17b to 89fff5c Compare July 26, 2025 03:03

mend-for-github-com bot changed the title ~~chore(deps): update devdependencies (non-major) (master) (patch)~~ chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed Jul 28, 2025

mend-for-github-com bot closed this Jul 28, 2025

mend-for-github-com bot deleted the whitesource-remediate/master-patch-dev-dependencies-non-major branch July 28, 2025 02:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed #1438

chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed #1438

Uh oh!

mend-for-github-com bot commented Oct 9, 2024 •

edited

Loading

Uh oh!

github-actions bot commented Oct 9, 2024

Uh oh!

sonarqubecloud bot commented Jul 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed #1438

chore(deps): update devdependencies (non-major) (master) (patch) - autoclosed #1438

Uh oh!

Conversation

mend-for-github-com bot commented Oct 9, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Dependency Upgrades

Bug Fixes

Bug Fixes

What's Changed

What's Changed

New Contributors

What's Changed

Patch Changes

What's Changed

New Contributors

Fixed

Changed

Fixed

Changed

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug

Configuration

Uh oh!

github-actions bot commented Oct 9, 2024

Uh oh!

sonarqubecloud bot commented Jul 26, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

mend-for-github-com bot commented Oct 9, 2024 •

edited

Loading