Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump js-yaml and coveralls #375

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 25, 2023

Bumps js-yaml to 3.14.1 and updates ancestor dependency coveralls. These dependencies need to be updated together.

Updates js-yaml from 3.6.1 to 3.14.1

Changelog

Sourced from js-yaml's changelog.

[3.14.1] - 2020-12-07

Security

  • Fix possible code execution in (already unsafe) .load() (in &anchor).

[3.14.0] - 2020-05-22

Changed

  • Support safe/loadAll(input, options) variant of call.
  • CI: drop outdated nodejs versions.
  • Dev deps bump.

Fixed

  • Quote = in plain scalars #519.
  • Check the node type for !<?> tag in case user manually specifies it.
  • Verify that there are no null-bytes in input.
  • Fix wrong quote position when writing condensed flow, #526.

[3.13.1] - 2019-04-05

Security

  • Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

Security

  • Security fix: safeLoad() can hang when arrays with nested refs used as key. Now throws exception for nested arrays. #475.

[3.12.2] - 2019-02-26

Fixed

  • Fix noArrayIndent option for root level, #468.

[3.12.1] - 2019-01-05

Added

  • Added noArrayIndent option, #432.

[3.12.0] - 2018-06-02

Changed

  • Support arrow functions without a block statement, #421.

[3.11.0] - 2018-03-05

Added

  • Add arrow functions suport for !!js/function.

Fixed

  • Fix dump in bin/octal/hex formats for negative integers, #399.

... (truncated)

Commits
  • 37caaad 3.14.1 released
  • 094c0f7 dist rebuild
  • 9586ebe Avoid calling hasOwnProperty of user-controlled objects
  • 34e5072 3.14.0 released
  • 7b25c83 Browser files rebuild
  • 6f73473 Dev deps bump
  • 0c29349 Travis-CI: drop old nodejs versions
  • 10be97e fix(loader): Add support for safe/loadAll(input, options)
  • d6983dd Fix issue #526: wrong quote position writing condensed flow (#527)
  • 93fbf7d fix issue 526 (wrong quote position writing condensed flow)
  • Additional commits viewable in compare view

Updates coveralls from 2.13.3 to 3.1.1

Release notes

Sourced from coveralls's releases.

Maintenance / Security updates

  • swapped exec for execFile. Credit: Adar Zandberg from the CxSCA AppSec team at Checkmarx.
  • updated devDependencies
  • merged Dependabot PRs

Improved CircleCI / Travis parallelism support

  • Handle service_job_number for parallelism in Travis and CircleCI (#290) 705c3b5
  • Update sinon to v7.5.0. (#288) eb6dc35

nickmerwin/node-coveralls@v3.0.14...v3.1.0


This is a minor release due to the change in behavior for CircleCI, which now uses the Workflow ID to merge parallel coverage jobs:

    options.service_number = process.env.CIRCLE_WORKFLOW_ID;
    options.service_job_number = process.env.CIRCLE_BUILD_NUM;

Maintenance

Maintenance release

No release notes provided.

COVERALLS_SERVICE_NUMBER environment variable support

Improved:

  • If COVERALLS_SERVICE_NUMBER is set, set service_number from it. (@​midgleyc)

CodeFresh support, Maintenance

Added:

Improved:

Updated:

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 3.14.1 and updates ancestor dependency [coveralls](https://github.com/nickmerwin/node-coveralls). These dependencies need to be updated together.


Updates `js-yaml` from 3.6.1 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.6.1...3.14.1)

Updates `coveralls` from 2.13.3 to 3.1.1
- [Release notes](https://github.com/nickmerwin/node-coveralls/releases)
- [Commits](https://github.com/nickmerwin/node-coveralls/commits/3.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-type: indirect
- dependency-name: coveralls
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 25, 2023
@dependabot dependabot bot temporarily deployed to testing August 25, 2023 02:04 Inactive
@cht8687 cht8687 merged commit a1a97b4 into master Sep 2, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/js-yaml-and-coveralls-3.14.1 branch September 2, 2023 03:39
sawyerh referenced this pull request in navapbc/template-application-nextjs Apr 15, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence | Type |
Update |
|---|---|---|---|---|---|---|---|
|
[@aws-sdk/client-evidently](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-evidently)
([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-evidently))
| [`3.540.0` ->
`3.554.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-evidently/3.540.0/3.554.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@aws-sdk%2fclient-evidently/3.554.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@aws-sdk%2fclient-evidently/3.554.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@aws-sdk%2fclient-evidently/3.540.0/3.554.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@aws-sdk%2fclient-evidently/3.540.0/3.554.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |
|
[@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`20.12.2` ->
`20.12.7`](https://renovatebot.com/diffs/npm/@types%2fnode/20.12.2/20.12.7)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/20.12.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2fnode/20.12.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2fnode/20.12.2/20.12.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/20.12.2/20.12.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | patch |
|
[eslint-config-next](https://nextjs.org/docs/app/building-your-application/configuring/eslint#eslint-config)
([source](https://togithub.com/vercel/next.js/tree/HEAD/packages/eslint-config-next))
| [`14.1.4` ->
`14.2.1`](https://renovatebot.com/diffs/npm/eslint-config-next/14.1.4/14.2.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-config-next/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint-config-next/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint-config-next/14.1.4/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-config-next/14.1.4/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | minor |
|
[eslint-plugin-you-dont-need-lodash-underscore](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore.git)
([source](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore))
| [`6.13.0` ->
`6.14.0`](https://renovatebot.com/diffs/npm/eslint-plugin-you-dont-need-lodash-underscore/6.13.0/6.14.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-plugin-you-dont-need-lodash-underscore/6.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint-plugin-you-dont-need-lodash-underscore/6.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint-plugin-you-dont-need-lodash-underscore/6.13.0/6.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-plugin-you-dont-need-lodash-underscore/6.13.0/6.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | minor |
| [next](https://nextjs.org)
([source](https://togithub.com/vercel/next.js)) | [`14.1.4` ->
`14.2.1`](https://renovatebot.com/diffs/npm/next/14.1.4/14.2.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/next/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/next/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/next/14.1.4/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next/14.1.4/14.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |
| [next-intl](https://next-intl-docs.vercel.app)
([source](https://togithub.com/amannn/next-intl)) | [`3.10.0` ->
`3.11.1`](https://renovatebot.com/diffs/npm/next-intl/3.10.0/3.11.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/next-intl/3.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/next-intl/3.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/next-intl/3.10.0/3.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next-intl/3.10.0/3.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| dependencies | minor |
| [node](https://togithub.com/nodejs/node) | `20.12.0-bullseye-slim` ->
`20.12.2-bullseye-slim` |
[![age](https://developer.mend.io/api/mc/badges/age/docker/node/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/node/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/node/20.12.0/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/node/20.12.0/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| final | patch |
| [node](https://togithub.com/nodejs/node) | `20.12.0-bullseye-slim` ->
`20.12.2-bullseye-slim` |
[![age](https://developer.mend.io/api/mc/badges/age/docker/node/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/node/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/node/20.12.0/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/node/20.12.0/20.12.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| stage | patch |
| [typescript](https://www.typescriptlang.org/)
([source](https://togithub.com/Microsoft/TypeScript)) | [`5.4.3` ->
`5.4.5`](https://renovatebot.com/diffs/npm/typescript/5.4.3/5.4.5) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/5.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript/5.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript/5.4.3/5.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/5.4.3/5.4.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | patch |

---

### Release Notes

<details>
<summary>aws/aws-sdk-js-v3 (@&#8203;aws-sdk/client-evidently)</summary>

###
[`v3.554.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-evidently/CHANGELOG.md#35540-2024-04-11)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.552.0...v3.554.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-evidently](https://togithub.com/aws-sdk/client-evidently)

###
[`v3.552.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-evidently/CHANGELOG.md#35520-2024-04-09)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.549.0...v3.552.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-evidently](https://togithub.com/aws-sdk/client-evidently)

###
[`v3.549.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-evidently/CHANGELOG.md#35490-2024-04-04)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.540.0...v3.549.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-evidently](https://togithub.com/aws-sdk/client-evidently)

</details>

<details>
<summary>vercel/next.js (eslint-config-next)</summary>

###
[`v14.2.1`](https://togithub.com/vercel/next.js/compare/v14.2.0...v14.2.1)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.2.0...v14.2.1)

###
[`v14.2.0`](https://togithub.com/vercel/next.js/compare/v14.1.4...774563f2b994ae9686b8ec68b506a6ef3d7c9756)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.1.4...v14.2.0)

</details>

<details>
<summary>you-dont-need/You-Dont-Need-Lodash-Underscore
(eslint-plugin-you-dont-need-lodash-underscore)</summary>

###
[`v6.14.0`](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/releases/tag/v6.14.0)

[Compare
Source](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/compare/v6.13.0...v6.14.0)

#### What's Changed

- chore(deps): bump js-yaml and coveralls by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/375](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/375)
- chore(deps): bump minimist, mkdirp and mocha by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/376](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/376)
- chore(deps): bump ansi-regex from 3.0.0 to 3.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/366](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/366)
- chore(deps): bump ajv and eslint by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/367](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/367)
- chore(deps): bump ajv and eslint by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/377](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/377)
- Upgrade dependabot/fetch-metadata by
[@&#8203;szepeviktor](https://togithub.com/szepeviktor) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380)
- Improve README by
[@&#8203;szepeviktor](https://togithub.com/szepeviktor) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/378](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/378)
- Improve README even more by
[@&#8203;szepeviktor](https://togithub.com/szepeviktor) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/381](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/381)
- Add lodash \_.mapKeys by [@&#8203;rajdee](https://togithub.com/rajdee)
in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351)
- Add \_.cloneDeep by [@&#8203;menghif](https://togithub.com/menghif) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382)
- add entry for isPlainObject by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384)
- Correct isPlainObject() by
[@&#8203;danielsharvey](https://togithub.com/danielsharvey) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386)
- Fix
[#&#8203;393](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/issues/393)
remove a destructuring assignment example on \_.pick native
implementation by
[@&#8203;yoshikazusawa](https://togithub.com/yoshikazusawa) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394)
- Mention Object.groupBy() by
[@&#8203;Heniker](https://togithub.com/Heniker) in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390)

#### New Contributors

- [@&#8203;szepeviktor](https://togithub.com/szepeviktor) made their
first contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380)
- [@&#8203;rajdee](https://togithub.com/rajdee) made their first
contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351)
- [@&#8203;menghif](https://togithub.com/menghif) made their first
contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382)
- [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first
contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384)
- [@&#8203;danielsharvey](https://togithub.com/danielsharvey) made their
first contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386)
- [@&#8203;yoshikazusawa](https://togithub.com/yoshikazusawa) made their
first contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394)
- [@&#8203;Heniker](https://togithub.com/Heniker) made their first
contribution in
[https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390)

**Full Changelog**:
you-dont-need/You-Dont-Need-Lodash-Underscore@v6.13.0...v6.14.0

</details>

<details>
<summary>vercel/next.js (next)</summary>

###
[`v14.2.1`](https://togithub.com/vercel/next.js/compare/v14.2.0...v14.2.1)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.2.0...v14.2.1)

###
[`v14.2.0`](https://togithub.com/vercel/next.js/compare/v14.1.4...774563f2b994ae9686b8ec68b506a6ef3d7c9756)

[Compare
Source](https://togithub.com/vercel/next.js/compare/v14.1.4...v14.2.0)

</details>

<details>
<summary>amannn/next-intl (next-intl)</summary>

###
[`v3.11.1`](https://togithub.com/amannn/next-intl/blob/HEAD/CHANGELOG.md#3111-2024-04-05)

[Compare
Source](https://togithub.com/amannn/next-intl/compare/v3.11.0...v3.11.1)

##### Bug Fixes

- Apply correct port when redirecting to another domain and the app
doesn't run behind a proxy
([#&#8203;979](https://togithub.com/amannn/next-intl/issues/979) by
[@&#8203;awkaiser-tr](https://togithub.com/awkaiser-tr))
([485f59e](https://togithub.com/amannn/next-intl/commit/485f59e2c09224bf260e87ede30a67d0a5c542c0)),
closes [#&#8203;658](https://togithub.com/amannn/next-intl/issues/658)

###
[`v3.11.0`](https://togithub.com/amannn/next-intl/blob/HEAD/CHANGELOG.md#3110-2024-04-03)

[Compare
Source](https://togithub.com/amannn/next-intl/compare/v3.10.0...v3.11.0)

##### Features

- Support symbols in localized pathnames that require URL encoding
([#&#8203;959](https://togithub.com/amannn/next-intl/issues/959))
([b6e66f4](https://togithub.com/amannn/next-intl/commit/b6e66f4afd663ea5dc0851f5b528bcc55388b927)),
closes [#&#8203;607](https://togithub.com/amannn/next-intl/issues/607)
[/github.com/amannn/next-intl/issues/607#issuecomment-1979747515](https://togithub.com//github.com/amannn/next-intl/issues/607/issues/issuecomment-1979747515)

</details>

<details>
<summary>nodejs/node (node)</summary>

###
[`v20.12.2`](https://togithub.com/nodejs/node/releases/tag/v20.12.2):
2024-04-10, Version 20.12.2 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS

[Compare
Source](https://togithub.com/nodejs/node/compare/v20.12.1...v20.12.2)

This is a security release.

##### Notable Changes

- CVE-2024-27980 - Command injection via args parameter of
`child_process.spawn` without shell option enabled on Windows

##### Commits

- \[[`69ffc6d50d`](https://togithub.com/nodejs/node/commit/69ffc6d50d)]
- **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis)
[nodejs-private/node-private#563](https://togithub.com/nodejs-private/node-private/pull/563)

###
[`v20.12.1`](https://togithub.com/nodejs/node/releases/tag/v20.12.1):
2024-04-03, Version 20.12.1 &#x27;Iron&#x27; (LTS), @&#8203;RafaelGSS

[Compare
Source](https://togithub.com/nodejs/node/compare/v20.12.0...v20.12.1)

This is a security release

##### Notable Changes

- CVE-2024-27983 - Assertion failed in
node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash-
(High)
- CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation
- (Medium)
-   llhttp version 9.2.1
-   undici version 5.28.4

##### Commits

- \[[`bd8f10a257`](https://togithub.com/nodejs/node/commit/bd8f10a257)]
- **deps**: update undici to v5.28.4 (Matteo Collina)
[nodejs-private/node-private#576](https://togithub.com/nodejs-private/node-private/pull/576)
- \[[`5e34540a96`](https://togithub.com/nodejs/node/commit/5e34540a96)]
- **http**: do not allow OBS fold in headers by default (Paolo Insogna)
[nodejs-private/node-private#557](https://togithub.com/nodejs-private/node-private/pull/557)
- \[[`ba1ae6d188`](https://togithub.com/nodejs/node/commit/ba1ae6d188)]
- **src**: ensure to close stream when destroying session (Anna
Henningsen)
[nodejs-private/node-private#561](https://togithub.com/nodejs-private/node-private/pull/561)

</details>

<details>
<summary>Microsoft/TypeScript (typescript)</summary>

###
[`v5.4.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.4.5):
TypeScript 5.4.5

[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v5.4.4...v5.4.5)

For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-4/).

For the complete list of fixed issues, check out the

- [fixed issues query for Typescript 5.4.0
(Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.0%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.1
(RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.1%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.2
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.2%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.3
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.3%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.4
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.4%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.5
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.5%22+is%3Aclosed+).

Downloads are available on:

- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)

###
[`v5.4.4`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.4.4):
TypeScript 5.4.4

[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v5.4.3...v5.4.4)

For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-4/).

For the complete list of fixed issues, check out the

- [fixed issues query for Typescript 5.4.0
(Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.0%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.1
(RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.1%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.2
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.2%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.3
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.3%22+is%3Aclosed+).
- [fixed issues query for Typescript 5.4.4
(Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.4.4%22+is%3Aclosed+).

Downloads are available on:

- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" in timezone America/Los_Angeles, Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/navapbc/template-application-nextjs).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
kodiakhq bot referenced this pull request in cloudquery/plugin-sdk-javascript May 1, 2024
…score to v6.14.0 (#166)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [eslint-plugin-you-dont-need-lodash-underscore](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore.git) ([source](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore)) | devDependencies | minor | [`6.13.0` -> `6.14.0`](https://renovatebot.com/diffs/npm/eslint-plugin-you-dont-need-lodash-underscore/6.13.0/6.14.0) |

---

### Release Notes

<details>
<summary>you-dont-need/You-Dont-Need-Lodash-Underscore (eslint-plugin-you-dont-need-lodash-underscore)</summary>

### [`v6.14.0`](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/releases/tag/v6.14.0)

[Compare Source](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/compare/v6.13.0...v6.14.0)

#### What's Changed

-   chore(deps): bump js-yaml and coveralls by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/375](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/375)
-   chore(deps): bump minimist, mkdirp and mocha by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/376](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/376)
-   chore(deps): bump ansi-regex from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/366](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/366)
-   chore(deps): bump ajv and eslint by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/367](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/367)
-   chore(deps): bump ajv and eslint by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/377](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/377)
-   Upgrade dependabot/fetch-metadata by [@&#8203;szepeviktor](https://togithub.com/szepeviktor) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380)
-   Improve README by [@&#8203;szepeviktor](https://togithub.com/szepeviktor) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/378](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/378)
-   Improve README even more by [@&#8203;szepeviktor](https://togithub.com/szepeviktor) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/381](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/381)
-   Add lodash \_.mapKeys by [@&#8203;rajdee](https://togithub.com/rajdee) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351)
-   Add \_.cloneDeep by [@&#8203;menghif](https://togithub.com/menghif) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382)
-   add entry for isPlainObject by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384)
-   Correct isPlainObject() by [@&#8203;danielsharvey](https://togithub.com/danielsharvey) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386)
-   Fix [#&#8203;393](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/issues/393) remove a destructuring assignment example on \_.pick native implementation by [@&#8203;yoshikazusawa](https://togithub.com/yoshikazusawa) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394)
-   Mention Object.groupBy() by [@&#8203;Heniker](https://togithub.com/Heniker) in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390)

#### New Contributors

-   [@&#8203;szepeviktor](https://togithub.com/szepeviktor) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/380)
-   [@&#8203;rajdee](https://togithub.com/rajdee) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/351)
-   [@&#8203;menghif](https://togithub.com/menghif) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/382)
-   [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/384)
-   [@&#8203;danielsharvey](https://togithub.com/danielsharvey) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/386)
-   [@&#8203;yoshikazusawa](https://togithub.com/yoshikazusawa) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/394)
-   [@&#8203;Heniker](https://togithub.com/Heniker) made their first contribution in [https://github.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390](https://togithub.com/you-dont-need/You-Dont-Need-Lodash-Underscore/pull/390)

**Full Changelog**: you-dont-need/You-Dont-Need-Lodash-Underscore@v6.13.0...v6.14.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMzAuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant