Bump the npm_and_yarn group across 1 directory with 17 updates #15
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.19.2` | `0.28.0` | | [luxon](https://github.com/moment/luxon) | `1.22.2` | `1.28.1` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.19.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.5.10` | `1.15.6` | | [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `5.8.0` | `5.15.0` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.8.8` | `2.8.9` | | [json-bigint](https://github.com/sidorares/json-bigint) | `0.3.0` | `1.0.0` | | [googleapis](https://github.com/googleapis/google-api-nodejs-client) | `39.2.0` | `134.0.0` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.11.0` | | [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.2` | | [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `4.2.1` | `18.1.3` | | [@slack/events-api](https://github.com/slackapi/node-slack-sdk) | `2.3.2` | `2.3.4` | Updates `axios` from 0.19.2 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.19.2...v0.28.0) Updates `luxon` from 1.22.2 to 1.28.1 - [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md) - [Commits](moment/luxon@1.22.2...1.28.1) Updates `express` from 4.17.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.19.2) Updates `follow-redirects` from 1.5.10 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.5.10...v1.15.6) Updates `@slack/web-api` from 5.8.0 to 5.15.0 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/[email protected]...@slack/[email protected]) Updates `hosted-git-info` from 2.8.8 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.8.8...v2.8.9) Updates `json-bigint` from 0.3.0 to 1.0.0 - [Commits](sidorares/json-bigint@v0.3.0...v1.0.0) Updates `googleapis` from 39.2.0 to 134.0.0 - [Release notes](https://github.com/googleapis/google-api-nodejs-client/releases) - [Changelog](https://github.com/googleapis/google-api-nodejs-client/blob/main/release-please-config.json) - [Commits](googleapis/google-api-nodejs-client@v39.2.0...googleapis-v134.0.0) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `node-fetch` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.7.0) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `qs` from 6.7.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.11.0) Updates `body-parser` from 1.19.0 to 1.20.2 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.2) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `yargs-parser` from 4.2.1 to 18.1.3 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v4.2.1...v18.1.3) Updates `@slack/events-api` from 2.3.2 to 2.3.4 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/[email protected]...@slack/[email protected]) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: luxon dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@slack/web-api" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: json-bigint dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: googleapis dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@slack/events-api" dependency-type: direct:production dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 16 updates in the / directory:
0.19.20.28.01.22.21.28.14.17.14.19.21.5.101.15.65.8.05.15.02.8.82.8.90.3.01.0.039.2.0134.0.01.2.51.2.85.7.15.7.21.0.61.0.76.7.06.11.01.19.01.20.23.2.13.2.24.2.118.1.32.3.22.3.4Updates
axiosfrom 0.19.2 to 0.28.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
3b7635a[Release] v0.28.0 (#6211)27c0076feat(backport): added ability for paramsSerializer to handle function; (#6227)80c3d74chore(ci): backported publish action; (#6224)2755df5fix(security): fixed CVE-2023-45857 by backportingwithXSRFTokenoption to ...880b42edocs: Fix a typo in READMEc4bf0a4Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)1e2679ffix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...80b546cfix: loosing request header (#4858) (#4871)6acb5effeat: brower platform add data protocol. (#4814)bbb2264fix(typing): axios response headers can be undefined (#4813)Maintainer changes
This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.
Updates
luxonfrom 1.22.2 to 1.28.1Changelog
Sourced from luxon's changelog.
... (truncated)
Commits
16a1aa3bump to 1.38.1612e0c7fix rfc2822 regex9dcec8cbump to 1.28.0a0f42a2Fixed small typo (#952)307b135Docs typo on dst weirdness (#962)1f99fddfix ISO year-ordinal strings with offsets (#966)e0c8f87.toSeconds() returns seconds.milliseconds (#944)2d66ce4Clarify toFormat docs (#938)043f2b9bump to 1.27.06ae0524update node install instructions. Closes #682Updates
expressfrom 4.17.1 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
follow-redirectsfrom 1.5.10 to 1.15.6Commits
35a517cRelease version 1.15.6 of the npm package.c4f847fDrop Proxy-Authorization across hosts.8526b4aUse GitHub for disclosure.b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.Updates
@slack/web-apifrom 5.8.0 to 5.15.0Release notes
Sourced from
@slack/web-api's releases.Commits
75cafb2Publish44b06caMerge pull request #1140 from mlarraz/axiosf6a6890Update axios on webhook package53866deMerge pull request #1139 from stevengill/issue-1137a837085added auth.teams.list method73bb9f6Merge pull request #1129 from stevengill/github-action5fbfcbbFixed merge conflict377c3afremoved references to travisdc9189amigrating to github actions2e9ad58updated axios dependency to 0.21.1Updates
hosted-git-infofrom 2.8.8 to 2.8.9Changelog
Sourced from hosted-git-info's changelog.
Commits
8d4b369chore(release): 2.8.929adfe5fix: backport regex fix from #76Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.
Updates
json-bigintfrom 0.3.0 to 1.0.0Commits
390482a1.0.0f2d8f83typo6ee392eMerge pull request #37 from sidorares/fix/prototypec85a430MAJOR: Add protoAction and constructorAction options4c2dbf4build: add node 14b348ea3fix assertion after chai upgrade725777cadd files section and bump depsebd1d91add prettier config6c659f5Merge pull request #36 from babyadoresorange/master1556563update READMEUpdates
googleapisfrom 39.2.0 to 134.0.0Release notes
Sourced from googleapis's releases.
Commits
7500df9chore: release main7f4e0eachore: release main3bf7103chore: release maine9aabebfix: change packageJson sideEffects to boolean (#3435)873b559feat: run the generator (#3447)f832463feat: run the generator (#3441)f0db524feat: run the generator (#3434)f453603feat: regenerate index filesa188b41feat(testing): update the APIc0cafa8fix(notebooks): update the APIUpdates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
node-fetchfrom 2.6.0 to 2.7.0Release notes
Sourced from node-fetch's releases.
... (truncated)
Commits
9b9d458feat:AbortError(#1744)65ae25afix: Remove the default connection close header (#1765)8bc3a7cfix: socket variable testing for undefined (#1726)afb36f6Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7fix: handle bom in text and json (#1739)70f592dfix: "global is not defined" (#1704)0f1ebb0Prevent error when response is null (#1699)6e9464dci(release): install dependenciesdd2a0baci(release): install dependencies49bef02ci(release): use latest Node LTSMaintainer changes
This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.
Updates
semverfrom 5.7.1 to 5.7.2Release notes
Sourced from semver's release...
Description has been truncated