-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build(deps): bump the npm_and_yarn group across 1 directory with 17 updates #8
Open
dependabot
wants to merge
1
commit into
master
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-e32ecd379f
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…pdates Bumps the npm_and_yarn group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.16.2` | `4.19.2` | | [grunt](https://github.com/gruntjs/grunt) | `1.0.1` | `1.5.3` | | [cookiejar](https://github.com/bmeck/node-cookiejar) | `2.1.1` | `2.1.4` | | [diff](https://github.com/kpdecker/jsdiff) | `3.3.1` | `5.0.0` | | [mocha](https://github.com/mochajs/mocha) | `4.1.0` | `10.4.0` | | [extend](https://github.com/justmoon/node-extend) | `3.0.1` | `3.0.2` | | [lodash](https://github.com/lodash/lodash) | `3.7.0` | `4.17.21` | | [jshint](https://github.com/jshint/jshint) | `2.9.5` | `2.9.7` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.11` | `4.7.8` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.5.5` | `3.14.1` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.11` | `4.7.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [qs](https://github.com/ljharb/qs) | `6.5.1` | `6.12.1` | | [shelljs](https://github.com/shelljs/shelljs) | `0.3.0` | `removed` | | [grunt-contrib-jshint](https://github.com/gruntjs/grunt-contrib-jshint) | `1.1.0` | `3.2.0` | Updates `express` from 4.16.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.2...4.19.2) Updates `grunt` from 1.0.1 to 1.5.3 - [Release notes](https://github.com/gruntjs/grunt/releases) - [Changelog](https://github.com/gruntjs/grunt/blob/main/CHANGELOG) - [Commits](gruntjs/grunt@v1.0.1...v1.5.3) Updates `cookiejar` from 2.1.1 to 2.1.4 - [Commits](https://github.com/bmeck/node-cookiejar/commits) Updates `diff` from 3.3.1 to 5.0.0 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v3.3.1...v5.0.0) Updates `mocha` from 4.1.0 to 10.4.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v4.1.0...v10.4.0) Updates `extend` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v3.0.1...v3.0.2) Updates `getobject` from 0.1.0 to 1.0.2 - [Release notes](https://github.com/cowboy/node-getobject/releases) - [Commits](cowboy/node-getobject@v0.1.0...v1.0.2) Updates `lodash` from 3.7.0 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@3.7.0...4.17.21) Updates `jshint` from 2.9.5 to 2.9.7 - [Release notes](https://github.com/jshint/jshint/releases) - [Changelog](https://github.com/jshint/jshint/blob/main/CHANGELOG.md) - [Commits](jshint/jshint@2.9.5...2.9.7) Updates `handlebars` from 4.0.11 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.11...v4.7.8) Updates `js-yaml` from 3.5.5 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.5.5...3.14.1) Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `handlebars` from 4.0.11 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.11...v4.7.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `qs` from 6.5.1 to 6.12.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.1...v6.12.1) Removes `shelljs` Updates `grunt-contrib-jshint` from 1.1.0 to 3.2.0 - [Release notes](https://github.com/gruntjs/grunt-contrib-jshint/releases) - [Changelog](https://github.com/gruntjs/grunt-contrib-jshint/blob/main/CHANGELOG) - [Commits](gruntjs/grunt-contrib-jshint@v1.1.0...v3.2.0) Updates `underscore.string` from 3.2.3 to 3.3.6 - [Release notes](https://github.com/epeli/underscore.string/releases) - [Changelog](https://github.com/esamattis/underscore.string/blob/master/CHANGELOG.markdown) - [Commits](esamattis/underscore.string@3.2.3...3.3.6) --- updated-dependencies: - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: grunt dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cookiejar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: extend dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: getobject dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jshint dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shelljs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: grunt-contrib-jshint dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: underscore.string dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Pull requests that update a dependency file
label
Apr 23, 2024
This was referenced Apr 23, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 15 updates in the / directory:
4.16.2
4.19.2
1.0.1
1.5.3
2.1.1
2.1.4
3.3.1
5.0.0
4.1.0
10.4.0
3.0.1
3.0.2
3.7.0
4.17.21
2.9.5
2.9.7
4.0.11
4.7.8
3.5.5
3.14.1
1.2.0
1.2.8
4.0.11
4.7.8
0.5.1
0.5.6
6.5.1
6.12.1
0.3.0
removed
1.1.0
3.2.0
Updates
express
from 4.16.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
grunt
from 1.0.1 to 1.5.3Release notes
Sourced from grunt's releases.
... (truncated)
Changelog
Sourced from grunt's changelog.
... (truncated)
Commits
82d79b8
1.5.3572d79b
Merge pull request #1745 from gruntjs/fix-copy-op58016ff
Patch up race condition in symlink copying.0749e1d
Merge pull request #1746 from JamieSlome/patch-169b7c50
Create SECURITY.mdac667b2
1.5.27f15fd5
Update Changelogb0ec6e1
Merge pull request #1743 from gruntjs/cleanup-link433f91b
Clean up link handlingd5969ec
1.5.1Maintainer changes
This version was pushed to npm by vladikoff, a new releaser for grunt since your current version.
Updates
cookiejar
from 2.1.1 to 2.1.4Commits
Updates
diff
from 3.3.1 to 5.0.0Changelog
Sourced from diff's changelog.
... (truncated)
Commits
d358a57
5.0.04428de9
Remove dead code7dbf2ea
Update release notes for 5.0.0c64d178
Update to match quirks of unified diff format (#297)e47ca0a
Upgrade security flagged deps5aa499b
Fix README.md (#300)a2ce567
Upgrade major deps8c7a4ab
Upgrade minor deps (#295)4e41f90
Upgrade old Karma libs (#294)a58c580
Remove grunt-cleanUpdates
mocha
from 4.1.0 to 10.4.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
ffd9557
Release v10.4.07ac67f3
build(deps): bump the github-actions group with 2 updates (#5125)7a2781c
chore: activate dependabot for workflows (#5123)97dcbb2
fix: harden error handling inlib/cli/run.js
(#5074)6f3f45e
fix: xunit integration test (#5122)a5b5652
docs: fix documentation concerning glob expansion on UNIX (#4869)efbb147
feat: add file path to xunit reporter (#4985)a2e600d
fix: closes #5115 (#5116)3735873
feat: include.cause
stacks in the error stack traces (#4829)b88978d
chore: bump ESLint ecmaVersion to 2020 (#5104)Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
extend
from 3.0.1 to 3.0.2Changelog
Sourced from extend's changelog.
Commits
8d106d2
v3.0.2e97091f
[Dev Deps] updatetape
e841aac
[Tests] up tonode
v10.7
0e68e71
[Fix] Prevent merging proto propertya689700
Only apps should have lockfilesf13c1c4
[Dev Deps] updateeslint
,@ljharb/eslint-config
,tape
f3570fe
[Tests] up tonode
v10.0
,v9.11
,v8.11
,v7.10
,v6.14
,v4.9
; use...Updates
getobject
from 0.1.0 to 1.0.2Release notes
Sourced from getobject's releases.
Commits
46e55ec
1.0.26f86cf7
Merge pull request #8 from cowboy/dependabot/npm_and_yarn/path-parse-1.0.76e79841
Bump path-parse from 1.0.6 to 1.0.784bd719
1.0.1141e3a5
Update depsc97cf3e
Merge pull request #7 from cowboy/dependabot/npm_and_yarn/hosted-git-info-2.8.9201e91b
Bump hosted-git-info from 2.8.8 to 2.8.95ffb873
Update dev deps92e0d1f
1.0.06828cb9
README updatesMaintainer changes
This version was pushed to npm by vladikoff, a new releaser for getobject since your current version.
Updates
lodash
from 3.7.0 to 4.17.21Release notes
Sourced from lodash's releases.
... (truncated)
Commits
f299b52
Bump to v4.17.21c4847eb
Improve performance oftoNumber
,trim
andtrimEnd
on large input strings3469357
Prevent command injection through_.template
'svariable
optionded9bc6
Bump to v4.17.20.63150ef
Documentation fixes.00f0f62
test.js: Remove trailing comma.846e434
Temporarily use a custom fork oflodash-cli
.5d046f3
Re-enable Travis tests on4.17
branch.aa816b3
Remove/npm-package
.d7fbc52
Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
jshint
from 2.9.5 to 2.9.7Release notes
Sourced from jshint's releases.
Changelog
Sourced from jshint's changelog.
Commits
01bf8c6
v2.9.771f2f1f
[[TEST]] Assert CLI behavior: stdin w/o filename3a8ef8b
Added Spotify to companies who use JSHint (#3333)80c7fda
[[CHORE]] Relocate development dependencyf70250b
[[CHORE]] Relocate development dependenciesd5c1a00
v2.9.6ab3ab85
[[FIX]] Do not warn about non-ambiguous linebreakseaca85b
[[CHORE]] Improve test coverage for ASI warning0a66710
[[FIX]] Relax restriction on asgnmnt to arguments3aa02db
[[FIX]] Tolerate division following closing braceUpdates
handlebars
from 4.0.11 to 4.7.8Release notes
Sourced from handlebars's releases.