Bump the npm_and_yarn group across 1 directory with 22 updates by dependabot[bot] · Pull Request #1 · ianwoodfill/url-metadata

dependabot · 2024-11-25T05:55:39Z

Bumps the npm_and_yarn group with 19 updates in the / directory:

Package	From	To
request	`2.88.0`	`2.88.2`
underscore	`1.8.3`	`1.12.1`
acorn	`6.0.5`	`6.4.2`
ajv	`6.6.2`	`6.12.6`
cross-spawn	`6.0.5`	`6.0.6`
css-what	`2.1.0`	`2.1.3`
debug	`3.2.6`	`3.2.7`
eslint-utils	`1.3.1`	`1.4.3`
hosted-git-info	`2.7.1`	`2.8.9`
js-yaml	`3.12.0`	`3.14.1`
lodash	`4.17.11`	`4.17.21`
lodash.merge	`4.6.0`	`4.6.2`
minimatch	`3.0.4`	`3.1.2`
minimist	`1.2.0`	`1.2.8`
mkdirp	`0.5.1`	`0.5.6`
nth-check	`1.0.1`	`2.1.1`
cheerio	`0.22.0`	`1.0.0`
path-parse	`1.0.6`	`1.0.7`
semver	`5.6.0`	`5.7.2`

Updates request from 2.88.0 to 2.88.2

Changelog

Sourced from request's changelog.

Change Log

Commits

See full diff in compare view

Updates underscore from 1.8.3 to 1.12.1

Commits

c627e38 Mention CVE-2021-23358 in code, test and documentation (#2915)
c9e803e Add diff and docs to the 1.12.1 change log entry
0c20985 Restore comments from 7e89b79f95e7b
bf5a0ed Merge branch 'template-variable-parameter'
7e3d404 Update annotated sources and minified bundles for 1.12.1
5343fbc Add version 1.12.1 to the documentation
44df929 Bump the version to 1.12.1
7e89b79 Un-document the fix for #2911 for the time being
4c73526 Fix #2911
ef646cc Reflect real issue of #2911 in test from #2912
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jgonggrijp, a new releaser for underscore since your current version.

Updates acorn from 6.0.5 to 6.4.2

Commits

f6b83ed Mark version 6.4.2
f51895b Fix potentially-exponential regular expression in use-strict-scanning
9a2e9b6 Mark version 6.4.1
90a9548 More rigorously check surrogate pairs in regexp validator
df0cf1a Mark version 6.4.0
5303412 Also export Parser via Parser.acorn
efe273e give token types and etc to plugins
ac6decb Mark version 6.3.0
7e9817d Allow sourceType: module even with ecmaVersion < 6
e2b8cc0 Fix broken parsing of new expressions when allowReserved=="never"
Additional commits viewable in compare view

Updates ajv from 6.6.2 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates cross-spawn from 6.0.5 to 6.0.6

Changelog

Sourced from cross-spawn's changelog.

6.0.6 (2024-11-18)

Bug Fixes

disable regexp backtracking (#160) (ba5aaef)

core: support worker threads (#127) (f4af31c)

Commits

d35c865 chore(release): 6.0.6
5a37e19 chore: update package.json and package.lock
ba5aaef fix: disable regexp backtracking (#160)
f4af31c fix(core): support worker threads (#127)
See full diff in compare view

Updates css-what from 2.1.0 to 2.1.3

Commits

2db00ca 2.1.3
dc51092 fix(css-selectors): extend regex to include superscript in range, fix #27 (#28)
a5f1991 Test on node LTS
b2a2117 2.1.2
e9ef3f1 Run prettier
070b2f8 Add remaining parsed outputs (#25)
af801e4 update license references to match license file (#23)
2d495d0 Update to node 10 in .travis.yml (#22)
c636f0d Allow escaped parentheses in pseudo selectors (#20)
4e255c9 Update .travis.yml
Additional commits viewable in compare view

Updates debug from 3.2.6 to 3.2.7

Commits

3383260 3.2.7
4e21502 fix regression
See full diff in compare view

Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates eslint-utils from 1.3.1 to 1.4.3

Release notes

Sourced from eslint-utils's releases.

v1.4.3

🐛 Bug fixes

8f9e481ecc1204c7a1331b697f97903f90c75154 fixed false positive of ReferenceTracker.

v1.4.2

🐛 Bug fixes

e4cb01498df6096b66edb0c78965ee6f47d3ac77 fixed a regression of the previous release.

v1.4.1

🐛 Bug fixes

c119e832952c8c653bd4f21e39eb9f7ce48e5947 fixed getStaticValue() function to handle null literal correctly even if runtimes don't support BigInt natively.

587cca2f82c245f5fc4a8b9fb2cf6b35c0d02552 fixed getStringIfConstant() function to handle regular expression literals and BigInt literals even if runtimes don't support those.

08158db1c98fd71cf0f32ddefbc147e2620e724c fixed GHSA-3gx7-xhv7-5mx3.

v1.4.0

✨ Enhancements

66456c5356310fc4309b4fe2756995f27b907747 (and ebf5a8378d3f0a20a74adb158a7112cb616bce44, aac472e815551688d23cc8fd88f9044dbf276804) added isParenthesized() function that checks if a given node is parenthesized or not.

4f8407dd6cd52274ba115b3a8558153ec6d799a7 (and cb518c70ee037722f802d808bbbe93da83f07fb3) added hasSideEffect() function that checks if a given node may have side-effects or not.

Commits

23f4ddc 🔖 1.4.3
8f9e481 🐛 fix reference tracker false positive
6633278 ⚒ fix test scripts
7c8e67c ⚒ fix build scripts
41ff95e ⚒ update dependencies
4942012 ⚒ fix build scripts
f1c8d02 ⚒ update build scripts
a88598a Create FUNDING.yml
4e1bc07 1.4.2
e4cb014 🐛 add null test
Additional commits viewable in compare view

Updates hosted-git-info from 2.7.1 to 2.8.9

Changelog

Sourced from hosted-git-info's changelog.

2.8.9 (2021-04-07)

Bug Fixes

backport regex fix from #76 (29adfe5), closes #84

2.8.8 (2020-02-29)

Bug Fixes

#61 & #65 addressing issues w/ url.URL implmentation which regressed node 6 support (5038b18), closes #66

2.8.7 (2020-02-26)

Bug Fixes

Do not attempt to use url.URL when unavailable (2d0bb66), closes #61 #62

Do not pass scp-style URLs to the WhatWG url.URL (f2cdfcf), closes #60

2.8.6 (2020-02-25)

2.8.5 (2019-10-07)

Bug Fixes

updated pathmatch for gitlab (e8325b5), closes #51

updated pathmatch for gitlab (ffe056f)

2.8.4 (2019-08-12)

... (truncated)

Commits

8d4b369 chore(release): 2.8.9
29adfe5 fix: backport regex fix from #76
afeaefd chore(release): 2.8.8
5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
7440afa chore(release): 2.8.7
2d0bb66 fix: Do not attempt to use url.URL when unavailable
f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
e1b83df chore(release): 2.8.6
ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
624fd6f chore(release): 2.8.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Updates js-yaml from 3.12.0 to 3.14.1

Changelog

Sourced from js-yaml's changelog.

[3.14.1] - 2020-12-07

Security

Fix possible code execution in (already unsafe) .load() (in &anchor).

[3.14.0] - 2020-05-22

Changed

Support safe/loadAll(input, options) variant of call.

CI: drop outdated nodejs versions.

Dev deps bump.

Fixed

Quote = in plain scalars #519.

Check the node type for !<?> tag in case user manually specifies it.

Verify that there are no null-bytes in input.

Fix wrong quote position when writing condensed flow, #526.

[3.13.1] - 2019-04-05

Security

Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

Security

Security fix: safeLoad() can hang when arrays with nested refs used as key. Now throws exception for nested arrays. #475.

[3.12.2] - 2019-02-26

Fixed

Fix noArrayIndent option for root level, #468.

[3.12.1] - 2019-01-05

Added

Added noArrayIndent option, #432.

Commits

37caaad 3.14.1 released
094c0f7 dist rebuild
9586ebe Avoid calling hasOwnProperty of user-controlled objects
34e5072 3.14.0 released
7b25c83 Browser files rebuild
6f73473 Dev deps bump
0c29349 Travis-CI: drop old nodejs versions
10be97e fix(loader): Add support for safe/loadAll(input, options)
d6983dd Fix issue #526: wrong quote position writing condensed flow (#527)
93fbf7d fix issue 526 (wrong quote position writing condensed flow)
Additional commits viewable in compare view

Updates json-schema from 0.2.3 to 0.4.0

Commits

f6f6a3b Use a little more robust method of checking instances
ef60987 Update version
b62f1da Protect against constructor modification, #84
fb427cd Link to json-schema-org repository in addition to site, fixes #54
22f1461 Don't allow proto property to be used for schema default/coerce, fixes #84
c52a27c Get basic test to pass
b3f42b3 Add security policy
3b0cec3 Update version
c28470f Update readme to acknowledge the state of the package
7dff9cd Merge pull request #81 from hodovani/patch-1
Additional commits viewable in compare view

Updates lodash from 4.17.11 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
ded9bc6 Bump to v4.17.20.
63150ef Documentation fixes.
00f0f62 test.js: Remove trailing comma.
846e434 Temporarily use a custom fork of lodash-cli.
5d046f3 Re-enable Travis tests on 4.17 branch.
aa816b3 Remove /npm-package.
d7fbc52 Bump to v4.17.19
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.

Updates lodash.merge from 4.6.0 to 4.6.2

Commits

See full diff in compare view

Updates minimatch from 3.0.4 to 3.1.2

Commits

699c459 3.1.2
2f2b5ff fix: trim pattern
25d7c0d 3.1.1
55dda29 fix: treat nocase:true as always having magic
5e1fb8d 3.1.0
f8145c5 Add 'allowWindowsEscape' option
570e8b1 add publishConfig for v3 publishes
5b7cd33 3.0.6
20b4b56 [fix] revert all breaking syntax changes
2ff0388 document, expose, and test 'partial:true' option
Additional commits viewable in compare view

Updates minimist from 1.2.0 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates mkdirp from 0.5.1 to 0.5.6

Commits

92f086d 0.5.6
2a28125 clean up tests
c905d65 update minimist
049cf18 0.5.5
bea6382 Remove unnecessary umask calls
42a012c 0.5.4
2867920 fix infinite loop on windows machines
d784e70 0.5.3
d612c5d add files list so this package isn't a monster
b2e7ba0 0.5.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for mkdirp since your current version.

Updates nth-check from 1.0.1 to 2.1.1

Release notes

Sourced from nth-check's releases.

v2.1.1

The ESM code had some issues that are now fixed aeeb067

fb55/nth-check@v2.1.0...v2.1.1

v2.1.0

What's Changed

nth-check is now a dual CommonJS and ESM module fb55/nth-check#206

With the new sequence and generate methods, it is now possible to generate a sequence of indices for a given formula fb55/nth-check#207

Full Changelog: fb55/nth-check@v2.0.1...v2.1.0

v2.0.1

Fixes:

Replace regex with hand-rolled parser for nth-expressions (#9) 9894c1d

Ensures parsing will always have linear time complexity.

Internal:

chore(ci): Use GitHub Actions, Dependabot (#10) e02b4dd

Bump dependencies

fb55/nth-check@v2.0.0...v2.0.1

v2.0.0

Port module to TS, Jest, ESLint

Breaking:

The main export is now a default export.

The module now throws regular Errors on invalid selectors instead of SyntaxErrors.

Commits

See full diff in compare view

Updates cheerio from 0.22.0 to 1.0.0

Release notes

Sourced from cheerio's releases.

v1.0.0

Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes
The minimum NodeJS version is now 18.17 or higher cheeriojs/cheerio#3959

Import paths were simplified. For example, use cheerio/slim instead of cheerio/lib/slim. cheeriojs/cheerio#3970
The deprecated default Cheerio instance and static methods were removed. cheeriojs/cheerio#3974

Before, it was possible to write code like this:
import cheerio, { html } from 'cheerio';
html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS
Make sure to always load documents first:
import * as cheerio from 'cheerio';
cheerio.load('<test></test>').html();
Node types previously re-exported by Cheerio must now be imported directly from (domhandler)(https://github.com/fb55/domhandler). cheeriojs/cheerio#3969
htmlparser2 options now reside exclusively under the xml key (cheeriojs/cheerio#2916):
const $ = cheerio.load('<html>', {
  xml: {
    withStartIndices: true,
  },
});
New Features

Add functions to load buffers, streams & URLs in NodeJS by @fb55 in cheeriojs/cheerio#2857

Add extract method by @fb55 in cheeriojs/cheerio#2750

Fixes

Allow imports of cheerio/utils by @blixt in cheeriojs/cheerio#2601

Allow empty string in data, and simplify by @fb55 in cheeriojs/cheerio#2818

... (truncated)

Commits

50b5d5c 1.0.0
eea2fec fix(eslint): Disable misfiring lint rule
e60f659 chore(package): Update published files
4fe3e7b chore(docs): Add 1.0 Announcement Post (#3984)
944553b build(deps): bump docusaurus-plugin-typedoc in /website (#3983)
e34967e build(deps-dev): bump tsx from 4.16.5 to 4.17.0 (#3982)
eb7122b chore(traversing): Add test case for lowerCaseTags (#3981)
b824ba8 fix(website): Fix ReactLiveScope examples (#3980)
08ebee5 build(deps-dev): bump eslint-plugin-jsdoc from 49.0.0 to 50.0.0 (#3979)
bf5f44c build(deps-dev): bump eslint-plugin-jsdoc from 48.11.0 to 49.0.0 (#3976)
Additional commits viewable in compare view

Updates path-parse from 1.0.6 to 1.0.7

Commits

See full diff in compare view

Updates qs from 6.5.2 to 6.5.3

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3
ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
12ac1c4 [meta] fix README.md (#399)
0338716 [actions] backport actions from main
5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
51b8a0b add FUNDING.yml
45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
f814a7f [Dev Deps] backport from main
Additional commits viewable in compare view

Updates semver from 5.6.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
c83c18c 5.7.1
956e228 Correct typo in README
8055dda 5.7.0
604e73d auto-publishing scripts
bed01e2 remove the nomin comments, since we don't minify any more anyway
9cb68f1 document parse method
38d42ca 5.7 changelog
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates tough-cookie from 2.4.3 to 2.5.0

Commits

7c1fdf1 2.5.0
9ff4ba5 Qualify the store.removeAllCookies documentation
1855bf3 Additional documentation for removeAllCookies
5cc9bd2 Extract tests, cover multiple error path
28f0808 Only call removeAllCookies if actually implemented
62802ef remove all cookies from cookie jar at once (#115)
8783d46 Remove left-over mention of MPL from README
8302ebc Merge pull request #121 from salesforce/punycode-2.1
d6ea115 Merge pull request #120 from salesforce/no-package-l...
Description has been truncated

Bumps the npm_and_yarn group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [request](https://github.com/request/request) | `2.88.0` | `2.88.2` | | [underscore](https://github.com/jashkenas/underscore) | `1.8.3` | `1.12.1` | | [acorn](https://github.com/acornjs/acorn) | `6.0.5` | `6.4.2` | | [ajv](https://github.com/ajv-validator/ajv) | `6.6.2` | `6.12.6` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.5` | `6.0.6` | | [css-what](https://github.com/fb55/css-what) | `2.1.0` | `2.1.3` | | [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` | | [eslint-utils](https://github.com/mysticatea/eslint-utils) | `1.3.1` | `1.4.3` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.12.0` | `3.14.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.17.21` | | [lodash.merge](https://github.com/lodash/lodash) | `4.6.0` | `4.6.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [nth-check](https://github.com/fb55/nth-check) | `1.0.1` | `2.1.1` | | [cheerio](https://github.com/cheeriojs/cheerio) | `0.22.0` | `1.0.0` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` | Updates `request` from 2.88.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `underscore` from 1.8.3 to 1.12.1 - [Commits](jashkenas/underscore@1.8.3...1.12.1) Updates `acorn` from 6.0.5 to 6.4.2 - [Commits](acornjs/acorn@6.0.5...6.4.2) Updates `ajv` from 6.6.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.6.2...v6.12.6) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `css-what` from 2.1.0 to 2.1.3 - [Release notes](https://github.com/fb55/css-what/releases) - [Commits](fb55/css-what@v2.1.0...v2.1.3) Updates `debug` from 3.2.6 to 3.2.7 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@3.2.6...3.2.7) Updates `eslint-utils` from 1.3.1 to 1.4.3 - [Release notes](https://github.com/mysticatea/eslint-utils/releases) - [Commits](mysticatea/eslint-utils@v1.3.1...v1.4.3) Updates `hosted-git-info` from 2.7.1 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.7.1...v2.8.9) Updates `js-yaml` from 3.12.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.12.0...3.14.1) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `lodash` from 4.17.11 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Updates `lodash.merge` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `nth-check` from 1.0.1 to 2.1.1 - [Release notes](https://github.com/fb55/nth-check/releases) - [Commits](https://github.com/fb55/nth-check/commits/v2.1.1) Updates `cheerio` from 0.22.0 to 1.0.0 - [Release notes](https://github.com/cheeriojs/cheerio/releases) - [Commits](cheeriojs/cheerio@0.22.0...v1.0.0) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `semver` from 5.6.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.6.0...v5.7.2) Updates `tough-cookie` from 2.4.3 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v2.5.0) --- updated-dependencies: - dependency-name: request dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: css-what dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eslint-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash.merge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nth-check dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cheerio dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 25, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 22 updates - #1

Bump the npm_and_yarn group across 1 directory with 22 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-ab6772f67f

dependabot Bot commented on behalf of github Nov 25, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 25, 2024

Change Log

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v6.12.0

v6.11.0

v6.10.2

v6.10.1

v6.10.0

v6.9.0

6.0.6 (2024-11-18)

Bug Fixes

v1.4.3

🐛 Bug fixes

v1.4.2

🐛 Bug fixes

v1.4.1

🐛 Bug fixes

v1.4.0

✨ Enhancements

2.8.9 (2021-04-07)

Bug Fixes

2.8.8 (2020-02-29)

Bug Fixes

2.8.7 (2020-02-26)

Bug Fixes

2.8.6 (2020-02-25)

2.8.5 (2019-10-07)

Bug Fixes

2.8.4 (2019-08-12)

[3.14.1] - 2020-12-07

Security

[3.14.0] - 2020-05-22

Changed

Fixed

[3.13.1] - 2019-04-05

Security

[3.13.0] - 2019-03-20

Security

[3.12.2] - 2019-02-26

Fixed

[3.12.1] - 2019-01-05

Added

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

v1.2.7 - 2022-10-10

Commits

v2.1.1

v2.1.0

What's Changed

v2.0.1

v2.0.0

v1.0.0

Announcement Blog Post

Breaking Changes

New Features

Fixes

6.5.3

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

Uh oh!

Reviewers