forked from snyk/cli
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): bump the npm_and_yarn group across 7 directories with 16 updates #110
Open
dependabot
wants to merge
22
commits into
main
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-87183ad8b6
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…quirements/update-dependencies/workspaces/app-with-constraints/lib/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987
…0 updates Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` | | [semver](https://github.com/npm/node-semver) | `6.3.1` | `7.6.3` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.4.3` | | [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.21.2` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.5` | `6.0.6` | | [webpack](https://github.com/webpack/webpack) | `5.54.0` | `5.97.1` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.24.0` | `7.26.4` | | [nanoid](https://github.com/ai/nanoid) | `3.1.25` | `3.3.8` | | [ws](https://github.com/websockets/ws) | `8.17.0` | `8.18.0` | Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: [debug](https://github.com/debug-js/debug) and [minimatch](https://github.com/isaacs/minimatch). Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: [micromatch](https://github.com/micromatch/micromatch), [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx). Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/npm-package-shrinkwrap directory: [semver](https://github.com/npm/node-semver), [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [rewire](https://github.com/jhnns/rewire). Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/npm-package-with-dist-tag-subdependency directory: [debug](https://github.com/debug-js/debug), [micromatch](https://github.com/micromatch/micromatch), [cookie](https://github.com/jshttp/cookie) and [cdktf-cli](https://github.com/hashicorp/terraform-cdk/tree/HEAD/packages/cdktf-cli). Bumps the npm_and_yarn group with 5 updates in the /test/acceptance/workspaces/npm-package-with-overrides directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [ip](https://github.com/indutny/node-ip) | `1.1.8` | `removed` | | [pac-resolver](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/pac-resolver) | `7.0.0` | `7.0.1` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.3` | Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: [debug](https://github.com/debug-js/debug) and [minimatch](https://github.com/isaacs/minimatch). Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-v2 directory: [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: [debug](https://github.com/debug-js/debug), [node-fetch](https://github.com/node-fetch/node-fetch) and [y18n](https://github.com/yargs/y18n). Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-workspaces directory: [minimatch](https://github.com/isaacs/minimatch), [node-fetch](https://github.com/node-fetch/node-fetch), [y18n](https://github.com/yargs/y18n) and [node-uuid](https://github.com/broofa/node-uuid). Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/yarn-workspaces-v2 directory: [minimatch](https://github.com/isaacs/minimatch), [node-fetch](https://github.com/node-fetch/node-fetch) and [node-uuid](https://github.com/broofa/node-uuid). Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/yarn-workspaces-v2-resolutions directory: [node-fetch](https://github.com/node-fetch/node-fetch) and [node-uuid](https://github.com/broofa/node-uuid). Bumps the npm_and_yarn group with 6 updates in the /ts-binary-wrapper directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.20.13` | `7.26.4` | | [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `removed` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `7.36.0` | `7.120.2` | Updates `debug` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `semver` from 6.3.1 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.1...v7.6.3) Updates `tar` from 6.2.1 to 7.4.3 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.4.3) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `express` from 4.17.1 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.17.1...4.21.2) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `express` from 4.17.1 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.17.1...4.21.2) Updates `webpack` from 5.54.0 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.54.0...v5.97.1) Updates `@babel/traverse` from 7.24.0 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `cookie` from 0.4.0 to 0.4.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](https://github.com/jshttp/cookie/commits) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `send` from 0.17.1 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.1...0.19.0) Updates `nanoid` from 3.1.25 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.25...3.3.8) Updates `serve-static` from 1.14.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.1...v1.16.2) Updates `ws` from 8.17.0 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.17.0...8.18.0) Updates `debug` from 3.2.5 to 3.2.7 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `@babel/traverse` from 7.23.5 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `markdown-to-jsx` from 7.3.2 to 7.7.2 - [Release notes](https://github.com/quantizor/markdown-to-jsx/releases) - [Changelog](https://github.com/quantizor/markdown-to-jsx/blob/main/CHANGELOG.md) - [Commits](quantizor/markdown-to-jsx@v7.3.2...v7.7.2) Updates `semver` from 5.5.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.1...v7.6.3) Updates `cross-spawn` from 5.1.0 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `rewire` from 4.0.1 to 7.0.0 - [Release notes](https://github.com/jhnns/rewire/releases) - [Changelog](https://github.com/jhnns/rewire/blob/master/CHANGELOG.md) - [Commits](jhnns/rewire@v4.0.1...v7.0.0) Updates `ansi-regex` from 2.1.1 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v5.0.1) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `debug` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Removes `cookie` Updates `cdktf-cli` from 0.20.3 to 0.20.10 - [Release notes](https://github.com/hashicorp/terraform-cdk/releases) - [Changelog](https://github.com/hashicorp/terraform-cdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/terraform-cdk/commits/v0.20.10/packages/cdktf-cli) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `yargs-parser` from 18.1.3 to 20.2.9 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v18.1.3...yargs-parser-v20.2.9) Updates `node-fetch` from 2.6.7 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.17.0...8.18.0) Updates `y18n` from 4.0.3 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `debug` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Removes `ip` Updates `pac-resolver` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/TooTallNate/proxy-agents/releases) - [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/pac-resolver/CHANGELOG.md) - [Commits](https://github.com/TooTallNate/proxy-agents/commits/pac-resolver@7.0.1/packages/pac-resolver) Updates `socks` from 2.7.1 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](JoshGlazebrook/socks@2.7.1...2.8.3) Updates `debug` from 3.2.5 to 3.2.7 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `lodash` from 4.17.0 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.0...4.17.21) Updates `debug` from 4.1.1 to 4.3.1 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `node-fetch` from 2.6.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `node-fetch` from 2.6.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `node-uuid` from 1.3.0 to 1.4.8 - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `node-fetch` from 2.2.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7) Updates `node-uuid` from 1.3.0 to 1.4.8 - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) Updates `node-fetch` from 2.2.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7) Updates `node-uuid` from 1.3.0 to 1.4.8 - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) Updates `debug` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.3.4...4.4.0) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `@babel/traverse` from 7.20.13 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Removes `cookie` Updates `@sentry/node` from 7.36.0 to 7.120.2 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.2/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.36.0...7.120.2) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: tar dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-to-jsx dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rewire dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cdktf-cli dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pac-resolver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-uuid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-uuid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-uuid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sentry/node" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
…d_yarn-79272645f4
…lnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DICER-2311764
….json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-KERBEROS-568900 - https://snyk.io/vuln/SNYK-JS-MONGOOSE-5777721
…cy/package.json & test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
…lnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987
Bumps the go_modules group with 2 updates in the /cliv2 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa). Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.1 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.12.0...v5.13.1) Updates `github.com/open-policy-agent/opa` from 0.51.0 to 0.68.0 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v0.51.0...v0.68.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/open-policy-agent/opa dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
…o_modules-b8cfc1d416 chore(deps): bump the go_modules group across 1 directory with 2 updates
… updates Bumps the npm_and_yarn group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `7.34.0` | `8.48.0` | | [@snyk/snyk-cocoapods-plugin](https://github.com/snyk/snyk-cocoapods-plugin) | `2.5.3` | `2.6.0` | | [snyk-docker-plugin](https://github.com/snyk/snyk-docker-plugin) | `6.14.0` | `6.15.2` | | [snyk-python-plugin](https://github.com/snyk/snyk-python-plugin) | `2.3.0` | `2.4.1` | | [snyk-sbt-plugin](https://github.com/snyk/snyk-sbt-plugin) | `2.18.1` | `2.19.0` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `8.17.1` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.6` | `7.0.5` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `1.8.0` | `1.9.0` | | [got](https://github.com/sindresorhus/got) | `11.8.2` | `11.8.6` | Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: [@sentry/node](https://github.com/getsentry/sentry-javascript), [ms](https://github.com/vercel/ms), [js-yaml](https://github.com/nodeca/js-yaml) and [snyk](https://github.com/snyk/snyk). Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: [acorn](https://github.com/acornjs/acorn). Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-lock-v2-vuln directory: [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: [@sentry/node](https://github.com/getsentry/sentry-javascript), [ms](https://github.com/vercel/ms), [js-yaml](https://github.com/nodeca/js-yaml) and [snyk](https://github.com/snyk/snyk). Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-package directory: [debug](https://github.com/debug-js/debug). Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: [snyk](https://github.com/snyk/snyk). Updates `@sentry/node` from 7.34.0 to 8.48.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.34.0...8.48.0) Updates `@snyk/snyk-cocoapods-plugin` from 2.5.3 to 2.6.0 - [Release notes](https://github.com/snyk/snyk-cocoapods-plugin/releases) - [Commits](snyk/snyk-cocoapods-plugin@v2.5.3...v2.6.0) Updates `snyk-docker-plugin` from 6.14.0 to 6.15.2 - [Release notes](https://github.com/snyk/snyk-docker-plugin/releases) - [Commits](snyk/snyk-docker-plugin@v6.14.0...v6.15.2) Updates `snyk-python-plugin` from 2.3.0 to 2.4.1 - [Release notes](https://github.com/snyk/snyk-python-plugin/releases) - [Changelog](https://github.com/snyk/snyk-python-plugin/blob/main/.releaserc) - [Commits](snyk/snyk-python-plugin@v2.3.0...v2.4.1) Updates `snyk-sbt-plugin` from 2.18.1 to 2.19.0 - [Release notes](https://github.com/snyk/snyk-sbt-plugin/releases) - [Commits](snyk/snyk-sbt-plugin@v2.18.1...v2.19.0) Updates `ajv` from 6.12.6 to 8.17.1 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v8.17.1) Updates `cross-spawn` from 6.0.6 to 7.0.5 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.6...v7.0.5) Updates `cookie` from 0.4.2 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.2...v0.7.1) Updates `path-to-regexp` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v1.8.0...v1.9.0) Updates `got` from 11.8.2 to 11.8.6 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v11.8.2...v11.8.6) Updates `@sentry/node` from 7.120.2 to 7.120.3 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.34.0...8.48.0) Updates `ms` from 2.1.1 to 2.1.3 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@2.1.1...2.1.3) Updates `js-yaml` from 3.12.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.12.0...3.14.1) Updates `snyk` from 1.1294.3 to 1.1295.0 - [Release notes](https://github.com/snyk/snyk/releases) - [Commits](snyk/cli@v1.1294.3...v1.1295.0) Updates `acorn` from 8.11.2 to 8.14.0 - [Commits](acornjs/acorn@8.11.2...8.14.0) Updates `lodash` from 4.17.0 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.0...4.17.21) Updates `@sentry/node` from 7.120.2 to 7.120.3 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@7.34.0...8.48.0) Updates `ms` from 2.1.1 to 2.1.3 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@2.1.1...2.1.3) Updates `js-yaml` from 3.12.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.12.0...3.14.1) Updates `snyk` from 1.1294.3 to 1.1295.0 - [Release notes](https://github.com/snyk/snyk/releases) - [Commits](snyk/cli@v1.1294.3...v1.1295.0) Updates `debug` from 2.2.0 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.2.0...2.6.9) Updates `ms` from 0.7.1 to 2.0.0 - [Release notes](https://github.com/vercel/ms/releases) - [Commits](vercel/ms@2.1.1...2.1.3) Updates `snyk` from 1.320.0 to 1.1295.0 - [Release notes](https://github.com/snyk/snyk/releases) - [Commits](snyk/cli@v1.1294.3...v1.1295.0) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@snyk/snyk-cocoapods-plugin" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: snyk-docker-plugin dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: snyk-python-plugin dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: snyk-sbt-plugin dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sentry/node" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ms dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: snyk dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@sentry/node" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ms dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: snyk dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ms dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: snyk dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Pull requests that update a dependency file
javascript
Pull requests that update Javascript code
labels
Jan 12, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
dependencies
Pull requests that update a dependency file
javascript
Pull requests that update Javascript code
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 9 updates in the / directory:
7.34.0
8.48.0
2.5.3
2.6.0
6.14.0
6.15.2
2.3.0
2.4.1
2.18.1
2.19.0
6.12.6
8.17.1
6.0.6
7.0.5
1.8.0
1.9.0
11.8.2
11.8.6
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: @sentry/node, ms, js-yaml and snyk.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: acorn.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-lock-v2-vuln directory: lodash.
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: @sentry/node, ms, js-yaml and snyk.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-package directory: debug.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: snyk.
Updates
@sentry/node
from 7.34.0 to 8.48.0Release notes
Sourced from
@sentry/node
's releases.... (truncated)
Changelog
Sourced from
@sentry/node
's changelog.... (truncated)
Commits
405ceb4
release: 8.48.08e2ed6f
meta(changelog): Update changelog for 8.48.0 (#14919)8b03e0b
fix(v8/feedback): Avoid lazy loading code forsyncFeedbackIntegration
(#14918)77cabfb
fix(v8/react): UseSet
as theallRoutes
container. (#14878) (#14884)6fa3797
feat(v8/core): AddnormalizedRequest
tosamplingContext
(#14903)845b7aa
fix(v8/react): Improve handling of routes nested under path="/" (#14897)dbd3296
feat(v8/node): AddopenTelemetrySpanProcessors
option (#14853)960dd9b
fix(v8/node): Ensure express requests are properly handled (#14851)576a1ad
fix(v8/core): Use consistentcontinueTrace
implementation in core (#14819)75ca8b9
meta(changelog): Update changelog for 8.48.0 (#14844)Updates
@snyk/snyk-cocoapods-plugin
from 2.5.3 to 2.6.0Release notes
Sourced from
@snyk/snyk-cocoapods-plugin
's releases.Commits
9ae6c4f
Merge pull request #38 from snyk/fix/upgrade-shescape-to-2.1.01f8e8b3
Merge pull request #39 from snyk/feat/quality-gates6ff0697
feat: add prodsec/security_scans7dd23c0
feat: add prodsec/security_scans31ffef6
chore(ci): drop validation of EOL node versionsdb7d69f
fix: upgrade shescape to v2.1.0e5fb2be
chore: declare node version4b6dd6b
Merge pull request #37 from snyk/chore/asset-classification-20230925cd0ef8f
chore: asset classificationdc32e55
Merge pull request #34 from snyk/feat/secrets-scanningUpdates
snyk-docker-plugin
from 6.14.0 to 6.15.2Release notes
Sourced from snyk-docker-plugin's releases.
Commits
c26df62
Merge pull request #637 from snyk/fix_common_dir_bug125adfc
fix: common extracted dir bugaa046a2
Merge pull request #634 from snyk/update-app-files-filter9183d5b
fix: filter usr dir from node app files0ee88fb
Merge pull request #629 from snyk/collect_application_files_no_javaa5a3aa7
feat: collect node and python app files hierarchy6f43300
Merge pull request #633 from snyk/gitleaks_ignore_tests078ea2a
chore: ignore test files in gitleaksUpdates
snyk-python-plugin
from 2.3.0 to 2.4.1Release notes
Sourced from snyk-python-plugin's releases.
Commits
e8b6e84
fix: [OSM-2206] skip unresolved local packages (#255)b42e5fc
feat: [OSM-2206] support for local whl files req specifier (#254)Updates
snyk-sbt-plugin
from 2.18.1 to 2.19.0Release notes
Sourced from snyk-sbt-plugin's releases.
Commits
13f224d
Merge pull request #144 from snyk/feat/quality-gatesf5fb6f2
feat: add prodsec/security_scansUpdates
ajv
from 6.12.6 to 8.17.1Release notes
Sourced from ajv's releases.
... (truncated)
Commits
9050ba1
bump version to 8.17.1 (#2472)f7831b4
fixes #2217 - clarify custom keyword naming (#2457)a523784
fix: changes for@typescript-eslint/array-type
rule (#2467)595fe58
feat: add test for encoded refs and bump fast-uri (#2449)a18641e
Update modifying-data.md - fix broken strict-mode link (#2459)650c7f6
Fix grammatical typo in managing-schemas.md (#2305)603f63b
docs: refactor to improve legibility (#2432)8bccdc4
docs: clarify behaviour of addVocabulary (#2454)85dafb0
fix: ignore new eslint error (#2455)80c014f
Revert "Revert fast-uri change (#2444)" (#2448)Updates
cross-spawn
from 6.0.6 to 7.0.5Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
0852683
chore(release): 7.0.5640d391
fix: fix escaping bug introduced by backtrackingbff0c87
chore: remove codecova7c6abc
chore: replace travis with github workflows9b9246e
chore(release): 7.0.45ff3a07
fix: disable regexp backtracking (#160)9521e2d
chore: fix tests in recent node js versions97ded39
chore: convert package lockd52b6b9
chore: remove unused argument (#156)5d84384
chore: add travis jobs on ppc64le (#142)Updates
cookie
from 0.4.2 to 0.7.1Release notes
Sourced from cookie's releases.
Commits
cf4658f
0.7.16a8b8f5
Allow leading dot for domain (#174)58015c0
Remove more code and perf wins (#172)ab057d6
0.7.05f02ca8
Migrate history to GitHub releasesa5d591c
Migrate history to GitHub releases51968f9
Skip isNaN9e7ca51
perf(parse): cache length, return early (#144)d6f39b0
Fix tests for old node6bb701f
Remove failing scorecardMaintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
path-to-regexp
from 1.8.0 to 1.9.0Release notes
Sourced from path-to-regexp's releases.
Commits
c75eb10
1.9.0925ac8e
Add backtrack protection to 1.x release (#320)32a14b0
Fixre.exec('/test/route')
result (#267)Updates
got
from 11.8.2 to 11.8.6Release notes
Sourced from got's releases.
Commits
2b1482c
11.8.62d1497e
Destroy request object after successful response (#2187)5e17bb7
11.8.5bce8ce7
Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc8ced192
Fix build670eb04
11.8.420f29fe
Backport #1543: Initialize globalResponse in case of ignored HTTPError (#2017)0da732f
11.8.39463bb6
Bump cacheable-request dependency (#1921)0e167b8
HTTPError code set to 'HTTPError' #1711 (#1739)Updates
@sentry/node
from 7.120.2 to 7.120.3Release notes
Sourced from
@sentry/node
's releases.... (truncated)
Changelog
Sourced from
@sentry/node
's changelog.... (truncated)
Commits
405ceb4
release: 8.48.08e2ed6f
meta(changelog): Update changelog for 8.48.0 (#14919)8b03e0b
fix(v8/feedback): Avoid lazy loading code forsyncFeedbackIntegration
(#14918)77cabfb
fix(v8/react): UseSet
as theallRoutes
container. (#14878) (#14884)6fa3797
feat(v8/core): AddnormalizedRequest
tosamplingContext
(#14903)845b7aa
fix(v8/react): Improve handling of routes nested under path="/" (#14897)dbd3296
feat(v8/node): AddopenTelemetrySpanProcessors
option (#14853)960dd9b
fix(v8/node): Ensure express requests are properly handled (#14851)576a1ad
fix(v8/core): Use consistentcontinueTrace
implementation in core (#14819)75ca8b9
meta(changelog): Update changelog for 8.48.0 (#14844)Updates
ms
from 2.1.1 to 2.1.3Release notes
Sourced from ms's releases.
Commits
1c6264b
2.1.382495ad
Use GitHub Actions CI (#154)1a13a88
Run prettier 2.x (#153)1048042
Add prettier as a dev dependency (#135)f2bfb40
Rename zeit to vercel (#151)adf1eb2
Bump eslint from 4.12.1 to 4.18.2 (#122)