Bump the npm_and_yarn group across 1 directories with 5 updates #22

dependabot · 2024-02-22T10:22:46Z

Bumps the npm_and_yarn group with 3 updates in the /. directory: node-sass, http-proxy and websocket-extensions.

Updates node-sass from 4.9.0 to 7.0.0

Release notes

v7.0.0

Breaking changes

Drop support for Node 15 (@nschonni)

Set rejectUnauthorized to true by default (@scott-ut, #3149)

Features

Add support for Node 17 (@nschonni)

Dependencies

Bump eslint from 7.32.0 to 8.0.0 (@nschonni, #3191)

Bump fs-extra from 0.30.0 to 10.0.0 (@nschonni, #3102)

Bump npmlog from 4.1.2 to 5.0.0 (@nschonni, #3156)

Bump chalk from 1.1.3 to 4.1.2 (@nschonni, #3161)

Community

Remove double word "support" from documentation (@pzrq, #3159)

Misc

Bump various GitHub Actions dependencies (@nschonni)

Supported Environments

OS Architecture Node

Windows x86 & x64 12, 14, 16, 17

OSX x64 12, 14, 16, 17

Linux* x64 12, 14, 16, 17

Alpine Linux x64 12, 14, 16, 17

FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.1

Dependencies

Remove mkdirp (@jimmywarting, #3108)

Bump meow to 9.0.0 (@ykolbin, #3125)

Bump mocha to 9.0.1 (@xzyfer, #3134)

Misc

Use default Apline version from docker-node (@nschonni, #3121)

Supported Environments

... (truncated)

Changelog

Sourced from node-sass's changelog.

v4.14.0

https://github.com/sass/node-sass/releases/tag/v4.14.0

v4.13.1

https://github.com/sass/node-sass/releases/tag/v4.13.1

v4.13.0

https://github.com/sass/node-sass/releases/tag/v4.13.0

v4.12.0

https://github.com/sass/node-sass/releases/tag/v4.12.0

v4.11.0

https://github.com/sass/node-sass/releases/tag/v4.11.0

v4.10.0

https://github.com/sass/node-sass/releases/tag/v4.10.0

v4.9.4

https://github.com/sass/node-sass/releases/tag/v4.9.4

v4.9.3

https://github.com/sass/node-sass/releases/tag/v4.9.3

v4.9.2

https://github.com/sass/node-sass/releases/tag/v4.9.2

v4.9.1

https://github.com/sass/node-sass/releases/tag/v4.9.1

Commits

918dcb3 Lint fix
0a21792 Set rejectUnauthorized to true by default (#3149)
e80d4af chore: Drop EOL Node 15 (#3122)
d753397 feat: Add Node 17 support (#3195)
dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0
bfa1a3c build(deps): bump actions/setup-node from 2.4.0 to 2.4.1
80d6c00 chore: Windows x86 on GitHub Actions (#3041)
566dc27 build(deps-dev): bump fs-extra from 0.30.0 to 10.0.0 (#3102)
7bb5157 build(deps): bump npmlog from 4.1.2 to 5.0.0 (#3156)
2efb38f build(deps): bump chalk from 1.1.3 to 4.1.2 (#3161)
Additional commits viewable in compare view

Updates http-proxy from 1.17.0 to 1.18.1

Changelog

Sourced from http-proxy's changelog.

v1.18.1 - 2020-05-17

Merged

Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447)

Remove node6 support, add node12 to build [#1397](https://github.com/http-party/node-http-proxy/issues/1397)

1.18.0 - 2019-09-18

Merged

Added in auto-changelog module set to keepachangelog format [#1373](https://github.com/http-party/node-http-proxy/issues/1373)

fix 'Modify Response' readme section to avoid unnecessary array copying [#1300](https://github.com/http-party/node-http-proxy/issues/1300)

Fix incorrect target name for reverse proxy example [#1135](https://github.com/http-party/node-http-proxy/issues/1135)

Fix modify response middleware example [#1139](https://github.com/http-party/node-http-proxy/issues/1139)

[dist] Update dependency async to v3 [#1359](https://github.com/http-party/node-http-proxy/issues/1359)

Fix path to local http-proxy in examples. [#1072](https://github.com/http-party/node-http-proxy/issues/1072)

fix reverse-proxy example require path [#1067](https://github.com/http-party/node-http-proxy/issues/1067)

Update README.md [#970](https://github.com/http-party/node-http-proxy/issues/970)

[dist] Update dependency request to ~2.88.0 [SECURITY] [#1357](https://github.com/http-party/node-http-proxy/issues/1357)

[dist] Update dependency eventemitter3 to v4 [#1365](https://github.com/http-party/node-http-proxy/issues/1365)

[dist] Update dependency colors to v1 [#1360](https://github.com/http-party/node-http-proxy/issues/1360)

[dist] Update all non-major dependencies [#1356](https://github.com/http-party/node-http-proxy/issues/1356)

[dist] Update dependency agentkeepalive to v4 [#1358](https://github.com/http-party/node-http-proxy/issues/1358)

[dist] Update dependency nyc to v14 [#1367](https://github.com/http-party/node-http-proxy/issues/1367)

[dist] Update dependency concat-stream to v2 [#1363](https://github.com/http-party/node-http-proxy/issues/1363)

x-forwarded-host overwrite for mutli level proxies [#1267](https://github.com/http-party/node-http-proxy/issues/1267)

[refactor doc] Complete rename to http-party org. [#1362](https://github.com/http-party/node-http-proxy/issues/1362)

Highlight correct lines for createProxyServer [#1117](https://github.com/http-party/node-http-proxy/issues/1117)

Fix docs for rewrite options - 201 also handled [#1147](https://github.com/http-party/node-http-proxy/issues/1147)

Update .nyc_output [#1339](https://github.com/http-party/node-http-proxy/issues/1339)

Configure Renovate [#1355](https://github.com/http-party/node-http-proxy/issues/1355)

[examples] Restream body before proxying, support for Content-Type of application/x-www-form-urlencoded [#1264](https://github.com/http-party/node-http-proxy/issues/1264)

Commits

[dist] New test fixtures. 7e4a0e5

[dist] End of an era. a9b09cc

[dist] Version bump. 1.18.0 9bbe486

[fix] Latest versions. 59c4403

[fix test] Update tests. dd1d08b

[dist] Update dependency ws to v3 [SECURITY] b00911c

[dist] .gitattributes all the things. fc93520

[dist] Regenerate package-lock.json. 16d4f8a

Commits

9b96cd7 1.18.1
335aeeb Skip sending the proxyReq event when the expect header is present (#1447)
dba3966 Remove node6 support, add node12 to build (#1397)
9bbe486 [dist] Version bump. 1.18.0
6e4bef4 Added in auto-changelog module set to keepachangelog format (#1373)
d056241 fix 'Modify Response' readme section to avoid unnecessary array copying (#1300)
244303b Fix incorrect target name for reverse proxy example (#1135)
b4028ba Fix modify response middleware example (#1139)
77a9815 [dist] Update dependency async to v3 (#1359)
c662f9e Fix path to local http-proxy in examples. (#1072)
Additional commits viewable in compare view

Updates tar from 2.2.1 to 6.2.0

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

Changelog

Sourced from tar's changelog.

Changelog

6.2

Add support for brotli compression

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

6.0

Drop support for node 6 and 8

fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

Address unpack race conditions using path reservations

Change large-numbers errors from TypeError to Error

Add TAR_* error codes

Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive

do not treat ignored entries as an invalid archive

drop support for node v4

unpack: conditionally use a file mapping to write files on Windows

Set more portable 'mode' value in portable mode

Set portable gzip option in portable mode

4.4

Add 'mtime' option to tar creation to force mtime

unpack: only reuse file fs entries if nlink = 1

unpack: rename before unlinking files on Windows

Fix encoding/decoding of base-256 numbers

Use stat instead of lstat when checking CWD

... (truncated)

Commits

5bc9d40 6.2.0
fe1ef5e changelog 6.2
e483220 get rid of npm lint stuff
689928a ci that works outside of npm org
db6f539 file inference improvements for .tbr and .tgz
336fa8f refactor: dry and other pr comments
eeba222 chore: lint fixes
c9fc57c feat: add initial support for brotli
8c5af15 silence dependabot
3302cf7 6.1.15
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Updates websocket-extensions from 0.1.3 to 0.1.4

Changelog

Sourced from websocket-extensions's changelog.

0.1.4 / 2020-06-02

Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin)

Change license from MIT to Apache 2.0

Commits

5ea0b42 Bump version to 0.1.4
29496f6 Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser
4a76c75 Add Node versions 13 and 14 on Travis
44a677a Formatting change: {...} should have spaces inside the braces
f6c50ab Let npm reformat package.json
2d211f3 Change markdown formatting of docs.
0b62083 Update Travis target versions.
729a465 Switch license to Apache 2.0.
See full diff in compare view

Updates yargs-parser from 5.0.1 to 10.1.0

Changelog

Sourced from yargs-parser's changelog.

10.1.0 (2018-06-29)

Features

add set-placeholder-key configuration (#123) (19386ee)

10.0.0 (2018-04-04)

Bug Fixes

do not set boolean flags if not defined in argv (#119) (f6e6599)

BREAKING CHANGES

boolean flags defined without a default value will now behave like other option type and won't be set in the parsed results when the user doesn't set the corresponding CLI arg.

Previous behavior:
var parse = require('yargs-parser');
parse('--flag', {boolean: ['flag']});
// => { _: [], flag: true }
parse('--no-flag', {boolean: ['flag']});
// => { _: [], flag: false }
parse('', {boolean: ['flag']});
// => { _: [], flag: false }
New behavior:
var parse = require('yargs-parser');
parse('--flag', {boolean: ['flag']});
// => { _: [], flag: true }
parse('--no-flag', {boolean: ['flag']});
// => { _: [], flag: false }
parse('', {boolean: ['flag']});
// => { _: [] } => flag not set similarly to other option type

... (truncated)

Commits

82f4ea5 chore(release): 10.1.0
398cfc7 chore: fix appveyor config
19386ee feat: add set-placeholder-key configuration (#123)
8c9706f chore(release): 10.0.0
f6e6599 fix: do not set boolean flags if not defined in argv (#119)
523aecd chore(release): 9.0.2
9b28aad fix: nargs was still aggressively consuming too many arguments
cf0d9d0 chore(release): 9.0.1
4fef206 fix: nargs was consuming too many arguments
9734d9c chore(release): 9.0.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 3 updates in the /. directory: [node-sass](https://github.com/sass/node-sass), [http-proxy](https://github.com/http-party/node-http-proxy) and [websocket-extensions](https://github.com/faye/websocket-extensions-node). Updates `node-sass` from 4.9.0 to 7.0.0 - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](sass/node-sass@v4.9.0...v7.0.0) Updates `http-proxy` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.17.0...1.18.1) Updates `tar` from 2.2.1 to 6.2.0 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v2.2.1...v6.2.0) Updates `websocket-extensions` from 0.1.3 to 0.1.4 - [Changelog](https://github.com/faye/websocket-extensions-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-extensions-node@0.1.3...0.1.4) Updates `yargs-parser` from 5.0.1 to 10.1.0 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](yargs/yargs-parser@v5.0.1...v10.1.0) --- updated-dependencies: - dependency-name: node-sass dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: http-proxy dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: websocket-extensions dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 22, 2024

dependabot bot mentioned this pull request Feb 22, 2024

Bump the npm_and_yarn group across 1 directories with 5 updates #19

Closed

jducro merged commit a3074c3 into master Feb 22, 2024
0 of 2 checks passed

jducro deleted the dependabot/npm_and_yarn/npm_and_yarn-security-group-998b9ab890 branch February 22, 2024 10:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directories with 5 updates #22

Bump the npm_and_yarn group across 1 directories with 5 updates #22

dependabot bot commented on behalf of github Feb 22, 2024

OS	Architecture	Node
Windows	x86 & x64	12, 14, 16, 17
OSX	x64	12, 14, 16, 17
Linux*	x64	12, 14, 16, 17
Alpine Linux	x64	12, 14, 16, 17
FreeBSD	i386 amd64	12, 14

Bump the npm_and_yarn group across 1 directories with 5 updates #22

Bump the npm_and_yarn group across 1 directories with 5 updates #22

Conversation

dependabot bot commented on behalf of github Feb 22, 2024

v7.0.0

Breaking changes

Features

Dependencies

Community

Misc

Supported Environments

v6.0.1

Dependencies

Misc

Supported Environments

v4.14.0

v4.13.1

v4.13.0

v4.12.0

v4.11.0

v4.10.0

v4.9.4

v4.9.3

v4.9.2

v4.9.1

v1.18.1 - 2020-05-17

Merged

1.18.0 - 2019-09-18

Merged

Commits

v6.1.13

6.1.13 (2022-12-07)

Dependencies

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

Documentation

Changelog

6.2

6.1.13 (2022-12-07)

Dependencies

6.1.12 (2022-10-31)

Bug Fixes

Documentation

6.0

5.0

4.4

0.1.4 / 2020-06-02

10.1.0 (2018-06-29)

Features

10.0.0 (2018-04-04)

Bug Fixes

BREAKING CHANGES