Bump the npm_and_yarn group across 1 directory with 27 updates #1

dependabot · 2024-12-29T05:27:47Z

Bumps the npm_and_yarn group with 22 updates in the / directory:

Package	From	To
cross-spawn	`7.0.3`	`7.0.5`
semver	`7.3.5`	`7.5.2`
loader-utils	`3.2.0`	`3.2.1`
webpack	`5.64.4`	`5.94.0`
postcss	`8.4.4`	`8.4.31`
@babel/traverse	`7.17.10`	`7.26.4`
ansi-regex	`4.1.0`	`5.0.1`
ansi-regex	`3.0.0`	`5.0.1`
json5	`1.0.1`	`1.0.2`
qs	`6.5.2`	`6.13.1`
qs	`6.10.1`	`6.13.1`
braces	`3.0.2`	`3.0.3`
decode-uri-component	`0.2.0`	`0.2.2`
got	`9.6.0`	`removed`
alex	`8.2.0`	`11.0.1`
ip	`1.1.5`	`removed`
socks	`2.6.1`	`2.8.3`
micromatch	`4.0.4`	`4.0.8`
minimatch	`3.0.4`	`3.1.2`
parse-path	`4.0.3`	`7.0.0`
lerna	`4.0.0`	`8.1.9`
ws	`7.5.6`	`7.5.10`
puppeteer	`12.0.1`	`23.11.1`
word-wrap	`1.2.3`	`1.2.5`

Updates cross-spawn from 7.0.3 to 7.0.5

Changelog

Sourced from cross-spawn's changelog.

7.0.5 (2024-11-07)

Bug Fixes

fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

disable regexp backtracking (#160) (5ff3a07)

Commits

0852683 chore(release): 7.0.5
640d391 fix: fix escaping bug introduced by backtracking
bff0c87 chore: remove codecov
a7c6abc chore: replace travis with github workflows
9b9246e chore(release): 7.0.4
5ff3a07 fix: disable regexp backtracking (#160)
9521e2d chore: fix tests in recent node js versions
97ded39 chore: convert package lock
d52b6b9 chore: remove unused argument (#156)
5d84384 chore: add travis jobs on ppc64le (#142)
Additional commits viewable in compare view

Updates semver from 7.3.5 to 7.5.2

Release notes

Sourced from semver's releases.

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

58c791f #566 diff when detecting major change from prerelease (#566) (@lukekarrys)

5c8efbc #565 preserve build in raw after inc (#565) (@lukekarrys)

717534e #564 better handling of whitespace (#564) (@lukekarrys)

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

d30d25a #559 show type on invalid semver error (#559) (@tjenkinson)

v7.5.0

7.5.0 (2023-04-17)

Features

503a4e5 #548 allow identifierBase to be false (#548) (@lsvalina)

Bug Fixes

e219bb4 #552 throw on bad version with correct error message (#552) (@wraithgar)

fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@tjenkinson)

2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@macno)

v7.4.0

7.4.0 (2023-04-10)

Features

113f513 #532 identifierBase parameter for .inc (#532) (@wraithgar, @b-bly)

48d8f8f #530 export new RELEASE_TYPES constant (@hcharley)

Bug Fixes

940723d #538 intersects with v0.0.0 and v0.0.0-0 (#538) (@wraithgar)

aa516b5 #535 faster parse options (#535) (@H4ad)

61e6ea1 #536 faster cache key factory for range (#536) (@H4ad)

f8b8b61 #541 optimistic parse (#541) (@H4ad)

796cbe2 #533 semver.diff prerelease to release recognition (#533) (@wraithgar, @dominique-blockchain)

3f222b1 #537 reuse comparators on subset (#537) (@H4ad)

f66cc45 #539 faster diff (#539) (@H4ad)

Documentation

c5d29df #530 Add "Constants" section to README (@hcharley)

... (truncated)

Changelog

Sourced from semver's changelog.

7.5.2 (2023-06-15)

Bug Fixes

58c791f #566 diff when detecting major change from prerelease (#566) (@lukekarrys)

5c8efbc #565 preserve build in raw after inc (#565) (@lukekarrys)

717534e #564 better handling of whitespace (#564) (@lukekarrys)

7.5.1 (2023-05-12)

Bug Fixes

d30d25a #559 show type on invalid semver error (#559) (@tjenkinson)

7.5.0 (2023-04-17)

Features

503a4e5 #548 allow identifierBase to be false (#548) (@lsvalina)

Bug Fixes

e219bb4 #552 throw on bad version with correct error message (#552) (@wraithgar)

fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@tjenkinson)

2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@macno)

7.4.0 (2023-04-10)

Features

113f513 #532 identifierBase parameter for .inc (#532) (@wraithgar, @b-bly)

48d8f8f #530 export new RELEASE_TYPES constant (@hcharley)

Bug Fixes

940723d #538 intersects with v0.0.0 and v0.0.0-0 (#538) (@wraithgar)

aa516b5 #535 faster parse options (#535) (@H4ad)

61e6ea1 #536 faster cache key factory for range (#536) (@H4ad)

f8b8b61 #541 optimistic parse (#541) (@H4ad)

796cbe2 #533 semver.diff prerelease to release recognition (#533) (@wraithgar, @dominique-blockchain)

3f222b1 #537 reuse comparators on subset (#537) (@H4ad)

f66cc45 #539 faster diff (#539) (@H4ad)

Documentation

c5d29df #530 Add "Constants" section to README (@hcharley)

7.3.8 (2022-10-04)

Bug Fixes

... (truncated)

Commits

e7b78de chore: release 7.5.2
58c791f fix: diff when detecting major change from prerelease (#566)
5c8efbc fix: preserve build in raw after inc (#565)
717534e fix: better handling of whitespace (#564)
2f738e9 chore: bump @npmcli/template-oss from 4.14.1 to 4.15.1 (#558)
aa016a6 chore: release 7.5.1
d30d25a fix: show type on invalid semver error (#559)
09c69e2 chore: bump @npmcli/template-oss from 4.13.0 to 4.14.1 (#555)
5b02ad7 chore: release 7.5.0
e219bb4 fix: throw on bad version with correct error message (#552)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.

Updates loader-utils from 3.2.0 to 3.2.1

Release notes

Sourced from loader-utils's releases.

v3.2.1

3.2.1 (2022-11-11)

Bug Fixes

ReDoS problem (#224) (d2d752d)

Changelog

Sourced from loader-utils's changelog.

3.2.1 (2022-11-11)

Bug Fixes

ReDoS problem (#224) (d2d752d)

Commits

a3fd3ca chore(release): 3.2.1
d2d752d fix: ReDoS problem (#224)
52cd134 chore(deps): bump minimist from 1.2.5 to 1.2.6 (#209)
9fe2381 chore: add .gitattributes for normalizing end of lines - fixes #203 (#204)
See full diff in compare view

Updates webpack from 5.64.4 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

Added runtime condition for harmony reexport checked

Handle properly data/http/https protocols in source maps

Make bigint optimistic when browserslist not found

Move @types/eslint-scope to dev deps

Related in asset stats is now always an array when no related found

Handle ASI for export declarations

Mangle destruction incorrect with export named default properly

Fixed unexpected asi generation with sequence expression

Fixed a lot of types

New Features

Added new external type "module-import"

Support webpackIgnore for new URL() construction

[CSS] @import pathinfo support

Security

Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

Generate correct relative path to runtime chunks

Makes DefinePlugin quieter under default log level

Fixed mangle destructuring default in namespace import

Fixed consumption of eager shared modules for module federation

Strip slash for pretty regexp

Calculate correct contenthash for CSS generator options

New Features

Added the binary generator option for asset modules to explicitly keep source maps produced by loaders

Added the modern-module library value for tree shakable output

Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

Correct tidle range's comutation for module federation

Consider runtime for pure expression dependency update hash

Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits

eabf85d chore(release): 5.94.0
955e057 security: fix DOM clobbering in auto public path
9822387 test: fix
cbb86ed test: fix
5ac3d7f fix: unexpected asi generation with sequence expression
2411661 security: fix DOM clobbering in auto public path
b8c03d4 fix: unexpected asi generation with sequence expression
f46a03c revert: do not use heuristic fallback for "module-import"
60f1898 fix: do not use heuristic fallback for "module-import"
66306aa Revert "fix: module-import get fallback from externalsPresets"
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.

Updates postcss from 8.4.4 to 8.4.31

Release notes

Sourced from postcss's releases.

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by @romainmenke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

8.4.23

Fixed warnings in TypeDoc.

8.4.22

Fixed TypeScript support with node16 (by @remcohaszing).

8.4.21

Fixed Input#error types (by @hudochenkov).

8.4.20

Fixed source map generation for childless at-rules like @layer.

8.4.19

Fixed whitespace preserving after AST transformations (by @romainmenke).

8.4.18

Fixed an error on absolute: true with empty sourceContent (by @KingSora).

8.4.17

Fixed Node.before() unexpected behavior (by @romainmenke).

Added TOC to docs (by @muddv).

8.4.16

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

... (truncated)

Commits

90208de Release 8.4.31 version
58cc860 Fix carrier return parsing
4fff8e4 Improve pnpm test output
cd43ed1 Update dependencies
caa916b Update dependencies
8972f76 Typo
11a5286 Typo
45c5501 Release 8.4.30 version
bc3c341 Update linter
b2be58a Merge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...
Additional commits viewable in compare view

Updates @babel/traverse from 7.17.10 to 7.26.4

Release notes

Sourced from @babel/traverse's releases.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

Committers: 6

Babel Bot (@babel-bot)

Dylan Piercey (@DylanPiercey)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

v7.26.1 (2024-10-25)

🐛 Bug Fix

babel-parser

#16936 fix(parser): offset internal index locations by startIndex (@DylanPiercey)

v7.26.0 (2024-10-25)

🚀 New Feature

babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types

#16850 Enable import attributes parsing by default (@nicolo-ribaudo)

babel-core

#16862 feat: support async plugin's pre/post (@timofei-iatsenko)

babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone

#16692 Add transform-regexp-modifiers to preset-env (@JLHwung)

babel-parser

#16849 feat: add startIndex parser option (@DylanPiercey)

babel-generator, babel-parser, babel-plugin-syntax-flow

#16841 Always enable parsing of Flow enums (@nicolo-ribaudo)

babel-helpers, babel-preset-typescript, babel-runtime-corejs3

... (truncated)

Commits

cf7b9cd v7.26.4
f33704a Revert "perf: Improve scope information collection performance" (#17005)
36ca8fa v7.26.3
ded1571 perf: Improve scope information collection performance (#16923)
943bdfe perf: Avoid repeated traversal when creating scope (#16964)
b07957e v7.25.9
af91759 fix: Accidentally publishing useless files (#16917)
2533cfb v7.25.7
611d958 [babel 8] Create TSClassImplements|TSInterfaceHeritage nodes (#16731)
506bf91 Remove BABEL_TYPES_8_BREAKING flag and enable it by default (#16817)
Additional commits viewable in compare view

Updates ansi-regex from 4.1.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

v5.0.0

Breaking

Require Node.js 8 166a0d5

Enhancements

Add TypeScript definition (#32) e77ea17

chalk/ansi-regex@v4.1.0...v5.0.0

Commits

a9babce 5.0.1
4657833 fix incorrect format
c3c0b3f Fix potential ReDoS (#37)
178363b Move to GitHub Actions (#35)
0755e66 Add @Qix- to funding.yml
2b56fb0 5.0.0
f26f7fe Meta tweaks
e77ea17 Add TypeScript definition (#32)
166a0d5 Require Node.js 8
f115fca Tidelift tasks
See full diff in compare view

Updates ansi-regex from 3.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

v5.0.0

Breaking

Require Node.js 8 166a0d5

Enhancements

Add TypeScript definition (#32) e77ea17

chalk/ansi-regex@v4.1.0...v5.0.0

Commits

a9babce 5.0.1
4657833 fix incorrect format
c3c0b3f Fix potential ReDoS (#37)
178363b Move to GitHub Actions (#35)
0755e66 Add @Qix- to funding.yml
2b56fb0 5.0.0
f26f7fe Meta tweaks
e77ea17 Add TypeScript definition (#32)
166a0d5 Require Node.js 8
f115fca Tidelift tasks
See full diff in compare view

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates qs from 6.5.2 to 6.13.1

Changelog

Sourced from qs's changelog.

6.13.1

[Fix] stringify: avoid a crash when a filter key is null

[Fix] utils.merge: functions should not be stringified into keys

[Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset

[Fix] stringify: ensure a non-string filter does not crash

[Refactor] use __proto__ syntax instead of Object.create for null objects

[Refactor] misc cleanup

[Tests] utils.merge: add some coverage

[Tests] fix a test case

[actions] split out node 10-20, and 20+

[Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape

6.13.0

[New] parse: add strictDepth option (#511)

[Tests] use npm audit instead of aud

6.12.3

[Fix] parse: properly account for strictNullHandling when allowEmptyArrays

[meta] fix changelog indentation

6.12.2

[Fix] parse: parse encoded square brackets (#506)

[readme] add CII best practices badge

6.12.1

[Fix] parse: Disable decodeDotInKeys by default to restore previous behavior (#501)

[Performance] utils: Optimize performance under large data volumes, reduce memory usage, and speed up processing (#502)

[Refactor] utils: use +=

[Tests] increase coverage

6.12.0

[New] parse/stringify: add decodeDotInKeys/encodeDotKeys options (#488)

[New] parse: add duplicates option

[New] parse/stringify: add allowEmptyArrays option to allow [] in object values (#487)

[Refactor] parse/stringify: move allowDots config logic to its own variable

[Refactor] stringify: move option-handling code into normalizeStringifyOptions

[readme] update readme, add logos (#484)

[readme] stringify: clarify default arrayFormat behavior

[readme] fix line wrapping

[readme] remove dead badges

[Deps] update side-channel

[meta] make the dist build 50% smaller

[meta] add sideEffects flag

[meta] run build in prepack, not prepublish

[Tests] parse: remove useless tests; add coverage

[Tests] stringify: increase coverage

[Tests] use mock-property

[Tests] stringify: improve coverage

[Dev Deps] update @ljharb/eslint-config , aud, has-override-mistake, has-property-descriptors, mock-property, npmignore, object-inspect, tape

... (truncated)

Commits

f1ee037 v6.13.1
afd20d0 [Dev Deps] update object-inspect
d185cee [actions] split out node 10-20, and 20+
4cf5567 [Dev Deps] update es-value-fixtures, tape
3c8a6f5 [Refactor] use __proto__ syntax instead of Object.create for null objects
96f4d93 [Fix] stringify: avoid a crash when a filter key is null
aa1f0a8 [Fix] utils.merge: functions should not be stringified into k...
Description has been truncated

Bumps the npm_and_yarn group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.5` | | [semver](https://github.com/npm/node-semver) | `7.3.5` | `7.5.2` | | [loader-utils](https://github.com/webpack/loader-utils) | `3.2.0` | `3.2.1` | | [webpack](https://github.com/webpack/webpack) | `5.64.4` | `5.94.0` | | [postcss](https://github.com/postcss/postcss) | `8.4.4` | `8.4.31` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.17.10` | `7.26.4` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `5.0.1` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `5.0.1` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.13.1` | | [qs](https://github.com/ljharb/qs) | `6.10.1` | `6.13.1` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [got](https://github.com/sindresorhus/got) | `9.6.0` | `removed` | | [alex](https://github.com/get-alex/alex) | `8.2.0` | `11.0.1` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `removed` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.6.1` | `2.8.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [parse-path](https://github.com/IonicaBizau/parse-path) | `4.0.3` | `7.0.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `4.0.0` | `8.1.9` | | [ws](https://github.com/websockets/ws) | `7.5.6` | `7.5.10` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `12.0.1` | `23.11.1` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Updates `cross-spawn` from 7.0.3 to 7.0.5 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.5) Updates `semver` from 7.3.5 to 7.5.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.3.5...v7.5.2) Updates `loader-utils` from 3.2.0 to 3.2.1 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/master/CHANGELOG.md) - [Commits](webpack/loader-utils@v3.2.0...v3.2.1) Updates `webpack` from 5.64.4 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.64.4...v5.94.0) Updates `postcss` from 8.4.4 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.4...8.4.31) Updates `@babel/traverse` from 7.17.10 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `ansi-regex` from 4.1.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v4.1.0...v5.0.1) Updates `ansi-regex` from 3.0.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v4.1.0...v5.0.1) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `qs` from 6.5.2 to 6.13.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.1) Updates `qs` from 6.10.1 to 6.13.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Removes `got` Updates `alex` from 8.2.0 to 11.0.1 - [Release notes](https://github.com/get-alex/alex/releases) - [Commits](get-alex/alex@8.2.0...11.0.1) Updates `http-cache-semantics` from 4.1.0 to 4.1.1 - [Commits](kornelski/http-cache-semantics@v4.1.0...v4.1.1) Removes `ip` Updates `socks` from 2.6.1 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](JoshGlazebrook/socks@2.6.1...2.8.3) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `nanoid` from 3.1.30 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.30...3.3.8) Updates `parse-path` from 4.0.3 to 7.0.0 - [Release notes](https://github.com/IonicaBizau/parse-path/releases) - [Commits](IonicaBizau/parse-path@4.0.3...7.0.0) Updates `lerna` from 4.0.0 to 8.1.9 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v8.1.9/packages/lerna) Updates `parse-url` from 6.0.0 to 8.1.0 - [Release notes](https://github.com/IonicaBizau/parse-url/releases) - [Commits](IonicaBizau/parse-url@6.0.0...8.1.0) Updates `ws` from 7.5.6 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.6...7.5.10) Updates `puppeteer` from 12.0.1 to 23.11.1 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/release-please-config.json) - [Commits](puppeteer/puppeteer@v12.0.1...puppeteer-v23.11.1) Updates `tough-cookie` from 2.5.0 to 4.0.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v4.0.0) Updates `terser` from 5.10.0 to 5.37.0 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v5.10.0...v5.37.0) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: cross-spawn dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: alex dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: parse-path dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lerna dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: parse-url dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: puppeteer dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 29, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 27 updates #1

Bump the npm_and_yarn group across 1 directory with 27 updates #1

Uh oh!

dependabot bot commented on behalf of github Dec 29, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the npm_and_yarn group across 1 directory with 27 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 27 updates #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 29, 2024

7.0.5 (2024-11-07)

Bug Fixes

7.0.4 (2024-11-07)

Bug Fixes

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

v7.5.0

7.5.0 (2023-04-17)

Features

Bug Fixes

v7.4.0

7.4.0 (2023-04-10)

Features

Bug Fixes

Documentation

7.5.2 (2023-06-15)

Bug Fixes

7.5.1 (2023-05-12)

Bug Fixes

7.5.0 (2023-04-17)

Features

Bug Fixes

7.4.0 (2023-04-10)

Features

Bug Fixes

Documentation

7.3.8 (2022-10-04)

Bug Fixes

v3.2.1

3.2.1 (2022-11-11)

Bug Fixes

3.2.1 (2022-11-11)

Bug Fixes

v5.94.0

Bug Fixes

New Features

Security

v5.93.0

Bug Fixes

New Features

v5.92.1

Bug Fixes

v5.92.0

Bug Fixes

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.23

8.4.22

8.4.21

8.4.20

8.4.19

8.4.18

8.4.17

8.4.16

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

Fixes (backport of `6.0.1` to v5)

Fixes (backport of `6.0.1` to v5)