Bump the npm_and_yarn group across 3 directories with 24 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rollup](https://github.com/rollup/rollup) | `3.29.4` | `3.29.5` | | [@adobe/css-tools](https://github.com/adobe/css-tools) | `4.3.1` | `4.4.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.15` | `7.27.0` | | [@koa/cors](https://github.com/koajs/cors) | `4.0.0` | `5.0.0` | | [oidc-provider](https://github.com/panva/node-oidc-provider) | `8.4.0` | `8.8.1` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.1` | `6.0.2` | | [mocha](https://github.com/mochajs/mocha) | `10.2.0` | `10.8.2` | | [axios](https://github.com/axios/axios) | `0.27.2` | `1.8.4` | | [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | `2.0.1` | `2.0.11` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [got](https://github.com/sindresorhus/got) | `9.6.0` | `13.0.0` | | [browserstack-cypress-cli](https://github.com/browserstack/browserstack-cypress-cli) | `1.25.3` | `1.32.7` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `1.8.0` | `6.3.0` | | [ws](https://github.com/websockets/ws) | `8.14.0` | `8.18.1` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `8.18.1` | Bumps the npm_and_yarn group with 1 update in the /examples/nextjs-app directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 3 updates in the /examples/users-api directory: [jose](https://github.com/panva/jose), [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). Updates `rollup` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v3.29.5) Updates `@adobe/css-tools` from 4.3.1 to 4.4.2 - [Changelog](https://github.com/adobe/css-tools/blob/main/History.md) - [Commits](https://github.com/adobe/css-tools/commits) Updates `@babel/traverse` from 7.22.15 to 7.27.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-traverse) Updates `@koa/cors` from 4.0.0 to 5.0.0 - [Changelog](https://github.com/koajs/cors/blob/master/History.md) - [Commits](koajs/cors@4.0.0...5.0.0) Updates `oidc-provider` from 8.4.0 to 8.8.1 - [Release notes](https://github.com/panva/node-oidc-provider/releases) - [Changelog](https://github.com/panva/node-oidc-provider/blob/main/CHANGELOG.md) - [Commits](panva/node-oidc-provider@v8.4.0...v8.8.1) Updates `serialize-javascript` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2) Updates `mocha` from 10.2.0 to 10.8.2 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v10.2.0...v10.8.2) Updates `axios` from 0.27.2 to 1.8.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.27.2...v1.8.4) Updates `start-server-and-test` from 2.0.1 to 2.0.11 - [Release notes](https://github.com/bahmutov/start-server-and-test/releases) - [Commits](bahmutov/start-server-and-test@v2.0.1...v2.0.11) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `follow-redirects` from 1.15.2 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.9) Updates `got` from 9.6.0 to 13.0.0 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v9.6.0...v13.0.0) Updates `browserstack-cypress-cli` from 1.25.3 to 1.32.7 - [Release notes](https://github.com/browserstack/browserstack-cypress-cli/releases) - [Commits](browserstack/browserstack-cypress-cli@v1.25.3...v1.32.7) Updates `jose` from 4.14.6 to 5.10.0 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/v4.15.9/CHANGELOG.md) - [Commits](panva/jose@v4.11.0...v4.15.9) Updates `koa` from 2.14.2 to 2.16.1 - [Release notes](https://github.com/koajs/koa/releases) - [Changelog](https://github.com/koajs/koa/blob/master/History.md) - [Commits](koajs/koa@2.14.2...v2.16.1) Updates `path-to-regexp` from 1.8.0 to 6.3.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v1.8.0...v6.3.0) Updates `ws` from 8.14.0 to 8.18.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.14.0...8.18.1) Updates `ws` from 7.5.9 to 8.18.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.14.0...8.18.1) Updates `tough-cookie` from 2.5.0 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v4.1.3) Updates `next` from 13.0.3 to 14.2.26 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v13.0.3...v14.2.26) Updates `jose` from 4.11.0 to 4.15.9 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/v4.15.9/CHANGELOG.md) - [Commits](panva/jose@v4.11.0...v4.15.9) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v1.8.0...v6.3.0) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `body-parser` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.1...1.20.3) Updates `cookie` from 0.5.0 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.5.0...v0.7.1) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) --- updated-dependencies: - dependency-name: rollup dependency-version: 3.29.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@adobe/css-tools" dependency-version: 4.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.27.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@koa/cors" dependency-version: 5.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: oidc-provider dependency-version: 8.8.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: 6.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-version: 10.8.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.8.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: start-server-and-test dependency-version: 2.0.11 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.15.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-version: 13.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserstack-cypress-cli dependency-version: 1.32.7 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: jose dependency-version: 5.10.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: koa dependency-version: 2.16.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 6.3.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-version: 4.1.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-version: 14.2.26 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: jose dependency-version: 4.15.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 0.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.21.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.21.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Review or Edit in CodeSandboxOpen the branch in Web Editor • VS Code • Insiders |
|
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 14 updates in the / directory:
3.29.43.29.54.3.14.4.27.22.157.27.04.0.05.0.08.4.08.8.16.0.16.0.210.2.010.8.20.27.21.8.42.0.12.0.113.0.23.0.39.6.013.0.01.25.31.32.71.8.06.3.08.14.08.18.17.5.98.18.1Bumps the npm_and_yarn group with 1 update in the /examples/nextjs-app directory: next.
Bumps the npm_and_yarn group with 3 updates in the /examples/users-api directory: jose, path-to-regexp and express.
Updates
rollupfrom 3.29.4 to 3.29.5Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
dfd233d3.29.52ef77c0Fix DOM Clobbering CVEUpdates
@adobe/css-toolsfrom 4.3.1 to 4.4.2Changelog
Sourced from
@adobe/css-tools's changelog.Commits
Updates
@babel/traversefrom 7.22.15 to 7.27.0Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
5c350eav7.27.0582538cAllowtraverseFastto exit early (#17169)4ad63a4[Babel 8] RemoveBLOCK_SCOPED_SYMBOLandNOT_LOCAL_BINDING(#17148)0d0d577fix: Reset child scopes whenscope.crawl()(#17170)c51cffdfeat: AddupToScopeparameter tohasBinding(#17102)f902742chore: Update TS 5.8 (#17185)b1bca3dfix: Uninitialized var declarator in loop marked as constantViolation (#17168)e1ce99dv7.26.1051ec746fix: Should not evaluate vars in child scope (#17151)64bca7bv7.26.9Updates
@koa/corsfrom 4.0.0 to 5.0.0Changelog
Sourced from
@koa/cors's changelog.Commits
c33bd69Release 5.0.0f31dac9Merge pull request from GHSA-qxrj-hx23-xp82Updates
oidc-providerfrom 8.4.0 to 8.8.1Release notes
Sourced from oidc-provider's releases.
... (truncated)
Changelog
Sourced from oidc-provider's changelog.
... (truncated)
Commits
c44aa53chore(release): 8.8.1076ee58docs: update spec linksc6c01f1fix: add "exp" to Logout Tokens4ea264echore: cleanup .github793e07echore: add SECURITY.md6a7040dci: only use dependabot defaults6fffbe1chore(release): 8.8.0e2a2de2feat: mark RFC9701 (features.jwtIntrospection) as stable14da4d2chore(release): 8.7.0d5d2900feat: allow own KeyGrip instances in cookies.keys configurationUpdates
serialize-javascriptfrom 6.0.1 to 6.0.2Release notes
Sourced from serialize-javascript's releases.
Commits
b71ec236.0.2f27d65dfix: serialize URL string contents to prevent XSS (#173)02499c0Bump@babel/traversefrom 7.10.1 to 7.23.7 (#171)0d88527docs: update readme with URL support (#146)e2a3a91chore: update node version and lock file5a1fa64fix typo (#164)Updates
mochafrom 10.2.0 to 10.8.2Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
05097dbchore(main): release 10.8.2 (#5239)14e640edocs: indicate 'exports' interface does not work in browsers (#5181)881e3b0chore: fix docs builds by re-adding eleventy and ignoring gitignore again (#5...f054accfix: test link in html reporter (#5224)e536ab2build(deps): bump the github-actions group with 1 update (#5132)ba0fefefix: support errors with circular dependencies in object values with --parall...f44f71bchore(main): release 10.8.1 (#5238)f72bc17fix: handle case of invalid package.json with no explicit config (#5198)68803b6fix: use accurate test links in HTML reporter (#5228)d8ca270fix: Typos on mochajs.org (#5237)Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
axiosfrom 0.27.2 to 1.8.4Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
9f6f97bchore(release): v1.8.4 (#6844)f10c2e0fix(buildFullPath): handleallowAbsoluteUrls: falsewithoutbaseURL(#6833)1e6632cchore(deps): bump tj-actions/changed-files in the github-actions group (#6838)39ec206chore(release): v1.8.3 (#6819)10fa70efix: add missing type for allowAbsoluteUrls (#6818)7821ef9docs: update readme to include bun install (#6811)ec159e5fix(xhr/fetch): passallowAbsoluteUrlstobuildFullPathinxhrand `fet...a9f7689chore(release): v1.8.2 (#6812)fb8eec2fix(http-adapter): add allowAbsoluteUrls to path building (#6810)9812045chore(sponsor): update sponsor block (#6804)Updates
start-server-and-testfrom 2.0.1 to 2.0.11Release notes
Sourced from start-server-and-test's releases.
... (truncated)
Commits
005ee08fix(deps): update dependency wait-on to v8.0.3 (#400)a514875fix(deps): update dependency wait-on to v8.0.2 (#399)0f057d7fix(deps): update dependency debug to v4.4.0 (#397)fe1c25dfix(deps): update dependency wait-on to v8.0.1d814a72fix(deps): update dependency wait-on to v8 (#386)78c6f53fix(deps): update dependency debug to v4.3.78ebb70bfix(deps): update dependency debug to v4.3.6dd8a2d7fix(deps): update dependency debug to v4.3.5ad35c2efix(deps): update dependency wait-on to v7.2.0 (#374)efe7384fix(deps): update dependency wait-on to v7.1.0Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
follow-redirectsfrom 1.15.2 to 1.15.9Commits
e4e55c7Release version 1.15.9 of the npm package.31a1abfAttempt much more gentle detection.d2aaa97Fix url field.62558f0Release version 1.15.8 of the npm package.a8d1ceeReturn subtlety.458ca8eFix native URL test for Node 20.ca49e44Handle KeepAlive connections in tests.f3711d7Test on Node 20 and 22.fda0fafFix typo.760757fRelease version 1.15.7 of the npm package.Updates
gotfrom 9.6.0 to 13.0.0Release notes
Sourced from got's releases.
... (truncated)
Commits
b1d61c113.0.081447e9Tweaks