build(deps): bump the npm_and_yarn group across 2 directories with 13 updates#10
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the npm_and_yarn group across 2 directories with 13 updates#10dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
… updates Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [fastify](https://github.com/fastify/fastify) | `5.3.0` | `5.7.3` | | [@eslint/plugin-kit](https://github.com/eslint/rewrite/tree/HEAD/packages/plugin-kit) | `0.2.8` | `0.4.1` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [glob](https://github.com/isaacs/node-glob) | `11.0.1` | `11.1.0` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | Bumps the npm_and_yarn group with 6 updates in the /portal directory: | Package | From | To | | --- | --- | --- | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [cookie](https://github.com/jshttp/cookie) | `0.5.0` | `0.7.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.20.7` | `2.52.2` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.27.3` | `5.53.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.18` | `5.4.21` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.3.2` | `6.4.1` | Updates `fastify` from 5.3.0 to 5.7.3 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.3.0...v5.7.3) Updates `@eslint/plugin-kit` from 0.2.8 to 0.4.1 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/plugin-kit/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/plugin-kit-v0.4.1/packages/plugin-kit) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `glob` from 11.0.1 to 11.1.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.1...v11.1.0) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.1...v11.1.0) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) Updates `cookie` from 0.5.0 to 0.7.0 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.5.0...v0.7.0) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `@sveltejs/kit` from 2.20.7 to 2.52.2 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.52.2/packages/kit) Updates `svelte` from 5.27.3 to 5.53.0 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.0/packages/svelte) Updates `vite` from 5.4.18 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `vite` from 6.3.2 to 6.4.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `devalue` from 5.1.1 to 5.6.3 - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](sveltejs/devalue@v5.1.1...v5.6.3) --- updated-dependencies: - dependency-name: fastify dependency-version: 5.7.3 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@eslint/plugin-kit" dependency-version: 0.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 11.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sveltejs/kit" dependency-version: 2.52.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svelte dependency-version: 5.53.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 5.4.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.4.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: devalue dependency-version: 5.6.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
5.3.05.7.30.2.80.4.11.1.111.1.124.0.24.0.411.0.111.1.010.4.510.5.04.1.04.1.14.17.214.17.234.0.54.0.8Bumps the npm_and_yarn group with 6 updates in the /portal directory:
1.1.111.1.120.5.00.7.04.1.04.1.12.20.72.52.25.27.35.53.05.4.185.4.216.3.26.4.1Updates
fastifyfrom 5.3.0 to 5.7.3Release notes
Sourced from fastify's releases.
... (truncated)
Commits
49468edBumped v5.7.3eb11156Merge commit from forkd98ce2adocs: update vulnerability reporting to use GitHub Security (#6475)17172c4Ignore agents config files (#6474)b48826fdocs: update Reply.send() documentation for string serialization (#6466)e1e4fe7v5.7.232d7b6achore: Updated content-type header parsing (#6414)f4a6ac1docs: move querystringParser example under routerOptions (#6463)2af83d6fix: Fix MIT Licence file to conform to standard (#6464)5c14e05chore: update sponsor link (#6460)Updates
@eslint/plugin-kitfrom 0.2.8 to 0.4.1Release notes
Sourced from
@eslint/plugin-kit's releases.... (truncated)
Changelog
Sourced from
@eslint/plugin-kit's changelog.... (truncated)
Commits
f5ecc7echore: release main (#303)760fb02docs: Update README sponsors6030caddocs: Update README sponsorsf1f341ddocs: Update README sponsorsb8e4f36test: usestrictEqualinplugin-kitwhere possible (#278)7f592e3chore: release main (#257)bf1e92etest: addexactOptionalPropertyTypesoption to type test (#270)ab10682docs: Update README sponsors7255100chore: standardize test filenames to *.test.js (#267)100a4c7docs: Update README sponsorsMaintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@eslint/plugin-kitsince your current version.Updates
brace-expansionfrom 1.1.11 to 1.1.12Release notes
Sourced from brace-expansion's releases.
Commits
44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
difffrom 4.0.2 to 4.0.4Changelog
Sourced from diff's changelog.
Commits
f06f3e4v4.0.40179a48v4.0.34568caeBackport kpdecker/jsdiff#6494de0ffaBackport kpdecker/jsdiff#647Maintainer changes
This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.
Updates
globfrom 11.0.1 to 11.1.0Changelog
Sourced from glob's changelog.
... (truncated)
Commits
2551fb511.1.047473c0bin: Do not expose filenames to shell expansionbc33fe1skip tilde test on systems that lack tilde expansion59bf9cafix notesdde4fa6docs(README): add #anchor and improvenotes0559b0edocs: add better links to path-scurry docsc9773c2fix: correct typos inREADME.md13e68eaFix punctuation in traversal function documentation1527e2bfix repo url7e190e8fix typomaths→pathsUpdates
globfrom 10.4.5 to 10.5.0Changelog
Sourced from glob's changelog.
... (truncated)
Commits
2551fb511.1.047473c0bin: Do not expose filenames to shell expansionbc33fe1skip tilde test on systems that lack tilde expansion59bf9cafix notesdde4fa6docs(README): add #anchor and improvenotes0559b0edocs: add better links to path-scurry docsc9773c2fix: correct typos inREADME.md13e68eaFix punctuation in traversal function documentation1527e2bfix repo url7e190e8fix typomaths→pathsUpdates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
lodashfrom 4.17.21 to 4.17.23Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)Updates
micromatchfrom 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
brace-expansionfrom 1.1.11 to 1.1.12Release notes
Sourced from brace-expansion's releases.
Commits
44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
cookiefrom 0.5.0 to 0.7.0Release notes
Sourced from cookie's releases.
Commits
ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)d6f39b0Fix tests for old node6bb701fRemove failing scorecardca70da4test(serialize): additional tests for name, domain and path RFC validations (...47917c9Iterate whitespace for perf (#170)927d48aAddmaintopackage.json(#166)Maintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
@sveltejs/kitfrom 2.20.7 to 2.52.2Release notes
Sourced from
@sveltejs/kit's releases.... (truncated)
Changelog
Sourced from
@sveltejs/kit's changelog.... (truncated)
Commits
9c4a737Version Packages (#15338)3e607b3Merge commit from fork62991c8chore: upgradedevalueandsvelte(#15339)f47c01bMerge commit from fork6f69dedVersion Packages (#15321)e87efbafix: clear stale preflight issues on subsequent valid form submissions (#15281)4f367d5chore: fix Node 18 CI by changing .remote.js import to .remote.ts (#15331)20dfadffix: escape backticks and dollar signs before creating interpolated string (#...8c2384afix: incrementform.pendingcount before preflight validation (#15279)71ddbc7chore: remove dependency on sade (#15272)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@sveltejs/kitsince your current version.Updates
sveltefrom 5.27.3 to 5.53.0Release notes
Sourced from svelte's releases.
... (truncated)
Changelog
Sourced from svelte's changelog.
... (truncated)
Commits
c2fc95aVersion Packages (#17747)92e2fc1feat: allow comments in tags (#17671)2661513feat: allow error boundaries to work on the server (#17672)582e444fix: ensure head effects are kept in the effect tree (#17746)f8bf9bbchore: deactivate current_batch by default in unset_context (#17738)696d97ffix: use TrustedHTML to test for customizable <select> support, where necessa...cbf4e24Version Packages (#17742)09c4cb5fix: re-run non-render-bound deriveds on the server (#17674)be24b0dfeat: support TrustedHTML in {@html} expressions (#17701)9f48e76fix: repair dynamic component truthy/falsy hydration mismatches (#17737)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.
Updates
vitefrom 5.4.18 to 5.4.21Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
adce3c2release: v5.4.21cad1d31fix(dev): trim trailing slash beforeserver.fs.denycheck (#20968) (#20970)ca88ed7chore: up...Description has been truncated