This repository has been archived by the owner on Nov 21, 2024. It is now read-only.
Bump the npm_and_yarn group across 1 directories with 12 updates #2
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 10 updates in the /. directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/debug-js/debug) | `3.2.6` | `3.2.7` | | [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) | `0.4.19` | `0.5.0` | | [xmldom](https://github.com/xmldom/xmldom) | `0.1.27` | `0.6.0` | | [passport](https://github.com/jaredhanson/passport) | `0.4.0` | `0.6.0` | | [request](https://github.com/request/request) | `2.88.0` | `2.88.2` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `3.0.1` | | [glob-parent](https://github.com/gulpjs/glob-parent) | `5.1.0` | `5.1.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [y18n](https://github.com/yargs/y18n) | `4.0.0` | `4.0.3` | Updates `debug` from 3.2.6 to 3.2.7 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@3.2.6...3.2.7) Updates `xml2js` from 0.4.19 to 0.5.0 - [Commits](Leonidas-from-XIV/node-xml2js@0.4.19...0.5.0) Updates `xmldom` from 0.1.27 to 0.6.0 - [Release notes](https://github.com/xmldom/xmldom/releases) - [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md) - [Commits](xmldom/xmldom@v0.1.27...0.6.0) Updates `passport` from 0.4.0 to 0.6.0 - [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md) - [Commits](jaredhanson/passport@v0.4.0...v0.6.0) Updates `request` from 2.88.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `ajv` from 6.6.1 to 6.10.2 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.6.1...v6.10.2) Updates `ansi-regex` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v3.0.0...v3.0.1) Updates `glob-parent` from 5.1.0 to 5.1.2 - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](gulpjs/glob-parent@v5.1.0...v5.1.2) Updates `lodash` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `tough-cookie` from 2.4.3 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.4.3...v2.5.0) Updates `y18n` from 4.0.0 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3) --- updated-dependencies: - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: xml2js dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: xmldom dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: passport dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: request dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the /. directory:
3.2.63.2.70.4.190.5.00.1.270.6.00.4.00.6.02.88.02.88.23.0.03.0.15.1.05.1.24.17.154.17.215.7.15.7.24.0.04.0.3Updates
debugfrom 3.2.6 to 3.2.7Commits
33832603.2.74e21502fix regressionMaintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.
Updates
xml2jsfrom 0.4.19 to 0.5.0Commits
9f730bbUpdate package.json with latest PR50a492aMerge pull request #603 from autopulated/master7bc3c5dMerge pull request #598 from fnimick/masterf412a12Merge pull request #635 from wisesimpson/patch-1d318ce0Update README.md581b19ause Object.create(null) to create all parsed objects (prevent prototype repla...a212950Add documentation forexplicitCharkeyoption1832e0bMerge pull request #512 from economia/master198063cMerge pull request #556 from Omega-Ariston/fix-issue5440d71785Merge pull request #562 from Omega-Ariston/addDocExampleUpdates
xmldomfrom 0.1.27 to 0.6.0Release notes
Sourced from xmldom's releases.
... (truncated)
Changelog
Sourced from xmldom's changelog.
... (truncated)
Commits
c80a161xmldon version 0.6.0bc36efdchore: regenerate package-lock.json8a92704Update eslint -> ^7.23.0 - devDependencies (#202)b12106eUpdate@stryker-mutator/core-> ^4.5.1 - devDependencies (#192)af4642edocs: Update Changelog (#197)5869d76test(stryker): Replace line numbers by error index (#201)a681852fix: Escape<when serializing attribute values (#199)bb12247Update eslint-config-prettier -> 8 - devDependencies (#187)48c51b3Update eslint -> ^7.22.0 - devDependencies (#185)82b0481refactor!: Avoid empty namespace value like xmlns:ds="" (#168)Maintainer changes
This version was pushed to npm by karfau, a new releaser for xmldom since your current version.
Updates
passportfrom 0.4.0 to 0.6.0Changelog
Sourced from passport's changelog.
... (truncated)
Commits
c33067b0.6.03052bb4Update changelog.42630cbMerge pull request #900 from jaredhanson/fix-fixation8dd79feUse utils-merge rather than Object.assign for compatibility.4f6bd5bChange keepSessionData to keepSessionData.46756e5Silence verbose logging.987b191Add tests.f8a175fAdd tests.29a90d6No need to guard callback existence.bfba8a1Add tests.Updates
requestfrom 2.88.0 to 2.88.2Changelog
Sourced from request's changelog.
Commits
Updates
ajvfrom 6.6.1 to 6.10.2Release notes
Sourced from ajv's releases.
Commits
6e4a3466.10.253b5682fix: the unknown keyword in the schema without known keywords inside compound...669bf96readme: fix linkd289c38Tidelift subscription69802d2security contactd9d6fbaCreate FUNDING.yml482d2c5labels configdd827d1label comments (for labelcious)8b590526.10.166c2907chore(package): update del-cli to version 2.0.0 (#1014)Updates
ansi-regexfrom 3.0.0 to 3.0.1Commits
f545bdb3.0.1c57d4c2fix a few old XO issues for backport419250fFix potential ReDoS (#37)Updates
glob-parentfrom 5.1.0 to 5.1.2Release notes
Sourced from glob-parent's releases.
Changelog
Sourced from glob-parent's changelog.
Commits
eb2c439chore: update changelog12bcb6cchore: release 5.1.2f923116fix: eliminate ReDoS (#36)0b014a7chore: add JSDoc returns information (#33)2b24ebdchore: generate initial changelog9b6e874chore: release 5.1.1749c35eci: try wrapping the JOB_ID in a string5d39defci: attempt to switch to published coveralls0b5b37fci: put the npm step back in for only Windows473f5d8ci: update azure build imagesUpdates
lodashfrom 4.17.15 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
semverfrom 5.7.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313chore: release 5.7.22f8fd41fix: better handling of whitespace (#585)deb5ad5chore:@npmcli/template-oss@4.16.0Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
tough-cookiefrom 2.4.3 to 2.5.0Commits
7c1fdf12.5.09ff4ba5Qualify the store.removeAllCookies documentation1855bf3Additional documentation for removeAllCookies5cc9bd2Extract tests, cover multiple error path28f0808Only call removeAllCookies if actually implemented62802efremove all cookies from cookie jar at once (#115)8783d46Remove left-over mention of MPL from README8302ebcMerge pull request #121 from salesforce/punycode-2.1d6ea115Merge pull request #120 from salesforce/no-package-lockb897b49Merge pull request #119 from salesforce/inline-versionUpdates
y18nfrom 4.0.0 to 4.0.3Changelog
Sourced from y18n's changelog.
Commits
0aa97c5chore: release 4.x.x (#128)a8e7f04build(release-please): configure branch properly (#127)1e21a53fix(release): 4.x.x should not enforce Node 10 (#126)8dc7580docs: update CHANGELOG7de58cafix: address prototype pollution issueMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.