chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21

dependabot · 2024-06-12T20:27:13Z

Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: octokit.
Bumps the npm_and_yarn group with 5 updates in the /test directory:

Package	From	To
@grpc/grpc-js	`1.9.9`	`1.9.15`
express	`4.18.2`	`4.19.2`
sharp	`0.33.2`	`0.33.4`
svelte	`4.2.12`	`4.2.18`
undici	`5.28.3`	`5.28.4`

Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: sharp.
Bumps the npm_and_yarn group with 6 updates in the /test/cli/install/migration/contoso-test directory:

Package	From	To
next	`13.5.3`	`14.1.1`
express	`4.18.2`	`4.19.2`
qs	`6.12.0`	`6.12.1`
@azure/identity	`2.1.0`	`4.2.1`
@strapi/plugin-users-permissions	`4.13.7`	`4.24.2`
webpack-dev-middleware	`5.3.3`	`5.3.4`

Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/contoso-test/api directory: @azure/identity.
Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: next and postcss.

Updates next from 12.3.4 to 14.2.4

Release notes

Sourced from next's releases.

v14.2.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix: ensure route handlers properly track dynamic access (#66446)

fix NextRequest proxy in edge runtime (#66551)

Fix next/dynamic with babel and src dir (#65177)

Use vercel deployment url for metadataBase fallbacks (#65089)

fix(next/image): detect react@19 for fetchPriority prop (#65235)

Fix loading navigation with metadata and prefetch (#66447)

prevent duplicate RSC fetch when action redirects (#66620)

ensure router cache updates reference the latest cache values (#66681)

Prevent append of trailing slash in cases where path ends with a file extension (#66636)

Fix inconsistency with 404 getStaticProps cache-control (#66674)

Use addDependency to track metadata route file changes (#66714)

Add timeout/retry handling for fetch cache (#66652)

fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)

Credits

Huge thanks to @ztanner, @ijjk, @wbinnssmith, @huozhi, and @lubieowoce for helping!

v14.2.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix: resolve mixed re-exports module as cjs (#64681)

fix: mixing namespace import and named import client components (#64809)

Fix mixed exports in server component with barrel optimization (#64894)

Fix next/image usage in mdx(#64875)

fix(fetch-cache): fix additional typo, add type & data validation (#64799)

prevent erroneous route interception during lazy fetch (#64692)

fix root page revalidation when redirecting in a server action (#64730)

fix: remove traceparent from cachekey should not remove traceparent from original object (#64727)

Clean-up fetch metrics tracking (#64746)

Credits

Huge thanks to @huozhi, @samcx, @ztanner, @Jeffrey-Zutt, and @ijjk for helping!

Commits

3078441 v14.2.4
0538a0d [not a backport] fix lint errors
2807fb4 fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)
efb476e Add timeout/retry handling for fetch cache (#66652)
c16a3f9 Use addDependency to track metadata route file changes (#66714)
942e45a Fix inconsistency with 404 getStaticProps cache-control (#66674)
9728a35 Prevent append of trailing slash in cases where path ends with a file extensi...
44661c2 ensure router cache updates reference the latest cache values (#66681)
f7ec039 prevent duplicate RSC fetch when action redirects (#66620)
dd6ab93 Fix loading navigation with metadata and prefetch (#66447)
Additional commits viewable in compare view

Updates next from 11.1.4 to 14.2.4

Release notes

Sourced from next's releases.

v14.2.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix: ensure route handlers properly track dynamic access (#66446)

fix NextRequest proxy in edge runtime (#66551)

Fix next/dynamic with babel and src dir (#65177)

Use vercel deployment url for metadataBase fallbacks (#65089)

fix(next/image): detect react@19 for fetchPriority prop (#65235)

Fix loading navigation with metadata and prefetch (#66447)

prevent duplicate RSC fetch when action redirects (#66620)

ensure router cache updates reference the latest cache values (#66681)

Prevent append of trailing slash in cases where path ends with a file extension (#66636)

Fix inconsistency with 404 getStaticProps cache-control (#66674)

Use addDependency to track metadata route file changes (#66714)

Add timeout/retry handling for fetch cache (#66652)

fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)

Credits

Huge thanks to @ztanner, @ijjk, @wbinnssmith, @huozhi, and @lubieowoce for helping!

v14.2.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix: resolve mixed re-exports module as cjs (#64681)

fix: mixing namespace import and named import client components (#64809)

Fix mixed exports in server component with barrel optimization (#64894)

Fix next/image usage in mdx(#64875)

fix(fetch-cache): fix additional typo, add type & data validation (#64799)

prevent erroneous route interception during lazy fetch (#64692)

fix root page revalidation when redirecting in a server action (#64730)

fix: remove traceparent from cachekey should not remove traceparent from original object (#64727)

Clean-up fetch metrics tracking (#64746)

Credits

Huge thanks to @huozhi, @samcx, @ztanner, @Jeffrey-Zutt, and @ijjk for helping!

Commits

3078441 v14.2.4
0538a0d [not a backport] fix lint errors
2807fb4 fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)
efb476e Add timeout/retry handling for fetch cache (#66652)
c16a3f9 Use addDependency to track metadata route file changes (#66714)
942e45a Fix inconsistency with 404 getStaticProps cache-control (#66674)
9728a35 Prevent append of trailing slash in cases where path ends with a file extensi...
44661c2 ensure router cache updates reference the latest cache values (#66681)
f7ec039 prevent duplicate RSC fetch when action redirects (#66620)
dd6ab93 Fix loading navigation with metadata and prefetch (#66447)
Additional commits viewable in compare view

Updates octokit from 2.1.0 to 4.0.2

Release notes

Sourced from octokit's releases.

v4.0.2

4.0.2 (2024-05-08)

Bug Fixes

build: actually output ESM (#2678) (9604674)

v4.0.1

4.0.1 (2024-05-07)

Bug Fixes

docs: remove NodeJS 10 and add callout for conditional exports (#2675) (c99ff62)

v4.0.0

BREAKING CHANGES

package is now ESM

remove authentication type "oauth" that was previously deprecated

Switch from @octokit/webhooks-types to @octokit/openapi-webhooks-types due to the transition to using GitHub's OpenAPI schema

v3.2.1

3.2.1 (2024-05-03)

Bug Fixes

update rest endpoints (#2667) (98785f4)

v3.2.1-beta.1

3.2.1-beta.1 (2024-05-06)

Bug Fixes

adapt code for ESM/new deps (314b46e)

deps: update octokit monorepo (b318e23)

v3.2.0

3.2.0 (2024-04-03)

Features

security: Add provenance (#2653) (a90799a)

... (truncated)

Commits

9604674 fix(build): actually output ESM (#2678)
c99ff62 fix(docs): remove NodeJS 10 and add callout for conditional exports (#2675)
13a86ad feat: v4 (#2674)
d0b9a6e build(deps): lock file maintenance (#2670)
b4860da chore(deps): update dependency esbuild to ^0.21.0 (#2672)
98785f4 fix: update rest endpoints (#2667)
c520dc9 build(deps): lock file maintenance (#2664)
844baf9 build(deps): lock file maintenance (#2661)
0322377 build(deps): lock file maintenance (#2658)
ba7d859 ci(action): update actions/add-to-project action to v1.0.1 (#2657)
Additional commits viewable in compare view

Updates @grpc/grpc-js from 1.9.9 to 1.9.15

Release notes

Sourced from @grpc/grpc-js's releases.

@grpc/grpc-js 1.9.15

Avoid buffering significantly more than grpc.max_receive_message_size per received message.

@grpc/grpc-js 1.9.14

Fix a bug that could rarely cause connection leaks (#2644)

Fix a bug that could cause clients to go IDLE incorrectly some time after calling waitForReady (#2643)

@grpc/grpc-js 1.9.13

Fix a bug that could cause the Node process to close early when establishing a connection while a request is pending (#2626)

@grpc/grpc-js 1.9.12

Fix a bug that could cause connectivity state information to become stale in some circumstances (#2623)

@grpc/grpc-js 1.9.11

Fix a busy loop when recovering from a failure to establish a connection to a unix domain socket address target (#2618)

Fix a bug that caused clients to stop trying to connect to a fixed IP address target after a working connection drops (#2619)

@grpc/grpc-js 1.9.10

Provide the correct port to the proxy when connecting to a target without an explicitly specified port (#2608 contributed by @segevfiner)

Properly handle goaway events with no additional data attached (#2611)

Commits

08b0422 Merge pull request from GHSA-7v5v-9h63-cj86
c75e048 grpc-js: Bump to 1.9.15
d5d62b4 grpc-js: Avoid buffering significantly more than max_receive_message_size per...
02d0344 Merge pull request #2741 from sergiitk/backport-1.9-psm-interop-common-prod-t...
cf14020 Merge pull request #2729 from sergiitk/psm-interop-common-prod-tests
da44229 Merge pull request #2738 from murgatroid99/backport-1.9-grpc-js_linkify-it_fix
5ae7c8c Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fix
eed21ba Merge pull request #2714 from sergiitk/backport-1.9-psm-interop-pkg-dev
63763a4 Merge pull request #2712 from sergiitk/psm-interop-pkg-dev
5be83dd Merge pull request #2643 from murgatroid99/grpc-js_idle_timer_fix
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: [email protected] and [email protected] by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add [email protected] by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: [email protected]

4.18.3 / 2024-02-29

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

deps: [email protected]

Add partitioned option

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: [email protected]
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates sharp from 0.33.2 to 0.33.4

Changelog

Sourced from sharp's changelog.

v0.33.4 - 16th May 2024

Remove experimental status from pipelineColourspace.

Reduce default concurrency when musl thread over-subscription detected.

TypeScript: add missing definitions for OverlayOptions. #4048 @ike-gg

Install: add advanced option to force use of a globally-installed libvips. #4060

Expose bilinear resizing kernel (and interpolator). #4061

Ensure extend operation stays sequential for multi-page TIFF (regression in 0.32.0). #4069

Tighten validation of constructor text integer properties. #4071

Simplify internal StaySequential logic. #4074 @kleisauke

Ensure negate operation occurs after profile conversion. #4096 @adriaanmeuris

v0.33.3 - 23rd March 2024

Upgrade to libvips v8.15.2 for upstream bug fixes.

Ensure keepIccProfile retains P3 and CMYK input profiles. #3906 #4008

Ensure text.wrap property can accept word-char as value. #4028 @yolopunk

Ensure clone takes a deep copy of existing options. #4029

Add bitdepth option to heif output (prebuilt binaries support 8-bit only). #4036 @mertalev

Commits

19d0e27 Release v0.33.4
16b764f Prerelease v0.33.4-rc.0
1593ee3 Bump devDeps
668b5ba Docs: changelog and credit for #4096
29336f4 Ensure negate op occurs after profile conversion (#4096)
b5fddd7 Install: log node-addon-api version if available
da655a1 Reduce default concurrency for musl thread over-subscription
93c615d Bump devDeps
f325dc3 Refactor to use C++ boolean literals rather than macros
0fde71c Ensure all contributor email addresses are valid (#4088)
Additional commits viewable in compare view

Updates svelte from 4.2.12 to 4.2.18

Release notes

Sourced from svelte's releases.

[email protected]

Patch Changes

chore: speed up regex (#11922)

[email protected]

Patch Changes

fix: correctly handle falsy values of style directives in SSR mode (#11584)

[email protected]

Patch Changes

fix: check if svelte component exists on custom element destroy (#11489)

[email protected]

Patch Changes

support attribute selector inside :global() (#11135)

[email protected]

Patch Changes

fix parsing camelcase container query name (#11131)

[email protected]

Patch Changes

fix: applying :global for +,~ sibling combinator when slots are present (#9282)

Changelog

Sourced from svelte's changelog.

4.2.18

Patch Changes

chore: speed up regex (#11922)

4.2.17

Patch Changes

fix: correctly handle falsy values of style directives in SSR mode (#11584)

4.2.16

Patch Changes

fix: check if svelte component exists on custom element destroy (#11489)

4.2.15

Patch Changes

support attribute selector inside :global() (#11135)

4.2.14

Patch Changes

fix parsing camelcase container query name (#11131)

4.2.13

Patch Changes

fix: applying :global for +,~ sibling combinator when slots are present (#9282)

Commits

230916f Version Packages (#11925)
dbe6057 chore: speed up regex (#11922)
a8deae9 Version Packages (#11594)
8592914 fix: correctly handle falsy values of style directives in SSR mode (#11584)
8e4c778 Version Packages (#11491)
1bab571 fix: additional check for component on destroy (svelte4) (#11489)
9f2341f Version Packages (#11202)
a510c6a fix: support attribute selector inside :global() (#11135)
ad00cad Version Packages (#11148)
41eb8da feat: support parsing camel case in container queries (#11131)
Additional commits viewable in compare view

Updates undici from 5.28.3 to 5.28.4

Release notes

Sourced from undici's releases.

v5.28.4

⚠️ Security Release ⚠️

Fixes GHSA-m4v8-wqvr-p9f7 CVE-2024-30260

Fixes GHSA-9qxr-qj54-h672 CVE-2024-30261

Full Changelog: nodejs/undici@v5.28.3...v5.28.4

Commits

fb98306 Bumped v5.28.4
2b39440 Merge pull request from GHSA-9qxr-qj54-h672
64e3402 Merge pull request from GHSA-m4v8-wqvr-p9f7
723c4e7 Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"
0e9d54b skip failing test due to Node.js changes
See full diff in compare view

Updates sharp from 0.33.2 to 0.33.4

Changelog

Sourced from sharp's changelog.

v0.33.4 - 16th May 2024

Remove experimental status from pipelineColourspace.

Reduce default concurrency when musl thread over-subscription detected.

TypeScript: add missing definitions for OverlayOptions. #4048 @ike-gg

Install: add advanced option to force use of a globally-installed libvips. #4060

Expose bilinear resizing kernel (and interpolator). #4061

Ensure extend operation stays sequential for multi-page TIFF (regression in 0.32.0). #4069

Tighten validation of constructor text integer properties. #4071

Simplify internal StaySequential logic. #4074 @kleisauke

Ensure negate operation occurs after profile conversion. #4096 @adriaanmeuris

v0.33.3 - 23rd March 2024

Upgrade to libvips v8.15.2 for upstream bug fixes.

Ensure keepIccProfile retains P3 and CMYK input profiles. #3906 #4008

Ensure text.wrap property can accept word-char as value. #4028 @yolopunk

Ensure clone takes a deep copy of existing options. #4029

Add bitdepth option to heif output (prebuilt binaries support 8-bit only). #4036 @mertalev

Commits

19d0e27 Release v0.33.4
16b764f Prerelease v0.33.4-rc.0
1593ee3 Bump devDeps
668b5ba Docs: changelog and credit for #4096
29336f4 Ensure negate op occurs after profile conversion (#4096)
b5fddd7 Install: log node-addon-api version if available
da655a1 Reduce default concurrency for musl thread over-subscription
93c615d Bump devDeps
f325dc3 Refactor to use C++ boolean literals rather than macros
0fde71c Ensure all contributor email addresses are valid (#4088)
Additional commits viewable in compare view

Updates next from 13.5.3 to 14.1.1

Release notes

Sourced from next's releases.

v14.2.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

fix: ensure route handlers properly track dynamic access (#66446)

fix NextRequest proxy in edge runtime (#66551)

Fix next/dynamic with babel and src dir (#65177)

Use vercel deployment url for metadataBase fallbacks (#65089)

fix(next/image): detect react@19 for fetchPriority prop (#65235)

Fix loading navigation with metadata and prefetch (#66447)

prevent duplicate RSC fetch when action redirects (#66620)

ensure router cache updates reference the latest cache values (#66681)

Prevent append of trailing slash in cases where path ends with a file extension (#66636)

Fix inconsistency with 404 getStaticProps cache-control (#66674)

Use addDependency to track metadata route file changes (#66714)

Add timeout/retry handling for fetch cache (#66652)

fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)

Credits

Huge thanks to @ztanner, @ijjk, @wbinnssmith, @huozhi, and @lubieowoce for helping!

v14.2.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix: resolve mixed re-exports module as cjs (#64681)

fix: mixing namespace import and named import client components (#64809)

Fix mixed exports in server component with barrel optimization (#64894)

Fix next/image usage in mdx(#64875)

fix(fetch-cache): fix additional typo, add type & data validation (#64799)

prevent erroneous route interception during lazy fetch (#64692)

fix root page revalidation when redirecting in a server action (#64730)

fix: remove traceparent from cachekey should not remove traceparent from original object (#64727)

Clean-up fetch metrics tracking (#64746)

Credits

Huge thanks to @huozhi, @samcx, @ztanner, @Jeffrey-Zutt, and @ijjk for helping!

Commits

3078441 v14.2.4
0538a0d [not a backport] fix lint errors
2807fb4 fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)
efb476e Add timeout/retry handling for fetch cache (#66652)
c16a3f9 Use addDependency to track metadata route file changes (#66714)
942e45a Fix inconsistency with 404 getStaticProps cache-control (#66674)
9728a35 Prevent append of trailing slash in cases where path ends with a file extensi...
44661c2 ensure router cache updates reference the latest cache values (#66681)
f7ec039 prevent duplicate RSC fetch when action redirects (#66620)
dd6ab93 Fix loading navigation with metadata and prefetch (#66447)
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: [email protected] and [email protected] by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add [email protected] by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks
Description has been truncated

… updates Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: [octokit](https://github.com/octokit/octokit.js). Bumps the npm_and_yarn group with 5 updates in the /test directory: | Package | From | To | | --- | --- | --- | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.9` | `1.9.15` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [sharp](https://github.com/lovell/sharp) | `0.33.2` | `0.33.4` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.12` | `4.2.18` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.4` | Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 6 updates in the /test/cli/install/migration/contoso-test directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `13.5.3` | `14.1.1` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [qs](https://github.com/ljharb/qs) | `6.12.0` | `6.12.1` | | [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `2.1.0` | `4.2.1` | | [@strapi/plugin-users-permissions](https://github.com/strapi/strapi) | `4.13.7` | `4.24.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` | Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/contoso-test/api directory: [@azure/identity](https://github.com/Azure/azure-sdk-for-js). Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: [next](https://github.com/vercel/next.js) and [postcss](https://github.com/postcss/postcss). Updates `next` from 12.3.4 to 14.2.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `next` from 11.1.4 to 14.2.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `octokit` from 2.1.0 to 4.0.2 - [Release notes](https://github.com/octokit/octokit.js/releases) - [Commits](octokit/octokit.js@v2.1.0...v4.0.2) Updates `@grpc/grpc-js` from 1.9.9 to 1.9.15 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `svelte` from 4.2.12 to 4.2.18 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `qs` from 6.12.0 to 6.12.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.12.0...v6.12.1) Updates `@azure/identity` from 2.1.0 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_2.1.0...@azure/identity_4.2.1) Updates `@strapi/plugin-users-permissions` from 4.13.7 to 4.24.2 - [Release notes](https://github.com/strapi/strapi/releases) - [Commits](strapi/strapi@v4.13.7...v4.24.2) Updates `@azure/msal-node` from 1.18.3 to 2.9.2 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v1.18.3...msal-node-v2.9.2) Updates `postcss` from 8.4.14 to 8.4.27 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) Updates `@azure/identity` from 2.1.0 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_2.1.0...@azure/identity_4.2.1) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `postcss` from 8.4.31 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: octokit dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@strapi/plugin-users-permissions" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/msal-node" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 12, 2024

dependabot bot mentioned this pull request Jun 12, 2024

chore(deps): bump the npm_and_yarn group across 8 directories with 12 updates #20

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21

dependabot bot commented on behalf of github Jun 12, 2024

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21

Conversation

dependabot bot commented on behalf of github Jun 12, 2024

v14.2.4

Core Changes

Credits

v14.2.3

Core Changes

Credits

v14.2.4

Core Changes

Credits

v14.2.3

Core Changes

Credits

v4.0.2

4.0.2 (2024-05-08)

Bug Fixes

v4.0.1

4.0.1 (2024-05-07)

Bug Fixes

v4.0.0

BREAKING CHANGES

v3.2.1

3.2.1 (2024-05-03)

Bug Fixes

v3.2.1-beta.1

3.2.1-beta.1 (2024-05-06)

Bug Fixes

v3.2.0

3.2.0 (2024-04-03)

Features

@​grpc/grpc-js 1.9.15

@​grpc/grpc-js 1.9.14

@​grpc/grpc-js 1.9.13

@​grpc/grpc-js 1.9.12

@​grpc/grpc-js 1.9.11

@​grpc/grpc-js 1.9.10

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v0.33.4 - 16th May 2024

v0.33.3 - 23rd March 2024

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

4.2.18

Patch Changes

4.2.17

Patch Changes

4.2.16

Patch Changes

4.2.15

Patch Changes

4.2.14

Patch Changes

4.2.13

Patch Changes

`@grpc/grpc-js` 1.9.15

`@grpc/grpc-js` 1.9.14

`@grpc/grpc-js` 1.9.13

`@grpc/grpc-js` 1.9.12

`@grpc/grpc-js` 1.9.11

`@grpc/grpc-js` 1.9.10