Bump the npm_and_yarn group across 1 directory with 43 updates#12
Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
Closed
Bump the npm_and_yarn group across 1 directory with 43 updates#12dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps the npm_and_yarn group with 25 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.18.1` | `0.28.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [acorn](https://github.com/acornjs/acorn) | `6.1.0` | `6.4.2` | | [ajv](https://github.com/ajv-validator/ajv) | `6.9.2` | `6.12.6` | | [ansi-html](https://github.com/Tjatse/ansi-html) | `0.0.7` | `removed` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `3.10.1` | `3.11.3` | | [browserslist](https://github.com/browserslist/browserslist) | `4.4.2` | `4.23.1` | | [color-string](https://github.com/Qix-/color-string) | `1.5.3` | `1.9.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [dns-packet](https://github.com/mafintosh/dns-packet) | `1.3.1` | `1.3.4` | | [dot-prop](https://github.com/sindresorhus/dot-prop) | `4.2.0` | `4.2.1` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.1` | `6.5.5` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.5.10` | `1.15.6` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.7` | `1.2.13` | | [html-minifier](https://github.com/kangax/html-minifier) | `3.5.21` | `removed` | | [laravel-mix](https://github.com/JeffreyWay/laravel-mix) | `4.1.4` | `6.0.49` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.2.3` | `1.4.2` | | [object-path](https://github.com/mariocasciaro/object-path) | `0.9.2` | `removed` | | [resolve-url-loader](https://github.com/bholloway/resolve-url-loader/tree/HEAD/packages/resolve-url-loader) | `2.3.2` | `5.0.0` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [request](https://github.com/request/request) | `2.88.0` | `removed` | | [@alpacahq/alpaca-trade-api](https://github.com/alpacahq/alpaca-trade-api-js) | `1.2.7` | `3.0.1` | | [semver](https://github.com/npm/node-semver) | `5.6.0` | `5.7.2` | | [websocket-extensions](https://github.com/faye/websocket-extensions-node) | `0.1.3` | `0.1.4` | Updates `axios` from 0.18.1 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.18.1...v0.28.0) Updates `lodash` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `acorn` from 6.1.0 to 6.4.2 - [Commits](acornjs/acorn@6.1.0...6.4.2) Updates `ajv` from 6.9.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.9.2...v6.12.6) Removes `ansi-html` Updates `webpack-dev-server` from 3.10.1 to 3.11.3 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/v3.11.3/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.10.1...v3.11.3) Updates `async` from 1.5.2 to 2.6.2 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.2/CHANGELOG.md) - [Commits](caolan/async@v1.5.2...v2.6.2) Updates `browserslist` from 4.4.2 to 4.23.1 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.4.2...4.23.1) Updates `color-string` from 1.5.3 to 1.9.1 - [Release notes](https://github.com/Qix-/color-string/releases) - [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md) - [Commits](https://github.com/Qix-/color-string/commits/1.9.1) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `dns-packet` from 1.3.1 to 1.3.4 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v1.3.4) Updates `dot-prop` from 4.2.0 to 4.2.1 - [Release notes](https://github.com/sindresorhus/dot-prop/releases) - [Commits](sindresorhus/dot-prop@v4.2.0...v4.2.1) Updates `elliptic` from 6.4.1 to 6.5.5 - [Commits](indutny/elliptic@v6.4.1...v6.5.5) Updates `eventsource` from 1.0.7 to 2.0.2 - [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md) - [Commits](EventSource/eventsource@v1.0.7...v2.0.2) Updates `express` from 4.16.4 to 4.17.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.4...4.17.1) Updates `follow-redirects` from 1.5.10 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.5.10...v1.15.6) Updates `fsevents` from 1.2.7 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.7...v1.2.13) Removes `html-minifier` Updates `laravel-mix` from 4.1.4 to 6.0.49 - [Release notes](https://github.com/JeffreyWay/laravel-mix/releases) - [Changelog](https://github.com/laravel-mix/laravel-mix/blob/master/CHANGELOG.md) - [Upgrade guide](https://github.com/laravel-mix/laravel-mix/blob/master/UPGRADE.md) - [Commits](https://github.com/JeffreyWay/laravel-mix/commits) Updates `http-proxy` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.17.0...1.18.1) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `loader-utils` from 1.2.3 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v1.4.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 0.0.8 to 0.2.4 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v0.2.4) Updates `node-forge` from 0.7.5 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.7.5...v1.3.1) Updates `node-notifier` from 5.4.0 to 9.0.1 - [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md) - [Commits](mikaelbr/node-notifier@v5.4.0...v9.0.1) Updates `nth-check` from 1.0.2 to 2.1.1 - [Release notes](https://github.com/fb55/nth-check/releases) - [Commits](fb55/nth-check@v1.0.2...v2.1.1) Removes `object-path` Updates `resolve-url-loader` from 2.3.2 to 5.0.0 - [Release notes](https://github.com/bholloway/resolve-url-loader/releases) - [Changelog](https://github.com/bholloway/resolve-url-loader/blob/v5/packages/resolve-url-loader/CHANGELOG.md) - [Commits](https://github.com/bholloway/resolve-url-loader/commits/5.0.0/packages/resolve-url-loader) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `postcss` from 6.0.23 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@6.0.23...8.4.38) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Removes `request` Updates `@alpacahq/alpaca-trade-api` from 1.2.7 to 3.0.1 - [Release notes](https://github.com/alpacahq/alpaca-trade-api-js/releases) - [Commits](alpacahq/alpaca-trade-api-js@v1.2.7...v3.0.1) Updates `semver` from 5.6.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.6.0...v5.7.2) Updates `serialize-javascript` from 1.6.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v1.6.1...v6.0.2) Updates `set-value` from 0.4.3 to 2.0.1 - [Commits](jonschlinkert/set-value@0.4.3...2.0.1) Updates `sockjs` from 0.3.19 to 0.3.24 - [Release notes](https://github.com/sockjs/sockjs-node/releases) - [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog) - [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24) Updates `terser` from 3.16.1 to 4.8.1 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v3.16.1...v4.8.1) Updates `webpack-dev-middleware` from 3.6.0 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.6.0...v5.3.4) Updates `websocket-extensions` from 0.1.3 to 0.1.4 - [Changelog](https://github.com/faye/websocket-extensions-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-extensions-node@0.1.3...0.1.4) Updates `y18n` from 4.0.0 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...v5.0.8) Updates `yargs-parser` from 10.1.0 to 21.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v10.1.0...yargs-parser-v21.1.1) --- updated-dependencies: - dependency-name: axios dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-html dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserslist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: color-string dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dot-prop dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eventsource dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: html-minifier dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: laravel-mix dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: http-proxy dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-notifier dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nth-check dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: object-path dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: resolve-url-loader dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: request dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@alpacahq/alpaca-trade-api" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: set-value dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sockjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: websocket-extensions dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
|
Superseded by #14. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 25 updates in the / directory:
0.18.10.28.04.17.154.17.216.1.06.4.26.9.26.12.60.0.7removed3.10.13.11.34.4.24.23.11.5.31.9.10.2.00.2.21.3.11.3.44.2.04.2.16.4.16.5.51.5.101.15.61.2.71.2.133.5.21removed4.1.46.0.491.0.11.0.21.2.31.4.20.9.2removed2.3.25.0.06.5.26.5.32.88.0removed1.2.73.0.15.6.05.7.20.1.30.1.4Updates
axiosfrom 0.18.1 to 0.28.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
3b7635a[Release] v0.28.0 (#6211)27c0076feat(backport): added ability for paramsSerializer to handle function; (#6227)80c3d74chore(ci): backported publish action; (#6224)2755df5fix(security): fixed CVE-2023-45857 by backportingwithXSRFTokenoption to ...880b42edocs: Fix a typo in READMEc4bf0a4Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)1e2679ffix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...80b546cfix: loosing request header (#4858) (#4871)6acb5effeat: brower platform add data protocol. (#4814)bbb2264fix(typing): axios response headers can be undefined (#4813)Maintainer changes
This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.
Updates
lodashfrom 4.17.15 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
acornfrom 6.1.0 to 6.4.2Commits
f6b83edMark version 6.4.2f51895bFix potentially-exponential regular expression in use-strict-scanning9a2e9b6Mark version 6.4.190a9548More rigorously check surrogate pairs in regexp validatordf0cf1aMark version 6.4.05303412Also export Parser via Parser.acornefe273egive token types and etc to pluginsac6decbMark version 6.3.07e9817dAllow sourceType: module even with ecmaVersion < 6e2b8cc0Fix broken parsing of new expressions when allowReserved=="never"Updates
ajvfrom 6.9.2 to 6.12.6Release notes
Sourced from ajv's releases.
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...Removes
ansi-htmlUpdates
webpack-dev-serverfrom 3.10.1 to 3.11.3Release notes
Sourced from webpack-dev-server's releases.
... (truncated)
Changelog
Sourced from webpack-dev-server's changelog.
... (truncated)
Commits
aa3cddcchore(release): 3.11.34fef67bfix: replaceansi-htmlwithansi-html-community(#4011)5cb545fchore(release): 3.11.2a5fe337fix: cli arguments forservecommand7e70eeechore(release): 3.11.178dde50fix: vulnerable deps (#2949)4837dc9fix: theopenoption works usingwebpack servewithout value (#2948)4ab1f21chore(release): 3.11.00e51fb1fix: invalidate route (#2584)f857c40chore: deps and testsUpdates
asyncfrom 1.5.2 to 2.6.2Release notes
Sourced from async's releases.
... (truncated)
Changelog
Sourced from async's changelog.
... (truncated)
Commits
eaf32beVersion 2.6.2684b42eUpdate built filese1bd3daupdate changelog140a335fix: update lodash to squelch security warning (#1620)5ed3df1Version 2.6.1e5d7148Update built files7e84a4fupdate changelog2ba8d0cupdate deps per npm auditd28b725Merge pull request #1533 from chrisdukakis/update-lodash5f6f3d9update lodash-es to match lodash@4.17Updates
browserslistfrom 4.4.2 to 4.23.1Release notes
Sourced from browserslist's releases.
Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
edd5309Release 4.23.1 version9e8ca3dSimplify codebbe6821Update locka36e1adUpdate ESLint and dependencies4424c96Use pnpm 9 for Node.js 20 and 182185077Add Node.js 22 to CIf78f90cMove to pnpm 9ed723f7Fix feature queries with mobile to desktop when caniuse lags latest release (...c6ddf7b📝 Fix typos in README.md (#822)a23d971Release 4.23 versionUpdates
color-stringfrom 1.5.3 to 1.9.1Release notes
Sourced from color-string's releases.
... (truncated)
Commits
Updates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
dns-packetfrom 1.3.1 to 1.3.4Commits
ebdf8491.3.4ac57872move all allocUnsafes to allocs for easier maintenancec64c9501.3.30598ba1fix .. in encodingLength010aedb1.3.20d0d593backport encodingLength fix to v1Updates
dot-propfrom 4.2.0 to 4.2.1Release notes
Sourced from dot-prop's releases.
Commits
c914124feat: patch 4.2.0 with fixes for CVE-2020-8116Updates
ellipticfrom 6.4.1 to 6.5.5Commits
7570078Description has been truncated