This repository was archived by the owner on Sep 2, 2025. It is now read-only.
build(deps): bump the npm_and_yarn group with 29 updates #86
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 29 updates: | Package | From | To | | --- | --- | --- | | [request](https://github.com/request/request) | `2.88.0` | `2.88.2` | | [@types/request](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/request) | `2.48.1` | `2.48.12` | | [tar](https://github.com/isaacs/node-tar) | `4.4.8` | `6.2.1` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.5.5` | `7.24.8` | | [ajv](https://github.com/ajv-validator/ajv) | `6.7.0` | `6.12.6` | | [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` | | [micromatch](https://github.com/micromatch/micromatch) | `3.1.10` | `4.0.7` | | [dot-prop](https://github.com/sindresorhus/dot-prop) | `4.2.0` | `4.2.1` | | [conventional-changelog-angular](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-angular) | `5.0.3` | `5.0.13` | | [conventional-changelog-writer](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-writer) | `4.0.3` | `4.1.0` | | [conventional-changelog-jshint](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-jshint) | `2.0.1` | `2.0.9` | | [got](https://github.com/sindresorhus/got) | `6.7.1` | `removed` | | [gts](https://github.com/google/gts) | `0.9.0` | `5.3.1` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.1.2` | `4.7.8` | | [kind-of](https://github.com/jonschlinkert/kind-of) | `3.2.2` | `6.0.3` | | [https-proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/https-proxy-agent) | `2.2.2` | `2.2.4` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [json-bigint](https://github.com/sidorares/json-bigint) | `0.3.0` | `1.0.0` | | [google-auth-library](https://github.com/googleapis/google-auth-library-nodejs) | `5.1.0` | `9.11.0` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [mocha](https://github.com/mochajs/mocha) | `5.2.0` | `10.6.0` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.0` | `2.7.0` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `10.1.0` | `13.1.1` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `2.4.3` | `2.5.0` | | [y18n](https://github.com/yargs/y18n) | `4.0.0` | `4.0.3` | Updates `request` from 2.88.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `@types/request` from 2.48.1 to 2.48.12 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/request) Updates `tar` from 4.4.8 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.8...v6.2.1) Updates `@babel/traverse` from 7.5.5 to 7.24.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-traverse) Updates `ajv` from 6.7.0 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.7.0...v6.12.6) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `micromatch` from 3.1.10 to 4.0.7 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@3.1.10...4.0.7) Updates `dot-prop` from 4.2.0 to 4.2.1 - [Release notes](https://github.com/sindresorhus/dot-prop/releases) - [Commits](sindresorhus/dot-prop@v4.2.0...v4.2.1) Updates `conventional-changelog-angular` from 5.0.3 to 5.0.13 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-angular/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-angular-v5.0.13/packages/conventional-changelog-angular) Updates `conventional-changelog-writer` from 4.0.3 to 4.1.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-writer/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-writer-v4.1.0/packages/conventional-changelog-writer) Updates `conventional-changelog-jshint` from 2.0.1 to 2.0.9 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-jshint/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-jshint@2.0.9/packages/conventional-changelog-jshint) Removes `got` Updates `gts` from 0.9.0 to 5.3.1 - [Release notes](https://github.com/google/gts/releases) - [Changelog](https://github.com/google/gts/blob/main/CHANGELOG.md) - [Commits](google/gts@v0.9.0...v5.3.1) Updates `handlebars` from 4.1.2 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.2...v4.7.8) Updates `kind-of` from 3.2.2 to 6.0.3 - [Changelog](https://github.com/jonschlinkert/kind-of/blob/master/CHANGELOG.md) - [Commits](jonschlinkert/kind-of@3.2.2...6.0.3) Updates `https-proxy-agent` from 2.2.2 to 2.2.4 - [Release notes](https://github.com/TooTallNate/proxy-agents/releases) - [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/https-proxy-agent/CHANGELOG.md) - [Commits](https://github.com/TooTallNate/proxy-agents/commits/2.2.4/packages/https-proxy-agent) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `json-bigint` from 0.3.0 to 1.0.0 - [Commits](sidorares/json-bigint@v0.3.0...v1.0.0) Updates `google-auth-library` from 5.1.0 to 9.11.0 - [Release notes](https://github.com/googleapis/google-auth-library-nodejs/releases) - [Changelog](https://github.com/googleapis/google-auth-library-nodejs/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-nodejs@v5.1.0...v9.11.0) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `lodash` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mocha` from 5.2.0 to 10.6.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v5.2.0...v10.6.0) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `node-fetch` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.7.0) Updates `yargs-parser` from 10.1.0 to 13.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](yargs/yargs-parser@v10.1.0...v13.1.1) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `tough-cookie` from 2.4.3 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v2.5.0) Updates `y18n` from 4.0.0 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3) --- updated-dependencies: - dependency-name: request dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@types/request" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tar dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: dot-prop dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: conventional-changelog-angular dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: conventional-changelog-writer dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: conventional-changelog-jshint dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: gts dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: kind-of dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: https-proxy-agent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-bigint dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: google-auth-library dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 29 updates:
2.88.02.88.22.48.12.48.124.4.86.2.17.5.57.24.86.7.06.12.62.3.23.0.33.1.104.0.74.2.04.2.15.0.35.0.134.0.34.1.02.0.12.0.96.7.1removed0.9.05.3.14.1.24.7.83.2.26.0.32.2.22.2.41.3.51.3.80.3.01.0.05.1.09.11.00.2.30.4.04.17.154.17.211.2.01.2.85.2.010.6.00.5.10.5.62.6.02.7.010.1.013.1.16.5.26.5.32.4.32.5.04.0.04.0.3Updates
requestfrom 2.88.0 to 2.88.2Changelog
Sourced from request's changelog.
Commits
Updates
@types/requestfrom 2.48.1 to 2.48.12Commits
Updates
tarfrom 4.4.8 to 6.2.1Release notes
Sourced from tar's releases.
Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
@babel/traversefrom 7.5.5 to 7.24.8Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
1f5af44v7.24.8c90bb0c[babel 8] Remove methods starting with_in@babel/traverse(#16504)e0368a8Avoid checkingScope.globalsmultiple times (#16619)683c654Enable some lint rules (#16605)cfe13c2[babel 8] Updateglobalsdependency (#16600)c36fa6aUpdate typescript-eslint v8 (#16557)12619ffimprove getBindingIdentifiers.keys typing (#16570)424fc90Update to TypeScript 5.5 (#16536)bf1e9a3v7.24.74463aa5fix: incorrectconstantViolationswith destructuring (#16522)Updates
ajvfrom 6.7.0 to 6.12.6Release notes
Sourced from ajv's releases.
... (truncated)
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...Updates
bracesfrom 2.3.2 to 3.0.3Changelog
Sourced from braces's changelog.
Commits
Updates
micromatchfrom 3.1.10 to 4.0.7Release notes
Sourced from micromatch's releases.
Commits
07b8870Release 4.0.7.9cc27ccPrepare for 4.0.7 with picomatch v290dc0cdUpdate README.md2c56a86Add sponsor to readme002d0d14.0.5 - Massive (100x) performance improvement ofmicromatch.not(), thanks ...4201cb4fix windows tests32fe3feadd github workflows, upgrade deps9a26c20Merge pull request #228 from antonyk/patch-19b9abacMerge pull request #229 from antonyk/patch-23899055Merge pull request #233 from joyceerhl/patch-1Maintainer changes
This version was pushed to npm by paulmillr, a new releaser for micromatch since your current version.
Updates
dot-propfrom 4.2.0 to 4.2.1Release notes
Sourced from dot-prop's releases.
Commits
c914124feat: patch 4.2.0 with fixes for CVE-2020-8116Updates
conventional-changelog-angularfrom 5.0.3 to 5.0.13Release notes
Sourced from conventional-changelog-angular's releases.
Changelog
Sourced from conventional-changelog-angular's changelog.
... (truncated)
Commits
e30343bchore: release conventional-changelog-angular 5.0.13 (#847)02b3d53fix(conventional-commits-parser): address CVE-2021-23425 (#841)cc567b9Publish07ba18cdocs: add missing detailed explanation link (#620)d15b90echore(deps): update eslint rules (#694)3dedddcPublishde4f630fix(deps): update dependency compare-func to v2 (#647)8f82b5adocs(conventional-changelog-angular): fix README link (#649)83643c5Publishd1bfdb9chore: continue to address the fact that release has not been runMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for conventional-changelog-angular since your current version.
Updates
conventional-changelog-writerfrom 4.0.3 to 4.1.0Changelog
Sourced from conventional-changelog-writer's changelog.
... (truncated)
Commits
77725cfchore: release conventional-changelog-writer 4.1.0 (#724)2bd09e9build: move to release-please for publishing (#722)e869fe6feat: add helper for parsing array of commits (#711)cc567b9Publishf760aa4deps: update meow (#695)d15b90echore(deps): update eslint rules (#694)7ae618cfix(deps): update dependency through2 to v4 (#657)3dedddcPublishde4f630fix(deps): update dependency compare-func to v2 (#647)c5ae3abPublishMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for conventional-changelog-writer since your current version.
Updates
conventional-changelog-jshintfrom 2.0.1 to 2.0.9Changelog
Sourced from conventional-changelog-jshint's changelog.
Commits
cc567b9Publishd15b90echore(deps): update eslint rules (#694)3dedddcPublishde4f630fix(deps): update dependency compare-func to v2 (#647)83643c5Publishd1bfdb9chore: continue to address the fact that release has not been run9f6c56cchore: fix version in package.jsonb9f5057chore!: drop support for Node 8 (#599)0a2c5d3test: make all tests run on windows (#564)0d73855chore(devDeps): update eslint and related packages (#560)Removes
gotUpdates
gtsfrom 0.9.0 to 5.3.1Release notes
Sourced from gts's releases.
... (truncated)
Changelog
Sourced from gts's changelog.
... (truncated)
Commits
db44ccechore(main): release 5.3.1 (#862)3c054cdchore(deps): update dependency@types/nodeto v20.12.7 (#872)eefd53achore(deps): lock file maintenance (#874)c0db7abchore(deps): update dependency@types/nodeto v20.12.4 (#871)9cd12a8chore(deps): lock file maintenance (#842)39c78a4chore(deps): update dependency@types/nodeto v20.12.3 (#870)5c87d95chore(deps): update dependency@types/nodeto v20.12.2 (#869)efbe3a8fix(deps): replace dependency eslint-plugin-node with eslint-plugin-n (#865)0bd8195build: test on node 18 (#866)7424fe1perf: Supercharge Performance & Efficiency: LeveragingPromise.allfor Reso...Maintainer changes
This version was pushed to npm by google-wombot, a new releaser for gts since your current version.
Updates
handlebarsfrom 4.1.2 to 4.7.8Release notes
Sourced from handlebars's releases.