Bump the npm_and_yarn group across 2 directories with 14 updates - #7
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.4.0` | `7.29.7` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.6` | | [cached-path-relative](https://github.com/ashaffer/cached-path-relative) | `1.0.2` | `1.1.0` | | [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` | | [uuid](https://github.com/uuidjs/uuid) | `3.3.2` | `removed` | | [pathval](https://github.com/chaijs/pathval) | `1.1.0` | `1.1.1` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.6.1` | `1.9.0` | | [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `removed` | Bumps the npm_and_yarn group with 1 update in the /js/static_dependencies/elliptic directory: [grunt](https://github.com/gruntjs/grunt). Updates `@babel/traverse` from 7.4.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-traverse) Updates `browserify-sign` from 4.0.4 to 4.2.6 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.6) Updates `cached-path-relative` from 1.0.2 to 1.1.0 - [Commits](https://github.com/ashaffer/cached-path-relative/commits) Updates `cipher-base` from 1.0.4 to 1.0.7 - [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md) - [Commits](browserify/cipher-base@v1.0.4...v1.0.7) Updates `elliptic` from 6.4.0 to 6.6.1 - [Commits](indutny/elliptic@v6.4.0...v6.6.1) Removes `uuid` Updates `y18n` from 4.0.0 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3) Updates `yargs-parser` from 11.1.1 to 18.1.3 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v11.1.1...v18.1.3) Updates `pathval` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/chaijs/pathval/releases) - [Changelog](https://github.com/chaijs/pathval/blob/master/CHANGELOG.md) - [Commits](chaijs/pathval@v1.1.0...v1.1.1) Updates `pbkdf2` from 3.0.14 to 3.1.6 - [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md) - [Commits](browserify/pbkdf2@v3.0.14...v3.1.6) Updates `sha.js` from 2.4.9 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.9...v2.4.12) Updates `shell-quote` from 1.6.1 to 1.9.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.9.0) Removes `tmp` Updates `grunt` from 0.4.5 to 1.6.2 - [Release notes](https://github.com/gruntjs/grunt/releases) - [Changelog](https://github.com/gruntjs/grunt/blob/main/CHANGELOG) - [Commits](gruntjs/grunt@v0.4.5...v1.6.2) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-version: 7.29.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-version: 4.2.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cached-path-relative dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cipher-base dependency-version: 1.0.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-version: 6.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-version: 4.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-version: 18.1.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pathval dependency-version: 1.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pbkdf2 dependency-version: 3.1.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.9.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: grunt dependency-version: 1.6.2 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
7.4.07.29.74.0.44.2.61.0.21.1.01.0.41.0.73.3.2removed1.1.01.1.11.6.11.9.00.0.33removedBumps the npm_and_yarn group with 1 update in the /js/static_dependencies/elliptic directory: grunt.
Updates
@babel/traversefrom 7.4.0 to 7.29.7Release notes
Sourced from @babel/traverse's releases.
... (truncated)
Commits
4fba754v7.29.7aa8394ev7.29.084366a8fix(traverse): provide a hub when traversing a File or Program and no parentP...229eb45[7.x backport] fix: Rename switch discriminant references when body creates s...d7f4008v7.28.6905bc22fix: lint errors in main branch (#17612)a03e2b6fix:path.evaluatecorrectly returnsconfident(#17584)aac2c37chore: Use Gulpfile.mts (#17579)65c4a6b[Babel 8] fix: Improvetraversetypes (#17574)99dcba5chore: enable some ts-eslint rules (#17592)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/traversesince your current version.Updates
browserify-signfrom 4.0.4 to 4.2.6Changelog
Sourced from browserify-sign's changelog.
... (truncated)
Commits
3425738v4.2.6fb4be1d[Dev Deps] update@ljharb/eslint-config,auto-changelogd2a3f56[Fix] sign/verify generic SHA algorithms with RSA keys224dffe[meta] set audit-level to make posttest happyda15004[Deps] updatebn.js5916347[Dev Deps] update@ljharb/eslint-config,eslint,npmignore6f06a33[Tests] increase coveraged3a7458v4.2.537b083c[Tests] clean up tests and convert console info skips to tape skipsfaade86[Fix] restore node 0.10 supportMaintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Install script changes
This version adds
prepublishscript that runs during installation. Review the package contents before updating.Updates
cached-path-relativefrom 1.0.2 to 1.1.0Commits
Updates
cipher-basefrom 1.0.4 to 1.0.7Changelog
Sourced from cipher-base's changelog.
Commits
0056718v1.0.7fd1e5ee[Refactor] useto-buffer08ba803[Dev Deps] update@ljharb/eslint-configf5249f9v1.0.6b7ddd2a[Fix] io.js 3.0 - Node.js 5.3 typed array supportf03cebfv1.0.588dc806[meta] addauto-changelog7a137d7[meta] addnpmignoreandsafe-publish-latest5c02918[meta] fix package.json indentation8fd1364[Fix] return valid values on multi-byte-wide TypedArray inputMaintainer changes
This version was pushed to npm by ljharb, a new releaser for cipher-base since your current version.
Install script changes
This version adds
prepublishscript that runs during installation. Review the package contents before updating.Updates
ellipticfrom 6.4.0 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.034c8534fix: signature verification due to leading zeros3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from fork75700786.5.5206da2elib: lintRemoves
uuidUpdates
y18nfrom 4.0.0 to 4.0.3Changelog
Sourced from y18n's changelog.
Commits
0aa97c5chore: release 4.x.x (#128)a8e7f04build(release-please): configure branch properly (#127)1e21a53fix(release): 4.x.x should not enforce Node 10 (#126)8dc7580docs: update CHANGELOG7de58cafix: address prototype pollution issueMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.
Updates
yargs-parserfrom 11.1.1 to 18.1.3Release notes
Sourced from yargs-parser's releases.
Changelog
Sourced from yargs-parser's changelog.
... (truncated)
Commits
d301a56chore: release 18.1.3 (#269)f7e15b9fix(setArg): options using camel-case and dot-notation populated twice (#268)78014fcchore: release 18.1.2 (#263)41d3f81fix(array, nargs): support -o=--value and --option=--value format (#262)b96b989chore: release 18.1.1 (#259)63810cafix: proto will now be replaced with proto in parse (#258)48b6d9cchore: release 18.1.0 (#257)9c60265feat: introduce single-digit boolean aliases (#255)87e0a21test: use bin to enforce coverage thresholds (#256)88f36c3force releaseMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.
Updates
pathvalfrom 1.1.0 to 1.1.1Release notes
Sourced from pathval's releases.
Commits
db6c3e3chore: v1.1.17859e0eMerge pull request #60 from deleonio/fix/vulnerability-prototype-pollution49ce1f4style: correct rule in package.jsonc77b9d2fix: prototype pollution vulnerability + working tests49031e4chore: remove very old nodejs57730a9chore: update deps and tool configurationa123018Merge pull request #55 from chaijs/remove-lgtm07eb4a8Delete MAINTAINERSa0147cdMerge pull request #54 from astorije/patch-1aebb278Center repo name on READMEMaintainer changes
This version was pushed to npm by chai, a new releaser for pathval since your current version.
Updates
pbkdf2from 3.0.14 to 3.1.6Changelog
Sourced from pbkdf2's changelog.
... (truncated)
Commits
ea4768bv3.1.6b729629[Tests] fixnpm run postlint7c4a495[Fix] coerce-0keylen to+05e0cf51[Dev Deps] update@ljharb/eslint-config,@types/node,auto-changelog1c3b1f5[Deps] updateto-buffere3cce16[Dev Deps] update@ljharb/eslint-config,@types/node,eslint,npmignoref6b0e42[eslint] fix an errorfb1f747[New] add TypeScript type declarations528bd38[readme] replace runkit CI badge with shields.io check-runs badge3687905v3.1.5Maintainer changes
This version was pushed to npm by ljharb, a new releaser for pbkdf2 since your current version.
Updates
sha.jsfrom 2.4.9 to 2.4.12Changelog
Sourced from sha.js's changelog.
Commits
eb4ea2fv2.4.12d8d77c0[meta] reorder package.jsondf9d521[eslint] fix package.json indentation35aec35[meta] addnpmignored528896[Dev Deps] add missing peer depb46e711[meta] addauto-changelog94ca724[Dev Deps] remove unusedbufferdep2dbe0aa[Dev Deps] update@ljharb/eslint-config73e33ae[Tests] avoid console logsf2a258e[Fix] support multi-byte wide typed arraysMaintainer changes
This version was pushed to npm by ljharb, a new releaser for sha.js since your current version.
Updates
shell-quotefrom 1.6.1 to 1.9.0Changelog
Sourced from shell-quote's changelog.
... (truncated)
Commits
db09fc7v1.9.07ff5488[Fix]parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv)b4bafa2[actions] Windows + node 5/7: install deps with a modern node3fb739d[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3...abe0163[actions] retrynpm installon Windows to survive npm 2/3 staging-rename flake7a76c1a[Fix]quote: escape leading~to prevent shell tilde-expansion75e8497[actions] update workflowsdca6e21[New] add types9aa9e8f[Dev Deps] updateeslint9ba368a[Dev Deps] apparentlyjackspeakis no longer in the graphMaintainer changes
This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.
Install script changes
This version adds
prepublishscript that runs during installation. Review the package contents before updating.Removes
tmpUpdates
gruntfrom 0.4.5 to 1.6.2Release notes
Sourced from grunt's releases.
... (truncated)
Changelog
Sourced from grunt's changelog.
... (truncated)
Commits
f49016e1.6.2662e097Update minimatch to 3.1.5 to fix CVEsa29fd18CI: add Node.js 24 to version matrixf757c4fUpdate linksb5aa834Merge pull request #1792 from UlisesGascon/security-md8d2dea2docs: refresh security policyaa15bdcMerge pull request #1786 from stscoundrel/ci-node-22ee5b2a3Merge pull request #1787 from gruntjs/add-commercial-supportc0e2b42Readme updates re: supportc4f037dCI: update GH actions V3 -> V4Maintainer ch...
Description has been truncated