Bump the npm_and_yarn group across 1 directory with 26 updates #6

dependabot · 2024-09-26T04:16:27Z

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package	From	To
@angular/core	`6.1.10`	`10.2.5`
bootstrap	`4.3.1`	`5.0.0`
karma	`3.0.0`	`6.3.16`
@babel/traverse	`7.4.4`	`7.25.6`
browserify-sign	`4.0.4`	`4.2.3`
decode-uri-component	`0.2.0`	`0.2.2`
elliptic	`6.4.1`	`6.5.7`
eventsource	`1.0.7`	`1.1.2`
express	`4.16.4`	`4.21.0`
follow-redirects	`1.7.0`	`1.15.9`
fsevents	`1.2.9`	`1.2.13`
handlebars	`4.1.2`	`4.7.8`
jszip	`3.2.1`	`3.10.1`
mixin-deep	`1.3.1`	`1.3.2`
url-parse	`1.4.7`	`1.5.10`

Updates @angular/core from 6.1.10 to 10.2.5

Changelog

Sourced from @angular/core's changelog.

10.2.5 (2021-04-14)

Bug Fixes

compiler-cli: show a more specific error for Ivy NgModules (#41534) (#41598) (f630f33)

core: fix possible XSS attack in development through SSR (#40525) (ba8da74)

10.2.4 (2020-12-17)

Bug Fixes

core: fix possible XSS attack in development through SSR. (#40152) (0b8e3d5)

core: set ngDevMode to false when calling enableProdMode() (#40160) (90570c0)

10.2.3 (2020-11-09)

Bug Fixes

compiler: ensure that i18n message-parts have the correct source-span (#39589) (e67a331)

compiler: skipping leading whitespace should not break placeholder source-spans (#39589) (2b684b7), closes #39195

compiler-cli: avoid duplicate diagnostics about unknown pipes (#39517) (861e4fa)

compiler-cli: do not drop non-Angular decorators when downleveling (#39577) (1c6cf8a), closes #39574

10.2.2 (2020-11-04)

Bug Fixes

compiler-cli: report missing pipes when fullTemplateTypeCheck is disabled (#39320) (71d0063), closes #38195

core: markDirty() should only mark flags when really scheduling tick. (#39316) (8c82106), closes #39296

router: Ensure all outlets are used when commands have a prefix (#39456) (85d5242)

Performance Improvements

core: do not recurse into modules that have already been registered (#39514) (812355c), closes #39487

... (truncated)

Commits

ba8da74 fix(core): fix possible XSS attack in development through SSR (#40525)
90570c0 fix(core): set ngDevMode to false when calling enableProdMode() (#40160)
0b8e3d5 fix(core): fix possible XSS attack in development through SSR. (#40152)
1aee8b3 refactor(compiler): store the fullStart location on ParseSourceSpans (#39...
812355c perf(core): do not recurse into modules that have already been registered (#3...
8f36c21 refactor(router): Small refactor of createUrlTree and extra tests (#39456)
90acb91 docs: tView.preOrderHooks and tView.preOrderCheckHooks docs update (#39497)
8c82106 fix(core): markDirty() should only mark flags when really scheduling tick. (#...
0b37249 docs(core): update a typo in the comment of ngZoneEventCoalescing (#39423)
3b779a1 docs: fix typo in initializeInputAndOutputAliases docstring (#39438)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @angular/core since your current version.

Updates bootstrap from 4.3.1 to 5.0.0

Release notes

Sourced from bootstrap's releases.

v5.0.0

Highlights

#32155: Updated make-col() mixin to generate equal columns when no size is specified #32763: Added new color-scheme() mixin #33389: Dropdown menus now have option become clickable #33453: Added new docs footer #33548: Offcanvas header components are now vertically aligned #33549: Added offcanvas-top modifier #33634: Added support for .dropdown-items wrapped in <li>s #33626: Fix v5 regressions in tab dropdown functionality

🚀 Features

#32763: Add color-scheme mixin

#33389: Dropdown — Add option to make the dropdown menu clickable

#33549: Add offcanvas-top modifier

🎨 CSS

#32155: Add equal column mixin

#32763: Add color-scheme mixin

#33292: Make accordion icon rotation more natural

#33411: Fix validation feedback icon in select multiple

#33478: Make .nav-link color consistent when using buttons

#33482: Dropdown — Apply positioning only when Popper is not used

#33548: Vertically align offcanvas header components

#33549: Add offcanvas-top modifier

#33550: Spinner alignment changes

#33598: Hide validation icons from multiple selects

#33600: Have $form-check-input-border's default derive from $black

#33607: Reduce color-scheme complexity

#33642: use :read-only css selector instead [readonly] for consistency

#33658: fix: use list-group variable instead of alert

#33736: accordion: fix border-top on Firefox

☕️ JavaScript

#32439: Decouple BackDrop from modal

#33245: Decouple Modal's scrollbar functionality

#33249: Simplify Modal Config

#33250: Simplify ScrollSpy config

#33310: fix: make EventHandler better handle mouseenter/mouseleave events

#33389: Dropdown — Add option to make the dropdown menu clickable

#33429: Remove element event listeners through base component

#33451: Add missing things in hide method of dropdown

#33456: Use our isDisabled util on dropdown

#33466: Refactor dropdown's hide functionality

#33479: Fix dropdown escape propagation

#33496: Use cached noop function

... (truncated)

Commits

bf09367 Release v5.0.0 (#33647)
48ae5a7 Rewrite migration guide (#33834)
f086572 refactor(docs): Added form file input variables (#33833)
1a54286 Fix doc typo and Bootstrap Icons link (#33832)
e2df73f Update migration guide for some v5 changes (#33829)
1e6356a Neutralise more words from placeholder text (#33731)
6633845 Bump eslint-config-xo from 0.35.0 to 0.36.0 (#33646)
cb38744 Tweak toast docs (#33810)
c2ff225 Bump rollup from 2.46.0 to 2.47.0 (#33818)
c090ea2 Bump @babel/preset-env from 7.14.0 to 7.14.1 (#33819)
Additional commits viewable in compare view

Updates karma from 3.0.0 to 6.3.16

Release notes

Sourced from karma's releases.

v6.3.16

6.3.16 (2022-02-10)

Bug Fixes

security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

v6.3.15

6.3.15 (2022-02-05)

Bug Fixes

helper: make mkdirIfNotExists helper resilient to concurrent calls (d9dade2), closes karma-runner/karma-coverage#434

v6.3.14

6.3.14 (2022-02-05)

Bug Fixes

remove string template from client code (91d5acd)

warn when singleRun and autoWatch are false (69cfc76)

security: remove XSS vulnerability in returnUrl query param (839578c)

v6.3.13

6.3.13 (2022-01-31)

Bug Fixes

deps: bump log4js to resolve security issue (5bf2df3), closes #3751

v6.3.12

6.3.12 (2022-01-24)

Bug Fixes

remove depreciation warning from log4js (41bed33)

v6.3.11

6.3.11 (2022-01-13)

Bug Fixes

deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

... (truncated)

Changelog

Sourced from karma's changelog.

6.3.16 (2022-02-10)

Bug Fixes

security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

helper: make mkdirIfNotExists helper resilient to concurrent calls (d9dade2), closes karma-runner/karma-coverage#434

6.3.14 (2022-02-05)

Bug Fixes

remove string template from client code (91d5acd)

warn when singleRun and autoWatch are false (69cfc76)

security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

deps: bump log4js to resolve security issue (5bf2df3), closes #3751

6.3.12 (2022-01-24)

Bug Fixes

remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes

deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes

logger: create parent folders if they are missing (0d24bd9), closes #3734

... (truncated)

Commits

ab4b328 chore(release): 6.3.16 [skip ci]
ff7edbb fix(security): mitigate the "Open Redirect Vulnerability"
c1befa0 chore(release): 6.3.15 [skip ci]
d9dade2 fix(helper): make mkdirIfNotExists helper resilient to concurrent calls
653c762 ci: prevent duplicate CI tasks on creating a PR
c97e562 chore(release): 6.3.14 [skip ci]
91d5acd fix: remove string template from client code
69cfc76 fix: warn when singleRun and autoWatch are false
839578c fix(security): remove XSS vulnerability in returnUrl query param
db53785 chore(release): 6.3.13 [skip ci]
Additional commits viewable in compare view

Updates @babel/traverse from 7.4.4 to 7.25.6

Release notes

Sourced from @babel/traverse's releases.

v7.25.6 (2024-08-29)

Thanks @j4k0xb for your first PR!

🐛 Bug Fix

babel-generator

#16783 Properly print inner comments in TS array types (@nicolo-ribaudo)

#16775 fix: jsx whitespace is not properly preserved when retainLines (@liuxingbaoyu)

babel-traverse

#16727 fix: path.getAssignmentIdentifiers may be undefined (@liuxingbaoyu)

babel-parser

#16761 fix: improve static canFollowModifier checks (@JLHwung)

babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3

#16769 Only wrap functions in superPropertyGet helper (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env

#16780 Do not enforce printing space between ( and comments (@nicolo-ribaudo)

babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes

#16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@nicolo-ribaudo)

babel-generator

#16782 TS union/intersection nested in union does not need parens (@nicolo-ribaudo)

🏠 Internal

babel-generator

#16777 Remove unused parent params in the generator (@nicolo-ribaudo)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@j4k0xb

@liuxingbaoyu

v7.25.5 (2024-08-23)

🐛 Bug Fix

babel-generator, babel-traverse

#16764 fix: Generate sequence expression parentheses correctly (@liuxingbaoyu)

💅 Polish

babel-generator

#16738 Only force-parenthesize satisfies's LHS if it has newlines (@nicolo-ribaudo)

Committers: 2

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.25.4 (2024-08-22)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.6 (2024-08-29)

🐛 Bug Fix

babel-generator

#16783 Properly print inner comments in TS array types (@nicolo-ribaudo)

#16775 fix: jsx whitespace is not properly preserved when retainLines (@liuxingbaoyu)

babel-traverse

#16727 fix: path.getAssignmentIdentifiers may be undefined (@liuxingbaoyu)

babel-parser

#16761 fix: improve static canFollowModifier checks (@JLHwung)

babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3

#16769 Only wrap functions in superPropertyGet helper (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env

#16780 Do not enforce printing space between ( and comments (@nicolo-ribaudo)

babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes

#16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@nicolo-ribaudo)

babel-generator

#16782 TS union/intersection nested in union does not need parens (@nicolo-ribaudo)

🏠 Internal

babel-generator

#16777 Remove unused parent params in the generator (@nicolo-ribaudo)

v7.25.5 (2024-08-23)

🐛 Bug Fix

babel-generator, babel-traverse

#16764 fix: Generate parentheses correctly (@liuxingbaoyu)

💅 Polish

babel-generator

#16738 Only force-parenthesize satisfies's LHS if it has newlines (@nicolo-ribaudo)

v7.25.4 (2024-08-22)

🐛 Bug Fix

babel-traverse

#16756 fix: Skip computed key when renaming (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16755 fix: Decorator 2018-09 may throw an exception (@liuxingbaoyu)

babel-types

#16710 Visit AST fields nodes according to their syntactical order (@nicolo-ribaudo)

babel-generator

#16709 Print semicolon after TS export namespace as A (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse

#16722 Avoid unnecessary parens around sequence expressions (@nicolo-ribaudo)

babel-generator, babel-plugin-transform-class-properties

#16714 Avoid unnecessary parens around exported arrow functions (@nicolo-ribaudo)

... (truncated)

Commits

2f72b97 v7.25.6
faceae9 fix: path.getAssignmentIdentifiers may be undefined (#16727)
46ee612 Remove some NodePath methods (#16655)
2fdc8b5 fix: Generate sequence expression parentheses correctly (#16764)
cbf124c v7.25.4
2b289fb fix: skip computed key when renaming (#16756)
575863c Avoid unnecessary parens around sequence expressions (#16722)
5174ad1 Clean all always enabled parser plugins (#16572)
52718ab Discontinue babel-eslint-config-internal (#16718)
dba45d3 Ignore devDependencies when generating tsconfig.json (#16659)
Additional commits viewable in compare view

Updates braces from 0.1.5 to 1.8.5

Changelog

Sourced from braces's changelog.

[1.8.5] - 2016-05-21

Refactor (#10)

[1.8.4] - 2016-04-20

fixes jonschlinkert/micromatch#66

[1.8.0] - 2015-03-18

adds exponent examples, tests

fixes the first example in jonschlinkert/micromatch#38

[1.6.0] - 2015-01-30

optimizations, bash mode:

improve path escaping

[1.5.0] - 2015-01-28

Merge pull request #5 from eush77/lib-files

[1.4.0] - 2015-01-24

add extglob tests

externalize exponent function

better whitespace handling

[1.3.0] - 2015-01-24

make regex patterns explicity

[1.1.0] - 2015-01-11

don't create a match group with makeRe

[1.0.0] - 2014-12-23

Merge commit '97b05f5544f8348736a8efaecf5c32bbe3e2ad6e'

support empty brace syntax

better bash coverage

better support for regex strings

[0.1.4] - 2014-11-14

improve recognition of bad args, recognize mismatched argument types

support escaping

remove pathname-expansion

support whitespace in patterns

... (truncated)

Commits

See full diff in compare view

Updates browserify-sign from 4.0.4 to 4.2.3

Changelog

Sourced from browserify-sign's changelog.

v4.2.3 - 2024-03-05

Commits

[patch] widen support to 0.12 9247adf

[patch] drop minimum node support to v1 4d0ee49

[Dev Deps] update aud, npmignore, tape 87f3a35

[actions] remove redundant finisher 37a4758

[Deps] pin hash-base to ~3.0, due to a breaking change 9e2bf12

[Deps] update parse-asn1 [f427270`](browserify/browserify-sign@f427270)

[Deps] update elliptic fb261ce

[Deps] pin elliptic due to a breaking change 168e16f

v4.2.2 - 2023-10-25

Fixed

[Tests] log when openssl doesn't support cipher [#37](https://github.com/crypto-browserify/browserify-sign/issues/37)

Commits

Only apps should have lockfiles 09a8995

[eslint] switch to eslint 83fe463

[meta] add npmignore and auto-changelog 4418183

[meta] fix package.json indentation 9ac5a5e

[Tests] migrate from travis to github actions d845d85

[Fix] sign: throw on unsupported padding scheme 8767739

[Fix] properly check the upper bound for DSA signatures 85994cd

[Tests] handle openSSL not supporting a scheme f5f17c2

[Deps] update bn.js, browserify-rsa, elliptic, parse-asn1, readable-stream, safe-buffer a67d0eb

[Dev Deps] update nyc, standard, tape cc5350b

[Tests] always run coverage; downgrade nyc 75ce1d5

[meta] add safe-publish-latest dcf49ce

[Tests] add npm run posttest 75dd8fd

[Dev Deps] update tape 3aec038

[Tests] skip unsupported schemes 703c83e

[Tests] node < 6 lacks array includes 3aa43cf

[Dev Deps] fix eslint range 98d4e0d

v4.2.1 - 2020-08-04

Merged

bump elliptic [#58](https://github.com/crypto-browserify/browserify-sign/issues/58)

v4.2.0 - 2020-05-18

Merged

switch to safe buffer [#53](https://github.com/crypto-browserify/browserify-sign/issues/53)

... (truncated)

Commits

bf2c3ec v4.2.3
9247adf [patch] widen support to 0.12
f427270 [Deps] update `parse-asn1
87f3a35 [Dev Deps] update aud, npmignore, tape
fb261ce [Deps] update elliptic
4d0ee49 [patch] drop minimum node support to v1
9e2bf12 [Deps] pin hash-base to ~3.0, due to a breaking change
168e16f [Deps] pin elliptic due to a breaking change
37a4758 [actions] remove redundant finisher
4af5a90 v4.2.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

a0eea46 0.2.2
980e0bf Prevent overwriting previously decoded tokens
3c8a373 0.2.1
76abc93 Switch to GitHub workflows
746ca5d Fix issue where decode throws - fixes #6
486d7e2 Update license (#1)
a650457 Tidelift tasks
66e1c28 Meta tweaks
See full diff in compare view

Updates elliptic from 6.4.1 to 6.5.7

Commits

3e46a48 6.5.7
accb61e lib: DER signature decoding correction
03e06e1 6.5.6
7ac5360 Merge commit from fork
7570078 6.5.5
206da2e lib: lint
0a78e03 [Fix] restore node < 4 compat
43ac7f2 6.5.4
f4bc72b package: bump deps
441b742 ec: validate that a point before deriving keys
Additional commits viewable in compare view

Updates engine.io from 3.2.1 to 6.6.1

Release notes

Sourced from engine.io's releases.

engine.io@6.6.1

Bug Fixes

discard all pending packets when the server is closed (923a12e)

uws: prevent the client from upgrading twice (d5095fe)

Dependencies

ws@~8.17.1 (no change)

engine.io-client@6.6.1

Bug Fixes

move 'offline' event listener at the top (8a2f5a3)

only remove the event listener if it exists (9b3c9ab)

do not send a packet on an expired connection (#5134) (8adcfbf)

Performance Improvements

do not reset the heartbeat timer on each packet (7a23dde)

Dependencies

ws@~8.17.1 (no change)

Commits

See full diff in compare view

Updates eventsource from 1.0.7 to 1.1.2

Changelog

Sourced from eventsource's changelog.

1.1.2

Inline origin resolution, drops original dependency (#281 Espen Hovlandsdal)

1.1.1

Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal)

1.1.0

Improve performance for large messages across many chunks (#130 Trent Willis)

Add createConnection option for http or https requests (#120 Vasily Lavrov)

Support HTTP 302 redirects (#116 Ryan Bonte)

Prevent sequential errors from attempting multiple reconnections (#125 David Patty)

Add new to correct test (#111 Stéphane Alnet)

Fix reconnections attempts now happen more than once (#136 Icy Fish)

Commits

0a8b85b 1.1.2
f99ae66 docs: update history for 1.1.2
06c9721 chore: rebuild polyfill
9494642 fix: inline origin resolution, drop original dependency (#281)
aa7a408 1.1.1
56d489e chore: rebuild polyfill
4a951e5 docs: update history for 1.1.1
f9f6416 fix: strip sensitive headers on redirect to different origin
9dd0687 1.1.0
49497ba Update history for 1.1.0 (#146)
Additional commits viewable in compare view

Updates express from 4.16.4 to 4.21.0

Release notes

Sourced from express's releases.

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

...
Description has been truncated

Bumps the npm_and_yarn group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `6.1.10` | `10.2.5` | | [bootstrap](https://github.com/twbs/bootstrap) | `4.3.1` | `5.0.0` | | [karma](https://github.com/karma-runner/karma) | `3.0.0` | `6.3.16` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.4.4` | `7.25.6` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.1` | `6.5.7` | | [eventsource](https://github.com/EventSource/eventsource) | `1.0.7` | `1.1.2` | | [express](https://github.com/expressjs/express) | `4.16.4` | `4.21.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.7.0` | `1.15.9` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.9` | `1.2.13` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.1.2` | `4.7.8` | | [jszip](https://github.com/Stuk/jszip) | `3.2.1` | `3.10.1` | | [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` | | [url-parse](https://github.com/unshiftio/url-parse) | `1.4.7` | `1.5.10` | Updates `@angular/core` from 6.1.10 to 10.2.5 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/10.2.5/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/10.2.5/packages/core) Updates `bootstrap` from 4.3.1 to 5.0.0 - [Release notes](https://github.com/twbs/bootstrap/releases) - [Commits](twbs/bootstrap@v4.3.1...v5.0.0) Updates `karma` from 3.0.0 to 6.3.16 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v3.0.0...v6.3.16) Updates `@babel/traverse` from 7.4.4 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `braces` from 0.1.5 to 1.8.5 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/1.8.5) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `elliptic` from 6.4.1 to 6.5.7 - [Commits](indutny/elliptic@v6.4.1...v6.5.7) Updates `engine.io` from 3.2.1 to 6.6.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/commits/engine.io@6.6.1) Updates `eventsource` from 1.0.7 to 1.1.2 - [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md) - [Commits](EventSource/eventsource@v1.0.7...v1.1.2) Updates `express` from 4.16.4 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.16.4...4.21.0) Updates `follow-redirects` from 1.7.0 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.7.0...v1.15.9) Updates `fsevents` from 1.2.9 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.9...v1.2.13) Updates `handlebars` from 4.1.2 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.2...v4.7.8) Updates `jszip` from 3.2.1 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.2.1...v3.10.1) Updates `lodash` from 4.17.11 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Updates `log4js` from 3.0.6 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v3.0.6...v6.9.1) Updates `minimist` from 0.0.8 to 0.0.10 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v0.0.10) Updates `mixin-deep` from 1.3.1 to 1.3.2 - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Updates `send` from 0.16.2 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.16.2...0.19.0) Updates `serve-static` from 1.13.2 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.13.2...v1.16.2) Updates `socket.io-parser` from 3.2.0 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@3.2.0...4.2.4) Updates `socket.io` from 2.1.1 to 4.8.0 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/2.1.1...socket.io@4.8.0) Updates `url-parse` from 1.4.7 to 1.5.10 - [Commits](unshiftio/url-parse@1.4.7...1.5.10) Updates `ws` from 3.3.3 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@3.3.3...8.17.1) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: bootstrap dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eventsource dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mixin-deep dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: url-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

reposman33 · 2024-09-26T08:25:40Z

@dependabot rebase

…

On Thursday, September 26th, 2024 at 06:16, dependabot[bot] ***@***.***> wrote: This automated pull request fixes a [security vulnerability](https://github.com/reposman33/assignmentAngularBackBase/security/dependabot/199) (high severity). [Learn more about Dependabot security updates](https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates). --------------------------------------------------------------- Bumps the npm_and_yarn group with 15 updates in the / directory: Package From To ***@***.***/core](https://github.com/angular/angular/tree/HEAD/packages/core) 6.1.10 10.2.5 [bootstrap](https://github.com/twbs/bootstrap) 4.3.1 5.0.0 [karma](https://github.com/karma-runner/karma) 3.0.0 6.3.16 ***@***.***/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) 7.4.4 7.25.6 [browserify-sign](https://github.com/crypto-browserify/browserify-sign) 4.0.4 4.2.3 [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) 0.2.0 0.2.2 [elliptic](https://github.com/indutny/elliptic) 6.4.1 6.5.7 [eventsource](https://github.com/EventSource/eventsource) 1.0.7 1.1.2 [express](https://github.com/expressjs/express) 4.16.4 4.21.0 [follow-redirects](https://github.com/follow-redirects/follow-redirects) 1.7.0 1.15.9 [fsevents](https://github.com/fsevents/fsevents) 1.2.9 1.2.13 [handlebars](https://github.com/handlebars-lang/handlebars.js) 4.1.2 4.7.8 [jszip](https://github.com/Stuk/jszip) 3.2.1 3.10.1 [mixin-deep](https://github.com/jonschlinkert/mixin-deep) 1.3.1 1.3.2 [url-parse](https://github.com/unshiftio/url-parse) 1.4.7 1.5.10 Updates @angular/core from 6.1.10 to 10.2.5 Changelog Sourced from [@angular/core's changelog](https://github.com/angular/angular/blob/10.2.5/CHANGELOG.md). > 10.2.5 (2021-04-14) > > Bug Fixes > > - compiler-cli: show a more specific error for Ivy NgModules ([#41534](https://redirect.github.com/angular/angular/issues/41534)) ([#41598](https://redirect.github.com/angular/angular/issues/41598)) ([f630f33](angular/angular@f630f33)) > - core: fix possible XSS attack in development through SSR ([#40525](https://redirect.github.com/angular/angular/issues/40525)) ([ba8da74](angular/angular@ba8da74)) > > 10.2.4 (2020-12-17) > > Bug Fixes > > - core: fix possible XSS attack in development through SSR. ([#40152](https://redirect.github.com/angular/angular/issues/40152)) ([0b8e3d5](angular/angular@0b8e3d5)) > - core: set ngDevMode to false when calling enableProdMode() ([#40160](https://redirect.github.com/angular/angular/issues/40160)) ([90570c0](angular/angular@90570c0)) > > 10.2.3 (2020-11-09) > > Bug Fixes > > - compiler: ensure that i18n message-parts have the correct source-span ([#39589](https://redirect.github.com/angular/angular/issues/39589)) ([e67a331](angular/angular@e67a331)) > - compiler: skipping leading whitespace should not break placeholder source-spans ([#39589](https://redirect.github.com/angular/angular/issues/39589)) ([2b684b7](angular/angular@2b684b7)), closes [#39195](https://redirect.github.com/angular/angular/issues/39195) > - compiler-cli: avoid duplicate diagnostics about unknown pipes ([#39517](https://redirect.github.com/angular/angular/issues/39517)) ([861e4fa](angular/angular@861e4fa)) > - compiler-cli: do not drop non-Angular decorators when downleveling ([#39577](https://redirect.github.com/angular/angular/issues/39577)) ([1c6cf8a](angular/angular@1c6cf8a)), closes [#39574](https://redirect.github.com/angular/angular/issues/39574) > > 10.2.2 (2020-11-04) > > Bug Fixes > > - compiler-cli: report missing pipes when fullTemplateTypeCheck is disabled ([#39320](https://redirect.github.com/angular/angular/issues/39320)) ([71d0063](angular/angular@71d0063)), closes [#38195](https://redirect.github.com/angular/angular/issues/38195) > - core: markDirty() should only mark flags when really scheduling tick. ([#39316](https://redirect.github.com/angular/angular/issues/39316)) ([8c82106](angular/angular@8c82106)), closes [#39296](https://redirect.github.com/angular/angular/issues/39296) > - router: Ensure all outlets are used when commands have a prefix ([#39456](https://redirect.github.com/angular/angular/issues/39456)) ([85d5242](angular/angular@85d5242)) > > Performance Improvements > > - core: do not recurse into modules that have already been registered ([#39514](https://redirect.github.com/angular/angular/issues/39514)) ([812355c](angular/angular@812355c)), closes [#39487](https://redirect.github.com/angular/angular/issues/39487) ... (truncated) Commits - [ba8da74](angular/angular@ba8da74) fix(core): fix possible XSS attack in development through SSR ([#40525](https://github.com/angular/angular/tree/HEAD/packages/core/issues/40525)) - [90570c0](angular/angular@90570c0) fix(core): set ngDevMode to false when calling enableProdMode() ([#40160](https://github.com/angular/angular/tree/HEAD/packages/core/issues/40160)) - [0b8e3d5](angular/angular@0b8e3d5) fix(core): fix possible XSS attack in development through SSR. ([#40152](https://github.com/angular/angular/tree/HEAD/packages/core/issues/40152)) - [1aee8b3](angular/angular@1aee8b3) refactor(compiler): store the fullStart location on ParseSourceSpans ([#39](https://github.com/angular/angular/tree/HEAD/packages/core/issues/39)... - [812355c](angular/angular@812355c) perf(core): do not recurse into modules that have already been registered ([#3](https://github.com/angular/angular/tree/HEAD/packages/core/issues/3)... - [8f36c21](angular/angular@8f36c21) refactor(router): Small refactor of createUrlTree and extra tests ([#39456](https://github.com/angular/angular/tree/HEAD/packages/core/issues/39456)) - [90acb91](angular/angular@90acb91) docs: tView.preOrderHooks and tView.preOrderCheckHooks docs update ([#39497](https://github.com/angular/angular/tree/HEAD/packages/core/issues/39497)) - [8c82106](angular/angular@8c82106) fix(core): markDirty() should only mark flags when really scheduling tick. (#... - [0b37249](angular/angular@0b37249) docs(core): update a typo in the comment of ngZoneEventCoalescing ([#39423](https://github.com/angular/angular/tree/HEAD/packages/core/issues/39423)) - [3b779a1](angular/angular@3b779a1) docs: fix typo in initializeInputAndOutputAliases docstring ([#39438](https://github.com/angular/angular/tree/HEAD/packages/core/issues/39438)) - Additional commits viewable in [compare view](https://github.com/angular/angular/commits/10.2.5/packages/core) Maintainer changes This version was pushed to npm by [google-wombot](https://www.npmjs.com/~google-wombot), a new releaser for @angular/core since your current version. Updates bootstrap from 4.3.1 to 5.0.0 Release notes Sourced from [bootstrap's releases](https://github.com/twbs/bootstrap/releases). > v5.0.0 > > Highlights > > [#32155](https://redirect.github.com/twbs/bootstrap/issues/32155): Updated make-col() mixin to generate equal columns when no size is specified [#32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Added new color-scheme() mixin [#33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown menus now have option become clickable [#33453](https://redirect.github.com/twbs/bootstrap/issues/33453): Added new docs footer [#33548](https://redirect.github.com/twbs/bootstrap/issues/33548): Offcanvas header components are now vertically aligned [#33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Added offcanvas-top modifier [#33634](https://redirect.github.com/twbs/bootstrap/issues/33634): Added support for .dropdown-items wrapped in <li>s [#33626](https://redirect.github.com/twbs/bootstrap/issues/33626): Fix v5 regressions in tab dropdown functionality > > 🚀 Features > > - [#32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Add color-scheme mixin > - [#33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown — Add option to make the dropdown menu clickable > - [#33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Add offcanvas-top modifier > > 🎨 CSS > > - [#32155](https://redirect.github.com/twbs/bootstrap/issues/32155): Add equal column mixin > - [#32763](https://redirect.github.com/twbs/bootstrap/issues/32763): Add color-scheme mixin > - [#33292](https://redirect.github.com/twbs/bootstrap/issues/33292): Make accordion icon rotation more natural > - [#33411](https://redirect.github.com/twbs/bootstrap/issues/33411): Fix validation feedback icon in select multiple > - [#33478](https://redirect.github.com/twbs/bootstrap/issues/33478): Make .nav-link color consistent when using buttons > - [#33482](https://redirect.github.com/twbs/bootstrap/issues/33482): Dropdown — Apply positioning only when Popper is not used > - [#33548](https://redirect.github.com/twbs/bootstrap/issues/33548): Vertically align offcanvas header components > - [#33549](https://redirect.github.com/twbs/bootstrap/issues/33549): Add offcanvas-top modifier > - [#33550](https://redirect.github.com/twbs/bootstrap/issues/33550): Spinner alignment changes > - [#33598](https://redirect.github.com/twbs/bootstrap/issues/33598): Hide validation icons from multiple selects > - [#33600](https://redirect.github.com/twbs/bootstrap/issues/33600): Have $form-check-input-border's default derive from $black > - [#33607](https://redirect.github.com/twbs/bootstrap/issues/33607): Reduce color-scheme complexity > - [#33642](https://redirect.github.com/twbs/bootstrap/issues/33642): use :read-only css selector instead [readonly] for consistency > - [#33658](https://redirect.github.com/twbs/bootstrap/issues/33658): fix: use list-group variable instead of alert > - [#33736](https://redirect.github.com/twbs/bootstrap/issues/33736): accordion: fix border-top on Firefox > > ☕️ JavaScript > > - [#32439](https://redirect.github.com/twbs/bootstrap/issues/32439): Decouple BackDrop from modal > - [#33245](https://redirect.github.com/twbs/bootstrap/issues/33245): Decouple Modal's scrollbar functionality > - [#33249](https://redirect.github.com/twbs/bootstrap/issues/33249): Simplify Modal Config > - [#33250](https://redirect.github.com/twbs/bootstrap/issues/33250): Simplify ScrollSpy config > - [#33310](https://redirect.github.com/twbs/bootstrap/issues/33310): fix: make EventHandler better handle mouseenter/mouseleave events > - [#33389](https://redirect.github.com/twbs/bootstrap/issues/33389): Dropdown — Add option to make the dropdown menu clickable > - [#33429](https://redirect.github.com/twbs/bootstrap/issues/33429): Remove element event listeners through base component > - [#33451](https://redirect.github.com/twbs/bootstrap/issues/33451): Add missing things in hide method of dropdown > - [#33456](https://redirect.github.com/twbs/bootstrap/issues/33456): Use our isDisabled util on dropdown > - [#33466](https://redirect.github.com/twbs/bootstrap/issues/33466): Refactor dropdown's hide functionality > - [#33479](https://redirect.github.com/twbs/bootstrap/issues/33479): Fix dropdown escape propagation > - [#33496](https://redirect.github.com/twbs/bootstrap/issues/33496): Use cached noop function ... (truncated) Commits - [bf09367](twbs/bootstrap@bf09367) Release v5.0.0 ([#33647](https://redirect.github.com/twbs/bootstrap/issues/33647)) - [48ae5a7](twbs/bootstrap@48ae5a7) Rewrite migration guide ([#33834](https://redirect.github.com/twbs/bootstrap/issues/33834)) - [f086572](twbs/bootstrap@f086572) refactor(docs): Added form file input variables ([#33833](https://redirect.github.com/twbs/bootstrap/issues/33833)) - [1a54286](twbs/bootstrap@1a54286) Fix doc typo and Bootstrap Icons link ([#33832](https://redirect.github.com/twbs/bootstrap/issues/33832)) - [e2df73f](twbs/bootstrap@e2df73f) Update migration guide for some v5 changes ([#33829](https://redirect.github.com/twbs/bootstrap/issues/33829)) - [1e6356a](twbs/bootstrap@1e6356a) Neutralise more words from placeholder text ([#33731](https://redirect.github.com/twbs/bootstrap/issues/33731)) - [6633845](twbs/bootstrap@6633845) Bump eslint-config-xo from 0.35.0 to 0.36.0 ([#33646](https://redirect.github.com/twbs/bootstrap/issues/33646)) - [cb38744](twbs/bootstrap@cb38744) Tweak toast docs ([#33810](https://redirect.github.com/twbs/bootstrap/issues/33810)) - [c2ff225](twbs/bootstrap@c2ff225) Bump rollup from 2.46.0 to 2.47.0 ([#33818](https://redirect.github.com/twbs/bootstrap/issues/33818)) - [c090ea2](twbs/bootstrap@c090ea2) Bump @babel/preset-env from 7.14.0 to 7.14.1 ([#33819](https://redirect.github.com/twbs/bootstrap/issues/33819)) - Additional commits viewable in [compare view](twbs/bootstrap@v4.3.1...v5.0.0) Updates karma from 3.0.0 to 6.3.16 Release notes Sourced from [karma's releases](https://github.com/karma-runner/karma/releases). > v6.3.16 > > [6.3.16](karma-runner/karma@v6.3.15...v6.3.16) (2022-02-10) > > Bug Fixes > > - security: mitigate the "Open Redirect Vulnerability" ([ff7edbb](karma-runner/karma@ff7edbb)) > > v6.3.15 > > [6.3.15](karma-runner/karma@v6.3.14...v6.3.15) (2022-02-05) > > Bug Fixes > > - helper: make mkdirIfNotExists helper resilient to concurrent calls ([d9dade2](karma-runner/karma@d9dade2)), closes [karma-runner/karma-coverage#434](https://redirect.github.com//redirect.github.com/karma-runner/karma-coverage/issues/434/issues/issuecomment-1017939333) > > v6.3.14 > > [6.3.14](karma-runner/karma@v6.3.13...v6.3.14) (2022-02-05) > > Bug Fixes > > - remove string template from client code ([91d5acd](karma-runner/karma@91d5acd)) > - warn when singleRun and autoWatch are false ([69cfc76](karma-runner/karma@69cfc76)) > - security: remove XSS vulnerability in returnUrl query param ([839578c](karma-runner/karma@839578c)) > > v6.3.13 > > [6.3.13](karma-runner/karma@v6.3.12...v6.3.13) (2022-01-31) > > Bug Fixes > > - deps: bump log4js to resolve security issue ([5bf2df3](karma-runner/karma@5bf2df3)), closes [#3751](https://redirect.github.com/karma-runner/karma/issues/3751) > > v6.3.12 > > [6.3.12](karma-runner/karma@v6.3.11...v6.3.12) (2022-01-24) > > Bug Fixes > > - remove depreciation warning from log4js ([41bed33](karma-runner/karma@41bed33)) > > v6.3.11 > > [6.3.11](karma-runner/karma@v6.3.10...v6.3.11) (2022-01-13) > > Bug Fixes > > - deps: pin colors package to 1.4.0 due to security vulnerability ([a5219c5](karma-runner/karma@a5219c5)) ... (truncated) Changelog Sourced from [karma's changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md). > [6.3.16](karma-runner/karma@v6.3.15...v6.3.16) (2022-02-10) > > Bug Fixes > > - security: mitigate the "Open Redirect Vulnerability" ([ff7edbb](karma-runner/karma@ff7edbb)) > > [6.3.15](karma-runner/karma@v6.3.14...v6.3.15) (2022-02-05) > > Bug Fixes > > - helper: make mkdirIfNotExists helper resilient to concurrent calls ([d9dade2](karma-runner/karma@d9dade2)), closes [karma-runner/karma-coverage#434](https://redirect.github.com//redirect.github.com/karma-runner/karma-coverage/issues/434/issues/issuecomment-1017939333) > > [6.3.14](karma-runner/karma@v6.3.13...v6.3.14) (2022-02-05) > > Bug Fixes > > - remove string template from client code ([91d5acd](karma-runner/karma@91d5acd)) > - warn when singleRun and autoWatch are false ([69cfc76](karma-runner/karma@69cfc76)) > - security: remove XSS vulnerability in returnUrl query param ([839578c](karma-runner/karma@839578c)) > > [6.3.13](karma-runner/karma@v6.3.12...v6.3.13) (2022-01-31) > > Bug Fixes > > - deps: bump log4js to resolve security issue ([5bf2df3](karma-runner/karma@5bf2df3)), closes [#3751](https://redirect.github.com/karma-runner/karma/issues/3751) > > [6.3.12](karma-runner/karma@v6.3.11...v6.3.12) (2022-01-24) > > Bug Fixes > > - remove depreciation warning from log4js ([41bed33](karma-runner/karma@41bed33)) > > [6.3.11](karma-runner/karma@v6.3.10...v6.3.11) (2022-01-13) > > Bug Fixes > > - deps: pin colors package to 1.4.0 due to security vulnerability ([a5219c5](karma-runner/karma@a5219c5)) > > [6.3.10](karma-runner/karma@v6.3.9...v6.3.10) (2022-01-08) > > Bug Fixes > > - logger: create parent folders if they are missing ([0d24bd9](karma-runner/karma@0d24bd9)), closes [#3734](https://redirect.github.com/karma-runner/karma/issues/3734) ... (truncated) Commits - [ab4b328](karma-runner/karma@ab4b328) chore(release): 6.3.16 [skip ci] - [ff7edbb](karma-runner/karma@ff7edbb) fix(security): mitigate the "Open Redirect Vulnerability" - [c1befa0](karma-runner/karma@c1befa0) chore(release): 6.3.15 [skip ci] - [d9dade2](karma-runner/karma@d9dade2) fix(helper): make mkdirIfNotExists helper resilient to concurrent calls - [653c762](karma-runner/karma@653c762) ci: prevent duplicate CI tasks on creating a PR - [c97e562](karma-runner/karma@c97e562) chore(release): 6.3.14 [skip ci] - [91d5acd](karma-runner/karma@91d5acd) fix: remove string template from client code - [69cfc76](karma-runner/karma@69cfc76) fix: warn when singleRun and autoWatch are false - [839578c](karma-runner/karma@839578c) fix(security): remove XSS vulnerability in returnUrl query param - [db53785](karma-runner/karma@db53785) chore(release): 6.3.13 [skip ci] - Additional commits viewable in [compare view](karma-runner/karma@v3.0.0...v6.3.16) Updates @babel/traverse from 7.4.4 to 7.25.6 Release notes Sourced from [@babel/traverse's releases](https://github.com/babel/babel/releases). > v7.25.6 (2024-08-29) > > Thanks [@j4k0xb](https://github.com/j4k0xb) for your first PR! > > 🐛 Bug Fix > > - babel-generator > > - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-traverse > > - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-parser > > - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung)) > > - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3 > > - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > 💅 Polish > > - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env > > - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes > > - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-generator > > - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > 🏠 Internal > > - babel-generator > > - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > Committers: 5 > > - Babel Bot ([@babel-bot](https://github.com/babel-bot)) > - Huáng Jùnliàng ([@JLHwung](https://github.com/JLHwung)) > - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > - [@j4k0xb](https://github.com/j4k0xb) > - [@liuxingbaoyu](https://github.com/liuxingbaoyu) > > v7.25.5 (2024-08-23) > > 🐛 Bug Fix > > - babel-generator, babel-traverse > > - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate sequence expression parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > 💅 Polish > > - babel-generator > > - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > Committers: 2 > > - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > - [@liuxingbaoyu](https://github.com/liuxingbaoyu) > > v7.25.4 (2024-08-22) ... (truncated) Changelog Sourced from [@babel/traverse's changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md). > v7.25.6 (2024-08-29) > > 🐛 Bug Fix > > - babel-generator > > - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-traverse > > - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-parser > > - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung)) > > - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3 > > - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > 💅 Polish > > - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env > > - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes > > - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-generator > > - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > 🏠 Internal > > - babel-generator > > - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > v7.25.5 (2024-08-23) > > 🐛 Bug Fix > > - babel-generator, babel-traverse > > - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > 💅 Polish > > - babel-generator > > - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > v7.25.4 (2024-08-22) > > 🐛 Bug Fix > > - babel-traverse > > - [#16756](https://redirect.github.com/babel/babel/pull/16756) fix: Skip computed key when renaming ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators > > - [#16755](https://redirect.github.com/babel/babel/pull/16755) fix: Decorator 2018-09 may throw an exception ([@liuxingbaoyu](https://github.com/liuxingbaoyu)) > > - babel-types > > - [#16710](https://redirect.github.com/babel/babel/pull/16710) Visit AST fields nodes according to their syntactical order ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-generator > > - [#16709](https://redirect.github.com/babel/babel/pull/16709) Print semicolon after TS export namespace as A ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > 💅 Polish > > - babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse > > - [#16722](https://redirect.github.com/babel/babel/pull/16722) Avoid unnecessary parens around sequence expressions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) > > - babel-generator, babel-plugin-transform-class-properties > > - [#16714](https://redirect.github.com/babel/babel/pull/16714) Avoid unnecessary parens around exported arrow functions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo)) ... (truncated) Commits - [2f72b97](babel/babel@2f72b97) v7.25.6 - [faceae9](babel/babel@faceae9) fix: path.getAssignmentIdentifiers may be undefined ([#16727](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16727)) - [46ee612](babel/babel@46ee612) Remove some NodePath methods ([#16655](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16655)) - [2fdc8b5](babel/babel@2fdc8b5) fix: Generate sequence expression parentheses correctly ([#16764](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16764)) - [cbf124c](babel/babel@cbf124c) v7.25.4 - [2b289fb](babel/babel@2b289fb) fix: skip computed key when renaming ([#16756](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16756)) - [575863c](babel/babel@575863c) Avoid unnecessary parens around sequence expressions ([#16722](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16722)) - [5174ad1](babel/babel@5174ad1) Clean all always enabled parser plugins ([#16572](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16572)) - [52718ab](babel/babel@52718ab) Discontinue babel-eslint-config-internal ([#16718](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16718)) - [dba45d3](babel/babel@dba45d3) Ignore devDependencies when generating tsconfig.json ([#16659](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16659)) - Additional commits viewable in [compare view](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates braces from 0.1.5 to 1.8.5 Changelog Sourced from [braces's changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md). > [1.8.5] - 2016-05-21 > > - Refactor ([#10](https://redirect.github.com/micromatch/braces/issues/10)) > > [1.8.4] - 2016-04-20 > > - fixes [micromatch/micromatch#66](https://redirect.github.com/jonschlinkert/micromatch/issues/66) > > [1.8.0] - 2015-03-18 > > - adds exponent examples, tests > - fixes the first example in [micromatch/micromatch#38](https://redirect.github.com/jonschlinkert/micromatch/issues/38) > > [1.6.0] - 2015-01-30 > > - optimizations, bash mode: > - improve path escaping > > [1.5.0] - 2015-01-28 > > - Merge pull request [#5](https://redirect.github.com/micromatch/braces/issues/5) from eush77/lib-files > > [1.4.0] - 2015-01-24 > > - add extglob tests > - externalize exponent function > - better whitespace handling > > [1.3.0] - 2015-01-24 > > - make regex patterns explicity > > [1.1.0] - 2015-01-11 > > - don't create a match group with makeRe > > [1.0.0] - 2014-12-23 > > - Merge commit '97b05f5544f8348736a8efaecf5c32bbe3e2ad6e' > - support empty brace syntax > - better bash coverage > - better support for regex strings > > [0.1.4] - 2014-11-14 > > - improve recognition of bad args, recognize mismatched argument types > - support escaping > - remove pathname-expansion > - support whitespace in patterns ... (truncated) Commits - See full diff in [compare view](https://github.com/micromatch/braces/commits/1.8.5) Updates browserify-sign from 4.0.4 to 4.2.3 Changelog Sourced from [browserify-sign's changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md). > [v4.2.3](browserify/browserify-sign@v4.2.2...v4.2.3) - 2024-03-05 > > Commits > > - [patch] widen support to 0.12 [9247adf](browserify/browserify-sign@9247adf) > - [patch] drop minimum node support to v1 [4d0ee49](browserify/browserify-sign@4d0ee49) > - [Dev Deps] update aud, npmignore, tape [87f3a35](browserify/browserify-sign@87f3a35) > - [actions] remove redundant finisher [37a4758](browserify/browserify-sign@37a4758) > - [Deps] pin hash-base to ~3.0, due to a breaking change [9e2bf12](browserify/browserify-sign@9e2bf12) > - [Deps] update parse-asn1 ***@***.***(browserify/browserify-sign@f427270)) > - [Deps] update elliptic [fb261ce](browserify/browserify-sign@fb261ce) > - [Deps] pin elliptic due to a breaking change [168e16f](browserify/browserify-sign@168e16f) > > [v4.2.2](browserify/browserify-sign@v4.2.1...v4.2.2) - 2023-10-25 > > Fixed > > - [Tests] log when openssl doesn't support cipher [[#37](browserify/browserify-sign#37) > > Commits > > - Only apps should have lockfiles [09a8995](browserify/browserify-sign@09a8995) > - [eslint] switch to eslint [83fe463](browserify/browserify-sign@83fe463) > - [meta] add npmignore and auto-changelog [4418183](browserify/browserify-sign@4418183) > - [meta] fix package.json indentation [9ac5a5e](browserify/browserify-sign@9ac5a5e) > - [Tests] migrate from travis to github actions [d845d85](browserify/browserify-sign@d845d85) > - [Fix] sign: throw on unsupported padding scheme [8767739](browserify/browserify-sign@8767739) > - [Fix] properly check the upper bound for DSA signatures [85994cd](browserify/browserify-sign@85994cd) > - [Tests] handle openSSL not supporting a scheme [f5f17c2](browserify/browserify-sign@f5f17c2) > - [Deps] update bn.js, browserify-rsa, elliptic, parse-asn1, readable-stream, safe-buffer [a67d0eb](browserify/browserify-sign@a67d0eb) > - [Dev Deps] update nyc, standard, tape [cc5350b](browserify/browserify-sign@cc5350b) > - [Tests] always run coverage; downgrade nyc [75ce1d5](browserify/browserify-sign@75ce1d5) > - [meta] add safe-publish-latest [dcf49ce](browserify/browserify-sign@dcf49ce) > - [Tests] add npm run posttest [75dd8fd](browserify/browserify-sign@75dd8fd) > - [Dev Deps] update tape [3aec038](browserify/browserify-sign@3aec038) > - [Tests] skip unsupported schemes [703c83e](browserify/browserify-sign@703c83e) > - [Tests] node < 6 lacks array includes [3aa43cf](browserify/browserify-sign@3aa43cf) > - [Dev Deps] fix eslint range [98d4e0d](browserify/browserify-sign@98d4e0d) > > [v4.2.1](browserify/browserify-sign@v4.2.0...v4.2.1) - 2020-08-04 > > Merged > > - bump elliptic [[#58](browserify/browserify-sign#58) > > [v4.2.0](browserify/browserify-sign@v4.1.0...v4.2.0) - 2020-05-18 > > Merged > > - switch to safe buffer [[#53](browserify/browserify-sign#53) ... (truncated) Commits - [bf2c3ec](browserify/browserify-sign@bf2c3ec) v4.2.3 - [9247adf](browserify/browserify-sign@9247adf) [patch] widen support to 0.12 - [f427270](browserify/browserify-sign@f427270) [Deps] update `parse-asn1 - [87f3a35](browserify/browserify-sign@87f3a35) [Dev Deps] update aud, npmignore, tape - [fb261ce](browserify/browserify-sign@fb261ce) [Deps] update elliptic - [4d0ee49](browserify/browserify-sign@4d0ee49) [patch] drop minimum node support to v1 - [9e2bf12](browserify/browserify-sign@9e2bf12) [Deps] pin hash-base to ~3.0, due to a breaking change - [168e16f](browserify/browserify-sign@168e16f) [Deps] pin elliptic due to a breaking change - [37a4758](browserify/browserify-sign@37a4758) [actions] remove redundant finisher - [4af5a90](browserify/browserify-sign@4af5a90) v4.2.2 - Additional commits viewable in [compare view](browserify/browserify-sign@v4.0.4...v4.2.3) Maintainer changes This version was pushed to npm by [ljharb](https://www.npmjs.com/~ljharb), a new releaser for browserify-sign since your current version. Updates decode-uri-component from 0.2.0 to 0.2.2 Release notes Sourced from [decode-uri-component's releases](https://github.com/SamVerschueren/decode-uri-component/releases). > v0.2.2 > > - Prevent overwriting previously decoded tokens 980e0bf > > ***@***.***(SamVerschueren/decode-uri-component@v0.2.1...v0.2.2) > > v0.2.1 > > - Switch to GitHub workflows 76abc93 > - Fix issue where decode throws - fixes [#6](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6) 746ca5d > - Update license ([#1](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1)) 486d7e2 > - Tidelift tasks a650457 > - Meta tweaks 66e1c28 > > ***@***.***(SamVerschueren/decode-uri-component@v0.2.0...v0.2.1) Commits - [a0eea46](SamVerschueren/decode-uri-component@a0eea46) 0.2.2 - [980e0bf](SamVerschueren/decode-uri-component@980e0bf) Prevent overwriting previously decoded tokens - [3c8a373](SamVerschueren/decode-uri-component@3c8a373) 0.2.1 - [76abc93](SamVerschueren/decode-uri-component@76abc93) Switch to GitHub workflows - [746ca5d](SamVerschueren/decode-uri-component@746ca5d) Fix issue where decode throws - fixes [#6](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6) - [486d7e2](SamVerschueren/decode-uri-component@486d7e2) Update license ([#1](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1)) - [a650457](SamVerschueren/decode-uri-component@a650457) Tidelift tasks - [66e1c28](SamVerschueren/decode-uri-component@66e1c28) Meta tweaks - See full diff in [compare view](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates elliptic from 6.4.1 to 6.5.7 Commits - [3e46a48](indutny/elliptic@3e46a48) 6.5.7 - [accb61e](indutny/elliptic@accb61e) lib: DER signature decoding correction - [03e06e1](indutny/elliptic@03e06e1) 6.5.6 - [7ac5360](indutny/elliptic@7ac5360) Merge commit from fork - [7570078](indutny/elliptic@7570078) 6.5.5 - [206da2e](indutny/elliptic@206da2e) lib: lint - [0a78e03](indutny/elliptic@0a78e03) [Fix] restore node < 4 compat - [43ac7f2](indutny/elliptic@43ac7f2) 6.5.4 - [f4bc72b](indutny/elliptic@f4bc72b) package: bump deps - [441b742](indutny/elliptic@441b742) ec: validate that a point before deriving keys - Additional commits viewable in [compare view](indutny/elliptic@v6.4.1...v6.5.7) Updates engine.io from 3.2.1 to 6.6.1 Release notes Sourced from [engine.io's releases](https://github.com/socketio/socket.io/releases). > ***@***.*** > > Bug Fixes > > - discard all pending packets when the server is closed ([923a12e](socketio/socket.io@923a12e)) > - uws: prevent the client from upgrading twice ([d5095fe](socketio/socket.io@d5095fe)) > > Dependencies > > - [ws@~8.17.1](https://github.com/websockets/ws/releases/tag/8.17.1) (no change) > > ***@***.*** > > Bug Fixes > > - move 'offline' event listener at the top ([8a2f5a3](socketio/socket.io@8a2f5a3)) > - only remove the event listener if it exists ([9b3c9ab](socketio/socket.io@9b3c9ab)) > - do not send a packet on an expired connection ([#5134](https://redirect.github.com/socketio/socket.io/issues/5134)) ([8adcfbf](socketio/socket.io@8adcfbf)) > > Performance Improvements > > - do not reset the heartbeat timer on each packet ([7a23dde](socketio/socket.io@7a23dde)) > > Dependencies > > - [ws@~8.17.1](https://github.com/websockets/ws/releases/tag/8.17.1) (no change) Commits - See full diff in [compare ***@***.***) Updates eventsource from 1.0.7 to 1.1.2 Changelog Sourced from [eventsource's changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md). > [1.1.2](EventSource/eventsource@v1.1.1...v1.1.2) > > - Inline origin resolution, drops original dependency ([#281](https://redirect.github.com/EventSource/eventsource/pull/281) Espen Hovlandsdal) > > [1.1.1](EventSource/eventsource@v1.1.0...v1.1.1) > > - Do not include authorization and cookie headers on redirect to different origin ([#273](https://redirect.github.com/EventSource/eventsource/pull/273) Espen Hovlandsdal) > > [1.1.0](EventSource/eventsource@v1.0.7...v1.1.0) > > - Improve performance for large messages across many chunks ([#130](https://redirect.github.com/EventSource/eventsource/pull/130) Trent Willis) > - Add createConnection option for http or https requests ([#120](https://redirect.github.com/EventSource/eventsource/pull/120) Vasily Lavrov) > - Support HTTP 302 redirects ([#116](https://redirect.github.com/EventSource/eventsource/pull/116) Ryan Bonte) > - Prevent sequential errors from attempting multiple reconnections ([#125](https://redirect.github.com/EventSource/eventsource/pull/125) David Patty) > - Add new to correct test ([#111](https://redirect.github.com/EventSource/eventsource/pull/101) Stéphane Alnet) > - Fix reconnections attempts now happen more than once ([#136](https://redirect.github.com/EventSource/eventsource/pull/136) Icy Fish) Commits - [0a8b85b](EventSource/eventsource@0a8b85b) 1.1.2 - [f99ae66](EventSource/eventsource@f99ae66) docs: update history for 1.1.2 - [06c9721](EventSource/eventsource@06c9721) chore: rebuild polyfill - [9494642](EventSource/eventsource@9494642) fix: inline origin resolution, drop original dependency ([#281](https://redirect.github.com/EventSource/eventsource/issues/281)) - [aa7a408](EventSource/eventsource@aa7a408) 1.1.1 - [56d489e](EventSource/eventsource@56d489e) chore: rebuild polyfill - [4a951e5](EventSource/eventsource@4a951e5) docs: update history for 1.1.1 - [f9f6416](EventSource/eventsource@f9f6416) fix: strip sensitive headers on redirect to different origin - [9dd0687](EventSource/eventsource@9dd0687) 1.1.0 - [49497ba](EventSource/eventsource@49497ba) Update history for 1.1.0 ([#146](https://redirect.github.com/EventSource/eventsource/issues/146)) - Additional commits viewable in [compare view](EventSource/eventsource@v1.0.7...v1.1.2) Updates express from 4.16.4 to 4.21.0 Release notes Sourced from [express's releases](https://github.com/expressjs/express/releases). > 4.21.0 > > What's Changed > > - Deprecate "back" magic string in redirects by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5935](https://redirect.github.com/expressjs/express/pull/5935) > - ***@***.*** by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5954](https://redirect.github.com/expressjs/express/pull/5954) > - fix(deps): ***@***.*** by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5951](https://redirect.github.com/expressjs/express/pull/5951) > - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://github.com/agadzinski93) in [expressjs/express#5946](https://redirect.github.com/expressjs/express/pull/5946) > > New Contributors > > - [@agadzinski93](https://github.com/agadzinski93) made their first contribution in [expressjs/express#5946](https://redirect.github.com/expressjs/express/pull/5946) > > Full Changelog: ***@***.***(expressjs/express@4.20.0...4.21.0) > > 4.20.0 > > What's Changed > > Important > > - IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity) > - Remove link renderization in html while using res.redirect > > Other Changes > > - 4.19.2 Staging by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5561](https://redirect.github.com/expressjs/express/pull/5561) > - remove duplicate location test for data uri by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5562](https://redirect.github.com/expressjs/express/pull/5562) > - feat: document beta releases expectations by [@marco-ippolito](https://github.com/marco-ippolito) in [expressjs/express#5565](https://redirect.github.com/expressjs/express/pull/5565) > - Cut down on duplicated CI runs by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5564](https://redirect.github.com/expressjs/express/pull/5564) > - Add a Threat Model by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5526](https://redirect.github.com/expressjs/express/pull/5526) > - Assign captain of encodeurl by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5579](https://redirect.github.com/expressjs/express/pull/5579) > - Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5587](https://redirect.github.com/expressjs/express/pull/5587) > - docs: update Security.md by [@inigomarquinez](https://github.com/inigomarquinez) in [expressjs/express#5590](https://redirect.github.com/expressjs/express/pull/5590) > - docs: update triage nomination policy by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5600](https://redirect.github.com/expressjs/express/pull/5600) > - Add CodeQL (SAST) by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5433](https://redirect.github.com/expressjs/express/pull/5433) > - docs: add UlisesGascon as triage initiative captain by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5605](https://redirect.github.com/expressjs/express/pull/5605) > - deps: encodeurl@~2.0.0 by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5569](https://redirect.github.com/expressjs/express/pull/5569) > - skip QUERY method test by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5628](https://redirect.github.com/expressjs/express/pull/5628) > - ignore ETAG query test on 21 and 22, reuse skip util by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5639](https://redirect.github.com/expressjs/express/pull/5639) > - ... > > Description has been truncated --------------------------------------------------------------- You can view, comment on, or merge this pull request online at: #6 Commit Summary - [ca5c956](ca5c956) Bump the npm_and_yarn group across 1 directory with 26 updates File Changes ([2 files](https://github.com/reposman33/assignmentAngularBackBase/pull/6/files)) - M [package.json](https://github.com/reposman33/assignmentAngularBackBase/pull/6/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519) (6) - M [yarn.lock](https://github.com/reposman33/assignmentAngularBackBase/pull/6/files#diff-51e4f558fae534656963876761c95b83b6ef5da5103c4adef6768219ed76c2de) (1832) Patch Links: - https://github.com/reposman33/assignmentAngularBackBase/pull/6.patch - https://github.com/reposman33/assignmentAngularBackBase/pull/6.diff — Reply to this email directly, [view it on GitHub](#6), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AAYNOZXB7V5PYJ5W6EGKWPDZYODC7AVCNFSM6AAAAABO4DMWYKVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU2DSNBXGE2DGOA). You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

dependabot · 2024-09-26T08:25:44Z

Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot bot added the dependencies Pull requests that update a dependency file label Sep 26, 2024

This was referenced Sep 26, 2024

Bump url-parse from 1.4.7 to 1.5.10 #1

Closed

Bump bootstrap from 4.3.1 to 5.0.0 #3

Closed

Bump express from 4.16.4 to 4.21.0 #4

Closed

Bump elliptic from 6.4.1 to 6.5.7 #5

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 26 updates #6

Bump the npm_and_yarn group across 1 directory with 26 updates #6

dependabot bot commented on behalf of github Sep 26, 2024

reposman33 commented Sep 26, 2024 via email

dependabot bot commented on behalf of github Sep 26, 2024

Bump the npm_and_yarn group across 1 directory with 26 updates #6

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 26 updates #6

Conversation

dependabot bot commented on behalf of github Sep 26, 2024

10.2.5 (2021-04-14)

Bug Fixes

10.2.4 (2020-12-17)

Bug Fixes

10.2.3 (2020-11-09)

Bug Fixes

10.2.2 (2020-11-04)

Bug Fixes

Performance Improvements

v5.0.0

Highlights

🚀 Features

🎨 CSS

☕️ JavaScript

v6.3.16

6.3.16 (2022-02-10)

Bug Fixes

v6.3.15

6.3.15 (2022-02-05)

Bug Fixes

v6.3.14

6.3.14 (2022-02-05)

Bug Fixes

v6.3.13

6.3.13 (2022-01-31)

Bug Fixes

v6.3.12

6.3.12 (2022-01-24)

Bug Fixes

v6.3.11

6.3.11 (2022-01-13)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes

6.3.11 (2022-01-13)

Bug Fixes

6.3.10 (2022-01-08)

Bug Fixes

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.5 (2024-08-23)

🐛 Bug Fix

💅 Polish

Committers: 2

v7.25.4 (2024-08-22)

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

v7.25.5 (2024-08-23)

🐛 Bug Fix

💅 Polish

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

[1.8.5] - 2016-05-21

[1.8.4] - 2016-04-20

[1.8.0] - 2015-03-18

[1.6.0] - 2015-01-30

[1.5.0] - 2015-01-28

[1.4.0] - 2015-01-24

[1.3.0] - 2015-01-24

[1.1.0] - 2015-01-11

[1.0.0] - 2014-12-23