Bump the npm_and_yarn group across 5 directories with 23 updates #20139

dependabot · 2024-12-19T16:02:42Z

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
elliptic	`6.5.4`	`6.6.1`
micromatch	`4.0.5`	`4.0.8`
webpack	`5.88.2`	`5.97.1`
ws	`8.13.0`	`8.18.0`

Bumps the npm_and_yarn group with 11 updates in the /docroot/design-system directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
nanoid	`3.3.6`	`3.3.8`
elliptic	`6.5.4`	`6.6.1`
micromatch	`4.0.5`	`4.0.8`
webpack	`5.83.1`	`5.97.1`
ws	`8.14.2`	`8.18.0`
ws	`6.2.2`	`8.18.0`
ws	`7.5.9`	`8.18.0`
storybook	`7.4.6`	`8.4.7`
body-parser	`1.20.1`	`1.20.3`
express	`4.18.2`	`4.21.2`
markdown-to-jsx	`7.3.2`	`7.7.2`

Bumps the npm_and_yarn group with 6 updates in the /docroot/modules/custom/va_gov_graphql/assets/explorer directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
micromatch	`4.0.4`	`4.0.8`
webpack	`5.88.2`	`5.97.1`
@graphql-tools/url-loader	`7.16.19`	`7.17.18`
dset	`3.1.2`	`3.1.4`

Bumps the npm_and_yarn group with 14 updates in the /docroot/themes/custom/vagovclaro directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
nanoid	`3.3.6`	`3.3.8`
elliptic	`6.5.4`	`6.6.1`
micromatch	`4.0.5`	`4.0.8`
webpack	`5.76.2`	`5.97.1`
ws	`8.11.0`	`8.17.1`
socket.io-client	`4.6.1`	`4.8.1`
socket.io	`4.6.1`	`4.8.1`
ip	`2.0.0`	`removed`
socks	`2.7.1`	`2.8.3`
send	`0.16.2`	`0.19.1`
browser-sync	`2.29.0`	`3.0.3`
axios	`1.6.1`	`1.7.4`

Bumps the npm_and_yarn group with 3 updates in the /scripts/cd_metrics directory: braces, cross-spawn and micromatch.

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates elliptic from 6.5.4 to 6.6.1

Commits

9b77436 6.6.1
04cb6f5 Merge commit from fork
b8a7edd 6.6.0
34c8534 fix: signature verification due to leading zeros
3e46a48 6.5.7
accb61e lib: DER signature decoding correction
03e06e1 6.5.6
7ac5360 Merge commit from fork
7570078 6.5.5
206da2e lib: lint
Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates webpack from 5.88.2 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

Performance regression

Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

Don't crash with filesystem cache and unknown scheme

Generate a valid code when output.iife is true and output.library.type is umd

Fixed conflict variable name with concatenate modules and runtime code

Merge duplicate chunks before

Collisions in ESM library

Use recursive search for versions of shared dependencies

[WASM] Don't crash WebAssembly with Reference Types (sync and async)

[WASM] Fixed wasm loading for sync and async webassembly

[CSS] Don't add [uniqueName] to localIdentName when it is empty

[CSS] Parsing strings on Windows

[CSS] Fixed CSS local escaping

New Features

Added support for injecting debug IDs

Export the MergeDuplicateChunks plugin

Added universal loading for JS chunks and JS worker chunks (only ES modules)

[WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)

[CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted

[CSS] Added universal loading for CSS chunks

[CSS] Parse ICSS @value at-rules in CSS modules

[CSS] Parse ICSS :import rules in CSS modules

[CSS] Added the url and import options for CSS

[CSS] Allow to import custom properties in CSS modules

Performance

Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

3612d36 chore(release): 5.97.1
eb7ac6f fix: perf regression
554be24 fix: sub define key should't be renamed when it's a defined variable
5e0e780 refactor: issue #19030
58fb035 fix: sub define key should't be renamed when it's a defined variable
af1fd12 perf: regression
34f19cb fix: package.json
0ec7f5d refactor: issue #19030
5e7b8a2 fix: package.json
644f1d1 refactor: no extra work for CSS unescaping
Additional commits viewable in compare view

Updates ws from 8.13.0 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

disable regexp backtracking (#160) (5ff3a07)

Commits

77cd97f chore(release): 7.0.6
6717de4 chore: upgrade standard-version
f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
9a7e3b2 chore: fix build status badge
0852683 chore(release): 7.0.5
640d391 fix: fix escaping bug introduced by backtracking
bff0c87 chore: remove codecov
a7c6abc chore: replace travis with github workflows
9b9246e chore(release): 7.0.4
5ff3a07 fix: disable regexp backtracking (#160)
Additional commits viewable in compare view

Updates nanoid from 3.3.6 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

Commits

3044cd5 Release 3.3.8 version
4fe3495 Update size limit
d643045 Fix pool pollution, infinite loop (#510)
89d82d2 Release 3.3.7 version
5022c35 Update dual-publish
3e7a8e5 Remove benchmark from CI for v3
d356144 Fix CI for v3
37b25df Move to pnpm 8
See full diff in compare view

Updates elliptic from 6.5.4 to 6.6.1

Commits

9b77436 6.6.1
04cb6f5 Merge commit from fork
b8a7edd 6.6.0
34c8534 fix: signature verification due to leading zeros
3e46a48 6.5.7
accb61e lib: DER signature decoding correction
03e06e1 6.5.6
7ac5360 Merge commit from fork
7570078 6.5.5
206da2e lib: lint
Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates webpack from 5.83.1 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

Performance regression

Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

Don't crash with filesystem cache and unknown scheme

Generate a valid code when output.iife is true and output.library.type is umd

Fixed conflict variable name with concatenate modules and runtime code

Merge duplicate chunks before

Collisions in ESM library

Use recursive search for versions of shared dependencies

[WASM] Don't crash WebAssembly with Reference Types (sync and async)

[WASM] Fixed wasm loading for sync and async webassembly

[CSS] Don't add [uniqueName] to localIdentName when it is empty

[CSS] Parsing strings on Windows

[CSS] Fixed CSS local escaping

New Features

Added support for injecting debug IDs

Export the MergeDuplicateChunks plugin

Added universal loading for JS chunks and JS worker chunks (only ES modules)

[WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)

[CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted

[CSS] Added universal loading for CSS chunks

[CSS] Parse ICSS @value at-rules in CSS modules

[CSS] Parse ICSS :import rules in CSS modules

[CSS] Added the url and import options for CSS

[CSS] Allow to import custom properties in CSS modules

Performance

Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

3612d36 chore(release): 5.97.1
eb7ac6f fix: perf regression
554be24 fix: sub define key should't be renamed when it's a defined variable
5e0e780 refactor: issue #19030
58fb035 fix: sub define key should't be renamed when it's a defined variable
af1fd12 perf: regression
34f19cb fix: package.json
0ec7f5d refactor: issue #19030
5e7b8a2 fix: package.json
644f1d1 refactor: no extra work for CSS unescaping
Additional commits viewable in compare view

Updates ws from 8.14.2 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates ws from 6.2.2 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates ws from 7.5.9 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates storybook from 7.4.6 to 8.4.7

Release notes

Sourced from storybook's releases.

v8.4.7

8.4.7

Telemetry: Improve anonymous id calculation - #29736, thanks @tmeasday!

Vue: Properly resolve Vite plugin - #29795, thanks @tobiasdiez!

v8.4.6

8.4.6

Addon Test: Use pathe for better windows support - #29676, thanks @yannbf!

Angular: Default to standalone components in Angular v19 - #29677, thanks @ingowagner!

Frameworks: Add Vite 6 support - #29710, thanks @yannbf!

Portable stories: Support multiple annotation notations from preview - #29733, thanks @yannbf!

React: Upgrade react-docgen-typescript to support Vite 6 - #29724, thanks @yannbf!

Svelte: Support @sveltejs/vite-plugin-svelte v5 - #29731, thanks @JReinhold!

v8.4.5

8.4.5

Angular: Support v19 - #29659, thanks @leosvelperez!

CLI: Disable corepack auto pin behavior - #29627, thanks @yannbf!

CLI: Fix qwik init - #29632, thanks @shilman!

Nextjs-Vite: Add Next.js 15 support - #29640, thanks @yannbf!

v8.4.4

8.4.4

Addon Test: Only optimize react deps if applicable in vitest-plugin - #29617, thanks @yannbf!

v8.4.3

8.4.3

Addon Test: Optimize internal dependencies - #29595, thanks @yannbf!

Next.js: Add support for Next 15 - #29587, thanks @yannbf!

v8.4.2

8.4.2

Addon Test: Fix post-install logic for Next.js Vite framework support - #29524, thanks @valentinpalkovic!

Addon Test: Only render the TestingModule component in development mode - #29501, thanks @yannbf!

CLI: Fix Solid init by installing @storybook/test - #29514, thanks @shilman!

Core: Shim CJS-only globals in ESM output - #29157, thanks @valentinpalkovic!

Next.js: Fix bundled react and react-dom in monorepos - #29444, thanks @sentience!

v8.4.1

8.4.1

Core: Relax peer dep constraint of shim packages - #29503, thanks @kasperpeulen!

v8.4.0

... (truncated)

Changelog

Sourced from storybook's changelog.

8.4.7

Telemetry: Improve anonymous id calculation - #29736, thanks @tmeasday!

Vue: Properly resolve Vite plugin - #29795, thanks @tobiasdiez!

8.4.6

Addon Test: Use pathe for better windows support - #29676, thanks @yannbf!

Angular: Default to standalone components in Angular v19 - #29677, thanks @ingowagner!

Frameworks: Add Vite 6 support - #29710, thanks @yannbf!

Portable stories: Support multiple annotation notations from preview - #29733, thanks @yannbf!

React: Upgrade react-docgen-typescript to support Vite 6 - #29724, thanks @yannbf!

Svelte: Support @sveltejs/vite-plugin-svelte v5 - #29731, thanks @JReinhold!

8.4.5

Angular: Support v19 - #29659, thanks @leosvelperez!

CLI: Disable corepack auto pin behavior - #29627, thanks @yannbf!

CLI: Fix qwik init - #29632, thanks @shilman!

Nextjs-Vite: Add Next.js 15 support - #29640, thanks @yannbf!

8.4.4

Addon Test: Only optimize react deps if applicable in vitest-plugin - #29617, thanks @yannbf!

8.4.3

Addon Test: Optimize internal dependencies - #29595, thanks @yannbf!

Next.js: Add support for Next 15 - #29587, thanks @yannbf!

8.4.2

Addon Test: Fix post-install logic for Next.js Vite framework support - #29524, thanks @valentinpalkovic!

Addon Test: Only render the TestingModule component in development mode - #29501, thanks @yannbf!

CLI: Fix Solid init by installing @storybook/test - #29514, thanks @shilman!

Core: Shim CJS-only globals in ESM output - #29157, thanks @valentinpalkovic!

Next.js: Fix bundled react and react-dom in monorepos - #29444, thanks @sentience!

8.4.1

Core: Relax peer dep constraint of shim packages - #29503, thanks @kasperpeulen!

8.4.0

Storybook 8.4 comes with a ton of exciting new features designed to give you the best experience developing, testing, and debugging tests in the browser!

▶️ Unified UI for component testing

5️⃣ Svelte 5 and Svelte CSF support

⚛️ React Native Storybook 8 release

🏷️ Tags-based filtering to organize your Storybook

... (truncated)

Commits

0466712 Bump version from "8.4.6" to "8.4.7" [skip ci]
b58b3ee Bump version from "8.4.5" to "8.4.6" [skip ci]
60a5088 Bump version from "8.4.4" to "8.4.5" [skip ci]
ca016ae Bump version from "8.4.3" to "8.4.4" [skip ci]
750930f Bump version from "8.4.2" to "8.4.3" [skip ci]
d5fa671 Bump version from "8.4.1" to "8.4.2" [skip ci]
9983774 Bump version from "8.4.0" to "8.4.1" [skip ci]
939651b Bump version from "8.4.0-beta.5" to "8.4.0" [skip ci]
e94dc92 Bump version from "8.4.0-beta.4" to "8.4.0-beta.5" [skip ci]
c6dc5f6 Bump version from "8.4.0-beta.3" to "8.4.0-beta.4" [skip ci]
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for storybook since your current version.

Updates body-parser from 1.20.1 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to [email protected] by @wesleytodd in expressjs/body-parser#527

deps: [email protected] by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: [email protected]

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: [email protected]

Commits

1752951 1.20.3
39744cf chore: linter (Description has been truncated

Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.6.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [webpack](https://github.com/webpack/webpack) | `5.88.2` | `5.97.1` | | [ws](https://github.com/websockets/ws) | `8.13.0` | `8.18.0` | Bumps the npm_and_yarn group with 11 updates in the /docroot/design-system directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.8` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.6.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [webpack](https://github.com/webpack/webpack) | `5.83.1` | `5.97.1` | | [ws](https://github.com/websockets/ws) | `8.14.2` | `8.18.0` | | [ws](https://github.com/websockets/ws) | `6.2.2` | `8.18.0` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `8.18.0` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `7.4.6` | `8.4.7` | | [body-parser](https://github.com/expressjs/body-parser) | `1.20.1` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx) | `7.3.2` | `7.7.2` | Bumps the npm_and_yarn group with 6 updates in the /docroot/modules/custom/va_gov_graphql/assets/explorer directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [webpack](https://github.com/webpack/webpack) | `5.88.2` | `5.97.1` | | [@graphql-tools/url-loader](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/loaders/url) | `7.16.19` | `7.17.18` | | [dset](https://github.com/lukeed/dset) | `3.1.2` | `3.1.4` | Bumps the npm_and_yarn group with 14 updates in the /docroot/themes/custom/vagovclaro directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [nanoid](https://github.com/ai/nanoid) | `3.3.6` | `3.3.8` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.6.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [webpack](https://github.com/webpack/webpack) | `5.76.2` | `5.97.1` | | [ws](https://github.com/websockets/ws) | `8.11.0` | `8.17.1` | | [socket.io-client](https://github.com/socketio/socket.io) | `4.6.1` | `4.8.1` | | [socket.io](https://github.com/socketio/socket.io) | `4.6.1` | `4.8.1` | | [ip](https://github.com/indutny/node-ip) | `2.0.0` | `removed` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.3` | | [send](https://github.com/pillarjs/send) | `0.16.2` | `0.19.1` | | [browser-sync](https://github.com/BrowserSync/browser-sync) | `2.29.0` | `3.0.3` | | [axios](https://github.com/axios/axios) | `1.6.1` | `1.7.4` | Bumps the npm_and_yarn group with 3 updates in the /scripts/cd_metrics directory: [braces](https://github.com/micromatch/braces), [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [micromatch](https://github.com/micromatch/micromatch). Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `elliptic` from 6.5.4 to 6.6.1 - [Commits](indutny/elliptic@v6.5.4...v6.6.1) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `webpack` from 5.88.2 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.97.1) Updates `ws` from 8.13.0 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `elliptic` from 6.5.4 to 6.6.1 - [Commits](indutny/elliptic@v6.5.4...v6.6.1) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `webpack` from 5.83.1 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.97.1) Updates `ws` from 8.14.2 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `ws` from 6.2.2 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `ws` from 7.5.9 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `storybook` from 7.4.6 to 8.4.7 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.7/code/lib/cli) Updates `body-parser` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.1...1.20.3) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `cookie` from 0.5.0 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.5.0...v0.7.1) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `markdown-to-jsx` from 7.3.2 to 7.7.2 - [Release notes](https://github.com/quantizor/markdown-to-jsx/releases) - [Changelog](https://github.com/quantizor/markdown-to-jsx/blob/main/CHANGELOG.md) - [Commits](quantizor/markdown-to-jsx@v7.3.2...v7.7.2) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](https://github.com/pillarjs/send/commits) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `webpack` from 5.88.2 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.97.1) Updates `@graphql-tools/url-loader` from 7.16.19 to 7.17.18 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/loaders/url/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/@graphql-tools/[email protected]/packages/loaders/url) Updates `dset` from 3.1.2 to 3.1.4 - [Release notes](https://github.com/lukeed/dset/releases) - [Commits](lukeed/dset@v3.1.2...v3.1.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `elliptic` from 6.5.4 to 6.6.1 - [Commits](indutny/elliptic@v6.5.4...v6.6.1) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `webpack` from 5.76.2 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.97.1) Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `socket.io-client` from 4.6.1 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socket.io` from 4.6.1 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `cookie` from 0.4.2 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.5.0...v0.7.1) Removes `ip` Updates `socks` from 2.7.1 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](JoshGlazebrook/socks@2.7.1...2.8.3) Updates `send` from 0.16.2 to 0.19.1 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](https://github.com/pillarjs/send/commits) Updates `browser-sync` from 2.29.0 to 3.0.3 - [Release notes](https://github.com/BrowserSync/browser-sync/releases) - [Changelog](https://github.com/BrowserSync/browser-sync/blob/master/changelog.js) - [Commits](BrowserSync/browser-sync@v2.29.0...v3.0.3) Updates `serve-static` from 1.13.2 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `axios` from 1.6.1 to 1.7.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.1...v1.7.4) Updates `browser-sync` from 2.29.0 to 3.0.3 - [Release notes](https://github.com/BrowserSync/browser-sync/releases) - [Changelog](https://github.com/BrowserSync/browser-sync/blob/master/changelog.js) - [Commits](BrowserSync/browser-sync@v2.29.0...v3.0.3) Updates `socket.io` from 4.6.1 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socket.io-client` from 4.6.1 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socks` from 2.7.1 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](JoshGlazebrook/socks@2.7.1...2.8.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) --- updated-dependencies: - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: storybook dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-to-jsx dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@graphql-tools/url-loader" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dset dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-client dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browser-sync dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: browser-sync dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-client dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2024-12-19T16:03:08Z

Checking composer.lock changes...

dependabot · 2024-12-19T16:11:14Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added dependencies Dependabot: : Pull requests that update a dependency file Javascript Pull requests that update Javascript code labels Dec 19, 2024

va-cms-bot temporarily deployed to Tugboat December 19, 2024 16:02 Destroyed

edmund-dunn closed this Dec 19, 2024

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-3cecba2fe1 branch December 19, 2024 16:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 5 directories with 23 updates #20139

Bump the npm_and_yarn group across 5 directories with 23 updates #20139

dependabot bot commented on behalf of github Dec 19, 2024

github-actions bot commented Dec 19, 2024

dependabot bot commented on behalf of github Dec 19, 2024

Bump the npm_and_yarn group across 5 directories with 23 updates #20139

Bump the npm_and_yarn group across 5 directories with 23 updates #20139

Conversation

dependabot bot commented on behalf of github Dec 19, 2024

4.0.8

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

[4.0.6] - 2024-05-21

v5.97.1

Bug Fixes

v5.97.0

Bug Fixes

New Features

Performance

v5.96.1

Bug Fixes

v5.96.0

Bug Fixes

8.18.0

Features

8.17.1

Bug fixes

7.0.6 (2024-11-18)

Bug Fixes

7.0.5 (2024-11-07)

Bug Fixes

7.0.4 (2024-11-07)

Bug Fixes

3.3.8

3.3.7

4.0.8

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

[4.0.6] - 2024-05-21

v5.97.1

Bug Fixes

v5.97.0

Bug Fixes

New Features

Performance

v5.96.1

Bug Fixes

v5.96.0

Bug Fixes

8.18.0

Features

8.17.1

Bug fixes

8.18.0

Features

8.17.1

Bug fixes

8.18.0

Features

8.17.1

Bug fixes

v8.4.7

8.4.7

v8.4.6

8.4.6

v8.4.5

8.4.5

v8.4.4

8.4.4

v8.4.3

8.4.3

v8.4.2

8.4.2

v8.4.1

8.4.1

v8.4.0

8.4.7

8.4.6

8.4.5

8.4.4

8.4.3

8.4.2

8.4.1

8.4.0

1.20.3