Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the security group in /web with 11 updates #4473

Merged
merged 1 commit into from Feb 24, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2024

Bumps the security group in /web with 11 updates:

Package From To
@storybook/addon-storysource 7.6.16 7.6.17
apexcharts 3.45.2 3.46.0
@aws-sdk/types 3.515.0 3.521.0
@storybook/addon-actions 7.6.16 7.6.17
@storybook/addon-interactions 7.6.16 7.6.17
@storybook/addon-links 7.6.16 7.6.17
@storybook/builder-webpack5 7.6.16 7.6.17
@types/react 18.2.55 18.2.58
eslint 8.56.0 8.57.0
sass 1.71.0 1.71.1
webpack 5.90.2 5.90.3

Updates @storybook/addon-storysource from 7.6.16 to 7.6.17

Release notes

Sourced from @​storybook/addon-storysource's releases.

v7.6.17

7.6.17

Changelog

Sourced from @​storybook/addon-storysource's changelog.

7.6.17

Commits

Updates apexcharts from 3.45.2 to 3.46.0

Release notes

Sourced from apexcharts's releases.

💎 Version 3.46.0

🆕 Enhancements

🐞 Bug fixes

  • Fix #4167 - shadow bug in multi-series chart
  • Fix #4242 - allow labels with Invalid text
Commits

Updates @aws-sdk/types from 3.515.0 to 3.521.0

Release notes

Sourced from @​aws-sdk/types's releases.

v3.521.0

3.521.0(2024-02-23)

Documentation Changes
  • client-appsync: Documentation only updates for AppSync (40c82c10)
  • client-rum: Doc-only update for new RUM metrics that were added (f281e0db)
  • client-qldb: Clarify possible values for KmsKeyArn and EncryptionDescription. (93fdd39f)
New Features
  • client-rds: Add pattern and length based validations for DBShardGroupIdentifier (089edf30)
  • requestHandler ctor param pass-through (#5820) (9fec71d1)

For list of updated packages, view updated-packages.md in assets-3.521.0.zip

v3.520.0

3.520.0(2024-02-22)

New Features
  • client-kinesis-video: Increasing NextToken parameter length restriction for List APIs from 512 to 1024. (6368fad9)
  • client-internetmonitor: This release adds IPv4 prefixes to health events (96fb3590)

For list of updated packages, view updated-packages.md in assets-3.520.0.zip

v3.519.0

3.519.0(2024-02-21)

New Features
  • client-lookoutequipment: This release adds a field exposing model quality to read APIs for models. It also adds a model quality field to the API response when creating an inference scheduler. (b8f82385)
  • client-ssm: This release adds support for sharing Systems Manager parameters with other AWS accounts. (200c1267)
  • client-iot-events: Increase the maximum length of descriptions for Inputs, Detector Models, and Alarm Models (c40a218f)
  • client-medialive: MediaLive now supports the ability to restart pipelines in a running channel. (edcc2965)

For list of updated packages, view updated-packages.md in assets-3.519.0.zip

v3.518.0

3.518.0(2024-02-20)

... (truncated)

Changelog

Sourced from @​aws-sdk/types's changelog.

3.521.0 (2024-02-23)

Features

Commits

Updates @storybook/addon-actions from 7.6.16 to 7.6.17

Release notes

Sourced from @​storybook/addon-actions's releases.

v7.6.17

7.6.17

Changelog

Sourced from @​storybook/addon-actions's changelog.

7.6.17

Commits

Updates @storybook/addon-interactions from 7.6.16 to 7.6.17

Release notes

Sourced from @​storybook/addon-interactions's releases.

v7.6.17

7.6.17

Changelog

Sourced from @​storybook/addon-interactions's changelog.

7.6.17

Commits

Updates @storybook/addon-links from 7.6.16 to 7.6.17

Release notes

Sourced from @​storybook/addon-links's releases.

v7.6.17

7.6.17

Changelog

Sourced from @​storybook/addon-links's changelog.

7.6.17

Commits

Updates @storybook/builder-webpack5 from 7.6.16 to 7.6.17

Release notes

Sourced from @​storybook/builder-webpack5's releases.

v7.6.17

7.6.17

Changelog

Sourced from @​storybook/builder-webpack5's changelog.

7.6.17

Commits

Updates @types/react from 18.2.55 to 18.2.58

Commits

Updates eslint from 8.56.0 to 8.57.0

Release notes

Sourced from eslint's releases.

v8.57.0

Features

  • 1120b9b feat: Add loadESLint() API method for v8 (#18098) (Nicholas C. Zakas)
  • dca7d0f feat: Enable eslint.config.mjs and eslint.config.cjs (#18066) (Nitin Kumar)

Bug Fixes

  • 2196d97 fix: handle absolute file paths in FlatRuleTester (#18064) (Nitin Kumar)
  • 69dd1d1 fix: Ensure config keys are printed for config errors (#18067) (Nitin Kumar)
  • 9852a31 fix: deep merge behavior in flat config (#18065) (Nitin Kumar)
  • 4c7e9b0 fix: allow circular references in config (#18056) (Milos Djermanovic)

Documentation

  • 84922d0 docs: Show prerelease version in dropdown (#18139) (Nicholas C. Zakas)
  • 5b8c363 docs: Switch to Ethical Ads (#18117) (Milos Djermanovic)
  • 77dbfd9 docs: show NEXT in version selectors (#18052) (Milos Djermanovic)

Chores

  • 1813aec chore: upgrade @​eslint/js@​8.57.0 (#18143) (Milos Djermanovic)
  • 5c356bb chore: package.json update for @​eslint/js release (Jenkins)
  • f4a1fe2 test: add more tests for ignoring files and directories (#18068) (Nitin Kumar)
  • 42c0aef ci: Enable CI for v8.x branch (#18047) (Milos Djermanovic)
Changelog

Sourced from eslint's changelog.

v8.57.0 - February 23, 2024

  • 1813aec chore: upgrade @​eslint/js@​8.57.0 (#18143) (Milos Djermanovic)
  • 5c356bb chore: package.json update for @​eslint/js release (Jenkins)
  • 84922d0 docs: Show prerelease version in dropdown (#18139) (Nicholas C. Zakas)
  • 1120b9b feat: Add loadESLint() API method for v8 (#18098) (Nicholas C. Zakas)
  • 5b8c363 docs: Switch to Ethical Ads (#18117) (Milos Djermanovic)
  • 2196d97 fix: handle absolute file paths in FlatRuleTester (#18064) (Nitin Kumar)
  • f4a1fe2 test: add more tests for ignoring files and directories (#18068) (Nitin Kumar)
  • 69dd1d1 fix: Ensure config keys are printed for config errors (#18067) (Nitin Kumar)
  • 9852a31 fix: deep merge behavior in flat config (#18065) (Nitin Kumar)
  • dca7d0f feat: Enable eslint.config.mjs and eslint.config.cjs (#18066) (Nitin Kumar)
  • 4c7e9b0 fix: allow circular references in config (#18056) (Milos Djermanovic)
  • 77dbfd9 docs: show NEXT in version selectors (#18052) (Milos Djermanovic)
  • 42c0aef ci: Enable CI for v8.x branch (#18047) (Milos Djermanovic)

v9.0.0-beta.0 - February 9, 2024

  • e40d1d7 chore: upgrade @​eslint/js@​9.0.0-beta.0 (#18108) (Milos Djermanovic)
  • 9870f93 chore: package.json update for @​eslint/js release (Jenkins)
  • 2c62e79 chore: upgrade @​eslint/eslintrc@​3.0.1 (#18107) (Milos Djermanovic)
  • 81f0294 chore: upgrade espree@10.0.1 (#18106) (Milos Djermanovic)
  • 5e2b292 chore: upgrade eslint-visitor-keys@4.0.0 (#18105) (Milos Djermanovic)
  • 9163646 feat!: Rule Tester checks for missing placeholder data in the message (#18073) (fnx)
  • 53f0f47 feat: Add loadESLint() API method for v9 (#18097) (Nicholas C. Zakas)
  • f1c7e6f docs: Switch to Ethical Ads (#18090) (Strek)
  • 15c143f docs: JS Foundation -> OpenJS Foundation in PR template (#18092) (Nicholas C. Zakas)
  • c4d26fd fix: use-isnan doesn't report on SequenceExpressions (#18059) (StyleShit)
  • 6ea339e docs: add stricter rule test validations to v9 migration guide (#18085) (Milos Djermanovic)
  • ce838ad chore: replace dependency npm-run-all with npm-run-all2 ^5.0.0 (#18045) (renovate[bot])
  • 3c816f1 docs: use relative link from CLI to core concepts (#18083) (Milos Djermanovic)
  • 54df731 chore: update dependency markdownlint-cli to ^0.39.0 (#18084) (renovate[bot])
  • 9458735 docs: fix malformed eslint config comments in rule examples (#18078) (Francesco Trotta)
  • 07a1ada docs: link from --fix CLI doc to the relevant core concept (#18080) (Bryan Mishkin)
  • 8f06a60 chore: update dependency shelljs to ^0.8.5 (#18079) (Francesco Trotta)
  • b844324 docs: Update team responsibilities (#18048) (Nicholas C. Zakas)
  • aadfb60 docs: document languageOptions and other v9 changes for context (#18074) (fnx)
  • 3c4d51d feat!: default for enforceForClassMembers in no-useless-computed-key (#18054) (Francesco Trotta)
  • 47e60f8 feat!: Stricter rule test validations (#17654) (fnx)
  • 1a94589 feat!: no-unused-vars default caughtErrors to 'all' (#18043) (Josh Goldberg ✨)
  • 857e242 docs: tweak explanation for meta.docs rule properties (#18057) (Bryan Mishkin)
  • 10485e8 docs: recommend messageId over message for reporting rule violations (#18050) (Bryan Mishkin)
  • 98b5ab4 docs: Update README (GitHub Actions Bot)
  • 93ffe30 chore: update dependency file-entry-cache to v8 (#17903) (renovate[bot])
  • 505fbf4 docs: update no-restricted-imports rule (#18015) (Tanuj Kanti)
  • 2d11d46 feat: add suggestions to use-isnan in binary expressions (#17996) (StyleShit)
  • c25b4af docs: Update README (GitHub Actions Bot)

v9.0.0-alpha.2 - January 26, 2024

... (truncated)

Commits

Updates sass from 1.71.0 to 1.71.1

Release notes

Sourced from sass's releases.

Dart Sass 1.71.1

To install Sass 1.71.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • Ship the musl Linux release with the proper Dart executable.

JavaScript API

  • Export the NodePackageImporter class in ESM mode.

  • Allow NodePackageImporter to locate a default directory even when the entrypoint is an ESM module.

Dart API

  • Make passing a null argument to NodePackageImporter() a static error rather than just a runtime error.

Embedded Sass

  • In the JS Embedded Host, properly install the musl Linux embedded compiler when running on musl Linux.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.71.1

Command-Line Interface

  • Ship the musl Linux release with the proper Dart executable.

JavaScript API

  • Export the NodePackageImporter class in ESM mode.

  • Allow NodePackageImporter to locate a default directory even when the entrypoint is an ESM module.

Dart API

  • Make passing a null argument to NodePackageImporter() a static error rather than just a runtime error.

Embedded Sass

  • In the JS Embedded Host, properly install the musl Linux embedded compiler when running on musl Linux.
Commits

Updates webpack from 5.90.2 to 5.90.3

Release notes

Sourced from webpack's releases.

v5.90.3

Bug Fixes

  • don't mangle when destructuring a reexport
  • types for Stats.toJson() and Stats.toString()
  • many internal types
  • [CSS] clean up export css local vars

Perf

  • simplify and optimize chunk graph creation
Commits
  • 651b3d6 chore(release): 5.90.3
  • c8d4b5e fix: more types
  • 5b9f6e4 perf: simplify and optimize chunk graph creation
  • 1addd26 refactor: more types
  • 65d547f fix: should not mangle when destructuring a reexport
  • 0b2a5a0 fix(css): clean up export css local vars
  • 0258e6c update snapshot
  • 2360e3a fix: clean up export css local vars
  • fc7b34d fix: should not mangle when destructuring a reexport
  • 780f891 (perf) Simplify and optimize chunk graph creation
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group in /web with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@storybook/addon-storysource](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/storysource) | `7.6.16` | `7.6.17` |
| [apexcharts](https://github.com/apexcharts/apexcharts.js) | `3.45.2` | `3.46.0` |
| [@aws-sdk/types](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/types) | `3.515.0` | `3.521.0` |
| [@storybook/addon-actions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/actions) | `7.6.16` | `7.6.17` |
| [@storybook/addon-interactions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/interactions) | `7.6.16` | `7.6.17` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `7.6.16` | `7.6.17` |
| [@storybook/builder-webpack5](https://github.com/storybookjs/storybook/tree/HEAD/code/builders/builder-webpack5) | `7.6.16` | `7.6.17` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.2.55` | `18.2.58` |
| [eslint](https://github.com/eslint/eslint) | `8.56.0` | `8.57.0` |
| [sass](https://github.com/sass/dart-sass) | `1.71.0` | `1.71.1` |
| [webpack](https://github.com/webpack/webpack) | `5.90.2` | `5.90.3` |


Updates `@storybook/addon-storysource` from 7.6.16 to 7.6.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.17/code/addons/storysource)

Updates `apexcharts` from 3.45.2 to 3.46.0
- [Release notes](https://github.com/apexcharts/apexcharts.js/releases)
- [Commits](apexcharts/apexcharts.js@v3.45.2...v3.46.0)

Updates `@aws-sdk/types` from 3.515.0 to 3.521.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/types/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.521.0/packages/types)

Updates `@storybook/addon-actions` from 7.6.16 to 7.6.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.17/code/addons/actions)

Updates `@storybook/addon-interactions` from 7.6.16 to 7.6.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.17/code/addons/interactions)

Updates `@storybook/addon-links` from 7.6.16 to 7.6.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.17/code/addons/links)

Updates `@storybook/builder-webpack5` from 7.6.16 to 7.6.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.17/code/builders/builder-webpack5)

Updates `@types/react` from 18.2.55 to 18.2.58
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `eslint` from 8.56.0 to 8.57.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.56.0...v8.57.0)

Updates `sass` from 1.71.0 to 1.71.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.71.0...1.71.1)

Updates `webpack` from 5.90.2 to 5.90.3
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.90.2...v5.90.3)

---
updated-dependencies:
- dependency-name: "@storybook/addon-storysource"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: apexcharts
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@aws-sdk/types"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@storybook/addon-actions"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-interactions"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-links"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/builder-webpack5"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code type::security labels Feb 24, 2024
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit 36dbe84 into main Feb 24, 2024
135 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-5afaea13c7 branch February 24, 2024 18:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot javascript Pull requests that update Javascript code type::security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant