Bump the npm_and_yarn group across 5 directories with 32 updates

[dependabot]

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package	From	To
esbuild	0.14.54	0.25.0
@badeball/cypress-cucumber-preprocessor	18.0.4	22.0.1
@octokit/plugin-paginate-rest	6.0.0	11.4.3
@octokit/rest	19.0.7	21.1.1
webpack	5.88.2	5.98.0
ws	8.13.0	8.18.1

Bumps the npm_and_yarn group with 15 updates in the /docroot/design-system directory:

Package	From	To
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
nanoid	3.3.6	3.3.9
elliptic	6.5.4	6.6.1
micromatch	4.0.5	4.0.8
serialize-javascript	6.0.1	6.0.2
webpack	5.83.1	5.98.0
ws	8.14.2	8.18.1
ws	6.2.2	8.18.1
ws	7.5.9	8.18.1
body-parser	1.20.1	1.20.3
express	4.18.2	4.21.2
ejs	3.1.9	3.1.10
ip	2.0.0	removed
storybook	7.4.6	7.6.20
markdown-to-jsx	7.3.2	7.7.4
store2	2.14.2	2.14.4

Bumps the npm_and_yarn group with 7 updates in the /docroot/modules/custom/va_gov_graphql/assets/explorer directory:

Package	From	To
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
micromatch	4.0.4	4.0.8
serialize-javascript	6.0.1	6.0.2
webpack	5.88.2	5.98.0
dset	3.1.2	3.1.4
@graphql-tools/url-loader	7.16.19	7.17.18

Bumps the npm_and_yarn group with 15 updates in the /docroot/themes/custom/vagovclaro directory:

Package	From	To
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
nanoid	3.3.6	3.3.9
elliptic	6.5.4	6.6.1
micromatch	4.0.5	4.0.8
serialize-javascript	6.0.1	6.0.2
webpack	5.76.2	5.98.0
ws	8.11.0	8.17.1
socket.io-client	4.6.1	4.8.1
socket.io	4.6.1	4.8.1
ip	2.0.0	removed
socks	2.7.1	2.8.4
send	0.16.2	0.19.1
browser-sync	2.29.0	3.0.3
axios	1.6.1	1.8.2

Bumps the npm_and_yarn group with 5 updates in the /scripts/cd_metrics directory:

Package	From	To
@octokit/plugin-paginate-rest	6.1.2	11.4.3
@octokit/rest	19.0.11	21.1.1
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
micromatch	4.0.5	4.0.8

Updates esbuild from 0.14.54 to 0.25.0

Release notes

Sourced from esbuild's releases.

v0.25.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.24.0 or ~0.24.0. See npm's documentation about semver for more information.

• Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)

  This change addresses esbuild's first security vulnerability report. Previously esbuild set the Access-Control-Allow-Origin header to * to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.

  Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to --serve=. The default host is 0.0.0.0, which refers to all of the IP addresses that represent the local machine (e.g. both 127.0.0.1 and 192.168.0.1). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.

  In addition, the serve() API call has been changed to return an array of hosts instead of a single host string. This makes it possible to determine all of the hosts that esbuild's development server will accept.

  Thanks to @​sapphi-red for reporting this issue.

• Delete output files when a build fails in watch mode (#3643)

  It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.

• Fix correctness issues with the CSS nesting transform (#3620, #3877, #3933, #3997, #4005, #4037, #4038)

  This release fixes the following problems:

  • Naive expansion of CSS nesting can result in an exponential blow-up of generated CSS if each nesting level has multiple selectors. Previously esbuild sometimes collapsed individual nesting levels using :is() to limit expansion. However, this collapsing wasn't correct in some cases, so it has been removed to fix correctness issues.

    /* Original code */
    .parent {
      > .a,
      > .b1 > .b2 {
        color: red;
      }
    }
    /* Old output (with --supported:nesting=false) */
    .parent > :is(.a, .b1 > .b2) {
    color: red;
    }
    /* New output (with --supported:nesting=false) */
    .parent > .a,
    .parent > .b1 > .b2 {
    color: red;
    }

    Thanks to @​tim-we for working on a fix.

  • The & CSS nesting selector can be repeated multiple times to increase CSS specificity. Previously esbuild ignored this possibility and incorrectly considered && to have the same specificity as &. With this release, this should now work correctly:

    /* Original code (color should be red) */

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2022

This changelog documents all esbuild versions published in the year 2022 (versions 0.14.11 through 0.16.12).

0.16.12

• Loader defaults to js for extensionless files (#2776)

  Certain packages contain files without an extension. For example, the yargs package contains the file yargs/yargs which has no extension. Node, Webpack, and Parcel can all understand code that imports yargs/yargs because they assume that the file is JavaScript. However, esbuild was previously unable to understand this code because it relies on the file extension to tell it how to interpret the file. With this release, esbuild will now assume files without an extension are JavaScript files. This can be customized by setting the loader for "" (the empty string, representing files without an extension) to another loader. For example, if you want files without an extension to be treated as CSS instead, you can do that like this:

  • CLI:

    esbuild --bundle --loader:=css
    

  • JS:

    esbuild.build({
      bundle: true,
      loader: { '': 'css' },
    })

  • Go:

    api.Build(api.BuildOptions{
      Bundle: true,
      Loader: map[string]api.Loader{"": api.LoaderCSS},
    })

  In addition, the "type" field in package.json files now only applies to files with an explicit .js, .jsx, .ts, or .tsx extension. Previously it was incorrectly applied by esbuild to all files that had an extension other than .mjs, .mts, .cjs, or .cts including extensionless files. So for example an extensionless file in a "type": "module" package is now treated as CommonJS instead of ESM.

0.16.11

• Avoid a syntax error in the presence of direct eval (#2761)

  The behavior of nested function declarations in JavaScript depends on whether the code is run in strict mode or not. It would be problematic if esbuild preserved nested function declarations in its output because then the behavior would depend on whether the output was run in strict mode or not instead of respecting the strict mode behavior of the original source code. To avoid this, esbuild transforms nested function declarations to preserve the intended behavior of the original source code regardless of whether the output is run in strict mode or not:

  // Original code
  if (true) {
    function foo() {}
    console.log(!!foo)
    foo = null
    console.log(!!foo)
  }

... (truncated)

Commits

• e9174d6 publish 0.25.0 to npm
• c27dbeb fix hosts in plugin-tests.js
• 6794f60 fix hosts in node-unref-tests.js
• de85afd Merge commit from fork
• da1de1b fix #4065: bitwise operators can return bigints
• f4e9d19 switch case liveness: default is always last
• 7aa47c3 fix #4028: minify live/dead switch cases better
• 22ecd30 minify: more constant folding for strict equality
• 4cdf03c fix #4053: reordering of .tsx in node_modules
• dc71977 fix #3692: 0 now picks a random ephemeral port
• Additional commits viewable in compare view

Updates @badeball/cypress-cucumber-preprocessor from 18.0.4 to 22.0.1

Release notes

Sourced from @​badeball/cypress-cucumber-preprocessor's releases.

v22.0.1

• Import types-only from @cucumber/messages, fixes #1273.

v22.0.0

Breaking changes:

• Dropped support for Cypress v10.

Other changes:

• Added support for Cypress v14, fixes #1267.

v21.0.3

• Correctly represent consecutive BeforeAll & AfterAll hooks in the command log, relates to #1250.

• Cache instances of SourceMapConsumer, fixes #1256.

v21.0.2

• Cache requested source maps, fixes #1245.

v21.0.1

• Support config file locations other than project root, fixes #1243.

v21.0.0

Breaking changes:

• Exported member preprocessor of @badeball/cypress-cucumber-preprocessor/browserify is removed.

  • User of @badeball/cypress-cucumber-preprocessor/browserify should change their Cypress config in accordance with the related https://github.com/badeball/cypress-cucumber-preprocessor/blob/HEAD/examples.

• The executable cypress-cucumber-diagnostics has been replaced by a dryRun option, relates to #1120 and #1129.

  • This is a massive overhaul of a feature that was originally ill-thought-out. I'm curious about the reception.

Other changees:

• Re-introduce support for Node v18, fixes #1230.

• Generate a temporary messages report in case of JsonFormatter errors, relates to #1161.

• Support project directories containing square brackets, EG. /home/[foo] my project/, relates to #1196.

• Allow features in arbitrary locations, fixes #1225.

v20.1.2

• Updated all dependencies, including esbuild, relates to #1068.

v20.1.1

• Omit outputting empty "then" entries to the command log, relates to #1214.

... (truncated)

Changelog

Sourced from @​badeball/cypress-cucumber-preprocessor's changelog.

v22.0.1

• Import types-only from @cucumber/messages, fixes #1273.

v22.0.0

Breaking changes:

• Dropped support for Cypress v10.

Other changes:

• Added support for Cypress v14, fixes #1267.

v21.0.3

• Correctly represent consecutive BeforeAll & AfterAll hooks in the command log, relates to #1250.

• Cache instances of SourceMapConsumer, fixes #1256.

v21.0.2

• Cache requested source maps, fixes #1245.

v21.0.1

• Support config file locations other than project root, fixes #1243.

v21.0.0

Breaking changes:

• Exported member preprocessor of @badeball/cypress-cucumber-preprocessor/browserify is removed.

  • User of @badeball/cypress-cucumber-preprocessor/browserify should change their Cypress config in accordance with the related https://github.com/badeball/cypress-cucumber-preprocessor/blob/master/examples.

• The executable cypress-cucumber-diagnostics has been replaced by a dryRun option, relates to #1120 and #1129.

  • This is a massive overhaul of a feature that was originally ill-thought-out. I'm curious about the reception.

Other changees:

• Re-introduce support for Node v18, fixes #1230.

• Generate a temporary messages report in case of JsonFormatter errors, relates to #1161.

• Support project directories containing square brackets, EG. /home/[foo] my project/, relates to #1196.

• Allow features in arbitrary locations, fixes #1225.

... (truncated)

Commits

• c6ebb9d v22.0.1
• ee910fc Stipulate reproducable example in issue template
• 510ed11 Avoid importing anything but types from @cucumber/messages
• c3f823a Migrate to Github's new issue templates
• 67477c2 Update dependency mocha to v11 (#1261)
• c57e2d8 v22.0.0
• 0defd7a Add support for Cypress v14
• 7702f44 Unstuck mocha types
• 5317b79 v21.0.3
• 1a87ddd Cache instances of SourceMapConsumer
• Additional commits viewable in compare view

Updates @octokit/plugin-paginate-rest from 6.0.0 to 11.4.3

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v11.4.3

11.4.3 (2025-02-24)

Bug Fixes

• types: correct pagination return type for data which is an array (#662) (9a51aad), closes #661

v11.4.2

11.4.2 (2025-02-13)

Bug Fixes

• types: add back the pagination keys (#653) (8b8c500), closes #652

v11.4.1

11.4.1 (2025-02-13)

Bug Fixes

• mitigate ReDos issues & linting issues (#659) (7d1fade), fixes #657

v11.4.0

11.4.0 (2025-01-08)

Features

• new action runner groups endpoints, new code scanning alerts autofix endpoints, new sub-issues endpoints, new private registries enpoints, new code security endpoints, various description updates (#646) (a73883f)

v11.3.6

11.3.6 (2024-11-26)

Bug Fixes

• types: bump @octokit/types to improve Deno compatibility (#642) (acb6a6e)

v11.3.5

11.3.5 (2024-09-29)

Bug Fixes

• types: improve type extraction for namespaced responses and correct async iterator types (#637) (e95444d)

... (truncated)

Commits

• 9a51aad fix(types): correct pagination return type for data which is an array (#662)
• 8b8c500 fix(types): add back the pagination keys (#653)
• 41876f4 chore(deps): update dependency prettier to v3.5.1 (#658)
• 7d1fade fix: mitigate ReDos issues & linting issues (#659)
• bb6c4f9 Merge commit from fork
• d9c1e8f chore(deps): update dependency esbuild to ^0.25.0 (#656)
• 7ed5627 build(deps-dev): bump vitest and @​vitest/coverage-v8 (#655)
• 4a41307 build: remove @​types/fetch-mock (#654)
• 31f8fe9 build(deps): bump vite from 5.4.6 to 6.0.11 (#651)
• bc38852 chore(deps): update vitest monorepo to v3 (major) (#650)
• Additional commits viewable in compare view

Updates @octokit/rest from 19.0.7 to 21.1.1

Release notes

Sourced from @​octokit/rest's releases.

v21.1.1

21.1.1 (2025-02-14)

Bug Fixes

• deps: update Octokit dependencies to mitigate ReDos [security] (#484) (ca256c3)

v21.1.0

21.1.0 (2025-01-08)

Features

• new endpoints, bump Octokit deps to fix Deno (#477) (908b1c8)

v21.0.2

21.0.2 (2024-08-16)

Bug Fixes

• docs: update to react 18 and latest gatsby deps (#462) (9a80f06), closes #216 #230 #460

v21.0.1

21.0.1 (2024-07-17)

Bug Fixes

• update deps (#456) (93d5afb)

v21.0.0

21.0.0 (2024-06-20)

Features

• v21 (#413) (12b6c65)

BREAKING CHANGES

• package is now ESM

v21.0.0-beta.4

21.0.0-beta.4 (2024-06-19)

... (truncated)

Commits

• ca256c3 fix(deps): update Octokit dependencies to mitigate ReDos [security] (#484)
• e791111 chore(deps): update dependency esbuild to ^0.25.0 (#483)
• facaa50 build(deps-dev): Bump vitest and @​vitest/coverage-v8 (#481)
• 8a0c472 chore(deps): update dependency undici to v6.21.1 [security] (#480)
• 4abc914 chore(deps): update vitest monorepo to v3 (major) (#478)
• 908b1c8 feat: new endpoints, bump Octokit deps to fix Deno (#477)
• 751b522 chore(deps): update dependency fetch-mock to v12 (#470)
• 5ad12fd chore(deps): update dependency @​types/node to v22 (#472)
• c88980a ci(action): update actions/checkout digest to 11bd719 (#469)
• 94443df ci(action): update actions/checkout digest to eef6144 (#467)
• Additional commits viewable in compare view

Updates @octokit/request from 6.2.3 to 9.2.2

Release notes

Sourced from @​octokit/request's releases.

v9.2.2

9.2.2 (2025-02-14)

Bug Fixes

• deps: update dependency @​octokit/request-error to v6.1.7 [security] (#740) (4b2f485)

v9.2.1

9.2.1 (2025-02-13)

Bug Fixes

• mitigate ReDos vulnerabilities & lint (#738) (6bb29ba)

v9.2.0

9.2.0 (2025-01-16)

Features

• correctly parse response bodies as JSON where the Content-Type is application/scim+json (#731) (00bf316)

v9.1.4

9.1.4 (2024-12-29)

Bug Fixes

• deps: bump @octokit/types to fix deno compat (#730) (324ffef)

v9.1.3

9.1.3 (2024-07-14)

Bug Fixes

• improve toErrorMessage (#714) (fcc5b25)

v9.1.2

9.1.2 (2024-07-13)

Bug Fixes

• refactor: async await instead of Promise chain (#711) (611b275)

v9.1.1

9.1.1 (2024-04-15)

... (truncated)

Commits

• 4b2f485 fix(deps): update dependency @​octokit/request-error to v6.1.7 [security] (#740)
• 0320a42 chore(deps): update dependency prettier to v3.5.1 (#737)
• 6bb29ba fix: mitigate ReDos vulnerabilities & lint (#738)
• 34ff07e Merge commit from fork
• a0e96b3 chore(deps): update dependency esbuild to ^0.25.0 (#736)
• d27daa7 build(deps-dev): bump vitest and @​vitest/coverage-v8 (#735)
• bc07c8a build(deps): bump vite from 5.4.6 to 6.0.11 (#734)
• 4266a84 build(deps-dev): bump undici from 6.19.2 to 6.21.1 (#733)
• c2d27a2 chore(deps): update vitest monorepo to v3 (major) (#732)
• 00bf316 feat: correctly parse response bodies as JSON where the Content-Type is `appl...
• Additional commits viewable in compare view

Updates @octokit/request-error from 3.0.3 to 6.1.7

Release notes

Sourced from @​octokit/request-error's releases.

v6.1.7

6.1.7 (2025-02-13)

Bug Fixes

• ReDos regex vulnerability, reported by @​DayShift (d558320874a4bc8d356babf1079e6f0056a59b9e)

v6.1.6

6.1.6 (2024-12-29)

Bug Fixes

• deps: bump @octokit/types to fix Deno compat (#483) (e01d470)

v6.1.5

6.1.5 (2024-09-24)

Bug Fixes

• types: add explicit | undefined to optional fields (#462) (43fc3bd)

v6.1.4

6.1.4 (2024-07-11)

Bug Fixes

• improve perf of request error instantiations (#444) (ba04ffa)

v6.1.3

6.1.3 (2024-07-11)

Bug Fixes

• docs: correct title in README (#443) (e24d923)

v6.1.2

6.1.2 (2024-07-10)

Bug Fixes

• ensure statusCode is always an integer (#439) (6eb8634)

v6.1.1

6.1.1 (2024-04-16)

... (truncated)

Commits

• c346f5c fix: linting issues (#494)
• d558320 Merge commit from fork
• 5046116 chore(deps): update dependency esbuild to ^0.25.0 (#491)
• 50513ba build(deps): lock file maintenance (#490)
• bd5e83f build(deps): lock file maintenance (#488)
• d204ea3 build(deps): lock file maintenance (#486)
• ab1585a chore(deps): update vitest monorepo to v3 (major) (#487)
• 03a7e12 build(deps): lock file maintenance (#485)
• cb4feec build(deps): lock file maintenance (#484)
• e01d470 fix(deps): bump @octokit/types to fix Deno compat (#483)
• Additional commits viewable in compare view

Updates webpack from 5.88.2 to 5.98.0

Release notes

Sourced from webpack's releases.

v5.98.0

Fixes

• Avoid the deprecation message #19062 by @​alexander-akait
• Should not escape CSS local ident in JS #19060 by @​JSerFeng
• MF parse range not compatible with Safari #19083 by @​alexander-akait
• Preserve filenameTemplate in new split chunk #19104 by @​henryqdineen
• Use module IDs for final render order #19184 by @​dmichon-msft
• Strip blob: protocol when public path is auto #19199 by @​alexander-akait
• Respect output.charset everywhere #19202 by @​alexander-akait
• Node async WASM loader generation #19210 by @​ashi009
• Correct BuildInfo and BuildMeta type definitions #19200 by @​inottn

Performance Improvements

• Improve FlagDependencyExportsPlugin for large JSON by depth #19058 by @​hai-x
• Optimize assign-depths #19193 by @​dmichon-msft
• Use startsWith for matching instead of converting the string to a regex #19207 by @​inottn

Chores

• Bump nanoid from 3.3.7 to 3.3.8 #19063 by @​dependabot
• Fixed incorrect typecast in DefaultStatsFactoryPlugin #19156 by @​Andarist
• Improved readme.md by adding video links for understanding webpack #19101 by @​Vansh5632
• Typo fix #19205 by @​hai-x
• Adopt the new webpack governance model #18804 by @​ovflowd

Features

• Implement /* webpackIgnore: true */ for require.resolve #19201 by @​alexander-akait

Continuous Integration

• CI fix #19196 by @​alexander-akait

New Contributors

• @​Andarist made their first contribution in webpack/webpack#19156
• @​Vansh5632 made their first contribution in webpack/webpack#19101
• @​ashi009 made their first contribution in webpack/webpack#19210
• @​ovflowd made their first contribution in webpack/webpack#18804

Full Changelog: webpack/webpack@v5.97.1...v5.98.0

v5.97.1

Bug Fixes

• Performance regression
• Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

• Don't crash with filesystem cache and unknown scheme
• Generate a valid code when output.iife is true and output.library.type is umd
• Fixed conflict variable name with concatenate modules and runtime code
• Merge duplicate chunks before

... (truncated)

Commits

• f1bdec5 5.98.0
• 9579f22 chore: adopt the new webpack governance model (#18804)
• a1edb20 fix: node async wasm loader now use output.module to determinate code gener...
• e55b08b perf: use startsWith for matching instead of converting the string to a regex
• 6e14dba chore: fix typo (#19205)
• f123ce5 fix: respect output.charset everywhere (#19202)
• af20c7b fix: strip blob: protocol when public path is auto (#19199)
• 80826c5 feat: implement /* webpackIgnore: true */ for require.resolve (#19201)
• ac6ffca fix(types): correct BuildInfo and BuildMeta type definitions (#19200)
• 8ac130a ci: fix
• Additional commits viewable in compare view

Updates ws from 8.13.0 to 8.18.1

Release notes

Sourced from ws's releases.

8.18.1

Bug fixes

• The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).

8.18.0

Features

• Added support for Blob (#2229).

8.17.1

Bug fixes

• Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
</tr></table>

... (truncated)

Commits

• b92745a [dist] 8.18.1
• b3d9747 [doc] Fix nit
• 021f7b8 [test] Shorten the path lengths
• b9ca55b [pkg] Update eslint-config-prettier to version 10.0.1
• c798dd4 [doc] Fix typo (#2271)
• 6861472 [ci] Test on node 23
• 019f28f [minor] Improve JSDoc-inferred types (#2242)
• bfe1b2a [doc] Remove unnecessary period (#2240)
• f7dc469 [doc] Fix the type of the data argument
• 976c53c [dist] 8.18.0
• Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

• 74b2db2 3.0.3
• 88f1429 update eslint. lint, fix unit tests.
• 415d660 Snyk js braces 6838727 (#40)
• 190510f fix tests, skip 1 test in test/braces.expand
• 716eb9f readme bump
• a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
• 2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
• 9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
• 98414f9 remove funding file
• 665ab5d update keepEscaping doc (#27)
• Additional commits viewable in compare view

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

• update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

• fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

• disable regexp backtracking (#160) (5ff3a07)

Commits

• 77cd97f chore(release): 7.0.6
• 6717de4 chore: upgrade standard-version
• f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
• 9a7e3b2 chore: fix build status badge
• 0852683 chore(release): 7.0.5
• 640d391 fix: fix escaping bug introduced by backtracking
• bff0c87 chore: remove codecov
• a7c6abc chore: replace travis with github workflows
• 9b9246e chore(release): 7.0.4
• 5ff3a07 fix: disable regexp backtracking (#160)
• Additional commits viewable in compare view

Updates nanoid from 3.3.6 to 3.3.9

Release notesDescription has been truncated

[github-actions]

Checking composer.lock changes...