Skip to content

chore(deps): bump jsonpath-plus and serverless-offline - #356

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c2ec5c5052
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c2ec5c5052

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 25, 2024 •

Copy link
Copy Markdown

Bumps jsonpath-plus to 10.4.0 and updates ancestor dependency serverless-offline. These dependencies need to be updated together.

Updates jsonpath-plus from 8.1.0 to 10.4.0

Release notes

Sourced from jsonpath-plus's releases.

v10.4.0

What's Changed

New Contributors

Full Changelog: JSONPath-Plus/JSONPath@v10.3.0...v10.4.0

v10.3.0

What's Changed

Full Changelog: JSONPath-Plus/JSONPath@v10.2.0...v10.3.0

Changelog

Sourced from jsonpath-plus's changelog.

10.4.0

10.3.0

  • fix(eval): rce using non-string prop names (#237)
  • feat(demo): make demo link shareable (#238)
  • chore: update deps. and devDeps.

10.2.0

  • fix(eval): improve security of safe-eval (#233)
  • chore: update deps. and devDeps.

10.1.0

  • feat: add typeof operator to safe script

10.0.7

  • fix(security): prevent constructor access
  • docs: add security policy file

10.0.6

  • fix(security): prevent call/apply invocation of Function

10.0.5

  • fix: remove overly aggressive disabling of native functions but disallow __proto__

10.0.4

  • fix(security): further prevent binding of Function calls which may evade detection

10.0.3

  • fix(security): prevent binding of Function calls which may evade detection

10.0.2

  • fix(security): prevent Function calls outside of member expressions

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.


Updates serverless-offline from 13.3.3 to 13.10.1

Release notes

Sourced from serverless-offline's releases.

v13.10.0

What's Changed

New Contributors

Full Changelog: dherault/serverless-offline@v13.9.0...v13.10.0

v13.9.0

Features

  • add support for nodejs22.x runtime to v13 (#1838) (3f2056a)

Bug Fixes

  • update v13 to close jsonpath vulnerability (#1841) (57a08ea)

New Contributors

Full Changelog: dherault/serverless-offline@v13.8.3...v13.9.0

v13.8.3

Maintenance Updates

  • Removed sponsor logging

Full Changelog: dherault/serverless-offline@v13.8.2...v13.8.3

v13.6.0

Features

Bug Fixes

v13.5.1

Bug Fixes

Maintenance Improvements

... (truncated)

Changelog

Sourced from serverless-offline's changelog.

Changelog

All notable changes to this project will be documented in this file. Dates are displayed in UTC.

v14.8.2

v14.8.1

4 September 2026

v14.8.0

7 August 2026

v14.7.4

23 June 2026

v14.7.3

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from r4mmer as a code owner November 25, 2024 18:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 25, 2024
@luislhl

luislhl commented May 13, 2025

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-c2ec5c5052 branch from 7498c5c to b98ef7a Compare May 13, 2025 21:41
@luislhl

luislhl commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [jsonpath-plus](https://github.com/s3u/JSONPath) to 10.4.0 and updates ancestor dependency [serverless-offline](https://github.com/dherault/serverless-offline). These dependencies need to be updated together.


Updates `jsonpath-plus` from 8.1.0 to 10.4.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](https://github.com/s3u/JSONPath/commits/v10.4.0)

Updates `serverless-offline` from 13.3.3 to 13.10.1
- [Release notes](https://github.com/dherault/serverless-offline/releases)
- [Changelog](https://github.com/dherault/serverless-offline/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dherault/serverless-offline/commits)

---
updated-dependencies:
- dependency-name: jsonpath-plus
  dependency-version: 10.2.0
  dependency-type: indirect
- dependency-name: serverless-offline
  dependency-version: 13.8.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-c2ec5c5052 branch from b98ef7a to a5f8e44 Compare October 6, 2026 19:36
@coderabbitai

coderabbitai Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b725c8a3-8073-4791-b6f3-d34e4f7cfc3f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant