Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump plist from 3.0.4 to 3.0.5 #2493

Merged
merged 1 commit into from
Apr 4, 2022
Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2022

Bumps plist from 3.0.4 to 3.0.5.

Changelog

Sourced from plist's changelog.

3.0.5 / 2022-03-23

  • [96e2303d05] Prototype Pollution using .parse() #114 (mario-canva)
  • update browserify from 16 to 17
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2022
@codecov
Copy link

codecov bot commented Apr 1, 2022

Codecov Report

Merging #2493 (2ff8703) into master (e7be384) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #2493   +/-   ##
=======================================
  Coverage   64.98%   64.98%           
=======================================
  Files         914      914           
  Lines       26345    26345           
  Branches     5178     5178           
=======================================
  Hits        17121    17121           
  Misses       9224     9224           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e7be384...2ff8703. Read the comment docs.

@cRui861 cRui861 merged commit dc98164 into master Apr 4, 2022
@cRui861 cRui861 deleted the dependabot/npm_and_yarn/plist-3.0.5 branch April 4, 2022 17:36
gingi pushed a commit that referenced this pull request Jul 1, 2022
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
gingi pushed a commit that referenced this pull request Jul 1, 2022
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
gingi pushed a commit that referenced this pull request Jul 1, 2022
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
gingi pushed a commit that referenced this pull request Jul 1, 2022
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
cRui861 added a commit that referenced this pull request Jul 7, 2022
* Revert "Update to call List Supported Virtual Machine and Cloud Service SKUs (#2400)"

This reverts commit 7e9ce2e.

* Update patch version for reverting VM SKU API changes

* Update changelog with hotfix information

* Fix task output warning background color
AB#335

* Fix border contrast of code sample package install inputs

Fixes AB#291

* Fix for missing image icons

Only behavior was spammed errors to the console.

* Fixes AB#315: Native tooltips for gallery actions

* Bumps version to 2.14.0

* Fixes silent DatetimePicker error on midnight value

* Bump plist from 3.0.4 to 3.0.5 (#2493)

Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fixes AB#465: "Unselect All" navigable by keyboard

* Upgrades to Electron 13

Possibly addresses issues with Conditional Access policies that require a minimum Chromium version of 91. (#2446)

* Bump moment from 2.29.1 to 2.29.3 (#2496)

Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.3.
- [Release notes](https://github.com/moment/moment/releases)
- [Changelog](https://github.com/moment/moment/blob/2.29.3/CHANGELOG.md)
- [Commits](moment/moment@2.29.1...2.29.3)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rena <cRui861@users.noreply.github.com>

* Bump minimist from 1.2.5 to 1.2.6 (#2488)

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rena <cRui861@users.noreply.github.com>

* Bump karma from 6.3.14 to 6.3.16 (#2467)

Bumps [karma](https://github.com/karma-runner/karma) from 6.3.14 to 6.3.16.
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@v6.3.14...v6.3.16)

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rena <cRui861@users.noreply.github.com>

* Fixes issue with failed silent auth

Batch Explorer would not start when an exception is thrown during silent auth that isn't an authentication error.

* Updates @azure/msal-node to 1.6.0

Support for proxied environments.

* Bump ejs from 3.1.6 to 3.1.7

Bumps [ejs](https://github.com/mde/ejs) from 3.1.6 to 3.1.7.
- [Release notes](https://github.com/mde/ejs/releases)
- [Changelog](https://github.com/mde/ejs/blob/main/CHANGELOG.md)
- [Commits](mde/ejs@v3.1.6...v3.1.7)

---
updated-dependencies:
- dependency-name: ejs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix heatmap node display issues (#2497)

* [WIP] Added new gradient colors to heatmap
TODO: update legend to collapse sub-states and pick better naming for the running task slot sub-states

* Categories can expand and contract now and are closed by default.
* colors of the categories will stay as subitem color
* [WIP] need to fix running state error (showing up as black instead of green)
* [WIP] need to add dropdown icon next to categories

* Fix selectState logic and add caret expansion and collapse identifier on categories

* Add logic for handling task slots for running state
* Change task slot colors to be more accessible

* Add 100% for heatmap legend and picked colors for heatmap
* clean up

* Fix typo

* Comment explaining state counter for running task usages

* Remove whitespace

* Fix unit tests
* [WIP] fix unit tests for running task overlay

* Fix async issue and fix state counter unit tests

* Add running task slot usage tests and fix percentages

* Add a few more tests for task slot usage overlay

* Restores native menubar on Windows

In-release regression caused by upgrade to Electron 13 (3bd43c7).

* Adding Sanjana as code owner

* Bump async from 2.6.3 to 2.6.4

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump eventsource from 1.0.7 to 1.1.1

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.0.7 to 1.1.1.
- [Release notes](https://github.com/EventSource/eventsource/releases)
- [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md)
- [Commits](EventSource/eventsource@v1.0.7...v1.1.1)

---
updated-dependencies:
- dependency-name: eventsource
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Adds security linting

* Minor lint fixes

* Remove obsolete directives from debug config

* Utility for creating a proxy environment in Azure

* Installs Batch Explorer in a restricted network.

* Upgrades to @azure/msal-node 1.9.0

* Uses proxy settings for authentication.

* Bump node-forge from 1.0.0 to 1.3.0

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.0.0 to 1.3.0.
- [Release notes](https://github.com/digitalbazaar/forge/releases)
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](digitalbazaar/forge@v1.0.0...v1.3.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fixes cer parsing unit test using updated forge

* Microsoft mandatory file

* Excludes auto-generated SECURITY.md from linting

* Bumps azure-storage from 2.10.4 to 2.10.7

Fixes AB#766, AB#768: Addresses some security vulnerabilities in module dependencies (validator and json-schema).

* Bumps hosted-git-info from 2.8.8 to 2.8.9

* Bumps ansi-html, normalize-url

* Bumps @azure/msal-node from 1.9.0 to 1.10.0

Addresses issue with caching multiple tokens for same user (AzureAD/microsoft-authentication-library-for-js#4486).

* May a11y Bug Fixes (#2520)

* Fix AB#515: Narrator reports wrong Max retry count

* Fix AB#516: Graphs are inaccessible in scan mode

* Fix AB#517: Label is not associated with control

Co-authored-by: Sanjana Kapur <sanjanakapur@microsoft.com>
Co-authored-by: Shiran Pasternak <shiran.pasternak@microsoft.com>

* April a11y Bug Fixes (#2523)

* Fix AB#502: The Name property of a focusable element must not be null

* Fix AB#509: Focusable sibling elements must not have the same Name and LocalizedControlType

Co-authored-by: Sanjana Kapur <sanjanakapur@microsoft.com>

* Prepare for release 2.14.0 (#2534)

* Updated changelog and version.

* Update changelog

Co-authored-by: rechen <rechen@microsoft.com>

* Unrevert "Update to call List Supported Virtual Machine and Cloud Service SKUs (#2400)"

8a7424b

Batch Service supports VM SKU API so reenabling service call.

* Bump Batch Explorer to version 2.15.0

Co-authored-by: Shiran Pasternak <shiran.pasternak@microsoft.com>
Co-authored-by: rechen <rechen@microsoft.com>
Co-authored-by: David Watrous <509299+dpwatrous@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: microsoft-github-policy-service[bot] <77245923+microsoft-github-policy-service[bot]@users.noreply.github.com>
Co-authored-by: Sanjana Kapur <sanjanakapur@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant