chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates #15
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…updates Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: [octokit](https://github.com/octokit/octokit.js). Bumps the npm_and_yarn group with 4 updates in the /test directory: [express](https://github.com/expressjs/express), [sharp](https://github.com/lovell/sharp), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [undici](https://github.com/nodejs/undici). Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 4 updates in the /test/cli/install/migration/contoso-test directory: [next](https://github.com/vercel/next.js), [express](https://github.com/expressjs/express), [qs](https://github.com/ljharb/qs) and [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware). Updates `next` from 12.3.4 to 14.2.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.2) Updates `next` from 11.1.4 to 14.2.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.2) Updates `octokit` from 2.1.0 to 3.2.0 - [Release notes](https://github.com/octokit/octokit.js/releases) - [Commits](octokit/octokit.js@v2.1.0...v3.2.0) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `sharp` from 0.33.2 to 0.33.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.3) Updates `svelte` from 4.2.12 to 4.2.15 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `sharp` from 0.33.2 to 0.33.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.3) Updates `next` from 13.5.3 to 14.2.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.2) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `qs` from 6.12.0 to 6.12.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.12.0...v6.12.1) Updates `postcss` from 8.4.14 to 8.4.27 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.14...8.4.27) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: octokit dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
Superseded by #16. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/bench/hot-module-reloading/css-stress-test/npm_and_yarn-bebdb04407
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: octokit.
Bumps the npm_and_yarn group with 4 updates in the /test directory: express, sharp, svelte and undici.
Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: sharp.
Bumps the npm_and_yarn group with 4 updates in the /test/cli/install/migration/contoso-test directory: next, express, qs and webpack-dev-middleware.
Updates
nextfrom 12.3.4 to 14.2.2Release notes
Sourced from next's releases.
... (truncated)
Commits
c850e4av14.2.2a340d9ehotfix(turbopack): Update with patch for postcss.config.js path resolution on...6462b74test: skip turbopack build test (#64356)12982effix incorrect refresh request when basePath is set (#64589)6f27f94add pathname normalizer for actions (#64592)8d18e0cFix ASL bundling for dynamic css (#64451)3709dd9Turbopack: Allow client components to be imported in app routes (#64520)373fbbafix: filter out middleware requests in logging (#64549)2f8e096fix refresh behavior for discarded actions (#64532)6838f57Fix cjs client components tree-shaking (#64558)Updates
nextfrom 11.1.4 to 14.2.2Release notes
Sourced from next's releases.
... (truncated)
Commits
c850e4av14.2.2a340d9ehotfix(turbopack): Update with patch for postcss.config.js path resolution on...6462b74test: skip turbopack build test (#64356)12982effix incorrect refresh request when basePath is set (#64589)6f27f94add pathname normalizer for actions (#64592)8d18e0cFix ASL bundling for dynamic css (#64451)3709dd9Turbopack: Allow client components to be imported in app routes (#64520)373fbbafix: filter out middleware requests in logging (#64549)2f8e096fix refresh behavior for discarded actions (#64532)6838f57Fix cjs client components tree-shaking (#64558)Updates
octokitfrom 2.1.0 to 3.2.0Release notes
Sourced from octokit's releases.
... (truncated)
Commits
a90799afeat(security): Add provenance (#2653)353e0d5build(deps): lock file maintenance (#2651)6a60c15ci(action): update actions/add-to-project action to v1df14a57build(deps): lock file maintenance (#2646)f98aeecci(action): update actions/add-to-project action to v0.6.1 (#2645)cf88b74build(deps): lock file maintenance (#2644)5402983build(deps): lock file maintenance (#2640)89c89dedocs(README): Missing required parameter issue_number (#2639)27b068abuild(deps): lock file maintenance (#2637)1f06127ci(action): update actions/add-to-project action to v0.6.0 (#2633)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
sharpfrom 0.33.2 to 0.33.3Changelog
Sourced from sharp's changelog.
Commits
55466f1Release v0.33.3ede8217Prerelease v0.33.3-rc.02689fb4Bump depseaf31a5Docs: changelog and credit for #4036aa1bbcbGuard heif bitdepth property for prebuilt binaries3c26080Add bitdepth option to heif output (#4036)dc07fd4Upgrade to libvips v8.15.27bc74feEnsure clone takes deep copy of options #4029c5f318eDocs: add changelog and credit for #40288fbb1cdEnsure text.wrap property can accept word-char as value (#4028)Updates
sveltefrom 4.2.12 to 4.2.15Release notes
Sourced from svelte's releases.
Changelog
Sourced from svelte's changelog.
Commits
9f2341fVersion Packages (#11202)a510c6afix: support attribute selector inside :global() (#11135)ad00cadVersion Packages (#11148)41eb8dafeat: support parsing camel case in container queries (#11131)11b8e94Version Packages (#11101)9de149cfix: applying :global for +,~ sibling combinator when slots are present. fixe...a6bf91cdocs: add file annotations to examples that benefit from ts toggle (#11058)Updates
undicifrom 5.28.3 to 5.28.4Release notes
Sourced from undici's releases.
Commits
fb98306Bumped v5.28.42b39440Merge pull request from GHSA-9qxr-qj54-h67264e3402Merge pull request from GHSA-m4v8-wqvr-p9f7723c4e7Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54bskip failing test due to Node.js changesUpdates
sharpfrom 0.33.2 to 0.33.3Changelog
Sourced from sharp's changelog.
Commits
55466f1Release v0.33.3ede8217Prerelease v0.33.3-rc.02689fb4Bump depseaf31a5Docs: changelog and credit for #4036aa1bbcbGuard heif bitdepth property for prebuilt binaries3c26080Add bitdepth option to heif output (#4036)dc07fd4Upgrade to libvips v8.15.27bc74feEnsure clone takes deep copy of options #4029c5f318eDocs: add changelog and credit for #40288fbb1cdEnsure text.wrap property can accept word-char as value (#4028)Updates
nextfrom 13.5.3 to 14.2.2Release notes
Sourced from next's releases.
... (truncated)
Commits
c850e4av14.2.2a340d9ehotfix(turbopack): Update with patch for postcss.config.js path resolution on...6462b74test: skip turbopack build test (#64356)12982effix incorrect refresh request when basePath is set (#64589)6f27f94add pathname normalizer for actions (#64592)8d18e0cFix ASL bundling for dynamic css (#64451)3709dd9Turbopack: Allow client components to be imported in app routes (#64520)373fbbafix: filter out middleware requests in logging (#64549)2f8e096fix refresh behavior for discarded actions (#64532)6838f57Fix cjs client components tree-shaking (#64558)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
qsfrom 6.12.0 to 6.12.1Changelog
Sourced from qs's changelog.
Commits
29dda21v6.12.17e18298[Fix]parse: DisabledecodeDotInKeysby default to restore previous behaviorfd3cd7a[Tests] increase coverage6d7df02[Performance]utils: Optimize performance under large data volumes, reduce ...572533c[Refactor]utils: use+=c4d29f3[meta] add tea.yamlUpdates
postcssfrom 8.4.14 to 8.4.27Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
fb4bb8aRelease 8.4.27 version16cddfdFix typesc938a9aUpdate dependencies