npm: bump the npm_and_yarn group in /dashboard with 7 updates #1482
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group in /dashboard with 8 updates:
1.32.1
3.29.5
1.14.8
1.15.9
3.0.2
3.0.3
1.0.1
1.0.2
6.9.4
6.13.0
6.5.2
6.13.0
2.5.0
5.0.0
15.2.1
25.0.1
Updates
rollup
from 1.32.1 to 3.29.5Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
dfd233d
3.29.52ef77c0
Fix DOM Clobbering CVEa6448b9
3.29.44e92d60
Deoptimize all parameters when losing track of a function (#5158)801ffd1
3.29.3353e462
Fully deoptimize first level path when deoptimizing nested parameter paths (#...a1a89e7
chore(deps): update dependency@vue/eslint-config-typescript
to v12 (#5148)cc14f70
chore(deps): lock file maintenance minor/patch updates (#5149)1e8355b
docs: improve the docs repl appearance in the light mode (#5145)5950fc8
Adapt branches in REPL workflowUpdates
follow-redirects
from 1.14.8 to 1.15.9Commits
e4e55c7
Release version 1.15.9 of the npm package.31a1abf
Attempt much more gentle detection.d2aaa97
Fix url field.62558f0
Release version 1.15.8 of the npm package.a8d1cee
Return subtlety.458ca8e
Fix native URL test for Node 20.ca49e44
Handle KeepAlive connections in tests.f3711d7
Test on Node 20 and 22.fda0faf
Fix typo.760757f
Release version 1.15.7 of the npm package.Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
json5
from 1.0.1 to 1.0.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
... (truncated)
Commits
a62db1e
1.0.2e0c23fe
docs: update CHANGELOG for v1.0.262a6540
fix: add proto to objects and arraysUpdates
qs
from 6.9.4 to 6.13.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
5cf516c
v6.13.08d56df2
[New]parse
: addstrictDepth
optionc9a6694
[Tests] usenpm audit
instead ofaud
f90cc35
v6.12.31bf9f7a
[Fix]parse
: properly account forstrictNullHandling
whenallowEmptyArrays
7ebf48b
[meta] fix changelog indentationd0dff11
v6.12.2f0b8d03
[Dev Deps] update@ljharb/eslint-config
,object-inspect
,tape
81835ff
[Fix]:parse
: parse encoded square bracketsdb47dcc
[readme] add CII best practices badgeUpdates
qs
from 6.5.2 to 6.13.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
5cf516c
v6.13.08d56df2
[New]parse
: addstrictDepth
optionc9a6694
[Tests] usenpm audit
instead ofaud
f90cc35
v6.12.31bf9f7a
[Fix]parse
: properly account forstrictNullHandling
whenallowEmptyArrays
7ebf48b
[meta] fix changelog indentationd0dff11
v6.12.2f0b8d03
[Dev Deps] update@ljharb/eslint-config
,object-inspect
,tape
81835ff
[Fix]:parse
: parse encoded square bracketsdb47dcc
[readme] add CII best practices badgeUpdates
tough-cookie
from 2.5.0 to 5.0.0Release notes
Sourced from tough-cookie's releases.
... (truncated)
Commits
7ed1b8a
Merge pull request #451 from salesforce/prepare_v5cbaa1a5
Prepare v5 release57b534c
5.0.02e6b3f4
Bump eslint from 8.57.0 to 9.9.1 (#449)b72cdb2
Bump the dev-dependencies group with 2 updates (#448)93d550b
upgrade typescript-eslint to 8.0.1 (#440)07a7a4d
Bump the dev-dependencies group with 6 updates (#444)9b78073
Bump tldts from 6.1.37 to 6.1.41 in the production-dependencies group (#443)25a769c
Bump the dev-dependencies group across 1 directory with 6 updates (#439)99dab1b
Bump tldts from 6.1.32 to 6.1.37 in the production-dependencies group (#436)Maintainer changes
This version was pushed to npm by ccasey, a new releaser for tough-cookie since your current version.
Updates
jsdom
from 15.2.1 to 25.0.1Release notes
Sourced from jsdom's releases.
... (truncated)
Changelog
Sourced from jsdom's changelog.
... (truncated)
Commits
04541b3
Version 25.0.196bd111
Update dependencies and dev dependenciesd08440c
Upgrade tough-cookie to v5.0.0c53efc8
Version 25.0.0784c8a5
Set EventTarget.prototype to the jsdom's Object.prototype0314f1e
Version 24.1.346d5d5c
Fix postMessage referenced as a bare propertya241df6
Version 24.1.2c3a9aed
Remove upstreamed WPTs07fab37
Refactor Window object setup codeMost Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.