forked from twigjs/twig.js
-
Notifications
You must be signed in to change notification settings - Fork 1
Bump the npm_and_yarn group across 1 directories with 20 updates #1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
dependabot
wants to merge
1
commit into
master
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-97b1e5d5b4
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Bump the npm_and_yarn group across 1 directories with 20 updates #1
dependabot
wants to merge
1
commit into
master
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-97b1e5d5b4
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 18 updates in the /. directory: | Package | From | To | | --- | --- | --- | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.5` | | [locutus](https://github.com/locutusjs/locutus) | `2.0.9` | `2.0.15` | | [ajv](https://github.com/ajv-validator/ajv) | `6.5.1` | `6.12.6` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `3.0.1` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.2` | | [chownr](https://github.com/isaacs/chownr) | `1.0.1` | `1.1.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.0` | `6.5.4` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.4` | `1.2.13` | | [minimist](https://github.com/minimistjs/minimist) | `0.0.8` | `1.2.8` | | [mocha](https://github.com/mochajs/mocha) | `4.1.0` | `10.3.0` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [global-modules-path](https://github.com/rosen-vladimirov/global-modules-path) | `2.1.0` | `` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `3.0.3` | `3.3.12` | | [json5](https://github.com/json5/json5) | `0.5.1` | `1.0.2` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [set-value](https://github.com/jonschlinkert/set-value) | `2.0.0` | `2.0.1` | | [union-value](https://github.com/jonschlinkert/union-value) | `1.0.0` | `1.0.1` | Updates `minimatch` from 3.0.4 to 3.0.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.5) Updates `locutus` from 2.0.9 to 2.0.15 - [Release notes](https://github.com/locutusjs/locutus/releases) - [Changelog](https://github.com/locutusjs/locutus/blob/master/CHANGELOG.md) - [Commits](locutusjs/locutus@v2.0.9...v2.0.15) Updates `ajv` from 6.5.1 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.5.1...v6.12.6) Updates `ansi-regex` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v3.0.0...v3.0.1) Updates `browserify-sign` from 4.0.4 to 4.2.2 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.2) Updates `chownr` from 1.0.1 to 1.1.4 - [Commits](isaacs/chownr@v1.0.1...v1.1.4) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `elliptic` from 6.4.0 to 6.5.4 - [Commits](indutny/elliptic@v6.4.0...v6.5.4) Updates `fsevents` from 1.2.4 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.4...v1.2.13) Updates `minimist` from 0.0.8 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v1.2.8) Updates `mocha` from 4.1.0 to 10.3.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v4.1.0...v10.3.0) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Removes `global-modules-path` Updates `webpack-cli` from 3.0.3 to 3.3.12 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/@webpack-cli/generators@3.0.3...v3.3.12) Updates `json5` from 0.5.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v0.5.1...v1.0.2) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `set-value` from 2.0.0 to 2.0.1 - [Commits](jonschlinkert/set-value@2.0.0...2.0.1) Updates `union-value` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/jonschlinkert/union-value/releases) - [Commits](jonschlinkert/union-value@1.0.0...1.0.1) Updates `y18n` from 3.2.1 to 4.0.0 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...v4.0.0) Updates `yargs-parser` from 9.0.2 to 13.1.2 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs-parser/commits) --- updated-dependencies: - dependency-name: minimatch dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: locutus dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: mkdirp dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: global-modules-path dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: webpack-cli dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: set-value dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: union-value dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 18 updates in the /. directory:
3.0.43.0.52.0.92.0.156.5.16.12.63.0.03.0.14.0.44.2.21.0.11.1.40.2.00.2.26.4.06.5.41.2.41.2.130.0.81.2.84.1.010.3.00.5.10.5.62.1.03.0.33.3.120.5.11.0.21.1.01.4.22.0.02.0.11.0.01.0.1Updates
minimatchfrom 3.0.4 to 3.0.5Commits
707e1b23.0.5a8763f4Improve redos protection, add many testsbafa295Use master branch for travis badge013d64dupdate travisUpdates
locutusfrom 2.0.9 to 2.0.15Changelog
Sourced from locutus's changelog.
... (truncated)
Commits
58b29f9Release 2.0.15d71036dUpdate locutus.code-workspaceeb86332Prevent ReDos issue with regex inside gopher_parsedir (#446)243b723Remove unused strip-indent dependency6134b2fUpgrade eslint9608c54Upgrade budo352a6d7Upgrade mkdirp88b2c0eUpgrade rimraf7a5c8f2Upgrade npm-run-all2d5d0ecUpgrade cross-envUpdates
ajvfrom 6.5.1 to 6.12.6Release notes
Sourced from ajv's releases.
... (truncated)
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...Updates
ansi-regexfrom 3.0.0 to 3.0.1Commits
f545bdb3.0.1c57d4c2fix a few old XO issues for backport419250fFix potential ReDoS (#37)Updates
browserify-signfrom 4.0.4 to 4.2.2Changelog
Sourced from browserify-sign's changelog.
Commits
4af5a90v4.2.23aec038[Dev Deps] updatetape85994cd[Fix] properly check the upper bound for DSA signatures9ac5a5e[meta] fix package.json indentationdcf49ce[meta] addsafe-publish-latest4418183[meta] addnpmignoreandauto-changelog8767739[Fix]sign: throw on unsupported padding scheme5f6fb17[Tests] log when openssl doesn't support cipherf5f17c2[Tests] handle openSSL not supporting a schemed845d85[Tests] migrate from travis to github actionsMaintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates
chownrfrom 1.0.1 to 1.1.4Commits
814f6421.1.4a0d7ae0push to github before npm1a3667aignore stuff147eac4Full tests, handle errors properly in many cases578fb9fupdate tap, fix rimraf version5bbda8cfeat: ignore ENOENT errors during chowndeaa0581.1.3190e311Don't early-capture the fs.lchownSync methoddf2826apush to git with 1 command, not 2cf3b27b1.1.2Updates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
ellipticfrom 6.4.0 to 6.5.4Commits
43ac7f26.5.4f4bc72bpackage: bump deps441b742ec: validate that a point before deriving keyse71b2d9lib: relint using eslint8421a01build(deps): bump elliptic from 6.4.1 to 6.5.3 (#231)86478036.5.3856fe4dsignature: prevent malleability and overflows60489416.5.29984964package: bump dependenciesec735edutils: leak less information ingetNAF()Updates
fseventsfrom 1.2.4 to 1.2.13Release notes
Sourced from fsevents's releases.
Commits
844a05dVersion Bumpf393f2aOnly build fsevents on macOS (#322)6a281a7[publish binary]acc2bce[publish binary]f532b6e[publish binary]4c6a1c0Add node 13 to travis matrix.92e40aaRelease 1.2.12.909af26Release v1.2.117074adbRelease v1.2.100a052f6Node.js v12 support for v1.x (#274)Updates
minimistfrom 0.0.8 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
mochafrom 4.1.0 to 10.3.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
a886829chore: fix link in pull request template (#5091)53a4bafchore: remove unnecessary canvas dependency (#5069)1ebff45chore: inline nyan reporter's write function (#5056)8812413fix: add alt text to Built with Netlify badge (#5068)645469edocs: touchups to labels and a template title post-revamp (#5050)9f99178docs: overhaul contributing and maintenance docs for end-of-year 2023 (#5038)eca4fecdocs: fix return jsdoc type oftitlePath(#4886)060f77ddocs: use mocha.js instead of mocha in the example run (#4927)4b60c1adocs: fix fragment ID for yargs.jsextendsdocs (#4918)b41e985chore: remove stale workflow (#5029)Maintainer changes
This version was pushed to npm by joshuakgoldberg, a new releaser for mocha since your current version.
Updates
mkdirpfrom 0.5.1 to 0.5.6Commits
92f086d0.5.62a28125clean up testsc905d65update minimist049cf180.5.5bea6382Remove unnecessary umask calls42a012c0.5.42867920fix infinite loop on windows machinesd784e700.5.3d612c5dadd files list so this package isn't a monsterb2e7ba00.5.2Maintainer changes
This version was pushed to npm by isaacs, a new releaser for mkdirp since your current version.
Removes
global-modules-pathUpdates
webpack-clifrom 3.0.3 to 3.3.12Changelog
Sourced from webpack-cli's changelog.
... (truncated)
Commits
33574ecchore(release): 3.3.124f1a2f3chore: bump dependencies for v3 (#1595)ab910dfdocs(templates): Branding guide violation fix (#1226)c9927e3fix: release stablea037dc8fix: ci (#1193)f9f0860chore: v3.3.1008a7650chore: remove un-synced tests1208aa6feat: add new flag and patch sec dep (#1102)6ad6099chore: sec patch48c03abchore: v3.3.9Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack-cli since your current version.
Updates
json5from 0.5.1 to 1.0.2Release notes
Sourced from json5's releases.