chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates #4

dependabot · 2024-06-30T17:00:42Z

Bumps the npm_and_yarn group with 18 updates in the / directory:

Package	From	To
express	`4.18.2`	`4.19.2`
node-fetch	`2.7.0`	`3.3.2`
ws	`7.5.9`	`7.5.10`
semver	`5.7.0`	`5.7.2`
@commitlint/cli	`9.1.2`	`19.3.0`
nodemon	`2.0.22`	`2.0.22`
@babel/traverse	`7.22.17`	`7.24.7`
ajv	`5.5.2`	`6.12.6`
redoc-cli	`0.9.13`	`0.13.21`
braces	`3.0.2`	`3.0.3`
gulp	`4.0.2`	`5.0.0`
jest	`26.6.3`	`29.7.0`
browserify-sign	`4.2.1`	`4.2.3`
follow-redirects	`1.15.2`	`1.15.6`
ini	`1.3.5`	`1.3.8`
minimatch	`3.0.4`	`3.1.2`
minimist	`1.2.0`	`1.2.8`
mkdirp	`0.5.1`	`1.0.4`

Bumps the npm_and_yarn group with 7 updates in the /client directory:

Package	From	To
ws	`7.5.9`	`7.5.10`
@babel/traverse	`7.22.17`	`7.24.7`
axios	`0.27.2`	`1.6.8`
@openapitools/openapi-generator-cli	`2.7.0`	`2.13.4`
braces	`3.0.2`	`3.0.3`
follow-redirects	`1.15.2`	`1.15.6`
postcss	`8.4.29`	`8.4.39`

Bumps the npm_and_yarn group with 8 updates in the /docs directory:

Package	From	To
express	`4.18.2`	`4.19.2`
@babel/traverse	`7.22.17`	`7.24.7`
ajv	`6.12.6`	`7.0.0`
braces	`3.0.2`	`3.0.3`
gulp	`4.0.2`	`5.0.0`
ibm-openapi-validator	`0.27.1`	`1.19.2`
browserify-sign	`4.2.1`	`4.2.3`
json-schema	`0.2.5`	`0.4.0`

Bumps the npm_and_yarn group with 3 updates in the /stacks-blockchain/dist-tool directory: debug, json-bigint and @google-cloud/storage.

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: [email protected] and [email protected] by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add [email protected] by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: [email protected]

4.18.3 / 2024-02-29

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

deps: [email protected]

Add partitioned option

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: [email protected]
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates node-fetch from 2.7.0 to 3.3.2

Release notes

Sourced from node-fetch's releases.

v3.3.2

3.3.2 (2023-07-25)

Bug Fixes

Remove the default connection close header. (#1736) (8b3320d), closes #1735 #1473

v3.3.1

3.3.1 (2023-03-11)

Bug Fixes

release "Allow URL class object as an argument for fetch()" #1696 (#1716) (7b86e94)

v3.3.0

3.3.0 (2022-11-10)

Features

add static Response.json (#1670) (55a4870)

v3.2.10

3.2.10 (2022-07-31)

Bug Fixes

ReDoS referrer (#1611) (2880238)

v3.2.9

3.2.9 (2022-07-18)

Bug Fixes

Headers: don't forward secure headers on protocol change (#1599) (e87b093)

v3.2.8

3.2.8 (2022-07-12)

Bug Fixes

possibly flaky test (#1523) (11b7033)

... (truncated)

Commits

8b3320d fix: Remove the default connection close header. (#1736)
7b86e94 fix: release "Allow URL class object as an argument for fetch()" #1696 (#1716)
8ced5b9 docs: readme - non ESM example (#1707)
71e376b ci(release): use latest Node LTS (#1697)
e093030 Allow URL class object as an argument for fetch() (#1696)
55a4870 feat: add static Response.json (#1670)
c071406 (1138) - Fixed HTTPResponseError with correct constructor and usage (#1666)
6f72caa docs: fix missing comma in example (#1623)
2880238 fix: ReDoS referrer (#1611)
e87b093 fix(Headers): don't forward secure headers on protocol change (#1599)
Additional commits viewable in compare view

Updates ws from 7.5.9 to 7.5.10

Release notes

Sourced from ws's releases.

7.5.10

Bug fixes

Backported e55e5106 to the 7.x release line (22c28763).

Commits

d962d70 [dist] 7.5.10
22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
See full diff in compare view

Updates semver from 5.7.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
c83c18c 5.7.1
956e228 Correct typo in README
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates @commitlint/cli from 9.1.2 to 19.3.0

Release notes

Sourced from @commitlint/cli's releases.

v19.3.0

19.3.0 (2024-04-23)

Features

feat(format): print full commit message for valid commits if -V by @weixinwu in conventional-changelog/commitlint#4026

feat(container): added @commitlint/config-nx-scopes for nx monorepos by @gperdomor in conventional-changelog/commitlint#3913

Chore

docs: 📝 add pnpm to the getting started and local setup guides by @VoloshchenkoAl in conventional-changelog/commitlint#4041

New Contributors

@weixinwu made their first contribution in conventional-changelog/commitlint#4026

@fuyangpengqi made their first contribution in conventional-changelog/commitlint#4035

@gperdomor made their first contribution in conventional-changelog/commitlint#3913

@VoloshchenkoAl made their first contribution in conventional-changelog/commitlint#4041

Full Changelog: conventional-changelog/commitlint@v19.2.2...v19.3.0

v19.2.2

19.2.2 (2024-04-14)

Bug Fixes

fix(is-ignored): ignore "amend!" commits by @chalkygames123 in conventional-changelog/commitlint#4024

Chore

Update circleci ci-setup.md by @HennaAbbas in conventional-changelog/commitlint#3989

New Contributors

@HennaAbbas made their first contribution in conventional-changelog/commitlint#3989

Full Changelog: conventional-changelog/commitlint@v19.2.1...v19.2.2

v19.2.1

19.2.1 (2024-03-19)

Bug Fixes

fix(config-nx-scopes): include file extension in nx imports by @timonmasberg in conventional-changelog/commitlint#3979

Fix regression when using --last flag by @webwarrior-ws in conventional-changelog/commitlint#3982

New Contributors

@timonmasberg made their first contribution in conventional-changelog/commitlint#3979

@webwarrior-ws made their first contribution in conventional-changelog/commitlint#3982

... (truncated)

Changelog

Sourced from @commitlint/cli's changelog.

19.3.0 (2024-04-23)

Note: Version bump only for package @commitlint/cli

19.2.2 (2024-04-14)

Note: Version bump only for package @commitlint/cli

19.2.1 (2024-03-19)

Note: Version bump only for package @commitlint/cli

19.2.0 (2024-03-15)

Features

cli: introduce new --last flag, to stop recommending HEAD~1 (#3916) (99f4f3f)

19.1.0 (2024-03-12)

Note: Version bump only for package @commitlint/cli

19.0.3 (2024-02-28)

Note: Version bump only for package @commitlint/cli

... (truncated)

Commits

447fd3b v19.3.0
66dd3a5 v19.2.2
172cb52 v19.2.1
f91d539 Fix regression when using --last flag (#3982)
a64b417 v19.2.0
99f4f3f feat(cli): introduce new --last flag, to stop recommending HEAD~1 (#3916)
8d7a3d5 v19.1.0
9b4ac34 v19.0.3
e538924 v19.0.2
9351b8e v19.0.1
Additional commits viewable in compare view

Updates nodemon from 2.0.22 to 2.0.22

Commits

See full diff in compare view

Updates @babel/traverse from 7.22.17 to 7.24.7

Release notes

Sourced from @babel/traverse's releases.

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

Committers: 7

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Blake Wilson (@blakewilson)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

@liuxingbaoyu

v7.24.6 (2024-05-24)

Thanks @amjed-98, @blakewilson, @coelhucas, and @SukkaW for your first PRs!

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

#16476 fix: Correctly parse cls.fn<C> = x (@liuxingbaoyu)

🏠 Internal

babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16501 Generate helper metadata at build time (@nicolo-ribaudo)

babel-helpers

#16499 Add tsconfig.json for @babel/helpers/src/helpers (@nicolo-ribaudo)

babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16495 Move all runtime helpers to individual files (@nicolo-ribaudo)

babel-parser, babel-traverse

#16482 Statically generate boilerplate for bitfield accessors (@nicolo-ribaudo)

Other

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

#16476 fix: Correctly parse cls.fn<C> = x (@liuxingbaoyu)

🏠 Internal

babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16501 Generate helper metadata at build time (@nicolo-ribaudo)

babel-helpers

#16499 Add tsconfig.json for @babel/helpers/src/helpers (@nicolo-ribaudo)

babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16495 Move all runtime helpers to individual files (@nicolo-ribaudo)

babel-parser, babel-traverse

#16482 Statically generate boilerplate for bitfield accessors (@nicolo-ribaudo)

Other

#16466 Migrate import assertions syntax (@JLHwung)

v7.24.5 (2024-04-29)

🐛 Bug Fix

babel-plugin-transform-classes, babel-traverse

#16377 fix: TypeScript annotation affects output (@liuxingbaoyu)

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16440 Fix suppressed error order (@sossost)

#16408 Await nullish async disposable (@JLHwung)

💅 Polish

babel-parser

... (truncated)

Commits

bf1e9a3 v7.24.7
4463aa5 fix: incorrect constantViolations with destructuring (#16522)
07bd000 Improve getBindingIdentifiers (#16544)
17a5502 [Babel 8] Remove extra.shorthand (#16521)
7934963 Use type: module in all package.jsons (#16535)
9630250 v7.24.6
1f010df Explicitly define NodePath.prototype.* (#16488)
6e3539b [babel 8] Publish .d.ts files for every package (#16416)
e37e64d Use eslint v9 (#16479)
3ff20b9 Statically generate boilerplate for bitfield accessors (#16482)
Additional commits viewable in compare view

Updates ajv from 5.5.2 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates redoc-cli from 0.9.13 to 0.13.21

Commits

See full diff in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates gulp from 4.0.2 to 5.0.0

Release notes

Sourced from gulp's releases.

gulp v5.0.0

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

Drop support for Node.js <10.13

Default stream encoding to UTF-8

Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!

Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream

All globs and paths are normalized to unix-like filepaths

Only allow JS variants for .gulp.* config files

Removed support for alpha releases of v4 from gulp-cli

Removed the --verify flag

Renamed the --require flag to --preload to avoid conflicting with Node.js flags

Removed many legacy and deprecated loaders

Upgrade to chokidar v3

Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data

Stop using process.umask() to make directories, instead falling back to Node's default mode

Throw on non-function, non-string option coercers

Drop support of Node.js snake_case flags

Use a Symbol for attaching the gulplog namespace to the store

Use a Symbol for attaching the gulplog store to the global

Use sha256 to hash the v8flags cache into a filename

Features

Streamlined the dependency tree

Switch all streams implementation to Streamx

Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation

Implement translation support for all CLI messages and all messages passing through gulplog

Allow users to customize or remove the timestamp from their logs

Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5

Added support for gulpile.cjs and gulpfile.mjs

Add support for swc, esbuild, sucrase, and mdx loaders

Provide an ESM export (#2760) (b00de68)

Support sourcemap handling on streaming Vinyl contents

Support extends syntax for .gulp.* config file

Allow overriding gulpfile and preloads via .gulp.* config file

Bug Fixes

Resolve bugs related to symlinks on various platforms

Resolved some reported ReDoS CVEs and improved performance in glob-parent

Rework errors surfaced when encountering files or symlinks when trying to create directories

Ensure watch allows japanese characters in globs (72668c6)

... (truncated)

Changelog

Sourced from gulp's changelog.

5.0.0 (2024-03-29)

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

Drop support for Node.js <10.13

Default stream encoding to UTF-8

Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!

Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream

All globs and paths are normalized to unix-like filepaths

Only allow JS variants for .gulp.* config files

Removed support for alpha releases of v4 from gulp-cli

Removed the --verify flag

Renamed the --require flag to --preload to avoid conflicting with Node.js flags

Removed many legacy and deprecated loaders

Upgrade to chokidar v3

Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data

Stop using process.umask() to make directories, instead falling back to Node's default mode

Throw on non-function, non-string option coercers

Drop support of Node.js snake_case flags

Use a Symbol for attaching the gulplog namespace to the store

Use a Symbol for attaching the gulplog store to the global

Use sha256 to hash the v8flags cache into a filename

Features

Streamlined the dependency tree

Switch all streams implementation to Streamx

Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation

Implement translation support for all CLI messages and all messages passing through gulplog

Allow users to customize or remove the timestamp from their logs

Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5

Added support for gulpile.cjs and gulpfile.mjs

Add support for swc, esbuild, sucrase, and mdx loaders

Provide an ESM export (#2760) (b00de68)

Support sourcemap handling on streaming Vinyl contents

Support extends syntax for .gulp.* config file

Allow overriding gulpfile and preloads via .gulp.* config file

Bug Fixes

Resolve bugs related to symlinks on various platforms

Resolved some reported ReDoS CVEs and improved performance in glob-parent

Rework errors surfaced when encountering files or symlinks when trying to create directories

Ensure watch allows japanese characters in globs (72668c6)

... (truncated)

Commits

5c4c547 chore: Release 5.0.0 (#2762)
bf72116 chore: Add index.mjs to files list
b00de68 feat: Provide an ESM export (#2760)
72668c6 chore!: Normalize repository, dropping node <10.13 support (#2758)
85896d4 chore(docs): Update stream handbook link (#2711)
818bd73 Docs: Remove gulp-sourcemaps because it is built-in (#2592)
598f971 Docs: Fix broken link in recipe (#2571)
9877de0 Docs: Guide CustomRegistries to maintain properties on tasks (fixes #2561) (#...
f91c388 Docs: Remove typo in custom registry docs (#2543)
df25250 Docs: Fix typo in task docs (#2524)
Additional commits viewable in compare view

Updates jest from 26.6.3 to 29.7.0

Details

Description has been truncated

… updates Bumps the npm_and_yarn group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.7.0` | `3.3.2` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | | [semver](https://github.com/npm/node-semver) | `5.7.0` | `5.7.2` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `9.1.2` | `19.3.0` | | [nodemon](https://github.com/remy/nodemon) | `2.0.22` | `2.0.22` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.17` | `7.24.7` | | [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `6.12.6` | | [redoc-cli](https://github.com/Redocly/redoc) | `0.9.13` | `0.13.21` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [gulp](https://github.com/gulpjs/gulp) | `4.0.2` | `5.0.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `26.6.3` | `29.7.0` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.2` | `1.15.6` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `1.0.4` | Bumps the npm_and_yarn group with 7 updates in the /client directory: | Package | From | To | | --- | --- | --- | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.17` | `7.24.7` | | [axios](https://github.com/axios/axios) | `0.27.2` | `1.6.8` | | [@openapitools/openapi-generator-cli](https://github.com/OpenAPITools/openapi-generator-cli) | `2.7.0` | `2.13.4` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.2` | `1.15.6` | | [postcss](https://github.com/postcss/postcss) | `8.4.29` | `8.4.39` | Bumps the npm_and_yarn group with 8 updates in the /docs directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.17` | `7.24.7` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `7.0.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [gulp](https://github.com/gulpjs/gulp) | `4.0.2` | `5.0.0` | | [ibm-openapi-validator](https://github.com/IBM/openapi-validator/tree/HEAD/packages/validator) | `0.27.1` | `1.19.2` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.5` | `0.4.0` | Bumps the npm_and_yarn group with 3 updates in the /stacks-blockchain/dist-tool directory: [debug](https://github.com/debug-js/debug), [json-bigint](https://github.com/sidorares/json-bigint) and [@google-cloud/storage](https://github.com/googleapis/nodejs-storage). Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `node-fetch` from 2.7.0 to 3.3.2 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.7.0...v3.3.2) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `semver` from 5.7.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.0...v5.7.2) Updates `@commitlint/cli` from 9.1.2 to 19.3.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.3.0/@commitlint/cli) Updates `nodemon` from 2.0.22 to 2.0.22 - [Release notes](https://github.com/remy/nodemon/releases) - [Commits](remy/nodemon@v2.0.22...v2.0.22) Updates `@babel/traverse` from 7.22.17 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-traverse) Updates `ajv` from 5.5.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v5.5.2...v6.12.6) Updates `redoc-cli` from 0.9.13 to 0.13.21 - [Release notes](https://github.com/Redocly/redoc/releases) - [Changelog](https://github.com/Redocly/redoc/blob/main/CHANGELOG.md) - [Commits](https://github.com/Redocly/redoc/commits) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `gulp` from 4.0.2 to 5.0.0 - [Release notes](https://github.com/gulpjs/gulp/releases) - [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md) - [Commits](gulpjs/gulp@v4.0.2...v5.0.0) Updates `jest` from 26.6.3 to 29.7.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `dompurify` from 2.4.7 to 2.3.5 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@2.4.7...2.3.5) Updates `follow-redirects` from 1.15.2 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.6) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mkdirp` from 0.5.1 to 1.0.4 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v1.0.4) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `@babel/traverse` from 7.22.17 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-traverse) Updates `axios` from 0.27.2 to 1.6.8 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.27.2...v1.6.8) Updates `@openapitools/openapi-generator-cli` from 2.7.0 to 2.13.4 - [Release notes](https://github.com/OpenAPITools/openapi-generator-cli/releases) - [Changelog](https://github.com/OpenAPITools/openapi-generator-cli/blob/master/.releaserc) - [Commits](OpenAPITools/openapi-generator-cli@v2.7.0...v2.13.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `follow-redirects` from 1.15.2 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.6) Updates `postcss` from 8.4.29 to 8.4.39 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.29...8.4.39) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `@babel/traverse` from 7.22.17 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-traverse) Updates `ajv` from 6.12.6 to 7.0.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v5.5.2...v6.12.6) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `gulp` from 4.0.2 to 5.0.0 - [Release notes](https://github.com/gulpjs/gulp/releases) - [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md) - [Commits](gulpjs/gulp@v4.0.2...v5.0.0) Updates `ibm-openapi-validator` from 0.27.1 to 1.19.2 - [Release notes](https://github.com/IBM/openapi-validator/releases) - [Changelog](https://github.com/IBM/openapi-validator/blob/main/packages/validator/CHANGELOG.md) - [Commits](https://github.com/IBM/openapi-validator/commits/[email protected]/packages/validator) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `json-schema` from 0.2.5 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.5...v0.4.0) Updates `debug` from 4.3.4 to 4.3.5 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.3.5) Updates `json-bigint` from 0.3.1 to 1.0.0 - [Commits](sidorares/json-bigint@v0.3.1...v1.0.0) Updates `@google-cloud/storage` from 4.7.2 to 7.11.2 - [Release notes](https://github.com/googleapis/nodejs-storage/releases) - [Changelog](https://github.com/googleapis/nodejs-storage/blob/main/CHANGELOG.md) - [Commits](googleapis/nodejs-storage@v4.7.2...v7.11.2) --- updated-dependencies: - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@commitlint/cli" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: nodemon dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: redoc-cli dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: gulp dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: jest dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@openapitools/openapi-generator-cli" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: gulp dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ibm-openapi-validator dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-bigint dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@google-cloud/storage" dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 30, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates #4

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates #4

Uh oh!

dependabot bot commented on behalf of github Jun 30, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates #4

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates #4

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 30, 2024

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v3.3.2

3.3.2 (2023-07-25)

Bug Fixes

v3.3.1

3.3.1 (2023-03-11)

Bug Fixes

v3.3.0

3.3.0 (2022-11-10)

Features

v3.2.10

3.2.10 (2022-07-31)

Bug Fixes

v3.2.9

3.2.9 (2022-07-18)

Bug Fixes

v3.2.8

3.2.8 (2022-07-12)

Bug Fixes

7.5.10

Bug fixes

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v19.3.0

19.3.0 (2024-04-23)

Features

Chore

New Contributors

v19.2.2

19.2.2 (2024-04-14)

Bug Fixes

Chore

New Contributors

v19.2.1

19.2.1 (2024-03-19)

Bug Fixes

New Contributors

19.3.0 (2024-04-23)

19.2.2 (2024-04-14)

19.2.1 (2024-03-19)

19.2.0 (2024-03-15)

Features

19.1.0 (2024-03-12)

19.0.3 (2024-02-28)

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix