Bump the npm_and_yarn group across 1 directory with 44 updates #1

dependabot · 2024-11-29T08:04:15Z

Bumps the npm_and_yarn group with 37 updates in the / directory:

Package	From	To
express	`4.17.2`	`4.21.1`
got	`11.8.2`	`11.8.6`
domwaiter	`1.3.0`	`1.4.0`
linkinator	`3.0.3`	`6.1.2`
nodemon	`2.0.15`	`2.0.22`
liquidjs	`9.22.1`	`10.0.0`
next	`11.1.4`	`14.2.10`
@actions/core	`1.6.0`	`1.11.1`
async	`3.2.3`	`3.2.4`
minimatch	`3.0.4`	`3.0.5`
replace	`1.2.1`	`1.2.2`
@babel/traverse	`7.16.10`	`7.25.9`
@sideway/formula	`3.0.0`	`3.0.1`
axios	`0.21.4`	`1.7.8`
jest-puppeteer	`5.0.4`	`10.1.4`
start-server-and-test	`1.14.0`	`2.0.8`
braces	`3.0.2`	`3.0.3`
http-cache-semantics	`4.1.0`	`4.1.1`
jpeg-js	`0.4.2`	`0.4.4`
@jimp/jpeg	`0.16.1`	`0.16.13`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`
json5	`1.0.1`	`1.0.2`
jszip	`3.7.1`	`3.10.1`
micromatch	`4.0.4`	`4.0.8`
ws	`7.5.5`	`7.5.10`
ws	`6.2.2`	`7.5.10`
phin	`2.9.3`	`removed`
jimp	`0.16.1`	`1.6.0`
prismjs	`1.25.0`	`1.27.0`
refractor	`3.5.0`	`3.6.0`
qs	`6.5.2`	`6.13.0`
tough-cookie	`4.0.0`	`4.1.4`
website-scraper	`4.2.3`	`5.3.1`
terser	`5.9.0`	`5.36.0`
webpack	`5.59.0`	`5.96.1`
xml2js	`0.4.23`	`0.5.0`
rss-parser	`3.12.0`	`3.13.0`

Updates express from 4.17.2 to 4.21.1

Release notes

Sourced from express's releases.

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

... (truncated)

Changelog

Sourced from express's changelog.

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

... (truncated)

Commits

8e229f9 4.21.1
a024c8a fix(deps): cookie@0.7.1
7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
77ada90 Deprecate "back" magic string in redirects (#5935)
21df421 4.20.0
4c9ddc1 feat: upgrade to serve-static@0.16.0
9ebe5d5 feat: upgrade to send@0.19.0 (#5928)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.

Updates got from 11.8.2 to 11.8.6

Release notes

Sourced from got's releases.

v11.8.6

Destroy request object after successful response

sindresorhus/got@v11.8.5...v11.8.6

v11.8.5

Backport security fix sindresorhus/got@861ccd9

CVE-2022-33987

sindresorhus/got@v11.8.4...v11.8.5

v11.8.3

Bump cacheable-request dependency (#1921) 9463bb6

Fix HTTPError missing .code property (#1739) 0e167b8

sindresorhus/got@v11.8.2...v11.8.3

Commits

2b1482c 11.8.6
2d1497e Destroy request object after successful response (#2187)
5e17bb7 11.8.5
bce8ce7 Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc
8ced192 Fix build
670eb04 11.8.4
20f29fe Backport #1543: Initialize globalResponse in case of ignored HTTPError (#2017)
0da732f 11.8.3
9463bb6 Bump cacheable-request dependency (#1921)
0e167b8 HTTPError code set to 'HTTPError' #1711 (#1739)
See full diff in compare view

Updates domwaiter from 1.3.0 to 1.4.0

Release notes

Sourced from domwaiter's releases.

v1.4.0

1.4.0 (2022-09-26)

Features

Release from main (4f01a05)

Update default branch (b9017cc)

Commits

4f01a05 feat: Release from main
b9017cc feat: Update default branch
f535e19 1.4.0
692ed34 0.0.1
c416e20 0.0.0
d5b82c7 Update got, add MIT license
See full diff in compare view

Updates linkinator from 3.0.3 to 6.1.2

Release notes

Sourced from linkinator's releases.

v6.1.2

6.1.2 (2024-10-09)

Bug Fixes

export getConfig from index (#626) (ba65cf0)

v6.1.1

6.1.1 (2024-07-02)

Bug Fixes

JSON stringify failure details for CSV (#613) (13ab5b0)

v6.1.0

6.1.0 (2024-07-01)

Features

add option for setting user agent (#612) (929caa7)

v6.0.7

6.0.7 (2024-07-01)

Bug Fixes

cli: load linkinator.config.json by default (#611) (0aea0f1)

v6.0.6

6.0.6 (2024-06-29)

Bug Fixes

deps: update dependency marked to v13 (#606) (5d4e747)

v6.0.5

6.0.5 (2024-06-02)

Bug Fixes

deps: upgrade to marked v12 (#603) (862d89e)

v6.0.4

6.0.4 (2024-01-13)

... (truncated)

Commits

ba65cf0 fix: export getConfig from index (#626)
d19a8c7 chore(deps): update dependency @biomejs/biome to v1.9.3 (#624)
679cadf chore(deps): update dependency @biomejs/biome to v1.9.2 (#622)
499b736 chore(deps): update dependency @biomejs/biome to v1.9.0 (#620)
6d4378d build: use husky pre-commit hook (#614)
13ab5b0 fix: JSON stringify failure details for CSV (#613)
929caa7 feat: add option for setting user agent (#612)
0aea0f1 fix(cli): load linkinator.config.json by default (#611)
9e4bbac chore: restrict biome changes (#610)
acbfcc4 chore: update comment to reflect reason for retry (#609)
Additional commits viewable in compare view

Updates nodemon from 2.0.15 to 2.0.22

Release notes

Sourced from nodemon's releases.

v2.0.22

2.0.22 (2023-03-22)

Bug Fixes

remove ts mapping if loader present (f7816e4), closes #2083

v2.0.21

2.0.21 (2023-03-02)

Bug Fixes

remove ts mapping if loader present (1468397), closes #2083

v2.0.20

2.0.20 (2022-09-16)

Bug Fixes

remove postinstall script (e099e91)

v2.0.19

2.0.19 (2022-07-05)

Bug Fixes

Replace update notifier with simplified deps (#2033) (176c4a6), closes #1961 #2028

v2.0.18

2.0.18 (2022-06-23)

Bug Fixes

revert update-notifier forcing esm (1b3bc8c)

v2.0.17

2.0.17 (2022-06-23)

Bug Fixes

bump update-notifier to v6.0.0 (#2029) (0144e4f)

update packge-lock (27e91c3)

v2.0.16

... (truncated)

Commits

c971fdc Merge branch 'main' of github.com:remy/nodemon
b9679a2 chore: supporters
f7816e4 fix: remove ts mapping if loader present
9f3ffdb One more fix
abc8522 Get rid of spawning shell windows if nodemon is started without console.
b11ddd1 Merge branch 'main' of github.com:remy/nodemon
204af11 chore: missing supporters
1468397 fix: remove ts mapping if loader present
26b1f0f chore: add conventional commit check
adaafa1 One more fix
Additional commits viewable in compare view

Updates liquidjs from 9.22.1 to 10.0.0

Release notes

Sourced from liquidjs's releases.

v10.0.0

10.0.0 (2022-11-27)

chore

rename filters to snake style, #487 (ff112a4)

Code Refactoring

_evalToken renamed to evalToken (4e1a30a)

change ownPropertyOnly default value to true (7eb6216)

delay creation of operatorsTrie and hide this implementation (bb58d3e)

remove toThenable export (ffefd91)

remove use of internal Context class in evalValue argument (b115077)

Performance Improvements

target Node.js 14 for cjs bundle (main entry) (1f6ce7c)

BREAKING CHANGES

evalToken now returns a generator (LiquidJS async), which is different from evalToken in previous LiquidJS versions.

main entry need Node.js>=14 to run, you can build LiquidJS by your own by using ESM entry.

ownPropertyOnly default value changed to true

<liquidjs>.toThenable is removed, use <liquidjs>.toPromise instead

evalValue won't support Context as second argument anymore.

use operators instead of operatorsTrie as Tokenizer constructor argument, #500

keys in <liquidjs>.filters are now in snake case (instead of camel case), identical to that in Liquid template.

v9.43.0

9.43.0 (2022-11-27)

Features

support timezone offset argument for date filter, #553 (7a71485)

v9.42.1

9.42.1 (2022-10-21)

Bug Fixes

truncatewords should use at least one word, #537 (32f613f)

v9.42.0

... (truncated)

Changelog

Sourced from liquidjs's changelog.

10.0.0 (2022-11-27)

Code Refactoring

rename filters to snake style, #487 (ff112a4)

_evalToken renamed to evalToken (4e1a30a)

change ownPropertyOnly default value to true (7eb6216)

delay creation of operatorsTrie and hide this implementation (bb58d3e)

remove toThenable export (ffefd91)

remove use of internal Context class in evalValue argument (b115077)

Performance Improvements

target Node.js 14 for cjs bundle (main entry) (1f6ce7c)

BREAKING CHANGES

evalToken now returns a generator (LiquidJS async), which is different from evalToken in previous LiquidJS versions.

main entry need Node.js>=14 to run, you can build LiquidJS by your own by using ESM entry.

ownPropertyOnly default value changed to true

<liquidjs>.toThenable is removed, use <liquidjs>.toPromise instead

evalValue won't support Context as second argument anymore.

use operators instead of operatorsTrie as Tokenizer constructor argument, #500

keys in <liquidjs>.filters are now in snake case (instead of camel case), identical to that in Liquid template.

9.43.0 (2022-11-27)

Features

support timezone offset argument for date filter, #553 (7a71485)

9.42.1 (2022-10-21)

Bug Fixes

truncatewords should use at least one word, #537 (32f613f)

9.42.0 (2022-08-27)

Features

promise in expression & nested property, #533 #276 (bbf00f3)

9.41.0 (2022-08-24)

... (truncated)

Commits

9b9ef37 chore(release): 10.0.0 [skip ci]
5bbdc08 chore(deps): bump minimatch from 3.0.4 to 3.1.2
1380ac9 refactor: more consistent tags to make it easier to iterate over, #524
4e1a30a refactor: _evalToken renamed to evalToken
9299268 refactor: Tag class support in registerTag()
1f6ce7c perf: target Node.js 14 for cjs bundle (main entry)
7eb6216 refactor: change ownPropertyOnly default value to true
ffefd91 refactor: remove toThenable export
b115077 refactor: remove use of internal Context class in evalValue argument
bb58d3e refactor: delay creation of operatorsTrie and hide this implementation
Additional commits viewable in compare view

Updates next from 11.1.4 to 14.2.10

Commits

937651f v14.2.10
7ed7f12 Remove invalid fallback revalidate value (#69990)
99de057 Revert server action optimization (#69925)
24647b9 Add ability to customize Cache-Control (#69802)
6fa8982 v14.2.9
7998745 test: lock ts type check (#69889)
4bd3849 create-next-app: fix font file corruption when using import alias (#69806)
3756801 test: check most possible combination of CNA flags
9a72ad6 unpin CNA tests from 14.2.3
747d365 Fix metadata prop merging (#69807)
Additional commits viewable in compare view

Updates @actions/core from 1.6.0 to 1.11.1

Changelog

Sourced from @actions/core's changelog.

1.11.1

Fix uses of crypto.randomUUID on Node 18 and earlier #1842

1.11.0

Add platform info utilities #1551

Remove dependency on uuid package #1824

1.10.1

Fix error message reference in oidc utils #1511

1.10.0

saveState and setOutput now use environment files if available #1178

getMultilineInput now correctly trims whitespace by default #1185

1.9.1

Randomize delimiter when calling core.exportVariable

1.9.0

Added toPosixPath, toWin32Path and toPlatformPath utilities #1102

1.8.2

Update to v2.0.1 of @actions/http-client #1087

1.8.1

Update to v2.0.0 of @actions/http-client

1.8.0

Deprecate markdownSummary extension export in favor of summary

actions/toolkit#1072

actions/toolkit#1073

1.7.0

Added markdownSummary extension

Commits

See full diff in compare view

Updates async from 3.2.3 to 3.2.4

Changelog

Sourced from async's changelog.

v3.2.4

Fix a bug in priorityQueue where it didn't wait for the result. (#1725)

Fix a bug where unshiftAsync was included in priorityQueue. (#1790)

Commits

f3ab51a Version 3.2.4
7ea2cec Update built files
bef7bef update changelog
03eeab3 Bump yargs from 17.4.1 to 17.5.1 (#1843)
387efcf Bump eslint from 8.14.0 to 8.17.0 (#1849)
131225a Bump karma from 6.3.19 to 6.3.20 (#1844)
4cfa89c Bump eslint from 8.14.0 to 8.16.0 (#1845)
90e940c Bump rollup from 2.71.1 to 2.75.5 (#1846)
dd72cf5 Bump @babel/eslint-parser from 7.17.0 to 7.18.2 (#1847)
4ae026e Bump babel-minify from 0.5.1 to 0.5.2 (#1848)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Updates minimatch from 3.0.4 to 3.0.5

Commits

707e1b2 3.0.5
a8763f4 Improve redos protection, add many tests
bafa295 Use master branch for travis badge
013d64d update travis
See full diff in compare view

Updates replace from 1.2.1 to 1.2.2

Commits

See full diff in compare view

Updates postcss from 8.4.4 to 8.4.31

Release notes

Sourced from postcss's releases.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by @romainmenke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by @remcohaszing).

8.4.21

Fixed Input#error types (by @hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by @romainmenke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by @KingSora).

8.4.17

Fixed Node.before() unexpected behavior (by @romainmenke).

Added TOC to docs (by @muddv).

8.4.16

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

... (truncated)

Commits

90208de Release 8.4.31 version
58cc860 Fix carrier return parsing
4fff8e4 Improve pnpm test output
cd43ed1 Update dependencies
caa916b Update dependencies
8972f76 Typo
11a5286 Typo
45c5501 Release 8.4.30 version
bc3c341 Update linter
b2be58a Merge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...
Additional commits viewable in compare view

Updates @babel/traverse from 7.16.10 to 7.25.9

Release notes

Sourced from @babel/traverse's releases.

v7.25.9 (2024-10-22)

Thanks @victorenator for your first PR!

🐛 Bug Fix

babel-parser, babel-template, babel-types

#16905 fix: Keep type annotations in syntacticPlaceholders mode (@liuxingbaoyu)

babel-helper-compilation-targets, babel-preset-env

#16907 fix: support BROWSERSLIST{,_CONFIG} env (@JLHwung)

Other

#16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@victorenator)

🏠 Internal

babel-helper-transform-fixture-test-runner

#16914 remove test options flaky (@JLHwung)

Every package

#16917 fix: Accidentally published tsconfig files (@liuxingbaoyu)

🏃‍♀️ Performance

babel-parser, babel-types

#16918 perf: Make VISITOR_KEYS etc. faster to access (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Viktar Vaŭčkievič (@victorenator)

@liuxingbaoyu

v7.25.8 (2024-10-10)

🐛 Bug Fix

babel-core

#16888 Restore public API of resolvePlugin/resolvePreset (@nicolo-ribaudo)

🏠 Internal

babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

#16824 Inline one-line syntax plugins (@nicolo-ribaudo)

Committers: 3

Babel Bot (@babel-bot)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.25.7 (2024-10-02)

Thanks @DylanPiercey and @YuHyeonWook for your first PRs!

🐛 Bug Fix

babel-helper-validator-identifier

#16825 fix: update identifier to unicode 16 (@JLHwung)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.9 (2024-10-22)

🐛 Bug Fix

babel-parser, babel-template, babel-types

#16905 fix: Keep type annotations in syntacticPlaceholders mode (@liuxingbaoyu)

babel-helper-compilation-targets, babel-preset-env

#16907 fix: support BROWSERSLIST{,_CONFIG} env (@JLHwung)

Other

#16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@victorenator)

🏠 Internal

babel-helper-transform-fixture-test-runner

#16914 remove test options flaky (@JLHwung)

🏃‍♀️ Performance

babel-parser, babel-types

#16918 perf: Make VISITOR_KEYS etc. faster to access (@liuxingbaoyu)

v7.25.8 (2024-10-10)

🐛 Bug Fix

babel-core

#16888 Restore public API of resolvePlugin/resolvePreset (@nicolo-ribaudo)

🏠 Internal

babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

#16824 Inline one-line syntax plugins (@nicolo-ribaudo)

v7.25.7 (2024-10-02)

🐛 Bug Fix

babel-helper-validator-identifier

#16825 fix: update identifier to unicode 16 (@JLHwung)

babel-traverse

#16814 fix: issue with node path keys updated on unrelated paths (@Dyl... Description has been truncated

Bumps the npm_and_yarn group with 37 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.17.2` | `4.21.1` | | [got](https://github.com/sindresorhus/got) | `11.8.2` | `11.8.6` | | [domwaiter](https://github.com/zeke/domwaiter) | `1.3.0` | `1.4.0` | | [linkinator](https://github.com/JustinBeckwith/linkinator) | `3.0.3` | `6.1.2` | | [nodemon](https://github.com/remy/nodemon) | `2.0.15` | `2.0.22` | | [liquidjs](https://github.com/harttle/liquidjs) | `9.22.1` | `10.0.0` | | [next](https://github.com/vercel/next.js) | `11.1.4` | `14.2.10` | | [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `1.6.0` | `1.11.1` | | [async](https://github.com/caolan/async) | `3.2.3` | `3.2.4` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.5` | | [replace](https://github.com/ALMaclaine/replace) | `1.2.1` | `1.2.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.16.10` | `7.25.9` | | [@sideway/formula](https://github.com/sideway/formula) | `3.0.0` | `3.0.1` | | [axios](https://github.com/axios/axios) | `0.21.4` | `1.7.8` | | [jest-puppeteer](https://github.com/argos-ci/jest-puppeteer/tree/HEAD/packages/jest-puppeteer) | `5.0.4` | `10.1.4` | | [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | `1.14.0` | `2.0.8` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.0` | `4.1.1` | | [jpeg-js](https://github.com/eugeneware/jpeg-js) | `0.4.2` | `0.4.4` | | [@jimp/jpeg](https://github.com/jimp-dev/jimp) | `0.16.1` | `0.16.13` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [jszip](https://github.com/Stuk/jszip) | `3.7.1` | `3.10.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [ws](https://github.com/websockets/ws) | `7.5.5` | `7.5.10` | | [ws](https://github.com/websockets/ws) | `6.2.2` | `7.5.10` | | [phin](https://github.com/ethanent/phin) | `2.9.3` | `removed` | | [jimp](https://github.com/jimp-dev/jimp) | `0.16.1` | `1.6.0` | | [prismjs](https://github.com/PrismJS/prism) | `1.25.0` | `1.27.0` | | [refractor](https://github.com/wooorm/refractor) | `3.5.0` | `3.6.0` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.13.0` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` | | [website-scraper](https://github.com/website-scraper/node-website-scraper) | `4.2.3` | `5.3.1` | | [terser](https://github.com/terser/terser) | `5.9.0` | `5.36.0` | | [webpack](https://github.com/webpack/webpack) | `5.59.0` | `5.96.1` | | [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) | `0.4.23` | `0.5.0` | | [rss-parser](https://github.com/bobby-brennan/rss-parser) | `3.12.0` | `3.13.0` | Updates `express` from 4.17.2 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md) - [Commits](expressjs/express@4.17.2...4.21.1) Updates `got` from 11.8.2 to 11.8.6 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v11.8.2...v11.8.6) Updates `domwaiter` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/zeke/domwaiter/releases) - [Commits](zeke/domwaiter@v1.3.0...v1.4.0) Updates `linkinator` from 3.0.3 to 6.1.2 - [Release notes](https://github.com/JustinBeckwith/linkinator/releases) - [Commits](JustinBeckwith/linkinator@v3.0.3...v6.1.2) Updates `nodemon` from 2.0.15 to 2.0.22 - [Release notes](https://github.com/remy/nodemon/releases) - [Commits](remy/nodemon@v2.0.15...v2.0.22) Updates `liquidjs` from 9.22.1 to 10.0.0 - [Release notes](https://github.com/harttle/liquidjs/releases) - [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md) - [Commits](harttle/liquidjs@v9.22.1...v10.0.0) Updates `next` from 11.1.4 to 14.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v11.1.4...v14.2.10) Updates `@actions/core` from 1.6.0 to 1.11.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Updates `async` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.3...v3.2.4) Updates `minimatch` from 3.0.4 to 3.0.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.5) Updates `replace` from 1.2.1 to 1.2.2 - [Commits](https://github.com/ALMaclaine/replace/commits) Updates `postcss` from 8.4.4 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.4...8.4.31) Updates `@babel/traverse` from 7.16.10 to 7.25.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-traverse) Updates `@sideway/formula` from 3.0.0 to 3.0.1 - [Commits](hapijs/formula@v3.0.0...v3.0.1) Updates `axios` from 0.21.4 to 1.7.8 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v1.7.8) Updates `jest-puppeteer` from 5.0.4 to 10.1.4 - [Release notes](https://github.com/argos-ci/jest-puppeteer/releases) - [Changelog](https://github.com/argos-ci/jest-puppeteer/blob/main/packages/jest-puppeteer/CHANGELOG.md) - [Commits](https://github.com/argos-ci/jest-puppeteer/commits/v10.1.4/packages/jest-puppeteer) Updates `start-server-and-test` from 1.14.0 to 2.0.8 - [Release notes](https://github.com/bahmutov/start-server-and-test/releases) - [Commits](bahmutov/start-server-and-test@v1.14.0...v2.0.8) Updates `body-parser` from 1.19.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.1...1.20.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `follow-redirects` from 1.14.7 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.7...v1.15.9) Updates `http-cache-semantics` from 4.1.0 to 4.1.1 - [Commits](kornelski/http-cache-semantics@v4.1.0...v4.1.1) Updates `jpeg-js` from 0.4.2 to 0.4.4 - [Release notes](https://github.com/eugeneware/jpeg-js/releases) - [Commits](jpeg-js/jpeg-js@v0.4.2...v0.4.4) Updates `@jimp/jpeg` from 0.16.1 to 0.16.13 - [Release notes](https://github.com/jimp-dev/jimp/releases) - [Changelog](https://github.com/jimp-dev/jimp/blob/main/CHANGELOG.md) - [Commits](jimp-dev/jimp@v0.16.1...v0.16.13) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `jszip` from 3.7.1 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.7.1...v3.10.1) Updates `loader-utils` from 1.2.3 to 1.4.0 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/master/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v1.4.0) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `ws` from 7.5.5 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.5...7.5.10) Updates `ws` from 6.2.2 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.5...7.5.10) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Removes `phin` Updates `jimp` from 0.16.1 to 1.6.0 - [Release notes](https://github.com/jimp-dev/jimp/releases) - [Changelog](https://github.com/jimp-dev/jimp/blob/main/CHANGELOG.md) - [Commits](jimp-dev/jimp@v0.16.1...v1.6.0) Updates `prismjs` from 1.25.0 to 1.27.0 - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/master/CHANGELOG.md) - [Commits](PrismJS/prism@v1.25.0...v1.27.0) Updates `refractor` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/wooorm/refractor/releases) - [Changelog](https://github.com/wooorm/refractor/blob/main/changelog.md) - [Commits](wooorm/refractor@3.5.0...3.6.0) Updates `qs` from 6.5.2 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.0) Updates `tough-cookie` from 4.0.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4) Updates `website-scraper` from 4.2.3 to 5.3.1 - [Release notes](https://github.com/website-scraper/node-website-scraper/releases) - [Changelog](https://github.com/website-scraper/node-website-scraper/blob/master/CHANGELOG.md) - [Commits](website-scraper/node-website-scraper@v4.2.3...v5.3.1) Updates `serve-static` from 1.14.2 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.2...v1.16.2) Updates `terser` from 5.9.0 to 5.36.0 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v5.9.0...v5.36.0) Updates `webpack` from 5.59.0 to 5.96.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.59.0...v5.96.1) Updates `xml2js` from 0.4.23 to 0.5.0 - [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.5.0) Updates `rss-parser` from 3.12.0 to 3.13.0 - [Commits](rbren/rss-parser@v3.12.0...v3.13.0) --- updated-dependencies: - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: got dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: domwaiter dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: linkinator dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: nodemon dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: liquidjs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@actions/core" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: async dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: replace dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sideway/formula" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jest-puppeteer dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: start-server-and-test dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jpeg-js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@jimp/jpeg" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: phin dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jimp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: prismjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: refractor dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: website-scraper dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rss-parser dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 29, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 44 updates #1

Bump the npm_and_yarn group across 1 directory with 44 updates #1

Uh oh!

dependabot bot commented on behalf of github Nov 29, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm_and_yarn group across 1 directory with 44 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 44 updates #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 29, 2024

4.21.1

What's Changed

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Important

Other Changes

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v11.8.6

v11.8.5

v11.8.3

v1.4.0

1.4.0 (2022-09-26)

Features

v6.1.2

6.1.2 (2024-10-09)

Bug Fixes

v6.1.1

6.1.1 (2024-07-02)

Bug Fixes

v6.1.0

6.1.0 (2024-07-01)

Features

v6.0.7

6.0.7 (2024-07-01)

Bug Fixes

v6.0.6

6.0.6 (2024-06-29)

Bug Fixes

v6.0.5

6.0.5 (2024-06-02)

Bug Fixes

v6.0.4

6.0.4 (2024-01-13)

v2.0.22

2.0.22 (2023-03-22)

Bug Fixes

v2.0.21

2.0.21 (2023-03-02)

Bug Fixes

v2.0.20

2.0.20 (2022-09-16)

Bug Fixes

v2.0.19

2.0.19 (2022-07-05)

Bug Fixes

v2.0.18

2.0.18 (2022-06-23)

Bug Fixes

v2.0.17

2.0.17 (2022-06-23)

Bug Fixes

v2.0.16

v10.0.0

10.0.0 (2022-11-27)

chore

Code Refactoring

Performance Improvements

BREAKING CHANGES

v9.43.0

9.43.0 (2022-11-27)

Features

v9.42.1

9.42.1 (2022-10-21)

Bug Fixes

v9.42.0