Bump the npm_and_yarn group across 8 directories with 15 updates #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cookie](https://github.com/jshttp/cookie) | `0.4.1` | `0.7.0` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `10.0.1` | | [postcss](https://github.com/postcss/postcss) | `8.4.33` | `8.4.34` | | [webpack](https://github.com/webpack/webpack) | `5.77.0` | `5.94.0` | | [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) | `0.5.0` | `0.6.0` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` | | [ws](https://github.com/websockets/ws) | `7.4.6` | `7.5.10` | Bumps the npm_and_yarn group with 3 updates in the /build directory: [braces](https://github.com/micromatch/braces), [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [@azure/identity](https://github.com/Azure/azure-sdk-for-js). Bumps the npm_and_yarn group with 2 updates in the /extensions directory: [braces](https://github.com/micromatch/braces) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 3 updates in the /extensions/markdown-language-features directory: [semver](https://github.com/npm/node-semver), [dompurify](https://github.com/cure53/DOMPurify) and [katex](https://github.com/KaTeX/KaTeX). Bumps the npm_and_yarn group with 1 update in the /extensions/markdown-math directory: [katex](https://github.com/KaTeX/KaTeX). Bumps the npm_and_yarn group with 1 update in the /extensions/notebook-renderers directory: [ws](https://github.com/websockets/ws). Bumps the npm_and_yarn group with 3 updates in the /extensions/npm directory: [minimatch](https://github.com/isaacs/minimatch), [braces](https://github.com/micromatch/braces) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 4 updates in the /remote directory: [cookie](https://github.com/jshttp/cookie), [braces](https://github.com/micromatch/braces), [micromatch](https://github.com/micromatch/micromatch) and [semver](https://github.com/npm/node-semver). Updates `cookie` from 0.4.1 to 0.7.0 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.0) Updates `minimatch` from 3.1.2 to 10.0.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v10.0.1) Updates `postcss` from 8.4.33 to 8.4.34 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.33...8.4.34) Updates `webpack` from 5.77.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.77.0...v5.94.0) Updates `xml2js` from 0.5.0 to 0.6.0 - [Commits](Leonidas-from-XIV/node-xml2js@0.5.0...0.6.0) Updates `es5-ext` from 0.10.53 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.64) Updates `terser` from 5.7.1 to 5.36.0 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v5.7.1...v5.36.0) Updates `ws` from 7.4.6 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.10) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `@azure/identity` from 3.4.1 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_3.4.1...@azure/identity_4.2.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `semver` from 7.5.4 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.4...v7.6.3) Updates `dompurify` from 3.0.5 to 3.1.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.0.5...3.1.3) Updates `katex` from 0.16.9 to 0.16.11 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.9...v0.16.11) Updates `katex` from 0.16.9 to 0.16.11 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.9...v0.16.11) Updates `ws` from 8.13.0 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.10) Updates `minimatch` from 5.1.6 to 10.0.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v10.0.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.2 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `cookie` from 0.4.0 to 0.7.0 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `semver` from 7.5.4 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.5.4...v7.6.3) --- updated-dependencies: - dependency-name: cookie dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: katex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: katex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the / directory:
0.4.10.7.03.1.210.0.18.4.338.4.345.77.05.94.00.5.00.6.00.10.530.10.647.4.67.5.10Bumps the npm_and_yarn group with 3 updates in the /build directory: braces, cross-spawn and @azure/identity.
Bumps the npm_and_yarn group with 2 updates in the /extensions directory: braces and micromatch.
Bumps the npm_and_yarn group with 3 updates in the /extensions/markdown-language-features directory: semver, dompurify and katex.
Bumps the npm_and_yarn group with 1 update in the /extensions/markdown-math directory: katex.
Bumps the npm_and_yarn group with 1 update in the /extensions/notebook-renderers directory: ws.
Bumps the npm_and_yarn group with 3 updates in the /extensions/npm directory: minimatch, braces and micromatch.
Bumps the npm_and_yarn group with 4 updates in the /remote directory: cookie, braces, micromatch and semver.
Updates
cookiefrom 0.4.1 to 0.7.0Release notes
Sourced from cookie's releases.
Commits
ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)d6f39b0Fix tests for old node6bb701fRemove failing scorecardca70da4test(serialize): additional tests for name, domain and path RFC validations (...47917c9Iterate whitespace for perf (#170)927d48aAddmaintopackage.json(#166)Maintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
minimatchfrom 3.1.2 to 10.0.1Changelog
Sourced from minimatch's changelog.
... (truncated)
Commits
0569cd310.0.117d31c7rollback to brace-expansion 2, for cjs support346685c10.0.0632e0damodernize, drop old node versions0de7f459.0.5d16b95cwhitespace formattingf09ab67fix: duplicated patterns in second phase preprocess loopd5ef89fdocs: Fix typocb4be489.0.4c091ce2build with tshy, update tapUpdates
postcssfrom 8.4.33 to 8.4.34Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
477b3bbRelease 8.4.34 version25af117Update dependenciesbb0314aMerge pull request #1922 from tim-we/improve-at-rule-types9dd5a93Fix at-rule test8322d11Fix visitor testee7fcd4Fix Document#nodes5e7dde7Remove whitespaces8fda920Add unit testb787a64Remove whitespacese288c8dUpdate AtRule#nodes documentationUpdates
webpackfrom 5.77.0 to 5.94.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
eabf85dchore(release): 5.94.0955e057security: fix DOM clobbering in auto public path9822387test: fixcbb86edtest: fix5ac3d7ffix: unexpected asi generation with sequence expression2411661security: fix DOM clobbering in auto public pathb8c03d4fix: unexpected asi generation with sequence expressionf46a03crevert: do not use heuristic fallback for "module-import"60f1898fix: do not use heuristic fallback for "module-import"66306aaRevert "fix: module-import get fallback from externalsPresets"Updates
xml2jsfrom 0.5.0 to 0.6.0Commits
0e29f0eRelease new versiona25035cRemove old unused files1de4688Merge pull request #680 from Leonidas-from-XIV/zap-dependency-fix3b97ae5Merge pull request #681 from Leonidas-from-XIV/cve-compat-fix167a385Fix zap to be the original dependency5f6620fCompile changed coffeescript code044cfe5Undo API changes from #6037292aa9fix: include missed key check4c8ec89fix: revert incorrectly adapted codead3a297refactor: extract function for key checkUpdates
es5-extfrom 0.10.53 to 0.10.64Release notes
Sourced from es5-ext's releases.
... (truncated)
Changelog
Sourced from es5-ext's changelog.
... (truncated)
Commits
f76b03dchore: Release v0.10.642881acdchore: Bump dependenciesc2e2bb9fix: Revert update meant to fix Powershell issue, as it's a regression16f2b72docs: Fix date in the changelogde4e03cchore: Release v0.10.633fd53b7chore: Upgradelint-stagedto v13bf8ed79chore: Ensure postinstall script does not crash on Windows2cbbb07chore: Bump dependencies22d0416chore: Bump LICENSE yeara52e957fix: Support ES2015+ function definitions infunction#toStringTokens()Updates
terserfrom 5.7.1 to 5.36.0Changelog
Sourced from terser's changelog.
... (truncated)
Commits
0d8891d5.36.0b0ce144update changelogcf3d3e9support import attributeswithsyntax. Closes #1529070a8adupdate changelogcee00a85.35.0142f56aEnsure parent directory exists when using --output on CLI (#1530)97f9619test pull requests2a964a6create an environment variable override to skip using test workers1ae9c77fix(deps): update dependency acorn to v8.13.0 (#1566)107c77afix typo in property name (#1562)Updates
wsfrom 7.4.6 to 7.5.10Release notes
Sourced from ws's releases.
... (truncated)
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)8a78f87[dist] 7.5.90435e6e[security] Fix same host check for ws+unix: redirects4271f07[dist] 7.5.8dc1781b[security] Drop sensitive headers when following insecure redirects2758ed3[fix] Abort the handshake if the Upgrade header is invalida370613[dist] 7.5.71f72e2e[security] Drop sensitive headers when following redirects (#2013)8ecd890[dist] 7.5.6Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
cross-spawnfrom 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)Updates
@azure/identityfrom 3.4.1 to 4.2.1Commits
183d301Upgrade to a version ESRP Release that supports federated auth (#29612)9a2afdf[identity] Prep for release (#29981)3caf203[identity] Prepare identity for May release (#29441)0a69729[core] CHANGELOG date for@azure-rest/core-clientrelease (#29440)88d244aSync eng/common directory with azure-sdk-tools for PR 8158 (#29423)7706373[template-dpg] Suppress build failure (#29437)769c1b1[EngSys] Update name of@azure-tools/test-utilsNO_CI8cd5bc2[core] New multipart/form-data primitive in core-client-rest (#29047)73b9faa[identity] Add changelog entry for MSALClient migration (#29419)b8e63a5Post release automated changes for notificationhubs releases (#29431)Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for
@azure/identitysince your current version.Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
micromatchfrom 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
semverfrom 7.5.4 to 7.6.3Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
0a12d6cchore: release 7.6.3 (#720)73a3d79fix: optimize Range parsing and formatting (#726)2975ecedocs: fix extra backtick typo (#719)eb1380bchore: release 7.6.2 (#714)6466ba9fix(lru): use map.delete() directly (#713)d777418chore: release 7.6.1 (#706)988a8dedeps: uninstalllru-cache(