Skip to content

Bump the npm_and_yarn group with 10 updates#2

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-579b2f8dce
Open

Bump the npm_and_yarn group with 10 updates#2
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-579b2f8dce

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Aug 21, 2024

Bumps the npm_and_yarn group with 10 updates:

Package From To
lodash 3.10.1 4.17.21
react 0.13.3 18.3.1
superagent 1.8.5 10.0.2
validator 4.9.0 13.12.0
ecstatic 1.4.1 4.1.4
karma 0.13.22 6.4.4
node-sass 3.3.3 9.0.0
npm 3.10.10 10.8.2
phantomjs 1.9.20 2.1.7
webpack-dev-server 1.16.5 5.0.4

Updates lodash from 3.10.1 to 4.17.21

Release notes

Sourced from lodash's releases.

4.0.0

lodash v4.0.0

2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!

The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.

For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!

Modern only

With v4 we’re breaking free from old projects, old environments, & dropping old IE < 9 support!

4 kB Core

Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.

More ES6

We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).

In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.

More Modular

Pop quiz! 📣

What category path does the bindAll method belong to? Is it

A) require('lodash/function/bindAll') B) require('lodash/utility/bindAll') C) require('lodash/util/bindAll')

Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as

var bindAll = require('lodash/bindAll');

We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!

1st Class FP

With v3 we introduced lodash-fp. We learned a lot & with v4 we decided to pull it into core.

Now you can get immutable, auto-curried, iteratee-first, data-last methods as simply as

var _ = require('lodash/fp');
var object = { 'a': 1 };
</tr></table>

... (truncated)

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
  • 3469357 Prevent command injection through _.template's variable option
  • ded9bc6 Bump to v4.17.20.
  • 63150ef Documentation fixes.
  • 00f0f62 test.js: Remove trailing comma.
  • 846e434 Temporarily use a custom fork of lodash-cli.
  • 5d046f3 Re-enable Travis tests on 4.17 branch.
  • aa816b3 Remove /npm-package.
  • d7fbc52 Bump to v4.17.19
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.


Updates react from 0.13.3 to 18.3.1

Release notes

Sourced from react's releases.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874

18.2.0 (June 14, 2022)

React DOM

React DOM Server

  • Pass information about server errors to the client. (@​salazarm and @​gnoff in #24551 and #24591)
  • Allow to provide a reason when aborting the HTML stream. (@​gnoff in #24680)
  • Eliminate extraneous text separators in the HTML where possible. (@​gnoff in #24630)
  • Disallow complex children inside <title> elements to match the browser constraints. (@​gnoff in #24679)
  • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@​jplhomer in #24641)

Server Components (Experimental)

18.1.0 (April 26, 2022)

React DOM

... (truncated)

Changelog

Sourced from react's changelog.

18.3.1 (April 26, 2024)

  • Export act from react f1338f

18.3.0 (April 25, 2024)

This release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.

Read the React 19 Upgrade Guide for more info.

React

  • Allow writing to this.refs to support string ref codemod 909071
  • Warn for deprecated findDOMNode outside StrictMode c3b283
  • Warn for deprecated test-utils methods d4ea75
  • Warn for deprecated Legacy Context outside StrictMode 415ee0
  • Warn for deprecated string refs outside StrictMode #25383
  • Warn for deprecated defaultProps for function components #25699
  • Warn when spreading key #25697
  • Warn when using act from test-utils d4ea75

React DOM

  • Warn for deprecated unmountComponentAtNode 8a015b
  • Warn for deprecated renderToStaticNodeStream #28874

18.2.0 (June 14, 2022)

React DOM

React DOM Server

  • Pass information about server errors to the client. (@​salazarm and @​gnoff in #24551 and #24591)
  • Allow to provide a reason when aborting the HTML stream. (@​gnoff in #24680)
  • Eliminate extraneous text separators in the HTML where possible. (@​gnoff in #24630)
  • Disallow complex children inside <title> elements to match the browser constraints. (@​gnoff in #24679)
  • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@​jplhomer in #24641)

Server Components (Experimental)

18.1.0 (April 26, 2022)

React DOM

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by react-bot, a new releaser for react since your current version.


Updates superagent from 1.8.5 to 10.0.2

Release notes

Sourced from superagent's releases.

v10.0.2

forwardemail/superagent@v10.0.1...v10.0.2

v10.0.1

  • Merge pull request #1813 from yigaldviri/re2 edf0986
  • remove re2 dependency 6039f56

forwardemail/superagent@v10.0.0...v10.0.1

v10.0.0

  • fix: remove husky from prepare 18321c5
  • chore: fixpack 0085aba
  • chore: fix tinyify version efae48c
  • Merge pull request #1812 from yigaldviri/brotli de9d760
  • feat(brotli): support brotli compression format 5ab6b88

forwardemail/superagent@v9.0.2...v10.0.0

v9.0.2

  • Merge pull request #1803 from alumni/fix-url-parse 329cc63
  • fix: replace deprecated url.parse() with new URL() 8ead63f
  • Merge pull request #1804 from alumni/remove-semver 9406dae
  • chore: remove unnecessary semver checks 86c9bf4
  • Merge pull request #1802 from alumni/fix-url-parse e996382
  • fix: replace deprecated node:url methods 7e20ced

forwardemail/superagent@v9.0.1...v9.0.2

v9.0.1

  • Merge pull request #1796 from mmmmmrob/patch-2 68f7bb1
  • Merge branch &#39;master&#39; into patch-2 450f7b2
  • Merge pull request #1794 from SukkaW/replace-polyfill-io ea633d7
  • Merge pull request #1791 from HannesOberreiter/patch-1 e334068
  • Update README.md a5c39b2
  • Add superagent-cheerio to the readme 0165c7c
  • docs: no longer recommend polyfill.io da9ff20
  • Update README.md c4205e0

forwardemail/superagent@v9.0.0...v9.0.1

v9.0.0

  • fix: fixed ci job not installing npm deps 489708e
  • fix: fix numeric identifier issue ea2577e
  • fix: drop support for node < v14.18.0 due to formidable node:fs scope import statement (per #1800) 23fe5ab
  • Merge pull request #1800 from tomstrong64/master 03de30c
  • fix: formidable v3 multipart form contents mapped to expected format b9c7837
  • Update formidable 3ee138d
  • test: replace should with node:assert (#1782) 1c8338b

... (truncated)

Changelog

Sourced from superagent's changelog.

This HISTORY log is deprecated

Please see GitHub releases page for the current changelog.

4.1.0 (2018-12-26)

  • .connect() IP/DNS override option (Kornel)
  • .trustLocalhost() option for allowing broken HTTPS on localhost
  • .abort() used with promises rejects the promise.

4.0.0 (2018-11-17)

Breaking changes

  • Node.js v4 has reached it's end of life, so we no longer support it. It's v6+ or later. We recommend Node.js 10.
  • We now use ES6 in the browser code, too.
    • If you're using Browserify or Webpack to package code for Internet Explorer, you will also have to use Babel.
    • The pre-built node_modules/superagent.js is still ES5-compatible.
  • .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead.
  • In Node, responses with unknown MIME type are buffered by default. To get old behavior, if you use custom unbuffered parsers, add .buffer(false) to requests or set superagent.buffer[yourMimeType] = false.
  • Invalid uses of .pipe() throw.

Minor changes

  • Throw if req.abort().end() is called
  • Throw if using unsupported mix of send and field
  • Reject .end() promise on all error events (Kornel Lesiński)
  • Set https.servername from the Host header (Kornel Lesiński)
  • Leave backticks unencoded in query strings where possible (Ethan Resnick)
  • Update node-mime to 2.x (Alexey Kucherenko)
  • Allow default buffer settings based on response-type (shrey)
  • response.buffered is more accurate.

3.8.3 (2018-04-29)

  • Add flags for 201 & 422 responses (Nikhil Fadnis)
  • Emit progress event while uploading Node Buffer via send method (Sergey Akhalkov)
  • Fixed setting correct cookies for redirects (Damien Clark)
  • Replace .catch with ['catch'] for IE9 Support (Miguel Stevens)

3.8.2 (2017-12-09)

  • Fixed handling of exceptions thrown from callbacks
  • Stricter matching of +json MIME types.

3.8.1 (2017-11-08)

  • Clear authorization header on cross-domain redirect

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by titanism, a new releaser for superagent since your current version.


Updates validator from 4.9.0 to 13.12.0

Release notes

Sourced from validator's releases.

13.12.0

What's Changed

New Features / Validators

Fixes, New Locales and Enhancements

New Contributors

... (truncated)

Changelog

Sourced from validator's changelog.

13.12.0

New Features / Validators

Fixes, New Locales and Enhancements

13.11.0

New Features / Validators

Fixes, New Locales and Enhancements

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by profnandaa, a new releaser for validator since your current version.


Updates ecstatic from 1.4.1 to 4.1.4

Release notes

Sourced from ecstatic's releases.

4.1.4

broken action

4.1.3

People are hollerin' about a CVE so

Commits

Updates karma from 0.13.22 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

6.4.2 (2023-04-21)

Bug Fixes

6.4.1 (2022-09-19)

Bug Fixes

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

... (truncated)

Commits
  • 84f85e7 chore(release): 6.4.4 [skip ci]
  • a4d1284 build(deps-dev): bump ws from 6.2.1 to 6.2.3
  • d8cf806 chore(release): 6.4.3 [skip ci]
  • d7f2d69 fix: add build commits for patch release
  • 85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
  • 0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
  • 86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
  • 450fdfd docs: Add deprecation notice to Karma README
  • 9de3c00 chore(release): 6.4.2 [skip ci]
  • c6a4271 fix: few typos
  • Additional commits viewable in compare view

Updates node-sass from 3.3.3 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Changelog

Sourced from node-sass's changelog.

v4.14.0

https://github.com/sass/node-sass/releases/tag/v4.14.0

v4.13.1

https://github.com/sass/node-sass/releases/tag/v4.13.1

v4.13.0

https://github.com/sass/node-sass/releases/tag/v4.13.0

v4.12.0

https://github.com/sass/node-sass/releases/tag/v4.12.0

v4.11.0

https://github.com/sass/node-sass/releases/tag/v4.11.0

v4.10.0

https://github.com/sass/node-sass/releases/tag/v4.10.0

v4.9.4

https://github.com/sass/node-sass/releases/tag/v4.9.4

v4.9.3

https://github.com/sass/node-sass/releases/tag/v4.9.3

v4.9.2

https://github.com/sass/node-sass/releases/tag/v4.9.2

v4.9.1

https://github.com/sass/node-sass/releases/tag/v4.9.1

v4.9.0

https://github.com/sass/node-sass/releases/tag/v4.9.0

v4.8.3

https://github.com/sass/node-sass/releases/tag/v4.8.3

v4.8.2

... (truncated)

Commits

Updates npm from 3.10.10 to 10.8.2

Release notes

Sourced from npm's releases.

libnpmhook: v10.0.5

10.0.5 (2024-05-15)

Dependencies

Chores

libnpmhook: v10.0.4

10.0.4 (2024-04-30)

Bug Fixes

Dependencies

libnpmhook: v10.0.3

10.0.3 (2024-04-25)

Dependencies

libnpmhook: v10.0.2

@dependabot
Bump the npm_and_yarn group with 10 updates
8727904 
Bumps the npm_and_yarn group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [lodash](https://github.com/lodash/lodash) | `3.10.1` | `4.17.21` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `0.13.3` | `18.3.1` |
| [superagent](https://github.com/ladjs/superagent) | `1.8.5` | `10.0.2` |
| [validator](https://github.com/validatorjs/validator.js) | `4.9.0` | `13.12.0` |
| [ecstatic](https://github.com/jfhbrook/node-ecstatic) | `1.4.1` | `4.1.4` |
| [karma](https://github.com/karma-runner/karma) | `0.13.22` | `6.4.4` |
| [node-sass](https://github.com/sass/node-sass) | `3.3.3` | `9.0.0` |
| [npm](https://github.com/npm/cli) | `3.10.10` | `10.8.2` |
| [phantomjs](https://github.com/Medium/phantomjs) | `1.9.20` | `2.1.7` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `1.16.5` | `5.0.4` |


Updates `lodash` from 3.10.1 to 4.17.21
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@3.10.1...4.17.21)

Updates `react` from 0.13.3 to 18.3.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v18.3.1/packages/react)

Updates `superagent` from 1.8.5 to 10.0.2
- [Release notes](https://github.com/ladjs/superagent/releases)
- [Changelog](https://github.com/ladjs/superagent/blob/master/HISTORY.md)
- [Commits](https://github.com/ladjs/superagent/commits/v10.0.2)

Updates `validator` from 4.9.0 to 13.12.0
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](validatorjs/validator.js@4.9.0...13.12.0)

Updates `ecstatic` from 1.4.1 to 4.1.4
- [Release notes](https://github.com/jfhbrook/node-ecstatic/releases)
- [Changelog](https://github.com/jfhbrook/node-ecstatic/blob/master/CHANGELOG.md)
- [Commits](jfhbrook/node-ecstatic@1.4.1...4.1.4)

Updates `karma` from 0.13.22 to 6.4.4
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@v0.13.22...v6.4.4)

Updates `node-sass` from 3.3.3 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@3.3.3...v9.0.0)

Updates `npm` from 3.10.10 to 10.8.2
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v3.10.10...v10.8.2)

Updates `phantomjs` from 1.9.20 to 2.1.7
- [Release notes](https://github.com/Medium/phantomjs/releases)
- [Commits](Medium/phantomjs@v1.9.20...v2.1.7)

Updates `webpack-dev-server` from 1.16.5 to 5.0.4
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v1.16.5...v5.0.4)

---
updated-dependencies:
- dependency-name: lodash
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: react
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: superagent
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: validator
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ecstatic
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: karma
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: node-sass
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: npm
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: phantomjs
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-server
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants