Bump the npm_and_yarn group across 4 directories with 22 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 14 updates in the /docusaurus/website directory: | Package | From | To | | --- | --- | --- | | [bl](https://github.com/rvagg/bl) | `1.2.2` | `1.2.3` | | [css-what](https://github.com/fb55/css-what) | `2.1.0` | `2.1.3` | | [express](https://github.com/expressjs/express) | `4.16.3` | `4.19.2` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [lodash.merge](https://github.com/lodash/lodash) | `4.6.1` | `4.6.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.17.21` | | [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [prismjs](https://github.com/PrismJS/prism) | `1.15.0` | `1.29.0` | | [remarkable](https://github.com/jonschlinkert/remarkable) | `1.7.1` | `1.7.4` | | [set-getter](https://github.com/doowb/set-getter) | `0.1.0` | `0.1.1` | | [url-parse](https://github.com/unshiftio/url-parse) | `1.4.3` | `1.5.10` | | [websocket-extensions](https://github.com/faye/websocket-extensions-node) | `0.1.3` | `0.1.4` | Bumps the npm_and_yarn group with 1 update in the /packages/create-react-app directory: [semver](https://github.com/npm/node-semver). Bumps the npm_and_yarn group with 3 updates in the /packages/react-dev-utils directory: [browserslist](https://github.com/browserslist/browserslist), [shell-quote](https://github.com/ljharb/shell-quote) and [loader-utils](https://github.com/webpack/loader-utils). Bumps the npm_and_yarn group with 2 updates in the /packages/react-scripts directory: [react-dev-utils](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-dev-utils) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server). Updates `bl` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/rvagg/bl/releases) - [Changelog](https://github.com/rvagg/bl/blob/master/CHANGELOG.md) - [Commits](rvagg/bl@v1.2.2...v1.2.3) Updates `css-what` from 2.1.0 to 2.1.3 - [Release notes](https://github.com/fb55/css-what/releases) - [Commits](fb55/css-what@v2.1.0...v2.1.3) Updates `express` from 4.16.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.3...4.19.2) Updates `hosted-git-info` from 2.7.1 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.7.1...v2.8.9) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `lodash.merge` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits) Updates `lodash` from 4.17.11 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Updates `mixin-deep` from 1.3.1 to 1.3.2 - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `prismjs` from 1.15.0 to 1.29.0 - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/master/CHANGELOG.md) - [Commits](PrismJS/prism@v1.15.0...v1.29.0) Updates `qs` from 6.5.1 to 6.5.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.1...v6.5.2) Updates `remarkable` from 1.7.1 to 1.7.4 - [Release notes](https://github.com/jonschlinkert/remarkable/releases) - [Changelog](https://github.com/jonschlinkert/remarkable/blob/master/CHANGELOG.md) - [Commits](jonschlinkert/remarkable@1.7.1...v1.7.4) Updates `set-getter` from 0.1.0 to 0.1.1 - [Commits](https://github.com/doowb/set-getter/commits/0.1.1) Updates `underscore` from 1.7.0 to 1.9.1 - [Commits](jashkenas/underscore@1.7.0...1.9.1) Updates `url-parse` from 1.4.3 to 1.5.10 - [Commits](unshiftio/url-parse@1.4.3...1.5.10) Updates `websocket-extensions` from 0.1.3 to 0.1.4 - [Changelog](https://github.com/faye/websocket-extensions-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-extensions-node@0.1.3...0.1.4) Updates `semver` from 5.5.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.5.1...v5.7.2) Updates `browserslist` from 4.1.1 to 4.16.5 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.1.1...4.16.5) Updates `shell-quote` from 1.6.1 to 1.7.3 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.7.3) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `react-dev-utils` from 6.1.1 to 12.0.1 - [Release notes](https://github.com/facebook/create-react-app/releases) - [Changelog](https://github.com/facebook/create-react-app/blob/main/CHANGELOG-1.x.md) - [Commits](https://github.com/facebook/create-react-app/commits/[email protected]/packages/react-dev-utils) Updates `webpack-dev-server` from 3.1.9 to 3.1.11 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.1.9...v3.1.11) --- updated-dependencies: - dependency-name: bl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: css-what dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash.merge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mixin-deep dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: prismjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: remarkable dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: set-getter dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: url-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: websocket-extensions dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: browserslist dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: react-dev-utils dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 14 updates in the /docusaurus/website directory:
1.2.21.2.32.1.02.1.34.16.34.19.22.7.12.8.91.3.51.3.84.6.14.6.24.17.114.17.211.3.11.3.21.0.61.0.71.15.01.29.01.7.11.7.40.1.00.1.11.4.31.5.100.1.30.1.4Bumps the npm_and_yarn group with 1 update in the /packages/create-react-app directory: semver.
Bumps the npm_and_yarn group with 3 updates in the /packages/react-dev-utils directory: browserslist, shell-quote and loader-utils.
Bumps the npm_and_yarn group with 2 updates in the /packages/react-scripts directory: react-dev-utils and webpack-dev-server.
Updates
blfrom 1.2.2 to 1.2.3Commits
d69edfd1.2.3847473atest all branches0bd87ecFix unintialized memory accessdc097f3test newer versions of NodeUpdates
css-whatfrom 2.1.0 to 2.1.3Commits
2db00ca2.1.3dc51092fix(css-selectors): extend regex to include superscript in range, fix #27 (#28)a5f1991Test on node LTSb2a21172.1.2e9ef3f1Run prettier070b2f8Add remaining parsed outputs (#25)af801e4update license references to match license file (#23)2d495d0Update to node 10 in .travis.yml (#22)c636f0dAllow escaped parentheses in pseudo selectors (#20)4e255c9Update .travis.ymlUpdates
expressfrom 4.16.3 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
hosted-git-infofrom 2.7.1 to 2.8.9Changelog
Sourced from hosted-git-info's changelog.
... (truncated)
Commits
8d4b369chore(release): 2.8.929adfe5fix: backport regex fix from #76afeaefdchore(release): 2.8.85038b18fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...7440afachore(release): 2.8.72d0bb66fix: Do not attempt to use url.URL when unavailablef2cdfcffix: Do not pass scp-style URLs to the WhatWG url.URLe1b83dfchore(release): 2.8.6ff259a6Ensure passwords in hosted Git URLs are correctly escaped624fd6fchore(release): 2.8.5Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.
Updates
inifrom 1.3.5 to 1.3.8Commits
a2c5da81.3.8af5c6bbDo not use Object.create(null)8b648a1don't test where our devdeps don't even workc74c8af1.3.7024b8b5update deps, add linting032fbafUse Object.create(null) to avoid default object property hazards2da90391.3.6cfea636better git push script, before publish instead of after56d2805do not allow invalid hazardous string as section nameMaintainer changes
This version was pushed to npm by isaacs, a new releaser for ini since your current version.
Updates
lodash.mergefrom 4.6.1 to 4.6.2Commits
Updates
lodashfrom 4.17.11 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
mixin-deepfrom 1.3.1 to 1.3.2Commits
754f0c21.3.290ee1faensure keys are valid when mixing in valuesMaintainer changes
This version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.
Updates
path-parsefrom 1.0.6 to 1.0.7Commits
Updates
prismjsfrom 1.15.0 to 1.29.0Release notes
Sourced from prismjs's releases.
Changelog
Sourced from prismjs's changelog.
... (truncated)
Commits
59e5a341.29.0cd080f2Updated npmignore to include new MD files (#3534)751664bAdded PR stop notice (#3532)248f6abAdded changelog for v1.29.0 (#3533)098e300Line Highlight: Account for offset when clamping ranges (#3518)6b824d4Bash: Added "sh" alias (#3509)15272f7Website: Added third-party tutorial for Pug template (#3459)c8462a2Cilk: Add support for Cilk (with C/C++) (#3522)859f99aAdded bqn language support (#3515)0cad9aeBBj: Improve regexes (#3512)Maintainer changes
This version was pushed to npm by rundevelopment, a new releaser for prismjs since your current version.
Updates
qsfrom 6.5.1 to 6.5.2Changelog
Sourced from qs's changelog.
Commits
eaabd05v6.5.29a73e55[Dev Deps] updatebrowserify,eslint,iconv-lite,safer-buffer29477ba[Dev Deps] updateeslint,tape,browserify73b3732[Fix] usesafer-bufferinstead ofBufferconstructor037f368[Dev Deps] updateeslint9dcec60[Dev Deps] updateeslint,iconv-lite6f0586fChange exports usageUpdates
remarkablefrom 1.7.1 to 1.7.4Changelog
Sourced from remarkable's changelog.
... (truncated)
Commits
85abd88v1.7.46217c5dUpgrade argparse #3497d98b94v1.7.3c688aa5Build umd152e378Add prepublish hookaaa807av1.7.2287dfbfPrevent a ReDoS vulnerability (#335)49e87b7fix: disallow ascii control characters in URLs (#334)232a554Merge pull request #345 from TrySound/coveragefb7bc09Enable coverage via nycMaintainer changes
This version was pushed to npm by trysound, a new releaser for remarkable since your current version.
Updates
set-getterfrom 0.1.0 to 0.1.1Commits
Updates
underscorefrom 1.7.0 to 1.9.1Commits
ae037f7Underscore.js 1.9.15a55dd1Fixes #2741. _.first() and _.last() should return an empty array when request...3cd55eaMerge pull request #2672 from captbaritone/foo34cabf5Merge pull request #2725 from josephlin55555/master6a71dafMerge pull request #2728 from okkez/fix-typoc3f3582Merge pull request #2743 from nowke/add-size-exampleae93330Merge pull request #2757 from captbaritone/shallow-haseac0039Addhasinternal function4bd6f69Merge pull request #2753 from liroyleshed/patch-2e35f79fUpdate collections.jsUpdates
url-parsefrom 1.4.3 to 1.5.10Commits
8cd4c6c1.5.10ce7a01f[fix] Improve handling of empty port0071490[doc] Update JSDoc commenta7044e3[minor] Use more descriptive variable named547792[security] Add credits for CVE-2022-0691ad233571.5.90e3fb54[fix] Strip all control characters from the beginning of the URL61864a8[security] Add credits for CVE-2022-0686bb0104d1.5.8d5c6479[fix] Handle the case where the port is specified but emptyUpdates
websocket-extensionsfrom 0.1.3 to 0.1.4Changelog
Sourced from websocket-extensions's changelog.
Commits
5ea0b42Bump version to 0.1.429496f6Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser4a76c75Add Node versions 13 and 14 on Travis44a677aFormatting change: {...} should have spaces inside the bracesf6c50abLet npm reformat package.json2d211f3Change markdown formatting of docs.0b62083Update Travis target versions.729a465Switch license to Apache 2.0.Updates
semverfrom 5.5.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313chore: release 5.7.22f8fd41fix: better handling of whitespace (#585)deb5ad5chore:@npmcli/template-oss@4.16.0c83c18c5.7.1956e228Correct typo in README8055dda5.7.0604e73dauto-publishing scriptsbed01e2remove the nomin comments, since we don't minify any more anyway9cb68f1document parse method38d42ca5.7 changelogMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
browserslistfrom 4.1.1 to 4.16.5Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
7cc2aedRelease 4.16.5 version27e4afdUpdate dependencies1013a18Fix version RegExpb879a1aUse Node.js 16 on CIbd1e9e0Fix ReDoS (#593)209adf9Release 4.16.4 version3e2ae3bFix types39e6a04Update dependenciesc091916Fix unsafe regexp61be47fUpdate clean-publishUpdates
shell-quotefrom 1.6.1 to 1.7.3Changelog
Sourced from shell-quote's changelog.
Commits
6a8a8991.7.35799416fix for security issue with windows drive letter regexc7de931Add security.md414853fUpdate readme.markdown (#43)0fc4a97use Github Actions (#42)89a19931.7.2df7e4c7add test for #37144e1c2revert windows path unescaping, fixes #37c24f3aaci: nvs does not have iojsc2950fb1.7.1Updates
loader-utilsfrom 1.1.0 to 1.4.2Release notes
Sourced from loader-utils's releases.
... (truncated)
Changelog
Sourced from loader-utils's changelog.