generated from 202303-PRM-TR-FEW/capstone-template
-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build(deps): bump the npm_and_yarn group across 1 directory with 16 updates #191
Closed
dependabot
wants to merge
1
commit into
main
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-fb9adc1cb6
Closed
build(deps): bump the npm_and_yarn group across 1 directory with 16 updates #191
dependabot
wants to merge
1
commit into
main
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-fb9adc1cb6
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…pdates Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [crypto-js](https://github.com/brix/crypto-js) | `4.1.1` | `4.2.0` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [next-auth](https://github.com/nextauthjs/next-auth) | `4.23.1` | `4.24.5` | | [postcss](https://github.com/postcss/postcss) | `8.4.24` | `8.4.31` | | [sharp](https://github.com/lovell/sharp) | `0.32.3` | `0.32.6` | | [@adobe/css-tools](https://github.com/adobe/css-tools) | `4.2.0` | `4.3.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.6` | `7.24.1` | | [semver](https://github.com/npm/node-semver) | `6.3.0` | `6.3.1` | | [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` | | [jose](https://github.com/panva/jose) | `4.14.4` | `4.15.5` | | [mongodb](https://github.com/mongodb/node-mongodb-native) | `5.6.0` | `5.9.1` | | [mongoose](https://github.com/Automattic/mongoose) | `7.3.4` | `7.6.10` | | [undici](https://github.com/nodejs/undici) | `5.23.0` | `5.28.4` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [zod](https://github.com/colinhacks/zod) | `3.21.4` | `` | | [next](https://github.com/vercel/next.js) | `13.5.2` | `13.5.6` | Updates `crypto-js` from 4.1.1 to 4.2.0 - [Commits](brix/crypto-js@4.1.1...4.2.0) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `next-auth` from 4.23.1 to 4.24.5 - [Release notes](https://github.com/nextauthjs/next-auth/releases) - [Commits](https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.5) Updates `postcss` from 8.4.24 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.24...8.4.31) Updates `sharp` from 0.32.3 to 0.32.6 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.32.3...v0.32.6) Updates `@adobe/css-tools` from 4.2.0 to 4.3.3 - [Changelog](https://github.com/adobe/css-tools/blob/main/History.md) - [Commits](https://github.com/adobe/css-tools/commits) Updates `@babel/traverse` from 7.22.6 to 7.24.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.1/packages/babel-traverse) Updates `semver` from 6.3.0 to 6.3.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v6.3.1) Updates `ip` from 2.0.0 to 2.0.1 - [Commits](indutny/node-ip@v2.0.0...v2.0.1) Updates `jose` from 4.14.4 to 4.15.5 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/v4.15.5/CHANGELOG.md) - [Commits](panva/jose@v4.14.4...v4.15.5) Updates `mongodb` from 5.6.0 to 5.9.1 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v5.9.1/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v5.6.0...v5.9.1) Updates `mongoose` from 7.3.4 to 7.6.10 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@7.3.4...7.6.10) Updates `undici` from 5.23.0 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.23.0...v5.28.4) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Removes `zod` Updates `next` from 13.5.2 to 13.5.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v13.5.2...v13.5.6) --- updated-dependencies: - dependency-name: crypto-js dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: next-auth dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@adobe/css-tools" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: jose dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: mongodb dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: mongoose dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: zod dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Superseded by #192. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-security-group-fb9adc1cb6
branch
April 11, 2024 10:02
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 16 updates in the / directory:
4.1.1
4.2.0
4.18.2
4.19.2
4.23.1
4.24.5
8.4.24
8.4.31
0.32.3
0.32.6
4.2.0
4.3.3
7.22.6
7.24.1
6.3.0
6.3.1
2.0.0
2.0.1
4.14.4
4.15.5
5.6.0
5.9.1
7.3.4
7.6.10
5.23.0
5.28.4
1.2.3
1.2.5
3.21.4
13.5.2
13.5.6
Updates
crypto-js
from 4.1.1 to 4.2.0Commits
808f499
Merge branch 'release/4.2.0'd5af3ae
Update release notes.9496e07
Bump version.421dd53
Change default hash algorithm and iteration's for PBKDF2 to prevent weak secu...d1f4f4d
Update grunt.c755289
Discontinued1da3dab
Discontinued4dcaa7a
Merge pull request #380 from Alanscut/dev762feb2
chore: rename BF to Blowfishfb81418
feat: blowfish supportUpdates
express
from 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
next-auth
from 4.23.1 to 4.24.5Commits
5b647e1
chore(release): bump version [skip ci]d237059
fix: differentiate between issued JWTs0f0c444
chore: update cookie options snippet (#9095)fbd68a1
docs: Fix Adapters Link (#9009)18e8b92
fix(dev): fix import links forauthOptions
(#8938)09f5aab
docs: fix source links9dd2bce
docs: Update discord.md (#8958)f4ee563
docs: remove capitalization on osu! (#8975)4318a4c
docs: Fixes broken link on v4 auth0 provider page (#8998)62ec78c
docs: Fix link to database adapters doc (#8986)Updates
postcss
from 8.4.24 to 8.4.31Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
90208de
Release 8.4.31 version58cc860
Fix carrier return parsing4fff8e4
Improve pnpm test outputcd43ed1
Update dependenciescaa916b
Update dependencies8972f76
Typo11a5286
Typo45c5501
Release 8.4.30 versionbc3c341
Update linterb2be58a
Merge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...Updates
sharp
from 0.32.3 to 0.32.6Changelog
Sourced from sharp's changelog.
Commits
eefaa99
Release v0.32.6dbce6fa
Upgrade to libvips v8.14.5af0fcb3
Docs: changelog for #3799c6f54e5
Bump devDeps846563e
TypeScript: add definitions for block and unblock (#3799)9c217ab
Ensure withMetadata can add RGB16 profiles #3773e7381e5
Alternative fix for 4340d60, uses existing StaySequential4340d60
Ensure composite tile images fully decoded #37677f64d46
Docs: add missing returns property to raw67e927b
Docs: ensure all functions include method signature #3777Updates
@adobe/css-tools
from 4.2.0 to 4.3.3Changelog
Sourced from
@adobe/css-tools
's changelog.Commits
Updates
@babel/traverse
from 7.22.6 to 7.24.1Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
822b025
v7.24.1fc0d5ad
Update typescript and lint tools (#16351)69e7928
Consider well-known and registered symbols as literals (#16342)40110e9
Update source map deps (#16327)ce59160
v7.24.0bd5abd5
fix: avoidpopContext
on unvisited node paths (#16305)08a057c
UseObject.hasOwn
when available (#16248)a0dd614
v7.23.91200542
fix: Don't throw ingetTypeAnnotation
when using TS+inference (#15383)e428a6d
v7.23.7Updates
semver
from 6.3.0 to 6.3.1Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
44d27bc
chore: release 6.3.1928e56d
fix: better handling of whitespace (#591)39f6326
chore:@npmcli/template-oss
@4
.16.0Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
ip
from 2.0.0 to 2.0.1Commits
3b0994a
2.0.132f468f
lib: fixed CVE-2023-42282 and added unit testUpdates
jose
from 4.14.4 to 4.15.5Release notes
Sourced from jose's releases.
Changelog
Sourced from jose's changelog.
... (truncated)
Commits
765aafd
chore(release): 4.15.5b36e45e
test: add export check to x509 pem import testse839ecb
test: stop testing JWE RSA1_5 Algorithm1b91d88
fix: add a maxOutputLength option to zlib inflate9ca2b24
build: remove release actionf3035d8
chore: cleanup after releasef0bb220
chore(release): 4.15.46f38554
chore: bump dev deps936c9df
fix(types): export GetKeyFunction (#592)5ac6619
chore: bump dev depsUpdates
mongodb
from 5.6.0 to 5.9.1Release notes
Sourced from mongodb's releases.
... (truncated)
Changelog
Sourced from mongodb's changelog.