chore(deps): bump the npm_and_yarn group across 4 directories with 14 updates #18
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
[skip ci]
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/b84198ce-387f-40a2-9108-81dc921da607?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/d0d88628-ed6d-4d56-9934-a879dc24a83e?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade com.github.javaparser:javaparser-core from 3.5.9 to 3.26.0. See this package in maven: com.github.javaparser:javaparser-core See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/47526198-b676-4801-836f-ec896130d73a?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/895a58f8-8171-4c0f-bb16-aab6ad6b61ae?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/3c076cc9-3c6f-4d40-bdb5-c379022d47e1?utm_source=github&utm_medium=referral&page=upgrade-pr
…resources/language-metavariables/tree-sitter-sql/docs/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-7577227 - https://snyk.io/vuln/SNYK-RUBY-REXML-7577228
…ecea48ac9d59fe [Snyk] Security upgrade jekyll from 4.3.2 to 4.3.3
…01a3abb2b5f908a609 [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
…eb87f9d8f79eb514a6 [Snyk] Upgrade com.github.javaparser:javaparser-core from 3.5.9 to 3.26.0
…dd46bf44323c08875c [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
…3e03ff4099f0941f0e [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
…2d83df2ddf4111877c [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/ce505a2d-919f-4785-b479-681dd77f596b?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/3cc1ceb4-cc01-4dbf-82c1-5606d7ec4907?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade tree-sitter-cli from 0.20.8 to 0.22.6. See this package in npm: tree-sitter-cli See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/de2a14d4-1968-488a-b7fa-2587f42c7fed?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade nan from 2.17.0 to 2.20.0. See this package in npm: nan See this project in Snyk: https://app.snyk.io/org/abdulrahman305/project/de2a14d4-1968-488a-b7fa-2587f42c7fed?utm_source=github&utm_medium=referral&page=upgrade-pr
…b98dc676ee3436d1bf3 [Snyk] Upgrade nan from 2.17.0 to 2.20.0
…fef6fcd6e517520858 [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
…890d792cd0f9e308ce [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
…714f3403eab54a6a50 [Snyk] Upgrade tree-sitter-cli from 0.20.8 to 0.22.6
… updates Bumps the npm_and_yarn group with 1 update in the /resources/language-metavariables/tree-sitter-markdown directory: [minimist](https://github.com/minimistjs/minimist). Bumps the npm_and_yarn group with 1 update in the /resources/language-metavariables/tree-sitter-sql directory: [tar](https://github.com/isaacs/node-tar). Bumps the npm_and_yarn group with 5 updates in the /resources/language-metavariables/tree-sitter-toml directory: | Package | From | To | | --- | --- | --- | | [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `4.1.1` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `7.6.3` | | [standard-version](https://github.com/conventional-changelog/standard-version) | `7.0.0` | `9.5.0` | | [ini](https://github.com/npm/ini) | `1.3.7` | `1.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | Bumps the npm_and_yarn group with 9 updates in the /resources/language-metavariables/tree-sitter-vue directory: | Package | From | To | | --- | --- | --- | | [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `4.1.1` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.1.2` | `4.7.8` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.8.4` | `2.8.9` | | [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.17.21` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `13.1.1` | `13.1.2` | | [standard-version](https://github.com/conventional-changelog/standard-version) | `7.0.0` | `9.5.0` | Updates `minimist` from 1.2.6 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.6...v1.2.8) Updates `tar` from 6.2.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.0...v6.2.1) Updates `ansi-regex` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v4.1.0...v4.1.1) Updates `semver` from 5.7.1 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v7.6.3) Updates `standard-version` from 7.0.0 to 9.5.0 - [Release notes](https://github.com/conventional-changelog/standard-version/releases) - [Changelog](https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md) - [Commits](conventional-changelog/standard-version@v7.0.0...v9.5.0) Updates `ini` from 1.3.7 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.7...v1.3.8) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `minimist` from 0.0.10 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.6...v1.2.8) Updates `dot-prop` from 3.0.0 to 5.3.0 - [Release notes](https://github.com/sindresorhus/dot-prop/releases) - [Commits](sindresorhus/dot-prop@v3.0.0...v5.3.0) Updates `handlebars` from 4.5.3 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.2...v4.7.8) Updates `lodash` from 4.17.19 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `trim-newlines` from 1.0.0 to 3.0.1 - [Release notes](https://github.com/sindresorhus/trim-newlines/releases) - [Commits](https://github.com/sindresorhus/trim-newlines/commits) Updates `yargs-parser` from 13.1.2 to 20.2.9 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](https://github.com/yargs/yargs-parser/commits) Updates `standard-version` from 7.0.0 to 9.5.0 - [Release notes](https://github.com/conventional-changelog/standard-version/releases) - [Changelog](https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md) - [Commits](conventional-changelog/standard-version@v7.0.0...v9.5.0) Updates `ansi-regex` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v4.1.0...v4.1.1) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.7...v1.3.8) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `handlebars` from 4.1.2 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.2...v4.7.8) Updates `hosted-git-info` from 2.8.4 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.8.4...v2.8.9) Updates `lodash` from 4.17.15 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.15...4.17.21) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `yargs-parser` from 13.1.1 to 13.1.2 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](https://github.com/yargs/yargs-parser/commits) Updates `standard-version` from 7.0.0 to 9.5.0 - [Release notes](https://github.com/conventional-changelog/standard-version/releases) - [Changelog](https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md) - [Commits](conventional-changelog/standard-version@v7.0.0...v9.5.0) --- updated-dependencies: - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: standard-version dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dot-prop dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: trim-newlines dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: standard-version dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: standard-version dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
👋 I'm here to help you review your pull request. When you're ready for me to perform a review, you can comment anywhere on this pull request with this command: As a reminder, here are some helpful tips on how we can collaborate together:
|
|
Warning Rate limit exceeded@dependabot[bot] has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 18 minutes and 48 seconds before requesting another review. How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the /resources/language-metavariables/tree-sitter-markdown directory: minimist.
Bumps the npm_and_yarn group with 1 update in the /resources/language-metavariables/tree-sitter-sql directory: tar.
Bumps the npm_and_yarn group with 5 updates in the /resources/language-metavariables/tree-sitter-toml directory:
4.1.04.1.15.7.17.6.37.0.09.5.01.3.71.3.83.0.43.1.2Bumps the npm_and_yarn group with 9 updates in the /resources/language-metavariables/tree-sitter-vue directory:
4.1.04.1.11.3.51.3.83.0.43.1.24.1.24.7.82.8.42.8.94.17.154.17.211.0.61.0.713.1.113.1.27.0.09.5.0Updates
minimistfrom 1.2.6 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
tarfrom 6.2.0 to 6.2.1Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.mdUpdates
ansi-regexfrom 4.1.0 to 4.1.1Commits
64735d2v4.1.175a657dFix potential ReDoS (#37)Updates
semverfrom 5.7.1 to 7.6.3Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
0a12d6cchore: release 7.6.3 (#720)73a3d79fix: optimize Range parsing and formatting (#726)2975ecedocs: fix extra backtick typo (#719)eb1380bchore: release 7.6.2 (#714)6466ba9fix(lru): use map.delete() directly (#713)d777418chore: release 7.6.1 (#706)988a8dedeps: uninstalllru-cache(#709)5feeb7fchore: postinstall for dependabot template-oss PRdd09b60chore: bump@npmcli/template-ossto 4.22.0c570a34fix(linting): no-unused-varsMaintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
standard-versionfrom 7.0.0 to 9.5.0Release notes
Sourced from standard-version's releases.
... (truncated)
Changelog
Sourced from standard-version's changelog.
... (truncated)
Commits
017dcb6chore(master): release 9.5.0 (#867)61b41fafeat(deprecated): add deprecation message (#907)6c75ed0fix(deps): update dependency conventional-changelog-conventionalcommits to v4...4c938a2fix(deps): update dependency conventional-changelog to v3.1.25 (#865)fd05681chore(master): release 9.4.0 (#864)e510623build: run tests on labeleceaedffeat: add .cjs config file (#717)366a498build: update publish configuration095e1ebtest: updates .gitignore test to check against a default package and bump fil...fb3f3fachore: Move to native fs.access, removes fs-access package. (#840)Maintainer changes
This version was pushed to npm by oss-bot, a new releaser for standard-version since your current version.
Updates
inifrom 1.3.7 to 1.3.8Commits
a2c5da81.3.8af5c6bbDo not use Object.create(null)8b648a1don't test where our devdeps don't even workUpdates
minimatchfrom 3.0.4 to 3.1.2Commits
699c4593.1.22f2b5fffix: trim pattern25d7c0d3.1.155dda29fix: treat nocase:true as always having magic5e1fb8d3.1.0f8145c5Add 'allowWindowsEscape' option570e8b1add publishConfig for v3 publishes5b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' optionUpdates
minimistfrom 0.0.10 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
dot-propfrom 3.0.0 to 5.3.0Release notes
Sourced from dot-prop's releases.
Commits
614e74a5.3.024916ffMake.delete()return a boolean (#66)be84f79Simplify unit tests (#67)282e9845.2.04801a63Meta tweaksa6be343Allow specifyingundefinedas the object for.get()and.has()(#58)0efd03e5.1.13039c8cPrevent setting/getting some problematic path componentse0f8abfTypeScript - Fix return type for undefined defaultValue (#56)b8b71245.1.0Updates
handlebarsfrom 4.5.3 to 4.7.8Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
... (truncated)
Commits
8dc3d25v4.7.8668c4fbFix browser tests in CI pipelinec65c6ccTest on Node 183d3796cMake library compatible with workers075b354Fix sync issue with npm lock-file30dbf04Fix compiling of each block params in strict modee3a5448Fix bundler issue with webpack 58e23642Fix integration-tests issue with npm >= 788ac068use https instead of git for mustache submodulec68bc08Fix typoMaintainer changes
This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.
Updates
lodashfrom 4.17.19 to 4.17.21Commits
f299b52Bump to v4.17.21c4847ebImprove performance oftoNumber,trimandtrimEndon large input strings3469357Prevent command injection through_.template'svariableoptionded9bc6Bump to v4.17.20.63150efDocumentation fixes.00f0f62test.js: Remove trailing comma.846e434Temporarily use a custom fork oflodash-cli.5d046f3Re-enable Travis tests on4.17branch.aa816b3Remove/npm-package.d7fbc52Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
trim-newlinesfrom 1.0.0 to 3.0.1Release notes
Sourced from trim-newlines's releases.
Commits
Updates
yargs-parserfrom 13.1.2 to 20.2.9Changelog
Sourced from yargs-parser's changelog.