chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates#3703
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps): bump the npm_and_yarn group across 1 directory with 16 updates#3703dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.6` | | [uuid](https://github.com/uuidjs/uuid) | `11.1.1` | `14.0.0` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.15` | `1.9.16` | | [@sigstore/core](https://github.com/sigstore/sigstore-js) | `3.0.0` | `3.2.1` | | [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.1.0` | `10.2.0` | | [joi](https://github.com/hapijs/joi) | `17.13.3` | `17.13.4` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.2` | `3.15.0` | | [launch-editor](https://github.com/vitejs/launch-editor) | `2.13.2` | `2.14.1` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.5.8` | `7.6.4` | | [qs](https://github.com/ljharb/qs) | `6.15.1` | `6.15.3` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.9.0` | | [sigstore](https://github.com/sigstore/sigstore-js) | `4.0.0` | `4.1.1` | | [tar](https://github.com/isaacs/node-tar) | `7.5.15` | `7.5.19` | | [ws](https://github.com/websockets/ws) | `6.2.3` | `6.2.4` | Updates `@babel/core` from 7.29.0 to 7.29.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) Updates `uuid` from 11.1.1 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v11.1.1...v14.0.0) Updates `@grpc/grpc-js` from 1.9.15 to 1.9.16 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.15...@grpc/grpc-js@1.9.16) Updates `@sigstore/core` from 3.0.0 to 3.2.1 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/core@3.0.0...@sigstore/core@3.2.1) Updates `form-data` from 4.0.5 to 4.0.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0) Updates `joi` from 17.13.3 to 17.13.4 - [Commits](hapijs/joi@v17.13.3...v17.13.4) Updates `js-yaml` from 3.14.2 to 3.15.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.2...3.15.0) Updates `launch-editor` from 2.13.2 to 2.14.1 - [Commits](vitejs/launch-editor@v2.13.2...v2.14.1) Updates `protobufjs` from 7.5.8 to 7.6.4 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.4/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.8...protobufjs-v7.6.4) Updates `qs` from 6.15.1 to 6.15.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.1...v6.15.3) Updates `shell-quote` from 1.8.3 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.9.0) Updates `sigstore` from 4.0.0 to 4.1.1 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.0.0...sigstore@4.1.1) Updates `tar` from 7.5.15 to 7.5.19 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.15...v7.5.19) Updates `ws` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.3...6.2.4) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-version: 1.9.16 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sigstore/core" dependency-version: 3.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: joi dependency-version: 17.13.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.15.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.6.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sigstore dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.19 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 6.2.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-1fbe3dc340
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 16 updates in the / directory:
7.29.07.29.611.1.114.0.01.9.151.9.163.0.03.2.14.0.54.0.64.7.84.7.910.1.010.2.017.13.317.13.43.14.23.15.02.13.22.14.17.5.87.6.46.15.16.15.31.8.31.9.04.0.04.1.17.5.157.5.196.2.36.2.4Updates
@babel/corefrom 7.29.0 to 7.29.6Release notes
Sourced from @babel/core's releases.
... (truncated)
Commits
04ea6b2v7.29.699f498a[7.x packport]Improve input source map handling (#18001)feba0a3Preserve original identifier names from input sourcemaps (#17992) (#17998)Updates
uuidfrom 11.1.1 to 14.0.0Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7c1ea08chore(main): release 14.0.0 (#926)3d2c5b0Merge commit from forkf2c235ffix!: expectcryptoto be global everywhere (requires node@20+) (#935)529ef08chore: upgrade TypeScript and fixup types (#927)086fd79chore: update dependencies (#933)dc4ddb8feat!: drop node@18 support (#934)0f1f9c9chore: switch to Biome for parsing and linting (#932)e2879e6chore: use maintained version of npm-run-all (#930)ffa3138fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)0423d49docs: remove obsolete v1 option notes (#915)Updates
@grpc/grpc-jsfrom 1.9.15 to 1.9.16Release notes
Sourced from @grpc/grpc-js's releases.
Commits
0acbec3Merge pull request #3057 from murgatroid99/grpc-js_1.9.16dc863baMerge commit from fork5174091Merge commit from fork343ef83grpc-js: Bump version to 1.9.16f7d3eecMake compression error a static stringb6dcfc3Fix crashes when receiving malformed compressed data1cf4bfaFix server crash when handling invalid requests1aec8d8Merge pull request #2992 from murgatroid99/grpc-js_fix_buffer_type_1.9.xb9797cfgrpc-js: Declare buffer type to avoid build errorff204f7Merge pull request #2887 from murgatroid99/grpc-js-xds_preserve_type_state_1.9.xUpdates
@sigstore/corefrom 3.0.0 to 3.2.1Release notes
Sourced from @sigstore/core's releases.
Commits
c1dc7d4Version Packages (#1607)f074710reject integratedTime w/o inclusionPromise (#1659)7845532OID certificate extension verification (#1658)b5aa4f1proper utf-8 encoding in DSSE PAE (#1657)c7a34e0clarify cert ID matching (#1656)9858bd7Upgrade TypeScript to 6.x (#1655)8cef20dbump qs from 6.15.1 to 6.15.2 (#1654)aca341bbump@sigstore/mockdeps (#1653)0855acaPin all@swc/coreplatform binaries as optionalDependencies (#1652)44a374dPin all@swc/coreplatform binaries as optionalDependencies (#1650)Updates
form-datafrom 4.0.5 to 4.0.6Changelog
Sourced from form-data's changelog.
Commits
64190dbv4.0.692ae0eb[Deps] updatehasown,mime-typesf31d21e[Dev Deps] update@ljharb/eslint-config,auto-changelog,tape8dff42c[Fix] escape CR, LF, and"in field names and filenames67b0f65[Dev Deps] updatejs-randomness-predictorUpdates
handlebarsfrom 4.7.8 to 4.7.9Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
Commits
dce542cv4.7.98a41389Update release notes68d8df5Fix security issuesb2a0831Fix browser tests9f98c16Fix release script45443b4Revert "Improve partial indenting performance"8841a5fFix CI errors with lintinge0137c2fix: enable shell mode for spawn to resolve Windows EINVAL issuee914d60Improve rendering performance7de4b41Upgrade GitHub Actions checkout and setup-node on 4.x branchUpdates
ip-addressfrom 10.1.0 to 10.2.0Commits
80fccaa10.2.0abaeb4dType Address4.addressMinusSuffix as non-nilable (closes #143)2878c29Preserve subnet prefix through Address6.to4() (closes #123) (#203)586666eReject trailing junk in Address6.fromURL (closes #158) (#202)80bc76eValidate static factories instead of silently overflowing (#201)98927beClarify isValid() accepts CIDRs with host bits set (#81)a0eb073Fix getScope() and broaden getType() classification (closes #122) (#200)ec52105Add networkForm() for CIDR network-address strings (#199)a9443a7Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes #62) (#198)f01d742Add address-property predicates (private, ULA, loopback, link-local, etc.) (#...Updates
joifrom 17.13.3 to 17.13.4Commits
3d3ab7617.13.44bcdf36Merge pull request #3123 from hapijs/chore/backport-311397bd51dchore: backport #3113 to v17Updates
js-yamlfrom 3.14.2 to 3.15.0Changelog
Sourced from js-yaml's changelog.
... (truncated)
Commits
c34b6c43.15.0 released21e13d3dist rebuild4165c62Add v3-legacy tag for publishd8ff750Add package lock24f13e7AddedmaxTotalMergeKeys(10000) loader option (v5 backport)Updates
launch-editorfrom 2.13.2 to 2.14.1Commits
3f97c64v2.14.10cc9550fix: reject UNC paths (#138)afd1ab9ci: run tests on mac and windows (#136)0bfa328test: add some tests for launch-editor package (#135)1b006aechore: add README (#134)383ef26v2.14.06277209ci: harden publish settings520b2f7fix(deps): update all non-major dependencies (#129)475ac66chore(deps): update dependency lint-staged to v17 (#130)247bf1dchore(deps): update dependency yorkie to v2 (#131)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for launch-editor since your current version.
Updates
protobufjsfrom 7.5.8 to 7.6.4Release notes
Sourced from protobufjs's releases.
Changelog
Sourced from protobufjs's changelog.
Commits
f8f64efchore: release protobufjs-v7.x (#2330)574f761fix: Reconfigure and speed up CI (#2329)06ddd07fix: Remove inquire submodule (#2327)1d3796dchore: release protobufjs-v7.x (#2317)df91652fix: Preserve null conversion behavior for fieldless messages (#2312)78a9576fix: Avoid name collisions in generated code (#2311)ec90ef9chore: release protobufjs-v7.x (#2295)a92f72efix: Backport consistency and correctness fixes (#2294)f0b50d2chore: release protobufjs-v7.x (#2268)8a45c13fix: Backport misc utility hardening (#2280)Updates
qsfrom 6.15.1 to 6.15.3Changelog
Sourced from qs's changelog.
Commits
18d085ev6.15.3c38af42[Deps] updateside-channeladce539[Dev Deps] updateeslint,mock-property,tape74a0f6a[Robustness]utils: enforcearrayLimitconsistently acrossmerge's arra...f4938f5[Tests]parse: characterize current lenient handling of unbalanced bracket ...5d5f723[Perf]utils: makecompactO(n) via a side-channel visited-set instead of...52afe00[Robustness]parse: throw thearrayLimiterror before splitting oversized...963e538[Fix]parse: enforcethrowOnLimitExceededfor cumulative array growth via...59da434[Fix]utils: respect encoding of surrogate pairs across chunks9532969[Robustness]utils.merge/utils.assign: avoid invoking__proto__sette...Updates
shell-quotefrom 1.8.3 to 1.9.0Changelog
Sourced from shell-quote's changelog.
Commits
db09fc7v1.9.07ff5488[Fix]parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv)b4bafa2[actions] Windows + node 5/7: install deps with a modern node3fb739d[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3...abe0163[actions] retrynpm installon Windows to survive npm 2/3 staging-rename flake7a76c1a[Fix]quote: escape leading~to prevent shell tilde-expansion75e8497[actions] update workflowsdca6e21[New] add types9aa9e8f[Dev Deps] updateeslint9ba368a[Dev Deps] apparentlyjackspeakis no longer in the graphUpdates
sigstorefrom 4.0.0 to 4.1.1Release notes
Sourced from sigstore's releases.
Commits
c1dc7d4Version Packages (#1607)f074710reject integratedTime w/o inclusionPromise (#1659)7845532OID certificate extension verification (#1658)b5aa4f1proper utf-8 encoding in DSSE PAE (#1657)c7a34e0clarify cert ID matching (#1656)9858bd7Upgrade TypeScript to 6.x (#1655)8cef20dbump qs from 6.15.1 to 6.15.2 (#1654)aca341bbump@sigstore/mockdeps (#1653)0855acaPin all@swc/coreplatform binaries as optionalDependencies (#1652)44a374dPin all@swc/coreplatform binaries as optionalDependencies (#1650)Updates
tarfrom 7.5.15 to 7.5.19Commits
be440da7.5.192812e93add maxDecompressionRatio guard against explosive decompression9ecd4d27.5.189e78bf0refuse to let header size be less than 0e02a4e9pax: parse values according to known types9cbdb317.5.177a635c2terminate pax strings on nul bytescf213387.5.1621a8220do not apply PAX header fields to meta entries