[Snyk] Upgrade: , , core-js, eslint-plugin-react-refresh, react-router-dom, ts-jest, vite

[qdraw]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@types/react
from 18.3.3 to 18.3.4 | 1 version ahead of your current version | 24 days ago
on 2024-08-20
@types/node
from 20.14.15 to 20.16.1 | 3 versions ahead of your current version | a month ago
on 2024-08-19
core-js
from 3.38.0 to 3.38.1 | 1 version ahead of your current version | 25 days ago
on 2024-08-20
eslint-plugin-react-refresh
from 0.4.9 to 0.4.11 | 2 versions ahead of your current version | 23 days ago
on 2024-08-22
react-router-dom
from 6.26.0 to 6.26.1 | 2 versions ahead of your current version | a month ago
on 2024-08-15
ts-jest
from 29.2.4 to 29.2.5 | 1 version ahead of your current version | 22 days ago
on 2024-08-23
vite
from 5.4.0 to 5.4.2 | 2 versions ahead of your current version | 25 days ago
on 2024-08-20

Release notes

Package name: @types/react

• 18.3.4 - 2024-08-20
• 18.3.3 - 2024-05-23

from @types/react GitHub release notes

Package name: @types/node

• 20.16.1 - 2024-08-19
• 20.16.0 - 2024-08-18
• 20.15.0 - 2024-08-16
• 20.14.15 - 2024-08-09

from @types/node GitHub release notes

Package name: core-js

• 3.38.1 - 2024-08-20
  
  • Changes v3.38.0...v3.38.1
  • Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @ slowcheetah
  • Some stylistic changes and minor optimizations
  • Compat data improvements:
    • Iterator helpers proposal methods marked as shipped from FF131
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
    • RegExp.escape marked as shipped from Bun 1.1.22
    • Promise.try marked as shipped from Bun 1.1.22
    • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
    • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
    • Added Opera Android 84 compat data mapping
• 3.38.0 - 2024-08-04
  
  • Changes v3.37.1...v3.38.0
  • RegExp.escape proposal:
    • Built-ins:
      • RegExp.escape
    • Moved to stage 3, June 2024 and July 2024 TC39 meetings
    • Updated the way of escaping, regex-escaping/77
    • Throw an error on non-strings, regex-escaping/58
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Promise.try proposal:
    • Built-ins:
      • Promise.try
    • Moved to stage 3, June 2024 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Uint8Array to / from base64 and hex stage 3 proposal:
    • Built-ins:
      • Uint8Array.fromBase64
      • Uint8Array.fromHex
      • Uint8Array.prototype.setFromBase64
      • Uint8Array.prototype.setFromHex
      • Uint8Array.prototype.toBase64
      • Uint8Array.prototype.toHex
    • Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
    • Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
    • Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
    • Added throwing a TypeError on arrays backed by detached buffers
    • Unconditional forced replacement changed to feature detection
  • Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulop
  • Improved some cases of environment detection
  • Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
  • Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
  • Some minor optimizations
  • Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
  • Compat data improvements:
    • Added Safari 18.0 compat data:
      • Fixed Object.groupBy and Map.groupBy to work for non-objects
      • Fixed throwing a RangeError if Set methods are called on an object with negative size property
      • Fixed Set.prototype.symmetricDifference to call this.has in each iteration
      • Fixed Array.fromAsync to not call the Array constructor twice
      • Added URL.parse
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
    • Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
    • Promise.try added and marked as supported from V8 ~ Chromium 128
    • Added Deno 1.44 and 1.45 compat data mapping
    • self descriptor is broken in Deno 1.45.3 (again)
    • Added Electron 32 and 33 compat data mapping
    • Added Opera Android 83 compat data mapping
    • Added Samsung Internet 27 compat data mapping
    • Added Oculus Quest Browser 34 compat data mapping

from core-js GitHub release notes

Package name: eslint-plugin-react-refresh

• 0.4.11 - 2024-08-22
  
  • Ignore type exports (ex. export type foo = string;) (fixes #47)
• 0.4.10 - 2024-08-20
  
  • Support function Foo() {}; export default React.memo(Foo) (#46) (thanks @ SukkaW!)
• 0.4.9 - 2024-07-21
  
  • Support function Foo() {}; export default memo(Foo) (fixes #44) (thanks @ SukkaW!)

from eslint-plugin-react-refresh GitHub release notes

Package name: react-router-dom

• 6.26.1 - 2024-08-15
  

  react-router-native@6.26.1

• 6.26.1-pre.0 - 2024-08-14
  

  react-router-native@6.26.1-pre.0

• 6.26.0 - 2024-08-01

from react-router-dom GitHub release notes

Package name: ts-jest

• 29.2.5 - 2024-08-23
  

  Please refer to CHANGELOG.md for details.

• 29.2.4 - 2024-08-01
  

  Please refer to CHANGELOG.md for details.

from ts-jest GitHub release notes

Package name: vite

• 5.4.2 - 2024-08-20
  

  Please refer to CHANGELOG.md for details.

• 5.4.1 - 2024-08-15
  

  Please refer to CHANGELOG.md for details.

• 5.4.0 - 2024-08-07
  

  Please refer to CHANGELOG.md for details.

from vite GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[qdraw]

Conflicting files
starsky/starsky/clientapp/package-lock.json