Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DCJ-304-npm]: Bump the npm-dependencies group with 8 updates #2583

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 13, 2024

Bumps the npm-dependencies group with 8 updates:

Package From To
@mui/icons-material 5.15.16 5.15.17
@mui/material 5.15.16 5.15.17
@types/node 20.12.10 20.12.11
dompurify 3.1.2 3.1.3
@types/react 18.3.1 18.3.2
cypress 13.8.1 13.9.0
history 4.10.1 5.3.0
@types/history 4.7.11 5.0.0

Updates @mui/icons-material from 5.15.16 to 5.15.17

Release notes

Sourced from @​mui/icons-material's releases.

v5.15.17

May 8, 2024

A big thanks to the 4 contributors who made this release possible. This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/material@5.15.17

Docs

Core

All contributors of this release in alphabetical order: @​github-actions[bot], @​joserodolfofreitas, @​oliviertassinari, @​siriwatknp

Changelog

Sourced from @​mui/icons-material's changelog.

v5.15.17

May 8, 2024

A big thanks to the 4 contributors who made this release possible. This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/material@5.15.17

Docs

Core

All contributors of this release in alphabetical order: @​github-actions[bot], @​joserodolfofreitas, @​oliviertassinari, @​siriwatknp

Commits

Updates @mui/material from 5.15.16 to 5.15.17

Release notes

Sourced from @​mui/material's releases.

v5.15.17

May 8, 2024

A big thanks to the 4 contributors who made this release possible. This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/material@5.15.17

Docs

Core

All contributors of this release in alphabetical order: @​github-actions[bot], @​joserodolfofreitas, @​oliviertassinari, @​siriwatknp

Changelog

Sourced from @​mui/material's changelog.

v5.15.17

May 8, 2024

A big thanks to the 4 contributors who made this release possible. This release was mostly about 🐛 bug fixes and 📚 documentation improvements.

@mui/material@5.15.17

Docs

Core

All contributors of this release in alphabetical order: @​github-actions[bot], @​joserodolfofreitas, @​oliviertassinari, @​siriwatknp

Commits

Updates @types/node from 20.12.10 to 20.12.11

Commits

Updates dompurify from 3.1.2 to 3.1.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.1.3

  • Fixed several mXSS variations found by and thanks to @​kevin-mizu & @​Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @​kevin-mizu
  • Added better handling and readability of the nodeType property, thanks @​ssi02014
  • Fixed some smaller issues in README and other documentation
Commits
  • 3fe78d7 chore: Preparing 3.1.3 release
  • b20ce99 fix: Added smaller-than-null check for __depth hardening code
  • 1e52026 fix: Hardened the depth tracking code against prototype pollution
  • 8df72f1 fix: Made the regex for comment scrubbing a bit stricter
  • ae517d6 fix: Expanded the comment scrubbing regex matching a bit further
  • b6818ce fix: Added better configurability for new comment behavior
  • aafd7a8 docs: Changed inline comments slightly to be more accurate
  • a377bf8 test: Fixed the tests
  • d1d5d22 fix: Added experiemental comment scrubbing inside attributes
  • dc61232 fix #949
  • Additional commits viewable in compare view

Updates @types/react from 18.3.1 to 18.3.2

Commits

Updates cypress from 13.8.1 to 13.9.0

Release notes

Sourced from cypress's releases.

v13.9.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-9-0

Commits
  • b31740c chore: revert making check-ts resource-class smaller (#29484)
  • bd8e9bf chore: release 13.9.0 (#29485)
  • d875569 chore: fix mocha junit reporter when running mocha <6 (#29481)
  • 66dac23 fix: #29171 set correct host header with fetch (#29452)
  • 84b6bf2 chore: right size some circleci jobs (#29448)
  • 555a924 fix: update firefox to close extra windows between specs (#29475)
  • 4782f89 chore: release @​cypress/eslint-plugin-dev-v6.0.0
  • 3b799a1 breaking: the supported eslint version is 8 for @​cypress/eslint-plugin-dev.
  • d1b59a4 chore: release @​cypress/react-v8.0.1
  • 1396e96 fix: handle promises rejected with undefined gracefully (#29454)
  • Additional commits viewable in compare view

Updates history from 4.10.1 to 5.3.0

Release notes

Sourced from history's releases.

v5.3.0

This release provides support for native ESM consumption of all exports.

v5.3.0-pre.0

No release notes provided.

v5.2.0

🐛 Bug fixes

  • Fixed a few type declarations and deprecated the following types:
    • State (now set to unknown which will require consumer type narrowing)
    • PartialPath (use Partial<Path> instead)
    • PartialLocation (use Partial<Location> instead)
  • Fixed a regression related to the createPath return value (#813)

✨ Features

  • We now use statically analyzable CJS exports. This enables named imports in Node ESM scripts (See the commit).

Full Changelog: remix-run/history@v5.1.0...v5.2.0

v5.1.0

Because the prior 5.0.2 release removed the State type parameter from Location, this was technically a breaking change. To correct for this, I'm bumping this as a minor release. It won't affect runtime code, but it may affect your development experience and tests if you were using that parameter.

The State type export is also restored, so you shouldn't have issues with installing React Router v6.

Oh, by the way, did you hear we released React Router v6?

Full Changelog: remix-run/history@v5.0.3...v5.1.0

v5.0.3

Fixed parsePath adding incorrectly adding search

v5.0.2

Just a couple fixes:

  • Fixed search params persisting on redirects
  • Changed the location.state type to any and removed the generic on Location

Full Changelog: remix-run/history@v5.0.1...v5.0.2

v5.0.1

This patch release contains a tiny TypeScript update to use the built-in Partial utility for PartialPath and PartialLocation. We always love it when we can ship just a little less code!

🙏 Credits

Thanks to @​liuhanqu, @​hanquliu, @​chaance and @​mjackson for your contributions!

v5.0.0

Today we are very pleased to announce the stable release of history version 5!

Overview

... (truncated)

Commits
  • c9bc27d Version 5.3.0
  • c9b1b1b Version 5.3.0-pre.0
  • 68543c6 Merge branch 'main' into release/v5.3.0
  • ba1cd3c fix: import history from ESM (#934)
  • 3966191 Merge pull request #914 from remix-run/logan/format-action
  • 8117ab2 chore: Update readme + docblock references
  • f5cb295 chore: fix lockfile
  • 224cda0 chore: Merge branch 'main' into dev
  • aef6c2b fix: Use statically analyzable CJS exports
  • eac4edd chore(ci): add format action
  • Additional commits viewable in compare view

Updates @types/history from 4.7.11 to 5.0.0

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
cypress [>= 5.a, < 6]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `5.15.16` | `5.15.17` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `5.15.16` | `5.15.17` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.12.10` | `20.12.11` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.1.2` | `3.1.3` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.1` | `18.3.2` |
| [cypress](https://github.com/cypress-io/cypress) | `13.8.1` | `13.9.0` |
| [history](https://github.com/remix-run/history) | `4.10.1` | `5.3.0` |
| [@types/history](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/history) | `4.7.11` | `5.0.0` |


Updates `@mui/icons-material` from 5.15.16 to 5.15.17
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v5.15.17/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v5.15.17/packages/mui-icons-material)

Updates `@mui/material` from 5.15.16 to 5.15.17
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v5.15.17/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v5.15.17/packages/mui-material)

Updates `@types/node` from 20.12.10 to 20.12.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `dompurify` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.2...3.1.3)

Updates `@types/react` from 18.3.1 to 18.3.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `cypress` from 13.8.1 to 13.9.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v13.8.1...v13.9.0)

Updates `history` from 4.10.1 to 5.3.0
- [Release notes](https://github.com/remix-run/history/releases)
- [Commits](remix-run/history@v4.10.1...v5.3.0)

Updates `@types/history` from 4.7.11 to 5.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/history)

---
updated-dependencies:
- dependency-name: "@mui/icons-material"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@mui/material"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: dompurify
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: history
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@types/history"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner May 13, 2024 11:51
@dependabot dependabot bot requested review from fboulnois and removed request for a team May 13, 2024 11:51
@dependabot dependabot bot added the dependency Dependencies label May 13, 2024
@dependabot dependabot bot requested a review from okotsopoulos May 13, 2024 11:51
@dependabot dependabot bot added the npm label May 13, 2024
Copy link
Contributor

@rushtong rushtong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Manually tested 👍🏽

Copy link
Contributor

@fboulnois fboulnois left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See below:

"eslint": "8.56.0",
"eslint-plugin-flowtype": "8.0.3",
"eslint-plugin-react": "7.34.1",
"google-auth-library": "9.9.0",
"history": "4.10.1",
"history": "5.3.0",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We'll need to test this configuration with B2C when that goes in.

@fboulnois fboulnois merged commit 1490aaa into develop May 13, 2024
9 checks passed
@fboulnois fboulnois deleted the dependabot/npm_and_yarn/develop/npm-dependencies-30090fb274 branch May 13, 2024 15:32
@sjkobori sjkobori mentioned this pull request Jun 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependency Dependencies npm
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants