Bump the npm_and_yarn group across 1 directory with 25 updates#7
Open
dependabot[bot] wants to merge 1 commit intomasterfrom
Open
Bump the npm_and_yarn group across 1 directory with 25 updates#7dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps the npm_and_yarn group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [gh-pages](https://github.com/tschaub/gh-pages) | `1.2.0` | `5.0.0` | | [highlight.js](https://github.com/highlightjs/highlight.js) | `9.12.0` | `10.4.1` | | [jsdom](https://github.com/jsdom/jsdom) | `9.12.0` | `16.5.0` | | [marked](https://github.com/markedjs/marked) | `0.3.19` | `4.0.10` | | [css-what](https://github.com/fb55/css-what) | `2.1.0` | `2.1.3` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.24` | `0.10.64` | | [express](https://github.com/expressjs/express) | `4.15.3` | `4.19.2` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.2` | `1.2.13` | | [http-proxy](https://github.com/http-party/node-http-proxy) | `1.16.2` | `1.18.1` | | [ini](https://github.com/npm/ini) | `1.3.4` | `1.3.8` | | [is-my-json-valid](https://github.com/mafintosh/is-my-json-valid) | `2.16.0` | `2.20.6` | | [lodash.merge](https://github.com/lodash/lodash) | `4.6.0` | `4.6.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.4` | `4.17.21` | | [macaddress](https://github.com/scravy/node-macaddress) | `0.2.8` | `0.2.9` | | [semver](https://github.com/npm/node-semver) | `5.4.1` | `5.7.2` | | [sshpk](https://github.com/joyent/node-sshpk) | `1.13.1` | `1.18.0` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.14` | `0.7.38` | Updates `gh-pages` from 1.2.0 to 5.0.0 - [Release notes](https://github.com/tschaub/gh-pages/releases) - [Changelog](https://github.com/tschaub/gh-pages/blob/main/changelog.md) - [Commits](tschaub/gh-pages@v1.2.0...v5.0.0) Updates `highlight.js` from 9.12.0 to 10.4.1 - [Release notes](https://github.com/highlightjs/highlight.js/releases) - [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md) - [Commits](highlightjs/highlight.js@9.12.0...10.4.1) Updates `jsdom` from 9.12.0 to 16.5.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](jsdom/jsdom@9.12.0...16.5.0) Updates `marked` from 0.3.19 to 4.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json) - [Commits](markedjs/marked@v0.3.19...v4.0.10) Updates `css-what` from 2.1.0 to 2.1.3 - [Release notes](https://github.com/fb55/css-what/releases) - [Commits](fb55/css-what@v2.1.0...v2.1.3) Updates `es5-ext` from 0.10.24 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.24...v0.10.64) Updates `express` from 4.15.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.15.3...4.19.2) Updates `extend` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v3.0.1...v3.0.2) Updates `forwarded` from 0.1.0 to 0.2.0 - [Release notes](https://github.com/jshttp/forwarded/releases) - [Changelog](https://github.com/jshttp/forwarded/blob/master/HISTORY.md) - [Commits](jshttp/forwarded@v0.1.0...v0.2.0) Updates `fresh` from 0.5.0 to 0.5.2 - [Changelog](https://github.com/jshttp/fresh/blob/master/HISTORY.md) - [Commits](jshttp/fresh@v0.5.0...v0.5.2) Updates `fsevents` from 1.1.2 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.2...v1.2.13) Updates `http-proxy` from 1.16.2 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.16.2...1.18.1) Updates `ini` from 1.3.4 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.4...v1.3.8) Updates `is-my-json-valid` from 2.16.0 to 2.20.6 - [Commits](mafintosh/is-my-json-valid@v2.16.0...v2.20.6) Updates `jsonpointer` from 4.0.1 to 5.0.1 - [Release notes](https://github.com/janl/node-jsonpointer/releases) - [Commits](janl/node-jsonpointer@4.0.1...v5.0.1) Updates `lodash.merge` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/commits) Updates `lodash` from 4.17.4 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.4...4.17.21) Updates `macaddress` from 0.2.8 to 0.2.9 - [Release notes](https://github.com/scravy/node-macaddress/releases) - [Commits](scravy/node-macaddress@0.2.8...0.2.9) Updates `mime` from 1.3.4 to 1.3.6 - [Changelog](https://github.com/broofa/mime/blob/main/CHANGELOG.md) - [Commits](broofa/mime@v1.3.4...v1.3.6) Updates `qs` from 6.4.0 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.4.0...v6.5.3) Updates `request` from 2.81.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `semver` from 5.4.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.4.1...v5.7.2) Updates `sshpk` from 1.13.1 to 1.18.0 - [Release notes](https://github.com/joyent/node-sshpk/releases) - [Commits](https://github.com/joyent/node-sshpk/commits) Updates `tough-cookie` from 2.3.2 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.3.2...v2.5.0) Updates `ua-parser-js` from 0.7.14 to 0.7.38 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.38/changelog.md) - [Commits](faisalman/ua-parser-js@0.7.14...0.7.38) --- updated-dependencies: - dependency-name: gh-pages dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: highlight.js dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: jsdom dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: marked dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: css-what dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: extend dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: forwarded dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fresh dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: is-my-json-valid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsonpointer dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash.merge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: macaddress dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mime dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: request dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sshpk dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 17 updates in the / directory:
1.2.05.0.09.12.010.4.19.12.016.5.00.3.194.0.102.1.02.1.30.10.240.10.644.15.34.19.21.1.21.2.131.16.21.18.11.3.41.3.82.16.02.20.64.6.04.6.24.17.44.17.210.2.80.2.95.4.15.7.21.13.11.18.00.7.140.7.38Updates
gh-pagesfrom 1.2.0 to 5.0.0Release notes
Sourced from gh-pages's releases.
... (truncated)
Changelog
Sourced from gh-pages's changelog.
... (truncated)
Commits
f729b975.0.051534c7Log changesace063bMerge pull request #438 from Vicropht/patch-158e54beMerge pull request #459 from tschaub/dependabot/npm_and_yarn/async-3.2.42189df3Bump async from 2.6.4 to 3.2.4051846eMerge pull request #454 from tschaub/dependabot/npm_and_yarn/email-addresses-...5c91c67Merge pull request #455 from tschaub/dependabot/github_actions/actions/setup-...fe0ad83Merge pull request #453 from tschaub/dependabot/github_actions/actions/checko...b89287dMerge pull request #445 from Nezteb/patch-1e890bd1Bump email-addresses from 3.0.1 to 5.0.0Updates
highlight.jsfrom 9.12.0 to 10.4.1Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.
... (truncated)
Commits
e96b915bump 10.4.1065f65fchore(release) allow release script to handle production releases68509fcchore(docs) bump SECURITY mention to 9.18.5aa0fb85chore(docs) Version 9 has reached EOL.fb0a626enh(ci): Add tests for polynomial regex issuesfa46dd1fix(reasonml) fix poly backtracking issued496052fix(latex) fix poly backtracking issued9f1cdbfix(javascript/typescript) fix poly backtracking issuefdec037fix(asciidoc) fix poly backtracking issue02ca487fix(kotlin) fix poly backtracking issueMaintainer changes
This version was pushed to npm by joshgoebel, a new releaser for highlight.js since your current version.
Updates
jsdomfrom 9.12.0 to 16.5.0Release notes
Sourced from jsdom's releases.
... (truncated)
Changelog
Sourced from jsdom's changelog.
... (truncated)
Commits
2d82763Version 16.5.09741311Fix loading of subresources with Unicode filenames5e46553Use domenic's ESLint config as the base19b35daFix the URL of about:blank iframes017568eSupport inputType on InputEvent29f4fdfUpgrade dependenciese2f7639Refactor create‑event‑accessor.js to remove code duplicationff69a75Convert JSDOM to use callback functions19df6bcUpdate links in contributing guidelines1e34ff5Test triageUpdates
markedfrom 0.3.19 to 4.0.10Release notes
Sourced from marked's releases.
... (truncated)
Commits
ae01170chore(release): 4.0.10 [skip ci]fceda57🗜️ build [skip ci]8f80657fix(security): fix redos vulnerabilitiesc4a3ccdMerge pull request from GHSA-rrrm-qjm4-v8hfd7212a6chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)5a84db5chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)2bc67a5chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)98996b8chore(deps-dev): Bump@babel/preset-envfrom 7.16.5 to 7.16.7 (#2353)ebc2c95chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)e5171a9chore(release): 4.0.9 [skip ci]Maintainer changes
This version was pushed to npm by tonybrix, a new releaser for marked since your current version.
Updates
css-whatfrom 2.1.0 to 2.1.3Commits
2db00ca2.1.3dc51092fix(css-selectors): extend regex to include superscript in range, fix #27 (#28)a5f1991Test on node LTSb2a21172.1.2e9ef3f1Run prettier070b2f8Add remaining parsed outputs (#25)af801e4update license references to match license file (#23)2d495d0Update to node 10 in .travis.yml (#22)c636f0dAllow escaped parentheses in pseudo selectors (#20)4e255c9Update .travis.ymlUpdates
es5-extfrom 0.10.24 to 0.10.64Release notes
Sourced from es5-ext's releases.
... (truncated)
Changelog
Sourced from es5-ext's changelog.
... (truncated)
Commits
f76b03dchore: Release v0.10.642881acdchore: Bump dependenciesc2e2bb9fix: Revert update meant to fix Powershell issue, as it's a regression16f2b72docs: Fix date in the changelogde4e03cchore: Release v0.10.633fd53b7chore: Upgradelint-stagedto v13bf8ed79chore: Ensure postinstall script does not crash on Windows2cbbb07chore: Bump dependencies22d0416chore: Bump LICENSE yeara52e957fix: Support ES2015+ function definitions infunction#toStringTokens()Updates
expressfrom 4.15.3 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
extendfrom 3.0.1 to 3.0.2Changelog
Sourced from extend's changelog.
Commits
8d106d2v3.0.2e97091f[Dev Deps] updatetapee841aac[Tests] up tonodev10.70e68e71[Fix] Prevent merging proto propertya689700Only apps should have lockfilesf13c1c4[Dev Deps] updateeslint,@ljharb/eslint-config,tapef3570fe[Tests] up tonodev10.0,v9.11,v8.11,v7.10,v6.14,v4.9; use...Updates
forwardedfrom 0.1.0 to 0.2.0Release notes
Sourced from forwarded's releases.
Changelog
Sourced from forwarded's changelog.
Commits
93d2f4c0.2.0815fd47build: add version script for npm version releasesfd5c99fbuild: use GitHub Actions instead of Travis CI83df24abuild: eslint-plugin-import@2.23.49cc1690build: eslint-plugin-promise@4.3.178495b8build: Node.js@12.228844b1fbuild: Node.js@15.128de09ebbuild: support Node.js 16.x63a16a6Use req.socket over deprecated req.connectiond56b75btests: fix test nameDescription has been truncated