chore(deps): bump the npm_and_yarn group across 2 directories with 18 updates#936
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm_and_yarn group across 2 directories with 18 updates#936dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
… updates Bumps the npm_and_yarn group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fastify](https://github.com/fastify/fastify) | `4.29.0` | `5.8.1` | | [undici](https://github.com/nodejs/undici) | `6.20.1` | `6.23.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.8` | `2.1.9` | | [ajv](https://github.com/ajv-validator/ajv) | `8.17.1` | `8.18.0` | | [h3](https://github.com/h3js/h3) | `1.13.0` | `1.15.6` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [markdown-it](https://github.com/markdown-it/markdown-it) | `14.1.0` | `14.1.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.3.3` | | [pbkdf2](https://github.com/browserify/pbkdf2) | `3.1.2` | `3.1.5` | | [rollup](https://github.com/rollup/rollup) | `4.28.1` | `4.59.0` | | [sha.js](https://github.com/crypto-browserify/sha.js) | `2.4.11` | `2.4.12` | | [tmp](https://github.com/raszi/node-tmp) | `0.2.3` | `0.2.5` | | [underscore](https://github.com/jashkenas/underscore) | `1.13.7` | `1.13.8` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.11` | `5.4.21` | Bumps the npm_and_yarn group with 4 updates in the /sdk directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [minimatch](https://github.com/isaacs/minimatch), [rollup](https://github.com/rollup/rollup) and [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers). Updates `fastify` from 4.29.0 to 5.8.1 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v4.29.0...v5.8.1) Updates `undici` from 6.20.1 to 6.23.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.20.1...v6.23.0) Updates `vitest` from 2.1.8 to 2.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.9/packages/vitest) Updates `ajv` from 8.17.1 to 8.18.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v8.17.1...v8.18.0) Updates `h3` from 1.13.0 to 1.15.6 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/v1.15.6/CHANGELOG.md) - [Commits](h3js/h3@v1.13.0...v1.15.6) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `markdown-it` from 14.1.0 to 14.1.1 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@14.1.0...14.1.1) Updates `node-forge` from 1.3.1 to 1.3.3 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.3) Updates `pbkdf2` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md) - [Commits](browserify/pbkdf2@v3.1.2...v3.1.5) Updates `rollup` from 4.28.1 to 4.59.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.28.1...v4.59.0) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) Updates `tmp` from 0.2.3 to 0.2.5 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.5) Updates `underscore` from 1.13.7 to 1.13.8 - [Commits](jashkenas/underscore@1.13.7...1.13.8) Updates `vite` from 5.4.11 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `rollup` from 2.79.2 to 2.80.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.28.1...v4.59.0) Updates `@babel/helpers` from 7.23.2 to 7.28.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-helpers) --- updated-dependencies: - dependency-name: fastify dependency-version: 5.8.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.23.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 2.1.9 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 8.18.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: h3 dependency-version: 1.15.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-it dependency-version: 14.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pbkdf2 dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.59.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-version: 1.13.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 5.4.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 2.80.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.28.6 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 15 updates in the / directory:
4.29.05.8.16.20.16.23.02.1.82.1.98.17.18.18.01.13.01.15.64.1.04.1.14.17.214.17.2314.1.014.1.11.3.11.3.33.1.23.1.54.28.14.59.02.4.112.4.120.2.30.2.51.13.71.13.85.4.115.4.21Bumps the npm_and_yarn group with 4 updates in the /sdk directory: brace-expansion, minimatch, rollup and @babel/helpers.
Updates
fastifyfrom 4.29.0 to 5.8.1Release notes
Sourced from fastify's releases.
... (truncated)
Commits
073ff81Bumped v5.8.167f6c9bMerge commit from fork161578achore: sync version9b06a78Bumped v5.8.0bbdfe82style: remove trailing whitespace (#6543)cd58ed4ci(validate-ecoystem-links): add job level permission (#6545)2590592ci: remove broken links and add ecosystem link validator (#6421)09b55b6chore: Bump markdownlint-cli2 from 0.20.0 to 0.21.0 (#6542)43c4e38chore: Bump actions/dependency-review-action from 4.8.2 to 4.8.3 (#6540)3b40573chore: Bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 (#6539)Updates
undicifrom 6.20.1 to 6.23.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
fbc31e2Bumped v6.23.03477c94chore: release flow using provenanced3aafeafix: limit Content-Encoding chain to 5 to prevent resource exhaustionf9c9185Bumped v6.22.0f670f2afeat: make UndiciErrors reliable to instanceof (#4472) (#4480)422e397feat(ProxyAgent) improve Curl-y behavior in HTTP->HTTP Proxy connections (#41...4a06ffefeat(ProxyAgent): match Curl behavior in HTTP->HTTP Proxy connections (#4180)...4cb3974fix: fix EnvHttpProxyAgent for the Node.js bundle (#4064) (#4432)44c23e5fix: fix wrong stream canceled up after cloning (v6) (#4414)da0e823Bumped v6.21.4Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.
Updates
vitestfrom 2.1.8 to 2.1.9Release notes
Sourced from vitest's releases.
Commits
c9e59a0chore: release v2.1.9e0fe1d8fix: backport #7317 to v2 (#7318)Updates
ajvfrom 8.17.1 to 8.18.0Release notes
Sourced from ajv's releases.
Commits
142ce848.18.0720a23ffix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...82735a1fix: typos in schema-language.md (#2507)b17ec32fix: small grammatical error in managing-schemas.md (#2508)69568d0fix: #2482 Infinity and NaN serialise to null (#2487)f06766ffeat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...Updates
h3from 1.13.0 to 1.15.6Release notes
Sourced from h3's releases.
... (truncated)
Changelog
Sourced from h3's changelog.
... (truncated)
Commits
829daf1chore(release): v1.15.665da0e4chore: update deps6465e1bfix(static): prevent path traversal via percent-encoded dot segments840ac5cfix(sse): sanitize newlines in event stream fields to prevent SSE injection24231b9chore(release): v1.15.5bd92b74chore: fix more ts/lint issuesd18c074chore: update depsc9ebf80chore: fix ts issue618ccf4fix(readRawBody): fix case-sensitiveTransfer-Encodingcheck causing reques...401c9b8ci: fix publish tagUpdates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
lodashfrom 4.17.21 to 4.17.23Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)Updates
markdown-itfrom 14.1.0 to 14.1.1Changelog
Sourced from markdown-it's changelog.
Commits
b4a9b6514.1.1 released4b4bbcaFixed perf regression in linkify-it wrapperd2782d8Add supplementary example-driven documentation (#1092)Updates
node-forgefrom 1.3.1 to 1.3.3Changelog
Sourced from node-forge's changelog.
... (truncated)
Commits
1cea0afRelease 1.3.3.5265989Update changelog.e4f3961Fix changelog for release.503979bUpdate changelog.c3b3b32Make digestAlgorithm parameters optional6f70043Update CVE details.f547b0dStart 1.3.3-0.235ad3eRelease 1.3.2.2598244Update changelog.0032dd0Fix typos.Updates
pbkdf2from 3.1.2 to 3.1.5Changelog
Sourced from pbkdf2's changelog.
Commits
3687905v3.1.567bd94d[Fix] only allow finite iterations8f59d96[Fix] restore node 0.10 supportd2dc5f0[Fix] check parameters before the "no Promise" bailoutb2ad615v3.1.48dbf49b[Deps] updatecreate-hash,ripemd160,sha.js,to-bufferaaf870b[Dev Deps] update@ljharb/eslint-configd15bc35[meta] update repo URLs3e40827v3.1.3e3102a8[Refactor] useto-bufferMaintainer changes
This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.
Updates
rollupfrom 4.28.1 to 4.59.0Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
ae846954.59.0b39616eUpdate audit-resolvec60770dValidate bundle stays within output dir (#6275)33f39c14.58.0b61c408forward NO_SIDE_EFFECTS annotations to function expressions in variable decla...7f00689Extend agent instructionse7b2b85chore(deps): lock file maintenance (#6270)2aa5da9fix(deps): update minor/patch updates (#6267)4319837chore(deps): update dependency lru-cache to v11 (#6269)c3b6b4bchore(deps): update dependency eslint-plugin-unicorn to v63 (#6268)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
sha.jsfrom 2.4.11 to 2.4.12Changelog
Sourced from sha.js's changelog.