Bump the npm-security group across 1 directory with 26 updates - #14
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm-security group with 2 updates in the / directory: [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) and [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component). Updates `@babel/core` from 7.4.3 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `semver` from 5.5.0 to 6.3.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v5.5.0...v6.3.1) Updates `@babel/runtime` from 7.9.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-runtime) Updates `ansi-html` from 0.0.7 to 0.0.9 - [Commits](https://github.com/Tjatse/ansi-html/commits) Updates `qs` from 6.5.5 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.5...v6.15.3) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `browserslist` from 4.7.0 to 4.28.9 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.7.0...4.28.9) Updates `cross-spawn` from 6.0.5 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v7.0.6) Updates `decode-uri-component` from 0.2.2 to 0.5.0 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.2...v0.5.0) Updates `flatted` from 2.0.2 to 3.4.4 - [Commits](WebReflection/flatted@v2.0.2...v3.4.4) Updates `form-data` from 2.3.3 to 3.0.5 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](https://github.com/form-data/form-data/commits/v3.0.5) Updates `http-proxy-middleware` from 0.19.2 to 2.0.10 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.10/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v0.19.2...v2.0.10) Updates `loader-utils` from 1.2.3 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.4) Updates `micromatch` from 3.1.10 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@3.1.10...4.0.8) Updates `minimatch` from 3.0.4 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.5) Updates `node-forge` from 0.10.0 to 1.4.0 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.4.0) Updates `react-dev-utils` from 9.1.0 to 12.0.1 - [Release notes](https://github.com/facebook/create-react-app/releases) - [Changelog](https://github.com/react/create-react-app/blob/main/CHANGELOG-1.x.md) - [Commits](https://github.com/facebook/create-react-app/commits/react-dev-utils@12.0.1/packages/react-dev-utils) Updates `serialize-javascript` from 1.9.1 to 4.0.0 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v1.9.1...v4.0.0) Updates `shell-quote` from 1.7.2 to 1.10.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.7.2...v1.10.0) Updates `sockjs` from 0.3.19 to 0.3.24 - [Release notes](https://github.com/sockjs/sockjs-node/releases) - [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog) - [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24) Updates `terser` from 3.17.0 to 5.51.2 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v3.17.0...v5.51.2) Updates `tough-cookie` from 2.5.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v4.1.4) Updates `uuid` from 3.4.0 to 8.3.2 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v3.4.0...v8.3.2) Updates `webpack-dev-middleware` from 3.7.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.3...v5.3.4) Updates `webpack-dev-server` from 3.2.1 to 4.15.2 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/v4.15.2/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.2.1...v4.15.2) Updates `yargs-parser` from 10.1.0 to 20.2.9 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v10.1.0...yargs-parser-v20.2.9) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm-security - dependency-name: semver dependency-version: 6.3.1 dependency-type: indirect dependency-group: npm-security - dependency-name: "@babel/runtime" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm-security - dependency-name: ansi-html dependency-version: 0.0.9 dependency-type: indirect dependency-group: npm-security - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm-security - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm-security - dependency-name: browserslist dependency-version: 4.28.9 dependency-type: indirect dependency-group: npm-security - dependency-name: cross-spawn dependency-version: 7.0.6 dependency-type: indirect dependency-group: npm-security - dependency-name: decode-uri-component dependency-version: 0.5.0 dependency-type: indirect dependency-group: npm-security - dependency-name: flatted dependency-version: 3.4.4 dependency-type: indirect dependency-group: npm-security - dependency-name: form-data dependency-version: 3.0.5 dependency-type: indirect dependency-group: npm-security - dependency-name: http-proxy-middleware dependency-version: 2.0.10 dependency-type: indirect dependency-group: npm-security - dependency-name: loader-utils dependency-version: 2.0.4 dependency-type: indirect dependency-group: npm-security - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm-security - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm-security - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect dependency-group: npm-security - dependency-name: react-dev-utils dependency-version: 12.0.1 dependency-type: indirect dependency-group: npm-security - dependency-name: serialize-javascript dependency-version: 4.0.0 dependency-type: indirect dependency-group: npm-security - dependency-name: shell-quote dependency-version: 1.10.0 dependency-type: indirect dependency-group: npm-security - dependency-name: sockjs dependency-version: 0.3.24 dependency-type: indirect dependency-group: npm-security - dependency-name: terser dependency-version: 5.51.2 dependency-type: indirect dependency-group: npm-security - dependency-name: tough-cookie dependency-version: 4.1.4 dependency-type: indirect dependency-group: npm-security - dependency-name: uuid dependency-version: 8.3.2 dependency-type: indirect dependency-group: npm-security - dependency-name: webpack-dev-middleware dependency-version: 5.3.4 dependency-type: indirect dependency-group: npm-security - dependency-name: webpack-dev-server dependency-version: 4.15.2 dependency-type: indirect dependency-group: npm-security - dependency-name: yargs-parser dependency-version: 20.2.9 dependency-type: indirect dependency-group: npm-security ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-security group with 2 updates in the / directory: @babel/core and decode-uri-component.
Updates
@babel/corefrom 7.4.3 to 7.29.7Release notes
Sourced from @babel/core's releases.
... (truncated)
Commits
4fba754v7.29.704ea6b2v7.29.699f498a[7.x packport]Improve input source map handling (#18001)feba0a3Preserve original identifier names from input sourcemaps (#17992) (#17998)aa8394ev7.29.0ad0d03f[7.x backport] feat: Allow specifying startLine in code frame (#17739)d7f4008v7.28.6e130225Polish(standalone): improve message on invalid preset/plugin (#17606)99dcba5chore: enable some ts-eslint rules (#17592)c92c491Improve Unicode handling in code-frame tokenizer (#17589)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/coresince your current version.Updates
semverfrom 5.5.0 to 6.3.1Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
44d27bcchore: release 6.3.1928e56dfix: better handling of whitespace (#591)39f6326chore:@npmcli/template-oss@4.16.00eeceec6.3.02779d96Expose the token enum on the exports9f5f615changelogce6190e6.2.024af461Add test coverage for bin file388ec1cAddrtloption to coerce from right to leftd062593coerce(number) will coerce to a stringMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
@babel/runtimefrom 7.9.0 to 7.29.7Release notes
Sourced from @babel/runtime's releases.
... (truncated)
Commits
4fba754v7.29.737d5595v7.29.2d7f4008v7.28.635055e3v7.28.4ef155f5v7.28.3cac0ff4v7.28.2f68ac51chore: Avoid CITGM errors (#17382)baa4cb8v7.27.67d06930v7.27.45b9468dReduceregeneratorsize more (#17287)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/runtimesince your current version.Updates
ansi-htmlfrom 0.0.7 to 0.0.9Commits
Updates
qsfrom 6.5.5 to 6.15.3Changelog
Sourced from qs's changelog.
... (truncated)
Commits
18d085ev6.15.3c38af42[Deps] updateside-channeladce539[Dev Deps] updateeslint,mock-property,tape74a0f6a[Robustness]utils: enforcearrayLimitconsistently acrossmerge's arra...f4938f5[Tests]parse: characterize current lenient handling of unbalanced bracket ...5d5f723[Perf]utils: makecompactO(n) via a side-channel visited-set instead of...52afe00[Robustness]parse: throw thearrayLimiterror before splitting oversized...963e538[Fix]parse: enforcethrowOnLimitExceededfor cumulative array growth via...59da434[Fix]utils: respect encoding of surrogate pairs across chunks9532969[Robustness]utils.merge/utils.assign: avoid invoking__proto__sette...Updates
bracesfrom 2.3.2 to 3.0.3Changelog
Sourced from braces's changelog.
Commits
Updates
browserslistfrom 4.7.0 to 4.28.9Release notes
Sourced from browserslist's releases.
... (truncated)
Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
12ed525Release 4.28.9 versionb1d8cf9Update dependencies21517b6Improveorparsing performancef2f2e6cRelease 4.28.8 versiond0787c8Update dependenciesfcf8fa9Merge pull request #939 from Jaybhade/fix/baseline-kaios-without-downstream57ecd64fix: support "including kaios" without downstream093a0f6Update EM bannerb637868Release 4.28.7 version313f465Update dependenciesMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for browserslist since your current version.
Updates
cross-spawnfrom 6.0.5 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)Updates
decode-uri-componentfrom 0.2.2 to 0.5.0Release notes
Sourced from decode-uri-component's releases.
Commits
a12faba0.5.0fa479daRewrite decoder as single-pass UTF-8 scanner and expand tests38bdbecFix ci and tests89446f9AddsideEffects: falsetopackage.json(#23)00662930.4.1c345b4cAdd TypeScript type definitionsb3710c40.4.0b09e39dRequire Node.js 14 and move to ESM (#11)7268ef60.3.03bbc879Do not decode + to a space - fixes #3Updates
flattedfrom 2.0.2 to 3.4.4Commits
e6f5ca73.4.447f14faremoved E_STRICT from PHP4050568fixced go-lang issues in CI4303f4dMerge pull request #101 from mfinelli/gocriticfixes106735bupdated package-lock.json670a1bd3.4.350a61a9Fix #104 - allownullas replacer value8aa64f4solved crytical errors over dependenciesb85577fFix go-critic errorsbb8c63cMerge pull request #100 from WebReflection/WebReflection-patch-1Updates
form-datafrom 2.3.3 to 3.0.5Changelog
Sourced from form-data's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by ljharb, a new releaser for form-data since your current version.
Install script changes
This version modifies
prepublishscript that runs during installation. Review the package contents before updating.Updates
http-proxy-middlewarefrom 0.19.2 to 2.0.10Release notes
Sourced from http-proxy-middleware's releases.
... (truncated)
Changelog
Sourced from http-proxy-middleware's changelog.
... (truncated)
Commits
f0be839chore(package.json): v2.0.10 (#1271)19c860dci(github-actions): update publish.yml (#1270)d0f7d63fix: harden proxy-table matching to prevent routing bypass (#1268)617a7c9chore(package): v2.0.9 (#1099)d22d587fix(fixRequestBody): check readableLength (#1097)d03d51bchore(package): v2.0.8 (#1094)c50dd06fix(fixRequestBody): handle invalid request (#1091)76a9d8dfix(fixRequestBody): prevent multiple .write() calls (#1090)1e92339ci(github-actions): fix npm tag90afb7cchore(package): v2.0.7Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
loader-utilsfrom 1.2.3 to 2.0.4Release notes
Sourced from loader-utils's releases.