build(deps): bump the npm_and_yarn group across 1 directory with 27 updates - #1
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm_and_yarn group across 1 directory with 27 updates#1dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `3.1.0` | `3.2.2` | | [flat](https://github.com/hughsk/flat) | `5.0.0` | `5.0.1` | | [highlight.js](https://github.com/highlightjs/highlight.js) | `9.16.2` | `10.4.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.27` | `0.5.35` | | [electron](https://github.com/electron/electron) | `6.1.4` | `22.3.25` | | [acorn](https://github.com/acornjs/acorn) | `7.1.0` | `7.4.1` | | [ajv](https://github.com/ajv-validator/ajv) | `6.10.2` | `6.12.6` | | [app-builder-lib](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/app-builder-lib) | `21.2.0` | `25.0.5` | | [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `22.1.0` | `25.0.5` | | [bl](https://github.com/rvagg/bl) | `0.8.2` | `removed` | | [ssb-invite](https://github.com/ssbc/ssb-invite) | `2.1.4` | `2.1.8` | | [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.21.0` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.51` | `0.10.64` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [jsonpointer](https://github.com/janl/node-jsonpointer) | `4.0.1` | `5.0.1` | | [is-my-json-valid](https://github.com/mafintosh/is-my-json-valid) | `2.20.0` | `2.20.6` | | [libnested](https://github.com/dominictarr/libnested) | `1.4.1` | `1.5.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [underscore](https://github.com/jashkenas/underscore) | `1.9.1` | `1.13.7` | Updates `async` from 3.1.0 to 3.2.2 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.1.0...v3.2.2) Updates `flat` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/hughsk/flat/releases) - [Commits](hughsk/flat@5.0.0...5.0.1) Updates `highlight.js` from 9.16.2 to 10.4.1 - [Release notes](https://github.com/highlightjs/highlight.js/releases) - [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md) - [Commits](highlightjs/highlight.js@9.16.2...10.4.1) Updates `lodash` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `moment-timezone` from 0.5.27 to 0.5.35 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.27...0.5.35) Updates `electron` from 6.1.4 to 22.3.25 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v6.1.4...v22.3.25) Updates `acorn` from 7.1.0 to 7.4.1 - [Commits](acornjs/acorn@7.1.0...7.4.1) Updates `ajv` from 6.10.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.10.2...v6.12.6) Updates `app-builder-lib` from 21.2.0 to 25.0.5 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/app-builder-lib/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/v25.0.5/packages/app-builder-lib) Updates `electron-builder` from 22.1.0 to 25.0.5 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-builder/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/v25.0.5/packages/electron-builder) Removes `bl` Updates `ssb-invite` from 2.1.4 to 2.1.8 - [Commits](https://github.com/ssbc/ssb-invite/commits/v2.1.8) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `express` from 4.17.1 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.17.1...4.21.0) Updates `qs` from 6.5.2 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.0) Updates `es5-ext` from 0.10.51 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.51...v0.10.64) Updates `express` from 4.17.1 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.17.1...4.21.0) Updates `got` from 9.6.0 to 11.8.6 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v9.6.0...v11.8.6) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `jsonpointer` from 4.0.1 to 5.0.1 - [Release notes](https://github.com/janl/node-jsonpointer/releases) - [Commits](janl/node-jsonpointer@4.0.1...v5.0.1) Updates `is-my-json-valid` from 2.20.0 to 2.20.6 - [Commits](mafintosh/is-my-json-valid@v2.20.0...v2.20.6) Updates `libnested` from 1.4.1 to 1.5.2 - [Commits](dominictarr/libnested@v1.4.1...v1.5.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `moment` from 2.24.0 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.24.0...2.30.1) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `underscore` from 1.9.1 to 1.13.7 - [Commits](jashkenas/underscore@1.9.1...1.13.7) Updates `y18n` from 4.0.0 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...v5.0.8) Updates `yargs-parser` from 15.0.0 to 21.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v15.0.0...yargs-parser-v21.1.1) --- updated-dependencies: - dependency-name: async dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: flat dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: highlight.js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: moment-timezone dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: electron dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: app-builder-lib dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: electron-builder dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: bl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ssb-invite dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsonpointer dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: is-my-json-valid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: libnested dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 22 updates in the / directory:
3.1.03.2.25.0.05.0.19.16.210.4.14.17.154.17.210.5.270.5.356.1.422.3.257.1.07.4.16.10.26.12.621.2.025.0.522.1.025.0.50.8.2removed2.1.42.1.81.19.01.20.34.17.14.21.00.10.510.10.641.3.51.3.84.0.15.0.12.20.02.20.61.4.11.5.23.0.43.1.21.0.61.0.71.9.11.13.7Updates
asyncfrom 3.1.0 to 3.2.2Changelog
Sourced from async's changelog.
Commits
acc084eVersion 3.2.2acd7316Update built filesb50d648update changelog for 3.2.2e1ecdbfFix prototype pollution vulnerabilityfc9ba65Fix(docs): use pluralcallbacksword inlib/map.js(#1765)b1b69b0regen docscac52e3update changelogd1af045Version 3.2.1b31840eUpdate built files159a119Enhance examples for Collections methods. (#1726)Updates
flatfrom 5.0.0 to 5.0.1Commits
f25d3a1Release 5.0.154cc7aduse standard formatting779816edrop dependencies2eea6d3Bump lodash from 4.17.15 to 4.17.19a61a554Bump acorn from 7.1.0 to 7.4.020ef0efFix prototype pollution on unflattene8fb281Test prototype pollution on unflatten6e95c43Add node 10 & 12 to travis config.Maintainer changes
This version was pushed to npm by timoxley, a new releaser for flat since your current version.
Updates
highlight.jsfrom 9.16.2 to 10.4.1Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.
... (truncated)
Commits
e96b915bump 10.4.1065f65fchore(release) allow release script to handle production releases68509fcchore(docs) bump SECURITY mention to 9.18.5aa0fb85chore(docs) Version 9 has reached EOL.fb0a626enh(ci): Add tests for polynomial regex issuesfa46dd1fix(reasonml) fix poly backtracking issued496052fix(latex) fix poly backtracking issued9f1cdbfix(javascript/typescript) fix poly backtracking issuefdec037fix(asciidoc) fix poly backtracking issue02ca487fix(kotlin) fix poly backtracking issueMaintainer changes
This version was pushed to npm by joshgoebel, a new releaser for highlight.js since your current version.
Updates
lodashfrom 4.17.15 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
moment-timezonefrom 0.5.27 to 0.5.35Release notes
Sourced from moment-timezone's releases.
Changelog
Sourced from moment-timezone's changelog.
Commits
b8fb1baBuild moment-timezone 0.5.35f1b5e5aAdd changelog for 0.5.358b0eb0cBump version to 0.5.357915ac5Bugfix: Prevent cleartext transmission of tz data during buildce955a3Bugfix: Fix command injection vulnerability in grunt tzdata pipeline9430b4cMerge remote-tracking branch 'origin/master' into developfeaf900Updated contributing.md + added 2021e files704cfacupdated contributing.md877c863Updated contributing.md + added 2021e files5a3015cupdated contributing.mdUpdates
electronfrom 6.1.4 to 22.3.25Changelog
Sourced from electron's changelog.
... (truncated)
Commits
1c1c132chore: cherry-pick 3fbd1dca6a4d from libvpx (#40026)d892c2bbuild: fixup autoninja (#39899)6132e80build: run on circle hosts for forks (#39865)a953199build: use aks backed runners for linux builds (#39838)056eacfchore: cherry-pick b2eab7500a18 from chromium (#39827)5f8ef81fix: ensure app load is limited to real asar files when appropriate (#39811)4995c9echore: cherry-pick 1 changes from Release-3-M116 (#39758)e29cdacbuild: fix depot_tools patch application (#39751)b58903dchore: cherry-pick 1 changes from Release-2-M116 (#39689)33f9dcechore: cherry-pick 2 changes from Release-1-M116 (#39648)Updates
acornfrom 7.1.0 to 7.4.1Commits
88c2669Mark version 7.4.19c9142aFix potentially-exponential regular expression in use-strict-scanning54efb62Mark version 7.4.0856b720Remove link to plugin that's part of the repository nowe376a66add numeric separatorsd20ade2update test262fe7b3f1add logical assignment operators459fa1eupdate test2624e2c0e2Also add license header to other packages31d3b1cAdd "MIT License" at the top of acorn License fileUpdates
ajvfrom 6.10.2 to 6.12.6Release notes
Sourced from ajv's releases.
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...Updates
app-builder-libfrom 21.2.0 to 25.0.5Release notes
Sourced from app-builder-lib's releases.
... (truncated)
Changelog
Sourced from app-builder-lib's changelog.
... (truncated)
Commits
d5d9f3fchore(deploy): Release v25.0.5 (electron-updater@6.3.4) (#8411)8e6c171fix: Snap publish regression (#8424)de1ea75Revert "feat: allowriscv64support via custom electron dist (#8143)" (#8427)b306895feat: allowriscv64support via custom electron dist (#8143)1dcf6bcchore(deploy): Release v25.0.4 (electron-updater@6.3.3) (#8402)6cc6b8dfix: broken link formatting in the docs (#8407)f7daeb9fix: return parent dir for local dependency (#8406)5ab2beefix: adddisableDefaultIgnoredFilesoption (#8398)12c52a8feat: always unpack native node files (#8392)84f2909chore(deploy): Release v25.0.3 (electron-updater@6.3.2) (#8377)Maintainer changes
This version was pushed to npm by onegoldfishh, a new releaser for app-builder-lib since your current version.
Updates
electron-builderfrom 22.1.0 to 25.0.5Release notes
Sourced from electron-builder's releases.
... (truncated)
Changelog
Sourced from electron-builder's changelog.
... (truncated)
Commits
d5d9f3fchore(deploy): Release v25.0.5 (electron-updater@6.3.4) (#8411)de1ea75Revert "feat: allowriscv64support via custom electron dist (#8143)" (#8427)b306895feat: allowriscv64support via custom electron dist (#8143)