Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #8

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 1, 2021

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@ecomplus/application-sdk ^22.0.0-firestore.1.15.5 -> ^22.0.0-firestore.1.15.7 age adoption passing confidence dependencies patch
axios (source) ^0.23.0 -> ^0.29.0 age adoption passing confidence dependencies minor
express (source) ^4.17.1 -> ^4.21.2 age adoption passing confidence dependencies minor
firebase-functions ^3.15.7 -> ^3.24.1 age adoption passing confidence dependencies minor
firebase-tools ^9.20.0 -> ^9.23.3 age adoption passing confidence dependencies minor
node (source) 14 -> 14.21.3 age adoption passing confidence engines minor
uglify-js ^3.14.2 -> ^3.19.3 age adoption passing confidence dependencies minor

Release Notes

ecomplus/application-sdk (@​ecomplus/application-sdk)

v22.0.0-firestore.1.15.7

Compare Source

v22.0.0-firestore.1.15.6

Compare Source

axios/axios (axios)

v0.29.0

Compare Source

Release notes:

Bug Fixes
Contributors to this release

v0.28.1

Compare Source

v0.28.0

Compare Source

Release notes:

Bug Fixes
Backports from v1.x:
  • Allow null indexes on formSerializer and paramsSerializer v0.x (#​4961)
  • Fixing content-type header repeated #​4745
  • Fixed timeout error message for HTTP 4738
  • Added axios.formToJSON method (#​4735)
  • URL params serializer (#​4734)
  • Fixed toFormData Blob issue on node>v17 #​4728
  • Adding types for progress event callbacks #​4675
  • Fixed max body length defaults #​4731
  • Added data URL support for node.js (#​4725)
  • Added isCancel type assert (#​4293)
  • Added the ability for the url-encoded-form serializer to respect the formSerializer config (#​4721)
  • Add string[] to AxiosRequestHeaders type (#​4322)
  • Allow type definition for axios instance methods (#​4224)
  • Fixed AxiosError stack capturing; (#​4718)
  • Fixed AxiosError status code type; (#​4717)
  • Adding Canceler parameters config and request (#​4711)
  • fix(types): allow to specify partial default headers for instance creation (#​4185)
  • Added blob to the list of protocols supported by the browser (#​4678)
  • Fixing Z_BUF_ERROR when no content (#​4701)
  • Fixed race condition on immediate requests cancellation (#​4261)
  • Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance https://github.com/axios/axios/pull/4248
  • Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#​4229)
  • Fix TS definition for AxiosRequestTransformer (#​4201)
  • Use type alias instead of interface for AxiosPromise (#​4505)
  • Include request and config when creating a CanceledError instance (#​4659)
  • Added generic TS types for the exposed toFormData helper (#​4668)
  • Optimized the code that checks cancellation (#​4587)
  • Replaced webpack with rollup (#​4596)
  • Added stack trace to AxiosError (#​4624)
  • Updated AxiosError.config to be optional in the type definition (#​4665)
  • Removed incorrect argument for NetworkError constructor (#​4656)

v0.27.2

Compare Source

Fixes and Functionality:

  • Fixed FormData posting in browser environment by reverting #​3785 (#​4640)
  • Enhanced protocol parsing implementation (#​4639)
  • Fixed bundle size

v0.27.1

Compare Source

Fixes and Functionality:
  • Removed import of url module in browser build due to huge size overhead and builds being broken (#​4594)
  • Bumped follow-redirects to ^1.14.9 (#​4615)

v0.27.0

Compare Source

Breaking changes:
  • New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData (#​3757)
  • Removed functionality that removed the the Content-Type request header when passing FormData (#​3785)
  • (*) Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole (#​3645)
  • Separated responsibility for FormData instantiation between transformRequest and toFormData (#​4470)
  • (*) Improved and fixed multiple issues with FormData support (#​4448)
QOL and DevX improvements:
  • Added a multipart/form-data testing playground allowing contributors to debug changes easily (#​4465)
Fixes and Functionality:
  • Refactored project file structure to avoid circular imports (#​4515) & (#​4516)
  • Bumped follow-redirects to ^1.14.9 (#​4562)
Internal and Tests:
  • Updated dev dependencies to latest version
Documentation:
  • Fixing incorrect link in changelog (#​4551)
Notes:
  • (*) Please read these pull requests before updating, these changes are very impactful and far reaching.

v0.26.1

Compare Source

Fixes and Functionality:
  • Refactored project file structure to avoid circular imports (#​4220)

v0.26.0

Compare Source

Fixes and Functionality:
  • Fixed The timeoutErrorMessage property in config not work with Node.js (#​3581)
  • Added errors to be displayed when the query parsing process itself fails (#​3961)
  • Fix/remove url required (#​4426)
  • Update follow-redirects dependency due to Vulnerability (#​4462)
  • Bump karma from 6.3.11 to 6.3.14 (#​4461)
  • Bump follow-redirects from 1.14.7 to 1.14.8 (#​4473)

v0.25.0

Compare Source

Breaking changes:
  • Fixing maxBodyLength enforcement (#​3786)
  • Don't rely on strict mode behaviour for arguments (#​3470)
  • Adding error handling when missing url (#​3791)
  • Update isAbsoluteURL.js removing escaping of non-special characters (#​3809)
  • Use native Array.isArray() in utils.js (#​3836)
  • Adding error handling inside stream end callback (#​3967)
Fixes and Functionality:
  • Added aborted even handler (#​3916)
  • Header types expanded allowing boolean and number types (#​4144)
  • Fix cancel signature allowing cancel message to be undefined (#​3153)
  • Updated type checks to be formulated better (#​3342)
  • Avoid unnecessary buffer allocations (#​3321)
  • Adding a socket handler to keep TCP connection live when processing long living requests (#​3422)
  • Added toFormData helper function (#​3757)
  • Adding responseEncoding prop type in AxiosRequestConfig (#​3918)
Internal and Tests:
  • Adding axios-test-instance to ecosystem (#​3786)
  • Optimize the logic of isAxiosError (#​3546)
  • Add tests and documentation to display how multiple inceptors work (#​3564)
  • Updating follow-redirects to version 1.14.7 (#​4379)
Documentation:
  • Fixing changelog to show corrext pull request (#​4219)
  • Update upgrade guide for https proxy setting (#​3604)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

v0.24.0

Compare Source

Breaking changes:
  • Revert: change type of AxiosResponse to any, please read lengthy discussion here: (#​4141) pull request: (#​4186)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

expressjs/express (express)

v4.21.2

Compare Source

v4.21.1

Compare Source

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

v4.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

v4.19.2

Compare Source

==========

  • Improved fix for open redirect allow list bypass

v4.19.1

Compare Source

==========

  • Allow passing non-strings to res.location with new encoding handling checks

v4.19.0

Compare Source

v4.18.3

Compare Source

==========

v4.18.2

Compare Source

===================

v4.18.1

Compare Source

===================

  • Fix hanging on large stack of sync routes

v4.18.0

Compare Source

===================

v4.17.3

Compare Source

===================

v4.17.2

Compare Source

===================

firebase/firebase-functions (firebase-functions)

v3.24.1

Compare Source

  • Fix reference docs for performance monitoring.
  • Fix bug where function configuration wil null values couldn't be deployed. (#​1246)

v3.24.0

Compare Source

  • Add performance monitoring triggers to v2 alerts (#​1223).

v3.23.0

Compare Source

  • Fixes a bug that disallowed setting customClaims and/or sessionClaims in blocking functions (#​1199).
  • Add v2 Schedule Triggers (#​1177).

v3.22.0

Compare Source

  • Adds RTDB Triggers for v2 functions (#​1127)
  • Adds support for Firebase Admin SDK v11 (#​1151)
  • Fixes bug where emulated task queue function required auth header (#​1154)

v3.21.2

Compare Source

  • Fixes bug where toJSON was not defined in UserRecord (#​1125).

v3.21.1

Compare Source

  • Add debug feature to enable cors option for v2 onRequest and onCall handlers. (#​1099)

v3.21.0

Compare Source

  • Adds CPU option and enhances internal data structures (#​1077)
  • Add auth blocking handlers (#​1080)
  • Add support for secrets in v2 (#​1079)
  • Update types for AlertPayloads (#​1087)
  • Update AppDistribution [@type] (#​1088)
  • Update CloudEvent types (#​1089)
  • Generate documentation with api-extractor (#​1071)
  • Change type info to be inheritance friendly. (#​1091)
  • Changes the memory options from MB to MiB and GB to GiB for greater clarity (#​1090)

v3.20.1

Compare Source

  • Improve authorization for tasks. (#​1073)

v3.20.0

Compare Source

  • Changes internal structure to be more flexible (#​1070).

v3.19.0

Compare Source

  • Add support for more regions and memory for v2 functions (#​1037).
  • Fixes bug where some RTDB instance names were incorrectly parsed (#​1056).

v3.18.1

Compare Source

  • Expose stack YAML via __/functions.yaml endpoint instead (#​1036).

v3.18.0

Compare Source

  • Add new runtime option for setting secrets.

v3.17.2

Compare Source

  • Fix issue where v2 TS users couldn't compile their code because of unexported types. (#​1033)

v3.17.1

Compare Source

  • Fix issue where TS users couldn't compile their code because of unexported types. (#​1032)

v3.17.0

Compare Source

  • Parallelizes network calls that occur when validating authorization for onCall handlers.
  • Adds new regions to V2 API
  • Fixes bug where the emulator crashed when given app without an options property.
  • Adds new alerting providers

v3.16.0

Compare Source

  • GCS Enhancement
  • Add option to allow callable functions to ignore invalid App Check tokens
  • Add firebase-admin v10 as an allowed peer dependency
  • Fix bug where onCall handler failed to encode returned value with functions
firebase/firebase-tools (firebase-tools)

v9.23.3

Compare Source

  • Upgrades Database Emulator to v4.7.3, removing log4j dependency.

v9.23.2

Compare Source

  • Fixes issue when installing a Firebase Extension where secrets would be created before validation.
  • Fixes issue with filtering on a specific storage bucket using functions in the emulator. (#​3893)
  • Fixes check in Cloud Functions for Firebase initialization to check for API enablement before trying to enable them. (#​2574)
  • No longer tries to clean up function build images from Artifact Registry when Artifact Registry is not enabled. (#​3943)
  • Show error message when running firebase init hosting:github with no Hosting config in firebase.json. (#​3113)
  • Fixes issue where remoteconfig:get was not fetching the latest version by default. (#​3559)
  • Fixes issue where empty variables in .env files would instead read as multi-line values. (#​3934)

v9.23.1

Compare Source

  • Corrects a bug where containers in Artifact Registry would not be deleted if a function has an upper case character in its name (#​3918)
  • Fixes issue where providing the --project flag during init would not be recognized with a default project already set. (#​3870)
  • Fixes issue with setting memory limits for some functions (#​3924)
  • New HTTPS functions only allow secure traffic. (#​3923)
  • No longer default-enable AR and don't send builds to AR unless an experiment is enabled (#​3935)

v9.23.0

Compare Source

  • firebase deploy --only extensions now supports project specifc .env files. When deploying to multiple projects, param values that are different between projects can be put in extensions/${extensionInstanceId}.env.${projectIdOrAlias} and common param values can be put in extensions/${extensionInstanceId}.env.

v9.22.0

Compare Source

  • Adds firebase ext:export command, and adds extensions to firebase deploy. See https://firebase.google.com/docs/extensions/reuse-project-config for more infomation on how to manage your extensions with these commands.
  • Fixes issue where init would crash with multiple Hosting items selected (#​3742).
  • Adds a command (crashlytics:symbols:upload) to upload native symbol files, used in Android NDK crash symbolication.

v9.21.0

Compare Source

  • Fix Auth Emulator deleteTenant not working with Node Admin (#​3817).
  • Fix Crashlytics Android Native Symbols not working on Windows due to ":" in the path (#​3842)
  • Fixes Firestore emulator UI showing requests out of order
nodejs/node (node)

v14.21.3: 2023-02-16, Version 14.21.3 'Fermium' (LTS), @​richardlau

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

  • CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
  • CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.

This security release also includes an npm update for Node.js 14 to address a number
of CVEs which either do not affect Node.js or are low severity in the context of Node.js. You
can get more details for the individual CVEs in
nodejs-dependency-vuln-assessments.

Commits

v14.21.2: 2022-12-13, Version 14.21.2 'Fermium' (LTS), @​richardlau

Compare Source

Notable Changes
OpenSSL 1.1.1s

This update is a bugfix release and does not address any security
vulnerabilities.

Root certificates updated to NSS 3.85

Certificates added:

  • Autoridad de Certificacion Firmaprofesional CIF A626340
  • Certainly Root E1
  • Certainly Root R1
  • D-TRUST BR Root CA 1 2020
  • D-TRUST EV Root CA 1 2020
  • DigiCert TLS ECC P384 Root G5
  • DigiCert TLS RSA4096 Root G5
  • E-Tugra Global Root CA ECC v3
  • E-Tugra Global Root CA RSA v3
  • HiPKI Root CA - G1
  • ISRG Root X2
  • Security Communication ECC RootCA1
  • Security Communication RootCA3
  • Telia Root CA v2
  • vTrus ECC Root CA
  • vTrus Root CA

Certificates removed:

  • Cybertrust Global Root
  • DST Root CA X3
  • GlobalSign Root CA - R2
  • Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f

Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.

Commits

v14.21.1: 2022-11-04, Version 14.21.1 'Fermium' (LTS), @​BethGriggs

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

  • CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.

Commits

v14.21.0: 2022-11-01, Version 14.21.0 'Fermium' (LTS), @​danielleadams

Compare Source

Notable changes
  • deps:
    • update corepack to 0.14.2 (Node.js GitHub Bot) #​44775
  • src:
    • add --openssl-shared-config option (Daniel Bevenius) #​43124
Commits

v14.20.1: 2022-09-23, Version 14.20.1 'Fermium' (LTS), @​bengl

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

Commits

v14.20.0: 2022-07-07, Version 14.20.0 'Fermium' (LTS), @​danielleadams prepared by @​juanarbol

Compare Source

This is a security release.

Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Nov 1, 2021
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9d643a9 to 31105c3 Compare November 4, 2021 19:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 31105c3 to de7efc0 Compare November 19, 2021 00:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from de7efc0 to 211bb25 Compare November 30, 2021 20:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 1463cba to 05f0907 Compare December 13, 2021 02:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 6174e46 to acd7b56 Compare December 17, 2021 04:18
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from acd7b56 to c608a63 Compare March 7, 2022 10:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c608a63 to ac09f47 Compare March 26, 2022 12:55
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ac09f47 to 83c4941 Compare April 24, 2022 21:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 83c4941 to 8fa7ccd Compare May 15, 2022 21:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8fa7ccd to 3734c15 Compare June 18, 2022 22:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3734c15 to 8e0942b Compare September 25, 2022 12:05
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8e0942b to cd5567f Compare November 20, 2022 07:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from cd5567f to a384fa3 Compare February 12, 2024 18:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a384fa3 to 5856e18 Compare February 29, 2024 12:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 88d7a76 to b6d6bbc Compare March 25, 2024 17:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b6d6bbc to 7ca9842 Compare March 28, 2024 17:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7ca9842 to 4483f62 Compare April 14, 2024 12:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4483f62 to 079cb39 Compare June 10, 2024 00:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 079cb39 to 7db6fbd Compare July 17, 2024 14:17
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7db6fbd to f6c0b98 Compare July 28, 2024 13:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f6c0b98 to 5f66b41 Compare August 10, 2024 11:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5f66b41 to fba494a Compare August 29, 2024 16:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from fcecffc to e1ddccf Compare September 12, 2024 01:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e1ddccf to 6f49197 Compare October 8, 2024 23:08
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6f49197 to 5a0530f Compare November 21, 2024 14:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5a0530f to 0983f8c Compare December 6, 2024 01:39
@renovate renovate bot changed the title fix(deps): update all non-major dependencies chore(deps): update node.js to v14.21.3 Dec 8, 2024
@renovate renovate bot changed the title chore(deps): update node.js to v14.21.3 fix(deps): update all non-major dependencies Dec 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants