Bump the npm_and_yarn group across 1 directory with 7 updates by dependabot[bot] · Pull Request #1 · projectoperations/localhostdev

dependabot · 2024-08-29T23:58:27Z

Bumps the npm_and_yarn group with 6 updates in the /apps-master directory:

Package	From	To
probot	`12.3.1`	`12.3.3`
@babel/traverse	`7.22.17`	`7.25.6`
braces	`3.0.2`	`3.0.3`
express	`4.18.2`	`4.19.2`
phin	`2.9.3`	`removed`
get-json	`1.0.1`	`1.1.0`

Updates probot from 12.3.1 to 12.3.3

Release notes

Sourced from probot's releases.

v12.3.3

12.3.3 (2023-11-15)

Bug Fixes

deps: @octokit/webhooks security update (#1911) (02d81f8)

v12.3.2

12.3.2 (2023-11-14)

Bug Fixes

Fix async main function type (#1672) (fc6886d)

Commits

02d81f8 fix(deps): @octokit/webhooks security update (#1911)
fc6886d fix: Fix async main function type (#1672)
76f3376 docs: Fix 404 links (#1678)
c1f0767 docs: Fix previous/next button (#1898)
See full diff in compare view

Updates @babel/traverse from 7.22.17 to 7.25.6

Release notes

Sourced from @babel/traverse's releases.

v7.25.5 (2024-08-23)

🐛 Bug Fix

babel-generator, babel-traverse

#16764 fix: Generate sequence expression parentheses correctly (@liuxingbaoyu)

💅 Polish

babel-generator

#16738 Only force-parenthesize satisfies's LHS if it has newlines (@nicolo-ribaudo)

Committers: 2

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.25.4 (2024-08-22)

🐛 Bug Fix

babel-traverse

#16756 fix: Skip computed key when renaming (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16755 fix: Decorator 2018-09 may throw an exception (@liuxingbaoyu)

babel-types

#16710 Visit AST fields nodes according to their syntactical order (@nicolo-ribaudo)

babel-generator

#16709 Print semicolon after TS export namespace as A (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse

#16722 Avoid unnecessary parens around sequence expressions (@nicolo-ribaudo)

babel-generator, babel-plugin-transform-class-properties

#16714 Avoid unnecessary parens around exported arrow functions (@nicolo-ribaudo)

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

#16712 Avoid printing unnecessary parens around object destructuring (@nicolo-ribaudo)

🔬 Output optimization

babel-generator

#16740 Avoid extra spaces between comments/regexps in compact mode (@nicolo-ribaudo)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.25.3 (2024-07-31)

🐛 Bug Fix

babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

#16699 Avoid validating visitors produced by traverse.visitors.merge (@nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.6 (2024-08-29)

🐛 Bug Fix

babel-generator

#16783 Properly print inner comments in TS array types (@nicolo-ribaudo)

#16775 fix: jsx whitespace is not properly preserved when retainLines (@liuxingbaoyu)

babel-traverse

#16727 fix: path.getAssignmentIdentifiers may be undefined (@liuxingbaoyu)

babel-parser

#16761 fix: improve static canFollowModifier checks (@JLHwung)

babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3

#16769 Only wrap functions in superPropertyGet helper (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env

#16780 Do not enforce printing space between ( and comments (@nicolo-ribaudo)

babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes

#16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@nicolo-ribaudo)

babel-generator

#16782 TS union/intersection nested in union does not need parens (@nicolo-ribaudo)

🏠 Internal

babel-generator

#16777 Remove unused parent params in the generator (@nicolo-ribaudo)

v7.25.5 (2024-08-23)

🐛 Bug Fix

babel-generator, babel-traverse

#16764 fix: Generate parentheses correctly (@liuxingbaoyu)

💅 Polish

babel-generator

#16738 Only force-parenthesize satisfies's LHS if it has newlines (@nicolo-ribaudo)

v7.25.4 (2024-08-22)

🐛 Bug Fix

babel-traverse

#16756 fix: Skip computed key when renaming (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16755 fix: Decorator 2018-09 may throw an exception (@liuxingbaoyu)

babel-types

#16710 Visit AST fields nodes according to their syntactical order (@nicolo-ribaudo)

babel-generator

#16709 Print semicolon after TS export namespace as A (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse

#16722 Avoid unnecessary parens around sequence expressions (@nicolo-ribaudo)

babel-generator, babel-plugin-transform-class-properties

#16714 Avoid unnecessary parens around exported arrow functions (@nicolo-ribaudo)

... (truncated)

Commits

2f72b97 v7.25.6
faceae9 fix: path.getAssignmentIdentifiers may be undefined (#16727)
46ee612 Remove some NodePath methods (#16655)
2fdc8b5 fix: Generate sequence expression parentheses correctly (#16764)
cbf124c v7.25.4
2b289fb fix: skip computed key when renaming (#16756)
575863c Avoid unnecessary parens around sequence expressions (#16722)
5174ad1 Clean all always enabled parser plugins (#16572)
52718ab Discontinue babel-eslint-config-internal (#16718)
dba45d3 Ignore devDependencies when generating tsconfig.json (#16659)
Additional commits viewable in compare view

Updates @octokit/webhooks from 9.26.0 to 9.26.3

Release notes

Sourced from @octokit/webhooks's releases.

v9.26.3

9.26.3 (2023-11-15)

Bug Fixes

try to release with previously used semantic-release version (a674dd6)

v9.26.2

9.26.2 (2023-11-15)

Bug Fixes

trigger another release (cce5722), closes #issuecomment-1812983128

v9.26.1

9.26.1 (2023-11-15)

Bug Fixes

handles verify error (#917) (0504ad8)

Commits

a674dd6 fix: try to release with previously used semantic-release version
4c05d99 ci(release): run with --debug
8739f93 ci(release): add another debug step
eb52781 build(pkg): fix repository field to address npm warning, and add another debu...
cce5722 fix: trigger another release
a338537 updates token env name
a608374 bumps node version for the release workflow
2750d5c updates semantic-release to be able to use the new env var format for npm
a988453 Update package.json
6a9749e Update release.yml
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Removes phin

Updates get-json from 1.0.1 to 1.1.0

Changelog

Sourced from get-json's changelog.

v1.1.0 - 2024-06-16

Commits

[Refactor] replace phin with a simplified inlined version c649fb5

[Refactor] reject earlier when the URL is not a string f2d9797

[meta] delete npmignore file acb9430

[Dev Deps] update tape 240fc6e

v1.0.2 - 2024-06-14

Merged

Revert "Project status: Deprecated" [#6](https://github.com/ljharb/get-json/issues/6)

Project status: Deprecated [#6](https://github.com/ljharb/get-json/issues/6)

Commits

[eslint] add eslint cd85915

[Tests] migrate from travis to GHA 06132a7

[meta] add auto-changelog 057c3d7

[meta] use npmignore 51e1da6

[meta] clean up package.json ad75a77

[Fix] ensure browser fallback returns a Promise 6664a6b

[meta] add missing LICENSE file; use correct SPDX license identifier c67a81a

[Deps] update jsonp, phin e0b383e

[Refactor] use browser field instead of runtime is-node detection acfa556

Only apps should have lockfiles b78e799

[Tests] switch from prova to tape 686dea6

[Tests] move tests into test dir 895e2de

[meta] add missing engines.node e0b27f1

[meta] update repo b802bf5

[meta] ignore < high audit warnings 5156dd2

Commits

450d986 v1.1.0
c649fb5 [Refactor] replace phin with a simplified inlined version
f2d9797 [Refactor] reject earlier when the URL is not a string
240fc6e [Dev Deps] update tape
acb9430 [meta] delete npmignore file
487b6a7 v1.0.2
5156dd2 [meta] ignore < high audit warnings
e0b27f1 [meta] add missing engines.node
6664a6b [Fix] ensure browser fallback returns a Promise
c67a81a [meta] add missing LICENSE file; use correct SPDX license identifier
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for get-json since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 6 updates in the /apps-master directory: | Package | From | To | | --- | --- | --- | | [probot](https://github.com/probot/probot) | `12.3.1` | `12.3.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.17` | `7.25.6` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [phin](https://github.com/ethanent/phin) | `2.9.3` | `removed` | | [get-json](https://github.com/ljharb/get-json) | `1.0.1` | `1.1.0` | Updates `probot` from 12.3.1 to 12.3.3 - [Release notes](https://github.com/probot/probot/releases) - [Commits](probot/probot@v12.3.1...v12.3.3) Updates `@babel/traverse` from 7.22.17 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `@octokit/webhooks` from 9.26.0 to 9.26.3 - [Release notes](https://github.com/octokit/webhooks.js/releases) - [Commits](octokit/webhooks.js@v9.26.0...v9.26.3) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Removes `phin` Updates `get-json` from 1.0.1 to 1.1.0 - [Changelog](https://github.com/ljharb/get-json/blob/main/CHANGELOG.md) - [Commits](ljharb/get-json@v1.0.1...v1.1.0) --- updated-dependencies: - dependency-name: probot dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@octokit/webhooks" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: phin dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: get-json dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2024-08-29T23:58:54Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/nock@13.3.3	environment, filesystem, network	`+4`	1.65 MB	nockbot

View full report↗︎

dependabot bot added the dependencies Pull requests that update a dependency file label Aug 29, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the npm_and_yarn group across 1 directory with 7 updates#1

Bump the npm_and_yarn group across 1 directory with 7 updates#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps-master/npm_and_yarn-601fbde464

dependabot bot commented on behalf of github Aug 29, 2024

Uh oh!

socket-security bot commented Aug 29, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Aug 29, 2024

v12.3.3

12.3.3 (2023-11-15)

Bug Fixes

v12.3.2

12.3.2 (2023-11-14)

Bug Fixes

v7.25.5 (2024-08-23)

🐛 Bug Fix

💅 Polish

Committers: 2

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.25.5 (2024-08-23)

🐛 Bug Fix

💅 Polish

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

v9.26.3

9.26.3 (2023-11-15)

Bug Fixes

v9.26.2

9.26.2 (2023-11-15)

Bug Fixes

v9.26.1

9.26.1 (2023-11-15)

Bug Fixes

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v1.1.0 - 2024-06-16

Commits

v1.0.2 - 2024-06-14

Merged

Commits

Uh oh!

socket-security bot commented Aug 29, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants