build(deps): bump the npm_and_yarn group across 5 directories with 13 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… updates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [firebase-tools](https://github.com/firebase/firebase-tools) | `9.23.3` | `13.6.0` | | [marked](https://github.com/markedjs/marked) | `2.1.3` | `4.0.10` | | [requirejs](https://github.com/jrburke/r.js) | `2.3.6` | `2.3.7` | | [send](https://github.com/pillarjs/send) | `0.17.2` | `0.19.0` | | [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.0` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.7` | `4.0.8` | Bumps the npm_and_yarn group with 2 updates in the /integration/harness-e2e-cli directory: [body-parser](https://github.com/expressjs/body-parser) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 2 updates in the /integration/ng-add directory: [body-parser](https://github.com/expressjs/body-parser) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 2 updates in the /integration/ng-add-standalone directory: [body-parser](https://github.com/expressjs/body-parser) and [micromatch](https://github.com/micromatch/micromatch). Bumps the npm_and_yarn group with 2 updates in the /integration/yarn-pnp-compat directory: [body-parser](https://github.com/expressjs/body-parser) and [micromatch](https://github.com/micromatch/micromatch). Updates `firebase-tools` from 9.23.3 to 13.6.0 - [Release notes](https://github.com/firebase/firebase-tools/releases) - [Changelog](https://github.com/firebase/firebase-tools/blob/master/CHANGELOG.md) - [Commits](firebase/firebase-tools@v9.23.3...v13.6.0) Updates `marked` from 2.1.3 to 4.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json) - [Commits](markedjs/marked@v2.1.3...v4.0.10) Updates `requirejs` from 2.3.6 to 2.3.7 - [Commits](requirejs/r.js@2.3.6...2.3.7) Updates `semver` from 7.6.2 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.2...v7.6.3) Updates `send` from 0.17.2 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.2...0.19.0) Updates `@grpc/grpc-js` from 1.6.12 to 1.8.22 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `express` from 4.19.2 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.19.2...4.21.0) Updates `json-ptr` from 2.2.0 to 3.1.1 - [Commits](https://github.com/flitbit/json-ptr/compare/v2.2.0...v3.1.1) Updates `jsonwebtoken` from 8.5.1 to 9.0.2 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.2) Updates `micromatch` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.7...4.0.8) Updates `tar` from 4.4.19 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.19...v6.2.1) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `micromatch` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.7...4.0.8) Updates `qs` from 6.11.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.11.0...v6.13.0) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `micromatch` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.7...4.0.8) Updates `qs` from 6.11.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.11.0...v6.13.0) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `micromatch` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.7...4.0.8) Updates `qs` from 6.11.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.11.0...v6.13.0) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `micromatch` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.7...4.0.8) Updates `qs` from 6.11.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.11.0...v6.13.0) --- updated-dependencies: - dependency-name: firebase-tools dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: marked dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: requirejs dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: send dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-ptr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsonwebtoken dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
YoutacRandS-VA
deleted the
dependabot/npm_and_yarn/npm_and_yarn-65123dca63
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 6 updates in the / directory:
9.23.313.6.02.1.34.0.102.3.62.3.70.17.20.19.04.19.24.21.04.0.74.0.8Bumps the npm_and_yarn group with 2 updates in the /integration/harness-e2e-cli directory: body-parser and micromatch.
Bumps the npm_and_yarn group with 2 updates in the /integration/ng-add directory: body-parser and micromatch.
Bumps the npm_and_yarn group with 2 updates in the /integration/ng-add-standalone directory: body-parser and micromatch.
Bumps the npm_and_yarn group with 2 updates in the /integration/yarn-pnp-compat directory: body-parser and micromatch.
Updates
firebase-toolsfrom 9.23.3 to 13.6.0Release notes
Sourced from firebase-tools's releases.
... (truncated)
Commits
f6b7d0513.6.0a26c3d0Ignore quota project in GCF source uploads (#6917)476bd33Update to PubSub emulator 0.8.2 (#6916)ccab9b7Add Service Usage Consumer role to GitHub Actions service account (#6895)4c1bd42Switching a few more places to getters (#6914)6950829Fix "could not assert Secret Manager permissions" Cloud Build error (#6904)4a17ca7Refactor api.ts file constants to getters (#6913)c6d1615Update Firestore Emulator version (#6912)90b6506Vector config support (#6900)dc13cb9make fetchLinkableGitRepositories get all linkable git repositories (#6889)Updates
markedfrom 2.1.3 to 4.0.10Release notes
Sourced from marked's releases.
... (truncated)
Commits
ae01170chore(release): 4.0.10 [skip ci]fceda57🗜️ build [skip ci]8f80657fix(security): fix redos vulnerabilitiesc4a3ccdMerge pull request from GHSA-rrrm-qjm4-v8hfd7212a6chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)5a84db5chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)2bc67a5chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)98996b8chore(deps-dev): Bump@babel/preset-envfrom 7.16.5 to 7.16.7 (#2353)ebc2c95chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)e5171a9chore(release): 4.0.9 [skip ci]Updates
requirejsfrom 2.3.6 to 2.3.7Commits
1874a29Rev to 2.3.7152f450Merge pull request #1016 from requirejs/jr/1854-pollutionecc356aFixes requirejs/requirejs#1854, pollutionacec536SECURITY.mdUpdates
semverfrom 7.6.2 to 7.6.3Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
0a12d6cchore: release 7.6.3 (#720)73a3d79fix: optimize Range parsing and formatting (#726)2975ecedocs: fix extra backtick typo (#719)Updates
sendfrom 0.17.2 to 0.19.0Release notes
Sourced from send's releases.
Changelog
Sourced from send's changelog.
Commits
9d2db990.19.0ae4f298Merge commit from forkb69cbb30.18.0f53edbbLimit the headers removed for 304 response706d6dddocs: add security policyb690ba4docs: fix linux build badge linkfed09ffdocs: update copyrightaee1a65deps: [email protected]6060bdadeps: [email protected]8055f78build: [email protected]Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.
Updates
@grpc/grpc-jsfrom 1.6.12 to 1.8.22Release notes
Sourced from
@grpc/grpc-js's releases.... (truncated)
Commits
a8a0203Merge pull request from GHSA-7v5v-9h63-cj863b110cdgrpc-js: Bump to 1.8.228e62222grpc-js: Avoid buffering significantly more than max_receive_message_size per...9d83947Merge pull request #2742 from sergiitk/backport-1.8-psm-interop-common-prod-t...00f348cMerge pull request #2729 from sergiitk/psm-interop-common-prod-tests36d105bMerge pull request #2737 from murgatroid99/backport-1.8-grpc-js_linkify-it_fix969e305Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fixd78216fMerge pull request #2715 from sergiitk/backport-1.8-psm-interop-pkg-devf38966aMerge pull request #2712 from sergiitk/psm-interop-pkg-devffefff2Merge pull request #2640 from XuanWang-Amos/backport-1.8-psm-interop-shared-b...Updates
expressfrom 4.19.2 to 4.21.0Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
7e562c64.21.01bcde96fix(deps): [email protected] (#5946)7d36477fix(deps): [email protected] (#5951)40d2d8ffix(deps): [email protected]77ada90Deprecate"back"magic string in redirects (#5935)21df4214.20.04c9ddc1feat: upgrade to [email protected]9ebe5d5feat: upgrade to [email protected] (#5928)ec4a01bfeat: upgrade to [email protected] (#5926)54271f6fix: don't render redirect values in anchor hrefUpdates
json-ptrfrom 2.2.0 to 3.1.1Commits
1988f053.1.13292abfUpdate package.json export statements for TS 4.7 Node ESM Support (#54)677a678verified and fixed examples02aa7103.1.07702108docs for v3.1.078e4a61https for docs1916627recreate docs pathsdfeb207removed docs foldere7bd39dtesting docsafa67f9docs updateUpdates
jsonwebtokenfrom 8.5.1 to 9.0.2Changelog
Sourced from jsonwebtoken's changelog.
Commits
bc28861Release 9.0.2 (#935)96b8906refactor: use specific lodash packages (#933)ed35062security: Updating semver to 7.5.4 to resolve CVE-2022-25883 (#932)84539b2Updating package version to 9.0.1 (#920)a99fd4bfix(stubs): allow decode method to be stubbed (#876)e1fa9dcMerge pull request from GHSA-8cf7-32gw-wr335eaedbfchore(ci): remove github test actions job (#861)cd4163echore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)ecdf6ccfix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...8345030fix(sign&verify)!: Remove defaultnonesupport fromsignandverifymet...Maintainer changes
This version was pushed to npm by charlesrea, a new releaser for jsonwebtoken since your current version.
Updates
micromatchfrom 4.0.7 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
tarfrom 4.4.19 to 6.2.1Release notes
Sourced from tar's releases.
Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
body-parserfrom 1.20.2 to 1.20.3Release notes
Sourced from body-parser's releases.
Changelog
Sourced from body-parser's changelog.
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: [email protected] (#521)9478591fix: pin to [email protected]83db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
micromatchfrom 4.0.7 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOG