build(deps): bump the npm_and_yarn group across 1 directory with 11 updates#285
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm_and_yarn group across 1 directory with 11 updates#285dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 10 updates in the /osprey_ui directory: | Package | From | To | | --- | --- | --- | | [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `5.12.1` | `7.119.1` | | [highcharts](https://github.com/highcharts/highcharts-dist) | `8.1.0` | `12.6.0` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `2.1.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `4.1.1` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.12` | `1.9.0` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.2` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [immutable](https://github.com/immutable-js/immutable-js) | `5.1.3` | `5.1.5` | | [moment](https://github.com/moment/moment) | `2.24.0` | `2.30.1` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | Updates `@sentry/browser` from 5.12.1 to 7.119.1 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.119.1/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@5.12.1...7.119.1) Updates `highcharts` from 8.1.0 to 12.6.0 - [Commits](highcharts/highcharts-dist@v8.1.0...v12.6.0) Updates `brace-expansion` from 1.1.12 to 2.1.0 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v2.1.0) Updates `js-yaml` from 3.14.1 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...4.1.1) Updates `path-to-regexp` from 0.1.12 to 1.9.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.12...v1.9.0) Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `immutable` from 5.1.3 to 5.1.5 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.1.3...v5.1.5) Updates `moment` from 2.24.0 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.24.0...2.30.1) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `qs` from 6.13.0 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.15.2) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-version: 7.119.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: highcharts dependency-version: 12.6.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 2.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-version: 2.30.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the /osprey_ui directory:
5.12.17.119.18.1.012.6.01.1.122.1.03.14.14.1.10.1.121.9.03.1.03.1.23.3.33.4.25.1.35.1.52.24.02.30.12.3.12.3.2Updates
@sentry/browserfrom 5.12.1 to 7.119.1Changelog
Sourced from @sentry/browser's changelog.
... (truncated)
Commits
c8452e1release: 7.119.15a88ff6fix(browser/v7): Ensurewrap()only returns functions (#13838 backport) (#1...5adcbf9Merge branch 'release/7.119.0' into v7f58bf69release: 7.119.0a6bc39ffix(ci): GH dropped macos-11 at the end of June 24 (#13360)2060d84meta(changelog): Update CHANGELOG.md for 7.119.0 (#13350)f54c97abackport(tracing): Report dropped spans for transactions (#13343)eeae3cftest(v7/loader): Update Loader Script to latest (#12765)d3e2c7bmeta(v7): Ignore pem for tests (#13051)47f1710Merge branch 'release/7.118.0' into v7Maintainer changes
This version was pushed to npm by sentry-bot, a new releaser for
@sentry/browsersince your current version.Updates
highchartsfrom 8.1.0 to 12.6.0Commits
6abaa7ev12.6.03c77d12Fixed license typo in README.md17b0fe1Added missing LICENSE.txt.f1e20ddv12.5.0d98efa4Merge pull request #27 from hubertkozik/chore/license-info8692a7bMerge branch 'master' into chore/license-infoaa997e2Added LICENSE.md and updated license info.6ea62bdRemoved bundled 3rd party libs.9206769CodeQLb390574Merge pull request #25 from highcharts/enhancement/readmeUpdates
brace-expansionfrom 1.1.12 to 2.1.0Release notes
Sourced from brace-expansion's releases.
Commits
1ee4a902.1.0b0302acAdd opt-in { max } mitigation to v2 legacy line (#100)73b54592.0.3311ac0dBackport fix for GHSA-f886-m6hf-6m8v to v2 (#96)a3efcee2.0.214f1d91pkg: publish on tag 2.xed7780afmt36603d5Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)b9c0e572.0.14d96d7dswitch to fork of matcha that works on node>12Updates
js-yamlfrom 3.14.1 to 4.1.1Changelog
Sourced from js-yaml's changelog.
... (truncated)
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)2cef47b4.1.0 released810b149dist rebuild2b5620eExport built-in types, type override now preserves orderUpdates
path-to-regexpfrom 0.1.12 to 1.9.0Release notes
Sourced from path-to-regexp's releases.
Changelog
Sourced from path-to-regexp's changelog.
... (truncated)
Commits
c75eb101.9.0925ac8eAdd backtrack protection to 1.x release (#320)32a14b0Fixre.exec('/test/route')result (#267)79a5dcf1.8.01a47442feat: backport TokensToFunctionOptions to v1.x9c0550cUpdate history for1.7.0a99ec3cv1.7.069fb61bAllow delimiter to be set fortokensToRegExp1c2e8e4Update history for1.6.0bdf17dev1.6.0Updates
fast-urifrom 3.1.0 to 3.1.2Release notes
Sourced from fast-uri's releases.
Commits
919dd8eBumped v3.1.2c65ba57fixup: linting6c86c17Merge commit from forka95158aHandle malformed fragment decoding without throwing (#171)cea547cBumped v3.1.1876ce79Merge commit from forkdcdf690ci: add lock-threads workflow (#169)c860e65build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)9b4c6dcbuild(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)85d09a9build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...Updates
flattedfrom 3.3.3 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
immutablefrom 5.1.3 to 5.1.5Release notes
Sourced from immutable's releases.
Changelog
Sourced from immutable's changelog.
Commits
b37b8555.1.516b3313Merge commit from forkfd2ef49fix new proto key injection6734b7bfix Prototype Pollution in mergeDeep, toJS, etc.6f772deMerge pull request #2175 from immutable-js/dependabot/npm_and_yarn/rollup-4.59.05f3dc61Bump rollup from 4.34.8 to 4.59.0049a594Merge pull request #2173 from immutable-js/dependabot/npm_and_yarn/lodash-4.1...2481a77Merge pull request #2172 from mrazauskas/update-tstycheeb04779Bump lodash from 4.17.21 to 4.17.23b973bf3formatMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for immutable since your current version.
Updates
momentfrom 2.24.0 to 2.30.1Changelog
Sourced from moment's changelog.
... (truncated)
Commits
485d9a7Build 2.30.1e048b09Bump version to 2.30.1f9f2d58Update changelog for 2.30.1a52ffb2Revert "Merge pull request #5827 from BobZombie:feature/fix_d.ts"ddd6809Build 2.30.0be64d00Bump version to 2.30.0ad41179Update changelog for 2.30.063fe479[misc] Make code ES6 compatible0f0195fRevert "Merge pull request #5599 from Alanscut:issue_4985"15b82f5Revert "Merge pull request #5597 from Alanscut:issue-5596"Updates
picomatchfrom 2.3.1 to 2.3.2Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
... (truncated)
Commits
81cba8dPublish 2.3.2fc1f6b6Merge commit from forkeec17aeMerge commit from fork78f8ca4Merge pull request #156 from micromatch/backport-1443f4f10eMerge pull request #144 from Jason3S/jdent-object-propertiesUpdates
qsfrom 6.13.0 to 6.15.2Changelog
Sourced from qs's changelog.
... (truncated)
Commits
9aca407v6.15.25e33d33[Dev Deps] update@ljharb/eslint-config21f80b3[Fix]stringify: skip null/undefined entries inarrayFormat: 'comma'+ `e...a0a81ea[Fix]stringify: use configureddelimiteraftercharsetSentinele3062f7[Fix]stringify: applyformatterto encoded key understrictNullHandling0c180a4[Fix]stringify: skip null/undefined filter-array entries instead of crashi...3a8b94a[Tests] add regression tests for keys containing percent-encoded bracket text96755ab[readme] fix grammara419ce5[Fix]parse: handle nested bracket groups and add regression tests3f5e1c5v6.15.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.