chore(deps): bump the npm_and_yarn group across 8 directories with 13 updates #21
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: [octokit](https://github.com/octokit/octokit.js). Bumps the npm_and_yarn group with 5 updates in the /test directory: | Package | From | To | | --- | --- | --- | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.9` | `1.9.15` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [sharp](https://github.com/lovell/sharp) | `0.33.2` | `0.33.4` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.12` | `4.2.18` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.4` | Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: [sharp](https://github.com/lovell/sharp). Bumps the npm_and_yarn group with 6 updates in the /test/cli/install/migration/contoso-test directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `13.5.3` | `14.1.1` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [qs](https://github.com/ljharb/qs) | `6.12.0` | `6.12.1` | | [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `2.1.0` | `4.2.1` | | [@strapi/plugin-users-permissions](https://github.com/strapi/strapi) | `4.13.7` | `4.24.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` | Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/contoso-test/api directory: [@azure/identity](https://github.com/Azure/azure-sdk-for-js). Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: [next](https://github.com/vercel/next.js) and [postcss](https://github.com/postcss/postcss). Updates `next` from 12.3.4 to 14.2.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `next` from 11.1.4 to 14.2.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `octokit` from 2.1.0 to 4.0.2 - [Release notes](https://github.com/octokit/octokit.js/releases) - [Commits](octokit/octokit.js@v2.1.0...v4.0.2) Updates `@grpc/grpc-js` from 1.9.9 to 1.9.15 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.9...@grpc/grpc-js@1.9.15) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `svelte` from 4.2.12 to 4.2.18 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/svelte@4.2.18/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@4.2.18/packages/svelte) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `sharp` from 0.33.2 to 0.33.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.2...v0.33.4) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `qs` from 6.12.0 to 6.12.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.12.0...v6.12.1) Updates `@azure/identity` from 2.1.0 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_2.1.0...@azure/identity_4.2.1) Updates `@strapi/plugin-users-permissions` from 4.13.7 to 4.24.2 - [Release notes](https://github.com/strapi/strapi/releases) - [Commits](strapi/strapi@v4.13.7...v4.24.2) Updates `@azure/msal-node` from 1.18.3 to 2.9.2 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v1.18.3...msal-node-v2.9.2) Updates `postcss` from 8.4.14 to 8.4.27 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) Updates `@azure/identity` from 2.1.0 to 4.2.1 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_2.1.0...@azure/identity_4.2.1) Updates `next` from 13.5.3 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.2.4) Updates `postcss` from 8.4.31 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.4.38) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: octokit dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: svelte dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@strapi/plugin-users-permissions" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@azure/msal-node" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@azure/identity" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: octokit.
Bumps the npm_and_yarn group with 5 updates in the /test directory:
1.9.91.9.154.18.24.19.20.33.20.33.44.2.124.2.185.28.35.28.4Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: sharp.
Bumps the npm_and_yarn group with 6 updates in the /test/cli/install/migration/contoso-test directory:
13.5.314.1.14.18.24.19.26.12.06.12.12.1.04.2.14.13.74.24.25.3.35.3.4Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/contoso-test/api directory: @azure/identity.
Bumps the npm_and_yarn group with 2 updates in the /test/integration/next/default-pages-dir directory: next and postcss.
Updates
nextfrom 12.3.4 to 14.2.4Release notes
Sourced from next's releases.
Commits
3078441v14.2.40538a0d[not a backport] fix lint errors2807fb4fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)efb476eAdd timeout/retry handling for fetch cache (#66652)c16a3f9Use addDependency to track metadata route file changes (#66714)942e45aFix inconsistency with 404 getStaticProps cache-control (#66674)9728a35Prevent append of trailing slash in cases where path ends with a file extensi...44661c2ensure router cache updates reference the latest cache values (#66681)f7ec039prevent duplicate RSC fetch when action redirects (#66620)dd6ab93Fix loading navigation with metadata and prefetch (#66447)Updates
nextfrom 11.1.4 to 14.2.4Release notes
Sourced from next's releases.
Commits
3078441v14.2.40538a0d[not a backport] fix lint errors2807fb4fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)efb476eAdd timeout/retry handling for fetch cache (#66652)c16a3f9Use addDependency to track metadata route file changes (#66714)942e45aFix inconsistency with 404 getStaticProps cache-control (#66674)9728a35Prevent append of trailing slash in cases where path ends with a file extensi...44661c2ensure router cache updates reference the latest cache values (#66681)f7ec039prevent duplicate RSC fetch when action redirects (#66620)dd6ab93Fix loading navigation with metadata and prefetch (#66447)Updates
octokitfrom 2.1.0 to 4.0.2Release notes
Sourced from octokit's releases.
... (truncated)
Commits
9604674fix(build): actually output ESM (#2678)c99ff62fix(docs): remove NodeJS 10 and add callout for conditional exports (#2675)13a86adfeat: v4 (#2674)d0b9a6ebuild(deps): lock file maintenance (#2670)b4860dachore(deps): update dependency esbuild to ^0.21.0 (#2672)98785f4fix: update rest endpoints (#2667)c520dc9build(deps): lock file maintenance (#2664)844baf9build(deps): lock file maintenance (#2661)0322377build(deps): lock file maintenance (#2658)ba7d859ci(action): update actions/add-to-project action to v1.0.1 (#2657)Updates
@grpc/grpc-jsfrom 1.9.9 to 1.9.15Release notes
Sourced from
@grpc/grpc-js's releases.Commits
08b0422Merge pull request from GHSA-7v5v-9h63-cj86c75e048grpc-js: Bump to 1.9.15d5d62b4grpc-js: Avoid buffering significantly more than max_receive_message_size per...02d0344Merge pull request #2741 from sergiitk/backport-1.9-psm-interop-common-prod-t...cf14020Merge pull request #2729 from sergiitk/psm-interop-common-prod-testsda44229Merge pull request #2738 from murgatroid99/backport-1.9-grpc-js_linkify-it_fix5ae7c8cMerge pull request #2735 from murgatroid99/grpc-js_linkify-it_fixeed21baMerge pull request #2714 from sergiitk/backport-1.9-psm-interop-pkg-dev63763a4Merge pull request #2712 from sergiitk/psm-interop-pkg-dev5be83ddMerge pull request #2643 from murgatroid99/grpc-js_idle_timer_fixUpdates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
sharpfrom 0.33.2 to 0.33.4Changelog
Sourced from sharp's changelog.
Commits
19d0e27Release v0.33.416b764fPrerelease v0.33.4-rc.01593ee3Bump devDeps668b5baDocs: changelog and credit for #409629336f4Ensure negate op occurs after profile conversion (#4096)b5fddd7Install: log node-addon-api version if availableda655a1Reduce default concurrency for musl thread over-subscription93c615dBump devDepsf325dc3Refactor to use C++ boolean literals rather than macros0fde71cEnsure all contributor email addresses are valid (#4088)Updates
sveltefrom 4.2.12 to 4.2.18Release notes
Sourced from svelte's releases.
Changelog
Sourced from svelte's changelog.
Commits
230916fVersion Packages (#11925)dbe6057chore: speed up regex (#11922)a8deae9Version Packages (#11594)8592914fix: correctly handle falsy values of style directives in SSR mode (#11584)8e4c778Version Packages (#11491)1bab571fix: additional check for component on destroy (svelte4) (#11489)9f2341fVersion Packages (#11202)a510c6afix: support attribute selector inside :global() (#11135)ad00cadVersion Packages (#11148)41eb8dafeat: support parsing camel case in container queries (#11131)Updates
undicifrom 5.28.3 to 5.28.4Release notes
Sourced from undici's releases.
Commits
fb98306Bumped v5.28.42b39440Merge pull request from GHSA-9qxr-qj54-h67264e3402Merge pull request from GHSA-m4v8-wqvr-p9f7723c4e7Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54bskip failing test due to Node.js changesUpdates
sharpfrom 0.33.2 to 0.33.4Changelog
Sourced from sharp's changelog.
Commits
19d0e27Release v0.33.416b764fPrerelease v0.33.4-rc.01593ee3Bump devDeps668b5baDocs: changelog and credit for #409629336f4Ensure negate op occurs after profile conversion (#4096)b5fddd7Install: log node-addon-api version if availableda655a1Reduce default concurrency for musl thread over-subscription93c615dBump devDepsf325dc3Refactor to use C++ boolean literals rather than macros0fde71cEnsure all contributor email addresses are valid (#4088)Updates
nextfrom 13.5.3 to 14.1.1Release notes
Sourced from next's releases.
Commits
3078441v14.2.40538a0d[not a backport] fix lint errors2807fb4fix: app-router prefetch crash when an invalid URL is passed to Link (#66755)efb476eAdd timeout/retry handling for fetch cache (#66652)c16a3f9Use addDependency to track metadata route file changes (#66714)942e45aFix inconsistency with 404 getStaticProps cache-control (#66674)9728a35Prevent append of trailing slash in cases where path ends with a file extensi...44661c2ensure router cache updates reference the latest cache values (#66681)f7ec039prevent duplicate RSC fetch when action redirects (#66620)dd6ab93Fix loading navigation with metadata and prefetch (#66447)Updates
expressfrom 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.