Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump qs, grunt-contrib-jasmine and grunt-contrib-watch #37

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 6, 2022

Bumps qs to 6.11.0 and updates ancestor dependencies qs, grunt-contrib-jasmine and grunt-contrib-watch. These dependencies need to be updated together.

Updates qs from 0.5.6 to 6.11.0

Changelog

Sourced from qs's changelog.

6.11.0

  • [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option (#442)
  • [readme] fix version badge

6.10.5

  • [Fix] stringify: with arrayFormat: comma, properly include an explicit [] on a single-item array (#434)

6.10.4

  • [Fix] stringify: with arrayFormat: comma, include an explicit [] on a single-item array (#441)
  • [meta] use npmignore to autogenerate an npmignore file
  • [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, object-inspect, tape

6.10.3

  • [Fix] parse: ignore __proto__ keys (#428)
  • [Robustness] stringify: avoid relying on a global undefined (#427)
  • [actions] reuse common workflows
  • [Dev Deps] update eslint, @ljharb/eslint-config, object-inspect, tape

6.10.2

  • [Fix] stringify: actually fix cyclic references (#426)
  • [Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)
  • [readme] remove travis badge; add github actions/codecov badges; update URLs
  • [Docs] add note and links for coercing primitive values (#408)
  • [actions] update codecov uploader
  • [actions] update workflows
  • [Tests] clean up stringify tests slightly
  • [Dev Deps] update eslint, @ljharb/eslint-config, aud, object-inspect, safe-publish-latest, tape

6.10.1

  • [Fix] stringify: avoid exception on repeated object values (#402)

6.10.0

  • [New] stringify: throw on cycles, instead of an infinite loop (#395, #394, #393)
  • [New] parse: add allowSparse option for collapsing arrays with missing indices (#312)
  • [meta] fix README.md (#399)
  • [meta] only run npm run dist in publish, not install
  • [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbols, tape
  • [Tests] fix tests on node v0.6
  • [Tests] use ljharb/actions/node/install instead of ljharb/actions/node/run
  • [Tests] Revert "[meta] ignore eclint transitive audit warning"

6.9.7

  • [Fix] parse: ignore __proto__ keys (#428)
  • [Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)
  • [Robustness] stringify: avoid relying on a global undefined (#427)
  • [readme] remove travis badge; add github actions/codecov badges; update URLs
  • [Docs] add note and links for coercing primitive values (#408)
  • [Tests] clean up stringify tests slightly
  • [meta] fix README.md (#399)
  • Revert "[meta] ignore eclint transitive audit warning"

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for qs since your current version.


Updates grunt-contrib-jasmine from 0.9.2 to 3.0.0

Release notes

Sourced from grunt-contrib-jasmine's releases.

v3.0.0

  • Merge pull request #334 from gruntjs/add-actions 32d89c3
  • Use Actions 775abc5
  • Merge pull request #333 from gruntjs/deps-changelog 623c79c
  • Update deps and readme cd3efba
  • Merge pull request #332 from fred104/puppeteer_upgrade 3b3abc7
  • drop node 8 support 072ee93
  • bump puppeteer to 8.0.0 180061c
  • Bump hosted-git-info from 2.6.0 to 2.8.9 27e959e
  • Bump handlebars from 4.5.3 to 4.7.7 7491685
  • Bump lodash from 4.17.19 to 4.17.21 672814d
  • Bump grunt from 1.0.4 to 1.3.0 2ff9e25
  • Bump ssri from 6.0.1 to 6.0.2 e4763af
  • Bump y18n from 4.0.0 to 4.0.1 7499b17
  • Merge pull request #325 from gruntjs/dependabot/npm_and_yarn/yargs-parser-13.1.2 1aa690f
  • Bump yargs-parser from 13.1.0 to 13.1.2 4c2e2d6
  • Bump lodash from 4.17.15 to 4.17.19 de2ada4
  • Merge pull request #323 from gruntjs/dependabot/npm_and_yarn/npm-registry-fetch-4.0.5 80a5f1c
  • Bump npm-registry-fetch from 4.0.0 to 4.0.5 b49cca4
  • Merge pull request #322 from gruntjs/dependabot/npm_and_yarn/websocket-extensions-0.1.4 4d2c3cb
  • Bump websocket-extensions from 0.1.3 to 0.1.4 1168d11
  • Set package.json version 02ae04f
  • Merge pull request #320 from gruntjs/rel-pp aa36400
  • v2.2.0 bf5f771
  • Merge pull request #321 from gruntjs/fix-300 607e95a
  • Merge branch 'fix-issue-299' 444aa37
  • Merge pull request #319 from wondersloth/feat-puppeteer-options f4d996b
  • options.sandboxArgs; passing options to puppeteer 1dccda6
  • Bump https-proxy-agent from 2.2.2 to 2.2.4 7545819
  • Bump acorn from 6.2.1 to 6.4.1 ae324b1
  • Merge pull request #314 from gruntjs/dependabot/npm_and_yarn/handlebars-4.5.3 fed53a4
  • Bump handlebars from 4.1.2 to 4.5.3 5d86730
  • Bump extend from 3.0.1 to 3.0.2 59565bd
  • Merge pull request #312 from gruntjs/dependabot/npm_and_yarn/eslint-utils-1.4.3 71559de
  • Bump eslint-utils from 1.4.0 to 1.4.3 0e05d88
  • Update README c85f8c9
  • Merge pull request #308 from gruntjs/update-deps 6fefef1
  • Update deps 868ae4b
  • added --allow-file-access-from-files tag issue 298 f9b99fd
  • Bump package-lock again per npm audit e52e8bf
  • Fix regression in reporter to allow running in browser abb7e4e
  • Update packages per node audit 0150e80
  • Add new event-based system for sandbox communication 9371fdb
  • Merge pull request #301 from AlexChesters/patch-1 137f621
  • update package-lock 5632fd3
  • update puppeteer version 9f11b65
  • moved resolveJasmine/jasminePromise function to fix scope issue fd78052
  • chore: 🌲 update deps 0981f03
  • Pass through console output from puppeteer 26be197

... (truncated)

Changelog

Sourced from grunt-contrib-jasmine's changelog.

v3.0.0: date: 2021-05-13 changes: - Dependency Updates - drop node 8 support - bump puppeteer to 8.0.0 v2.2.0: date: 2020-05-04 changes: - Dependency updates - set the default option timeout value to 30 secs to sync with puppeteer's default timeout value. - options.sandboxArgs; passing options to puppeteer v2.1.3: date: 2019-07-31 changes: - Fix security deps - Update Puppeteer v2.0.3: date: 2018-11-14 changes: - Fix security deps: lodash - Build only should pass if the buildSpecrunner runs without error v2.0.2: date: 2018-08-13 changes: - Fix noSandbox option. - Fix startTime, and timing issues.

v2.0.1: date: 2018-05-31 changes: - Use the grunt current working directory to find the jasmine core. - Implement options.version. - Dependency updates.

v2.0.0: date: 2018-05-19 changes: - Switch from PhantomJS to Chrome Headless via Puppeteer

v1.1.0: date: 2017-01-12 changes: - adds tempDir option. - locks jasmine version v1.0.3: date: 2016-04-07 changes: - Move to a non-deprecated sprintf. v1.0.2:

... (truncated)

Commits
  • 32d89c3 Merge pull request #334 from gruntjs/add-actions
  • 775abc5 Use Actions
  • 623c79c Merge pull request #333 from gruntjs/deps-changelog
  • cd3efba Update deps and readme
  • 3b3abc7 Merge pull request #332 from fred104/puppeteer_upgrade
  • 072ee93 drop node 8 support
  • 180061c bump puppeteer to 8.0.0
  • 27e959e Bump hosted-git-info from 2.6.0 to 2.8.9
  • 7491685 Bump handlebars from 4.5.3 to 4.7.7
  • 672814d Bump lodash from 4.17.19 to 4.17.21
  • Additional commits viewable in compare view

Updates grunt-contrib-watch from 0.6.1 to 1.1.0

Changelog

Sourced from grunt-contrib-watch's changelog.

v1.1.0: date: 2018-05-12 changes: - Update to [email protected], [email protected], [email protected] v1.0.1: date: 2018-04-20 changes: - Update to [email protected], lodash@4 v1.0.0: date: 2016-03-12 changes: - Updated tiny-lr, gaze, async and lodash dependencies. - Fix endless loop issue with atBegin/nospawn. - Expose hostname parameter of tiny-lr. - Support cwd.event to emit events relative to path. - Removed peerDependencies setting.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [qs](https://github.com/ljharb/qs) to 6.11.0 and updates ancestor dependencies [qs](https://github.com/ljharb/qs), [grunt-contrib-jasmine](https://github.com/gruntjs/grunt-contrib-jasmine) and [grunt-contrib-watch](https://github.com/gruntjs/grunt-contrib-watch). These dependencies need to be updated together.


Updates `qs` from 0.5.6 to 6.11.0
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/commits/v6.11.0)

Updates `grunt-contrib-jasmine` from 0.9.2 to 3.0.0
- [Release notes](https://github.com/gruntjs/grunt-contrib-jasmine/releases)
- [Changelog](https://github.com/gruntjs/grunt-contrib-jasmine/blob/main/CHANGELOG)
- [Commits](gruntjs/grunt-contrib-jasmine@v0.9.2...v3.0.0)

Updates `grunt-contrib-watch` from 0.6.1 to 1.1.0
- [Release notes](https://github.com/gruntjs/grunt-contrib-watch/releases)
- [Changelog](https://github.com/gruntjs/grunt-contrib-watch/blob/main/CHANGELOG)
- [Commits](gruntjs/grunt-contrib-watch@v0.6.1...v1.1.0)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: indirect
- dependency-name: grunt-contrib-jasmine
  dependency-type: direct:development
- dependency-name: grunt-contrib-watch
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants