Bump the npm_and_yarn group across 1 directory with 14 updates #154
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [karma](https://github.com/karma-runner/karma) | `6.3.4` | `6.3.16` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.15.4` | `7.24.5` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `5.0.1` | | [axios](https://github.com/axios/axios) | `0.21.4` | `removed` | | [@11ty/eleventy](https://github.com/11ty/eleventy) | `0.12.1` | `2.0.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.4` | `1.15.6` | | [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` | | [nunjucks](https://github.com/mozilla/nunjucks) | `3.2.3` | `3.2.4` | | [taffydb](https://github.com/typicaljoe/taffydb) | `2.6.2` | `removed` | | [jsdoc](https://github.com/jsdoc/jsdoc) | `3.6.7` | `4.0.2` | Updates `karma` from 6.3.4 to 6.3.16 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v6.3.4...v6.3.16) Updates `@babel/traverse` from 7.15.4 to 7.24.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse) Updates `ansi-regex` from 3.0.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v3.0.0...v5.0.1) Removes `axios` Updates `@11ty/eleventy` from 0.12.1 to 2.0.1 - [Release notes](https://github.com/11ty/eleventy/releases) - [Changelog](https://github.com/11ty/eleventy/blob/main/docs/release-instructions.md) - [Commits](11ty/eleventy@v0.12.1...v2.0.1) Updates `qs` from 6.2.3 to 6.7.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.2.3...v6.7.0) Updates `socket.io-parser` from 3.3.2 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@3.3.2...4.2.4) Updates `ejs` from 2.7.4 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v2.7.4...v3.1.10) Updates `follow-redirects` from 1.14.4 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.4...v1.15.6) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `liquidjs` from 6.4.3 to 10.12.0 - [Release notes](https://github.com/harttle/liquidjs/releases) - [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md) - [Commits](harttle/liquidjs@v6.4.3...v10.12.0) Updates `nunjucks` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/mozilla/nunjucks/releases) - [Changelog](https://github.com/mozilla/nunjucks/blob/master/CHANGELOG.md) - [Commits](mozilla/nunjucks@v3.2.3...v3.2.4) Removes `taffydb` Updates `jsdoc` from 3.6.7 to 4.0.2 - [Release notes](https://github.com/jsdoc/jsdoc/releases) - [Changelog](https://github.com/jsdoc/jsdoc/blob/4.0.2/CHANGES.md) - [Commits](jsdoc/jsdoc@3.6.7...4.0.2) --- updated-dependencies: - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@11ty/eleventy" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: liquidjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nunjucks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: taffydb dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsdoc dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@11ty/[email protected], npm/[email protected], npm/[email protected] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
6.3.46.3.167.15.47.24.53.0.05.0.10.21.4removed0.12.12.0.11.14.41.15.62.2.02.2.33.2.33.2.42.6.2removed3.6.74.0.2Updates
karmafrom 6.3.4 to 6.3.16Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
ab4b328chore(release): 6.3.16 [skip ci]ff7edbbfix(security): mitigate the "Open Redirect Vulnerability"c1befa0chore(release): 6.3.15 [skip ci]d9dade2fix(helper): make mkdirIfNotExists helper resilient to concurrent calls653c762ci: prevent duplicate CI tasks on creating a PRc97e562chore(release): 6.3.14 [skip ci]91d5acdfix: remove string template from client code69cfc76fix: warn whensingleRunandautoWatcharefalse839578cfix(security): remove XSS vulnerability inreturnUrlquery paramdb53785chore(release): 6.3.13 [skip ci]Updates
@babel/traversefrom 7.15.4 to 7.24.5Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
ddbea7dv7.24.5e779cadfix: TypeScript annotation affects output (#16377)ee48754Use multiple TypeScript projects (#16430)4d8b2d0MakeNodePath\<T | U>distributive (#16439)a84ec28Enableeqeqeqrule (#16404)822b025v7.24.1fc0d5adUpdate typescript and lint tools (#16351)69e7928Consider well-known and registered symbols as literals (#16342)40110e9Update source map deps (#16327)ce59160v7.24.0Updates
ansi-regexfrom 3.0.0 to 5.0.1Release notes
Sourced from ansi-regex's releases.
Commits
a9babce5.0.14657833fix incorrect formatc3c0b3fFix potential ReDoS (#37)178363bMove to GitHub Actions (#35)0755e66Add@Qix- to funding.yml2b56fb05.0.0f26f7feMeta tweakse77ea17Add TypeScript definition (#32)166a0d5Require Node.js 8f115fcaTidelift tasksRemoves
axiosUpdates
@11ty/eleventyfrom 0.12.1 to 2.0.1Release notes
Sourced from
@11ty/eleventy's releases.... (truncated)
Commits
e71cb94Coveragebbc3fc1v2.0.1347d41bv2.0.1-beta.23203e3aUpdate dependencies716f65av2.0.1-beta.1273bf3bv2.0.1-alpha.3916805ePublish the dependency graph in eleventy.after args67ce615Fixes #275430c7113Custom lodash build, fixes #2877a9323c3Fixes #2790Updates
qsfrom 6.2.3 to 6.7.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
125e103v6.7.07060e79[Tests] up tonodev11.12,v10.15,v8.15,v6.179ec4149[Dev Deps] updateeslint,@ljharb/eslint-config,covert,taped33a369[Tests] temporarily allow coverage to fail3c5725e[Tests] fix Buffer tests to work in node < 4.5 and node < 5.10d3a52ee[Refactor]utils:isBuffer: small tweak; add tests41c42b8[Robustness]stringify: cacheObject.prototype.hasOwnProperty04a9017[Tests] always useString(x)overx.toString()c9720fe[Fix]utils.merge: avoid a crash with a null target and an array source8297462[Refactor]:stringify/utils: cacheArray.isArrayUpdates
socket.io-parserfrom 3.3.2 to 4.2.4Release notes
Sourced from socket.io-parser's releases.
... (truncated)
Changelog
Sourced from socket.io-parser's changelog.
... (truncated)
Commits
164ba2achore(release): 4.2.4b0e6400fix: properly detect plain objectsd9db473fix: ensure reserved events cannot be used as event names6a5a004docs(changelog): include changelog for release 3.4.3b6c824fchore(release): 4.2.3dcc70d9refactor: export typescript declarations for the commonjs build3b78117fix: check the format of the event name0841bd5chore: bump ua-parser-js from 1.0.32 to 1.0.33 (#121)28dd668chore(release): 4.2.222c42e3fix: calling destroy() should clear all internal stateUpdates
ejsfrom 2.7.4 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807dVersion 3.1.109ee26ddMocha TDDe469741Basic pollution protection715e950Merge pull request #756 from Jeffrey-mu/maincabe314Include advanced usage examples29b076cAdded header11503c7Merge branch 'main' of github.com:mde/ejs into main7690404Added security banner to READMEf47d7aeUpdate SECURITY.md828cea1Update SECURITY.mdUpdates
follow-redirectsfrom 1.14.4 to 1.15.6Commits
35a517cRelease version 1.15.6 of the npm package.c4f847fDrop Proxy-Authorization across hosts.8526b4aUse GitHub for disclosure.b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.Updates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
liquidjsfrom 6.4.3 to 10.12.0Release notes
S...
Description has been truncated