This repository was archived by the owner on Feb 21, 2024. It is now read-only.
Bump the npm_and_yarn group across 1 directories with 20 updates #10
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 13 updates in the /. directory: | Package | From | To | | --- | --- | --- | | [karma](https://github.com/karma-runner/karma) | `1.7.1` | `6.3.16` | | [semver](https://github.com/npm/node-semver) | `5.4.1` | `5.7.2` | | [semver](https://github.com/npm/node-semver) | `5.3.0` | `5.7.2` | | [gulp](https://github.com/gulpjs/gulp) | `3.9.1` | `4.0.2` | | [debug](https://github.com/debug-js/debug) | `2.6.8` | `2.6.9` | | [gulp-connect](https://github.com/avevlad/gulp-connect) | `4.2.0` | `5.7.0` | | [mocha](https://github.com/mochajs/mocha) | `3.5.3` | `10.3.0` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.2` | `1.2.13` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `1.7.3` | `` | | [prop-types](https://github.com/facebook/prop-types) | `15.6.0` | `15.8.1` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `15.6.2` | `18.2.0` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `15.6.2` | `18.2.0` | | [postcss](https://github.com/postcss/postcss) | `5.2.18` | `8.4.35` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `0.23.1` | `6.10.0` | Updates `karma` from 1.7.1 to 6.3.16 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@1.7.1...v6.3.16) Updates `semver` from 5.4.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.4.1...v5.7.2) Updates `semver` from 5.3.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.4.1...v5.7.2) Updates `gulp` from 3.9.1 to 4.0.2 - [Release notes](https://github.com/gulpjs/gulp/releases) - [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md) - [Commits](gulpjs/gulp@v3.9.1...v4.0.2) Updates `debug` from 2.6.8 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.6.8...2.6.9) Updates `gulp-connect` from 4.2.0 to 5.7.0 - [Release notes](https://github.com/avevlad/gulp-connect/releases) - [Commits](avevlad/gulp-connect@v4.2.0...5.7.0) Updates `mocha` from 3.5.3 to 10.3.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v3.5.3...v10.3.0) Updates `ms` from 0.7.1 to 2.0.0 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@0.7.1...2.0.0) Updates `engine.io` from 1.8.3 to 6.5.4 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@1.8.3...6.5.4) Updates `fsevents` from 1.1.2 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.2...v1.2.13) Updates `minimatch` from 0.2.14 to 3.0.4 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v0.2.14...v3.0.4) Updates `qs` from 4.0.0 to 6.4.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v4.0.0...v6.4.0) Updates `lodash` from 1.0.2 to 3.10.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@1.0.2...3.10.1) Removes `node-fetch` Updates `prop-types` from 15.6.0 to 15.8.1 - [Changelog](https://github.com/facebook/prop-types/blob/main/CHANGELOG.md) - [Commits](facebook/prop-types@v15.6.0...v15.8.1) Updates `react` from 15.6.2 to 18.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v18.2.0/packages/react) Updates `react-dom` from 15.6.2 to 18.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v18.2.0/packages/react-dom) Updates `postcss` from 5.2.18 to 8.4.35 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/commits/8.4.35) Updates `css-loader` from 0.23.1 to 6.10.0 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/css-loader@v0.23.1...v6.10.0) Updates `socket.io-parser` from 2.3.1 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@2.3.1...4.2.4) Updates `ua-parser-js` from 0.7.17 to 0.7.37 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@0.7.17...0.7.37) --- updated-dependencies: - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: gulp dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: gulp-connect dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: ms dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: prop-types dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: react dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: react-dom dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: css-loader dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 13 updates in the /. directory:
1.7.16.3.165.4.15.7.25.3.05.7.23.9.14.0.22.6.82.6.94.2.05.7.03.5.310.3.01.1.21.2.131.7.315.6.015.8.115.6.218.2.015.6.218.2.05.2.188.4.350.23.16.10.0Updates
karmafrom 1.7.1 to 6.3.16Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
ab4b328chore(release): 6.3.16 [skip ci]ff7edbbfix(security): mitigate the "Open Redirect Vulnerability"c1befa0chore(release): 6.3.15 [skip ci]d9dade2fix(helper): make mkdirIfNotExists helper resilient to concurrent calls653c762ci: prevent duplicate CI tasks on creating a PRc97e562chore(release): 6.3.14 [skip ci]91d5acdfix: remove string template from client code69cfc76fix: warn whensingleRunandautoWatcharefalse839578cfix(security): remove XSS vulnerability inreturnUrlquery paramdb53785chore(release): 6.3.13 [skip ci]Updates
semverfrom 5.4.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313chore: release 5.7.22f8fd41fix: better handling of whitespace (#585)deb5ad5chore:@npmcli/template-oss@4.16.0c83c18c5.7.1956e228Correct typo in README8055dda5.7.0604e73dauto-publishing scriptsbed01e2remove the nomin comments, since we don't minify any more anyway9cb68f1document parse method38d42ca5.7 changelogMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
semverfrom 5.3.0 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313chore: release 5.7.22f8fd41fix: better handling of whitespace (#585)deb5ad5chore:@npmcli/template-oss@4.16.0c83c18c5.7.1956e228Correct typo in README8055dda5.7.0604e73dauto-publishing scriptsbed01e2remove the nomin comments, since we don't minify any more anyway9cb68f1document parse method38d42ca5.7 changelogMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
gulpfrom 3.9.1 to 4.0.2Release notes
Sourced from gulp's releases.
... (truncated)
Changelog
Sourced from gulp's changelog.
Commits
069350aRelease: 4.0.2b4b5a68Build: Add node 12 to Travis & Azure5667666Fix: Bind src/dest/symlink to the gulp instance to support esm exports (ref s...4091bd3Docs: Add notes about esm support (closes #2278)3c66d95Docs: Fix the Negative Globs section & examples (closes #2297)1693a11Docs: Remove next tag from recipes (closes #2277)d916276Docs: Add default task wrappers to Watching Files examples to make runnable (...ea52a92Docs: Fix syntax error in lastRun API docs (closes #2315)5d81f42Docs: Fix typo in Explaining Globs (#2326)ea3bba4Release: 4.0.1Updates
debugfrom 2.6.8 to 2.6.9Release notes
Sourced from debug's releases.
Changelog
Sourced from debug's changelog.
Commits
13abeaeRelease 2.6.9f53962eremove ReDoS regexp in %o formatter (#504)Updates
gulp-connectfrom 4.2.0 to 5.7.0Release notes
Sourced from gulp-connect's releases.
Commits
e3210c5Update package.json8a2bcbbMerge pull request #261 from dbemiller/master0718031Replaced event-stream with map-stream.6274d62Add support for pfx keys when using https as an object (#218)aa10ee35.6.1a80e3e5Merge pull request #257 from rejas/update_dependenciesc6034b8Cleanup test fileedcfba8Update ansi-colors package429068dOnly test supported node versions2055d29Undo typescript update to avoid breaking testsUpdates
mochafrom 3.5.3 to 10.3.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
a886829chore: fix link in pull request template (#5091)53a4bafchore: remove unnecessary canvas dependency (#5069)1ebff45chore: inline nyan reporter's write function (#5056)8812413fix: add alt text to Built with Netlify badge (#5068)645469edocs: touchups to labels and a template title post-revamp (#5050)9f99178docs: overhaul contributing and maintenance docs for end-of-year 2023 (#5038)eca4fecdocs: fix return jsdoc type oftitlePath(#4886)060f77ddocs: use mocha.js instead of mocha in the example run (#4927)4b60c1adocs: fix fragment ID for yargs.jsextendsdocs (#4918)b41e985chore: remove stale workflow (#5029)Maintainer changes
This version was pushed to npm by joshuakgoldberg, a new releaser for mocha since your current version.
Updates
msfrom 0.7.1 to 2.0.0Release notes
Sourced from ms's releases.
... (truncated)
Commits
9b88d152.0.094b995cInvalidated cache for slack badgebcf5715Bumped dependencies to the latest versionb1eaab7Ignored logs coming from npmcaae298Limit str to 100 to avoid ReDoS of 0.3s (#89)b83b36dchore(package): update eslint to version 3.19.0 (#88)3f2a4d7chore(package): update husky to version 0.13.3 (#86)7daf9841.0.0ee91f30More suitable name for file containing testse818c35Removed browser testingMaintainer changes
This version was pushed to npm by leo, a new releaser for ms since your current version.
Updates
engine.iofrom 1.8.3 to 6.5.4Release notes
Sourced from engine.io's releases.
... (truncated)
Changelog
Sourced from engine.io's changelog.
... (truncated)
Commits
ff0fbfbchore(release): 6.5.409acb17ci: add Node.js 20 in the test matrix39937f8refactor: minor cleanups43c1c1crefactor: simplify code3b5e79erefactor: remove useless referencesf27a6c3refactor: remove useless reference2da559achore(release): 6.5.39545b44refactor: add cache-control header in the polling responseff1c861fix(webtransport): properly handle abruptly closed connectionsc6bf8c0fix: improve compatibility with node16 module resolution (#689)Updates
fseventsfrom 1.1.2 to 1.2.13Release notes
Sourced from fsevents's releases.
Commits
844a05dVersion Bumpf393f2aOnly build fsevents on macOS (#322)6a281a7[publish binary]acc2bce[publish binary]f532b6e[publish binary]4c6a1c0Add node 13 to travis matrix.92e40aaRelease 1.2.12.