build(deps): bump the npm_and_yarn group across 2 directories with 24 updates #134
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.43` | `0.5.45` | | [log4js](https://github.com/log4js-node/log4js-node) | `3.0.6` | `6.4.0` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.20` | `7.25.7` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [semver](https://github.com/npm/node-semver) | `5.3.0` | `6.3.1` | | [eslint-plugin-node](https://github.com/mysticatea/eslint-plugin-node) | `4.2.3` | `11.1.0` | | [got](https://github.com/sindresorhus/got) | `9.6.0` | `removed` | | [ava](https://github.com/avajs/ava) | `2.4.0` | `6.1.3` | | [moment](https://github.com/moment/moment) | `2.29.4` | `2.30.1` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.11` | Bumps the npm_and_yarn group with 12 updates in the /examples/log-generator directory: | Package | From | To | | --- | --- | --- | | [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.13` | `0.5.45` | | [log4js](https://github.com/log4js-node/log4js-node) | `0.6.38` | `6.4.0` | | [semver](https://github.com/npm/node-semver) | `4.3.6` | `5.7.2` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.8.5` | `2.8.9` | | [minimist](https://github.com/minimistjs/minimist) | `0.0.8` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.10` | | [express](https://github.com/expressjs/express) | `4.16.3` | `4.21.0` | | [axios](https://github.com/axios/axios) | `0.16.2` | `0.28.0` | | [body-parser](https://github.com/expressjs/body-parser) | `1.18.3` | `1.20.3` | | [url-parse](https://github.com/unshiftio/url-parse) | `1.4.7` | `1.5.10` | Updates `moment-timezone` from 0.5.43 to 0.5.45 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.43...0.5.45) Updates `log4js` from 3.0.6 to 6.4.0 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v3.0.6...v6.4.0) Updates `@babel/traverse` from 7.22.20 to 7.25.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.7/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `semver` from 5.3.0 to 6.3.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v6.3.1) Updates `eslint-plugin-node` from 4.2.3 to 11.1.0 - [Release notes](https://github.com/mysticatea/eslint-plugin-node/releases) - [Commits](mysticatea/eslint-plugin-node@v4.2.3...v11.1.0) Removes `got` Updates `ava` from 2.4.0 to 6.1.3 - [Release notes](https://github.com/avajs/ava/releases) - [Commits](avajs/ava@v2.4.0...v6.1.3) Updates `moment` from 2.29.4 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.29.4...2.30.1) Updates `path-to-regexp` from 0.1.7 to 0.1.11 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.11) Updates `yargs-parser` from 10.1.0 to 18.1.3 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v10.1.0...v18.1.3) Updates `moment-timezone` from 0.5.13 to 0.5.45 - [Release notes](https://github.com/moment/moment-timezone/releases) - [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md) - [Commits](moment/moment-timezone@0.5.43...0.5.45) Updates `log4js` from 0.6.38 to 6.4.0 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v3.0.6...v6.4.0) Updates `semver` from 4.3.6 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v6.3.1) Updates `hosted-git-info` from 2.8.5 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.8.5...v2.8.9) Updates `minimist` from 0.0.8 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `moment` from 2.18.1 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.29.4...2.30.1) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.11) Updates `express` from 4.16.3 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.16.3...4.21.0) Updates `qs` from 6.5.1 to 6.5.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.1...v6.5.2) Updates `axios` from 0.16.2 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.16.2...v0.28.0) Updates `express` from 4.16.3 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.16.3...4.21.0) Updates `body-parser` from 1.18.3 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.18.3...1.20.3) Updates `cookie` from 0.3.1 to 0.6.0 - [Release notes](https://github.com/jshttp/cookie/releases) - [Changelog](https://github.com/jshttp/cookie/blob/v0.6.0/HISTORY.md) - [Commits](jshttp/cookie@v0.3.1...v0.6.0) Updates `follow-redirects` from 1.2.4 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.2.4...v1.15.9) Updates `send` from 0.16.2 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.16.2...0.19.0) Updates `serve-static` from 1.13.2 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.2...v1.16.2) Updates `url-parse` from 1.4.7 to 1.5.10 - [Commits](unshiftio/url-parse@1.4.7...1.5.10) --- updated-dependencies: - dependency-name: moment-timezone dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eslint-plugin-node dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ava dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment-timezone dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: url-parse dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
|
Por favor, catalogue-o seguindo as instruções nesta documentação. [Via VPN]. 💁 Qualquer problema ou dúvida, estamos no Slack, basta abrir um ticket no canal #help-foundation-platform. |
Gandalf - Continuous AppSec📌 LembreteEste repositório está sendo monitorando de forma automática e contínua em busca de achados que possam comprometer a segurança da aplicação. 📋 Resumo de achados no repositório escriba
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
0.5.430.5.453.0.66.4.07.22.207.25.73.0.23.0.35.3.06.3.14.2.311.1.09.6.0removed2.4.06.1.32.29.42.30.10.1.70.1.11Bumps the npm_and_yarn group with 12 updates in the /examples/log-generator directory:
0.5.130.5.450.6.386.4.04.3.65.7.22.8.52.8.90.0.81.2.80.5.10.5.61.0.61.0.70.1.70.1.104.16.34.21.00.16.20.28.01.18.31.20.31.4.71.5.10Updates
moment-timezonefrom 0.5.43 to 0.5.45Release notes
Sourced from moment-timezone's releases.
Changelog
Sourced from moment-timezone's changelog.
Commits
16157c7Build moment-timezone 0.5.452d2b9a3Bump version to 0.5.450a32e82ci: Update to latest version of all actions253bb00Add editorconfig file for consistent indentation526030fdocs: Clarify data update PRs in contributing guide6c31d29Merge pull request #1095 from moment/automated/data-update4d6bcedci: Force running tests after updating data filesa276881data: Add 2024aba275d2ci: Allow downloading tzcode archive as well as tzdata6bf33a2build(deps): bump@babel/traversefrom 7.17.3 to 7.23.2 (#1094)Updates
log4jsfrom 3.0.6 to 6.4.0Changelog
Sourced from log4js's changelog.
... (truncated)
Commits
9fdbed56.4.0788c7a8Merge pull request #1150 from log4js-node/update-changelog7fdb141chore: updated changelog for 6.4.0e6bd888Merge pull request #1151 from log4js-node/feat-zero-backupac599e4allow for zero backup - in sync with https://github.com/log4js-node/streamrol...53248cdMerge pull request #1149 from log4js-node/migrate-daysToKeep-to-numBackups436d9b4Merge pull request #1148 from log4js-node/update-docsd6b017echore(docs): updated fileSync.md and misc commentsd4617a7chore(deps): migrated from daysToKeep to numBackups due to streamroller@^3.0.00ad0133Merge pull request #1147 from log4js-node/update-depsMaintainer changes
This version was pushed to npm by csausdev, a new releaser for log4js since your current version.
Updates
@babel/traversefrom 7.22.20 to 7.25.7Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
2533cfbv7.25.7611d958[babel 8] CreateTSClassImplements|TSInterfaceHeritagenodes (#16731)506bf91RemoveBABEL_TYPES_8_BREAKINGflag and enable it by default (#16817)9e14f7dchore: Enable more lint rules (#16827)e69a7e5fix: issue with node path keys updated on unrelated paths (#16814)7467c9d[Babel 8] Remove someScopemethods (#16705)0a55713[Babel 8] RemoveDecimalLiteralAST (#16807)69d65f1[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0(#16800)2f72b97v7.25.6faceae9fix:path.getAssignmentIdentifiersmay beundefined(#16727)Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
semverfrom 5.3.0 to 6.3.1Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
44d27bcchore: release 6.3.1928e56dfix: better handling of whitespace (#591)39f6326chore:@npmcli/template-oss@4.16.00eeceec6.3.02779d96Expose the token enum on the exports9f5f615changelogce6190e6.2.024af461Add test coverage for bin file388ec1cAddrtloption to coerce from right to leftd062593coerce(number) will coerce to a stringMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
eslint-plugin-nodefrom 4.2.3 to 11.1.0Release notes
Sourced from eslint-plugin-node's releases.
... (truncated)
Commits
4a348e7🔖 11.1.07dc8f80📝 fix rule names in documentatione2da592⚒ improve no-path-concatade0b59✨ add no-restricted-import578110e⚒ simplify the options of no-restricted-require8788a11Update: add ESLint core Node.js and CommonJS rules (#206)b8f9945🔖 11.0.004051ed💥 update node/no-unsupported-features/es-builtins to recognize globalThis4295f6a💥 update rules to checkglobalThis.*a5f3ab2revert ESM support versionsRemoves
gotUpdates
avafrom 2.4.0 to 6.1.3Release notes
Sourced from ava's releases.
... (truncated)
Commits
f8bf00c6.1.3002b3a0Include Node.js 22 in supported engines and test matrixec1a8d2Documentserialconfiguration option01ec280Add VS Code debugging instructions for Yarn PnP projects5d48c956.1.2be5000aFix throws assertions rejecting falsy values when any: true1d62cafUpgrade xo to v0.57.02e0c2b16.1.15161bf7Update dependencies15dddf3Fix external-assertions snapshot for Node.js 20.11Updates
momentfrom 2.29.4 to 2.30.1Changelog
Sourced from moment's changelog.
Commits
485d9a7Build 2.30.1e048b09Bump version to 2.30.1f9f2d58Update changelog for 2.30.1a52ffb2Revert "Merge pull request #5827 from BobZombie:feature/fix_d.ts"ddd6809Build 2.30.0be64d00Bump version to 2.30.0ad41179Update changelog for 2.30.063fe479[misc] Make code ES6 compatible0f0195fRevert "Merge pull request #5599 from Alanscut:issue_4985"15b82f5Revert "Merge pull request #5597 from Alanscut:issue-5596"Updates
path-to-regexpfrom 0.1.7 to 0.1.11Release notes
Sourced from path-to-regexp's releases.
Commits
0c711920.1.118f09549Add error on bad input valuesc827fce0.1.1029b96b4Add backtrack protection to parametersac4c234Update repo url (#314)bdb66350.1.9c4272e4Allow a non-lookahead regex (#312)51a19550.1.8114f62dAdd support for named matching groups (#301)Updates
yargs-parserfrom 10.1.0 to 18.1.3Release notes
Sourced from yargs-parser's releases.
Changelog
Sourced from yargs-parser's changelog.
... (truncated)
Commits
d301a56chore: release 18.1.3 (#269)f7e15b9fix(setArg): options using camel-case and dot-notation populated twice (#268)78014fcchore: release 18.1.2 (#263)41d3f81fix(array, nargs): support -o=--value and --option=--value format (#262)b96b989chore: release 18.1.1 (#259)63810cafix: proto will now be replaced with proto in parse (#258)48b6d9cchore: release 18.1.0 (