Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade: Bump the npm_and_yarn group across 1 directory with 2 updates #2 #5976

Open
wants to merge 120 commits into
base: main
Choose a base branch
from

Conversation

akaday
Copy link

@akaday akaday commented Nov 14, 2024

Pull request checklist

Make sure you:

For non-trivial changes, please make sure you also:

  • Added/Updated related documentation.
  • Added/Updated related tests.

Short description of the change(s)

akaday and others added 6 commits October 5, 2024 19:48
…ates

Bumps the npm_and_yarn group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [webpack](https://github.com/webpack/webpack) | `5.76.0` | `5.94.0` |
| [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` |
| [postcss](https://github.com/postcss/postcss) | `8.4.23` | `8.4.31` |
| [angular](https://github.com/angular/angular.js) | `1.4.9` | `1.8.3` |
| [jquery](https://github.com/jquery/jquery) | `2.1.4` | `3.5.0` |
| [got](https://github.com/sindresorhus/got) | `11.8.5` | `11.8.6` |
| [express](https://github.com/expressjs/express) | `4.18.2` | `4.20.0` |
| [async](https://github.com/caolan/async) | `3.2.0` | `3.2.6` |
| [elliptic](https://github.com/indutny/elliptic) | `6.5.7` | `6.6.0` |
| [tar](https://github.com/isaacs/node-tar) | `6.1.11` | `6.2.1` |
| [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` |

Bumps the npm_and_yarn group with 2 updates in the /packages/hint-no-vulnerable-javascript-libraries directory: [angular](https://github.com/angular/angular.js) and [jquery](https://github.com/jquery/jquery).


Updates `webpack` from 5.76.0 to 5.94.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.76.0...v5.94.0)

Updates `ejs` from 3.1.9 to 3.1.10
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.9...v3.1.10)

Updates `postcss` from 8.4.23 to 8.4.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.23...8.4.31)

Updates `angular` from 1.4.9 to 1.8.3
- [Changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md)
- [Commits](angular/angular.js@v1.4.9...v1.8.3)

Updates `jquery` from 2.1.4 to 3.5.0
- [Release notes](https://github.com/jquery/jquery/releases)
- [Changelog](https://github.com/jquery/jquery/blob/main/changelog.md)
- [Commits](jquery/jquery@2.1.4...3.5.0)

Updates `got` from 11.8.5 to 11.8.6
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.5...v11.8.6)

Updates `express` from 4.18.2 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.20.0)

Updates `async` from 3.2.0 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.0...v3.2.6)

Updates `body-parser` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.1...1.20.3)

Updates `cookie` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Changelog](https://github.com/jshttp/cookie/blob/v0.6.0/HISTORY.md)
- [Commits](jshttp/cookie@v0.5.0...v0.6.0)

Updates `elliptic` from 6.5.7 to 6.6.0
- [Commits](indutny/elliptic@v6.5.7...v6.6.0)

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10)

Updates `serve-static` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...1.16.0)

Updates `tar` from 6.1.11 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.1.11...v6.2.1)

Updates `word-wrap` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

Updates `angular` from 1.4.9 to 1.8.3
- [Changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md)
- [Commits](angular/angular.js@v1.4.9...v1.8.3)

Updates `jquery` from 2.1.4 to 3.5.0
- [Release notes](https://github.com/jquery/jquery/releases)
- [Changelog](https://github.com/jquery/jquery/blob/main/changelog.md)
- [Commits](jquery/jquery@2.1.4...3.5.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: angular
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: jquery
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: word-wrap
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: angular
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: jquery
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
…n-467ff59c2f

Upgrade: Bump the npm_and_yarn group across 2 directories with 15 updates
Bumps the npm_and_yarn group with 2 updates in the / directory: [postcss](https://github.com/postcss/postcss) and [got](https://github.com/sindresorhus/got).


Updates `postcss` from 8.4.31 to 8.4.32
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.31...8.4.32)

Updates `got` from 11.8.6 to 12.1.0
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.6...v12.1.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
…n-3e94e9fb21

Upgrade: Bump the npm_and_yarn group across 1 directory with 2 updates
dependabot bot and others added 21 commits November 14, 2024 08:01
Bumps the npm_and_yarn group with 2 updates in the / directory: [postcss](https://github.com/postcss/postcss) and [got](https://github.com/sindresorhus/got).


Updates `postcss` from 8.4.32 to 8.4.33
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.32...8.4.33)

Updates `got` from 12.1.0 to 12.2.0
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v12.1.0...v12.2.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
…n-bb7e6b6a9c

Upgrade: Bump the npm_and_yarn group across 1 directory with 2 updates
Bumps [markdownlint](https://github.com/DavidAnson/markdownlint) from 0.25.0 to 0.36.1.
- [Changelog](https://github.com/DavidAnson/markdownlint/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint@v0.25.0...v0.36.1)

---
updated-dependencies:
- dependency-name: markdownlint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together.

Updates `react` from 18.1.0 to 18.3.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v18.3.1/packages/react)

Updates `@types/react` from 18.0.9 to 18.3.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: react
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) from 4.14.194 to 4.17.13.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

---
updated-dependencies:
- dependency-name: "@types/lodash"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [web-ext](https://github.com/mozilla/web-ext) from 7.4.0 to 8.3.0.
- [Release notes](https://github.com/mozilla/web-ext/releases)
- [Commits](mozilla/web-ext@7.4.0...8.3.0)

---
updated-dependencies:
- dependency-name: web-ext
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [mdn-data](https://github.com/mdn/data) from 2.6.1 to 2.12.2.
- [Release notes](https://github.com/mdn/data/releases)
- [Changelog](https://github.com/mdn/data/blob/main/CHANGELOG.md)
- [Commits](mdn/data@v2.6.1...v2.12.2)

---
updated-dependencies:
- dependency-name: mdn-data
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [image-size](https://github.com/image-size/image-size) from 1.0.2 to 1.1.1.
- [Release notes](https://github.com/image-size/image-size/releases)
- [Commits](image-size/image-size@v1.0.2...v1.1.1)

---
updated-dependencies:
- dependency-name: image-size
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [fork-ts-checker-webpack-plugin](https://github.com/TypeStrong/fork-ts-checker-webpack-plugin) from 7.2.13 to 9.0.2.
- [Release notes](https://github.com/TypeStrong/fork-ts-checker-webpack-plugin/releases)
- [Changelog](https://github.com/TypeStrong/fork-ts-checker-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](TypeStrong/fork-ts-checker-webpack-plugin@v7.2.13...v9.0.2)

---
updated-dependencies:
- dependency-name: fork-ts-checker-webpack-plugin
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [puppeteer-core](https://github.com/puppeteer/puppeteer) from 13.0.1 to 23.8.0.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/release-please-config.json)
- [Commits](puppeteer/puppeteer@v13.0.1...puppeteer-core-v23.8.0)

---
updated-dependencies:
- dependency-name: puppeteer-core
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [fs-extra](https://github.com/jprichardson/node-fs-extra) and [@types/fs-extra](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/fs-extra). These dependencies needed to be updated together.

Updates `fs-extra` from 11.1.0 to 11.2.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.1.0...11.2.0)

Updates `@types/fs-extra` from 9.0.13 to 11.0.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/fs-extra)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: "@types/fs-extra"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [ajv-formats](https://github.com/ajv-validator/ajv-formats) from 2.1.1 to 3.0.1.
- [Release notes](https://github.com/ajv-validator/ajv-formats/releases)
- [Commits](ajv-validator/ajv-formats@v2.1.1...v3.0.1)

---
updated-dependencies:
- dependency-name: ajv-formats
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.11 to 3.3.2.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.11...v3.3.2)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 6.7.3 to 7.1.2.
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/css-loader@v6.7.3...v7.1.2)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [ts-loader](https://github.com/TypeStrong/ts-loader) from 9.4.2 to 9.5.1.
- [Release notes](https://github.com/TypeStrong/ts-loader/releases)
- [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md)
- [Commits](TypeStrong/ts-loader@v9.4.2...v9.5.1)

---
updated-dependencies:
- dependency-name: ts-loader
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [parse5](https://github.com/inikulin/parse5) and [@types/parse5](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/parse5). These dependencies needed to be updated together.

Updates `parse5` from 6.0.1 to 7.2.1
- [Release notes](https://github.com/inikulin/parse5/releases)
- [Commits](inikulin/parse5@v6.0.1...v7.2.1)

Updates `@types/parse5` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/parse5)

---
updated-dependencies:
- dependency-name: parse5
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/parse5"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [postcss-less](https://github.com/shellscape/postcss-less) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/shellscape/postcss-less/releases)
- [Commits](shellscape/postcss-less@v5.0.0...v6.0.0)

---
updated-dependencies:
- dependency-name: postcss-less
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [sinon](https://github.com/sinonjs/sinon) from 13.0.1 to 19.0.2.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v13.0.1...v19.0.2)

---
updated-dependencies:
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@types/ejs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ejs) from 3.1.2 to 3.1.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ejs)

---
updated-dependencies:
- dependency-name: "@types/ejs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
…ss-6.0.0

Upgrade: Bump postcss-less from 5.0.0 to 6.0.0
…c6bbda

Upgrade: Bump parse5 and @types/parse5
…9.5.1

Upgrade: Bump ts-loader from 9.4.2 to 9.5.1
…-7.1.2

Upgrade: Bump css-loader from 6.7.3 to 7.1.2
…-3.3.2

Upgrade: Bump node-fetch from 2.6.11 to 3.3.2
…s-3.0.1

Upgrade: Bump ajv-formats from 2.1.1 to 3.0.1
…5ec450

Upgrade: Bump fs-extra and @types/fs-extra
…core-23.8.0

Upgrade: Bump puppeteer-core from 13.0.1 to 23.8.0
…ecker-webpack-plugin-9.0.2

Upgrade: Bump fork-ts-checker-webpack-plugin from 7.2.13 to 9.0.2
…-1.1.1

Upgrade: Bump image-size from 1.0.2 to 1.1.1
….12.2

Upgrade: Bump mdn-data from 2.6.1 to 2.12.2
…t-0.36.1

Upgrade: Bump markdownlint from 0.25.0 to 0.36.1
Update `packages/configuration-all/index.json` and `packages/configuration-development/index.json` to add new webpack-config hints.

* **packages/configuration-all/index.json**
  - Add `webpack-config/config-exists` hint to the `hints` array.
  - Add `webpack-config/is-installed` hint to the `hints` array.
  - Add `webpack-config/is-valid` hint to the `hints` array.
  - Add `webpack-config/module-esnext-typescript` hint to the `hints` array.
  - Add `webpack-config/modules-false-babel` hint to the `hints` array.
  - Add `webpack-config/no-devtool-in-prod` hint to the `hints` array.

* **packages/configuration-development/index.json**
  - Add `webpack-config/config-exists` hint to the `hints` array.
  - Add `webpack-config/is-installed` hint to the `hints` array.
  - Add `webpack-config/is-valid` hint to the `hints` array.
  - Add `webpack-config/module-esnext-typescript` hint to the `hints` array.
  - Add `webpack-config/modules-false-babel` hint to the `hints` array.
  - Add `webpack-config/no-devtool-in-prod` hint to the `hints` array.

---

For more details, open the [Copilot Workspace session](https://copilot-workspace.githubnext.com/akaday/hint?shareId=XXXX-XXXX-XXXX-XXXX).
Resolve conflicts in configuration files
…sh-4.17.13

Upgrade: Bump @types/lodash from 4.14.194 to 4.17.13
…086a9b

Upgrade: Bump react and @types/react
Refactor `getAnalyzer` function in `packages/hint/src/lib/cli/analyze.ts` to handle errors more efficiently.

* Use a switch statement to handle different error statuses.
* Remove redundant if-else blocks.
* Handle `ConfigurationError`, `ResourceError`, `HintError`, and `ConnectorError` cases explicitly.
* Log error messages and rethrow exceptions as needed.

---

For more details, open the [Copilot Workspace session](https://copilot-workspace.githubnext.com/akaday/hint?shareId=XXXX-XXXX-XXXX-XXXX).
Optimize CLI code for better performance and readability
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant