chore(deps): bump the npm_and_yarn group across 7 directories with 12 updates #19
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: [octokit](https://github.com/octokit/octokit.js). Bumps the npm_and_yarn group with 5 updates in the /test directory: | Package | From | To | | --- | --- | --- | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.9` | `1.9.15` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [sharp](https://github.com/lovell/sharp) | `0.33.2` | `0.33.4` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.12` | `4.2.18` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.4` | Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 5 updates in the /test/cli/install/migration/contoso-test directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `13.5.3` | `14.1.1` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [qs](https://github.com/ljharb/qs) | `6.12.0` | `6.12.1` | | [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `2.1.0` | `4.2.1` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` | Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: [next](https://github.com/vercel/next.js) and [postcss](https://github.com/postcss/postcss). Updates `next` from 12.3.4 to 14.2.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.3) Updates `next` from 11.1.4 to 14.2.3 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.3) Updates `octokit` from 2.1.0 to 4.0.2 - [Release notes](https://github.com/octokit/octokit.js/releases) - [Commits](octokit/octokit.js@v2.1.0...v4.0.2) Updates `@grpc/grpc-js` from 1.9.9 to 1.9.15 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `svelte` from 4.2.12 to 4.2.18 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.3) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `qs` from 6.12.0 to 6.12.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.12.0...v6.12.1) Updates `@azure/identity` from 2.1.0 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_2.1.0...@azure/identity_4.2.1) Updates `@azure/msal-node` from 1.18.3 to 2.9.2 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v1.18.3...msal-node-v2.9.2) Updates `postcss` from 8.4.14 to 8.4.27 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.3) Updates `postcss` from 8.4.31 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: octokit dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/msal-node" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
Superseded by #20. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/bench/hot-module-reloading/css-stress-test/npm_and_yarn-c0df78eee1
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: octokit.
Bumps the npm_and_yarn group with 5 updates in the /test directory:
1.9.91.9.154.18.24.19.20.33.20.33.44.2.124.2.185.28.35.28.4Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: sharp.
Bumps the npm_and_yarn group with 5 updates in the /test/cli/install/migration/contoso-test directory:
13.5.314.1.14.18.24.19.26.12.06.12.12.1.04.2.15.3.35.3.4Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: next and postcss.
Updates
nextfrom 12.3.4 to 14.2.3Release notes
Sourced from next's releases.
Commits
2e7a96av14.2.3a230be4Clean-up fetch metrics tracking (#64746)73c2d63fix: remove traceparent from cachekey should not remove traceparent from orig...dd44191fix root page revalidation when redirecting in a server action (#64730)8b4c234prevent erroneous route interception during lazy fetch (#64692)d6a7ca0fix(fetch-cache): fix additional typo, add type & data validation (#64799)4a6b511Fix next/image usage in mdx (#64875)04cc13cFix mixed exports in server component with barrel optimization (#64894)8d01d49fix: mixing namespace import and named import client components (#64809)de84e3aFix: resolve mixed re-exports module as cjs (#64681)Updates
nextfrom 11.1.4 to 14.2.3Release notes
Sourced from next's releases.
Commits
2e7a96av14.2.3a230be4Clean-up fetch metrics tracking (#64746)73c2d63fix: remove traceparent from cachekey should not remove traceparent from orig...dd44191fix root page revalidation when redirecting in a server action (#64730)8b4c234prevent erroneous route interception during lazy fetch (#64692)d6a7ca0fix(fetch-cache): fix additional typo, add type & data validation (#64799)4a6b511Fix next/image usage in mdx (#64875)04cc13cFix mixed exports in server component with barrel optimization (#64894)8d01d49fix: mixing namespace import and named import client components (#64809)de84e3aFix: resolve mixed re-exports module as cjs (#64681)Updates
octokitfrom 2.1.0 to 4.0.2Release notes
Sourced from octokit's releases.
... (truncated)
Commits
9604674fix(build): actually output ESM (#2678)c99ff62fix(docs): remove NodeJS 10 and add callout for conditional exports (#2675)13a86adfeat: v4 (#2674)d0b9a6ebuild(deps): lock file maintenance (#2670)b4860dachore(deps): update dependency esbuild to ^0.21.0 (#2672)98785f4fix: update rest endpoints (#2667)c520dc9build(deps): lock file maintenance (#2664)844baf9build(deps): lock file maintenance (#2661)0322377build(deps): lock file maintenance (#2658)ba7d859ci(action): update actions/add-to-project action to v1.0.1 (#2657)Updates
@grpc/grpc-jsfrom 1.9.9 to 1.9.15Release notes
Sourced from
@grpc/grpc-js's releases.Commits
08b0422Merge pull request from GHSA-7v5v-9h63-cj86c75e048grpc-js: Bump to 1.9.15d5d62b4grpc-js: Avoid buffering significantly more than max_receive_message_size per...02d0344Merge pull request #2741 from sergiitk/backport-1.9-psm-interop-common-prod-t...cf14020Merge pull request #2729 from sergiitk/psm-interop-common-prod-testsda44229Merge pull request #2738 from murgatroid99/backport-1.9-grpc-js_linkify-it_fix5ae7c8cMerge pull request #2735 from murgatroid99/grpc-js_linkify-it_fixeed21baMerge pull request #2714 from sergiitk/backport-1.9-psm-interop-pkg-dev63763a4Merge pull request #2712 from sergiitk/psm-interop-pkg-dev5be83ddMerge pull request #2643 from murgatroid99/grpc-js_idle_timer_fixUpdates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
sharpfrom 0.33.2 to 0.33.4Changelog
Sourced from sharp's changelog.
Commits
19d0e27Release v0.33.416b764fPrerelease v0.33.4-rc.01593ee3Bump devDeps668b5baDocs: changelog and credit for #409629336f4Ensure negate op occurs after profile conversion (#4096)b5fddd7Install: log node-addon-api version if availableda655a1Reduce default concurrency for musl thread over-subscription93c615dBump devDepsf325dc3Refactor to use C++ boolean literals rather than macros0fde71cEnsure all contributor email addresses are valid (#4088)Updates
sveltefrom 4.2.12 to 4.2.18Release notes
Sourced from svelte's releases.
Changelog
Sourced from svelte's changelog.
Commits
230916fVersion Packages (#11925)dbe6057chore: speed up regex (#11922)a8deae9Version Packages (#11594)8592914fix: correctly handle falsy values of style directives in SSR mode (#11584)8e4c778Version Packages (#11491)1bab571fix: additional check for component on destroy (svelte4) (#11489)9f2341fVersion Packages (#11202)a510c6afix: support attribute selector inside :global() (#11135)ad00cadVersion Packages (#11148)41eb8dafeat: support parsing camel case in container queries (#11131)Updates
undicifrom 5.28.3 to 5.28.4Release notes
Sourced from undici's releases.
Commits
fb98306Bumped v5.28.42b39440Merge pull request from GHSA-9qxr-qj54-h67264e3402Merge pull request from GHSA-m4v8-wqvr-p9f7723c4e7Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54bskip failing test due to Node.js changesUpdates
sharpfrom 0.33.2 to 0.33.4Changelog
Sourced from sharp's changelog.
Commits
19d0e27Release v0.33.416b764fPrerelease v0.33.4-rc.01593ee3Bump devDeps668b5baDocs: changelog and credit for #409629336f4Ensure negate op occurs after profile conversion (#4096)b5fddd7Install: log node-addon-api version if availableda655a1Reduce default concurrency for musl thread over-subscription93c615dBump devDepsf325dc3Refactor to use C++ boolean literals rather than macros0fde71cEnsure all contributor email addresses are valid (#4088)Updates
nextfrom 13.5.3 to 14.1.1Release notes
Sourced from next's releases.
Commits
2e7a96av14.2.3a230be4Clean-up fetch metrics tracking (#64746)73c2d63fix: remove traceparent from cachekey should not remove traceparent from orig...dd44191fix root page revalidation when redirecting in a server action (#64730)8b4c234prevent erroneous route interception during lazy fetch (#64692)d6a7ca0fix(fetch-cache): fix additional typo, add type & data validation (#64799)4a6b511Fix next/image usage in mdx (#64875)04cc13cFix mixed exports in server component with barrel optimization (#64894)8d01d49fix: mixing namespace import and named import client components (#64809)de84e3aFix: resolve mixed re-exports module as cjs (#64681)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: [email protected]Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
qsfrom 6.12.0 to 6.12.1Changelog
Sourced from qs's changelog.
Commits
29dda21v6.12.17e18298[Fix]parse: DisabledecodeDotInKeysby default to restore previous behaviorfd3cd7a[Tests] increase coverage6d7df02[Performance]utils: Optimize performance under large data volumes, reduce ...572533c[Refactor]utils: use+=c4d29f3[meta] add tea.yamlUpdates
@azure/identityfrom 2.1.0 to 4.2.1Commits
183d301Upgrade to a version ESRP Release that supports federated auth (#29612)9a2afdf[identity] Prep for release (#29981)3caf203[identity] Prepare identity for May release (#29441)0a69729[core] CHANGELOG date for@azure-rest/core-clientrelease (#29440)88d244aSync eng/common directory with azure-sdk-tools for PR 8158 (#29423)7706373[template-dpg] Suppress build failure (#29437)769c1b1[EngSys] Update name of@azure-tools/test-utilsNO_CI8cd5bc2[core] New multipart/form-data primitive in core-client-rest (#29047)73b9faa[identity] Add changelog entry for MSALClient migration (#29419)b8e63a5Post release automated changes for notificationhubs releases (