-
Notifications
You must be signed in to change notification settings - Fork 95
Bump the npm_and_yarn group group with 19 updates #289
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
dependabot
wants to merge
1
commit into
master
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-7bd250c176
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Bump the npm_and_yarn group group with 19 updates #289
dependabot
wants to merge
1
commit into
master
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-7bd250c176
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group group with 19 updates: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.13.0` | `7.23.9` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.2` | | [browserslist](https://github.com/browserslist/browserslist) | `4.16.3` | `4.23.0` | | [cached-path-relative](https://github.com/ashaffer/cached-path-relative) | `1.0.2` | `1.1.0` | | [copy-props](https://github.com/gulpjs/copy-prop) | `2.0.4` | `2.0.5` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.63` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.8` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [node-sass](https://github.com/sass/node-sass) | `4.14.1` | `` | | [gulp-sass](https://github.com/dlmanning/gulp-sass) | `4.1.0` | `5.1.0` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0-security.0` | `5.0.1` | | [yargs](https://github.com/yargs/yargs) | `7.1.1` | `7.1.2` | | [uswds](https://github.com/uswds/uswds) | `1.6.13` | `1.6.14` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.7.2` | `1.8.1` | Updates `@babel/traverse` from 7.13.0 to 7.23.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.9/packages/babel-traverse) Updates `browserify-sign` from 4.2.1 to 4.2.2 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.2) Updates `browserslist` from 4.16.3 to 4.23.0 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.16.3...4.23.0) Updates `cached-path-relative` from 1.0.2 to 1.1.0 - [Commits](https://github.com/ashaffer/cached-path-relative/commits) Updates `copy-props` from 2.0.4 to 2.0.5 - [Commits](https://github.com/gulpjs/copy-prop/commits) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `es5-ext` from 0.10.53 to 0.10.63 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.63) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `minimatch` from 3.0.4 to 3.0.8 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.8) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Removes `node-sass` Updates `gulp-sass` from 4.1.0 to 5.1.0 - [Release notes](https://github.com/dlmanning/gulp-sass/releases) - [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md) - [Commits](dlmanning/gulp-sass@v4.1.0...v5.1.0) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `yargs-parser` from 5.0.0-security.0 to 5.0.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs-parser/commits/v5.0.1) Updates `yargs` from 7.1.1 to 7.1.2 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/yargs-v7.1.2/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs/commits/yargs-v7.1.2) Updates `uswds` from 1.6.13 to 1.6.14 - [Release notes](https://github.com/uswds/uswds/releases) - [Commits](uswds/uswds@v1.6.13...v1.6.14) Updates `shell-quote` from 1.7.2 to 1.8.1 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.7.2...v1.8.1) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: browserslist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: cached-path-relative dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: copy-props dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: node-sass dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: gulp-sass dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: uswds dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: shell-quote dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
This was referenced Feb 27, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group group with 19 updates:
7.13.07.23.94.2.14.2.24.16.34.23.01.0.21.1.02.0.42.0.50.2.00.2.20.10.530.10.630.2.30.4.01.4.11.4.22.2.02.2.33.0.43.0.81.2.51.2.84.14.14.1.05.1.01.0.61.0.75.0.0-security.05.0.17.1.17.1.21.6.131.6.141.7.21.8.1Updates
@babel/traversefrom 7.13.0 to 7.23.9Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
a0dd614v7.23.91200542fix: Don't throw ingetTypeAnnotationwhen using TS+inference (#15383)e428a6dv7.23.7d292822fix: Crash when removing withoutProgram(#16191)d02c1f7v7.23.6cce807fBump debug to ^4.3.1 (#16164)8479012v7.23.5da7dc40Do not remove bindings when removing assignment expression path (#16131)fadc081fix: Unexpected duplication of comments (#16110)13a5c83v7.23.4Updates
browserify-signfrom 4.2.1 to 4.2.2Changelog
Sourced from browserify-sign's changelog.
Commits
4af5a90v4.2.23aec038[Dev Deps] updatetape85994cd[Fix] properly check the upper bound for DSA signatures9ac5a5e[meta] fix package.json indentationdcf49ce[meta] addsafe-publish-latest4418183[meta] addnpmignoreandauto-changelog8767739[Fix]sign: throw on unsupported padding scheme5f6fb17[Tests] log when openssl doesn't support cipherf5f17c2[Tests] handle openSSL not supporting a schemed845d85[Tests] migrate from travis to github actionsMaintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates
browserslistfrom 4.16.3 to 4.23.0Release notes
Sourced from browserslist's releases.
Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
a23d971Release 4.23 version61e7712Update dependencies2c313aaAdd Github release workflow3caf908Update CIb58ae05feat: add BROWSERSLIST_ROOT_PATH (#819)8ddc4d8Update grammar definition file (#817)65ad382Release 4.22.3 version0efec9bAdd Node.js 21 to CIaaf5f2bUpdate dependenciesa3ba90bUpdated regex to have the option of adding an extension after@companyNamebu...Updates
cached-path-relativefrom 1.0.2 to 1.1.0Commits
Updates
copy-propsfrom 2.0.4 to 2.0.5Commits
Updates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
es5-extfrom 0.10.53 to 0.10.63Release notes
Sourced from es5-ext's releases.
... (truncated)
Changelog
Sourced from es5-ext's changelog.
... (truncated)
Commits
de4e03cchore: Release v0.10.633fd53b7chore: Upgradelint-stagedto v13bf8ed79chore: Ensure postinstall script does not crash on Windows2cbbb07chore: Bump dependencies22d0416chore: Bump LICENSE yeara52e957fix: Support ES2015+ function definitions infunction#toStringTokens()3551cddfix: Do not rely on problematic regex7855319chore: Simplify the manifest message78e041fchore: Release v0.10.62c51d552chore: Improve manifestUpdates
json-schemafrom 0.2.3 to 0.4.0Commits
f6f6a3bUse a little more robust method of checking instancesef60987Update versionb62f1daProtect against constructor modification, #84fb427cdLink to json-schema-org repository in addition to site, fixes #5422f1461Don't allow proto property to be used for schema default/coerce, fixes #84c52a27cGet basic test to passb3f42b3Add security policy3b0cec3Update versionc28470fUpdate readme to acknowledge the state of the package7dff9cdMerge pull request #81 from hodovani/patch-1Updates
jsprimfrom 1.4.1 to 1.4.2Changelog
Sourced from jsprim's changelog.
Commits
5c8475fjoyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.xMaintainer changes
This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.
Updates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
minimatchfrom 3.0.4 to 3.0.8Commits
782c2643.0.86ade2dafix: trim patterna6f52b03.0.7e4cd434fix: treat nocase:true as always having magice6bbe1cpublishConfig for 3.05b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' option5dbd6a7ci: tests and makeworkdbda065full test coverage, adding tests, deleting dead codeUpdates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Removes
node-sassUpdates
gulp-sassfrom 4.1.0 to 5.1.0Release notes
Sourced from gulp-sass's releases.
... (truncated)
Changelog
Sourced from gulp-sass's changelog.
Commits
c04bb675.1.0835d6f3Add sass...Description has been truncated