Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
495: Bump the npm_and_yarn group with 18 updates r=curquiza a=dependabot[bot] Bumps the npm_and_yarn group with 18 updates: | Package | From | To | | --- | --- | --- | | [`@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse)` | `7.20.1` | `7.24.1` | | [async](https://github.com/caolan/async) | `3.2.0` | `3.2.5` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.19.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.1` | `1.15.6` | | [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `1.4.2` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.1` | `2.6.7` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [tar](https://github.com/isaacs/node-tar) | `6.1.0` | `6.2.1` | | [terser](https://github.com/terser/terser) | `4.8.0` | `4.8.1` | | [tmpl](https://github.com/daaku/nodejs-tmpl) | `1.0.4` | `1.0.5` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.28` | `0.7.37` | | [webpack](https://github.com/webpack/webpack) | `4.46.0` | `4.47.0` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Updates ``@babel/traverse`` from 7.20.1 to 7.24.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/releases"><code>`@babel/traverse</code>'s` releases</a>.</em></p> <blockquote> <h2>v7.24.1 (2024-03-19)</h2> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16350">#16350</a> Fix decorated class computed keys ordering (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` <li><a href="https://redirect.github.com/babel/babel/pull/16344">#16344</a> Fix decorated class static field private access (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-json-modules</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16329">#16329</a> Respect <code>moduleName</code> for <code>`@babel/runtime/regenerator</code>` imports (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-transform-class-properties</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16331">#16331</a> Fix decorator memoiser binding kind (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-helper-replace-supers</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-class-properties</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16325">#16325</a> Fix decorator evaluation private environment (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> </ul> <h4>:memo: Documentation</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16319">#16319</a> Update SECURITY.md (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> <h4>:house: Internal</h4> <ul> <li><code>babel-code-frame</code>, <code>babel-highlight</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16359">#16359</a> Replace <code>chalk</code> with <code>picocolors</code> (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-fixtures</code>, <code>babel-helpers</code>, <code>babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-transform-unicode-sets-regex</code>, <code>babel-preset-env</code>, <code>babel-preset-flow</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16352">#16352</a> Run Babel transform tests on old node if possible (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-helper-module-imports</code>, <code>babel-plugin-proposal-import-wasm-source</code>, <code>babel-plugin-proposal-json-modules</code>, <code>babel-plugin-proposal-record-and-tuple</code>, <code>babel-plugin-transform-react-jsx-development</code>, <code>babel-plugin-transform-react-jsx</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16349">#16349</a> Support merging imports in import injector (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li>Other <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16332">#16332</a> Test Babel 7 plugins compatibility with Babel 8 core (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> </ul> <h4>:microscope: Output optimization</h4> <ul> <li><code>babel-helper-replace-supers</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-parameters</code>, <code>babel-plugin-transform-runtime</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16345">#16345</a> Optimize the use of <code>assertThisInitialized</code> after <code>super()</code> (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> <li><code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16343">#16343</a> Use simpler <code>assertThisInitialized</code> more often (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> <li><code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-traverse</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16342">#16342</a> Consider well-known and registered symbols as literals (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-core</code>, <code>babel-plugin-external-helpers</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-function-bind</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-flow-comments</code>, <code>babel-plugin-transform-flow-strip-types</code>, <code>babel-plugin-transform-function-name</code>, <code>babel-plugin-transform-modules-systemjs</code>, <code>babel-plugin-transform-parameters</code>, <code>babel-plugin-transform-private-property-in-object</code>, <code>babel-plugin-transform-react-jsx</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-plugin-transform-spread</code>, <code>babel-plugin-transform-typescript</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16326">#16326</a> Reduce the use of class names (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> </ul> <h4>Committers: 4</h4> <ul> <li>Babel Bot (<a href="https://github.com/babel-bot"><code>`@babel-bot</code></a>)</li>` <li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` <li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` <li><a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a></li>` </ul> <h2>v7.24.0 (2024-02-28)</h2> <p>Thanks <a href="https://github.com/ajihyf"><code>`@ajihyf</code></a>` for your first PR!</p> <p>Release post with summary and highlights: <a href="https://babeljs.io/7.24.0">https://babeljs.io/7.24.0</a></p> <h4>:rocket: New Feature</h4> <ul> <li><code>babel-standalone</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>`@babel/traverse</code>'s` changelog</a>.</em></p> <blockquote> <h2>v7.24.1 (2024-03-19)</h2> <h4>:bug: Bug Fix</h4> <ul> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16350">#16350</a> Fix decorated class computed keys ordering (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` <li><a href="https://redirect.github.com/babel/babel/pull/16344">#16344</a> Fix decorated class static field private access (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-json-modules</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16329">#16329</a> Respect <code>moduleName</code> for <code>`@babel/runtime/regenerator</code>` imports (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-transform-class-properties</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16331">#16331</a> Fix decorator memoiser binding kind (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-helper-replace-supers</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-class-properties</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16325">#16325</a> Fix decorator evaluation private environment (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> </ul> <h4>:memo: Documentation</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16319">#16319</a> Update SECURITY.md (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> <h4>:house: Internal</h4> <ul> <li><code>babel-code-frame</code>, <code>babel-highlight</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16359">#16359</a> Replace <code>chalk</code> with <code>picocolors</code> (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-fixtures</code>, <code>babel-helpers</code>, <code>babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-transform-unicode-sets-regex</code>, <code>babel-preset-env</code>, <code>babel-preset-flow</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16352">#16352</a> Run Babel transform tests on old node if possible (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-class-static-block</code>, <code>babel-plugin-transform-modules-commonjs</code>, <code>babel-plugin-transform-modules-systemjs</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code>, <code>babel-runtime</code>, <code>babel-standalone</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16323">#16323</a> Allow separate helpers to be excluded in Babel 8 (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> <li><code>babel-helper-module-imports</code>, <code>babel-plugin-proposal-import-wasm-source</code>, <code>babel-plugin-proposal-json-modules</code>, <code>babel-plugin-proposal-record-and-tuple</code>, <code>babel-plugin-transform-react-jsx-development</code>, <code>babel-plugin-transform-react-jsx</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16349">#16349</a> Support merging imports in import injector (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression</code>, <code>babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining</code>, <code>babel-plugin-bugfix-v8-static-class-fields-redefine-readonly</code>, <code>babel-plugin-external-helpers</code>, <code>babel-plugin-proposal-async-do-expressions</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-do-expressions</code>, <code>babel-plugin-proposal-duplicate-named-capturing-groups-regex</code>, <code>babel-plugin-proposal-explicit-resource-management</code>, <code>babel-plugin-proposal-export-default-from</code>, <code>babel-plugin-proposal-function-bind</code>, <code>babel-plugin-proposal-function-sent</code>, <code>babel-plugin-proposal-import-attributes-to-assertions</code>, <code>babel-plugin-proposal-import-defer</code>, <code>babel-plugin-proposal-import-wasm-source</code>, <code>babel-plugin-proposal-json-modules</code>, <code>babel-plugin-proposal-optional-chaining-assign</code>, <code>babel-plugin-proposal-partial-application</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-proposal-record-and-tuple</code>, <code>babel-plugin-proposal-regexp-modifiers</code>, <code>babel-plugin-proposal-throw-expressions</code>, <code>babel-plugin-syntax-async-do-expressions</code>, <code>babel-plugin-syntax-decimal</code>, <code>babel-plugin-syntax-decorators</code>, <code>babel-plugin-syntax-destructuring-private</code>, <code>babel-plugin-syntax-do-expressions</code>, <code>babel-plugin-syntax-explicit-resource-management</code>, <code>babel-plugin-syntax-export-default-from</code>, <code>babel-plugin-syntax-flow</code>, <code>babel-plugin-syntax-function-bind</code>, <code>babel-plugin-syntax-function-sent</code>, <code>babel-plugin-syntax-import-assertions</code>, <code>babel-plugin-syntax-import-attributes</code>, <code>babel-plugin-syntax-import-defer</code>, <code>babel-plugin-syntax-import-reflection</code>, <code>babel-plugin-syntax-import-source</code>, <code>babel-plugin-syntax-jsx</code>, <code>babel-plugin-syntax-module-blocks</code>, <code>babel-plugin-syntax-optional-chaining-assign</code>, <code>babel-plugin-syntax-partial-application</code>, <code>babel-plugin-syntax-pipeline-operator</code>, <code>babel-plugin-syntax-record-and-tuple</code>, <code>babel-plugin-syntax-throw-expressions</code>, <code>babel-plugin-syntax-typescript</code>, <code>babel-plugin-transform-arrow-functions</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-async-to-generator</code>, <code>babel-plugin-transform-block-scoped-functions</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-class-static-block</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-computed-properties</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-dotall-regex</code>, <code>babel-plugin-transform-duplicate-keys</code>, <code>babel-plugin-transform-dynamic-import</code>, <code>babel-plugin-transform-exponentiation-operator</code>, <code>babel-plugin-transform-export-namespace-from</code>, <code>babel-plugin-transform-flow-comments</code>, <code>babel-plugin-transform-flow-strip-types</code>, <code>babel-plugin-transform-for-of</code>, <code>babel-plugin-transform-function-name</code>, <code>babel-plugin-transform-instanceof</code>, <code>babel-plugin-transform-jscript</code>, <code>babel-plugin-transform-json-strings</code>, <code>babel-plugin-transform-literals</code>, <code>babel-plugin-transform-logical-assignment-operators</code>, <code>babel-plugin-transform-member-expression-literals</code>, <code>babel-plugin-transform-modules-amd</code>, <code>babel-plugin-transform-modules-commonjs</code>, <code>babel-plugin-transform-modules-systemjs</code>, <code>babel-plugin-transform-modules-umd</code>, <code>babel-plugin-transform-new-target</code>, <code>babel-plugin-transform-nullish-coalescing-operator</code>, <code>babel-plugin-transform-numeric-separator</code>, <code>babel-plugin-transform-object-assign</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-plugin-transform-object-set-prototype-of-to-assign</code>, <code>babel-plugin-transform-object-super</code>, <code>babel-plugin-transform-optional-catch-binding</code>, <code>babel-plugin-transform-optional-chaining</code>, <code>babel-plugin-transform-parameters</code>, <code>babel-plugin-transform-private-methods</code>, <code>babel-plugin-transform-private-property-in-object</code>, <code>babel-plugin-transform-property-literals</code>, <code>babel-plugin-transform-property-mutators</code>, <code>babel-plugin-transform-proto-to-assign</code>, <code>babel-plugin-transform-react-constant-elements</code>, <code>babel-plugin-transform-react-display-name</code>, <code>babel-plugin-transform-react-inline-elements</code>, <code>babel-plugin-transform-react-jsx-compat</code>, <code>babel-plugin-transform-react-jsx-self</code>, <code>babel-plugin-transform-react-jsx-source</code>, <code>babel-plugin-transform-react-pure-annotations</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-reserved-words</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-plugin-transform-shorthand-properties</code>, <code>babel-plugin-transform-spread</code>, <code>babel-plugin-transform-sticky-regex</code>, <code>babel-plugin-transform-strict-mode</code>, <code>babel-plugin-transform-template-literals</code>, <code>babel-plugin-transform-typeof-symbol</code>, <code>babel-plugin-transform-typescript</code>, <code>babel-plugin-transform-unicode-escapes</code>, <code>babel-plugin-transform-unicode-property-regex</code>, <code>babel-plugin-transform-unicode-regex</code>, <code>babel-plugin-transform-unicode-sets-regex</code>, <code>babel-preset-env</code>, <code>babel-preset-flow</code>, <code>babel-preset-react</code>, <code>babel-preset-typescript</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16332">#16332</a> Test Babel 7 plugins compatibility with Babel 8 core (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-compat-data</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16318">#16318</a> [babel 8] Fix <code>`@babel/compat-data</code>` package.json (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> </ul> <h4>:microscope: Output optimization</h4> <ul> <li><code>babel-helper-replace-supers</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-parameters</code>, <code>babel-plugin-transform-runtime</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16345">#16345</a> Optimize the use of <code>assertThisInitialized</code> after <code>super()</code> (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> <li><code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16343">#16343</a> Use simpler <code>assertThisInitialized</code> more often (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> <li><code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-traverse</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16342">#16342</a> Consider well-known and registered symbols as literals (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-core</code>, <code>babel-plugin-external-helpers</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-function-bind</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-flow-comments</code>, <code>babel-plugin-transform-flow-strip-types</code>, <code>babel-plugin-transform-function-name</code>, <code>babel-plugin-transform-modules-systemjs</code>, <code>babel-plugin-transform-parameters</code>, <code>babel-plugin-transform-private-property-in-object</code>, <code>babel-plugin-transform-react-jsx</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-plugin-transform-spread</code>, <code>babel-plugin-transform-typescript</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16326">#16326</a> Reduce the use of class names (<a href="https://github.com/liuxingbaoyu"><code>`@liuxingbaoyu</code></a>)</li>` </ul> </li> </ul> <h2>v7.24.0 (2024-02-28)</h2> <h4>:rocket: New Feature</h4> <ul> <li><code>babel-standalone</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/11696">#11696</a> Export babel tooling packages in <code>`@babel/standalone</code>` (<a href="https://github.com/ajihyf"><code>`@ajihyf</code></a>)</li>` </ul> </li> <li><code>babel-core</code>, <code>babel-helper-create-class-features-plugin</code>, <code>babel-helpers</code>, <code>babel-plugin-transform-class-properties</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16267">#16267</a> Implement <code>noUninitializedPrivateFieldAccess</code> assumption (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-helpers</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-proposal-pipeline-operator</code>, <code>babel-plugin-syntax-decorators</code>, <code>babel-plugin-transform-class-properties</code>, <code>babel-runtime-corejs2</code>, <code>babel-runtime-corejs3</code>, <code>babel-runtime</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16242">#16242</a> Support decorator 2023-11 normative updates (<a href="https://github.com/JLHwung"><code>`@JLHwung</code></a>)</li>` </ul> </li> <li><code>babel-preset-flow</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/16309">#16309</a> [babel 7] Allow setting <code>ignoreExtensions</code> in Flow preset (<a href="https://github.com/nicolo-ribaudo"><code>`@nicolo-ribaudo</code></a>)</li>` </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/babel/babel/commit/822b025fc9d43263e69aed8a9fc80e8c6b8ebf6d"><code>822b025</code></a> v7.24.1</li> <li><a href="https://github.com/babel/babel/commit/fc0d5ad56e948f2b3d1704adb6367bbde0f25e59"><code>fc0d5ad</code></a> Update typescript and lint tools (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16351">#16351</a>)</li> <li><a href="https://github.com/babel/babel/commit/69e792887ea7e5d1cd7375ef7f6f3254ff4f2695"><code>69e7928</code></a> Consider well-known and registered symbols as literals (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16342">#16342</a>)</li> <li><a href="https://github.com/babel/babel/commit/40110e9d707e2b2b81f6e2b99820722a7014132a"><code>40110e9</code></a> Update source map deps (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16327">#16327</a>)</li> <li><a href="https://github.com/babel/babel/commit/ce59160e34e21e8f1ac2fc55ae037f7b043e8d20"><code>ce59160</code></a> v7.24.0</li> <li><a href="https://github.com/babel/babel/commit/bd5abd5ea14a92c49ce736966382eb5c5fdbbe95"><code>bd5abd5</code></a> fix: avoid <code>popContext</code> on unvisited node paths (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16305">#16305</a>)</li> <li><a href="https://github.com/babel/babel/commit/08a057c169f0b92ad3797aea9214a4428ced1a9f"><code>08a057c</code></a> Use <code>Object.hasOwn</code> when available (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16248">#16248</a>)</li> <li><a href="https://github.com/babel/babel/commit/a0dd614d1271dd69db1ce908e5171d4ccfec8691"><code>a0dd614</code></a> v7.23.9</li> <li><a href="https://github.com/babel/babel/commit/1200542a44496a1295df6223f5a110532e76b48f"><code>1200542</code></a> fix: Don't throw in <code>getTypeAnnotation</code> when using TS+inference (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/15383">#15383</a>)</li> <li><a href="https://github.com/babel/babel/commit/e428a6d5f9bdfd909289f17eea7c17f813b6c1ea"><code>e428a6d</code></a> v7.23.7</li> <li>Additional commits viewable in <a href="https://github.com/babel/babel/commits/v7.24.1/packages/babel-traverse">compare view</a></li> </ul> </details> <br /> Updates `async` from 3.2.0 to 3.2.5 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/caolan/async/blob/master/CHANGELOG.md">async's changelog</a>.</em></p> <blockquote> <h1>v3.2.5</h1> <ul> <li>Ensure <code>Error</code> objects such as <code>AggregateError</code> are propagated without modification (<a href="https://redirect.github.com/caolan/async/issues/1920">#1920</a>)</li> </ul> <h1>v3.2.4</h1> <ul> <li>Fix a bug in <code>priorityQueue</code> where it didn't wait for the result. (<a href="https://redirect.github.com/caolan/async/issues/1725">#1725</a>)</li> <li>Fix a bug where <code>unshiftAsync</code> was included in <code>priorityQueue</code>. (<a href="https://redirect.github.com/caolan/async/issues/1790">#1790</a>)</li> </ul> <h1>v3.2.3</h1> <ul> <li>Fix bugs in comment parsing in <code>autoInject</code>. (<a href="https://redirect.github.com/caolan/async/issues/1767">#1767</a>, <a href="https://redirect.github.com/caolan/async/issues/1780">#1780</a>)</li> </ul> <h1>v3.2.2</h1> <ul> <li>Fix potential prototype pollution exploit</li> </ul> <h1>v3.2.1</h1> <ul> <li>Use <code>queueMicrotask</code> if available to the environment (<a href="https://redirect.github.com/caolan/async/issues/1761">#1761</a>)</li> <li>Minor perf improvement in <code>priorityQueue</code> (<a href="https://redirect.github.com/caolan/async/issues/1727">#1727</a>)</li> <li>More examples in documentation (<a href="https://redirect.github.com/caolan/async/issues/1726">#1726</a>)</li> <li>Various doc fixes (<a href="https://redirect.github.com/caolan/async/issues/1708">#1708</a>, <a href="https://redirect.github.com/caolan/async/issues/1712">#1712</a>, <a href="https://redirect.github.com/caolan/async/issues/1717">#1717</a>, <a href="https://redirect.github.com/caolan/async/issues/1740">#1740</a>, <a href="https://redirect.github.com/caolan/async/issues/1739">#1739</a>, <a href="https://redirect.github.com/caolan/async/issues/1749">#1749</a>, <a href="https://redirect.github.com/caolan/async/issues/1756">#1756</a>)</li> <li>Improved test coverage (<a href="https://redirect.github.com/caolan/async/issues/1754">#1754</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/caolan/async/commit/87e94e658f24030f9104626e00456a5a0c1f9566"><code>87e94e6</code></a> Version 3.2.5</li> <li><a href="https://github.com/caolan/async/commit/44ed0fb61be4059f51b95a21024cee47b5109e33"><code>44ed0fb</code></a> Update built files</li> <li><a href="https://github.com/caolan/async/commit/af02a3d9cf30b0d015c0826623e5824b78d9cfc9"><code>af02a3d</code></a> work around compiler quirk</li> <li><a href="https://github.com/caolan/async/commit/3c7a711976941f711852bedfd14ef09fb7bb45bb"><code>3c7a711</code></a> path to config file</li> <li><a href="https://github.com/caolan/async/commit/91fd8947d59e57811863d71630a1930cea44eeda"><code>91fd894</code></a> requireConfigFile: false</li> <li><a href="https://github.com/caolan/async/commit/0412f8d6d677d2dba71e749a9cdbf7234a47e47c"><code>0412f8d</code></a> Ensure error objects are propagated without modification (<a href="https://redirect.github.com/caolan/async/issues/1920">#1920</a>)</li> <li><a href="https://github.com/caolan/async/commit/ab3c56a111663022f1c62f408c450aea8b1b3836"><code>ab3c56a</code></a> Update .eslintrc.json to use es2021</li> <li><a href="https://github.com/caolan/async/commit/8610499cd523032cc8701de4424b99bf410cc339"><code>8610499</code></a> Run lint on node 20</li> <li><a href="https://github.com/caolan/async/commit/ffd4cfb1b77efc18237b2a30da607d030ec8ca47"><code>ffd4cfb</code></a> Run coverage on node 20</li> <li><a href="https://github.com/caolan/async/commit/253f5dc30bcce985ebbf79db38ad2cd6fdb3a93d"><code>253f5dc</code></a> Update Node version matrix in CI</li> <li>Additional commits viewable in <a href="https://github.com/caolan/async/compare/v3.2.0...v3.2.5">compare view</a></li> </ul> </details> <br /> Updates `browserify-sign` from 4.2.1 to 4.2.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md">browserify-sign's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.2...v4.2.3">v4.2.3</a> - 2024-03-05</h2> <h3>Commits</h3> <ul> <li>[patch] widen support to 0.12 <a href="https://github.com/browserify/browserify-sign/commit/9247adfd261ededfec1c036c9d8f36c4e9f87c0e"><code>9247adf</code></a></li> <li>[patch] drop minimum node support to v1 <a href="https://github.com/browserify/browserify-sign/commit/4d0ee49ae2dc238b877dce9aed7e23fb4cb5088d"><code>4d0ee49</code></a></li> <li>[Dev Deps] update <code>aud</code>, <code>npmignore</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/87f3a35a587b377da2c1987af8d41c57b5afe0a5"><code>87f3a35</code></a></li> <li>[actions] remove redundant finisher <a href="https://github.com/browserify/browserify-sign/commit/37a475856843b7d1b2403fdafac0024ba252e579"><code>37a4758</code></a></li> <li>[Deps] pin <code>hash-base</code> to ~3.0, due to a breaking change <a href="https://github.com/browserify/browserify-sign/commit/9e2bf122b70970cb92f69d53e963f18299f14d66"><code>9e2bf12</code></a></li> <li>[Deps] update <code>parse-asn1 [</code>f427270`](<a href="https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c">https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c</a>)</li> <li>[Deps] update <code>elliptic</code> <a href="https://github.com/browserify/browserify-sign/commit/fb261cea57f92b3d98bc4d8bc6228c43a5de2e91"><code>fb261ce</code></a></li> <li>[Deps] pin <code>elliptic</code> due to a breaking change <a href="https://github.com/browserify/browserify-sign/commit/168e16fcb54886a0281b0c983e1482a097042684"><code>168e16f</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.1...v4.2.2">v4.2.2</a> - 2023-10-25</h2> <h3>Fixed</h3> <ul> <li>[Tests] log when openssl doesn't support cipher <a href="https://redirect.github.com/browserify/browserify-sign/issues/37"><code>[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>Only apps should have lockfiles <a href="https://github.com/browserify/browserify-sign/commit/09a89959393b3c89fedd4f7f3bafa4fec44371d7"><code>09a8995</code></a></li> <li>[eslint] switch to eslint <a href="https://github.com/browserify/browserify-sign/commit/83fe46374b819e959d56d2c0b931308f7451a664"><code>83fe463</code></a></li> <li>[meta] add <code>npmignore</code> and <code>auto-changelog</code> <a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a></li> <li>[meta] fix package.json indentation <a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a></li> <li>[Tests] migrate from travis to github actions <a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a></li> <li>[Fix] <code>sign</code>: throw on unsupported padding scheme <a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a></li> <li>[Fix] properly check the upper bound for DSA signatures <a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a></li> <li>[Tests] handle openSSL not supporting a scheme <a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a></li> <li>[Deps] update <code>bn.js</code>, <code>browserify-rsa</code>, <code>elliptic</code>, <code>parse-asn1</code>, <code>readable-stream</code>, <code>safe-buffer</code> <a href="https://github.com/browserify/browserify-sign/commit/a67d0eb4ffceabb366b69da69ce9a223e9d5e96b"><code>a67d0eb</code></a></li> <li>[Dev Deps] update <code>nyc</code>, <code>standard</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/cc5350b96702fcba930e0662cf763844fd2f59bf"><code>cc5350b</code></a></li> <li>[Tests] always run coverage; downgrade <code>nyc</code> <a href="https://github.com/browserify/browserify-sign/commit/75ce1d5c49a6591dd13422016c07f8f9cae13371"><code>75ce1d5</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a></li> <li>[Tests] add <code>npm run posttest</code> <a href="https://github.com/browserify/browserify-sign/commit/75dd8fd6ce56eb37b12e30807e5f913867b21733"><code>75dd8fd</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a></li> <li>[Tests] skip unsupported schemes <a href="https://github.com/browserify/browserify-sign/commit/703c83ea72db2f45714fe749c6f04b05243ca9a8"><code>703c83e</code></a></li> <li>[Tests] node < 6 lacks array <code>includes</code> <a href="https://github.com/browserify/browserify-sign/commit/3aa43cfbc1fdde8481bcdd3bff581574159b869a"><code>3aa43cf</code></a></li> <li>[Dev Deps] fix eslint range <a href="https://github.com/browserify/browserify-sign/commit/98d4e0d7ff18871b0ca07415f758a610ccf8ebbe"><code>98d4e0d</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserify/browserify-sign/commit/bf2c3ec8fa046a52420ccd322186cc477d82165c"><code>bf2c3ec</code></a> v4.2.3</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9247adfd261ededfec1c036c9d8f36c4e9f87c0e"><code>9247adf</code></a> [patch] widen support to 0.12</li> <li><a href="https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c"><code>f427270</code></a> [Deps] update `parse-asn1</li> <li><a href="https://github.com/browserify/browserify-sign/commit/87f3a35a587b377da2c1987af8d41c57b5afe0a5"><code>87f3a35</code></a> [Dev Deps] update <code>aud</code>, <code>npmignore</code>, <code>tape</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/fb261cea57f92b3d98bc4d8bc6228c43a5de2e91"><code>fb261ce</code></a> [Deps] update <code>elliptic</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/4d0ee49ae2dc238b877dce9aed7e23fb4cb5088d"><code>4d0ee49</code></a> [patch] drop minimum node support to v1</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9e2bf122b70970cb92f69d53e963f18299f14d66"><code>9e2bf12</code></a> [Deps] pin <code>hash-base</code> to ~3.0, due to a breaking change</li> <li><a href="https://github.com/browserify/browserify-sign/commit/168e16fcb54886a0281b0c983e1482a097042684"><code>168e16f</code></a> [Deps] pin <code>elliptic</code> due to a breaking change</li> <li><a href="https://github.com/browserify/browserify-sign/commit/37a475856843b7d1b2403fdafac0024ba252e579"><code>37a4758</code></a> [actions] remove redundant finisher</li> <li><a href="https://github.com/browserify/browserify-sign/commit/4af5a90bf8acd9e76e5671dc0497f6ba71968a2c"><code>4af5a90</code></a> v4.2.2</li> <li>Additional commits viewable in <a href="https://github.com/crypto-browserify/browserify-sign/compare/v4.2.1...v4.2.3">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for browserify-sign since your current version.</p> </details> <br /> Updates `decode-uri-component` from 0.2.0 to 0.2.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/SamVerschueren/decode-uri-component/releases">decode-uri-component's releases</a>.</em></p> <blockquote> <h2>v0.2.2</h2> <ul> <li>Prevent overwriting previously decoded tokens 980e0bf</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2</a></p> <h2>v0.2.1</h2> <ul> <li>Switch to GitHub workflows 76abc93</li> <li>Fix issue where decode throws - fixes <a href="https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6">#6</a> 746ca5d</li> <li>Update license (<a href="https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1">#1</a>) 486d7e2</li> <li>Tidelift tasks a650457</li> <li>Meta tweaks 66e1c28</li> </ul> <p><a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1">https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb"><code>a0eea46</code></a> 0.2.2</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152"><code>980e0bf</code></a> Prevent overwriting previously decoded tokens</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33"><code>3c8a373</code></a> 0.2.1</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3"><code>76abc93</code></a> Switch to GitHub workflows</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9"><code>746ca5d</code></a> Fix issue where decode throws - fixes <a href="https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6">#6</a></li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30"><code>486d7e2</code></a> Update license (<a href="https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1">#1</a>)</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134"><code>a650457</code></a> Tidelift tasks</li> <li><a href="https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02"><code>66e1c28</code></a> Meta tweaks</li> <li>See full diff in <a href="https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2">compare view</a></li> </ul> </details> <br /> Updates `express` from 4.17.1 to 4.19.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>4.19.2</h2> <h2>What's Changed</h2> <ul> <li><a href="https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94">Improved fix for open redirect allow list bypass</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.1...4.19.2">https://github.com/expressjs/express/compare/4.19.1...4.19.2</a></p> <h2>4.19.1</h2> <h2>What's Changed</h2> <ul> <li>Fix ci after location patch by <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5552">expressjs/express#5552</a></li> <li>fixed un-edited version in history.md for 4.19.0 by <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5556">expressjs/express#5556</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.0...4.19.1">https://github.com/expressjs/express/compare/4.19.0...4.19.1</a></p> <h2>4.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix typo in release date by <a href="https://github.com/UlisesGascon"><code>`@UlisesGascon</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5527">expressjs/express#5527</a></li> <li>docs: nominating <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` to be project captian by <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5511">expressjs/express#5511</a></li> <li>docs: loosen TC activity rules by <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5510">expressjs/express#5510</a></li> <li>Add note on how to update docs for new release by <a href="https://github.com/crandmck"><code>`@crandmck</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> <li><a href="https://redirect.github.com/expressjs/express/pull/5551/commits/660ccf5fa33dd0baab069e5c8ddd9ffe7d8bbff1">Prevent open redirect allow list bypass due to encodeurl</a></li> <li>Release 4.19.0 by <a href="https://github.com/wesleytodd"><code>`@wesleytodd</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5551">expressjs/express#5551</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/crandmck"><code>`@crandmck</code></a>` made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.18.3...4.19.0">https://github.com/expressjs/express/compare/4.18.3...4.19.0</a></p> <h2>4.18.3</h2> <h2>Main Changes</h2> <ul> <li>Fix routing requests without method</li> <li>deps: [email protected] <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: [email protected]</li> </ul> </li> </ul> <h2>Other Changes</h2> <ul> <li>Use https: protocol instead of deprecated git: protocol by <a href="https://github.com/vcsjones"><code>`@vcsjones</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5032">expressjs/express#5032</a></li> <li>build: [email protected] and [email protected] by <a href="https://github.com/abenhamdine"><code>`@abenhamdine</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5034">expressjs/express#5034</a></li> <li>ci: update actions/checkout to v3 by <a href="https://github.com/armujahid"><code>`@armujahid</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5027">expressjs/express#5027</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5124">expressjs/express#5124</a></li> <li>Remove unused originalIndex from acceptParams by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5119">expressjs/express#5119</a></li> <li>Fixed typos by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5117">expressjs/express#5117</a></li> <li>examples: remove unused params by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5113">expressjs/express#5113</a></li> <li>fix: parameter str is not described in JSDoc by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5130">expressjs/express#5130</a></li> <li>fix: typos in History.md by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5131">expressjs/express#5131</a></li> <li>build : add [email protected] by <a href="https://github.com/abenhamdine"><code>`@abenhamdine</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5028">expressjs/express#5028</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>`@raksbisht</code></a>` in <a href="https://redirect.github.com/expressjs/express/pull/5137">expressjs/express#5137</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>4.19.2 / 2024-03-25</h1> <ul> <li>Improved fix for open redirect allow list bypass</li> </ul> <h1>4.19.1 / 2024-03-20</h1> <ul> <li>Allow passing non-strings to res.location with new encoding handling checks</li> </ul> <h1>4.19.0 / 2024-03-20</h1> <ul> <li>Prevent open redirect allow list bypass due to encodeurl</li> <li>deps: [email protected]</li> </ul> <h1>4.18.3 / 2024-02-29</h1> <ul> <li>Fix routing requests without method</li> <li>deps: [email protected] <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: [email protected]</li> </ul> </li> <li>deps: [email protected] <ul> <li>Add <code>partitioned</code> option</li> </ul> </li> </ul> <h1>4.18.2 / 2022-10-08</h1> <ul> <li>Fix regression routing a large stack in a single route</li> <li>deps: [email protected] <ul> <li>deps: [email protected]</li> <li>perf: remove unnecessary object clone</li> </ul> </li> <li>deps: [email protected]</li> </ul> <h1>4.18.1 / 2022-04-29</h1> <ul> <li>Fix hanging on large stack of sync routes</li> </ul> <h1>4.18.0 / 2022-04-25</h1> <ul> <li>Add "root" option to <code>res.download</code></li> <li>Allow <code>options</code> without <code>filename</code> in <code>res.download</code></li> <li>Deprecate string and non-integer arguments to <code>res.status</code></li> <li>Fix behavior of <code>null</code>/<code>undefined</code> as <code>maxAge</code> in <code>res.cookie</code></li> <li>Fix handling very large stacks of sync middleware</li> <li>Ignore <code>Object.prototype</code> values in settings through <code>app.set</code>/<code>app.get</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/04bc62787be974874bc1467b23606c36bc9779ba"><code>04bc627</code></a> 4.19.2</li> <li><a href="https://github.com/expressjs/express/commit/da4d763ff6ba9df6dbd8f1f0b1d05412dda934d5"><code>da4d763</code></a> Improved fix for open redirect allow list bypass</li> <li><a href="https://github.com/expressjs/express/commit/4f0f6cc67d531431c096ea006c2191b92931bbc3"><code>4f0f6cc</code></a> 4.19.1</li> <li><a href="https://github.com/expressjs/express/commit/a003cfab034fbadb1c78ae337ee8ab389adda217"><code>a003cfa</code></a> Allow passing non-strings to res.location with new encoding handling checks f...</li> <li><a href="https://github.com/expressjs/express/commit/a1fa90fcea7d8e844e1c9938ad095d62669c3abd"><code>a1fa90f</code></a> fixed un-edited version in history.md for 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/11f2b1db227fd42c2508c427032c1ec671b306be"><code>11f2b1d</code></a> build: fix build due to inconsistent supertest behavior in older versions</li> <li><a href="https://github.com/expressjs/express/commit/084e36506a18774f85206a65d8da04dc1107fc1b"><code>084e365</code></a> 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd"><code>0867302</code></a> Prevent open redirect allow list bypass due to encodeurl</li> <li><a href="https://github.com/expressjs/express/commit/567c9c665d0de4c344b8e160146050770233783c"><code>567c9c6</code></a> Add note on how to update docs for new release (<a href="https://redirect.github.com/expressjs/express/issues/5541">#5541</a>)</li> <li><a href="https://github.com/expressjs/express/commit/69a4cf2819c4449ec6ea45649691fb43a528d5d1"><code>69a4cf2</code></a> deps: [email protected]</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.17.1...4.19.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~wesleytodd">wesleytodd</a>, a new releaser for express since your current version.</p> </details> <br /> Updates `follow-redirects` from 1.14.1 to 1.15.6 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/35a517c5861d79dc8bff7db8626013d20b711b06"><code>35a517c</code></a> Release version 1.15.6 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b"><code>c4f847f</code></a> Drop Proxy-Authorization across hosts.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/8526b4a1b2ab3a2e4044299377df623a661caa76"><code>8526b4a</code></a> Use GitHub for disclosure.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/b1677ce00110ee50dc5da576751d39b281fc4944"><code>b1677ce</code></a> Release version 1.15.5 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/d8914f7982403ea096b39bd594a00ee9d3b7e224"><code>d8914f7</code></a> Preserve fragment in responseUrl.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/65858205e59f1e23c9bf173348a7a7cbb8ac47f5"><code>6585820</code></a> Release version 1.15.4 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"><code>7a6567e</code></a> Disallow bracketed hostnames.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/05629af696588b90d64e738bc2e809a97a5f92fc"><code>05629af</code></a> Prefer native URL instead of deprecated url.parse.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/1cba8e85fa73f563a439fe460cf028688e4358df"><code>1cba8e8</code></a> Prefer native URL instead of legacy url.resolve.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/72bc2a4229bc18dc9fbd57c60579713e6264cb92"><code>72bc2a4</code></a> Simplify _processResponse error handling.</li> <li>Additional commits viewable in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.14.1...v1.15.6">compare view</a></li> </ul> </details> <br /> Updates `ip` from 2.0.0 to 2.0.1 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/node-ip/commit/3b0994a74eca51df01f08c40d6a65ba0e1845d04"><code>3b0994a</code></a> 2.0.1</li> <li><a href="https://github.com/indutny/node-ip/commit/32f468f1245574785ec080705737a579be1223aa"><code>32f468f</code></a> lib: fixed CVE-2023-42282 and added unit test</li> <li>See full diff in <a href="https://github.com/indutny/node-ip/compare/v2.0.0...v2.0.1">compare view</a></li> </ul> </details> <br /> Updates `json5` from 1.0.1 to 1.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v1.0.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://redirect.github.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://redirect.github.com/json5/json5/issues/295">#295</a>). This has been backported to v1. (<a href="https://redirect.github.com/json5/json5/issues/298">#298</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>Unreleased [<a href="https://github.com/json5/json5/tree/main">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.3...HEAD">diff</a>]</h3> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://redirect.github.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://redirect.github.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://redirect.github.com/json5/json5/issues/295">#295</a>).</li> </ul> <h3>v2.2.1 [<a href="https://github.com/json5/json5/tree/v2.2.1">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.0...v2.2.1">diff</a>]</h3> <ul> <li>Fix: Removed dependence on minimist to patch CVE-2021-44906. (<a href="https://redirect.github.com/json5/json5/issues/266">#266</a>)</li> </ul> <h3>v2.2.0 [<a href="https://github.com/json5/json5/tree/v2.2.0">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.3...v2.2.0">diff</a>]</h3> <ul> <li>New: Accurate and documented TypeScript declarations are now included. There is no need to install <code>`@types/json5</code>.` (<a href="https://redirect.github.com/json5/json5/issues/236">#236</a>, <a href="https://redirect.github.com/json5/json5/issues/244">#244</a>)</li> </ul> <h3>v2.1.3 [<a href="https://github.com/json5/json5/tree/v2.1.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.2...v2.1.3">diff</a>]</h3> <ul> <li>Fix: An out of memory bug when parsing numbers has been fixed. (<a href="https://redirect.github.com/json5/json5/issues/228">#228</a>, <a href="https://redirect.github.com/json5/json5/issues/229">#229</a>)</li> </ul> <h3>v2.1.2 [<a href="https://github.com/json5/json5/tree/v2.1.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.1...v2.1.2">diff</a>]</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/a62db1e51e1031d92ac260f5bb38bbed1fdbc754"><code>a62db1e</code></a> 1.0.2</li> <li><a href="https://github.com/json5/json5/commit/e0c23fe458a77c0b2cdb271376be5d8d0908133c"><code>e0c23fe</code></a> docs: update CHANGELOG for v1.0.2</li> <li><a href="https://github.com/json5/json5/commit/62a65408408d40aeea14c7869ed327acead12972"><code>62a6540</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li>See full diff in <a href="https://github.com/json5/json5/compare/v1.0.1...v1.0.2">compare view</a></li> </ul> </details> <br /> Updates `loader-utils` from 1.4.0 to 1.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p> <blockquote> <h2>v1.4.2</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2">1.4.2</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/226">#226</a>) (<a href="https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa">17cbf8f</a>)</li> </ul> <h2>v1.4.1</h2> <h3><a href="https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1">1.4.1</a> (2022-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>security problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/220">#220</a>) (<a href="https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5">4504e34</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md">loader-utils's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2">1.4.2</a> (2022-11-11)</h3> <h3>Bug Fixes</h3> <ul> <li>ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/226">#226</a>) (<a href="https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa">17cbf8f</a>)</li> </ul> <h3><a href="https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.1">1.4.1</a> (2022-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>security problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/220">#220</a>) (<a href="https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5">4504e34</a>)</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/loader-utils/commit/331ad5067d9a1a7b8d646692e6959639969210d1"><code>331ad50</code></a> chore(release): 1.4.2</li> <li><a href="https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa"><code>17cbf8f</code></a> fix: ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/226">#226</a>)</li> <li><a href="https://github.com/webpack/loader-utils/commit/8f082b39f6903929f30fe29dab34f4d9c7ef070a"><code>8f082b3</code></a> chore(release): 1.4.1</li> <li><a href="https://github.com/webpack/loader-utils/commit/4504e34c4796a5836ef70458327351675aed48a5"><code>4504e34</code></a> fix: security problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/220">#220</a>)</li> <li>See full diff in <a href="https://github.com/webpack/loader-utils/compare/v1.4.0...v1.4.2">compare view</a></li> </ul> </details> <br /> Updates `node-fetch` from 2.6.1 to 2.6.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/node-fetch/node-fetch/releases">node-fetch's releases</a>.</em></p> <blockquote> <h2>v2.6.7</h2> <h1>Security patch release</h1> <p>Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred</p> <h2>What's Changed</h2> <ul> <li>fix: don't forward secure headers to 3th party by <a href="https://github.com/jimmywarting"><code>`@jimmywarting</code></a>` in <a href="https://redirect.github.com/node-fetch/node-fetch/pull/1453">node-fetch/node-fetch#1453</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7">https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7</a></p> <h2>v2.6.6</h2> <h2>What's Changed</h2> <ul> <li>fix(URL): prefer built in URL version when available and fallback to whatwg by <a href="https://github.com/jimmywarting"><code>`@jimmywarting</code></a>` in <a href="https://redirect.github.com/node-fetch/node-fetch/pull/1352">node-fetch/node-fetch#1352</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6">https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6</a></p> <h2>v2.6.2</h2> <p>fixed main path in package.json</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/node-fetch/node-fetch/commit/1ef4b560a17e644a02a3bfdea7631ffeee578b35"><code>1ef4b56</code></a> backport of <a href="https://redirect.github.com/node-fetch/node-fetch/issues/1449">#1449</a> (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1453">#1453</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/8fe5c4ea66b9b8187600e6d5ec9b1b6781f44009"><code>8fe5c4e</code></a> 2.x: Specify encoding as an optional peer dependency in package.json (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1310">#1310</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/f56b0c66d3dd2ef185436de1f2fd40f66bfea8f4"><code>f56b0c6</code></a> fix(URL): prefer built in URL version when available and fallback to whatwg (...</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/b5417aea6a3275932283a200214522e6ab53f1ea"><code>b5417ae</code></a> fix: import whatwg-url in a way compatible with ESM Node (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1303">#1303</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/18193c5922c64046b922e18faf41821290535f06"><code>18193c5</code></a> fix v2.6.3 that did not sending query params (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1301">#1301</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/ace7536c955556be742d9910566738630cc3c2a6"><code>ace7536</code></a> fix: properly encode url with unicode characters (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1291">#1291</a>)</li> <li><a href="https://github.com/node-fetch/node-fetch/commit/152214ca2f6e2a5a17d71e4638114625d3be30c6"><code>152214c</code></a> Fix(package.json): Corrected main file path in package.json (<a href="https://redirect.github.com/node-fetch/node-fetch/issues/1274">#1274</a>)</li> <li>See full diff in <a href="https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~endless">endless</a>, a new releaser for node-fetch since your current version.</p> </details> <br /> Updates `qs` from 6.5.2 to 6.5.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.5.3</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://redirect.github.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Fix] <code>utils.merge</code>: avoid a crash with a null target and a truthy non-array source</li> <li>[Fix] correctly parse nested arrays</li> <li>[Fix] <code>stringify</code>: fix a crash with <code>strictNullHandling</code> and a custom <code>filter</code>/<code>serializeDate</code> (<a href="https://redirect.github.com/ljharb/qs/issues/279">#279</a>)</li> <li>[Fix] <code>utils</code>: <code>merge</code>: fix crash when <code>source</code> is a truthy primitive & no options are provided</li> <li>[Fix] when <code>parseArrays</code> is false, properly handle keys ending in <code>[]</code></li> <li>[Fix] fix for an impossible situation: when the formatter is called with a non-string value</li> <li>[Fix] <code>utils.merge</code>: avoid a crash with a null target and an array source</li> <li>[Refactor] <code>utils</code>: reduce observable [[Get]]s</li> <li>[Refactor] use cached <code>Array.isArray</code></li> <li>[Refactor] <code>stringify</code>: Avoid arr = arr.concat(...), push to the existing instance (<a href="https://redirect.github.com/ljharb/qs/issues/269">#269</a>)</li> <li>[Refactor] <code>p…
- Loading branch information
