chore(deps): bump the dependencies group across 1 directory with 9 updates #5352

dependabot · 2024-11-05T03:08:39Z

Bumps the dependencies group with 9 updates in the / directory:

Package	From	To
@types/ws	`8.5.12`	`8.5.13`
compression	`1.7.4`	`1.7.5`
@hono/node-server	`1.13.3`	`1.13.5`
@types/node	`22.8.4`	`22.9.0`
core-js	`3.38.1`	`3.39.0`
cspell	`8.15.5`	`8.15.7`
hono	`4.6.8`	`4.6.9`
puppeteer	`23.6.1`	`23.7.0`
webpack	`5.95.0`	`5.96.1`

Updates @types/ws from 8.5.12 to 8.5.13

Commits

See full diff in compare view

Updates compression from 1.7.4 to 1.7.5

Release notes

Sourced from compression's releases.

1.7.5

What's Changed

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/compression#186

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/compression#187

docs: fix spelling by @dijonkitchen in expressjs/compression#174

deps: bytes@3.1.2 by @bjohansebas in expressjs/compression#192

remove --bail option by @bjohansebas in expressjs/compression#196

build: Node.js 23.0 by @bjohansebas in expressjs/compression#193

Replace accepts with negotiator by @blakeembrey in expressjs/compression#197

docs: update history by @bjohansebas in expressjs/compression#200

New Contributors

@inigomarquinez made their first contribution in expressjs/compression#186

@dijonkitchen made their first contribution in expressjs/compression#174

@bjohansebas made their first contribution in expressjs/compression#192

@blakeembrey made their first contribution in expressjs/compression#197

@UlisesGascon made their first contribution in expressjs/compression#195

Full Changelog: expressjs/compression@1.7.4...1.7.5

Changelog

Sourced from compression's changelog.

1.7.5 / 2024-10-31

deps: Replace accepts with negotiator@~0.6.4

Add preference option

deps: bytes@3.1.2

Add petabyte (pb) support

Fix "thousandsSeparator" incorrecting formatting fractional part

Fix return value for un-parsable strings

deps: compressible@~2.0.18

Mark font/ttf as compressible

Remove compressible from multipart/mixed

deps: mime-db@'>= 1.43.0 < 2'

deps: safe-buffer@5.2.1

Commits

2854e7d 1.7.5
8626820 docs: update history (#200)
d3560e0 replace accepts with negotiator (#197)
1e95836 Replace accepts with negotiator
5e6ee06 build: Node.js 23.0 (#193)
7f7e9cf test: remove --bail option (#196)
dd8cbe5 deps: bytes@3.1.2 (#192)
63b134f docs: fix spelling (#174)
f3e6f38 ci: fix errors in ci github action for node 8 and 9 (#187)
f0e089b chore: add support for OSSF scorecard reporting (#186)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for compression since your current version.

Updates @hono/node-server from 1.13.3 to 1.13.5

Release notes

Sourced from @hono/node-server's releases.

v1.13.5

What's Changed

fix(utils): accept HeadersInit, null, undefined in buildOutgoingHttpHeaders by @usualoma in honojs/node-server#212

Full Changelog: honojs/node-server@v1.13.4...v1.13.5

v1.13.4

What's Changed

fix: TypeError: headers is not iterable by @mjad218 in honojs/node-server#210

New Contributors

@mjad218 made their first contribution in honojs/node-server#210

Full Changelog: honojs/node-server@v1.13.3...v1.13.4

Commits

350f9b7 v1.13.5
9327d9c fix(utils): accept HeadersInit, null, undefined in buildOutgoingHttpHeaders (...
e63a808 v1.13.4
909e21e fix: TypeError: headers is not iterable (#210)
See full diff in compare view

Updates @types/node from 22.8.4 to 22.9.0

Commits

See full diff in compare view

Updates core-js from 3.38.1 to 3.39.0

Changelog

Sourced from core-js's changelog.

3.39.0 - 2024.10.31

Changes v3.38.1...v3.39.0

Iterator helpers proposal:

Built-ins:

Iterator

Iterator.from

Iterator.prototype.drop

Iterator.prototype.every

Iterator.prototype.filter

Iterator.prototype.find

Iterator.prototype.flatMap

Iterator.prototype.forEach

Iterator.prototype.map

Iterator.prototype.reduce

Iterator.prototype.some

Iterator.prototype.take

Iterator.prototype.toArray

Iterator.prototype[@@toStringTag]

Moved to stable ES, October 2024 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Promise.try:

Built-ins:

Promise.try

Moved to stable ES, October 2024 TC39 meeting

Added es. namespace module, /es/ and /stable/ namespaces entries

Fixed /actual|full/promise/try entries for the callback arguments support

Math.sumPrecise proposal:

Built-ins:

Math.sumPrecise

Moved to stage 3, October 2024 TC39 meeting

Added /actual/ namespace entries, unconditional forced replacement changed to feature detection

Added Iterator sequencing stage 2.7 proposal:

Added built-ins:

Iterator.concat

Map upsert stage 2 proposal:

Updated to the new API following the October 2024 TC39 meeting

Added built-ins:

Map.prototype.getOrInsert

Map.prototype.getOrInsertComputed

WeakMap.prototype.getOrInsert

WeakMap.prototype.getOrInsertComputed

Extractors proposal moved to stage 2, October 2024 TC39 meeting

Usage of @@species pattern removed from %TypedArray% and ArrayBuffer methods, tc39/ecma262/3450:

Built-ins:

%TypedArray%.prototype.filter

%TypedArray%.prototype.filterReject

%TypedArray%.prototype.map

%TypedArray%.prototype.slice

%TypedArray%.prototype.subarray

ArrayBuffer.prototype.slice

... (truncated)

Commits

fe6d2d6 v3.39.0
751bbae add Iterator sequencing stage 2.7 proposal
227a758 update some links, add some missed links
4bdfd91 normalize key in Map.prototype.getOrInsertComputed
2b189d3 validate WeakMap key before callbackfn call in `WeakMap.prototype.getOrIn...
e3e9f37 update Map upsert proposal to the new API
fa5b026 update transferable objects list instructuredClone implementation
fbc4e4f remove usage of @@species pattern from %TypedArray% and ArrayBuffer met...
ce0402d move extractors proposa to stage 2
71d37cb move Promise.try to stable ES
Additional commits viewable in compare view

Updates cspell from 8.15.5 to 8.15.7

Release notes

Sourced from cspell's releases.

v8.15.7

Changes

Fixes

fix: Use the usePnP flag. (#6458)

v8.15.6

Changes

Fixes

fix: Improve compound generation (#6452)

fix: cspell-tools - add minCompoundLength setting (#6449)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#6451)

Update Dictionaries (main)

... (truncated)

Changelog

Sourced from cspell's changelog.

8.15.7 (2024-11-03)

ci: Workflow Bot -- Update ALL Dependencies (main) (#6456) (d4bd0dd), closes #6456

8.15.6 (2024-11-02)

chore: Update Integration Test Performance Data (#6455) (be8b15a), closes #6455

Commits

9decdc4 v8.15.7
fa9d2df v8.15.6
dba3a8a fix: Workflow Bot -- Update Dictionaries (main) (#6451)
See full diff in compare view

Updates hono from 4.6.8 to 4.6.9

Release notes

Sourced from hono's releases.

v4.6.9

What's Changed

refactor: fix typos by @mattn in honojs/hono#3583

fix(req): correct c.req.param decodes invalid percent strings by @yusukebe in honojs/hono#3573

fix(jsx/dom): fix memo for DOM renderer by @usualoma in honojs/hono#3568

fix(jsx/dom): fix dom rendering bugs for fragment. by @usualoma in honojs/hono#3569

perf(compose): check if it is a instance only once by @EdamAme-x in honojs/hono#3585

perf(router): use .concat instead of spread syntax by @EdamAme-x in honojs/hono#3584

fix(types): remove any and fix types of adapter/deno by @EdamAme-x in honojs/hono#3291

refactor(timing/utils-body): a few minor edits by @sharma-shray in honojs/hono#3557

fix(hono-base): remove .matchRoute and reduce bundle size by @EdamAme-x in honojs/hono#3595

perf(utils/url): improve performance of url utility by @EdamAme-x in honojs/hono#3593

perf(context): improve performance of context (setHeaders) by @EdamAme-x in honojs/hono#3592

refactor(helper/html): Prefer Array.isArray over instanceof Array by @exoego in honojs/hono#3601

refactor: compare with undefined directly by @exoego in honojs/hono#3602

refactor: remove useless spread by @exoego in honojs/hono#3600

refactor(context): use simple for-of syntax by @usualoma in honojs/hono#3598

feat(context): allow URL object on c.redirect() by @cometkim in honojs/hono#3609

ci: Use latest version of Bun and Deno for CI by @fel1x-developer in honojs/hono#3554

chore(ISSUE_TEMPLATE): encourage them to add a version if possible by @EdamAme-x in honojs/hono#3599

perf(middleware/logger): optimize color status by @exoego in honojs/hono#3603

refactor(utils/mime): make object and type commonality by @EdamAme-x in honojs/hono#3606

chore: automatically close issues marked as “not bug” over time by @EdamAme-x in honojs/hono#3611

perf(utils): use | 0 instead of Math.floor by @EdamAme-x in honojs/hono#3605

perf(helper/cookie): fast-path for name specified by @exoego in honojs/hono#3608

refactor: use # for private methods to reduce the minified file size by @yusukebe in honojs/hono#3596

fix(helper/websocket): allow custom events to be passed to generics by @EdamAme-x in honojs/hono#3616

fix(middleware/etag): generate etag hash value from all chunks by @usualoma in honojs/hono#3604

fix(utils/crypto): fix types of crypto utility by @EdamAme-x in honojs/hono#3614

New Contributors

@mattn made their first contribution in honojs/hono#3583

@sharma-shray made their first contribution in honojs/hono#3557

@fel1x-developer made their first contribution in honojs/hono#3554

Full Changelog: honojs/hono@v4.6.8...v4.6.9

Commits

7c050b2 chore: deno install before jsr publishing (#3621)
791d07a chore: fix jsr release workflow (#3620)
3971f92 v4.6.9
d717a4f fix(utils/crypto): fix types of crypto utility (#3614)
22db73f fix(middleware/etag): generate etag hash value from all chunks (#3604)
6b9fb24 fix(helper/websocket): allow custom events to be passed to generics (#3616)
ae6165b refactor: use # for private methods to reduce the minified file size (#3596)
e43f203 perf(helper/cookie): fast-path for name specified (#3608)
e9830c6 perf(utils): use | 0 instead of Math.floor (#3605)
8d775dc chore: automatically close issues marked as “not bug” over time (#3611)
Additional commits viewable in compare view

Updates puppeteer from 23.6.1 to 23.7.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v23.7.0

23.7.0 (2024-11-04)

Features

distinguish different Touches (#13231) (a2a205c)

roll to Firefox 132.0 (#13252) (41d3dd9)

Bug Fixes

browser: omit file path validation in uploadFile() in browser environments (#13258) (a9e6cd1)

remove event listeners from AbortSignal in WaitTask (#13257) (4e5c0ad)

roll to Chrome 130.0.6723.91 (#13255) (8295e67)

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 2.4.0 to 2.4.1

puppeteer: v23.7.0

23.7.0 (2024-11-04)

Miscellaneous Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated

dependencies

@puppeteer/browsers bumped from 2.4.0 to 2.4.1

puppeteer-core bumped from 23.6.1 to 23.7.0

Commits

eec8072 chore: release main (#13246)
8d62667 chore(deps-dev): Bump the dev-dependencies group with 10 updates (#13261)
a9e6cd1 fix(browser): omit file path validation in uploadFile() in browser environmen...
4e5c0ad fix: remove event listeners from AbortSignal in WaitTask (#13257)
bcc4304 test: remove unnecessary browser spawn (#13247)
3abb9ca refactor: remove unused parameter from 'move' (#13254)
8295e67 fix: roll to Chrome 130.0.6723.91 (#13255)
43e92fb refactor: extract common code for TouchHandle (#13250)
41d3dd9 feat: roll to Firefox 132.0 (#13252)
694fef9 fix(browsers): correctly import yargs for esm module (#13249)
Additional commits viewable in compare view

Updates webpack from 5.95.0 to 5.96.1

Release notes

Sourced from webpack's releases.

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

Order of chunks ids in generated chunk code

No extra Javascript chunks when using asset module as an entrypoint

Use optimistically logic for output.environment.dynamicImport to determine chunk format when no browserslist or target

Collision with global variables for optimization.avoidEntryIife

Avoid through variables in inlined module

Allow chunk template strings in output.devtoolNamespace

No extra runtime for get javascript/css chunk filename

No extra runtime for prefetch and preload in JS runtime when it was unsed in CSS

Avoid cache invalidation using ProgressPlugin

Increase parallelism when using importModule on the execution stage

Correctly parsing string in export and import

Typescript types

[CSS] css/auto considers a module depending on its filename as css (pure CSS) or css/local, before it was css/global and css/local

[CSS] Always interpolate classes even if they are not involved in export

[CSS] No extra runtime in Javascript runtime chunks for asset modules used in CSS

[CSS] No extra runtime in Javascript runtime chunks for external asset modules used in CSS

[CSS] No extra runtime for the node target

[CSS] Fixed url()s and @import parsing

[CSS] Fixed - emit a warning on broken :local and :global

New Features

Export CSS and ESM runtime modules

Single Runtime Chunk and Federation eager module hoisting

[CSS] Support /* webpackIgnore: true */ for CSS files

[CSS] Support src() support

[CSS] CSS nesting in CSS modules

Commits

d4ced73 chore(release): 5.96.1
7d6dbea fix: types regression in validate
5c556e3 fix: types regression in validate
2420eae fix: add @types/eslint-scope to dependencies due types regression
ec45d2d fix: add @types/eslint-scope to dependencies
aff0c3e chore(release): 5.96.0
6f11ec1 refactor: module source types code
b07142f refactor: module source types code
7d98b3c fix: Module Federation should track all referenced chunks
6d09769 chore: linting
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/ws) | `8.5.12` | `8.5.13` | | [compression](https://github.com/expressjs/compression) | `1.7.4` | `1.7.5` | | [@hono/node-server](https://github.com/honojs/node-server) | `1.13.3` | `1.13.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.8.4` | `22.9.0` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.38.1` | `3.39.0` | | [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `8.15.5` | `8.15.7` | | [hono](https://github.com/honojs/hono) | `4.6.8` | `4.6.9` | | [puppeteer](https://github.com/puppeteer/puppeteer) | `23.6.1` | `23.7.0` | | [webpack](https://github.com/webpack/webpack) | `5.95.0` | `5.96.1` | Updates `@types/ws` from 8.5.12 to 8.5.13 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/ws) Updates `compression` from 1.7.4 to 1.7.5 - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](expressjs/compression@1.7.4...1.7.5) Updates `@hono/node-server` from 1.13.3 to 1.13.5 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.13.3...v1.13.5) Updates `@types/node` from 22.8.4 to 22.9.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `core-js` from 3.38.1 to 3.39.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.39.0/packages/core-js) Updates `cspell` from 8.15.5 to 8.15.7 - [Release notes](https://github.com/streetsidesoftware/cspell/releases) - [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell/commits/v8.15.7/packages/cspell) Updates `hono` from 4.6.8 to 4.6.9 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.6.8...v4.6.9) Updates `puppeteer` from 23.6.1 to 23.7.0 - [Release notes](https://github.com/puppeteer/puppeteer/releases) - [Changelog](https://github.com/puppeteer/puppeteer/blob/main/release-please-config.json) - [Commits](puppeteer/puppeteer@puppeteer-v23.6.1...puppeteer-v23.7.0) Updates `webpack` from 5.95.0 to 5.96.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.95.0...v5.96.1) --- updated-dependencies: - dependency-name: "@types/ws" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: compression dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@hono/node-server" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: core-js dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cspell dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: hono dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: puppeteer dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: webpack dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot requested review from alexander-akait, hiroppy, snitin315 and anshumanv as code owners November 5, 2024 03:08

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 5, 2024

alexander-akait approved these changes Nov 5, 2024

View reviewed changes

alexander-akait merged commit 94a2443 into master Nov 5, 2024
50 of 51 checks passed

alexander-akait deleted the dependabot/npm_and_yarn/dependencies-62d86b6eac branch November 5, 2024 14:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the dependencies group across 1 directory with 9 updates #5352

chore(deps): bump the dependencies group across 1 directory with 9 updates #5352

dependabot bot commented on behalf of github Nov 5, 2024

chore(deps): bump the dependencies group across 1 directory with 9 updates #5352

chore(deps): bump the dependencies group across 1 directory with 9 updates #5352

Conversation

dependabot bot commented on behalf of github Nov 5, 2024

1.7.5

What's Changed

New Contributors

1.7.5 / 2024-10-31

v1.13.5

What's Changed

v1.13.4

What's Changed

New Contributors

3.39.0 - 2024.10.31

v8.15.7

Changes

Fixes

fix: Use the usePnP flag. (#6458)

v8.15.6

Changes

Fixes

fix: Improve compound generation (#6452)

fix: cspell-tools - add minCompoundLength setting (#6449)

Dictionary Updates

fix: Workflow Bot -- Update Dictionaries (main) (#6451)

Update Dictionaries (main)

8.15.7 (2024-11-03)

8.15.6 (2024-11-02)

v4.6.9

What's Changed

New Contributors

puppeteer-core: v23.7.0

23.7.0 (2024-11-04)

Features

Bug Fixes

Dependencies

puppeteer: v23.7.0

23.7.0 (2024-11-04)

Miscellaneous Chores

Dependencies

v5.96.1

Bug Fixes

v5.96.0

Bug Fixes

New Features

fix: Use the `usePnP` flag. (#6458)