Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 27, 2025

Bumps tough-cookie to 4.1.4 and updates ancestor dependency @wordpress/scripts. These dependencies need to be updated together.

Updates tough-cookie from 2.5.0 to 4.1.4

Release notes

Sourced from tough-cookie's releases.

v4.1.4

https://www.npmjs.com/package/tough-cookie/v/4.1.4

What's Changed

New Contributors

Full Changelog: salesforce/tough-cookie@v4.1.3...v4.1.4

4.1.3

Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the inspect utility is affected by this change, we felt this change was important enough to be pushed into the next patch.

4.1.2 -- Patch and Bugfix Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.1...v4.1.2

4.1.1

Patch Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.0...v4.1.1

4.1.0

v4.1.0

Minor release, focused mainly on resolving reported issues and some minor feature work.

What's Changed

... (truncated)

Commits
  • cacbc37 Bump version to 4.1.4
  • a48fb3a Add tests for url validation
  • 50e69bf Merge pull request #261 from postmanlabs/fix/url-string-validation
  • 1253d58 Merge pull request #409 from corvidism/validators-to-string
  • 238367e Add local alias for toString
  • 4ff4d29 4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)
  • 12d4747 Prevent prototype pollution in cookie memstore (#283)
  • f06b72d Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...
  • cf6debd Fix incorrect string validation for URL
  • b1a8898 fix: allow set cookies with localhost (#253)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ccasey, a new releaser for tough-cookie since your current version.


Updates @wordpress/scripts from 12.6.1 to 30.17.0

Release notes

Sourced from @​wordpress/scripts's releases.

20.9.0 RC1

Changelog

Enhancements

  • Base Styles: Update to modern Sass module system. (70135)
  • Post Publish Panel: Open view post links in a new tab. (70127)
  • Revert Admin bar: Update the Edit Site link. (69974)

Block Library

  • Custom HTML: Add role attribute to content in block.json. (70154)
  • HTML Block: Remove space below textarea. (70055)
  • Post Navigation Link: Reverse order of variations. (70149)
  • RSS: Add role attribute to content in block.json. (70166)
  • Search Block: Move search setting to inspector. (70144)

Write mode

  • Details block: Add role attribute to summary. (70124)
  • Enable Code block content editing in contentOnly. (70111)
  • Enable More block's "Read more" text editing in contentOnly mode. (70100)
  • Post blocks: Enhance contentOnly editing experience. (70148)
  • Table Block: Enhance contentOnly Editing Experience. (70114)

Components

  • ColorPicker: Add a visual cue when the value is copied. (70083)
  • Snackbar: Add support to open links in new tab. (69905)

Block Transforms

  • Block Library: Add missing transforms between Verse and Preformatted blocks. (70101)

Global Styles

  • Remove "global" from styles variation in schema descriptions. (70089)

Site Editor

  • Move Styles to top of sidebar navigation. (68582)

Bug Fixes

  • DOM: Add summary element to focusable elements. (70051)
  • Site Editor: Fix PHP warnings in gutenberg_get_site_editor_redirection. (70062)
  • URL: Handle HTML entities and ampersand in 'cleanForSlug'. (70078)
  • Workflows: Persist git credentials when publishing packages via Lerna. (70058)

Block Library

  • Button: Limit scope of width style for link. (70054)
  • Image: Provide 'defaultValue' for 'ResolutionTool' component. (70122)
  • Post Template: Don't rely on the default 'ignore_sticky' REST API value. (70020)

... (truncated)

Changelog

Sourced from @​wordpress/scripts's changelog.

30.17.0 (2025-05-22)

30.16.0 (2025-05-07)

30.15.0 (2025-04-11)

30.14.1 (2025-04-01)

Bug Fixes

  • Fix: --blocks-manifest CLI flag doesn't work when the directory name has space (#69766).

30.14.0 (2025-03-27)

New Features

  • Add --blocks-manifest CLI flag to generate a PHP file containing block metadata from all block.json files in the project (#69578).

30.13.0 (2025-03-13)

30.12.0 (2025-02-28)

30.11.0 (2025-02-12)

30.10.0 (2025-01-29)

30.9.0 (2025-01-15)

30.8.0 (2025-01-02)

Enhancements

  • Recommend listing JavaScript entry points as paths passed to the start and build commands (#68251).
  • Introduce a new option --source-path to customize the source directory used with the start and build commands (#68251).

Internal

  • The bundled rtlcss-webpack-plugin dependency has been replaced with a modified fork of the plugin to fix issues with the original package (#68201).
  • The bundled sass dependency has been updated from ^1.50.0 to ^1.54.0 (#68380).

30.7.0 (2024-12-11)

Internal

  • The bundled sass dependency has been updated from ^1.35.2 to ^1.50.1 (#67572).
  • The bundled sass-loader dependency has been updated from ^12.1.0 to ^16.0.3 (#67572).
  • The bundled mini-css-extract-plugin dependency has been updated from ^2.5.1 to ^2.9.2 (#67572).
  • The bundled webpack dependency has been updated from ^5.95.0 to ^5.97.0 (#67572).
  • The bundled cross-spawn dependency has been updated from ^5.1.0 to ^7.0.6 (#67708).

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by gutenbergplugin, a new releaser for @​wordpress/scripts since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) to 4.1.4 and updates ancestor dependency [@wordpress/scripts](https://github.com/WordPress/gutenberg/tree/HEAD/packages/scripts). These dependencies need to be updated together.


Updates `tough-cookie` from 2.5.0 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v2.5.0...v4.1.4)

Updates `@wordpress/scripts` from 12.6.1 to 30.17.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/scripts/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/scripts@30.17.0/packages/scripts)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-version: 4.1.4
  dependency-type: indirect
- dependency-name: "@wordpress/scripts"
  dependency-version: 30.17.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant