chore(deps): bump the npm_and_yarn group across 4 directories with 16 updates#113
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the npm_and_yarn group across 4 directories with 16 updates#113dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… updates Bumps the npm_and_yarn group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.25.9` | `7.29.7` | | [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `2.0.1` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.15` | | [dompurify](https://github.com/cure53/DOMPurify) | `2.5.8` | `2.5.9` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.0.5` | `3.1.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.9` | `1.16.0` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [immutable](https://github.com/immutable-js/immutable-js) | `4.3.7` | `4.3.8` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `6.11.4` | `6.11.6` | | [socket.io-parser](https://github.com/socketio/socket.io) | `3.3.4` | `3.3.5` | | [undici](https://github.com/nodejs/undici) | `5.28.5` | `5.29.0` | | [velocityjs](https://github.com/shepherdwind/velocity.js) | `2.0.6` | `2.1.6` | | [yaml](https://github.com/eemeli/yaml) | `1.10.2` | `1.10.3` | Bumps the npm_and_yarn group with 1 update in the /dynamic-script directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Bumps the npm_and_yarn group with 1 update in the /evidence-display directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Bumps the npm_and_yarn group with 1 update in the /sdk directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@babel/plugin-transform-modules-systemjs` from 7.25.9 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs) Updates `@tootallnate/once` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/TooTallNate/once/releases) - [Changelog](https://github.com/TooTallNate/once/blob/v2.0.1/CHANGELOG.md) - [Commits](TooTallNate/once@2.0.0...v2.0.1) Updates `brace-expansion` from 1.1.11 to 1.1.15 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.15) Updates `dompurify` from 2.5.8 to 2.5.9 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@2.5.8...2.5.9) Updates `fast-uri` from 3.0.5 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.5...v3.1.2) Updates `follow-redirects` from 1.15.9 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.9...v1.16.0) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `immutable` from 4.3.7 to 4.3.8 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.3.7...v4.3.8) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `protobufjs` from 6.11.4 to 6.11.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@v6.11.4...v6.11.6) Updates `socket.io-parser` from 3.3.4 to 3.3.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/socket.io-parser@3.3.5/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/commits/socket.io-parser@3.3.5) Updates `undici` from 5.28.5 to 5.29.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.5...v5.29.0) Updates `velocityjs` from 2.0.6 to 2.1.6 - [Changelog](https://github.com/shepherdwind/velocity.js/blob/master/History.md) - [Commits](shepherdwind/velocity.js@v2.0.6...v2.1.6) Updates `yaml` from 1.10.2 to 1.10.3 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v1.10.2...v1.10.3) Updates `vite` from 5.4.21 to 8.0.16 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite) Updates `vite` from 5.4.21 to 8.0.16 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite) Updates `vitest` from 1.6.1 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@tootallnate/once" dependency-version: 2.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.15 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 2.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 4.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 6.11.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-version: 3.3.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: velocityjs dependency-version: 2.1.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yaml dependency-version: 1.10.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 8.0.16 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 8.0.16 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 14 updates in the / directory:
7.25.97.29.72.0.02.0.11.1.111.1.152.5.82.5.93.0.53.1.21.15.91.16.04.7.84.7.94.3.74.3.82.3.12.3.26.11.46.11.63.3.43.3.55.28.55.29.02.0.62.1.61.10.21.10.3Bumps the npm_and_yarn group with 1 update in the /dynamic-script directory: vite.
Bumps the npm_and_yarn group with 1 update in the /evidence-display directory: vite.
Bumps the npm_and_yarn group with 1 update in the /sdk directory: vitest.
Updates
@babel/plugin-transform-modules-systemjsfrom 7.25.9 to 7.29.7Release notes
Sourced from @babel/plugin-transform-modules-systemjs's releases.
... (truncated)
Commits
4fba754v7.29.7a458f66v7.29.432ebd5a[7.x backport]fix(systemjs): improve module string name support (#17974)aa8394ev7.29.00053db6Update polyfill packages (#17727)61647aev7.28.5a177d55[Babel 8] Uset.traverseFastto replace somepath.traverse(#17518)eebd3a0v7.27.1317e332Enforce node protocol import (#17207)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/plugin-transform-modules-systemjssince your current version.Updates
@tootallnate/oncefrom 2.0.0 to 2.0.1Release notes
Sourced from @tootallnate/once's releases.
Changelog
Sourced from @tootallnate/once's changelog.
Commits
bcbb21dci: fix OIDC publishing — Node 24, npm latest, provenancedc24387Version Packages (2.x) (#12)b8a6f80CI: test all Node versions on Linux onlydabcc0fci: drop EOL Node.js 14.x/16.x, add 22.xb464efcUpdate CI: modern Node versions, fix macOS ARM64 compata1e5e2dFix promise hang when AbortSignal is abortedMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tootallnate/oncesince your current version.Updates
brace-expansionfrom 1.1.11 to 1.1.15Release notes
Sourced from brace-expansion's releases.
Commits
2203f4f1.1.150b09384Backport v5.0.6 change to v1 (#111)10c05fc1.1.141afa1b2Add opt-in { max } mitigation to v1 legacy line (#103)2fbb6a2Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)0d7652eBackport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)6c353ca1.1.137fd684fBackport fix for GHSA-f886-m6hf-6m8v (#95)44f33b41.1.12c460dbdpkg: publish on tag 1.xUpdates
dompurifyfrom 2.5.8 to 2.5.9Release notes
Sourced from dompurify's releases.
Commits
0951ca4chore: Updated minor version on demo website1049002Getting 2.x branch ready for 2.5.9 releaseca136faMerge branch '2.x' of github.com:cure53/DOMPurify into 2.xd59bfe7fix: Added fixes for the jsdom parser issue in 2.xd13358dUpdate README.md25b59f6Update README.mdd5a8731Update README.md58a799fUpdate README.md184e548Update README.mdcfce1ddUpdate README.mdUpdates
fast-urifrom 3.0.5 to 3.1.2Release notes
Sourced from fast-uri's releases.
... (truncated)
Commits
919dd8eBumped v3.1.2c65ba57fixup: linting6c86c17Merge commit from forka95158aHandle malformed fragment decoding without throwing (#171)cea547cBumped v3.1.1876ce79Merge commit from forkdcdf690ci: add lock-threads workflow (#169)c860e65build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)9b4c6dcbuild(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)85d09a9build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...Updates
follow-redirectsfrom 1.15.9 to 1.16.0Commits
0c23a22Release version 1.16.0 of the npm package.844c4d3Add sensitiveHeaders option.5e8b8d0ci: add Node.js 24.x to the CI matrix7953e22ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v686dc1f8Sanitizing input.21ef28aRelease version 1.15.11 of the npm package.7c88135Roll back tree shaking.6e389baRelease version 1.15.10 of the npm package.5bc496eShake me up before you go-go.694d6b4Bump minimist from 1.2.5 to 1.2.8Updates
handlebarsfrom 4.7.8 to 4.7.9Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
Commits
dce542cv4.7.98a41389Update release notes68d8df5Fix security issuesb2a0831Fix browser tests9f98c16Fix release script45443b4Revert "Improve partial indenting performance"8841a5fFix CI errors with lintinge0137c2fix: enable shell mode for spawn to resolve Windows EINVAL issuee914d60Improve rendering performance7de4b41Upgrade GitHub Actions checkout and setup-node on 4.x branchUpdates
immutablefrom 4.3.7 to 4.3.8Release notes
Sourced from immutable's releases.
Changelog
Sourced from immutable's changelog.
... (truncated)
Commits
485cbe04.3.86ed4eb6Merge commit from fork94bcd3cfix new proto key injectionfaeb58bfix Prototype Pollution in mergeDeep, toJS, etc.Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for immutable since your current version.
Updates
picomatchfrom 2.3.1 to 2.3.2Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
... (truncated)
Commits
81cba8dPublish 2.3.2fc1f6b6Merge commit from forkeec17aeMerge commit from fork78f8ca4Merge pull request #156 from micromatch/backport-1443f4f10eMerge pull request #144 from Jason3S/jdent-object-propertiesUpdates
protobufjsfrom 6.11.4 to 6.11.6Commits
869caf6chore: rebuild and release 6.11.6086916bfix: filter invalid characters from the type name (#2127) (#2221)70544eefix: rebuild and release 6.11.5Maintainer changes
This version was pushed to npm by fenster, a new releaser for protobufjs since your current version.
Updates
socket.io-parserfrom 3.3.4 to 3.3.5Release notes
Sourced from socket.io-parser's releases.
Changelog
Sourced from socket.io-parser's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for socket.io-parser since your current version.
Updates
undicifrom 5.28.5 to 5.29.0Release notes
Sourced from undici's releases.
Commits
9528f68Bumped v5.29.0f1d75a4increase timeout for redirect test2d31ed6remove fuzzing tests6b36d49fix redirect test in Node v16648dd8fmore fix for the wpt runner on Windowsa0516badon't use internal header state for cookies (#3295)87ce4affix test/client for node 20c2c8fd5fix: accept v20 SSL specific error for alpn selection in http/282200bd[v6.x] fix wpts on windows (#4093)47546fatest: fix windows wpt (#4050)Updates
velocityjsfrom 2.0.6 to 2.1.6Changelog
Sourced from velocityjs's changelog.
... (truncated)
Commits
b6c39bfchore(deps): update flattedfdd33aechore: update history.md55afa89Merge pull request #188 from shepherdwind/fix/set-prototype-pollution-safe-paths221d197docs: explain set path prototype guards6c7e6f0fix: preserve set assignments after rhs side effectsb9a030dfix: guard set paths against prototype pollution1ec0192Merge pull request #187 from shepherdwind/dependabot/npm_and_yarn/postcss-8.5.143492408chore(deps): bump postcss from 8.5.3 to 8.5.1455b5c8cMerge pull request #182 from shepherdwind/dependabot/npm_and_yarn/picomatch-2...384f594Merge pull request #183 from shepherdwind/dependabot/npm_and_yarn/handlebars-...Updates
yamlfrom 1.10.2 to 1.10.3Commits
cfe8f041.10.37abcf45fix: Catch stack overflow during CST compositiona0252f8chore: Add rules avoiding processing of tests/json-test-suitea5e83b0style: Apply updates Prettier rulesb8ddca0chore: Refresh lockfile395f892ci: Use a different (working) submodule checkout6fd2720test-events: Add {} and [] indicators to flow maps & sequencesUpdates
vitefrom 5.4.21 to 8.0.16Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.