Bump the npm_and_yarn group with 13 updates #53

dependabot · 2025-02-11T12:12:57Z

Bumps the npm_and_yarn group with 13 updates:

Package	From	To
next	`10.0.1`	`14.2.21`
node-fetch	`2.6.0`	`2.6.1`
postcss	`7.0.21`	`8.4.31`
browserslist	`4.12.0`	`4.24.4`
@babel/traverse	`7.10.1`	`7.12.5`
braces	`2.3.2`	`3.0.2`
debug	`2.6.9`	`4.1.1`
glob-parent	`3.1.0`	`5.1.0`
loader-utils	`1.2.3`	`2.0.0`
lodash-es	`4.17.15`	`4.17.21`
minimist	`1.2.5`	`1.2.8`
nanoid	`3.1.16`	`3.3.8`
path-parse	`1.0.6`	`1.0.7`

Updates next from 10.0.1 to 14.2.21

Release notes

Sourced from next's releases.

v14.2.21

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Upgrade React from 14898b6a9 to 178c267a4e: vercel/next.js#74115

Fix unstable_allowDynamic when used with pnpm: vercel/next.js#73765

Misc Changes

chore(docs): add missing search: '' on remotePatterns: vercel/next.js#73927

chore(docs): update version history of next/image: vercel/next.js#73926

Credits

Huge thanks to @unstubbable, @ztanner, and @styfle for helping!

v13.5.8

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Update React from d900fadbf to 1dba980e1f: #74202

[i18n] Routing fix: #70761

Credits

Huge thanks to @wyattjoh and @ztanner for helping!

Commits

2655f6e v14.2.21
8803d2b Backport (v14): Upgrade React from 14898b6a9 to 178c267a4e (#74115)
6e35243 chore(docs): add missing search: '' on remotePatterns (#73925) (#73927)
54919d2 chore(docs): update version history of next/image (#73926)
049a690 Backport: Fix unstable_allowDynamic when used with pnpm (#73765)
663fa9c Fix SWC and React versions for 14-2-1 branch (#73791)
ed78a4a v14.2.20
530421d [backport] Fix/dedupe fetch clone (#73532)
cbc62ad v14.2.19
92280dc [backport] Update max tag items limit in docs (#73445)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Updates node-fetch from 2.6.0 to 2.6.1

Release notes

Sourced from node-fetch's releases.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

Changelog

Sourced from node-fetch's changelog.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

Fix: honor the size option after following a redirect.

Commits

b5e2e41 update version number
2358a6c Honor the size option after following a redirect and revert data uri support
8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
1e99050 fix: Change error message thrown with redirect mode set to error (#653)
244e6f6 docs: Show backers in README
6a5d192 fix: Properly parse meta tag when parameters are reversed (#682)
47a24a0 chore: Add opencollective badge
7b13662 chore: Add funding link
5535c2e fix: Check for global.fetch before binding it (#674)
1d5778a docs: Add Discord badge
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.

Updates postcss from 7.0.21 to 8.4.31

Release notes

Sourced from postcss's releases.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by @romainmenke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by @remcohaszing).

8.4.21

Fixed Input#error types (by @hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by @romainmenke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by @KingSora).

8.4.17

Fixed Node.before() unexpected behavior (by @romainmenke).

Added TOC to docs (by @muddv).

8.4.16

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by Romain Menke).

8.4.29

Fixed Node#source.offset (by Ido Rosenthal).

Fixed docs (by Christian Oliff).

8.4.28

Fixed Root.source.end for better source map (by Romain Menke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by Romain Menke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by Remco Haszing).

8.4.21

Fixed Input#error types (by Aleks Hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by Romain Menke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by Rene Haas).

8.4.17

Fixed Node.before() unexpected behavior (by Romain Menke).

Added TOC to docs (by Mikhail Dedov).

8.4.16

... (truncated)

Commits

90208de Release 8.4.31 version
58cc860 Fix carrier return parsing
4fff8e4 Improve pnpm test output
cd43ed1 Update dependencies
caa916b Update dependencies
8972f76 Typo
11a5286 Typo
45c5501 Release 8.4.30 version
bc3c341 Update linter
b2be58a Merge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...
Additional commits viewable in compare view

Updates browserslist from 4.12.0 to 4.24.4

Release notes

Sourced from browserslist's releases.

4.24.4

Improved performance by using caching better (by @thoughtspile).

4.24.3

Updated Firefox ESR (by @fpapado).

4.24.2

Clarify outdated caniuse-lite warning text.

4.24.1

Added months since last caniuse-lite update to the warning (by @mezhnin).

4.24.0

Added browserslist.findConfigFile() helper (by @JLHwung).

4.23.3

Fixed >= query for ios (by @syi0808).

4.23.2

Updated Firefox ESR.

4.23.1

Fixed feature query with mobile to desktop when caniuse lags (by @steverep).

4.23.0

Added BROWSERSLIST_ROOT_PATH (by @teleclimber).

Changelog

Sourced from browserslist's changelog.

4.24.4

Improved performance by using caching better (by @thoughtspile).

4.24.3

Updated Firefox ESR (by @fpapado).

4.24.2

Clarify outdated caniuse-lite warning text.

4.24.1

Added months since last caniuse-lite update to the warning (by @mezhnin).

4.24.0

Added browserslist.findConfigFile() helper (by @JLHwung).

4.23.3

Fixed >= query for ios (by @syi0808).

4.23.2

Updated Firefox ESR.

4.23.1

Fixed feature query with mobile to desktop when caniuse lags (by @steverep).

4.23.0

Added BROWSERSLIST_ROOT_PATH (by @teleclimber).

4.22.3

Fixed white spaces support in supports query (@g-plane).

Fixed shared config like @company/package/browserslist-config (@boucodes).

4.22.2

Fixed idempotency in time queries with mobileToDesktop (by Aliaksei Sapach).

4.22.1

Updated Firefox ESR (by @lerkor).

4.22

Added fully supports query (by Ben Scott).

Added partially supports alias for supports query (by Ben Scott).

4.21.11

Added warning to --update-db to move to new CLI (by Ivan Vasilev).

Fixed docs (by Tatsunori Uchino).

4.21.10

Updated Firefox ESR.

4.21.9

Fixed Opera Mobile edge cases (by Steve Repsher).

... (truncated)

Commits

ae1e1b3 Release 4.24.4 version
442e4ac Try to fix CI
a6bbfc5 Update config types
a687422 Update pnpm
63492cb Optimize FS cache (#864)
efe9db1 Remove old code
f28c409 Clean up code a little
5b11b68 Speed up parsing big package.json
0639f54 Add PR author
958d62e Release 4.24.3 version
Additional commits viewable in compare view

Updates @babel/traverse from 7.10.1 to 7.12.5

Commits

a41da05 v7.12.5
b649f8d Fix packages documentation README links. (#12289)
ea2892f add declare to class properties type annotations (#12257)
df908fc Mark ThisExpression and Super as Purish (#12251)
7f4b838 v7.12.1
eec01fe chore: use workspace:* for dev deps (#12186)
726154c v7.12.0
f697e79 Transform class static block (#12143)
94b5f92 Replace lodash 'defaults' usage with ES6 Spread initializer (#11797)
e0b2bfb fix: mark Pattern in CatchClause as scope (#12119)
Additional commits viewable in compare view

Updates braces from 2.3.2 to 3.0.2

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Require Node.js >= 8.3

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates debug from 2.6.9 to 4.1.1

Release notes

Sourced from debug's releases.

4.1.1

This backport fixes a bug in coveralls configuration as well as the .extend() function.

Patches

test: only run coveralls on travis (#663, #664, d0e498f159bd425b3403db38c98fe26a345d4dcd)

copy custom logger to namespace extension (#646, 57ef085703a0158679cc4a56a4980653b828ce51)

4.1.0

Minor Changes

migrate Makefile to npm scripts (4236585a40787fe60ed625452163299600df2ce6)

feat: Return namespaces string when invoking disable() (7ef8b417a86941372074f749019b9f439a1f6ef6)

Massive thank you to @mblarsen and @outsideris for knocking out two long-awaited changes.

4.0.1

This patch restores browserify functionality as well as keeping the intended functionality with Unpkg.com.

Patches

fix browserify and supply alternative unpkg entry point (closes #606): 99c95e3d54b07a918ad65bc148a2930ea8bfdd02

4.0.0

A long-awaited release to debug is available now: 4.0.0.

Due to the delay in release and the number of changes made (including bumping dependencies in order to mitigate vulnerabilities), it is highly recommended maintainers update to the latest package version and test thoroughly.

This release drops support for Node 4 and 5 in alignment with the Node.js LTS Release Schedule.

Major Changes

move to XO (closes #397): ba8a424d41e9dc6129e081ac3aa9715be6a45fbd

add Node.js 10, remove Node.js 4 (#583): 05b0ceb8856bc7b6bb0f2adc3de5cae3cea9c872

Minor Changes

bump vulnerable packages: 853853f9f588044d76df3daf1959ca56c5f341b7

Fix nwjs support (#569): 207a6a2d53507ec9dd57c94c46cc7d3dd272306d

add instance extends feature (#524): e43e5fed177b8698674748063f4ed1aaba1d59c8

Add TVMLKit support (#579): 02b9ea9fd7ec95c42de47da13b4b6bb8e50025d8

Patches

clean up builds: 3ca23316a470f6bc6e0d75d297179cfc19bbc763

remove needless command aliases in makefile: 9f4f8f59ba745166b0c014a61c76de5e73d4841a

no longer checking for BROWSER=1: 623c08ef73f8211278d5596c88041c65a2a58ee7

fix tests: 57cde56e43003f6b404d4b3d9d76b74aafaeeec8

clean up makefile: 62822f12668e8a0b1d1a4fd5a1c2fce1d8715da3

fix tests: 833b6f84c8f8dc5b6f13da38ab0ef8a8ff86c0c9

add .editorconfig: 2d2509e26bf6df1e1954267e3b1a1cb83973fb09

add yarn-error.log to .gitignore: 7e1d5d94f31b37b460fb8d88000ab7ed0be3597e

... (truncated)

Commits

68b4dc8 4.1.1
7571608 remove .coveralls.yaml
57ef085 copy custom logger to namespace extension (fixes #646)
d0e498f test: only run coveralls on travis
e30e8fd 4.1.0
7ef8b41 feat: Return namespaces string when invoking disable()
4236585 migrate Makefile to npm scripts
4490cd9 4.0.1
99c95e3 fix browserify and supply alternative unpkg entry point (closes #606)
7fb104b 4.0.0
Additional commits viewable in compare view

Updates glob-parent from 3.1.0 to 5.1.0

Release notes

Sourced from glob-parent's releases.

v5.1.0

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

v5.0.0

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

Miscellaneous Chores

Drop support for node <6 & bump dependencies (896c0c0)

v4.0.0

⚠ BREAKING CHANGES

question marks are valid path characters on Windows so avoid flagging as a glob when alone

Update is-glob dependency

Features

hoist regexps and strings for performance gains (4a80667)

question marks are valid path characters on Windows so avoid flagging as a glob when alone (2a551dd)

Update is-glob dependency (e41fcd8)

Changelog

Sourced from glob-parent's changelog.

5.1.0 (2021-01-27)

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

5.0.0 (2021-01-27)

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

Miscellaneous Chores

Drop support for node <6 & bump dependencies (896c0c0)

4.0.0 (2021-01-27)

⚠ BREAKING CHANGES

question marks are valid path characters on Windows so avoid flagging as a glob when alone

Update is-glob dependency

Features

hoist regexps and strings for performance gains (4a80667)

question marks are valid path characters on Windows so avoid flagging as a glob when alone (2a551dd)

Update is-glob dependency (e41fcd8)

Commits

9ff9b4e chore: release 5.1.0
eecf91d feat: add flipBackslashes option to disable auto conversion of slashes (clo...
cf01fb2 chore: release 5.0.0
896c0c0 chore!: Drop support for node <6 & bump dependencies
0572484 chore: release 4.0.0
4a80667 feat: hoist regexps and strings for performance gains
2a551dd feat!: question marks are valid path characters on Windows so avoid flagging ...
e41fcd8 feat!: Update is-glob dependency
a9947c6 chore: normalize repository
7f7748e docs: notate * character name as asterisk
See full diff in compare view

Maintainer changes

This version was pushed to npm by phated, a new releaser for glob-parent since your current version.

Updates loader-utils from 1.2.3 to 2.0.0

Release notes

Sourced from loader-utils's releases.

v2.0.0

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

v1.4.0

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

Changelog

Sourced from loader-utils's changelog.

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

Commits

d9f4e23 chore(release): 2.0.0
865dc03 refactor: switch to md4 by default (#168)
b595cfb refactor: the getOptions method returns empty object on empty query (#167)
c937e8c chore: minimum required Node.js version is 8.9.0 (#166)
c78786d chore: upgrade json5 to fix a vulnerability (#165)
d95b8b5 chore(release): 1.4.0
cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)
06d36cf chore(release): 1.3.0
469eeba feat: support the [query] template for the interpolatedName method (#162)
909c99d chore: funding.yml config and CI fix (#159)
Additional commits viewable in compare view

Updates lodash-es from 4.17.15 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
ded9bc6 Bump to v4.17.20.
63150ef Documentation fixes.
00f0f62 test.js: Remove trailing comma.
846e434 Temporarily use a custom fork of lodash-cli.
5d046f3 Re-enable Travis tests on 4.17 branch.
aa816b3 Remove /npm-package.
d7fbc52 Bump to v4.17.19
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash-es since your current version.

Updates minimist from 1.2.5 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates nanoid from 3.1.16 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

3.3.7

Fixed node16 TypeScript support (by Saadi Myftija).

3.3.6

Fixed package.

3.3.5

Backport funding information.

3.3.4

Fixed --help in CLI (by @Lete114).

3.3.3

Reduced size (by Anton Khlynovskiy).

3.3.2

Fixed enhanced-resolve support.

3.3.1

Reduced package size.

3.3

Added size argument to function from customAlphabet (by Stefan Sundin).

3.2

Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

Reduced async exports size (by Artyom Arutyunyan).

Moved from Jest to uvu (by Vitaly Baev).

3.1.31

Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

Reduced npm package size.

3.1.28

Reduced npm package size.

3.1.27

Cleaned dependencies from development tools.

3.1.26

... (truncated)

Commits

3044cd5 Release 3.3.8 version
4fe3495 Update size limit
d643045 Fix pool pollution, infinite loop (#510)
89d82d2 Release 3.3.7 version
5022c35 Update dual-publish
3e7a8e5 Remove benchmark from CI for v3
d356144 Fix CI for v3
37b25df Move to pnpm 8
d96f392 Release 3.3.6 version
8210dfb Release 3.3.5 version
Additional commits viewable in compare view

Updates path-parse from 1.0.6 to 1.0.7

Commits

See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the npm_and_yarn group with 13 updates: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `10.0.1` | `14.2.21` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.0` | `2.6.1` | | [postcss](https://github.com/postcss/postcss) | `7.0.21` | `8.4.31` | | [browserslist](https://github.com/browserslist/browserslist) | `4.12.0` | `4.24.4` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.10.1` | `7.12.5` | | [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.2` | | [debug](https://github.com/debug-js/debug) | `2.6.9` | `4.1.1` | | [glob-parent](https://github.com/gulpjs/glob-parent) | `3.1.0` | `5.1.0` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.2.3` | `2.0.0` | | [lodash-es](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [nanoid](https://github.com/ai/nanoid) | `3.1.16` | `3.3.8` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | Updates `next` from 10.0.1 to 14.2.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v10.0.1...v14.2.21) Updates `node-fetch` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Changelog](https://github.com/node-fetch/node-fetch/blob/v2.6.1/CHANGELOG.md) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.1) Updates `postcss` from 7.0.21 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.21...8.4.31) Updates `browserslist` from 4.12.0 to 4.24.4 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.12.0...4.24.4) Updates `@babel/traverse` from 7.10.1 to 7.12.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.12.5/packages/babel-traverse) Updates `braces` from 2.3.2 to 3.0.2 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.2) Updates `debug` from 2.6.9 to 4.1.1 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@2.6.9...4.1.1) Updates `glob-parent` from 3.1.0 to 5.1.0 - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](gulpjs/glob-parent@v3.1.0...v5.1.0) Updates `loader-utils` from 1.2.3 to 2.0.0 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/master/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.0) Updates `lodash-es` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `nanoid` from 3.1.16 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.16...3.3.8) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserslist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash-es dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

taahol · 2025-06-03T00:13:49Z

@dependabot rebase

dependabot · 2025-06-03T00:14:48Z

None of your dependencies match this group anymore, you may need to update your configuration file to remove it or change its rules.

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 11, 2025

taahol force-pushed the master branch 4 times, most recently from b05ea37 to abc8829 Compare May 7, 2025 15:49

taahol force-pushed the master branch 15 times, most recently from 6f3b3d4 to 8f97653 Compare May 18, 2025 16:03

taahol force-pushed the master branch 3 times, most recently from 4c16bfd to 94ec437 Compare May 21, 2025 15:54

taahol force-pushed the master branch 6 times, most recently from ebe9d84 to 7397eb7 Compare May 25, 2025 16:36

dependabot bot closed this Jun 3, 2025

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-f6ccc2ab21 branch June 3, 2025 00:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group with 13 updates #53

Bump the npm_and_yarn group with 13 updates #53

Uh oh!

dependabot bot commented on behalf of github Feb 11, 2025 •

edited

Loading

Uh oh!

taahol commented Jun 3, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 3, 2025

Uh oh!

Uh oh!

Bump the npm_and_yarn group with 13 updates #53

Bump the npm_and_yarn group with 13 updates #53

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v14.2.21

Core Changes

Misc Changes

Credits

v13.5.8

Core Changes

Credits

v2.6.1

v2.6.1

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.23

8.4.22

8.4.21

8.4.20

8.4.19

8.4.18

8.4.17

8.4.16

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.23

8.4.22

8.4.21

8.4.20

8.4.19

8.4.18

8.4.17

8.4.16

4.24.4

4.24.3

4.24.2

4.24.1

4.24.0

4.23.3

4.23.2

4.23.1

4.23.0

4.24.4

4.24.3

4.24.2

4.24.1

4.24.0

4.23.3

4.23.2

4.23.1

4.23.0

4.22.3

4.22.2

4.22.1

4.22

4.21.11

4.21.10

4.21.9

Release history

[3.0.0] - 2018-04-08

4.1.1

Patches

4.1.0

Minor Changes

4.0.1

Patches

dependabot bot commented on behalf of github Feb 11, 2025 •

edited

Loading