Skip to content

Bump axios, jest-puppeteer and start-server-and-test #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump axios, jest-puppeteer and start-server-and-test #13

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 21, 2024

Bumps axios to 1.6.7 and updates ancestor dependencies axios, jest-puppeteer and start-server-and-test. These dependencies need to be updated together.

Updates axios from 0.21.4 to 1.6.7

Release notes

Sourced from axios's releases.

Release v1.6.7

Release notes:

Bug Fixes

  • capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

Release v1.6.6

Release notes:

Bug Fixes

  • fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
  • wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

Release v1.6.5

Release notes:

Bug Fixes

  • ci: refactor notify action as a job of publish action; (#6176) (0736f95)
  • dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

Release v1.6.4

Release notes:

Bug Fixes

  • security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
  • security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

Release v1.6.3

Release notes:

... (truncated)

Changelog

Sourced from axios's changelog.

1.6.7 (2024-01-25)

Bug Fixes

  • capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

1.6.6 (2024-01-24)

Bug Fixes

  • fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
  • wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

1.6.5 (2024-01-05)

Bug Fixes

  • ci: refactor notify action as a job of publish action; (#6176) (0736f95)
  • dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

1.6.4 (2024-01-03)

Bug Fixes

  • security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
  • security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

... (truncated)

Commits

Updates jest-puppeteer from 5.0.4 to 10.0.1

Release notes

Sourced from jest-puppeteer's releases.

v10.0.1

Bug Fixes

v10.0.0

Features

BREAKING CHANGES

  • Drop Node.js v16 support.

v9.0.2

Bug Fixes

v9.0.1

Bug Fixes

  • fix compatibility with Puppeteer v21 (#566) (5cfee1f)

v9.0.0

Bug Fixes

  • expect-puppeteer: fix addSnapshotSerializer usage (826fd31), closes #552
  • jest-dev-server: no default host (c35e403)
  • jest-dev-server: properly detect if port is used, using both config.port and config.host options. (351720a), closes #555
  • types: fix environment global types (fb691f7)
  • types: fix missing jestPuppeteer global before setup (37e2294)

Features

  • drop Node.js v14 support (d7d9833)

... (truncated)

Changelog

Sourced from jest-puppeteer's changelog.

10.0.1 (2024-02-15)

Note: Version bump only for package jest-puppeteer

10.0.0 (2024-02-10)

Note: Version bump only for package jest-puppeteer

9.0.2 (2023-12-06)

Note: Version bump only for package jest-puppeteer

9.0.1 (2023-10-01)

Bug Fixes

  • fix compatibility with Puppeteer v21 (#566) (5cfee1f)

9.0.0 (2023-05-24)

Features

  • drop Node.js v14 support (d7d9833)

BREAKING CHANGES

  • drop Node.js v14 support

... (truncated)

Commits

Updates start-server-and-test from 1.14.0 to 2.0.3

Release notes

Sourced from start-server-and-test's releases.

v2.0.3

2.0.3 (2023-11-16)

Bug Fixes

  • deps: update dependency wait-on to v7.2.0 (#374) (ad35c2e)

v2.0.2

2.0.2 (2023-11-05)

Bug Fixes

  • deps: update dependency wait-on to v7.1.0 (efe7384)

v2.0.1

2.0.1 (2023-09-21)

Bug Fixes

v2.0.0

2.0.0 (2023-02-27)

Features

BREAKING CHANGES

  • default host to ping is 127.0.0.1

  • code format

v1.15.5

1.15.5 (2023-02-26)

Bug Fixes

  • pinging the server at 127.0.0.1 when using just the port number (#357) (9df0423)

v1.15.4

1.15.4 (2023-02-13)

... (truncated)

Commits
  • ad35c2e fix(deps): update dependency wait-on to v7.2.0 (#374)
  • efe7384 fix(deps): update dependency wait-on to v7.1.0
  • 2fc1f98 fix: bump minimum Node to v16, closes #351
  • 2d1decf add note about localhost http (#372)
  • 04b33b3 Fix: fix the interactive shell in the test process (#369)
  • a9e395c feat: making the default host 127.0.0.1 (#359)
  • 9df0423 fix: pinging the server at 127.0.0.1 when using just the port number (#357)
  • 0e9984e confirm ::1 address works (#355)
  • f418050 add test using json-server and node v18 (#354)
  • c5d7066 split ci workflow jobs (#353)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump axios, jest-puppeteer and start-server-and-test
3ddc2ec 
Bumps [axios](https://github.com/axios/axios) to 1.6.7 and updates ancestor dependencies [axios](https://github.com/axios/axios), [jest-puppeteer](https://github.com/argos-ci/jest-puppeteer/tree/HEAD/packages/jest-puppeteer) and [start-server-and-test](https://github.com/bahmutov/start-server-and-test). These dependencies need to be updated together.


Updates `axios` from 0.21.4 to 1.6.7
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.21.4...v1.6.7)

Updates `jest-puppeteer` from 5.0.4 to 10.0.1
- [Release notes](https://github.com/argos-ci/jest-puppeteer/releases)
- [Changelog](https://github.com/argos-ci/jest-puppeteer/blob/main/packages/jest-puppeteer/CHANGELOG.md)
- [Commits](https://github.com/argos-ci/jest-puppeteer/commits/v10.0.1/packages/jest-puppeteer)

Updates `start-server-and-test` from 1.14.0 to 2.0.3
- [Release notes](https://github.com/bahmutov/start-server-and-test/releases)
- [Commits](bahmutov/start-server-and-test@v1.14.0...v2.0.3)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
- dependency-name: jest-puppeteer
  dependency-type: direct:production
- dependency-name: start-server-and-test
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 21, 2024
@dependabot dependabot bot mentioned this pull request Feb 21, 2024
Closed
@senior-dev-bot
Copy link

senior-dev-bot bot commented Feb 21, 2024

Hi there! 👋 Thanks for opening a PR. 🎉 To get the most out of Senior Dev, please sign up in our Web App, connect your GitHub account, and add/join your organization LangMers. After that, you will receive code reviews beginning on your next opened PR. 🚀

@dryrunsecurity
Copy link

dryrunsecurity bot commented Feb 21, 2024

Contextual Security Analysis

As DryRun Security performs checks, we’ll summarize them here. You can always dive into the detailed results in the section below for checks.

Status DryRun Security Check
✅ Sensitive Functions Analyzer
✅ Configured Sensitive Files Analyzer
✅ Sensitive Files Analyzer

Chat with your AI-powered Security Buddy by typing @dryrunsecurity followed by your question into a comment.
Example: @dryrunsecurity What are common security issues with web application cookies?

Install and configure more repositories at DryRun Security

@codiumai-pr-agent-free
Copy link

codiumai-pr-agent-free bot commented Feb 21, 2024 •
edited
Loading

PR Code Suggestions

No suggestions found to improve this PR.

✨ Improve tool usage guide:

Overview:
The improve tool scans the PR code changes, and automatically generates suggestions for improving the PR code. The tool can be triggered automatically every time a new PR is opened, or can be invoked manually by commenting on a PR.
When commenting, to edit configurations related to the improve tool (pr_code_suggestions section), use the following template:

/improve --pr_code_suggestions.some_config1=... --pr_code_suggestions.some_config2=...

With a configuration file, use the following template:

[pr_code_suggestions]
some_config1=...
some_config2=...
Enabling\disabling automation

When you first install the app, the default mode for the improve tool is:

pr_commands = ["/improve --pr_code_suggestions.summarize=true", ...]

meaning the improve tool will run automatically on every PR, with summarization enabled. Delete this line to disable the tool from running automatically.

Utilizing extra instructions

Extra instructions are very important for the improve tool, since they enable to guide the model to suggestions that are more relevant to the specific needs of the project.

Be specific, clear, and concise in the instructions. With extra instructions, you are the prompter. Specify relevant aspects that you want the model to focus on.

Examples for extra instructions:

[pr_code_suggestions] # /improve #
extra_instructions="""
Emphasize the following aspects:
- Does the code logic cover relevant edge cases?
- Is the code logic clear and easy to understand?
- Is the code logic efficient?
...
"""

Use triple quotes to write multi-line instructions. Use bullet points to make the instructions more readable.

A note on code suggestions quality
  • While the current AI for code is getting better and better (GPT-4), it's not flawless. Not all the suggestions will be perfect, and a user should not accept all of them automatically.
  • Suggestions are not meant to be simplistic. Instead, they aim to give deep feedback and raise questions, ideas and thoughts to the user, who can then use his judgment, experience, and understanding of the code base.
  • Recommended to use the 'extra_instructions' field to guide the model to suggestions that are more relevant to the specific needs of the project, or use the custom suggestions 💎 tool
  • With large PRs, best quality will be obtained by using 'improve --extended' mode.
More PR-Agent commands

To invoke the PR-Agent, add a comment using one of the following commands:

  • /review: Request a review of your Pull Request.
  • /describe: Update the PR title and description based on the contents of the PR.
  • /improve [--extended]: Suggest code improvements. Extended mode provides a higher quality feedback.
  • /ask <QUESTION>: Ask a question about the PR.
  • /update_changelog: Update the changelog based on the PR's contents.
  • /add_docs 💎: Generate docstring for new components introduced in the PR.
  • /generate_labels 💎: Generate labels for the PR based on the PR's contents.
  • /analyze 💎: Automatically analyzes the PR, and presents changes walkthrough for each component.

See the tools guide for more details.
To list the possible configuration parameters, add a /config comment.

See the improve usage page for a more comprehensive guide on using this tool.

@softagram
Copy link

softagram bot commented Feb 21, 2024

Looking good 🎉

See the full Softagram report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant