Bump the npm_and_yarn group across 1 directory with 11 updates #79
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 4 updates in the / directory: [karma](https://github.com/karma-runner/karma), [mocha](https://github.com/mochajs/mocha), [body-parser](https://github.com/expressjs/body-parser) and [json5](https://github.com/json5/json5). Updates `karma` from 6.3.4 to 6.4.4 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v6.3.4...v6.4.4) Updates `mocha` from 9.0.3 to 10.7.3 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v9.0.3...v10.7.3) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `cookie` from 0.4.1 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.2) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `log4js` from 6.3.0 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v6.3.0...v6.9.1) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `qs` from 6.7.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.13.0) Updates `socket.io` from 3.1.2 to 4.8.0 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/3.1.2...socket.io@4.8.0) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `ws` from 7.4.6 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...8.17.1) --- updated-dependencies: - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-6ebc12c3d2
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 4 updates in the / directory: karma, mocha, body-parser and json5.
Updates
karmafrom 6.3.4 to 6.4.4Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
84f85e7chore(release): 6.4.4 [skip ci]a4d1284build(deps-dev): bump ws from 6.2.1 to 6.2.3d8cf806chore(release): 6.4.3 [skip ci]d7f2d69fix: add build commits for patch release85a2eebbuild(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.20bffce2build(deps): updated socket.io version to fix security issues with socket.io-...86667abbuild(deps): bump follow-redirects from 1.11.0 to 1.15.4450fdfddocs: Add deprecation notice to Karma README9de3c00chore(release): 6.4.2 [skip ci]c6a4271fix: few typosUpdates
mochafrom 9.0.3 to 10.7.3Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
d5766c8chore(main): release 10.7.3 (#5195)afd66effix: make release-please build work (#5194)9e0a4bdchore(main): release 10.7.2 (#5192)7e7a2ecchore: fix failing markdown linting (#5193)1ac5b55docs: improve filtering (#5191)1528c42chore(main): release 10.7.1 (#5189)d7013ddfix: crash with --parallel and --retries both enabled (#5173)5c2989fchore: add knip to validate included dependenciesa777fd1ci: automate releases (#5186)ac5574eci: update towindows-latestin actions (#5185)Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
body-parserfrom 1.19.0 to 1.20.3Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
... (truncated)
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: qs@6.12.3 (#521)9478591fix: pin to node@22.4.183db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
cookiefrom 0.4.1 to 0.7.2Release notes
Sourced from cookie's releases.
Commits
d19eaa10.7.2bc38ffdFix object assignment ofhasOwnProperty(#177)cf4658f0.7.16a8b8f5Allow leading dot for domain (#174)58015c0Remove more code and perf wins (#172)ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)Maintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
log4jsfrom 6.3.0 to 6.9.1Changelog
Sourced from log4js's changelog.
... (truncated)
Commits
26dcec66.9.163ae5b9Merge pull request #1379 from log4js-node/update-docs185fa66docs: updated changelog for 6.9.1ed54dc2Merge pull request #1378 from log4js-node/1377-defaultparsecallstack-cant-par...2628688fix(7922e82): regex for stacktraceb3919d86.9.07cfe8a4Merge pull request #1376 from log4js-node/update-docsf89e7b6docs: updated changelog for 6.9.00082928Merge pull request #1375 from log4js-node/update-docsc0db6a4docs: added thatlog4js.getLogger()may calllog4js.configure()Updates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
qsfrom 6.7.0 to 6.13.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
5cf516cv6.13.08d56df2[New]parse: addstrictDepthoptionc9a6694[Tests] usenpm auditinstead ofaudf90cc35v6.12.31bf9f7a[Fix]parse: properly account forstrictNullHandlingwhenallowEmptyArrays7ebf48b[meta] fix changelog indentationd0dff11v6.12.2f0b8d03[Dev Deps] update@ljharb/eslint-config,object-inspect,tape81835ff[Fix]:parse: parse encoded square bracketsdb47dcc[readme] add CII best practices badgeUpdates
socket.iofrom 3.1.2 to 4.8.0Release notes
Sourced from socket.io's releases.
... (truncated)
Commits
d0fc720chore(release): socket.io@4.8.04a0555cchore(release): socket.io-client@4.8.02b60df1chore(release): engine.io@6.6.1d4cb375ci: ignore tests when publishing to npmc251ae7chore(release): engine.io-client@6.6.18a2f5a3fix(eio-client): move 'offline' event listener at the topb04fa64fix(sio): allow to join a room in a middleware (uws)7085f0erefactor(sio-client): mangle private attributes4f66708chore(sio-client): use babel loose mode when transpiling classes1a95db2chore(sio-client): add a script to compute the bundle sizeUpdates
socket.io-parserfrom 4.0.4 to 4.2.4Release notes
Sourced from socket.io-parser's releases.