Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the npm_and_yarn group across 7 directories with 16 updates #110

Open
wants to merge 22 commits into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 12, 2025

Bumps the npm_and_yarn group with 9 updates in the / directory:

Package From To
@sentry/node 7.34.0 8.48.0
@snyk/snyk-cocoapods-plugin 2.5.3 2.6.0
snyk-docker-plugin 6.14.0 6.15.2
snyk-python-plugin 2.3.0 2.4.1
snyk-sbt-plugin 2.18.1 2.19.0
ajv 6.12.6 8.17.1
cross-spawn 6.0.6 7.0.5
path-to-regexp 1.8.0 1.9.0
got 11.8.2 11.8.6

Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: @sentry/node, ms, js-yaml and snyk.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: acorn.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-lock-v2-vuln directory: lodash.
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: @sentry/node, ms, js-yaml and snyk.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-package directory: debug.
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: snyk.

Updates @sentry/node from 7.34.0 to 8.48.0

Release notes

Sourced from @​sentry/node's releases.

8.48.0

Deprecations

  • feat(v8/core): Deprecate getDomElement method (#14799)

    Deprecates getDomElement. There is no replacement.

Other changes

  • fix(nestjs/v8): Use correct main/module path in package.json (#14791)
  • fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#14823)
  • fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#14825)
  • fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#14828)
  • fix(aws-lambda): Remove version suffix from lambda layer (#14843)
  • fix(v8/node): Ensure express requests are properly handled (#14851)
  • feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)

Work in this release was contributed by @​arturovt. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.85 KB
@​sentry/browser (incl. Tracing, Replay) 73.09 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.48 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.4 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.34 KB
@​sentry/browser (incl. Feedback) 39.5 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.69 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.66 KB
@​sentry/vue 27.56 KB
@​sentry/vue (incl. Tracing) 37.69 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.49 KB
CDN Bundle (incl. Tracing) 37.56 KB
CDN Bundle (incl. Tracing, Replay) 72.75 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.11 KB
CDN Bundle - uncompressed 71.93 KB
CDN Bundle (incl. Tracing) - uncompressed 111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.5 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.48.0

Deprecations

  • feat(v8/core): Deprecate getDomElement method (#14799)

    Deprecates getDomElement. There is no replacement.

Other changes

  • fix(nestjs/v8): Use correct main/module path in package.json (#14791)
  • fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#14823)
  • fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#14825)
  • fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#14828)
  • fix(aws-lambda): Remove version suffix from lambda layer (#14843)
  • fix(v8/node): Ensure express requests are properly handled (#14851)
  • feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)

Work in this release was contributed by @​arturovt. Thank you for your contribution!

8.47.0

  • feat(v8/core): Add updateSpanName helper function (#14736)
  • feat(v8/node): Do not overwrite prisma db.system in newer Prisma versions (#14772)
  • feat(v8/node/deps): Bump @​prisma/instrumentation from 5.19.1 to 5.22.0 (#14755)
  • feat(v8/replay): Mask srcdoc iframe contents per default (#14779)
  • ref(v8/nextjs): Fix typo in source maps deletion warning (#14776)

Work in this release was contributed by @​aloisklink and @​benjick. Thank you for your contributions!

8.46.0

  • feat: Allow capture of more than 1 ANR event [v8] (#14713)
  • feat(node): Detect Railway release name [v8] (#14714)
  • fix: Normalise ANR debug image file paths if appRoot was supplied [v8] (#14709)
  • fix(nuxt): Remove build config from tsconfig (#14737)

Work in this release was contributed by @​conor-ob. Thank you for your contribution!

8.45.1

  • fix(feedback): Return when the sendFeedback promise resolves (#14683)

Work in this release was contributed by @​antonis. Thank you for your contribution!

... (truncated)

Commits
  • 405ceb4 release: 8.48.0
  • 8e2ed6f meta(changelog): Update changelog for 8.48.0 (#14919)
  • 8b03e0b fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)
  • 77cabfb fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • 6fa3797 feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • 845b7aa fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • dbd3296 feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • 960dd9b fix(v8/node): Ensure express requests are properly handled (#14851)
  • 576a1ad fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • 75ca8b9 meta(changelog): Update changelog for 8.48.0 (#14844)
  • Additional commits viewable in compare view

Updates @snyk/snyk-cocoapods-plugin from 2.5.3 to 2.6.0

Release notes

Sourced from @​snyk/snyk-cocoapods-plugin's releases.

v2.6.0

2.6.0 (2024-09-16)

Bug Fixes

  • upgrade shescape to v2.1.0 (db7d69f)

Features

  • add prodsec/security_scans (6ff0697)
  • add prodsec/security_scans (7dd23c0)
  • add secrets scanning (e70db4d)
Commits
  • 9ae6c4f Merge pull request #38 from snyk/fix/upgrade-shescape-to-2.1.0
  • 1f8e8b3 Merge pull request #39 from snyk/feat/quality-gates
  • 6ff0697 feat: add prodsec/security_scans
  • 7dd23c0 feat: add prodsec/security_scans
  • 31ffef6 chore(ci): drop validation of EOL node versions
  • db7d69f fix: upgrade shescape to v2.1.0
  • e5fb2be chore: declare node version
  • 4b6dd6b Merge pull request #37 from snyk/chore/asset-classification-20230925
  • cd0ef8f chore: asset classification
  • dc32e55 Merge pull request #34 from snyk/feat/secrets-scanning
  • Additional commits viewable in compare view

Updates snyk-docker-plugin from 6.14.0 to 6.15.2

Release notes

Sourced from snyk-docker-plugin's releases.

v6.15.2

6.15.2 (2025-01-02)

Bug Fixes

  • common extracted dir bug (125adfc)

v6.15.1

6.15.1 (2024-12-25)

Bug Fixes

  • filter usr dir from node app files (9183d5b)

v6.15.0

6.15.0 (2024-12-23)

Features

  • collect node and python app files hierarchy (a5a3aa7)
Commits
  • c26df62 Merge pull request #637 from snyk/fix_common_dir_bug
  • 125adfc fix: common extracted dir bug
  • aa046a2 Merge pull request #634 from snyk/update-app-files-filter
  • 9183d5b fix: filter usr dir from node app files
  • 0ee88fb Merge pull request #629 from snyk/collect_application_files_no_java
  • a5a3aa7 feat: collect node and python app files hierarchy
  • 6f43300 Merge pull request #633 from snyk/gitleaks_ignore_tests
  • 078ea2a chore: ignore test files in gitleaks
  • See full diff in compare view

Updates snyk-python-plugin from 2.3.0 to 2.4.1

Release notes

Sourced from snyk-python-plugin's releases.

v2.4.1

2.4.1 (2025-01-09)

Bug Fixes

  • [OSM-2206] skip unresolved local packages (#255) (e8b6e84)

v2.4.0

2.4.0 (2024-12-23)

Features

  • [OSM-2206] support for local whl files req specifier (#254) (b42e5fc)
Commits

Updates snyk-sbt-plugin from 2.18.1 to 2.19.0

Release notes

Sourced from snyk-sbt-plugin's releases.

v2.19.0

2.19.0 (2024-06-05)

Features

  • add prodsec/security_scans (f5fb6f2)
Commits

Updates ajv from 6.12.6 to 8.17.1

Release notes

Sourced from ajv's releases.

v8.17.1

What's Changed

Full Changelog: ajv-validator/ajv@v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (ajv-validator/ajv#2444)" by @​gurgunday in ajv-validator/ajv#2448 fix: ignore new eslint error for @​typescript-eslint/no-extraneous-class by @​jasoniangreen in ajv-validator/ajv#2455 docs: clarify behaviour of addVocabulary by @​jasoniangreen in ajv-validator/ajv#2454 docs: refactor to improve legibility by @​blottn in ajv-validator/ajv#2432 Fix grammatical typo in managing-schemas.md by @​wetneb in ajv-validator/ajv#2305 docs: Fix broken strict-mode link by @​alexanderjsx in ajv-validator/ajv#2459 feat: add test for encoded refs and bump fast-uri by @​jasoniangreen in ajv-validator/ajv#2449 fix: changes for @​typescript-eslint/array-type rule by @​jasoniangreen in ajv-validator/ajv#2467 fixes ajv-validator/ajv#2217 - clarify custom keyword naming by @​jasoniangreen in ajv-validator/ajv#2457

v8.17.0

What's Changed

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

New Contributors

Full Changelog: ajv-validator/ajv@v8.16.0...v8.17.0

v8.16.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.15.0...v8.16.0

... (truncated)

Commits

Updates cross-spawn from 6.0.6 to 7.0.5

Changelog

Sourced from cross-spawn's changelog.

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

7.0.3 (2020-05-25)

Bug Fixes

  • detect path key based on correct environment (#133) (159e7e9)

7.0.2 (2020-04-04)

Bug Fixes

  • fix worker threads in Node >=11.10.0 (#132) (6c5b4f0)

7.0.1 (2019-10-07)

Bug Fixes

7.0.0 (2019-09-03)

⚠ BREAKING CHANGES

  • drop support for Node.js < 8

  • drop support for versions below Node.js 8 (#125) (16feb53)

6.0.5 (2018-03-02)

Bug Fixes

... (truncated)

Commits
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • 9521e2d chore: fix tests in recent node js versions
  • 97ded39 chore: convert package lock
  • d52b6b9 chore: remove unused argument (#156)
  • 5d84384 chore: add travis jobs on ppc64le (#142)
  • Additional commits viewable in compare view

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates path-to-regexp from 1.8.0 to 1.9.0

Release notes

Sourced from path-to-regexp's releases.

Fix backtracking in 1.x

Fixed

  • Add backtrack protection to 1.x release (#320) 925ac8e
  • Fix re.exec(&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);/test/route&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);) result (#267) 32a14b0

pillarjs/path-to-regexp@v1.8.0...v1.9.0

Commits

Updates got from 11.8.2 to 11.8.6

Release notes

Sourced from got's releases.

v11.8.6

  • Destroy request object after successful response

sindresorhus/got@v11.8.5...v11.8.6

v11.8.5

sindresorhus/got@v11.8.4...v11.8.5

v11.8.3

  • Bump cacheable-request dependency (#1921) 9463bb6
  • Fix HTTPError missing .code property (#1739) 0e167b8

sindresorhus/got@v11.8.2...v11.8.3

Commits

Updates @sentry/node from 7.120.2 to 7.120.3

Release notes

Sourced from @​sentry/node's releases.

8.48.0

Deprecations

  • feat(v8/core): Deprecate getDomElement method (#14799)

    Deprecates getDomElement. There is no replacement.

Other changes

  • fix(nestjs/v8): Use correct main/module path in package.json (#14791)
  • fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#14823)
  • fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#14825)
  • fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#14828)
  • fix(aws-lambda): Remove version suffix from lambda layer (#14843)
  • fix(v8/node): Ensure express requests are properly handled (#14851)
  • feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)

Work in this release was contributed by @​arturovt. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 23.29 KB
@​sentry/browser - with treeshaking flags 21.96 KB
@​sentry/browser (incl. Tracing) 35.85 KB
@​sentry/browser (incl. Tracing, Replay) 73.09 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.48 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 77.4 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 89.34 KB
@​sentry/browser (incl. Feedback) 39.5 KB
@​sentry/browser (incl. sendFeedback) 27.89 KB
@​sentry/browser (incl. FeedbackAsync) 32.69 KB
@​sentry/react 25.96 KB
@​sentry/react (incl. Tracing) 38.66 KB
@​sentry/vue 27.56 KB
@​sentry/vue (incl. Tracing) 37.69 KB
@​sentry/svelte 23.45 KB
CDN Bundle 24.49 KB
CDN Bundle (incl. Tracing) 37.56 KB
CDN Bundle (incl. Tracing, Replay) 72.75 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 78.11 KB
CDN Bundle - uncompressed 71.93 KB
CDN Bundle (incl. Tracing) - uncompressed 111.42 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 225.5 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.48.0

Deprecations

  • feat(v8/core): Deprecate getDomElement method (#14799)

    Deprecates getDomElement. There is no replacement.

Other changes

  • fix(nestjs/v8): Use correct main/module path in package.json (#14791)
  • fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • fix(v8/node): Correctly resolve debug IDs for ANR events with custom appRoot (#14823)
  • fix(v8/node): Ensure NODE_OPTIONS is not passed to worker threads (#14825)
  • fix(v8/angular): Fall back to element tagName when name is not provided to TraceDirective (#14828)
  • fix(aws-lambda): Remove version suffix from lambda layer (#14843)
  • fix(v8/node): Ensure express requests are properly handled (#14851)
  • feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)

Work in this release was contributed by @​arturovt. Thank you for your contribution!

8.47.0

  • feat(v8/core): Add updateSpanName helper function (#14736)
  • feat(v8/node): Do not overwrite prisma db.system in newer Prisma versions (#14772)
  • feat(v8/node/deps): Bump @​prisma/instrumentation from 5.19.1 to 5.22.0 (#14755)
  • feat(v8/replay): Mask srcdoc iframe contents per default (#14779)
  • ref(v8/nextjs): Fix typo in source maps deletion warning (#14776)

Work in this release was contributed by @​aloisklink and @​benjick. Thank you for your contributions!

8.46.0

  • feat: Allow capture of more than 1 ANR event [v8] (#14713)
  • feat(node): Detect Railway release name [v8] (#14714)
  • fix: Normalise ANR debug image file paths if appRoot was supplied [v8] (#14709)
  • fix(nuxt): Remove build config from tsconfig (#14737)

Work in this release was contributed by @​conor-ob. Thank you for your contribution!

8.45.1

  • fix(feedback): Return when the sendFeedback promise resolves (#14683)

Work in this release was contributed by @​antonis. Thank you for your contribution!

... (truncated)

Commits
  • 405ceb4 release: 8.48.0
  • 8e2ed6f meta(changelog): Update changelog for 8.48.0 (#14919)
  • 8b03e0b fix(v8/feedback): Avoid lazy loading code for syncFeedbackIntegration (#14918)
  • 77cabfb fix(v8/react): Use Set as the allRoutes container. (#14878) (#14884)
  • 6fa3797 feat(v8/core): Add normalizedRequest to samplingContext (#14903)
  • 845b7aa fix(v8/react): Improve handling of routes nested under path="/" (#14897)
  • dbd3296 feat(v8/node): Add openTelemetrySpanProcessors option (#14853)
  • 960dd9b fix(v8/node): Ensure express requests are properly handled (#14851)
  • 576a1ad fix(v8/core): Use consistent continueTrace implementation in core (#14819)
  • 75ca8b9 meta(changelog): Update changelog for 8.48.0 (#14844)
  • Additional commits viewable in compare view

Updates ms from 2.1.1 to 2.1.3

Release notes

Sourced from ms's releases.

2.1.3

Patches

  • Rename zeit to vercel: #151
  • Bump eslint from 4.12.1 to 4.18.2: #122
  • Add prettier as a dev dependency: #135 #153
  • Use GitHub Actions CI: #154

Credits

Huge thanks to @​getsnoopy for helping!

2.1.2

Patches

  • Fixed negative decimals less than -10 don&#39;t work: #111
  • Support error in case of Infinity: #116
  • Update regexp for 10-.5 is invalid input: #117
  • Update chat badge: #119

Credits

Huge thanks to @​yuler and @​7ma7X for helping!

Commits

snyk-io bot and others added 22 commits December 31, 2024 23:40
…quirements/update-dependencies/workspaces/app-with-constraints/lib/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987
…0 updates

Bumps the npm_and_yarn group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` |
| [semver](https://github.com/npm/node-semver) | `6.3.1` | `7.6.3` |
| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.4.3` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.3` |
| [express](https://github.com/expressjs/express) | `4.17.1` | `4.21.2` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.5` | `6.0.6` |
| [webpack](https://github.com/webpack/webpack) | `5.54.0` | `5.97.1` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.24.0` | `7.26.4` |
| [nanoid](https://github.com/ai/nanoid) | `3.1.25` | `3.3.8` |
| [ws](https://github.com/websockets/ws) | `8.17.0` | `8.18.0` |

Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: [debug](https://github.com/debug-js/debug) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: [micromatch](https://github.com/micromatch/micromatch), [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx).
Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/npm-package-shrinkwrap directory: [semver](https://github.com/npm/node-semver), [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [rewire](https://github.com/jhnns/rewire).
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/npm-package-with-dist-tag-subdependency directory: [debug](https://github.com/debug-js/debug), [micromatch](https://github.com/micromatch/micromatch), [cookie](https://github.com/jshttp/cookie) and [cdktf-cli](https://github.com/hashicorp/terraform-cdk/tree/HEAD/packages/cdktf-cli).
Bumps the npm_and_yarn group with 5 updates in the /test/acceptance/workspaces/npm-package-with-overrides directory:

| Package | From | To |
| --- | --- | --- |
| [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [ip](https://github.com/indutny/node-ip) | `1.1.8` | `removed` |
| [pac-resolver](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/pac-resolver) | `7.0.0` | `7.0.1` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.3` |

Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: [debug](https://github.com/debug-js/debug) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-v2 directory: [lodash](https://github.com/lodash/lodash).
Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: [debug](https://github.com/debug-js/debug), [node-fetch](https://github.com/node-fetch/node-fetch) and [y18n](https://github.com/yargs/y18n).
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-workspaces directory: [minimatch](https://github.com/isaacs/minimatch), [node-fetch](https://github.com/node-fetch/node-fetch), [y18n](https://github.com/yargs/y18n) and [node-uuid](https://github.com/broofa/node-uuid).
Bumps the npm_and_yarn group with 3 updates in the /test/acceptance/workspaces/yarn-workspaces-v2 directory: [minimatch](https://github.com/isaacs/minimatch), [node-fetch](https://github.com/node-fetch/node-fetch) and [node-uuid](https://github.com/broofa/node-uuid).
Bumps the npm_and_yarn group with 2 updates in the /test/acceptance/workspaces/yarn-workspaces-v2-resolutions directory: [node-fetch](https://github.com/node-fetch/node-fetch) and [node-uuid](https://github.com/broofa/node-uuid).
Bumps the npm_and_yarn group with 6 updates in the /ts-binary-wrapper directory:

| Package | From | To |
| --- | --- | --- |
| [debug](https://github.com/debug-js/debug) | `4.3.4` | `4.4.0` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.20.13` | `7.26.4` |
| [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `removed` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `7.36.0` | `7.120.2` |



Updates `debug` from 4.3.4 to 4.4.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `semver` from 6.3.1 to 7.6.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v6.3.1...v7.6.3)

Updates `tar` from 6.2.1 to 7.4.3
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.4.3)

Updates `body-parser` from 1.19.0 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.19.0...1.20.3)

Updates `express` from 4.17.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.17.1...4.21.2)

Updates `cross-spawn` from 6.0.5 to 6.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Updates `express` from 4.17.1 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.17.1...4.21.2)

Updates `webpack` from 5.54.0 to 5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.54.0...v5.97.1)

Updates `@babel/traverse` from 7.24.0 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse)

Updates `cookie` from 0.4.0 to 0.4.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/commits)

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `send` from 0.17.1 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.17.1...0.19.0)

Updates `nanoid` from 3.1.25 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.1.25...3.3.8)

Updates `serve-static` from 1.14.1 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.14.1...v1.16.2)

Updates `ws` from 8.17.0 to 8.18.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.17.0...8.18.0)

Updates `debug` from 3.2.5 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Updates `@babel/traverse` from 7.23.5 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `markdown-to-jsx` from 7.3.2 to 7.7.2
- [Release notes](https://github.com/quantizor/markdown-to-jsx/releases)
- [Changelog](https://github.com/quantizor/markdown-to-jsx/blob/main/CHANGELOG.md)
- [Commits](quantizor/markdown-to-jsx@v7.3.2...v7.7.2)

Updates `semver` from 5.5.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v6.3.1...v7.6.3)

Updates `cross-spawn` from 5.1.0 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Updates `rewire` from 4.0.1 to 7.0.0
- [Release notes](https://github.com/jhnns/rewire/releases)
- [Changelog](https://github.com/jhnns/rewire/blob/master/CHANGELOG.md)
- [Commits](jhnns/rewire@v4.0.1...v7.0.0)

Updates `ansi-regex` from 2.1.1 to 5.0.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@2.1.1...v5.0.1)

Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

Updates `debug` from 4.3.4 to 4.4.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Removes `cookie`

Updates `cdktf-cli` from 0.20.3 to 0.20.10
- [Release notes](https://github.com/hashicorp/terraform-cdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-cdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-cdk/commits/v0.20.10/packages/cdktf-cli)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `yargs-parser` from 18.1.3 to 20.2.9
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v18.1.3...yargs-parser-v20.2.9)

Updates `node-fetch` from 2.6.7 to 2.7.0
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.17.0...8.18.0)

Updates `y18n` from 4.0.3 to 5.0.8
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Updates `debug` from 4.3.4 to 4.4.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Removes `ip`

Updates `pac-resolver` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases)
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/pac-resolver/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/pac-resolver@7.0.1/packages/pac-resolver)

Updates `socks` from 2.7.1 to 2.8.3
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.7.1...2.8.3)

Updates `debug` from 3.2.5 to 3.2.7
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

Updates `lodash` from 4.17.0 to 4.17.21
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.0...4.17.21)

Updates `debug` from 4.1.1 to 4.3.1
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `node-fetch` from 2.6.0 to 2.6.7
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7)

Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

Updates `node-fetch` from 2.6.0 to 2.6.7
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7)

Updates `y18n` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Updates `node-uuid` from 1.3.0 to 1.4.8
- [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md)
- [Commits](https://github.com/broofa/node-uuid/commits)

Updates `minimatch` from 3.0.4 to 3.1.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

Updates `node-fetch` from 2.2.0 to 2.6.7
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7)

Updates `node-uuid` from 1.3.0 to 1.4.8
- [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md)
- [Commits](https://github.com/broofa/node-uuid/commits)

Updates `node-fetch` from 2.2.0 to 2.6.7
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.0...v2.6.7)

Updates `node-uuid` from 1.3.0 to 1.4.8
- [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md)
- [Commits](https://github.com/broofa/node-uuid/commits)

Updates `debug` from 4.3.4 to 4.4.0
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.3.4...4.4.0)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6)

Updates `@babel/traverse` from 7.20.13 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse)

Removes `cookie`

Updates `@sentry/node` from 7.36.0 to 7.120.2
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.120.2/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@7.36.0...7.120.2)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: debug
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: markdown-to-jsx
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rewire
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cdktf-cli
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yargs-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: y18n
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: pac-resolver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socks
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: y18n
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: y18n
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-uuid
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-uuid
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-uuid
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/node"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…cy/package.json & test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
Bumps the go_modules group with 2 updates in the /cliv2 directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa).


Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.1
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.12.0...v5.13.1)

Updates `github.com/open-policy-agent/opa` from 0.51.0 to 0.68.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v0.51.0...v0.68.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Ron Sherfey <aysherintel@icloud.com>
…o_modules-b8cfc1d416

chore(deps): bump the go_modules group across 1 directory with 2 updates
… updates

Bumps the npm_and_yarn group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `7.34.0` | `8.48.0` |
| [@snyk/snyk-cocoapods-plugin](https://github.com/snyk/snyk-cocoapods-plugin) | `2.5.3` | `2.6.0` |
| [snyk-docker-plugin](https://github.com/snyk/snyk-docker-plugin) | `6.14.0` | `6.15.2` |
| [snyk-python-plugin](https://github.com/snyk/snyk-python-plugin) | `2.3.0` | `2.4.1` |
| [snyk-sbt-plugin](https://github.com/snyk/snyk-sbt-plugin) | `2.18.1` | `2.19.0` |
| [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `8.17.1` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `6.0.6` | `7.0.5` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `1.8.0` | `1.9.0` |
| [got](https://github.com/sindresorhus/got) | `11.8.2` | `11.8.6` |

Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/monorepo-bad-project directory: [@sentry/node](https://github.com/getsentry/sentry-javascript), [ms](https://github.com/vercel/ms), [js-yaml](https://github.com/nodeca/js-yaml) and [snyk](https://github.com/snyk/snyk).
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/npm-lock-v2-with-npm-prefixed-sub-dep-version directory: [acorn](https://github.com/acornjs/acorn).
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-lock-v2-vuln directory: [lodash](https://github.com/lodash/lodash).
Bumps the npm_and_yarn group with 4 updates in the /test/acceptance/workspaces/yarn-out-of-sync directory: [@sentry/node](https://github.com/getsentry/sentry-javascript), [ms](https://github.com/vercel/ms), [js-yaml](https://github.com/nodeca/js-yaml) and [snyk](https://github.com/snyk/snyk).
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-package directory: [debug](https://github.com/debug-js/debug).
Bumps the npm_and_yarn group with 1 update in the /test/acceptance/workspaces/yarn-workspace-out-of-sync directory: [snyk](https://github.com/snyk/snyk).


Updates `@sentry/node` from 7.34.0 to 8.48.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@7.34.0...8.48.0)

Updates `@snyk/snyk-cocoapods-plugin` from 2.5.3 to 2.6.0
- [Release notes](https://github.com/snyk/snyk-cocoapods-plugin/releases)
- [Commits](snyk/snyk-cocoapods-plugin@v2.5.3...v2.6.0)

Updates `snyk-docker-plugin` from 6.14.0 to 6.15.2
- [Release notes](https://github.com/snyk/snyk-docker-plugin/releases)
- [Commits](snyk/snyk-docker-plugin@v6.14.0...v6.15.2)

Updates `snyk-python-plugin` from 2.3.0 to 2.4.1
- [Release notes](https://github.com/snyk/snyk-python-plugin/releases)
- [Changelog](https://github.com/snyk/snyk-python-plugin/blob/main/.releaserc)
- [Commits](snyk/snyk-python-plugin@v2.3.0...v2.4.1)

Updates `snyk-sbt-plugin` from 2.18.1 to 2.19.0
- [Release notes](https://github.com/snyk/snyk-sbt-plugin/releases)
- [Commits](snyk/snyk-sbt-plugin@v2.18.1...v2.19.0)

Updates `ajv` from 6.12.6 to 8.17.1
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.6...v8.17.1)

Updates `cross-spawn` from 6.0.6 to 7.0.5
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v6.0.6...v7.0.5)

Updates `cookie` from 0.4.2 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.2...v0.7.1)

Updates `path-to-regexp` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v1.8.0...v1.9.0)

Updates `got` from 11.8.2 to 11.8.6
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.2...v11.8.6)

Updates `@sentry/node` from 7.120.2 to 7.120.3
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@7.34.0...8.48.0)

Updates `ms` from 2.1.1 to 2.1.3
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@2.1.1...2.1.3)

Updates `js-yaml` from 3.12.0 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.12.0...3.14.1)

Updates `snyk` from 1.1294.3 to 1.1295.0
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1294.3...v1.1295.0)

Updates `acorn` from 8.11.2 to 8.14.0
- [Commits](acornjs/acorn@8.11.2...8.14.0)

Updates `lodash` from 4.17.0 to 4.17.21
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.0...4.17.21)

Updates `@sentry/node` from 7.120.2 to 7.120.3
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.48.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@7.34.0...8.48.0)

Updates `ms` from 2.1.1 to 2.1.3
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@2.1.1...2.1.3)

Updates `js-yaml` from 3.12.0 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.12.0...3.14.1)

Updates `snyk` from 1.1294.3 to 1.1295.0
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1294.3...v1.1295.0)

Updates `debug` from 2.2.0 to 2.6.9
- [Release notes](https://github.com/debug-js/debug/releases)
- [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md)
- [Commits](debug-js/debug@2.2.0...2.6.9)

Updates `ms` from 0.7.1 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](vercel/ms@2.1.1...2.1.3)

Updates `snyk` from 1.320.0 to 1.1295.0
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1294.3...v1.1295.0)

---
updated-dependencies:
- dependency-name: "@sentry/node"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@snyk/snyk-cocoapods-plugin"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: snyk-docker-plugin
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: snyk-python-plugin
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: snyk-sbt-plugin
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/node"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: snyk
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: acorn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/node"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: snyk
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: debug
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ms
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: snyk
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant