Bump the npm_and_yarn group across 1 directory with 21 updates #2
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `0.9.2` | `1.0.0` | | [bower](https://github.com/bower/bower) | `1.8.4` | `1.8.9` | | [highlight.js](https://github.com/highlightjs/highlight.js) | `8.9.1` | `10.4.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.12.0` | `3.14.1` | | [lodash](https://github.com/lodash/lodash) | `2.4.2` | `4.17.21` | | [marked](https://github.com/markedjs/marked) | `0.3.19` | `4.0.10` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.6` | | [request](https://github.com/request/request) | `2.88.0` | `2.88.2` | | [serve-static](https://github.com/expressjs/serve-static) | `1.13.2` | `1.16.0` | | [uglify-js](https://github.com/mishoo/UglifyJS) | `2.8.29` | `3.0.0` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.12` | `4.7.8` | | [merge](https://github.com/yeikos/js.merge) | `1.0.0` | `removed` | | [testling](https://github.com/tape-testing/testling) | `1.7.1` | `1.7.7` | | [qs](https://github.com/ljharb/qs) | `2.3.3` | `6.13.0` | | [http-server](https://github.com/http-party/http-server) | `0.7.5` | `14.1.1` | | [underscore](https://github.com/jashkenas/underscore) | `1.9.1` | `1.13.7` | Updates `async` from 0.9.2 to 1.0.0 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@0.9.2...1.0.0) Updates `bower` from 1.8.4 to 1.8.9 - [Release notes](https://github.com/bower/bower/releases) - [Changelog](https://github.com/bower/bower/blob/master/CHANGELOG.md) - [Commits](https://github.com/bower/bower/commits) Updates `highlight.js` from 8.9.1 to 10.4.1 - [Release notes](https://github.com/highlightjs/highlight.js/releases) - [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md) - [Commits](highlightjs/highlight.js@8.9.1...10.4.1) Updates `js-yaml` from 3.12.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.12.0...3.14.1) Updates `lodash` from 2.4.2 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@2.4.2...4.17.21) Updates `marked` from 0.3.19 to 4.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json) - [Commits](markedjs/marked@v0.3.19...v4.0.10) Updates `minimist` from 1.2.0 to 1.2.6 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.6) Updates `request` from 2.88.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `serve-static` from 1.13.2 to 1.16.0 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.2...1.16.0) Updates `uglify-js` from 2.8.29 to 3.0.0 - [Release notes](https://github.com/mishoo/UglifyJS/releases) - [Commits](mishoo/UglifyJS@v2.8.29...v3.0.0) Updates `ajv` from 6.5.5 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.5.5...v6.12.6) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `handlebars` from 4.0.12 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.12...v4.7.8) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Removes `merge` Updates `testling` from 1.7.1 to 1.7.7 - [Changelog](https://github.com/tape-testing/testling/blob/master/CHANGELOG.md) - [Commits](tape-testing/testling@v1.7.1...v1.7.7) Updates `qs` from 2.3.3 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v2.3.3...v6.13.0) Updates `http-server` from 0.7.5 to 14.1.1 - [Release notes](https://github.com/http-party/http-server/releases) - [Commits](http-party/http-server@v0.7.5...v14.1.1) Updates `send` from 0.16.2 to 0.18.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.16.2...0.18.0) Updates `tough-cookie` from 2.4.3 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v2.5.0) Updates `underscore` from 1.9.1 to 1.13.7 - [Commits](jashkenas/underscore@1.9.1...1.13.7) --- updated-dependencies: - dependency-name: async dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: bower dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: highlight.js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: marked dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: request dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: uglify-js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: merge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: testling dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-server dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 17 updates in the / directory:
0.9.21.0.01.8.41.8.98.9.110.4.13.12.03.14.12.4.24.17.210.3.194.0.101.2.01.2.62.88.02.88.21.13.21.16.02.8.293.0.04.0.44.2.34.0.124.7.81.0.0removed1.7.11.7.72.3.36.13.00.7.514.1.11.9.11.13.7Updates
asyncfrom 0.9.2 to 1.0.0Changelog
Sourced from async's changelog.
Commits
cfa8164v1.0.0bb33062update changelog for 1.0.0e417af6guard against setImmediate mocking. Fixes #609 #61129e7141change pronoun. Fixes #72991f6fb3fix unneeded iteration in queue.resume. Fixes #75839715f4update ignore files, update changelog3ffbf2boptmize internal _each, _map, _keys, _forEachOf functionsfacb5cfMerge pull request #762 from VitoNordloh/masterf5c6331improved benchmark code, added more benchmarks562f879intercept queue concurrency of 0Maintainer changes
This version was pushed to npm by aearly, a new releaser for async since your current version.
Updates
bowerfrom 1.8.4 to 1.8.9Release notes
Sourced from bower's releases.
Commits
Maintainer changes
This version was pushed to npm by sheerun, a new releaser for bower since your current version.
Updates
highlight.jsfrom 8.9.1 to 10.4.1Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.
... (truncated)
Commits
e96b915bump 10.4.1065f65fchore(release) allow release script to handle production releases68509fcchore(docs) bump SECURITY mention to 9.18.5aa0fb85chore(docs) Version 9 has reached EOL.fb0a626enh(ci): Add tests for polynomial regex issuesfa46dd1fix(reasonml) fix poly backtracking issued496052fix(latex) fix poly backtracking issued9f1cdbfix(javascript/typescript) fix poly backtracking issuefdec037fix(asciidoc) fix poly backtracking issue02ca487fix(kotlin) fix poly backtracking issueMaintainer changes
This version was pushed to npm by joshgoebel, a new releaser for highlight.js since your current version.
Updates
js-yamlfrom 3.12.0 to 3.14.1Changelog
Sourced from js-yaml's changelog.
Commits
37caaad3.14.1 released094c0f7dist rebuild9586ebeAvoid calling hasOwnProperty of user-controlled objects34e50723.14.0 released7b25c83Browser files rebuild6f73473Dev deps bump0c29349Travis-CI: drop old nodejs versions10be97efix(loader): Add support forsafe/loadAll(input, options)d6983ddFix issue #526: wrong quote position writing condensed flow (#527)93fbf7dfix issue 526 (wrong quote position writing condensed flow)Updates
lodashfrom 2.4.2 to 4.17.21Release notes
Sourced from lodash's releases.
... (truncated)
Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
markedfrom 0.3.19 to 4.0.10Release notes
Sourced from marked's releases.
... (truncated)
Commits
ae01170chore(release): 4.0.10 [skip ci]fceda57🗜️ build [skip ci]8f80657fix(security): fix redos vulnerabilitiesc4a3ccdMerge pull request from GHSA-rrrm-qjm4-v8hfd7212a6chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)5a84db5chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)2bc67a5chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)98996b8chore(deps-dev): Bump@babel/preset-envfrom 7.16.5 to 7.16.7 (#2353)ebc2c95chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)e5171a9chore(release): 4.0.9 [skip ci]Maintainer changes
This version was pushed to npm by tonybrix, a new releaser for marked since your current version.
Updates
minimistfrom 1.2.0 to 1.2.6Changelog
Sourced from minimist's changelog.
Commits
7efb22a1.2.6ef88b93security notice for additional prototype pollution issuec2b9819isConstructorOrProto adapted from PRbc8eceetest from prototype pollution PRaeb3e271.2.5278677b1.2.44cf1354security notice1043d21additional test for constructor prototype pollution6457d741.2.338a4d1ceven more aggressive checks for protocol pollutionUpdates
requestfrom 2.88.0 to 2.88.2Changelog
Sourced from request's changelog.
Commits
Updates
serve-staticfrom 1.13.2 to 1.16.0Release notes
Sourced from serve-static's releases.
Changelog
Sourced from serve-static's changelog.
Commits
48c73971.16.00c11fadMerge commit from fork9b5a12a1.15.0a39a0dfdocs: update CI linkd702ea2build: [email protected]ff1510adeps: [email protected]813c7e4build: [email protected]2e029f9build: [email protected]3269f31build: [email protected]71cd4f8build: [email protected]Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for serve-static since your current version.
Updates
uglify-jsfrom 2.8.29 to 3.0.0Commits
7313465v3.0.02c7ee95fixunsafeonevaluateofreduce_vars(#1870)ecf3563killopera(#1869)dee5a27enhancecollapse_vars(#1862)5a25d24rename variables for better readability (#1863)bffdc8dupdatetest/benchmark.jsresources (#1864)69b5663restore report of supported options (#1861)ea92897improve literal return optimization (#1860)2cb55b2enforcetoplevelon other compress options (#1855)bbb5f2aUpdate ISSUE_TEMPLATE.md (#1846)Updates
ajvfrom 6.5.5 to 6.12.6Release notes
Sourced from ajv's releases.
... (truncated)
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...Updates
browserify-signfrom 4.0.4 to 4.2.3Changelog
Sourced from browserify-sign's changelog.
... (truncated)
Commits
bf2c3ecv4.2.39247adf[patch] widen support to 0.12f427270[Deps] update `parse-asn187f3a35[Dev Deps] updateaud,npmignore,tapefb261ce[Deps] updateelliptic4d0ee49[patch] drop minimum node support to v19e2bf12[Deps] pinhash-baseto ~3.0, due to a breaking change168e16f[Deps] pinellipticdue to a breaking change37a4758[actions] remove redundant finisher4af5a90v4.2.2Maintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates
handlebarsfrom 4.0.12 to 4.7.8Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
... (truncated)
Commits
8dc3d25v4.7.8668c4fbFix browser tests in CI pipelinec65c6ccTest on Node 183d3796cMake library compatible with workers075b354Fix sync issue with npm lock-file30dbf04Fix compiling of each block params in strict modee3a5448Fix bundler issue with webpack 58e23642Fix integration-tests issue with npm >= 788ac068use https instead of git for mustache submodulec68bc08Fix typoMaintainer changes
This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.
Updates
json-schemafrom 0.2.3 to 0.4.0Commits
f6f6a3bUse a little more robust method of checking instancesef60987Update versionb62f1daProtect against constructor modification, #84fb427cdLink to json-schema-org repository in addition to site, fixes #5422f1461Don't allow proto property to be used for schema default/coerce, fixes #84c52a27cGet basic test to passb3f42b3Add security policy3b0cec3Update versionc28470fUpdate readme to acknowledge the state of the package7dff9cdMerge pull request #81 from hodovani/patch-1Removes
mergeUpdates
testlingfrom 1.7.1 to 1.7.7Changelog
Sourced from testling's changelog.