Bump fast-xml-parser and @aws-sdk/client-s3 #60
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.2.5 and updates ancestor dependency [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3). These dependencies need to be updated together. Updates `fast-xml-parser` from 4.0.11 to 4.2.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5) Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect - dependency-name: "@aws-sdk/client-s3" dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
TIL-EBP
approved these changes
Mar 20, 2024
TIL-EBP
deleted the
dependabot/npm_and_yarn/fast-xml-parser-and-aws-sdk/client-s3-4.2.5
branch
daniel-va
pushed a commit
that referenced
this pull request
May 15, 2024
# This is the 1st commit message: local development environment # This is the commit message #2: relocate local development init files # This is the commit message #3: create ci action # This is the commit message #4: update ci action # This is the commit message #5: update ci action # This is the commit message #6: clean unit-tests and fix lint errors # This is the commit message #7: create codeQL action # This is the commit message #8: update codeQL action # This is the commit message #9: create pre-release action # This is the commit message #10: update pre-release action # This is the commit message #11: update pre-release action # This is the commit message #12: update pre-release action # This is the commit message #13: update pre-release action # This is the commit message #14: create release action # This is the commit message #15: assets #12 setup local environment and create a clean DB # This is the commit message #16: update release action # This is the commit message #17: update release action # This is the commit message #18: clean-up # This is the commit message #19: rename development-names # This is the commit message #20: update release action # This is the commit message #21: update release action # This is the commit message #22: update release action # This is the commit message #23: update docker file # This is the commit message #24: update docker file # This is the commit message #25: Bump @babel/traverse from 7.20.12 to 7.24.0 Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.12 to 7.24.0. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.0/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #26: Bump webpack and @angular-devkit/build-angular Bumps [webpack](https://github.com/webpack/webpack) to 5.76.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `webpack` from 5.75.0 to 5.76.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.75.0...v5.76.1) Updates `@angular-devkit/build-angular` from 15.1.1 to 15.2.10 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@15.1.1...15.2.10) --- updated-dependencies: - dependency-name: webpack dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #27: Bump semver from 5.7.1 to 5.7.2 Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) --- updated-dependencies: - dependency-name: semver dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #28: Bump undici from 5.22.1 to 5.28.3 Bumps [undici](https://github.com/nodejs/undici) from 5.22.1 to 5.28.3. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.22.1...v5.28.3) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #29: Bump follow-redirects from 1.15.2 to 1.15.5 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.5. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.5) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #30: Bump axios from 1.4.0 to 1.6.7 Bumps [axios](https://github.com/axios/axios) from 1.4.0 to 1.6.7. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.4.0...v1.6.7) --- updated-dependencies: - dependency-name: axios dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #31: Bump word-wrap from 1.2.3 to 1.2.5 Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #32: Bump vite from 4.0.4 to 4.5.2 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.0.4 to 4.5.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #33: Feature/assets 16 replace logos (#43) * assets-16: replace the old logo and favicon with new ones * assets-32: replace the logo with the actual one for assets # This is the commit message #34: Feature/assets 8: add missing scrollbars (#40) * assets-8: add scrollbars to all tabs in assets editor and user management * assets-8: remove some duplicate attributes * assets-8: fix unchanged files with annotations * assets-8: fix unchanged files with annotations * assets-8: fix unchanged files with annotations --------- Co-authored-by: Alex Graf <Alex.Graf@ebp.ch> # This is the commit message #35: assets-32: break long titles so the edit button is not hidden. same for the search result in order to display the entire title (#44) # This is the commit message #36: update pre-release action # This is the commit message #37: update pre-release action # This is the commit message #38: update pre-release action # This is the commit message #39: update pre-release action # This is the commit message #40: update release action # This is the commit message #41: update release action # This is the commit message #42: update dockerfiles and actions # This is the commit message #43: update release action # This is the commit message #44: update release action # This is the commit message #45: update release action # This is the commit message #46: update release action # This is the commit message #47: update release action # This is the commit message #48: update release action # This is the commit message #49: update pre-release action # This is the commit message #50: update dev-deploy action # This is the commit message #51: Bump ip from 2.0.0 to 2.0.1 Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. - [Commits](indutny/node-ip@v2.0.0...v2.0.1) --- updated-dependencies: - dependency-name: ip dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #52: Bump the npm_and_yarn group across 1 directory with 6 updates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.0.11` | `4.2.5` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.252.0` | `3.537.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.5` | `1.15.6` | | [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.2` | `4.1.3` | | [@cypress/request](https://github.com/cypress-io/request) | `2.88.11` | `2.88.12` | Updates `fast-xml-parser` from 4.0.11 to 4.2.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5) Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3) Updates `follow-redirects` from 1.15.5 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6) Updates `ip` from 2.0.0 to 2.0.1 - [Commits](indutny/node-ip@v2.0.0...v2.0.1) Updates `tough-cookie` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3) Updates `@cypress/request` from 2.88.11 to 2.88.12 - [Release notes](https://github.com/cypress-io/request/releases) - [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md) - [Commits](cypress-io/request@v2.88.11...v2.88.12) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@aws-sdk/client-s3" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@cypress/request" dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #53: Bump tough-cookie and @cypress/request Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) and [@cypress/request](https://github.com/cypress-io/request). These dependencies needed to be updated together. Updates `tough-cookie` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3) Updates `@cypress/request` from 2.88.11 to 2.88.12 - [Release notes](https://github.com/cypress-io/request/releases) - [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md) - [Commits](cypress-io/request@v2.88.11...v2.88.12) --- updated-dependencies: - dependency-name: tough-cookie dependency-type: indirect - dependency-name: "@cypress/request" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #54: Bump fast-xml-parser and @aws-sdk/client-s3 Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.2.5 and updates ancestor dependency [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3). These dependencies need to be updated together. Updates `fast-xml-parser` from 4.0.11 to 4.2.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5) Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect - dependency-name: "@aws-sdk/client-s3" dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #55: Bump follow-redirects from 1.15.5 to 1.15.6 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> # This is the commit message #56: assets-39: remove console log of password from test # This is the commit message #57: update dev-deploy action # This is the commit message #58: update dev-deploy action # This is the commit message #59: update dev-deploy action # This is the commit message #60: update dev-deploy action # This is the commit message #61: update dev-deploy action # This is the commit message #62: update dev-deploy action # This is the commit message #63: update dev-deploy action # This is the commit message #64: update dev-deploy action # This is the commit message #65: update release action # This is the commit message #66: update release action # This is the commit message #67: update release action # This is the commit message #68: Add elasticsearch init script # This is the commit message #69: Remove initial `rdsadmin` user # This is the commit message #70: Extend setup instructions in README # This is the commit message #71: Feature/assets 7 eIAM (#75) #7: integrate eIAM update create-docker-image action update create-docker-image action update create-docker-image action #67: update elasticsearch-index local fix lint #11 fix sonar-issues, unit-tests Replace build workflows with new unified `build` workflow Rewrite `release` workflow to just add `latest` flag The workflow will no longer add a new image tagged as `release`. Also, the ChangeLog has been removed completely as it is not used by the current project team. Re-add codeql workflow Remove pull request triggers from workflows Remove duplicates from displayed sibling assets Remove all existing siblings when patching an asset Revert bad commits Add tagging/release notes to actions Add name to `release` pipeline Remove self-dependency of `build.build` step Remove docker image version tag Use `install` instead of `ci` to install node modules Run nx with `npx` Add node modules cache to build pipeline Add debug steps to build pipeline Move debug steps to test job Add `npm ci` to check jobs Cache build node_modules from within build dir Reset nx in build pipeline Add explicit typing to `contact-edit.service` Add dev setup steps to build pipeline Remove postinstall from build pipeline Run `ng` via npx in build pipeline Replace `actions/cache@v2` with `v4` Make `tag_edge_commit` build step depend on `build_and_push_app` Fix pipeline job branch check Add checkouts before building images Remove all existing siblings when patching an asset Make GITHUB_TOKEN an input for `create-image` action Add startup prisma migration to server Dockerfile Extract CRUD of `asset` table into `AssetRepo` Install `@faker-js/faker` Library for generating fake data for testing. Test `AssetRepo` Update `fp-ts` package `tap` function is only available from 2.15+ Extract elasticsearch usages into `AssetSearchService` Add `AllStudy` view definition to schema Test `AssetSearchService` Replace elasticsearch usages by `AssetSearchService` #81: Added checking for user groups in middleware and returns the error message to the frontend. Added env variable fields to template for o_Auth #81: Show error message when error returned from the backend Remove unused code for auth (password reset etc) as part of #11 Create Bug template Add Issue template Refine templates #81: pr comments and remove serach field on error page #81: fix lint issues Apply `build` workflow to all branches Merge pull request #96 from swisstopo/feature/asset-71-update-elasticsearch-index Merge pull request #98 from swisstopo/feature/asset-33-bug-alternative-ids Add build step to tag release candidate api Deployment to int (#105) * local development environment * relocate local development init files * create ci action * update ci action * update ci action * clean unit-tests and fix lint errors * create codeQL action * update codeQL action * create pre-release action * update pre-release action * update pre-release action * update pre-release action * update pre-release action * assets #12 setup local environment and create a clean DB * create release action * update release action * update release action * clean-up * rename development-names * update release action * update release action * update release action * update docker file * update docker file * Bump @babel/traverse from 7.20.12 to 7.24.0 Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.20.12 to 7.24.0. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.0/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump webpack and @angular-devkit/build-angular Bumps [webpack](https://github.com/webpack/webpack) to 5.76.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `webpack` from 5.75.0 to 5.76.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.75.0...v5.76.1) Updates `@angular-devkit/build-angular` from 15.1.1 to 15.2.10 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@15.1.1...15.2.10) --- updated-dependencies: - dependency-name: webpack dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> * Bump vite from 4.0.4 to 4.5.2 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.0.4 to 4.5.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> * Bump word-wrap from 1.2.3 to 1.2.5 Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.5. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump axios from 1.4.0 to 1.6.7 Bumps [axios](https://github.com/axios/axios) from 1.4.0 to 1.6.7. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.4.0...v1.6.7) --- updated-dependencies: - dependency-name: axios dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump follow-redirects from 1.15.2 to 1.15.5 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.5. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.5) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.22.1 to 5.28.3 Bumps [undici](https://github.com/nodejs/undici) from 5.22.1 to 5.28.3. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.22.1...v5.28.3) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump semver from 5.7.1 to 5.7.2 Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) --- updated-dependencies: - dependency-name: semver dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump ip from 2.0.0 to 2.0.1 Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. - [Commits](indutny/node-ip@v2.0.0...v2.0.1) --- updated-dependencies: - dependency-name: ip dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * assets-39: remove console log of password from test * Feature/assets 16 replace logos (#43) * assets-16: replace the old logo and favicon with new ones * assets-32: replace the logo with the actual one for assets * Feature/assets 8: add missing scrollbars (#40) * assets-8: add scrollbars to all tabs in assets editor and user management * assets-8: remove some duplicate attributes * assets-8: fix unchanged files with annotations * assets-8: fix unchanged files with annotations * assets-8: fix unchanged files with annotations --------- Co-authored-by: Alex Graf <Alex.Graf@ebp.ch> * assets-32: break long titles so the edit button is not hidden. same for the search result in order to display the entire title (#44) * update pre-release action * update pre-release action * update pre-release action * update pre-release action * update release action * update release action * update dockerfiles and actions * Bump follow-redirects from 1.15.5 to 1.15.6 Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump fast-xml-parser and @aws-sdk/client-s3 Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.2.5 and updates ancestor dependency [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3). These dependencies need to be updated together. Updates `fast-xml-parser` from 4.0.11 to 4.2.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5) Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect - dependency-name: "@aws-sdk/client-s3" dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * Bump tough-cookie and @cypress/request Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) and [@cypress/request](https://github.com/cypress-io/request). These dependencies needed to be updated together. Updates `tough-cookie` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3) Updates `@cypress/request` from 2.88.11 to 2.88.12 - [Release notes](https://github.com/cypress-io/request/releases) - [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md) - [Commits](cypress-io/request@v2.88.11...v2.88.12) --- updated-dependencies: - dependency-name: tough-cookie dependency-type: indirect - dependency-name: "@cypress/request" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * update release action * update release action * update release action * update release action * Bump the npm_and_yarn group across 1 directory with 6 updates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.0.11` | `4.2.5` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.252.0` | `3.537.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.5` | `1.15.6` | | [ip](https://github.com/indutny/node-ip) | `2.0.0` | `2.0.1` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.2` | `4.1.3` | | [@cypress/request](https://github.com/cypress-io/request) | `2.88.11` | `2.88.12` | Updates `fast-xml-parser` from 4.0.11 to 4.2.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.0.11...v4.2.5) Updates `@aws-sdk/client-s3` from 3.252.0 to 3.537.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.537.0/clients/client-s3) Updates `follow-redirects` from 1.15.5 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.6) Updates `ip` from 2.0.0 to 2.0.1 - [Commits](indutny/node-ip@v2.0.0...v2.0.1) Updates `tough-cookie` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3) Updates `@cypress/request` from 2.88.11 to 2.88.12 - [Release notes](https://github.com/cypress-io/request/releases) - [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md) - [Commits](cypress-io/request@v2.88.11...v2.88.12) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@aws-sdk/client-s3" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@cypress/request" dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com> * update release action * update release action * update pre-release action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update dev-deploy action * update release action * update release action * update release action * #67: update elasticsearch-index local * fix lint * #11 fix sonar-issues, unit-tests * Feature/assets 7 eIAM (#75) #7: integrate eIAM * Add elasticsearch init script * Remove initial `rdsadmin` user * Extend setup instructions in README * update create-docker-image action * update create-docker-image action * update create-docker-image action * Replace build workflows with new unified `build` workflow * Rewrite `release` workflow to just add `latest` flag The workflow will no longer add a new image tagged as `release`. Also, the ChangeLog has been removed completely as it is not used by the current project team. * Re-add codeql workflow * Remove pull request triggers from workflows * Remove duplicates from displayed sibling assets * Remove all existing siblings when patching an asset * Revert bad commits * Remove all existing siblings when patching an asset * Add tagging/release notes to actions * Add name to `release` pipeline * Remove self-dependency of `build.build` step * Remove docker image version tag * Use `install` instead of `ci` to install node modules * Run nx with `npx` * Add node modules cache to build pipeline * Add debug steps to build pipeline * Move debug steps to test job * Add `npm ci` to check jobs * Cache build node_modules from within build dir * Reset nx in build pipeline * Add explicit typing to `contact-edit.service` * Add dev setup steps to build pipeline * Remove postinstall from build pipeline * Run `ng` via npx in build pipeline * Replace `actions/cache@v2` with `v4` * Make `tag_edge_commit` build step depend on `build_and_push_app` * Fix pipeline job branch check * Add checkouts before building images * Make GITHUB_TOKEN an input for `create-image` action * Add startup prisma migration to server Dockerfile * #81: Added checking for user groups in middleware and returns the error message to the frontend. Added env variable fields to template for o_Auth * #81: Show error message when error returned from the backend * Remove unused code for auth (password reset etc) as part of #11 * #81: pr comments and remove serach field on error page * Create Bug template * Add Issue template * Refine templates * #81: fix lint issues * Extract CRUD of `asset` table into `AssetRepo` * Install `@faker-js/faker` Library for generating fake data for testing. * Test `AssetRepo` * Apply `build` workflow to all branches * Update `fp-ts` package `tap` function is only available from 2.15+ * Extract elasticsearch usages into `AssetSearchService` * Add `AllStudy` view definition to schema * Test `AssetSearchService` * Replace elasticsearch usages by `AssetSearchService` * Merge pull request #96 from swisstopo/feature/asset-71-update-elasticsearch-index * Merge pull request #98 from swisstopo/feature/asset-33-bug-alternative-ids --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Alex Graf <Alex.Graf@ebp.ch> Co-authored-by: till_schuetze <till.schuetze@ebp.ch> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Till Schütze <151851258+TIL-EBP@users.noreply.github.com> Co-authored-by: Jannic Veith <103118462+vej-ananas@users.noreply.github.com> Co-authored-by: Jannic Veith <jannic.veith@ebp.ch> Fix build workflow
daniel-va
pushed a commit
that referenced
this pull request
Jun 13, 2024
…-parser-and-aws-sdk/client-s3-4.2.5 Bump fast-xml-parser and @aws-sdk/client-s3
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps fast-xml-parser to 4.2.5 and updates ancestor dependency @aws-sdk/client-s3. These dependencies need to be updated together.
Updates
fast-xml-parserfrom 4.0.11 to 4.2.5Release notes
Sourced from fast-xml-parser's releases.
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
643816dupdate package detailscc73065Remove unused code (#587)9a880b8Merge pull request from GHSA-gpv5-7x3g-ghjvecf6016update package0955739fix: security bugabfee16update package detail39b0e05fix security buge7728afupdate funding detailc7b3ceaupdate package detail6511e07fix unpaired tagUpdates
@aws-sdk/client-s3from 3.252.0 to 3.537.0Release notes
Sourced from
@aws-sdk/client-s3's releases.... (truncated)
Changelog
Sourced from
@aws-sdk/client-s3's changelog.... (truncated)
Commits
75c4599Publish v3.537.069ecf8bPublish v3.536.06bb7caachore: move deprecation after description in comments (#5911)c996c48Publish v3.535.065377c8docs(client-s3): Documentation updates for Amazon S3.74b4812chore(docs): move documentation before release tag (#5905)56e6715chore(clients): allow commands to be constructed without arg if optional (#5901)96fd7dcchore(deps): bump tslib dependency to ^2.6.2 (#5899)1d3b44bPublish v3.534.090feb3fPublish v3.533.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.