This repository was archived by the owner on May 12, 2025. It is now read-only.
Bump the npm_and_yarn group across 2 directories with 40 updates#1
Open
dependabot[bot] wants to merge 1 commit intomasterfrom
Open
Bump the npm_and_yarn group across 2 directories with 40 updates#1dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
--- updated-dependencies: - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash-es dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fstream dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: stringstream dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tunnel-agent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsdom dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jest dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: https-proxy-agent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar-fs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: bl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dot-prop dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: randomatic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fill-range dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmpl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash-es dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fstream dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: request dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jest dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: stringstream dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: watchpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: randomatic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fill-range dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmpl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
|
Por favor, catalogue-o seguindo as instruções nesta documentação. [Via VPN]. 💁 Qualquer problema ou dúvida, estamos no Slack, basta abrir um ticket no canal #help-foundation-platform. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 27 updates in the / directory:
4.17.44.17.214.17.44.17.212.0.02.1.12.5.02.6.42.2.02.6.91.1.21.2.131.0.101.0.121.3.41.3.80.2.30.4.01.4.01.4.21.3.11.4.26.2.16.2.40.0.50.0.60.4.30.6.03.10.105.1.04.0.104.7.83.9.03.14.19.12.0removed20.0.429.7.03.2.13.2.22.0.02.2.41.1.51.1.91.15.31.16.31.2.11.2.33.10.105.1.04.1.14.2.11.0.51.0.71.1.73.1.12.2.32.2.4Bumps the npm_and_yarn group with 26 updates in the /examples/universal directory:
4.17.44.17.214.17.44.17.212.5.02.6.42.6.82.6.94.15.34.19.21.12.31.15.03.0.43.1.21.1.21.2.131.0.111.0.121.3.41.3.80.2.30.4.01.4.01.4.26.5.06.5.32.81.0removed20.0.429.7.01.1.21.2.135.3.05.7.20.0.50.0.62.0.05.1.21.3.11.7.53.2.13.2.21.1.73.1.12.2.32.2.44.2.121.1.12.7.05.91.01.11.05.3.40.7.130.7.37Updates
lodashfrom 4.17.4 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
lodash-esfrom 4.17.4 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash-es since your current version.
Updates
ansi-regexfrom 2.0.0 to 2.1.1Commits
7c908e72.1.1fcb3c28Support[Pescape (delete character) (#10)e8beaf5Use last XO & AVA versions that supports Node.js 0.10 and 0.12 (#11)dce3806Use AVA instead of mocha (#7)5f2c67aadded question regarding non-standard codes9d51315add XO11423e1added Qix as maintainerc3bb7d1update references to new orgMaintainer changes
This version was pushed to npm by qix, a new releaser for ansi-regex since your current version.
Updates
asyncfrom 2.5.0 to 2.6.4Changelog
Sourced from async's changelog.
Commits
c6bdacaVersion 2.6.48870da9Update built files4df6754update changelog8f7f903Fix prototype pollution vulnerability (#1828)f1d8383Version 2.6.32b674c1update changelogeab740ffix: udpate lodash. closes #1675eaf32beVersion 2.6.2684b42eUpdate built filese1bd3daupdate changelogMaintainer changes
This version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates
debugfrom 2.2.0 to 2.6.9Release notes
Sourced from debug's releases.
... (truncated)
Changelog
Sourced from debug's changelog.
... (truncated)
Commits
13abeaeRelease 2.6.9f53962eremove ReDoS regexp in %o formatter (#504)52e1f21Release 2.6.82482e08Check for undefined on browser globals (#462)6bb07f7release 2.6.715850cbFix Regular Expression Denial of Service (ReDoS)4a6c85cupdate "debug" to v1.0.0 (#454)b68dbf8Fix typo (#455)1351d2fInline extend function in node implementation (#452)c211947update version for componentUpdates
fseventsfrom 1.1.2 to 1.2.13Release notes
Sourced from fsevents's releases.
Commits
844a05dVersion Bumpf393f2aOnly build fsevents on macOS (#322)6a281a7[publish binary]acc2bce[publish binary]f532b6e[publish binary]4c6a1c0Add node 13 to travis matrix.92e40aaRelease 1.2.12.909af26Release v1.2.117074adbRelease v1.2.100a052f6Node.js v12 support for v1.x (#274)Updates
fstreamfrom 1.0.10 to 1.0.12Commits
42354591.0.126a77d2fClobber a Link if it's in the way of a File1e4527f1.0.11ac4a9e3Move props.path check below class init (#55)24fabdebuild: clean up versionsUpdates
inifrom 1.3.4 to 1.3.8Commits
a2c5da81.3.8af5c6bbDo not use Object.create(null)8b648a1don't test where our devdeps don't even workc74c8af1.3.7024b8b5update deps, add linting032fbafUse Object.create(null) to avoid default object property hazards2da90391.3.6cfea636better git push script, before publish instead of after56d2805do not allow invalid hazardous string as section name738eca5v1.3.5Maintainer changes
This version was pushed to npm by isaacs, a new releaser for ini since your current version.
Updates
json-schemafrom 0.2.3 to 0.4.0Commits
f6f6a3bUse a little more robust method of checking instancesef60987Update versionb62f1daProtect against constructor modification, #84fb427cdLink to json-schema-org repository in addition to site, fixes #5422f1461Don't allow proto property to be used for schema default/coerce, fixes #84c52a27cGet basic test to passb3f42b3Add security policy3b0cec3Update versionc28470fUpdate readme to acknowledge the state of the package7dff9cdMerge pull request #81 from hodovani/patch-1Updates
jsprimfrom 1.4.0 to 1.4.2Changelog
Sourced from jsprim's changelog.
Commits
5c8475fjoyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.xf7d80a9joyent/node-jsprim#21 Update verror depMaintainer changes
This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.
Updates
jsprimfrom 1.3.1 to 1.4.2Changelog
Sourced from jsprim's changelog.
Commits
5c8475fjoyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.xf7d80a9joyent/node-jsprim#21 Update verror depMaintainer changes
This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.
Updates
qsfrom 6.2.1 to 6.2.4Changelog
Sourced from qs's changelog.
Commits
90d9f2bv6.2.4ba24e74[Fix]parse: ignore__proto__keys (#428)f047c9d[Dev Deps] backport from main5f8e28b[actions] backport actions from main2c38654[Robustness]stringify: avoid relying on a globalundefined(#427)37e176d[meta] fix README.md (#399)081a3ab[Tests] usesafer-bufferinstead ofBufferconstructor943e411[meta] Clean up license text so it’s properly detected as BSD-3-Clause0d82916[Fix]utils.merge: avoid a crash with a null target and an array sourcec103b90[Fix]utils.merge`: avoid a crash with a null target and a truthy non-array...Updates
stringstreamfrom 0.0.5 to 0.0.6Commits
fee31c50.0.62f4a9d4Merge pull request #9 from mhart/fix-buffer-constructor-vulnafbc744Ensure data is not a number in Buffer constructorUpdates
tunnel-agentfrom 0.4.3 to 0.6.0Commits
67df6430.6.09ca95ecUse .from8a7c86e0.5.15fe62210.5.05bbaf62Merge pull request #25 from request/safe-buffercdc47b9Migrating to safe-buffer for security reasons.Updates
npmfrom 3.10.10 to 5.1.0Release notes
Sourced from npm's releases.
... (truncated)
Changelog
Sourced from npm's changelog.
... (truncated)
Commits
24ec9f25.1.08cefdc3update AUTHORSdb0a2f8doc: update changelog for npm@5.1.020ff05fremove: Make file: spec/link removal match specification993f673config: remove old comment (#17600)a09c1a6run-script: allow custom shell (#16687)7d65004config: refactor to use Object.assign (#17563)9e5a943install/deps: Compute required package in legacy npm compatible way (#17590)06ba0a1install: fix spurious removal reporting (#17591)3fc6477validate-args: Check for name and version (#17592)Updates
handlebarsfrom 4.0.10 to 4.7.8Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
... (truncated)
Commits
8dc3d25v4.7.8668c4fbFix browser tests in CI pipelinec65c6ccTest on Node 183d3796cMake library compatible with workers075b354Fix sync issue with npm lock-file30dbf04Fix compiling of each block params in strict modee3a5448Fix bundler issue with webpack 58e23642Fix integration-tests issue with npm >= 788ac068use https instead of git for mustache submodulec68bc08Fix typoMaintainer changes
This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.
Updates
js-yamlfrom 3.9.0 to 3.14.1Changelog
Sourced from js-yaml's changelog.