Bump the npm_and_yarn group across 1 directory with 30 updates #12
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `11.2.5` | `11.2.6` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `0.1102.4` | `18.2.6` | | [karma](https://github.com/karma-runner/karma) | `6.1.2` | `6.3.16` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.13.0` | `7.25.6` | | [@npmcli/git](https://github.com/npm/git) | `2.0.6` | `2.1.0` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `5.0.0` | `5.0.1` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `5.0.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.13.3` | `1.15.9` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [jszip](https://github.com/Stuk/jszip) | `3.6.0` | `3.10.1` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.13.0` | | [tar](https://github.com/isaacs/node-tar) | `6.1.0` | `6.2.1` | Updates `@angular/core` from 11.2.5 to 11.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/11.2.6/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/11.2.6/packages/core) Updates `@angular-devkit/build-angular` from 0.1102.4 to 18.2.6 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/18.2.6) Updates `karma` from 6.1.2 to 6.3.16 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v6.1.2...v6.3.16) Updates `@babel/traverse` from 7.13.0 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `@npmcli/git` from 2.0.6 to 2.1.0 - [Release notes](https://github.com/npm/git/releases) - [Changelog](https://github.com/npm/git/blob/main/CHANGELOG.md) - [Commits](npm/git@v2.0.6...v2.1.0) Updates `ansi-regex` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v5.0.0...v5.0.1) Updates `ansi-regex` from 3.0.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v5.0.0...v5.0.1) Updates `json5` from 1.0.1 to 2.2.0 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v2.2.0) Updates `loader-utils` from 1.2.3 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.4) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `braces` from 2.3.2 to 3.0.2 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.2) Updates `postcss` from 7.0.21 to 8.4.41 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.21...8.4.41) Updates `dns-packet` from 1.3.1 to 5.6.1 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v5.6.1) Updates `ws` from 6.2.1 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.1...8.17.1) Updates `express` from 4.17.1 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.17.1...4.21.0) Updates `follow-redirects` from 1.13.3 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.3...v1.15.9) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `jszip` from 3.6.0 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.6.0...v3.10.1) Updates `log4js` from 6.3.0 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v6.3.0...v6.9.1) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `nanoid` from 3.1.20 to 3.3.7 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.20...3.3.7) Updates `node-forge` from 0.10.0 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.1) Updates `qs` from 6.5.2 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.13.0) Updates `rollup` from 2.38.4 to 4.22.4 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v2.38.4...v4.22.4) Updates `send` from 0.17.1 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.1...0.19.0) Updates `serve-static` from 1.14.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.1...v1.16.2) Updates `socket.io` from 3.1.2 to 4.8.0 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/3.1.2...socket.io@4.8.0) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `tar` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.0...v6.2.1) Updates `webpack-dev-middleware` from 3.7.2 to 7.4.2 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v7.4.2) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@npmcli/git" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
@dependabot rebase
…On Thursday, September 26th, 2024 at 10:21, dependabot[bot] ***@***.***> wrote:
This automated pull request fixes a [security vulnerability](https://github.com/reposman33/Fedex-coding-challenge/security/dependabot/101) (high severity).
[Learn more about Dependabot security updates](https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates).
---------------------------------------------------------------
Bumps the npm_and_yarn group with 13 updates in the / directory:
Package From To
***@***.***/core](https://github.com/angular/angular/tree/HEAD/packages/core) 11.2.5 11.2.6
***@***.***/build-angular](https://github.com/angular/angular-cli) 0.1102.4 18.2.6
[karma](https://github.com/karma-runner/karma) 6.1.2 6.3.16
***@***.***/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) 7.13.0 7.25.6
***@***.***/git](https://github.com/npm/git) 2.0.6 2.1.0
[ansi-regex](https://github.com/chalk/ansi-regex) 5.0.0 5.0.1
[ansi-regex](https://github.com/chalk/ansi-regex) 3.0.0 5.0.1
[follow-redirects](https://github.com/follow-redirects/follow-redirects) 1.13.3 1.15.9
[json-schema](https://github.com/kriszyp/json-schema) 0.2.3 0.4.0
[jsprim](https://github.com/joyent/node-jsprim) 1.4.1 1.4.2
[jszip](https://github.com/Stuk/jszip) 3.6.0 3.10.1
[minimist](https://github.com/minimistjs/minimist) 1.2.5 1.2.8
[qs](https://github.com/ljharb/qs) 6.5.2 6.13.0
[tar](https://github.com/isaacs/node-tar) 6.1.0 6.2.1
Updates @angular/core from 11.2.5 to 11.2.6
Changelog
Sourced from [@angular/core's changelog](https://github.com/angular/angular/blob/11.2.6/CHANGELOG.md).
> 11.2.6 (2021-03-17)
>
> Bug Fixes
>
> - core: remove duplicated EMPTY_OBJ constant ([#41153](https://redirect.github.com/angular/angular/issues/41153)) ([fa97166](angular/angular@fa97166))
> - forms: properly handle the change to the FormGroup shape ([#40829](https://redirect.github.com/angular/angular/issues/40829)) ([60ac964](angular/angular@60ac964)), closes [#13788](https://redirect.github.com/angular/angular/issues/13788)
> - localize: render correct closing tag placeholder names in XLIFF 2 ([#41152](https://redirect.github.com/angular/angular/issues/41152)) ([7dbb550](angular/angular@7dbb550)), closes [#41142](https://redirect.github.com/angular/angular/issues/41142)
> - localize: trim extracted equiv-text values ([#41180](https://redirect.github.com/angular/angular/issues/41180)) ([ed6c09a](angular/angular@ed6c09a)), closes [#41176](https://redirect.github.com/angular/angular/issues/41176)
> - ngcc: do not compile JavaScript sources if typings-only processing is repeated ([#41209](https://redirect.github.com/angular/angular/issues/41209)) ([be050b2](angular/angular@be050b2)), closes [#41198](https://redirect.github.com/angular/angular/issues/41198)
>
> Performance Improvements
>
> - forms: avoid direct references to the Validators class ([#41189](https://redirect.github.com/angular/angular/issues/41189)) ([#41220](https://redirect.github.com/angular/angular/issues/41220)) ([804b6b6](angular/angular@804b6b6))
> - forms: make FormBuilder class tree-shakable ([#41126](https://redirect.github.com/angular/angular/issues/41126)) ([ffc93e0](angular/angular@ffc93e0))
> - forms: make RadioControlRegistry class tree-shakable ([#41126](https://redirect.github.com/angular/angular/issues/41126)) ([6414590](angular/angular@6414590))
> - forms: make built-in ControlValueAccessors more tree-shakable ([#41146](https://redirect.github.com/angular/angular/issues/41146)) ([#41197](https://redirect.github.com/angular/angular/issues/41197)) ([5908eda](angular/angular@5908eda))
Commits
- [6414590](angular/angular@6414590) perf(forms): make RadioControlRegistry class tree-shakable ([#41126](https://github.com/angular/angular/tree/HEAD/packages/core/issues/41126))
- [804b6b6](angular/angular@804b6b6) perf(forms): avoid direct references to the Validators class ([#41189](https://github.com/angular/angular/tree/HEAD/packages/core/issues/41189)) ([#41220](https://github.com/angular/angular/tree/HEAD/packages/core/issues/41220))
- [5908eda](angular/angular@5908eda) perf(forms): make built-in ControlValueAccessors more tree-shakable ([#41146](https://github.com/angular/angular/tree/HEAD/packages/core/issues/41146)) ...
- [fa97166](angular/angular@fa97166) fix(core): remove duplicated EMPTY_OBJ constant ([#41153](https://github.com/angular/angular/tree/HEAD/packages/core/issues/41153))
- See full diff in [compare view](https://github.com/angular/angular/commits/11.2.6/packages/core)
Updates @angular-devkit/build-angular from 0.1102.4 to 18.2.6
Release notes
Sourced from [@angular-devkit/build-angular's releases](https://github.com/angular/angular-cli/releases).
> v18.2.6
>
> 18.2.6 (2024-09-25)
>
> @angular/build
>
> Commit Description
> [fix - 9d0b67124](angular/angular-cli@9d0b671) allow missing HTML file request to fallback to index
> [fix - 5fea635b2](angular/angular-cli@5fea635) update rollup to 4.22.4
>
> v18.2.5
>
> 18.2.5 (2024-09-18)
>
> @angular/build
>
> Commit Description
> [fix - 707431625](angular/angular-cli@7074316) support HTTP HEAD requests for virtual output files
> [fix - 1032b3da1](angular/angular-cli@1032b3d) update vite to 5.4.6
>
> v18.2.4
>
> 18.2.4 (2024-09-11)
>
> @angular/build
>
> Commit Description
> [fix - 765309a2e](angular/angular-cli@765309a) prevent transformation of Node.js internal dependencies by Vite
>
> v18.2.3
>
> 18.2.3 (2024-09-04)
>
> @angular-devkit/build-angular
>
> Commit Description
> [fix - 482076612](angular/angular-cli@4820766) update webpack-dev-middleware to 7.4.2
>
> v18.2.2
>
> 18.2.2 (2024-08-29)
>
> @angular-devkit/build-angular
>
> Commit Description
> [fix - 504b00b93](angular/angular-cli@504b00b) clear context in Karma by default for single run executions
> [fix - 82b76086e](angular/angular-cli@82b7608) upgrade webpack to 5.94.0
>
> v18.2.1
>
> 18.2.1 (2024-08-21)
>
> @angular-devkit/schematics-cli
>
> Commit Description
> [fix - 94e27c88b](angular/angular-cli@94e27c8) prevent bypassing select/checkbox prompts on validation failure
... (truncated)
Changelog
Sourced from [@angular-devkit/build-angular's changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md).
> 18.2.6 (2024-09-25)
>
> @angular/build
>
> Commit Type Description
> [9d0b67124](angular/angular-cli@9d0b671) fix allow missing HTML file request to fallback to index
> [5fea635b2](angular/angular-cli@5fea635) fix update rollup to 4.22.4
>
> 17.3.10 (2024-09-25)
>
> @angular-devkit/build-angular
>
> Commit Type Description
> [30489d8fd](angular/angular-cli@30489d8) fix update vite to 4.1.8
>
> 19.0.0-next.7 (2024-09-18)
>
> @angular/cli
>
> Commit Type Description
> [f249e7e85](angular/angular-cli@f249e7e) perf enable Node.js compile code cache when available
>
> @angular/build
>
> Commit Type Description
> [f6b7cd925](angular/angular-cli@f6b7cd9) fix support HTTP HEAD requests for virtual output files
>
> @angular/ssr
>
> Commit Type Description
> [f346ee8a8](angular/angular-cli@f346ee8) feat add isMainModule function
> [2640bf7a6](angular/angular-cli@2640bf7) fix correct route extraction and error handling
... (truncated)
Commits
- See full diff in [compare view](https://github.com/angular/angular-cli/commits/18.2.6)
Updates karma from 6.1.2 to 6.3.16
Release notes
Sourced from [karma's releases](https://github.com/karma-runner/karma/releases).
> v6.3.16
>
> [6.3.16](karma-runner/karma@v6.3.15...v6.3.16) (2022-02-10)
>
> Bug Fixes
>
> - security: mitigate the "Open Redirect Vulnerability" ([ff7edbb](karma-runner/karma@ff7edbb))
>
> v6.3.15
>
> [6.3.15](karma-runner/karma@v6.3.14...v6.3.15) (2022-02-05)
>
> Bug Fixes
>
> - helper: make mkdirIfNotExists helper resilient to concurrent calls ([d9dade2](karma-runner/karma@d9dade2)), closes [karma-runner/karma-coverage#434](https://redirect.github.com//redirect.github.com/karma-runner/karma-coverage/issues/434/issues/issuecomment-1017939333)
>
> v6.3.14
>
> [6.3.14](karma-runner/karma@v6.3.13...v6.3.14) (2022-02-05)
>
> Bug Fixes
>
> - remove string template from client code ([91d5acd](karma-runner/karma@91d5acd))
> - warn when singleRun and autoWatch are false ([69cfc76](karma-runner/karma@69cfc76))
> - security: remove XSS vulnerability in returnUrl query param ([839578c](karma-runner/karma@839578c))
>
> v6.3.13
>
> [6.3.13](karma-runner/karma@v6.3.12...v6.3.13) (2022-01-31)
>
> Bug Fixes
>
> - deps: bump log4js to resolve security issue ([5bf2df3](karma-runner/karma@5bf2df3)), closes [#3751](https://redirect.github.com/karma-runner/karma/issues/3751)
>
> v6.3.12
>
> [6.3.12](karma-runner/karma@v6.3.11...v6.3.12) (2022-01-24)
>
> Bug Fixes
>
> - remove depreciation warning from log4js ([41bed33](karma-runner/karma@41bed33))
>
> v6.3.11
>
> [6.3.11](karma-runner/karma@v6.3.10...v6.3.11) (2022-01-13)
>
> Bug Fixes
>
> - deps: pin colors package to 1.4.0 due to security vulnerability ([a5219c5](karma-runner/karma@a5219c5))
... (truncated)
Changelog
Sourced from [karma's changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md).
> [6.3.16](karma-runner/karma@v6.3.15...v6.3.16) (2022-02-10)
>
> Bug Fixes
>
> - security: mitigate the "Open Redirect Vulnerability" ([ff7edbb](karma-runner/karma@ff7edbb))
>
> [6.3.15](karma-runner/karma@v6.3.14...v6.3.15) (2022-02-05)
>
> Bug Fixes
>
> - helper: make mkdirIfNotExists helper resilient to concurrent calls ([d9dade2](karma-runner/karma@d9dade2)), closes [karma-runner/karma-coverage#434](https://redirect.github.com//redirect.github.com/karma-runner/karma-coverage/issues/434/issues/issuecomment-1017939333)
>
> [6.3.14](karma-runner/karma@v6.3.13...v6.3.14) (2022-02-05)
>
> Bug Fixes
>
> - remove string template from client code ([91d5acd](karma-runner/karma@91d5acd))
> - warn when singleRun and autoWatch are false ([69cfc76](karma-runner/karma@69cfc76))
> - security: remove XSS vulnerability in returnUrl query param ([839578c](karma-runner/karma@839578c))
>
> [6.3.13](karma-runner/karma@v6.3.12...v6.3.13) (2022-01-31)
>
> Bug Fixes
>
> - deps: bump log4js to resolve security issue ([5bf2df3](karma-runner/karma@5bf2df3)), closes [#3751](https://redirect.github.com/karma-runner/karma/issues/3751)
>
> [6.3.12](karma-runner/karma@v6.3.11...v6.3.12) (2022-01-24)
>
> Bug Fixes
>
> - remove depreciation warning from log4js ([41bed33](karma-runner/karma@41bed33))
>
> [6.3.11](karma-runner/karma@v6.3.10...v6.3.11) (2022-01-13)
>
> Bug Fixes
>
> - deps: pin colors package to 1.4.0 due to security vulnerability ([a5219c5](karma-runner/karma@a5219c5))
>
> [6.3.10](karma-runner/karma@v6.3.9...v6.3.10) (2022-01-08)
>
> Bug Fixes
>
> - logger: create parent folders if they are missing ([0d24bd9](karma-runner/karma@0d24bd9)), closes [#3734](https://redirect.github.com/karma-runner/karma/issues/3734)
... (truncated)
Commits
- [ab4b328](karma-runner/karma@ab4b328) chore(release): 6.3.16 [skip ci]
- [ff7edbb](karma-runner/karma@ff7edbb) fix(security): mitigate the "Open Redirect Vulnerability"
- [c1befa0](karma-runner/karma@c1befa0) chore(release): 6.3.15 [skip ci]
- [d9dade2](karma-runner/karma@d9dade2) fix(helper): make mkdirIfNotExists helper resilient to concurrent calls
- [653c762](karma-runner/karma@653c762) ci: prevent duplicate CI tasks on creating a PR
- [c97e562](karma-runner/karma@c97e562) chore(release): 6.3.14 [skip ci]
- [91d5acd](karma-runner/karma@91d5acd) fix: remove string template from client code
- [69cfc76](karma-runner/karma@69cfc76) fix: warn when singleRun and autoWatch are false
- [839578c](karma-runner/karma@839578c) fix(security): remove XSS vulnerability in returnUrl query param
- [db53785](karma-runner/karma@db53785) chore(release): 6.3.13 [skip ci]
- Additional commits viewable in [compare view](karma-runner/karma@v6.1.2...v6.3.16)
Updates @babel/traverse from 7.13.0 to 7.25.6
Release notes
Sourced from [@babel/traverse's releases](https://github.com/babel/babel/releases).
> v7.25.6 (2024-08-29)
>
> Thanks [@j4k0xb](https://github.com/j4k0xb) for your first PR!
>
> 🐛 Bug Fix
>
> - babel-generator
>
> - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-traverse
>
> - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-parser
>
> - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung))
>
> - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
>
> - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
>
> - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
>
> - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 🏠 Internal
>
> - babel-generator
>
> - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> Committers: 5
>
> - Babel Bot ([@babel-bot](https://github.com/babel-bot))
> - Huáng Jùnliàng ([@JLHwung](https://github.com/JLHwung))
> - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [@j4k0xb](https://github.com/j4k0xb)
> - [@liuxingbaoyu](https://github.com/liuxingbaoyu)
>
> v7.25.5 (2024-08-23)
>
> 🐛 Bug Fix
>
> - babel-generator, babel-traverse
>
> - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate sequence expression parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> 💅 Polish
>
> - babel-generator
>
> - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> Committers: 2
>
> - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [@liuxingbaoyu](https://github.com/liuxingbaoyu)
>
> v7.25.4 (2024-08-22)
... (truncated)
Changelog
Sourced from [@babel/traverse's changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md).
> v7.25.6 (2024-08-29)
>
> 🐛 Bug Fix
>
> - babel-generator
>
> - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-traverse
>
> - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-parser
>
> - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung))
>
> - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
>
> - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
>
> - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
>
> - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 🏠 Internal
>
> - babel-generator
>
> - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> v7.25.5 (2024-08-23)
>
> 🐛 Bug Fix
>
> - babel-generator, babel-traverse
>
> - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> 💅 Polish
>
> - babel-generator
>
> - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> v7.25.4 (2024-08-22)
>
> 🐛 Bug Fix
>
> - babel-traverse
>
> - [#16756](https://redirect.github.com/babel/babel/pull/16756) fix: Skip computed key when renaming ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
>
> - [#16755](https://redirect.github.com/babel/babel/pull/16755) fix: Decorator 2018-09 may throw an exception ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-types
>
> - [#16710](https://redirect.github.com/babel/babel/pull/16710) Visit AST fields nodes according to their syntactical order ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16709](https://redirect.github.com/babel/babel/pull/16709) Print semicolon after TS export namespace as A ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
>
> - [#16722](https://redirect.github.com/babel/babel/pull/16722) Avoid unnecessary parens around sequence expressions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator, babel-plugin-transform-class-properties
>
> - [#16714](https://redirect.github.com/babel/babel/pull/16714) Avoid unnecessary parens around exported arrow functions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
... (truncated)
Commits
- [2f72b97](babel/babel@2f72b97) v7.25.6
- [faceae9](babel/babel@faceae9) fix: path.getAssignmentIdentifiers may be undefined ([#16727](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16727))
- [46ee612](babel/babel@46ee612) Remove some NodePath methods ([#16655](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16655))
- [2fdc8b5](babel/babel@2fdc8b5) fix: Generate sequence expression parentheses correctly ([#16764](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16764))
- [cbf124c](babel/babel@cbf124c) v7.25.4
- [2b289fb](babel/babel@2b289fb) fix: skip computed key when renaming ([#16756](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16756))
- [575863c](babel/babel@575863c) Avoid unnecessary parens around sequence expressions ([#16722](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16722))
- [5174ad1](babel/babel@5174ad1) Clean all always enabled parser plugins ([#16572](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16572))
- [52718ab](babel/babel@52718ab) Discontinue babel-eslint-config-internal ([#16718](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16718))
- [dba45d3](babel/babel@dba45d3) Ignore devDependencies when generating tsconfig.json ([#16659](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16659))
- Additional commits viewable in [compare view](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse)
Updates @npmcli/git from 2.0.6 to 2.1.0
Changelog
Sourced from [@npmcli/git's changelog](https://github.com/npm/git/blob/main/CHANGELOG.md).
> Changelog
>
> [5.0.8](npm/git@v5.0.7...v5.0.8) (2024-07-09)
>
> Bug Fixes
>
> - [2135513](npm/git@2135513) [#194](https://redirect.github.com/npm/git/pull/194) smarter git ssh override ([#194](https://redirect.github.com/npm/git/issues/194)) ([@dennishenry](https://github.com/dennishenry), pacotedev)
>
> [5.0.7](npm/git@v5.0.6...v5.0.7) (2024-05-04)
>
> Bug Fixes
>
> - [fbf9390](npm/git@fbf9390) [#186](https://redirect.github.com/npm/git/pull/186) linting: no-unused-vars ([@lukekarrys](https://github.com/lukekarrys))
>
> Chores
>
> - [3a54aa9](npm/git@3a54aa9) [#186](https://redirect.github.com/npm/git/pull/186) bump @npmcli/template-oss to 4.22.0 ([@lukekarrys](https://github.com/lukekarrys))
> - [ea26e3a](npm/git@ea26e3a) [#186](https://redirect.github.com/npm/git/pull/186) postinstall for dependabot template-oss PR ([@lukekarrys](https://github.com/lukekarrys))
> - [b7ab170](npm/git@b7ab170) [#184](https://redirect.github.com/npm/git/pull/184) bump @npmcli/template-oss from 4.21.3 to 4.21.4 ([@dependabot](https://github.com/dependabot)[bot])
>
> [5.0.6](npm/git@v5.0.5...v5.0.6) (2024-04-12)
>
> Dependencies
>
> - [683deed](npm/git@683deed) [#182](https://redirect.github.com/npm/git/pull/182) ***@***.*** ([#182](https://redirect.github.com/npm/git/issues/182))
>
> [5.0.5](npm/git@v5.0.4...v5.0.5) (2024-04-08)
>
> Bug Fixes
>
> - [d9bf355](npm/git@d9bf355) [#180](https://redirect.github.com/npm/git/pull/180) use fs/promises instead of util.promisify ([#180](https://redirect.github.com/npm/git/issues/180)) ([@lukekarrys](https://github.com/lukekarrys))
>
> [5.0.4](npm/git@v5.0.3...v5.0.4) (2023-12-19)
>
> Bug Fixes
>
> - [c398872](npm/git@c398872) [#176](https://redirect.github.com/npm/git/pull/176) lazy load of which module ([#176](https://redirect.github.com/npm/git/issues/176)) ([@thecodrr](https://github.com/thecodrr))
>
> Chores
>
> - [46192f5](npm/git@46192f5) [#175](https://redirect.github.com/npm/git/pull/175) postinstall for dependabot template-oss PR ([@lukekarrys](https://github.com/lukekarrys))
> - [51011f8](npm/git@51011f8) [#175](https://redirect.github.com/npm/git/pull/175) bump @npmcli/template-oss from 4.21.1 to 4.21.3 ([@dependabot](https://github.com/dependabot)[bot])
> - [8b1d897](npm/git@8b1d897) [#173](https://redirect.github.com/npm/git/pull/173) postinstall for dependabot template-oss PR ([@lukekarrys](https://github.com/lukekarrys))
> - [157ed48](npm/git@157ed48) [#173](https://redirect.github.com/npm/git/pull/173) bump @npmcli/template-oss from 4.19.0 to 4.21.1 ([@dependabot](https://github.com/dependabot)[bot])
> - [0d06a9f](npm/git@0d06a9f) [#154](https://redirect.github.com/npm/git/pull/154) postinstall for dependabot template-oss PR ([@lukekarrys](https://github.com/lukekarrys))
> - [b425d28](npm/git@b425d28) [#154](https://redirect.github.com/npm/git/pull/154) bump @npmcli/template-oss from 4.18.1 to 4.19.0 ([@dependabot](https://github.com/dependabot)[bot])
> - [ecc938a](npm/git@ecc938a) [#152](https://redirect.github.com/npm/git/pull/152) postinstall for dependabot template-oss PR ([@lukekarrys](https://github.com/lukekarrys))
> - [72430ad](npm/git@72430ad) [#152](https://redirect.github.com/npm/git/pull/152) bump @npmcli/template-oss from 4.18.0 to 4.18.1 ([@dependabot](https://github.com/dependabot)[bot])
>
> [5.0.3](npm/git@v5.0.2...v5.0.3) (2023-08-30)
... (truncated)
Commits
- [101abac](npm/git@101abac) 2.1.0
- [766de2f](npm/git@766de2f) Throw custom errors from spawn ([#32](https://redirect.github.com/npm/git/issues/32))
- [ef5cfcc](npm/git@ef5cfcc) 2.0.9
- [ab646cf](npm/git@ab646cf) Do not allow git replacement objects by default ([#30](https://redirect.github.com/npm/git/issues/30))
- [94e2543](npm/git@94e2543) update tap, test on node 16
- [1ce7b97](npm/git@1ce7b97) 2.0.8
- [9fab115](npm/git@9fab115) Merge pull request [#29](https://redirect.github.com/npm/git/issues/29) from npm/nlf/no-shell
- [f48dc34](npm/git@f48dc34) chore: run lint as posttest
- [e69549f](npm/git@e69549f) fix: remove path escaping since we do not need it when not using a shell
- [766bfbe](npm/git@766bfbe) fix: do not use a shell for git commands
- Additional commits viewable in [compare view](npm/git@v2.0.6...v2.1.0)
Maintainer changes
This version was pushed to npm by [lukekarrys](https://www.npmjs.com/~lukekarrys), a new releaser for @npmcli/git since your current version.
Updates ansi-regex from 5.0.0 to 5.0.1
Release notes
Sourced from [ansi-regex's releases](https://github.com/chalk/ansi-regex/releases).
> v5.0.1
>
> Fixes (backport of 6.0.1 to v5)
>
> This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in [#38](https://redirect.github.com/chalk/ansi-regex/issues/38).
>
> - Fix [ReDoS](https://en.wikipedia.org/wiki/ReDoS) in certain cases ([#37](https://redirect.github.com/chalk/ansi-regex/issues/37)) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.
>
> [CVE-2021-3807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807)
>
> https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1
>
> Thank you [@yetingli](https://github.com/yetingli) for the patch and reproduction case!
Commits
- [a9babce](chalk/ansi-regex@a9babce) 5.0.1
- [4657833](chalk/ansi-regex@4657833) fix incorrect format
- [c3c0b3f](chalk/ansi-regex@c3c0b3f) Fix potential ReDoS ([#37](https://redirect.github.com/chalk/ansi-regex/issues/37))
- [178363b](chalk/ansi-regex@178363b) Move to GitHub Actions ([#35](https://redirect.github.com/chalk/ansi-regex/issues/35))
- [0755e66](chalk/ansi-regex@0755e66) Add [@Qix](https://github.com/Qix)- to funding.yml
- See full diff in [compare view](chalk/ansi-regex@v5.0.0...v5.0.1)
Updates ansi-regex from 3.0.0 to 5.0.1
Release notes
Sourced from [ansi-regex's releases](https://github.com/chalk/ansi-regex/releases).
> v5.0.1
>
> Fixes (backport of 6.0.1 to v5)
>
> This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in [#38](https://redirect.github.com/chalk/ansi-regex/issues/38).
>
> - Fix [ReDoS](https://en.wikipedia.org/wiki/ReDoS) in certain cases ([#37](https://redirect.github.com/chalk/ansi-regex/issues/37)) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.
>
> [CVE-2021-3807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807)
>
> https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1
>
> Thank you [@yetingli](https://github.com/yetingli) for the patch and reproduction case!
Commits
- [a9babce](chalk/ansi-regex@a9babce) 5.0.1
- [4657833](chalk/ansi-regex@4657833) fix incorrect format
- [c3c0b3f](chalk/ansi-regex@c3c0b3f) Fix potential ReDoS ([#37](https://redirect.github.com/chalk/ansi-regex/issues/37))
- [178363b](chalk/ansi-regex@178363b) Move to GitHub Actions ([#35](https://redirect.github.com/chalk/ansi-regex/issues/35))
- [0755e66](chalk/ansi-regex@0755e66) Add [@Qix](https://github.com/Qix)- to funding.yml
- See full diff in [compare view](chalk/ansi-regex@v5.0.0...v5.0.1)
Updates json5 from 1.0.1 to 2.2.0
Release notes
Sourced from [json5's releases](https://github.com/json5/json5/releases).
> v2.2.0
>
> - New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. ([#236](https://redirect.github.com/json5/json5/issues/236), [#244](https://redirect.github.com/json5/json5/issues/244))
>
> v2.1.3 [[code](https://github.com/json5/json5/tree/v2.1.3), [diff](json5/json5@v2.1.2...v2.1.3)]
>
> - Fix: An out of memory bug when parsing numbers has been fixed. ([#228](https://redirect.github.com/json5/json5/issues/228), [#229](https://redirect.github.com/json5/json5/issues/229))
>
> v2.1.2
>
> - Fix: Bump minimist to v1.2.5. ([#222](https://redirect.github.com/json5/json5/issues/222))
>
> v2.1.1
>
> - New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. ([#208](https://redirect.github.com/json5/json5/issues/208))
> - Fix: stringify outputs \0 as \\x00 when followed by a digit. ([#210](https://redirect.github.com/json5/json5/issues/210))
> - Fix: Spelling mistakes have been fixed. ([#196](https://redirect.github.com/json5/json5/issues/196))
>
> v2.1.0
>
> - New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. ([#187](https://redirect.github.com/json5/json5/issues/187))
>
> v2.0.1
>
> - Fix: The browser builds in the dist directory support ES5. ([#182](https://redirect.github.com/json5/json5/issues/182))
>
> v2.0.0
>
> -
>
> Major: JSON5 officially supports Node.js v6 and later. Support for Node.js v4 has been dropped. Since Node.js v6 supports ES5 features, the code has been rewritten in native ES5, and the dependence on Babel has been eliminated.
>
> -
>
> New: Support for Unicode 10 has been added.
>
> -
>
> New: The test framework has been migrated from Mocha to Tap.
>
> -
>
> New: The browser build at dist/index.js is no longer minified by default. A minified version is available at dist/index.min.js. ([#181](https://redirect.github.com/json5/json5/issues/181))
>
> -
>
> Fix: The warning has been made clearer when line and paragraph separators are used in strings.
>
> -
>
> Fix: package.json5 has been restored, and it is automatically generated and committed when the version is bumped. A new build-package NPM script has been added to facilitate this.
>
> v1.0.2
>
> - Fix: Properties with the name __proto__ are added to objects and arrays. ([#199](https://redirect.github.com/json5/json5/issues/199)) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! ([#295](https://redirect.github.com/json5/json5/issues/295)). This has been backported to v1. ([#298](https://redirect.github.com/json5/json5/issues/298))
Changelog
Sourced from [json5's changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md).
> v2.2.0 [[code](https://github.com/json5/json5/tree/v2.2.0), [diff](json5/json5@v2.1.3...v2.2.0)]
>
> - New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. ([#236](https://redirect.github.com/json5/json5/issues/236), [#244](https://redirect.github.com/json5/json5/issues/244))
>
> v2.1.3 [[code](https://github.com/json5/json5/tree/v2.1.3), [diff](json5/json5@v2.1.2...v2.1.3)]
>
> - Fix: An out of memory bug when parsing numbers has been fixed. ([#228](https://redirect.github.com/json5/json5/issues/228), [#229](https://redirect.github.com/json5/json5/issues/229))
>
> v2.1.2 [[code](https://github.com/json5/json5/tree/v2.1.2), [diff](json5/json5@v2.1.1...v2.1.2)]
>
> - Fix: Bump minimist to v1.2.5. ([#222](https://redirect.github.com/json5/json5/issues/222))
>
> v2.1.1 [[code](https://github.com/json5/json5/tree/v2.1.1), [diff](json5/json5@v2.0.1...v2.1.1)]
>
> - New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. ([#208](https://redirect.github.com/json5/json5/issues/208))
> - Fix: stringify outputs \0 as \\x00 when followed by a digit. ([#210](https://redirect.github.com/json5/json5/issues/210))
> - Fix: Spelling mistakes have been fixed. ([#196](https://redirect.github.com/json5/json5/issues/196))
>
> v2.1.0 [[code](https://github.com/json5/json5/tree/v2.1.0), [diff](json5/json5@v2.0.1...v2.1.0)]
>
> - New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. ([#187](https://redirect.github.com/json5/json5/issues/187))
>
> v2.0.1 [[code](https://github.com/json5/json5/tree/v2.0.1), [diff](json5/json5@v2.0.0...v2.0.1)]
>
> - Fix: The browser builds in the dist directory support ES5. ([#182](https://redirect.github.com/json5/json5/issues/182))
>
> v2.0.0 [[code][c2.0.0], [diff][d2.0.0]]
... (truncated)
Commits
- [4cf57da](json5/json5@4cf57da) 2.2.0
- [a14feb0](json5/json5@a14feb0) docs: update CHANGELOG for v2.2.0
- [39ad97c](json5/json5@39ad97c) docs: update Travis CI badge
- [4d0560c](json5/json5@4d0560c) docs: add missing links to CHANGELOG
- [3dd26ac](json5/json5@3dd26ac) feat: add TypeScript delcarations for module files
- [eef0999](json5/json5@eef0999) feat: add types declaration file with entry in package.json
- [32bb2cd](json5/json5@32bb2cd) 2.1.3
- [fde38af](json5/json5@fde38af) Update CHANGELOG for v2.1.3
- [7399345](json5/json5@7399345) Add missing CHANGELOG for v2.1.2
- [7027fab](json5/json5@7027fab) Merge branch 'master' of github.com:json5/json5
- Additional commits viewable in [compare view](json5/json5@v1.0.1...v2.2.0)
Updates loader-utils from 1.2.3 to 2.0.4
Release notes
Sourced from [loader-utils's releases](https://github.com/webpack/loader-utils/releases).
> v2.0.4
>
> [2.0.4](webpack/loader-utils@v2.0.3...v2.0.4) (2022-11-11)
>
> Bug Fixes
>
> - ReDoS problem ([#225](https://redirect.github.com/webpack/loader-utils/issues/225)) ([ac09944](webpack/loader-utils@ac09944))
>
> v2.0.3
>
> [2.0.3](webpack/loader-utils@v2.0.1...v2.0.3) (2022-10-20)
>
> Bug Fixes
>
> - security: prototype pollution exploit ([#217](https://redirect.github.com/webpack/loader-utils/issues/217)) ([a93cf6f](webpack/loader-utils@a93cf6f))
>
> v2.0.2
>
> [2.0.2](webpack/loader-utils@v2.0.1...v2.0.2) (2021-11-04)
>
> Bug Fixes
>
> - base64 generation and unicode characters ([#197](https://redirect.github.com/webpack/loader-utils/issues/197)) ([8c2d24e](webpack/loader-utils@8c2d24e))
>
> v2.0.1
>
> [2.0.1](webpack/loader-utils@v2.0.0...v2.0.1) (2021-10-29)
>
> Bug Fixes
>
> - md4 support on Node.js v17 ([#193](https://redirect.github.com/webpack/loader-utils/issues/193)) ([1069f61](webpack/loader-utils@1069f61))
>
> v2.0.0
>
> [2.0.0](webpack/loader-utils@v1.4.0...v2.0.0) (2020-03-17)
>
> ⚠ BREAKING CHANGES
>
> - minimum required Node.js version is 8.9.0 ([#166](https://redirect.github.com/webpack/loader-utils/issues/166)) ([c937e8c](webpack/loader-utils@c937e8c))
> - the getOptions method returns empty object on empty query ([#167](https://redirect.github.com/webpack/loader-utils/issues/167)) ([b595cfb](webpack/loader-utils@b595cfb))
> - Use md4 by default
>
> v1.4.2
>
> [1.4.2](webpack/loader-utils@v1.4.1...v1.4.2) (2022-11-11)
>
> Bug Fixes
>
> - ReDoS problem ([#226](https://redirect.github.com/webpack/loader-utils/issues/226)) ([17cbf8f](webpack/loader-utils@17cbf8f))
... (truncated)
Changelog
Sourced from [loader-utils's changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md).
> [2.0.4](webpack/loader-utils@v2.0.3...v2.0.4) (2022-11-11)
>
> Bug Fixes
>
> - ReDoS problem ([#225](https://redirect.github.com/webpack/loader-utils/issues/225)) ([ac09944](webpack/loader-utils@ac09944))
>
> [2.0.3](webpack/loader-utils@v2.0.1...v2.0.3) (2022-10-20)
>
> Bug Fixes
>
> - security: prototype pollution exploit ([#217](https://redirect.github.com/webpack/loader-utils/issues/217)) ([a93cf6f](webpack/loader-utils@a93cf6f))
>
> [2.0.2](webpack/loader-utils@v2.0.1...v2.0.2) (2021-11-04)
>
> Bug Fixes
>
> - base64 generation and unicode characters ([#197](https://redirect.github.com/webpack/loader-utils/issues/197)) ([8c2d24e](webpack/loader-utils@8c2d24e))
>
> [2.0.1](webpack/loader-utils@v2.0.0...v2.0.1) (2021-10-29)
>
> Bug Fixes
>
> - md4 support on Node.js v17 ([#193](https://redirect.github.com/webpack/loader-utils/issues/193)) ([1069f61](webpack/loader-utils@1069f61))
>
> [2.0.0](webpack/loader-utils@v1.4.0...v2.0.0) (2020-03-17)
>
> ⚠ BREAKING CHANGES
>
> - minimum required Node.js version is 8.9.0 ([#166](https://redirect.github.com/webpack/loader-utils/issues/166)) ([c937e8c](webpack/loader-utils@c937e8c))
> - the getOptions method returns empty object on empty query ([#167](https://redirect.github.com/webpack/loader-utils/issues/167)) ([b595cfb](webpack/loader-utils@b595cfb))
> - Use md4 by default
>
> [1.4.0](webpack/loader-utils@v1.3.0...v1.4.0) (2020-02-19)
>
> Features
>
> - the resourceQuery is passed to the interpolateName method ([#163](https://redirect.github.com/webpack/loader-utils/issues/163)) ([cd0e428](webpack/loader-utils@cd0e428))
>
> [1.3.0](webpack/loader-utils@v1.2.3...v1.3.0) (2020-02-19)
... (truncated)
Commits
- [6688b50](webpack/loader-utils@6688b50) chore(release): 2.0.4
- [ac09944](webpack/loader-utils@ac09944) fix: ReDoS problem ([#225](https://redirect.github.com/webpack/loader-utils/issues/225))
- [7162619](webpack/loader-utils@7162619) chore(release): 2.0.3
- [a93cf6f](webpack/loader-utils@a93cf6f) fix(security): prototype polution exploit ([#217](https://redirect.github.com/webpack/loader-utils/issues/217))
- [90c7c4b](webpack/loader-utils@90c7c4b) chore(release): 2.0.2
- [8c2d24e](webpack/loader-utils@8c2d24e) fix: base64 generation and unicode characters ([#197](https://redirect.github.com/webpack/loader-utils/issues/197))
- [5fb5562](webpack/loader-utils@5fb5562) chore(release): 2.0.1
- [1069f61](webpack/loader-utils@1069f61) fix: md4 support on Node.js v17 ([#193](https://redirect.github.com/webpack/loader-utils/issues/193))
- [d9f4e23](webpack/loader-utils@d9f4e23) chore(release): 2.0.0
- [865dc03](webpack/loader-utils@865dc03) refactor: switch to md4 by default ([#168](https://redirect.github.com/webpack/loader-utils/issues/168))
- Additional commits viewable in [compare view](webpack/loader-utils@v1.2.3...v2.0.4)
Updates body-parser from 1.19.0 to 1.20.3
Release notes
Sourced from [body-parser's releases](https://github.com/expressjs/body-parser/releases).
> 1.20.3
>
> What's Changed
>
> Important
>
> - deps: ***@***.***
> - add depth option to customiz...
>
> Description has been truncated
---------------------------------------------------------------
You can view, comment on, or merge this pull request online at:
#12
Commit Summary
- [5688de7](5688de7) Bump the npm_and_yarn group across 1 directory with 30 updates
File Changes
([2 files](https://github.com/reposman33/Fedex-coding-challenge/pull/12/files))
- M [package-lock.json](https://github.com/reposman33/Fedex-coding-challenge/pull/12/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519) (20660)
- M [package.json](https://github.com/reposman33/Fedex-coding-challenge/pull/12/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519) (6)
Patch Links:
- https://github.com/reposman33/Fedex-coding-challenge/pull/12.patch
- https://github.com/reposman33/Fedex-coding-challenge/pull/12.diff
—
Reply to this email directly, [view it on GitHub](#12), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AAYNOZTP53A3KRZEAEINQ5TZYO7YRAVCNFSM6AAAAABO4OG7GSVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU2DSOBXGA3DAMI).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
|
Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 13 updates in the / directory:
11.2.511.2.60.1102.418.2.66.1.26.3.167.13.07.25.62.0.62.1.05.0.05.0.13.0.05.0.11.13.31.15.90.2.30.4.01.4.11.4.23.6.03.10.11.2.51.2.86.5.26.13.06.1.06.2.1Updates
@angular/corefrom 11.2.5 to 11.2.6Changelog
Sourced from
@angular/core's changelog.Commits
6414590perf(forms): makeRadioControlRegistryclass tree-shakable (#41126)804b6b6perf(forms): avoid direct references to theValidatorsclass (#41189) (#41220)5908edaperf(forms): make built-in ControlValueAccessors more tree-shakable (#41146) ...fa97166fix(core): remove duplicated EMPTY_OBJ constant (#41153)Updates
@angular-devkit/build-angularfrom 0.1102.4 to 18.2.6Release notes
Sourced from
@angular-devkit/build-angular's releases.... (truncated)
Changelog
Sourced from
@angular-devkit/build-angular's changelog.... (truncated)
Commits
Updates
karmafrom 6.1.2 to 6.3.16Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
ab4b328chore(release): 6.3.16 [skip ci]ff7edbbfix(security): mitigate the "Open Redirect Vulnerability"c1befa0chore(release): 6.3.15 [skip ci]d9dade2fix(helper): make mkdirIfNotExists helper resilient to concurrent calls653c762ci: prevent duplicate CI tasks on creating a PRc97e562chore(release): 6.3.14 [skip ci]91d5acdfix: remove string template from client code69cfc76fix: warn whensingleRunandautoWatcharefalse839578cfix(security): remove XSS vulnerability inreturnUrlquery paramdb53785chore(release): 6.3.13 [skip ci]Updates
@babel/traversefrom 7.13.0 to 7.25.6Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
2f72b97v7.25.6faceae9fix:path.getAssignmentIdentifiersmay beundefined(#16727)46ee612Remove someNodePathmethods (#16655)2fdc8b5fix: Generate sequence expression parentheses correctly (#16764)cbf124cv7.25.42b289fbfix: skip computed key when renaming (#16756)575863cAvoid unnecessary parens around sequence expressions (#16722)5174ad1Clean all always enabled parser plugins (#16572)52718abDiscontinue babel-eslint-config-internal (#16718)dba45d3IgnoredevDependencieswhen generatingtsconfig.json(#16659)Updates
@npmcli/gitfrom 2.0.6 to 2.1.0Changelog
Sourced from
@npmcli/git's changelog.... (truncated)
Commits
101abac2.1.0766de2fThrow custom errors from spawn (#32)ef5cfcc2.0.9ab646cfDo not allow git replacement objects by default (#30)94e2543update tap, test on node 161ce7b972.0.89fab115Merge pull request #29 from npm/nlf/no-shellf48dc34chore: run lint as postteste69549ffix: remove path escaping since we do not need it when not using a shell766bfbefix: do not use a shell for git commandsMaintainer changes
This version was pushed to npm by lukekarrys, a new releaser for
@npmcli/gitsince your current version.Updates
ansi-regexfrom 5.0.0 to 5.0.1Release notes
Sourced from ansi-regex's releases.
Commits
a9babce5.0.14657833fix incorrect formatc3c0b3fFix potential ReDoS (#37)178363bMove to GitHub Actions (#35)0755e66Add@Qix- to funding.ymlUpdates
ansi-regexfrom 3.0.0 to 5.0.1Release notes
Sourced from ansi-regex's releases.
Commits
a9babce5.0.14657833fix incorrect formatc3c0b3fFix potential ReDoS (#37)178363bMove to GitHub Actions (#35)0755e66Add@Qix- to funding.ymlUpdates
json5from 1.0.1 to 2.2.0Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
... (truncated)
Commits
4cf57da2.2.0a14feb0docs: update CHANGELOG for v2.2.039ad97cdocs: update Travis CI badge4d0560cdocs: add missing links to CHANGELOG3dd26acfeat: add TypeScript delcarations for module fileseef0999feat: add types declaration file with entry in package.json32bb2cd2.1.3fde38afUpdate CHANGELOG for v2.1.37399345Add missing CHANGELOG for v2.1.27027fabMerge branch 'master' of github.com:json5/json5Updates
loader-utilsfrom 1.2.3 to 2.0.4Release notes
Sourced from loader-utils's releases.
... (truncated)
Changelog
Sourced from loader-utils's changelog.
... (truncated)
Commits
6688b50chore(release): 2.0.4ac09944fix: ReDoS problem (#225)7162619chore(release): 2.0.3a93cf6ffix(security): prototype polution exploit (#217)90c7c4bchore(release): 2.0.28c2d24efix: base64 generation and unicode characters (#197)5fb5562chore(release): 2.0.11069f61fix: md4 support on Node.js v17 (#193)d9f4e23chore(release): 2.0.0865dc03refactor: switch tomd4by default (#168)Updates
body-parserfrom 1.19.0 to 1.20.3Release notes
Sourced from body-parser's releases.