chore(deps): bump the npm_and_yarn group across 4 directories with 15 updates #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
… updates Bumps the npm_and_yarn group with 12 updates in the /console directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `16.2.5` | `16.2.6` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.3` | `1.9.15` | | [async](https://github.com/caolan/async) | `3.2.4` | `3.2.5` | | [axios](https://github.com/axios/axios) | `1.6.1` | `1.7.2` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.2` | `1.15.6` | | [socket.io](https://github.com/socketio/socket.io) | `4.6.1` | `4.7.5` | | [tar](https://github.com/isaacs/node-tar) | `6.1.14` | `6.2.1` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | Bumps the npm_and_yarn group with 1 update in the /docs directory: [postcss](https://github.com/postcss/postcss). Bumps the npm_and_yarn group with 4 updates in the /e2e directory: [async](https://github.com/caolan/async), [axios](https://github.com/axios/axios), [tough-cookie](https://github.com/salesforce/tough-cookie) and [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken). Bumps the npm_and_yarn group with 1 update in the /load-test directory: [braces](https://github.com/micromatch/braces). Updates `@angular/core` from 16.2.5 to 16.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/16.2.6/packages/core) Updates `@grpc/grpc-js` from 1.9.3 to 1.9.15 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `async` from 3.2.4 to 3.2.5 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.4...v3.2.5) Updates `axios` from 1.6.1 to 1.7.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.1...v1.7.2) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `follow-redirects` from 1.15.2 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.6) Updates `socket.io` from 4.6.1 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/4.7.5/CHANGELOG.md) - [Commits](socketio/socket.io@4.6.1...4.7.5) Updates `tar` from 6.1.14 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.14...v6.2.1) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `postcss` from 8.4.38 to 8.4.39 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.4.39) Updates `async` from 3.2.4 to 3.2.5 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.4...v3.2.5) Updates `axios` from 1.6.8 to 1.7.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.1...v1.7.2) Updates `tough-cookie` from 4.1.3 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.3...v4.1.4) Updates `jsonwebtoken` from 8.5.1 to 9.0.0 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsonwebtoken dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/console/npm_and_yarn-af6bc5c724
branch
from
f46e54c
to
fb362be
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the /console directory:
16.2.516.2.61.9.31.9.153.2.43.2.51.6.11.7.23.0.23.0.33.1.93.1.104.18.24.19.21.15.21.15.64.6.14.7.56.1.146.2.15.3.35.3.47.5.97.5.10Bumps the npm_and_yarn group with 1 update in the /docs directory: postcss.
Bumps the npm_and_yarn group with 4 updates in the /e2e directory: async, axios, tough-cookie and jsonwebtoken.
Bumps the npm_and_yarn group with 1 update in the /load-test directory: braces.
Updates
@angular/corefrom 16.2.5 to 16.2.6Release notes
Sourced from
@angular/core's releases.Changelog
Sourced from
@angular/core's changelog.Commits
03127fcrefactor(core): ensure reactive node constants are considered pure (#51809) (...3b46066refactor: ensure top-level symbols are marked as side-effect free (#51776)7b40d74refactor(core): let reactive node prototypes conform to their type (#51722) (...82712f8fix(core): ensure a consumer drops all its stale producers (#51722) (#51772)Updates
@grpc/grpc-jsfrom 1.9.3 to 1.9.15Release notes
Sourced from
@grpc/grpc-js's releases.Commits
08b0422Merge pull request from GHSA-7v5v-9h63-cj86c75e048grpc-js: Bump to 1.9.15d5d62b4grpc-js: Avoid buffering significantly more than max_receive_message_size per...02d0344Merge pull request #2741 from sergiitk/backport-1.9-psm-interop-common-prod-t...cf14020Merge pull request #2729 from sergiitk/psm-interop-common-prod-testsda44229Merge pull request #2738 from murgatroid99/backport-1.9-grpc-js_linkify-it_fix5ae7c8cMerge pull request #2735 from murgatroid99/grpc-js_linkify-it_fixeed21baMerge pull request #2714 from sergiitk/backport-1.9-psm-interop-pkg-dev63763a4Merge pull request #2712 from sergiitk/psm-interop-pkg-dev5be83ddMerge pull request #2643 from murgatroid99/grpc-js_idle_timer_fixUpdates
asyncfrom 3.2.4 to 3.2.5Changelog
Sourced from async's changelog.
Commits
87e94e6Version 3.2.544ed0fbUpdate built filesaf02a3dwork around compiler quirk3c7a711path to config file91fd894requireConfigFile: false0412f8dEnsure error objects are propagated without modification (#1920)ab3c56aUpdate .eslintrc.json to use es20218610499Run lint on node 20ffd4cfbRun coverage on node 20253f5dcUpdate Node version matrix in CIUpdates
axiosfrom 1.6.1 to 1.7.2Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
0e4f9fachore(release): v1.7.2 (#6414)4f79aeffix(fetch): enhance fetch API detection; (#6413)67d1373chore(release): v1.7.1 (#6411)733f15ffix(fetch): fixed ReferenceError issue when TextEncoder is not available in t...3041c61[Release] v1.7.0 (#6408)18b13cbchore(docs): add fetch adapter docs; (#6407)e62099bfix(fetch): fixed a possible memory leak in the AbortController for the strea...b49aa8echore(release): v1.7.0-beta.2 (#6403)d57f03achore(ci): bump create-pull-request version to fix a bug; (#6405)097b0d1chore(ci): add tag resolution for npm releases based on package version; (#6404)Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
ejsfrom 3.1.9 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807dVersion 3.1.109ee26ddMocha TDDe469741Basic pollution protection715e950Merge pull request #756 from Jeffrey-mu/maincabe314Include advanced usage examples29b076cAdded header11503c7Merge branch 'main' of github.com:mde/ejs into main7690404Added security banner to READMEf47d7aeUpdate SECURITY.md828cea1Update SECURITY.mdUpdates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
follow-redirectsfrom 1.15.2 to 1.15.6Commits
35a517cRelease version 1.15.6 of the npm package.c4f847fDrop Proxy-Authorization across hosts.8526b4aUse GitHub for disclosure.b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.Updates
socket.iofrom 4.6.1 to 4.7.5Release notes
Sourced from socket.io's releases.
... (truncated)
Changelog
Sourced from socket.io's changelog.
... (truncated)
Commits
5017681chore(release): 4.7.5bf64870fix: close the adapters when the server is closed748e18cci: test with older TypeScript versionb9ce6a2refactor: create specific adapter for parent namespaces (#4950)54dabe5ci: upgrade to actions/checkout@4 and actions/setup-node@4e426f3efix: remove duplicate pipeline when serving bundlee36062cdocs: update the webtransport example0bbe8aedocs: only execute the passport middleware once914a8bddocs: add example with JWTd943c3edocs: update the Passport.js exampleUpdates
tarfrom 6.1.14 to 6.2.1Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
webpack-dev-middlewarefrom 5.3.3 to 5.3.4Release notes
Sourced from webpack-dev-middleware's releases.
Changelog
Sourced from webpack-dev-middleware's changelog.
Commits
86071eachore(release): 5.3.4189c4acfix(security): do not allow to read files above (#1779)Updates
wsfrom 7.5.9 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
postcssfrom 8.4.38 to 8.4.39Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
e0efb16Release 8.4.39 version48304c5Update dependencies155ac57Merge pull request #1947 from romainmenke/fix-css-syntax-error-type--reliable...1b9b466fix CssSyntaxError type declaration3f4d96eUpdate dependenciesb952be7Update CI actionsb512b29Typof9a9868Move to pnpm 9 and Node.js 2279052c2Merge pull request #1940 from Xvezda/patch-10eedad4Update changed urlsUpdates
asyncfrom 3.2.4 to 3.2.5Changelog
Sourced from async's changelog.
Commits
87e94e6Version 3.2.544ed0fbUpdate built filesaf02a3dwork around compiler quirk3c7a711path to config file91fd894requireConfigFile: false0412f8dEnsure error objects are propagated without modification (#1920)ab3c56aUpdate .eslintrc.json to use es20218610499Run lint on node 20ffd4cfbRun coverage on node 20253f5dcUpdate Node version matrix in CIUpdates
axiosfrom 1.6.8 to 1.7.2Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.