This repository was archived by the owner on Jan 8, 2026. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 10
Bump the npm_and_yarn group across 2 directories with 19 updates #14
Open
dependabot
wants to merge
1
commit into
main
Choose a base branch
from
dependabot/npm_and_yarn/serverless/npm_and_yarn-c5f77dad57
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Bump the npm_and_yarn group across 2 directories with 19 updates #14
dependabot
wants to merge
1
commit into
main
from
dependabot/npm_and_yarn/serverless/npm_and_yarn-c5f77dad57
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 10 updates in the /serverless directory: | Package | From | To | | --- | --- | --- | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.6` | `2.6.7` | | [vm2](https://github.com/patriksimek/vm2) | `3.9.5` | `3.9.19` | | [webpack](https://github.com/webpack/webpack) | `5.65.0` | `5.94.0` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.16.5` | `7.25.6` | | [eventsource](https://github.com/EventSource/eventsource) | `1.1.0` | `1.1.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.6` | `1.15.6` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `1.4.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [urijs](https://github.com/medialize/URI.js) | `1.19.7` | `1.19.11` | Bumps the npm_and_yarn group with 9 updates in the /wrangler directory: | Package | From | To | | --- | --- | --- | | [webpack](https://github.com/webpack/webpack) | `5.66.0` | `5.94.0` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.16.8` | `7.25.6` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [moment](https://github.com/moment/moment) | `2.29.1` | `2.29.4` | | [got](https://github.com/sindresorhus/got) | `12.0.1` | `12.1.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [engine.io](https://github.com/socketio/engine.io) | `6.1.1` | `6.5.5` | | [socket.io](https://github.com/socketio/socket.io) | `4.4.1` | `4.7.5` | Updates `node-fetch` from 2.6.6 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7) Updates `vm2` from 3.9.5 to 3.9.19 - [Release notes](https://github.com/patriksimek/vm2/releases) - [Changelog](https://github.com/patriksimek/vm2/blob/master/CHANGELOG.md) - [Commits](patriksimek/vm2@3.9.5...3.9.19) Updates `webpack` from 5.65.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.65.0...v5.94.0) Updates `@babel/traverse` from 7.16.5 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `eventsource` from 1.1.0 to 1.1.2 - [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md) - [Commits](EventSource/eventsource@v1.1.0...v1.1.2) Updates `follow-redirects` from 1.14.6 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.6...v1.15.6) Updates `loader-utils` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.0...v1.4.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `terser` from 5.10.0 to 5.31.6 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/commits) Updates `urijs` from 1.19.7 to 1.19.11 - [Release notes](https://github.com/medialize/URI.js/releases) - [Changelog](https://github.com/medialize/URI.js/blob/gh-pages/CHANGELOG.md) - [Commits](medialize/URI.js@v1.19.7...v1.19.11) Updates `webpack` from 5.66.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.65.0...v5.94.0) Updates `@babel/traverse` from 7.16.8 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `terser` from 5.10.0 to 5.31.6 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/commits) Updates `moment` from 2.29.1 to 2.29.4 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.29.1...2.29.4) Updates `got` from 12.0.1 to 12.1.0 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v12.0.1...v12.1.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `engine.io` from 6.1.1 to 6.5.5 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/6.5.5/CHANGELOG.md) - [Commits](socketio/engine.io@6.1.1...6.5.5) Updates `socket.io` from 4.4.1 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/4.7.5/CHANGELOG.md) - [Commits](socketio/socket.io@4.4.1...4.7.5) Updates `socket.io` from 4.4.1 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/4.7.5/CHANGELOG.md) - [Commits](socketio/socket.io@4.4.1...4.7.5) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `ws` from 8.2.3 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.2.3...8.17.1) --- updated-dependencies: - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vm2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eventsource dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: urijs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: got dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the /serverless directory:
2.6.62.6.73.9.53.9.195.65.05.94.07.16.57.25.61.1.01.1.21.14.61.15.61.4.01.4.23.0.43.1.21.2.51.2.81.19.71.19.11Bumps the npm_and_yarn group with 9 updates in the /wrangler directory:
5.66.05.94.07.16.87.25.61.0.11.0.21.2.51.2.82.29.12.29.412.0.112.1.03.0.23.0.36.1.16.5.54.4.14.7.5Updates
node-fetchfrom 2.6.6 to 2.6.7Release notes
Sourced from node-fetch's releases.
Commits
1ef4b56backport of #1449 (#1453)8fe5c4e2.x: Specify encoding as an optional peer dependency in package.json (#1310)Updates
vm2from 3.9.5 to 3.9.19Release notes
Sourced from vm2's releases.
... (truncated)
Changelog
Sourced from vm2's changelog.
... (truncated)
Commits
1663f23Release 3.9.19cfa3fc6Fix resolver issue2f446e5Release 3.9.18587bb13Add tests for past vulnerabilitiesf5a129aMerge branch 'master' of https://github.com/patriksimek/vm2dd81ff6Merge pull request #519 from XmiliaH/resolver-apiaf983a8Merge remote-tracking branch 'upstream/master' into resolver-api5206ba2Inspect method should be readonlyd88105fEnsure host array does not leak through proxy4d662e3Merge pull request #521 from ulixee/pathContextUpdates
webpackfrom 5.65.0 to 5.94.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
eabf85dchore(release): 5.94.0955e057security: fix DOM clobbering in auto public path9822387test: fixcbb86edtest: fix5ac3d7ffix: unexpected asi generation with sequence expression2411661security: fix DOM clobbering in auto public pathb8c03d4fix: unexpected asi generation with sequence expressionf46a03crevert: do not use heuristic fallback for "module-import"60f1898fix: do not use heuristic fallback for "module-import"66306aaRevert "fix: module-import get fallback from externalsPresets"Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Updates
@babel/traversefrom 7.16.5 to 7.25.6Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
2f72b97v7.25.6faceae9fix:path.getAssignmentIdentifiersmay beundefined(#16727)46ee612Remove someNodePathmethods (#16655)2fdc8b5fix: Generate sequence expression parentheses correctly (#16764)cbf124cv7.25.42b289fbfix: skip computed key when renaming (#16756)575863cAvoid unnecessary parens around sequence expressions (#16722)5174ad1Clean all always enabled parser plugins (#16572)52718abDiscontinue babel-eslint-config-internal (#16718)dba45d3IgnoredevDependencieswhen generatingtsconfig.json(#16659)Updates
eventsourcefrom 1.1.0 to 1.1.2Changelog
Sourced from eventsource's changelog.
Commits
0a8b85b1.1.2f99ae66docs: update history for 1.1.206c9721chore: rebuild polyfill9494642fix: inline origin resolution, droporiginaldependency (#281)aa7a4081.1.156d489echore: rebuild polyfill4a951e5docs: update history for 1.1.1f9f6416fix: strip sensitive headers on redirect to different originUpdates
follow-redirectsfrom 1.14.6 to 1.15.6Commits
35a517cRelease version 1.15.6 of the npm package.c4f847fDrop Proxy-Authorization across hosts.8526b4aUse GitHub for disclosure.b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.Updates
loader-utilsfrom 1.4.0 to 1.4.2Release notes
Sourced from loader-utils's releases.
Changelog
Sourced from loader-utils's changelog.
Commits
331ad50chore(release): 1.4.217cbf8ffix: ReDoS problem (#226)8f082b3chore(release): 1.4.14504e34fix: security problem (#220)Updates
minimatchfrom 3.0.4 to 3.1.2Commits
699c4593.1.22f2b5fffix: trim pattern25d7c0d3.1.155dda29fix: treat nocase:true as always having magic5e1fb8d3.1.0f8145c5Add 'allowWindowsEscape' option570e8b1add publishConfig for v3 publishes5b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' optionUpdates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
terserfrom 5.10.0 to 5.31.6Changelog
Sourced from terser's changelog.
... (truncated)
Commits
Updates
urijsfrom 1.19.7 to 1.19.11Release notes
Sourced from urijs's releases.
Changelog
Sourced from urijs's changelog.
Commits
b655c1bchore(build): bumping to version 1.19.11b0c9796fix(parse): handle CR,LF,TAB88805fdfix(parse): handle excessive slashes in scheme-relative URLs926b2aachore(build): bumping to version 1.19.10a8166fefix(parse): handle excessive colons in scheme delimiter01920b5chore(build): bumping to version 1.19.986d1052fix(parse): remove leading whitespaceefae1e5chore(build): bumping to version 1.19.86ea641cfix(parse): case insensitive scheme - #412Updates
webpackfrom 5.66.0 to 5.94.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
eabf85dchore(release): 5.94.0955e057security: fix DOM clobbering in auto public path9822387test: fixcbb86edtest: fix5ac3d7ffix: unexpected asi generation with sequence expression2411661security: fix DOM clobbering in auto public pathb8c03d4fix: unexpected asi generation with sequence expressionf46a03crevert: do not use heuristic fallback for "module-import"60f1898fix: do not use heuristic fallback for "module-import"66306aaRevert "fix: module-import get fallback from externalsPresets"Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Updates
@babel/traversefrom 7.16.8 to 7.25.6Release notes
Sourced from
@babel/traverse's releases.