Bump the npm_and_yarn group across 1 directory with 29 updates #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [crypto-js](https://github.com/brix/crypto-js) | `4.1.1` | `4.2.0` | | [json5](https://github.com/json5/json5) | `2.2.1` | `2.2.2` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `8.5.1` | `9.0.0` | | [jsrsasign](https://github.com/kjur/jsrsasign) | `10.5.23` | `11.0.0` | | [moment](https://github.com/moment/moment) | `2.29.3` | `2.29.4` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.34` | `0.5.35` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `6.11.3` | `6.11.4` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `1.0.2` | `1.0.33` | | [chromedriver](https://github.com/giggio/node-chromedriver) | `103.0.0` | `119.0.1` | | [postcss](https://github.com/postcss/postcss) | `8.4.14` | `8.4.31` | | [webpack](https://github.com/webpack/webpack) | `5.73.0` | `5.76.0` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.18.2` | `7.24.7` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [d3-color](https://github.com/d3/d3-color) | `3.0.1` | `3.1.0` | | [ejs](https://github.com/mde/ejs) | `3.1.8` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.17.3` | `4.19.2` | | [jpeg-js](https://github.com/eugeneware/jpeg-js) | `0.4.2` | `0.4.4` | | [@jimp/jpeg](https://github.com/jimp-dev/jimp) | `0.16.1` | `0.16.13` | | [jszip](https://github.com/Stuk/jszip) | `2.5.0` | `3.10.1` | | [grunt-zip](https://github.com/twolfson/grunt-zip) | `0.18.2` | `1.0.0` | | [loader-utils](https://github.com/webpack/loader-utils) | `2.0.2` | `2.0.4` | | [ws](https://github.com/websockets/ws) | `8.5.0` | `8.17.1` | | [ws](https://github.com/websockets/ws) | `7.5.7` | `8.17.1` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.1` | `5.3.4` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) | `0.4.23` | `0.5.0` | | [parse-bmfont-xml](https://github.com/mattdesl/parse-bmfont-xml) | `1.1.4` | `1.1.6` | Updates `crypto-js` from 4.1.1 to 4.2.0 - [Commits](brix/crypto-js@4.1.1...4.2.0) Updates `json5` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.1...v2.2.2) Updates `jsonwebtoken` from 8.5.1 to 9.0.0 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0) Updates `jsrsasign` from 10.5.23 to 11.0.0 - [Release notes](https://github.com/kjur/jsrsasign/releases) - [Changelog](https://github.com/kjur/jsrsasign/blob/master/ChangeLog.txt) - [Commits](kjur/jsrsasign@10.5.23...11.0.0) Updates `moment` from 2.29.3 to 2.29.4 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.29.3...2.29.4) Updates `moment-timezone` from 0.5.34 to 0.5.35 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.34...0.5.35) Updates `protobufjs` from 6.11.3 to 6.11.4 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/protobufjs/protobuf.js/commits) Updates `ua-parser-js` from 1.0.2 to 1.0.33 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@1.0.2...1.0.33) Updates `chromedriver` from 103.0.0 to 119.0.1 - [Commits](giggio/node-chromedriver@103.0.0...119.0.1) Updates `postcss` from 8.4.14 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.14...8.4.31) Updates `webpack` from 5.73.0 to 5.76.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.73.0...v5.76.0) Updates `@babel/traverse` from 7.18.2 to 7.24.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.7/packages/babel-traverse) Updates `axios` from 0.27.2 to 1.7.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.27.2...v1.7.2) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `semver` from 5.7.1 to 6.3.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v6.3.0) Updates `d3-color` from 3.0.1 to 3.1.0 - [Release notes](https://github.com/d3/d3-color/releases) - [Commits](d3/d3-color@v3.0.1...v3.1.0) Updates `ejs` from 3.1.8 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.8...v3.1.10) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `follow-redirects` from 1.14.9 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.9...v1.15.6) Updates `jpeg-js` from 0.4.2 to 0.4.4 - [Release notes](https://github.com/eugeneware/jpeg-js/releases) - [Commits](jpeg-js/jpeg-js@v0.4.2...v0.4.4) Updates `@jimp/jpeg` from 0.16.1 to 0.16.13 - [Release notes](https://github.com/jimp-dev/jimp/releases) - [Changelog](https://github.com/jimp-dev/jimp/blob/main/CHANGELOG.md) - [Commits](jimp-dev/jimp@v0.16.1...v0.16.13) Updates `jszip` from 2.5.0 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v2.5.0...v3.10.1) Updates `grunt-zip` from 0.18.2 to 1.0.0 - [Changelog](https://github.com/twolfson/grunt-zip/blob/master/CHANGELOG.md) - [Commits](twolfson/grunt-zip@0.18.2...1.0.0) Updates `loader-utils` from 2.0.2 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v2.0.2...v2.0.4) Updates `ws` from 8.5.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.5.0...8.17.1) Updates `ws` from 7.5.7 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.5.0...8.17.1) Updates `webpack-dev-middleware` from 5.3.1 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.1...v5.3.4) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `xml2js` from 0.4.23 to 0.5.0 - [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.5.0) Updates `parse-bmfont-xml` from 1.1.4 to 1.1.6 - [Commits](mattdesl/parse-bmfont-xml@v1.1.4...v1.1.6) --- updated-dependencies: - dependency-name: crypto-js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: jsonwebtoken dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: jsrsasign dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: moment dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: moment-timezone dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: chromedriver dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: d3-color dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jpeg-js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@jimp/jpeg" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: grunt-zip dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-bmfont-xml dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 26 updates in the / directory:
4.1.14.2.02.2.12.2.28.5.19.0.010.5.2311.0.02.29.32.29.40.5.340.5.356.11.36.11.41.0.21.0.33103.0.0119.0.18.4.148.4.315.73.05.76.07.18.27.24.74.2.14.2.33.0.13.1.03.1.83.1.104.17.34.19.20.4.20.4.40.16.10.16.132.5.03.10.10.18.21.0.02.0.22.0.48.5.08.17.17.5.78.17.15.3.15.3.41.2.31.2.50.4.230.5.01.1.41.1.6Updates
crypto-jsfrom 4.1.1 to 4.2.0Commits
808f499Merge branch 'release/4.2.0'd5af3aeUpdate release notes.9496e07Bump version.421dd53Change default hash algorithm and iteration's for PBKDF2 to prevent weak secu...d1f4f4dUpdate grunt.c755289Discontinued1da3dabDiscontinued4dcaa7aMerge pull request #380 from Alanscut/dev762feb2chore: rename BF to Blowfishfb81418feat: blowfish supportUpdates
json5from 2.2.1 to 2.2.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmed720b4fImprove readme (e.g. explain JSON5 better!) (#291)910ce25docs: fix spelling of Aseem2aab4ddtest: require tap as t in cli tests6d42686test: remove mocha syntax from tests4798b9ddocs: update installation and usage for modulesUpdates
jsonwebtokenfrom 8.5.1 to 9.0.0Changelog
Sourced from jsonwebtoken's changelog.
Commits
e1fa9dcMerge pull request from GHSA-8cf7-32gw-wr335eaedbfchore(ci): remove github test actions job (#861)cd4163echore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)ecdf6ccfix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...8345030fix(sign&verify)!: Remove defaultnonesupport fromsignandverifymet...7e6a86bUpload OpsLevel YAML (#849)74d5719docs: update references vercel/ms references (#770)d71e383docs: document "invalid token" error3765003docs: fix spelling in README.md: Peak -> Peek (#754)a46097edocs: make decode impossible to discover before verifyMaintainer changes
This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.
Updates
jsrsasignfrom 10.5.23 to 11.0.0Release notes
Sourced from jsrsasign's releases.
... (truncated)
Changelog
Sourced from jsrsasign's changelog.
... (truncated)
Commits
d73befc11.0.0 release32f73afupdate jsdocdf54d0benhanced support for encrypted PKCS859920c410.8.6 releasec195be810.8.5 release04af7f510.8.4 released67905010.8.3 release97921fb10.8.2 released332357Merge pull request #583 from davedoesdev/master1cfd939Fix OAEP paddingUpdates
momentfrom 2.29.3 to 2.29.4Changelog
Sourced from moment's changelog.
Commits
000ac18Build 2.24.4f2006b6Bump version to 2.24.4536ad0cUpdate changelog for 2.29.49a3b589[bugfix] Fix redos in preprocessRFC2822 regex (#6015)6374fd8Merge branch 'master' into developb4e6153Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"7aebb16[bugfix] Fix redos in preprocessRFC2822 regex (#6015)Updates
moment-timezonefrom 0.5.34 to 0.5.35Release notes
Sourced from moment-timezone's releases.
Changelog
Sourced from moment-timezone's changelog.
Commits
b8fb1baBuild moment-timezone 0.5.35f1b5e5aAdd changelog for 0.5.358b0eb0cBump version to 0.5.357915ac5Bugfix: Prevent cleartext transmission of tz data during buildce955a3Bugfix: Fix command injection vulnerability in grunt tzdata pipeline9430b4cMerge remote-tracking branch 'origin/master' into developfeaf900Updated contributing.md + added 2021e files704cfacupdated contributing.md877c863Updated contributing.md + added 2021e files5a3015cupdated contributing.mdUpdates
protobufjsfrom 6.11.3 to 6.11.4Commits
Updates
ua-parser-jsfrom 1.0.2 to 1.0.33Changelog
Sourced from ua-parser-js's changelog.
Commits
67005e3Update patch version to 1.0.33 as a mirror of 0.7.33f2d0db0Bump version 0.7.33a6140a1Remove unsafe regex in trim() functiona886604Fix #605 - Identify Macintosh as Apple deviceb814bcdMerge pull request #606 from rileyjshaw/patch-17f71024Fix documentationc239ac5Merge pull request #604 from obecerra3/master8d3c2d3Add new browser: Cobalta2b2e80Update patch version to 1.0.32 as a mirror of 0.7.32d11fc47Bump version 0.7.32Updates
chromedriverfrom 103.0.0 to 119.0.1Commits
de961e3Hide private attributes from exports379046eUpdate package dependencies5b708adAdd tests for Node.js version 21c99283dBump version to 119.0.0f6edc1eAdd provenancef43d7f8Make install faster for update check157d419Add token to enable PR09dd5b7Bump version to 118.0.082a6380Fix tag gh action scriptce13f36Bump package version to 117.0.3Maintainer changes
This version was pushed to npm by giggio, a new releaser for chromedriver since your current version.
Updates
postcssfrom 8.4.14 to 8.4.31Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
90208deRelease 8.4.31 version58cc860Fix carrier return parsing4fff8e4Improve pnpm test outputcd43ed1Update dependenciescaa916bUpdate dependencies8972f76Typo11a5286Typo45c5501Release 8.4.30 versionbc3c341Update linterb2be58aMerge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...Updates
webpackfrom 5.73.0 to 5.76.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
97b1718Merge pull request #16781 from askoufis/loader-context-target-typeb84efe6Merge pull request #16759 from ryanwilsonperkin/real-content-hash-regex-perfc98e9e0Merge pull request #16493 from piwysocki/patch-15f34acffeat: AddtargettoLoaderContexttypeb7fc4d8Merge pull request #16703 from ryanwilsonperkin/ryanwilsonperkin/fix-1616063ea82dMerge branch 'webpack:main' into patch-14ba2252Merge pull request #16446 from akhilgkrishnan/patch-11acd635Merge pull request #16613 from jakebailey/ts-logo302eb37Merge pull request #16614 from jakebailey/html5-logocfdb1dfImprove performance of hashRegExp lookupMaintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Updates
@babel/traversefrom 7.18.2 to 7.24.7Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
bf1e9a3v7.24.74463aa5fix: incorrectconstantViolationswith destructuring (#16522)07bd000ImprovegetBindingIdentifiers(#16544)17a5502[Babel 8] Removeextra.shorthand(#16521)7934963Usetype: modulein allpackage.jsons (#16535)9630250v7.24.61f010dfExplicitly defineNodePath.prototype.*(#16488)6e3539b[babel 8] Publish.d.tsfiles for every package (#16416)e37e64dUse eslint v9 (#16479)3ff20b9Statically generate boilerplate for bitfield accessors (#16482)Updates
axiosfrom 0.27.2 to 1.7.2Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.