Bump the npm_and_yarn group across 10 directories with 17 updates #112
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 2 updates in the /examples/supplychain-app/besu/express_nodeJS directory: [express](https://github.com/expressjs/express) and [web3-utils](https://github.com/ChainSafe/web3.js). Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/besu/smartContracts directory: [express](https://github.com/expressjs/express). Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/corda/express_nodeJS directory: [express](https://github.com/expressjs/express). Bumps the npm_and_yarn group with 4 updates in the /examples/supplychain-app/fabric/chaincode_rest_server/rest-server directory: [node-fetch](https://github.com/node-fetch/node-fetch), [tar](https://github.com/isaacs/node-tar), [async](https://github.com/caolan/async) and [braces](https://github.com/micromatch/braces). Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/fabric/express_nodeJs directory: [express](https://github.com/expressjs/express). Bumps the npm_and_yarn group with 2 updates in the /examples/supplychain-app/quorum/express_nodeJS directory: [express](https://github.com/expressjs/express) and [web3-utils](https://github.com/ChainSafe/web3.js). Bumps the npm_and_yarn group with 5 updates in the /examples/supplychain-app/quorum/smartContracts directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [tar](https://github.com/isaacs/node-tar) | `4.4.19` | `removed` | | [web3](https://github.com/ChainSafe/web3.js) | `1.10.4` | `4.9.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.4` | Bumps the npm_and_yarn group with 8 updates in the /examples/supplychain-app/supplychain-frontend directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `1.7.3` | `removed` | | [@material-ui/core](https://github.com/mui-org/material-ui/tree/HEAD/packages/material-ui) | `3.9.4` | `4.12.4` | | [@material-ui/icons](https://github.com/mui-org/material-ui/tree/HEAD/packages/material-ui-icons) | `3.0.2` | `4.11.3` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.3` | `4.1.4` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `0.19.1` | `3.0.0` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | Bumps the npm_and_yarn group with 2 updates in the /images/doorman/website directory: [semver](https://github.com/npm/node-semver) and [pug](https://github.com/pugjs/pug). Bumps the npm_and_yarn group with 3 updates in the /images/networkmap/website directory: [braces](https://github.com/micromatch/braces), [anymatch](https://github.com/micromatch/anymatch) and [pug](https://github.com/pugjs/pug). Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `qs` from 6.9.7 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.7...v6.11.0) Updates `web3-utils` from 4.1.1 to 4.3.0 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](web3/web3.js@v4.1.1...v4.3.0) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `qs` from 6.9.7 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.7...v6.11.0) Updates `node-fetch` from 2.6.9 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.9...v2.7.0) Updates `tar` from 6.1.13 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.13...v6.2.1) Updates `async` from 2.6.1 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.1...v2.6.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `qs` from 6.9.7 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.7...v6.11.0) Updates `web3-utils` from 4.1.1 to 4.3.0 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](web3/web3.js@v4.1.1...v4.3.0) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Removes `tar` Updates `web3` from 1.10.4 to 4.9.0 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](web3/web3.js@v1.10.4...v4.9.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Removes `node-fetch` Updates `@material-ui/core` from 3.9.4 to 4.12.4 - [Release notes](https://github.com/mui-org/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/v4.12.4/CHANGELOG.md) - [Commits](https://github.com/mui-org/material-ui/commits/v4.12.4/packages/material-ui) Updates `@material-ui/icons` from 3.0.2 to 4.11.3 - [Release notes](https://github.com/mui-org/material-ui/releases) - [Changelog](https://github.com/mui/material-ui/blob/v4.11.3/CHANGELOG.md) - [Commits](https://github.com/mui-org/material-ui/commits/v4.11.3/packages/material-ui-icons) Updates `tough-cookie` from 4.1.3 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.3...v4.1.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `http-proxy-middleware` from 0.19.1 to 3.0.0 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v0.19.1...v3.0.0) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `semver` from 5.6.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.6.0...v5.7.2) Updates `pug` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pugjs/pug/releases) - [Commits](https://github.com/pugjs/pug/compare/[email protected]@3.0.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `anymatch` from 1.3.2 to 3.1.3 - [Release notes](https://github.com/micromatch/anymatch/releases) - [Commits](micromatch/anymatch@1.3.2...v3.1.3) Updates `pug` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pugjs/pug/releases) - [Commits](https://github.com/pugjs/pug/compare/[email protected]@3.0.3) --- updated-dependencies: - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: web3-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: web3-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: web3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@material-ui/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@material-ui/icons" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pug dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: anymatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pug dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
requested review from
sownak,
suvajit-sarkar,
jagpreetsinghsasan,
arsulegai,
weihong-ou and
adityajoshi12
as code owners
dependabot
bot
added
dependencies
|
Superseded by #113. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/examples/supplychain-app/besu/express_nodeJS/npm_and_yarn-94b23a3c90
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the /examples/supplychain-app/besu/express_nodeJS directory: express and web3-utils.
Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/besu/smartContracts directory: express.
Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/corda/express_nodeJS directory: express.
Bumps the npm_and_yarn group with 4 updates in the /examples/supplychain-app/fabric/chaincode_rest_server/rest-server directory: node-fetch, tar, async and braces.
Bumps the npm_and_yarn group with 1 update in the /examples/supplychain-app/fabric/express_nodeJs directory: express.
Bumps the npm_and_yarn group with 2 updates in the /examples/supplychain-app/quorum/express_nodeJS directory: express and web3-utils.
Bumps the npm_and_yarn group with 5 updates in the /examples/supplychain-app/quorum/smartContracts directory:
4.18.24.19.24.4.19removed1.10.44.9.03.0.23.0.35.28.35.28.4Bumps the npm_and_yarn group with 8 updates in the /examples/supplychain-app/supplychain-frontend directory:
4.18.24.19.21.7.3removed3.9.44.12.43.0.24.11.34.1.34.1.43.0.23.0.30.19.13.0.03.1.93.1.10Bumps the npm_and_yarn group with 2 updates in the /images/doorman/website directory: semver and pug.
Bumps the npm_and_yarn group with 3 updates in the /images/networkmap/website directory: braces, anymatch and pug.
Updates
expressfrom 4.17.3 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
qsfrom 6.9.7 to 6.11.0Changelog
Sourced from qs's changelog.
Commits
56763c1v6.11.0ddd3e29[readme] fix version badgec313472[New] [Fix]stringify: revert 0e903c0; addcommaRoundTripoption95bc018v6.10.50e903c0[Fix]stringify: witharrayFormat: comma, properly include an explicit `[...ba9703cv6.10.44e44019[Fix]stringify: witharrayFormat: comma, include an explicit[]on a s...113b990[Dev Deps] updateobject-inspectc77f38f[Dev Deps] updateeslint,@ljharb/eslint-config,aud,has-symbol,tape2cf45b2[meta] usenpmignoreto autogenerate an npmignore fileUpdates
web3-utilsfrom 4.1.1 to 4.3.0Release notes
Sourced from web3-utils's releases.
Changelog
Sourced from web3-utils's changelog.
... (truncated)
Commits
ee5e81dupdate changelog and run lernab3ccd5cchange default to data (#6622)e6d8c14Stress Tests 1 - QA Tests (#6595)3bda14dadded methods (privateKeyToAddress, parseAndValidatePrivateKey,and privateKey...20cc5daProposal: Expose plugin functionality to plugins so it's easier to discover w...f8d8774update socket provider test (#6614)2785782Stress Tests 3 - create long duration ws tests (#6588)af91519fix: unnecessary array copy when pack encoding (#6553)2c60685Stress Tests 2 - QA Tests (#6583)d8b8e18fix: faster hex to byte implementation (#6596)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
expressfrom 4.17.3 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
qsfrom 6.9.7 to 6.11.0Changelog
Sourced from qs's changelog.
Commits
56763c1v6.11.0ddd3e29[readme] fix version badgec313472[New] [Fix]stringify: revert 0e903c0; addcommaRoundTripoption95bc018v6.10.50e903c0[Fix]stringify: witharrayFormat: comma, properly include an explicit `[...ba9703cv6.10.44e44019[Fix]stringify: witharrayFormat: comma, include an explicit[]on a s...113b990[Dev Deps] updateobject-inspectc77f38f[Dev Deps] updateeslint,@ljharb/eslint-config,aud,has-symbol,tape2cf45b2[meta] usenpmignoreto autogenerate an npmignore fileUpdates
node-fetchfrom 2.6.9 to 2.7.0Release notes
Sourced from node-fetch's releases.
Commits
9b9d458feat:AbortError(#1744)65ae25afix: Remove the default connection close header (#1765)8bc3a7cfix: socket variable testing for undefined (#1726)afb36f6Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7fix: handle bom in text and json (#1739)Updates
tarfrom 6.1.13 to 6.2.1Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
asyncfrom 2.6.1 to 2.6.4Changelog
Sourced from async's changelog.
Commits
c6bdacaVersion 2.6.48870da9Update built files4df6754update changelog8f7f903Fix prototype pollution vulnerability (#1828)f1d8383Version 2.6.32b674c1update changelogeab740ffix: udpate lodash. closes #1675eaf32beVersion 2.6.2684b42eUpdate built filese1bd3daupdate changelogMaintainer changes
This version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.