Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: bump the production-dependencies group with 6 updates #94

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 4, 2024

Bumps the production-dependencies group with 6 updates:

Package From To
axios 1.6.2 1.6.4
reflect-metadata 0.1.13 0.2.1
typeorm 0.3.17 0.3.19
@vue/compat 3.3.10 3.4.5
swagger-ui 5.10.3 5.10.5
vue 3.3.10 3.4.5

Updates axios from 1.6.2 to 1.6.4

Release notes

Sourced from axios's releases.

Release v1.6.4

Release notes:

Bug Fixes

  • security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
  • security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

Release v1.6.3

Release notes:

Bug Fixes

  • Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

Changelog

Sourced from axios's changelog.

1.6.4 (2024-01-03)

Bug Fixes

  • security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
  • security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

1.6.3 (2023-12-26)

Bug Fixes

  • Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

Commits

Updates reflect-metadata from 0.1.13 to 0.2.1

Release notes

Sourced from reflect-metadata's releases.

v0.2.1

What's Changed

Full Changelog: rbuckton/reflect-metadata@v0.2.0...v0.2.1

reflect-metadata 0.2.0

What's Changed

Full Changelog: rbuckton/reflect-metadata@v0.1.14...v0.2.0

reflect-metadata 0.2.0-pre.0

What's Changed

Full Changelog: rbuckton/reflect-metadata@v0.1.14...v0.2.0-pre.0

reflect-metadata 0.1.14

What's Changed

New Contributors

Full Changelog: rbuckton/reflect-metadata@v0.1.13...v0.1.14

Commits
  • 5c2589f 0.2.1
  • 1e66739 Fix stack overflow crash in isProviderFor
  • 68fd019 Merge pull request #149 from rbuckton/lite-mode-no-dynamic-eval
  • 85d168f Remove dynamic execution from lite-mode
  • 893db5d Drop prerelease from version
  • 6ef3aed Merge pull request #144 from rbuckton/lite-mode
  • 7391602 Merge branch 'main' into lite-mode
  • f16259f Update ci.yml
  • 4e604aa Create ci.yml
  • ad6f84b Mark as prerelease for testing purposes
  • Additional commits viewable in compare view

Updates typeorm from 0.3.17 to 0.3.19

Release notes

Sourced from typeorm's releases.

0.3.19

Bug Fixes

  • fixed Cannot read properties of undefined (reading 'sync') caused after glob package upgrade

0.3.18

Bug Fixes

Features

... (truncated)

Changelog

Sourced from typeorm's changelog.

0.3.19 (2024-01-03)

Bug Fixes

  • fixed Cannot read properties of undefined (reading 'sync') caused after glob package upgrade

0.3.18 (2024-01-03)

Bug Fixes

... (truncated)

Commits

Updates @vue/compat from 3.3.10 to 3.4.5

Release notes

Sourced from @​vue/compat's releases.

v3.4.5

Please refer to CHANGELOG.md for details.

v3.4.4

Please refer to CHANGELOG.md for details.

v3.4.3

Please refer to CHANGELOG.md for details.

v3.4.2

Please refer to CHANGELOG.md for details.

v3.4.1

Please refer to CHANGELOG.md for details.

v3.4.0

Please refer to CHANGELOG.md for details.

v3.4.0-rc.3

Please refer to CHANGELOG.md for details.

v3.4.0-rc.2

Please refer to CHANGELOG.md for details.

v3.4.0-rc.1

Please refer to CHANGELOG.md for details.

v3.4.0-beta.4

Please refer to CHANGELOG.md for details.

v3.4.0-beta.3

Please refer to CHANGELOG.md for details.

v3.4.0-beta.2

Please refer to CHANGELOG.md for details.

v3.4.0-beta.1

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.4

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.3

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.2

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from @​vue/compat's changelog.

3.4.5 (2024-01-04)

Bug Fixes

  • compiler-sfc: fix co-usage of defineModel transform options and props destructure (b20350d), closes #9972
  • compiler-sfc: fix sfc template unref rewrite for class instantiation (ae60a91), closes #6483 #6491
  • compiler-ssr: fix node clone edge case caused by AST reuse (#9983) (7dbdb3e), closes #9981
  • watch: cleanup watcher effect from scope when manually stopped (#9978) (d2d8955)

3.4.4 (2024-01-03)

Bug Fixes

  • compiler-sfc: fix scss source map regression (71d3121), closes #9970 #9969
  • compiler-sfc: use compilerOptions when re-parsing consumed AST (d94d8d4)
  • defineModel: support kebab-case/camelCase mismatches (#9950) (10ccb9b)
  • runtime-core: correctly assign suspenseId to avoid conflicts with the default id (#9966) (0648804), closes #9944
  • ssr: avoid rendering transition-group slot content as a fragment (#9961) (0160264), closes #9933
  • watch: remove instance unmounted short circuit in getter of watchEffect (#9948) (f300a40)
  • watch: revert watch behavior when watching shallow reactive objects (a9f781a), closes #9965

Performance Improvements

  • watch: avoid double traverse for reactive source (24d77c2)

3.4.3 (2023-12-30)

Bug Fixes

  • compiler-sfc: respect sfc parse options in cache key (b8d58ec)

3.4.2 (2023-12-30)

Bug Fixes

  • compiler-sfc: fix dev regression for dot / namespace component usage (dce99c1), closes #9947
  • runtime-core: support deep: false when watch reactive (#9928) (4f703d1), closes #9916
  • ssr: fix hydration error for slot outlet inside transition-group (#9937) (6cb00ed), closes #9933

... (truncated)

Commits
  • 0275dd3 release: v3.4.5
  • b20350d fix(compiler-sfc): fix co-usage of defineModel transform options and props de...
  • ae60a91 fix(compiler-sfc): fix sfc template unref rewrite for class instantiation
  • fda5192 chore: disallow console statement (#9986)
  • 0ae651a chore: remove log
  • e790e1b build: add production/development export conditions (#9977)
  • 7dbdb3e fix(compiler-ssr): fix node clone edge case caused by AST reuse (#9983)
  • d2d8955 fix(watch): cleanup watcher effect from scope when manually stopped (#9978)
  • f70f7ca release: v3.4.4
  • fe03b2f chore(apiWatch): constraint deep passes boolean (#9952)
  • Additional commits viewable in compare view

Updates swagger-ui from 5.10.3 to 5.10.5

Release notes

Sourced from swagger-ui's releases.

Swagger UI v5.10.5 Released!

5.10.5 (2023-12-14)

Bug Fixes

Swagger UI v5.10.4 Released!

5.10.4 (2023-12-14)

Bug Fixes

  • styles: fix regressions in operations on smaller screens (#9425) (748dec1), closes #8940
Commits
  • 7582a43 chore(release): cut the v5.10.5 release
  • 745cd2a fix: display defined OpenAPI Parameter Objects (#9426)
  • 8fb9a6b chore(release): cut the v5.10.4 release
  • 748dec1 fix(styles): fix regressions in operations on smaller screens (#9425)
  • f308eb3 chore(deps-dev): bump eslint from 8.54.0 to 8.55.0 (#9417)
  • e9ccc3f chore(deps-dev): bump postcss from 8.4.31 to 8.4.32 (#9416)
  • 8c69554 chore(deps-dev): bump @​babel/core from 7.23.3 to 7.23.5 (#9413)
  • 195848c chore(deps): bump @​babel/runtime-corejs3 from 7.23.4 to 7.23.5 (#9408)
  • c91c81c chore(deps-dev): bump @​babel/preset-env from 7.23.3 to 7.23.5 (#9407)
  • 42732c9 chore(deps-dev): bump cypress from 13.5.1 to 13.6.0 (#9403)
  • Additional commits viewable in compare view

Updates vue from 3.3.10 to 3.4.5

Release notes

Sourced from vue's releases.

v3.4.5

Please refer to CHANGELOG.md for details.

v3.4.4

Please refer to CHANGELOG.md for details.

v3.4.3

Please refer to CHANGELOG.md for details.

v3.4.2

Please refer to CHANGELOG.md for details.

v3.4.1

Please refer to CHANGELOG.md for details.

v3.4.0

Please refer to CHANGELOG.md for details.

v3.4.0-rc.3

Please refer to CHANGELOG.md for details.

v3.4.0-rc.2

Please refer to CHANGELOG.md for details.

v3.4.0-rc.1

Please refer to CHANGELOG.md for details.

v3.4.0-beta.4

Please refer to CHANGELOG.md for details.

v3.4.0-beta.3

Please refer to CHANGELOG.md for details.

v3.4.0-beta.2

Please refer to CHANGELOG.md for details.

v3.4.0-beta.1

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.4

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.3

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.2

Please refer to CHANGELOG.md for details.

v3.4.0-alpha.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.4.5 (2024-01-04)

Bug Fixes

  • compiler-sfc: fix co-usage of defineModel transform options and props destructure (b20350d), closes #9972
  • compiler-sfc: fix sfc template unref rewrite for class instantiation (ae60a91), closes #6483 #6491
  • compiler-ssr: fix node clone edge case caused by AST reuse (#9983) (7dbdb3e), closes #9981
  • watch: cleanup watcher effect from scope when manually stopped (#9978) (d2d8955)

3.4.4 (2024-01-03)

Bug Fixes

  • compiler-sfc: fix scss source map regression (71d3121), closes #9970 #9969
  • compiler-sfc: use compilerOptions when re-parsing consumed AST (d94d8d4)
  • defineModel: support kebab-case/camelCase mismatches (#9950) (10ccb9b)
  • runtime-core: correctly assign suspenseId to avoid conflicts with the default id (#9966) (0648804), closes #9944
  • ssr: avoid rendering transition-group slot content as a fragment (#9961) (0160264), closes #9933
  • watch: remove instance unmounted short circuit in getter of watchEffect (#9948) (f300a40)
  • watch: revert watch behavior when watching shallow reactive objects (a9f781a), closes #9965

Performance Improvements

  • watch: avoid double traverse for reactive source (24d77c2)

3.4.3 (2023-12-30)

Bug Fixes

  • compiler-sfc: respect sfc parse options in cache key (b8d58ec)

3.4.2 (2023-12-30)

Bug Fixes

  • compiler-sfc: fix dev regression for dot / namespace component usage (dce99c1), closes #9947
  • runtime-core: support deep: false when watch reactive (#9928) (4f703d1), closes #9916
  • ssr: fix hydration error for slot outlet inside transition-group (#9937) (6cb00ed), closes #9933

... (truncated)

Commits
  • 0275dd3 release: v3.4.5
  • b20350d fix(compiler-sfc): fix co-usage of defineModel transform options and props de...
  • ae60a91 fix(compiler-sfc): fix sfc template unref rewrite for class instantiation
  • fda5192 chore: disallow console statement (#9986)
  • 0ae651a chore: remove log
  • e790e1b build: add production/development export conditions (#9977)
  • 7dbdb3e fix(compiler-ssr): fix node clone edge case caused by AST reuse (#9983)
  • d2d8955 fix(watch): cleanup watcher effect from scope when manually stopped (#9978)
  • f70f7ca release: v3.4.4
  • fe03b2f chore(apiWatch): constraint deep passes boolean (#9952)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.6.2` | `1.6.4` |
| [reflect-metadata](https://github.com/rbuckton/reflect-metadata) | `0.1.13` | `0.2.1` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.3.17` | `0.3.19` |
| [@vue/compat](https://github.com/vuejs/core) | `3.3.10` | `3.4.5` |
| [swagger-ui](https://github.com/swagger-api/swagger-ui) | `5.10.3` | `5.10.5` |
| [vue](https://github.com/vuejs/core) | `3.3.10` | `3.4.5` |


Updates `axios` from 1.6.2 to 1.6.4
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.6.2...v1.6.4)

Updates `reflect-metadata` from 0.1.13 to 0.2.1
- [Release notes](https://github.com/rbuckton/reflect-metadata/releases)
- [Changelog](https://github.com/rbuckton/reflect-metadata/blob/main/tsconfig-release.json)
- [Commits](rbuckton/reflect-metadata@v0.1.13...v0.2.1)

Updates `typeorm` from 0.3.17 to 0.3.19
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.3.17...0.3.19)

Updates `@vue/compat` from 3.3.10 to 3.4.5
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.3.10...v3.4.5)

Updates `swagger-ui` from 5.10.3 to 5.10.5
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Changelog](https://github.com/swagger-api/swagger-ui/blob/master/.releaserc)
- [Commits](swagger-api/swagger-ui@v5.10.3...v5.10.5)

Updates `vue` from 3.3.10 to 3.4.5
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.3.10...v3.4.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: reflect-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: typeorm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vue/compat"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: swagger-ui
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: vue
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 4, 2024
@neferin12
Copy link
Member

@dependabot merge

@dependabot dependabot bot merged commit 2d3ed32 into develop Jan 5, 2024
8 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-b9282527ca branch January 5, 2024 08:38
@neferin12
Copy link
Member

🎉 This issue has been resolved in version timeclicker_server-v1.8.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@neferin12
Copy link
Member

🎉 This issue has been resolved in version timeclicker_client-v2.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file released
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant