-
Notifications
You must be signed in to change notification settings - Fork 527
chore(deps): bump the npm_and_yarn group across 2 directories with 12 updates #316
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Closed
dependabot
wants to merge
1
commit into
staging
from
dependabot/npm_and_yarn/apps/OpenSignServer/npm_and_yarn-security-group-5f2de1330b
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… updates Bumps the npm_and_yarn group with 9 updates in the /apps/OpenSignServer directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.3.5` | `1.6.0` | | [mongoose](https://github.com/Automattic/mongoose) | `7.2.1` | `7.3.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.21.5` | `7.23.7` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `8.5.1` | `9.0.0` | | [parse-server](https://github.com/parse-community/parse-server) | `6.3.1` | `6.4.0` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [got](https://github.com/sindresorhus/got) | `7.1.0` | `` | | [mongodb-runner](https://github.com/mongodb-js/devtools-shared) | `4.10.0` | `5.5.1` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Bumps the npm_and_yarn group with 5 updates in the /microfrontends/SignDocuments directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.5.1` | `1.6.0` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.23.0` | `7.23.7` | | [crypto-js](https://github.com/brix/crypto-js) | `4.1.1` | `4.2.0` | | [parse](https://github.com/parse-community/Parse-SDK-JS) | `4.2.0` | `4.3.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.3` | `1.15.4` | Updates `axios` from 1.3.5 to 1.6.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.3.5...v1.6.0) Updates `mongoose` from 7.2.1 to 7.3.3 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@7.2.1...7.3.3) Updates `@babel/traverse` from 7.21.5 to 7.23.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.7/packages/babel-traverse) Updates `jsonwebtoken` from 8.5.1 to 9.0.0 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0) Updates `parse-server` from 6.3.1 to 6.4.0 - [Release notes](https://github.com/parse-community/parse-server/releases) - [Changelog](https://github.com/parse-community/parse-server/blob/alpha/CHANGELOG.md) - [Commits](parse-community/parse-server@6.3.1...6.4.0) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Removes `got` Updates `mongodb-runner` from 4.10.0 to 5.5.1 - [Commits](https://github.com/mongodb-js/devtools-shared/commits/mongodb-runner@5.5.1) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `axios` from 1.5.1 to 1.6.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.3.5...v1.6.0) Updates `@babel/traverse` from 7.23.0 to 7.23.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.7/packages/babel-traverse) Updates `crypto-js` from 4.1.1 to 4.2.0 - [Commits](brix/crypto-js@4.1.1...4.2.0) Updates `parse` from 4.2.0 to 4.3.1 - [Release notes](https://github.com/parse-community/Parse-SDK-JS/releases) - [Changelog](https://github.com/parse-community/Parse-SDK-JS/blob/alpha/CHANGELOG.md) - [Commits](parse-community/Parse-SDK-JS@4.2.0...4.3.1) Updates `follow-redirects` from 1.15.3 to 1.15.4 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.3...v1.15.4) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: mongoose dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: jsonwebtoken dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: parse-server dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: mongodb-runner dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: crypto-js dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: parse dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
nxglabs
pushed a commit
that referenced
this pull request
Feb 19, 2025
fix: Adapter prototype don't match expected prototype
prafull-opensignlabs
added a commit
that referenced
this pull request
Feb 21, 2025
Merge pull request #316 from OpenSignLabs/patch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 9 updates in the /apps/OpenSignServer directory:
1.3.5
1.6.0
7.2.1
7.3.3
7.21.5
7.23.7
8.5.1
9.0.0
6.3.1
6.4.0
5.7.1
5.7.2
7.1.0
4.10.0
5.5.1
1.2.3
1.2.5
1.5.1
1.6.0
7.23.0
7.23.7
4.1.1
4.2.0
4.2.0
4.3.1
1.15.3
1.15.4
Updates
axios
from 1.3.5 to 1.6.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
f7adacd
chore(release): v1.6.0 (#6031)9917e67
chore(ci): fix release-it arg; (#6032)96ee232
fix(CSRF): fixed CSRF vulnerability CVE-2023-45857 (#6028)7d45ab2
chore(tests): fixed tests to pass in node v19 and v20 withkeep-alive
enabl...5aaff53
fix(dns): fixed lookup function decorator to work properly in node v20; (#6011)a48a63a
chore(docs): added AxiosHeaders docs; (#5932)a1c8ad0
fix(types): fix AxiosHeaders types; (#5931)2ac731d
chore(docs): update readme.md (#5889)88fb52b
chore(release): v1.5.1 (#5920)e410779
fix(adapters): improved adapters loading logic to have clear error messages; ...Updates
mongoose
from 7.2.1 to 7.3.3Release notes
Sourced from mongoose's releases.
... (truncated)
Changelog
Sourced from mongoose's changelog.
... (truncated)
Commits
90d84fd
chore: release 7.3.382b9c3c
style: fix lint02699fa
Merge branch 'vkarpov15/avoid-prototype-pollution'2188458
Merge pull request #13577 from Automattic/vkarpov15/gh-13529e94ca23
Merge pull request #13589 from Automattic/vkarpov15/gh-135821a998e2
Merge pull request #13588 from Automattic/vkarpov15/gh-13575cc722a1
test: add coverage for constructor propertiese29578d
fix: avoid prototype pollution on init422dff4
perf: avoid adding all doc array subpaths when 1 path is modifiedeb9a4f7
fix(document): clean up all array subdocument modified paths on save()Updates
@babel/traverse
from 7.21.5 to 7.23.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
e428a6d
v7.23.7d292822
fix: Crash when removing withoutProgram
(#16191)d02c1f7
v7.23.6cce807f
Bump debug to ^4.3.1 (#16164)8479012
v7.23.5da7dc40
Do not remove bindings when removing assignment expression path (#16131)fadc081
fix: Unexpected duplication of comments (#16110)13a5c83
v7.23.45e1c5f0
Use prettier 3.1 (#16098)1bce5c9
v7.23.3Updates
jsonwebtoken
from 8.5.1 to 9.0.0Changelog
Sourced from jsonwebtoken's changelog.
Commits
e1fa9dc
Merge pull request from GHSA-8cf7-32gw-wr335eaedbf
chore(ci): remove github test actions job (#861)cd4163e
chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)ecdf6cc
fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...8345030
fix(sign&verify)!: Remove defaultnone
support fromsign
andverify
met...7e6a86b
Upload OpsLevel YAML (#849)74d5719
docs: update references vercel/ms references (#770)d71e383
docs: document "invalid token" error3765003
docs: fix spelling in README.md: Peak -> Peek (#754)a46097e
docs: make decode impossible to discover before verifyMaintainer changes
This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.
Updates
parse-server
from 6.3.1 to 6.4.0Release notes
Sourced from parse-server's releases.
... (truncated)
Commits
5b1bb59
chore(release): 6.4.0 [skip ci]2612a38
build: Release (#8809)c6355cd
release90aac62
Merge branch 'release' into build-releaseea57a77
refactor: Server crash when uploading file without extension; fixes security ...0593985
chore(release): 6.4.0-beta.1 [skip ci]f5e20f9
build: Release (#8749)9c6cdf4
release4baeae4
Merge branch 'beta' into build6ea65f2
chore(release): 6.3.0-alpha.9 [skip ci]Updates
semver
from 5.7.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313
chore: release 5.7.22f8fd41
fix: better handling of whitespace (#585)deb5ad5
chore:@npmcli/template-oss
@4
.16.0Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Removes
got
Updates
mongodb-runner
from 4.10.0 to 5.5.1Commits
Maintainer changes
This version was pushed to npm by devtoolsbot, a new releaser for mongodb-runner since your current version.
Updates
word-wrap
from 1.2.3 to 1.2.5Release notes
Sourced from word-wrap's releases.
Commits
207044e
1.2.59894315
revert default indent