-
Notifications
You must be signed in to change notification settings - Fork 0
Bump the npm_and_yarn group across 1 directory with 22 updates #3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
dependabot
wants to merge
1
commit into
master
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-886606af3e
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.12.17` | `7.25.6` | | [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [color-string](https://github.com/Qix-/color-string) | `1.5.4` | `1.9.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [dns-packet](https://github.com/mafintosh/dns-packet) | `1.3.1` | `1.3.4` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.5.7` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.53` | `0.10.64` | | [eventsource](https://github.com/EventSource/eventsource) | `1.0.7` | `1.1.2` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.21.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.13.2` | `1.15.9` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.8.8` | `2.8.9` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [nanoid](https://github.com/ai/nanoid) | `3.1.20` | `3.3.7` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [tar](https://github.com/isaacs/node-tar) | `6.1.0` | `6.2.1` | | [tmpl](https://github.com/daaku/nodejs-tmpl) | `1.0.4` | `1.0.5` | | [url-parse](https://github.com/unshiftio/url-parse) | `1.5.1` | `1.5.10` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Updates `@babel/traverse` from 7.12.17 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `async` from 2.6.3 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.3...v2.6.4) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `color-string` from 1.5.4 to 1.9.1 - [Release notes](https://github.com/Qix-/color-string/releases) - [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md) - [Commits](Qix-/color-string@1.5.4...1.9.1) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `dns-packet` from 1.3.1 to 1.3.4 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v1.3.4) Updates `elliptic` from 6.5.4 to 6.5.7 - [Commits](indutny/elliptic@v6.5.4...v6.5.7) Updates `es5-ext` from 0.10.53 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.53...v0.10.64) Updates `eventsource` from 1.0.7 to 1.1.2 - [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md) - [Commits](EventSource/eventsource@v1.0.7...v1.1.2) Updates `express` from 4.17.1 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.17.1...4.21.0) Updates `follow-redirects` from 1.13.2 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.2...v1.15.9) Updates `hosted-git-info` from 2.8.8 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.8.8...v2.8.9) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `nanoid` from 3.1.20 to 3.3.7 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.20...3.3.7) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Updates `send` from 0.17.1 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.1...0.19.0) Updates `serve-static` from 1.14.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.1...v1.16.2) Updates `tar` from 6.1.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.0...v6.2.1) Updates `tmpl` from 1.0.4 to 1.0.5 - [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5) Updates `url-parse` from 1.5.1 to 1.5.10 - [Commits](unshiftio/url-parse@1.5.1...1.5.10) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: color-string dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eventsource dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmpl dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: url-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
This was referenced Sep 23, 2024
Owner
|
@dependabot rebase
…On Tuesday, September 24th, 2024 at 02:00, dependabot[bot] ***@***.***> wrote:
This automated pull request fixes a [security vulnerability](https://github.com/reposman33/Etesian-code-assessment/security/dependabot/98) (high severity).
[Learn more about Dependabot security updates](https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates).
---------------------------------------------------------------
Bumps the npm_and_yarn group with 19 updates in the / directory:
Package From To
***@***.***/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) 7.12.17 7.25.6
[async](https://github.com/caolan/async) 2.6.3 2.6.4
[browserify-sign](https://github.com/crypto-browserify/browserify-sign) 4.2.1 4.2.3
[color-string](https://github.com/Qix-/color-string) 1.5.4 1.9.1
[decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) 0.2.0 0.2.2
[dns-packet](https://github.com/mafintosh/dns-packet) 1.3.1 1.3.4
[elliptic](https://github.com/indutny/elliptic) 6.5.4 6.5.7
[es5-ext](https://github.com/medikoo/es5-ext) 0.10.53 0.10.64
[eventsource](https://github.com/EventSource/eventsource) 1.0.7 1.1.2
[express](https://github.com/expressjs/express) 4.17.1 4.21.0
[follow-redirects](https://github.com/follow-redirects/follow-redirects) 1.13.2 1.15.9
[hosted-git-info](https://github.com/npm/hosted-git-info) 2.8.8 2.8.9
[minimist](https://github.com/minimistjs/minimist) 1.2.5 1.2.8
[nanoid](https://github.com/ai/nanoid) 3.1.20 3.3.7
[path-parse](https://github.com/jbgutierrez/path-parse) 1.0.6 1.0.7
[tar](https://github.com/isaacs/node-tar) 6.1.0 6.2.1
[tmpl](https://github.com/daaku/nodejs-tmpl) 1.0.4 1.0.5
[url-parse](https://github.com/unshiftio/url-parse) 1.5.1 1.5.10
[word-wrap](https://github.com/jonschlinkert/word-wrap) 1.2.3 1.2.5
Updates @babel/traverse from 7.12.17 to 7.25.6
Release notes
Sourced from [@babel/traverse's releases](https://github.com/babel/babel/releases).
> v7.25.6 (2024-08-29)
>
> Thanks [@j4k0xb](https://github.com/j4k0xb) for your first PR!
>
> 🐛 Bug Fix
>
> - babel-generator
>
> - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-traverse
>
> - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-parser
>
> - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung))
>
> - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
>
> - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
>
> - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
>
> - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 🏠 Internal
>
> - babel-generator
>
> - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> Committers: 5
>
> - Babel Bot ([@babel-bot](https://github.com/babel-bot))
> - Huáng Jùnliàng ([@JLHwung](https://github.com/JLHwung))
> - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [@j4k0xb](https://github.com/j4k0xb)
> - [@liuxingbaoyu](https://github.com/liuxingbaoyu)
>
> v7.25.5 (2024-08-23)
>
> 🐛 Bug Fix
>
> - babel-generator, babel-traverse
>
> - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate sequence expression parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> 💅 Polish
>
> - babel-generator
>
> - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> Committers: 2
>
> - Nicolò Ribaudo ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [@liuxingbaoyu](https://github.com/liuxingbaoyu)
>
> v7.25.4 (2024-08-22)
... (truncated)
Changelog
Sourced from [@babel/traverse's changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md).
> v7.25.6 (2024-08-29)
>
> 🐛 Bug Fix
>
> - babel-generator
>
> - [#16783](https://redirect.github.com/babel/babel/pull/16783) Properly print inner comments in TS array types ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
> - [#16775](https://redirect.github.com/babel/babel/pull/16775) fix: jsx whitespace is not properly preserved when retainLines ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-traverse
>
> - [#16727](https://redirect.github.com/babel/babel/pull/16727) fix: path.getAssignmentIdentifiers may be undefined ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-parser
>
> - [#16761](https://redirect.github.com/babel/babel/pull/16761) fix: improve static canFollowModifier checks ([@JLHwung](https://github.com/JLHwung))
>
> - babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
>
> - [#16769](https://redirect.github.com/babel/babel/pull/16769) Only wrap functions in superPropertyGet helper ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
>
> - [#16780](https://redirect.github.com/babel/babel/pull/16780) Do not enforce printing space between ( and comments ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
>
> - [#16781](https://redirect.github.com/babel/babel/pull/16781) Don't throw when enabling both syntax-import-{assertions,attributes} ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16782](https://redirect.github.com/babel/babel/pull/16782) TS union/intersection nested in union does not need parens ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 🏠 Internal
>
> - babel-generator
>
> - [#16777](https://redirect.github.com/babel/babel/pull/16777) Remove unused parent params in the generator ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> v7.25.5 (2024-08-23)
>
> 🐛 Bug Fix
>
> - babel-generator, babel-traverse
>
> - [#16764](https://redirect.github.com/babel/babel/pull/16764) fix: Generate parentheses correctly ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> 💅 Polish
>
> - babel-generator
>
> - [#16738](https://redirect.github.com/babel/babel/pull/16738) Only force-parenthesize satisfies's LHS if it has newlines ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> v7.25.4 (2024-08-22)
>
> 🐛 Bug Fix
>
> - babel-traverse
>
> - [#16756](https://redirect.github.com/babel/babel/pull/16756) fix: Skip computed key when renaming ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
>
> - [#16755](https://redirect.github.com/babel/babel/pull/16755) fix: Decorator 2018-09 may throw an exception ([@liuxingbaoyu](https://github.com/liuxingbaoyu))
>
> - babel-types
>
> - [#16710](https://redirect.github.com/babel/babel/pull/16710) Visit AST fields nodes according to their syntactical order ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator
>
> - [#16709](https://redirect.github.com/babel/babel/pull/16709) Print semicolon after TS export namespace as A ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> 💅 Polish
>
> - babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
>
> - [#16722](https://redirect.github.com/babel/babel/pull/16722) Avoid unnecessary parens around sequence expressions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
>
> - babel-generator, babel-plugin-transform-class-properties
>
> - [#16714](https://redirect.github.com/babel/babel/pull/16714) Avoid unnecessary parens around exported arrow functions ([@nicolo-ribaudo](https://github.com/nicolo-ribaudo))
... (truncated)
Commits
- [2f72b97](babel/babel@2f72b97) v7.25.6
- [faceae9](babel/babel@faceae9) fix: path.getAssignmentIdentifiers may be undefined ([#16727](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16727))
- [46ee612](babel/babel@46ee612) Remove some NodePath methods ([#16655](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16655))
- [2fdc8b5](babel/babel@2fdc8b5) fix: Generate sequence expression parentheses correctly ([#16764](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16764))
- [cbf124c](babel/babel@cbf124c) v7.25.4
- [2b289fb](babel/babel@2b289fb) fix: skip computed key when renaming ([#16756](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16756))
- [575863c](babel/babel@575863c) Avoid unnecessary parens around sequence expressions ([#16722](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16722))
- [5174ad1](babel/babel@5174ad1) Clean all always enabled parser plugins ([#16572](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16572))
- [52718ab](babel/babel@52718ab) Discontinue babel-eslint-config-internal ([#16718](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16718))
- [dba45d3](babel/babel@dba45d3) Ignore devDependencies when generating tsconfig.json ([#16659](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16659))
- Additional commits viewable in [compare view](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse)
Updates async from 2.6.3 to 2.6.4
Changelog
Sourced from [async's changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md).
> v2.6.4
>
> - Fix potential prototype pollution exploit ([#1828](https://redirect.github.com/caolan/async/issues/1828))
Commits
- [c6bdaca](caolan/async@c6bdaca) Version 2.6.4
- [8870da9](caolan/async@8870da9) Update built files
- [4df6754](caolan/async@4df6754) update changelog
- [8f7f903](caolan/async@8f7f903) Fix prototype pollution vulnerability ([#1828](https://redirect.github.com/caolan/async/issues/1828))
- See full diff in [compare view](caolan/async@v2.6.3...v2.6.4)
Maintainer changes
This version was pushed to npm by [hargasinski](https://www.npmjs.com/~hargasinski), a new releaser for async since your current version.
Updates browserify-sign from 4.2.1 to 4.2.3
Changelog
Sourced from [browserify-sign's changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md).
> [v4.2.3](browserify/browserify-sign@v4.2.2...v4.2.3) - 2024-03-05
>
> Commits
>
> - [patch] widen support to 0.12 [9247adf](browserify/browserify-sign@9247adf)
> - [patch] drop minimum node support to v1 [4d0ee49](browserify/browserify-sign@4d0ee49)
> - [Dev Deps] update aud, npmignore, tape [87f3a35](browserify/browserify-sign@87f3a35)
> - [actions] remove redundant finisher [37a4758](browserify/browserify-sign@37a4758)
> - [Deps] pin hash-base to ~3.0, due to a breaking change [9e2bf12](browserify/browserify-sign@9e2bf12)
> - [Deps] update parse-asn1 ***@***.***(browserify/browserify-sign@f427270))
> - [Deps] update elliptic [fb261ce](browserify/browserify-sign@fb261ce)
> - [Deps] pin elliptic due to a breaking change [168e16f](browserify/browserify-sign@168e16f)
>
> [v4.2.2](browserify/browserify-sign@v4.2.1...v4.2.2) - 2023-10-25
>
> Fixed
>
> - [Tests] log when openssl doesn't support cipher [[#37](browserify/browserify-sign#37)
>
> Commits
>
> - Only apps should have lockfiles [09a8995](browserify/browserify-sign@09a8995)
> - [eslint] switch to eslint [83fe463](browserify/browserify-sign@83fe463)
> - [meta] add npmignore and auto-changelog [4418183](browserify/browserify-sign@4418183)
> - [meta] fix package.json indentation [9ac5a5e](browserify/browserify-sign@9ac5a5e)
> - [Tests] migrate from travis to github actions [d845d85](browserify/browserify-sign@d845d85)
> - [Fix] sign: throw on unsupported padding scheme [8767739](browserify/browserify-sign@8767739)
> - [Fix] properly check the upper bound for DSA signatures [85994cd](browserify/browserify-sign@85994cd)
> - [Tests] handle openSSL not supporting a scheme [f5f17c2](browserify/browserify-sign@f5f17c2)
> - [Deps] update bn.js, browserify-rsa, elliptic, parse-asn1, readable-stream, safe-buffer [a67d0eb](browserify/browserify-sign@a67d0eb)
> - [Dev Deps] update nyc, standard, tape [cc5350b](browserify/browserify-sign@cc5350b)
> - [Tests] always run coverage; downgrade nyc [75ce1d5](browserify/browserify-sign@75ce1d5)
> - [meta] add safe-publish-latest [dcf49ce](browserify/browserify-sign@dcf49ce)
> - [Tests] add npm run posttest [75dd8fd](browserify/browserify-sign@75dd8fd)
> - [Dev Deps] update tape [3aec038](browserify/browserify-sign@3aec038)
> - [Tests] skip unsupported schemes [703c83e](browserify/browserify-sign@703c83e)
> - [Tests] node < 6 lacks array includes [3aa43cf](browserify/browserify-sign@3aa43cf)
> - [Dev Deps] fix eslint range [98d4e0d](browserify/browserify-sign@98d4e0d)
Commits
- [bf2c3ec](browserify/browserify-sign@bf2c3ec) v4.2.3
- [9247adf](browserify/browserify-sign@9247adf) [patch] widen support to 0.12
- [f427270](browserify/browserify-sign@f427270) [Deps] update `parse-asn1
- [87f3a35](browserify/browserify-sign@87f3a35) [Dev Deps] update aud, npmignore, tape
- [fb261ce](browserify/browserify-sign@fb261ce) [Deps] update elliptic
- [4d0ee49](browserify/browserify-sign@4d0ee49) [patch] drop minimum node support to v1
- [9e2bf12](browserify/browserify-sign@9e2bf12) [Deps] pin hash-base to ~3.0, due to a breaking change
- [168e16f](browserify/browserify-sign@168e16f) [Deps] pin elliptic due to a breaking change
- [37a4758](browserify/browserify-sign@37a4758) [actions] remove redundant finisher
- [4af5a90](browserify/browserify-sign@4af5a90) v4.2.2
- Additional commits viewable in [compare view](browserify/browserify-sign@v4.2.1...v4.2.3)
Maintainer changes
This version was pushed to npm by [ljharb](https://www.npmjs.com/~ljharb), a new releaser for browserify-sign since your current version.
Updates color-string from 1.5.4 to 1.9.1
Release notes
Sourced from [color-string's releases](https://github.com/Qix-/color-string/releases).
> 1.9.0
>
> Minor Release 1.9.0
>
> - Add parsing of exponential alpha values for HWB and HSL ([#66](https://github.com/Qix-/color-string/issues/66))
>
> Thanks to [@babycannotsay](https://github.com/babycannotsay) for their contribution!
>
> 1.8.2
>
> Patch release 1.8.2
>
> - Fix incorrect handling of optional comma in rgb() regex ([#65](https://github.com/Qix-/color-string/issues/65))
>
> Thanks to [@gerdasi](https://github.com/gerdasi) and [@mastertheblaster](https://github.com/mastertheblaster) for reporting and confirming the bug!
>
> 1.8.1
>
> Patch release 1.8.1
>
> - Fix rgb alpha percentage parsing from int to float ([#61](https://github.com/Qix-/color-string/issues/61))
>
> Thanks to [@clytras](https://github.com/clytras) for their contribution!
>
> 1.8.0
>
> Minor release 1.8.0
>
> - Add anchors to keyword regex ([#64](https://github.com/Qix-/color-string/issues/64))
>
> Thanks to [@cq360767996](https://github.com/cq360767996) for their contribution!
>
> 1.7.4
>
> Patch Release 1.7.4
>
> - Fix bug in .to.hex() output if the inputs aren't rounded numbers ([#25](https://github.com/Qix-/color-string/issues/25))
>
> 1.7.3
>
> Patch Release 1.7.3
>
> - Fix hue modulo operation ([#50](https://github.com/Qix-/color-string/issues/50))
>
> Thanks to [@adroitwhiz](https://github.com/adroitwhiz) for their contributions.
>
> 1.7.2
>
> Patch Release 1.7.2
>
> - Fix issue where color-string with incorrectly return a color for properties on Object's prototype like "constructor". ([#45](https://github.com/Qix-/color-string/issues/45))
>
> Thanks to [@tolmasky](https://github.com/tolmasky) for their contributions.
>
> 1.7.1
>
> Patch release 1.7.1
... (truncated)
Commits
- [d9b04bb](Qix-/color-string@d9b04bb) 1.9.1
- [937b690](Qix-/color-string@937b690) fix to.keyword returning Object.prototype values ([#67](https://github.com/Qix-/color-string/issues/67))
- [4daceef](Qix-/color-string@4daceef) 1.9.0
- [94a429e](Qix-/color-string@94a429e) add parsing of exponential alpha values for HWB and HSL
- [fc2f880](Qix-/color-string@fc2f880) 1.8.2
- [32f3e00](Qix-/color-string@32f3e00) fix incorrect handling of optional comma in rgb() regex (fixes [#65](https://github.com/Qix-/color-string/issues/65))
- [0766ca7](Qix-/color-string@0766ca7) 1.8.1
- [0710543](Qix-/color-string@0710543) Fix rgb alpha percentage parsing from int to float
- [ab299a7](Qix-/color-string@ab299a7) 1.8.0
- [bea8702](Qix-/color-string@bea8702) add anchors to keyword regex
- Additional commits viewable in [compare view](Qix-/color-string@1.5.4...1.9.1)
Updates decode-uri-component from 0.2.0 to 0.2.2
Release notes
Sourced from [decode-uri-component's releases](https://github.com/SamVerschueren/decode-uri-component/releases).
> v0.2.2
>
> - Prevent overwriting previously decoded tokens 980e0bf
>
> ***@***.***(SamVerschueren/decode-uri-component@v0.2.1...v0.2.2)
>
> v0.2.1
>
> - Switch to GitHub workflows 76abc93
> - Fix issue where decode throws - fixes [#6](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6) 746ca5d
> - Update license ([#1](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1)) 486d7e2
> - Tidelift tasks a650457
> - Meta tweaks 66e1c28
>
> ***@***.***(SamVerschueren/decode-uri-component@v0.2.0...v0.2.1)
Commits
- [a0eea46](SamVerschueren/decode-uri-component@a0eea46) 0.2.2
- [980e0bf](SamVerschueren/decode-uri-component@980e0bf) Prevent overwriting previously decoded tokens
- [3c8a373](SamVerschueren/decode-uri-component@3c8a373) 0.2.1
- [76abc93](SamVerschueren/decode-uri-component@76abc93) Switch to GitHub workflows
- [746ca5d](SamVerschueren/decode-uri-component@746ca5d) Fix issue where decode throws - fixes [#6](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/6)
- [486d7e2](SamVerschueren/decode-uri-component@486d7e2) Update license ([#1](https://redirect.github.com/SamVerschueren/decode-uri-component/issues/1))
- [a650457](SamVerschueren/decode-uri-component@a650457) Tidelift tasks
- [66e1c28](SamVerschueren/decode-uri-component@66e1c28) Meta tweaks
- See full diff in [compare view](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)
Updates dns-packet from 1.3.1 to 1.3.4
Commits
- [ebdf849](mafintosh/dns-packet@ebdf849) 1.3.4
- [ac57872](mafintosh/dns-packet@ac57872) move all allocUnsafes to allocs for easier maintenance
- [c64c950](mafintosh/dns-packet@c64c950) 1.3.3
- [0598ba1](mafintosh/dns-packet@0598ba1) fix .. in encodingLength
- [010aedb](mafintosh/dns-packet@010aedb) 1.3.2
- [0d0d593](mafintosh/dns-packet@0d0d593) backport encodingLength fix to v1
- See full diff in [compare view](mafintosh/dns-packet@v1.3.1...v1.3.4)
Updates elliptic from 6.5.4 to 6.5.7
Commits
- [3e46a48](indutny/elliptic@3e46a48) 6.5.7
- [accb61e](indutny/elliptic@accb61e) lib: DER signature decoding correction
- [03e06e1](indutny/elliptic@03e06e1) 6.5.6
- [7ac5360](indutny/elliptic@7ac5360) Merge commit from fork
- [7570078](indutny/elliptic@7570078) 6.5.5
- [206da2e](indutny/elliptic@206da2e) lib: lint
- [0a78e03](indutny/elliptic@0a78e03) [Fix] restore node < 4 compat
- See full diff in [compare view](indutny/elliptic@v6.5.4...v6.5.7)
Updates es5-ext from 0.10.53 to 0.10.64
Release notes
Sourced from [es5-ext's releases](https://github.com/medikoo/es5-ext/releases).
> 0.10.64 (2024-02-27)
>
> Bug Fixes
>
> - Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals ([c2e2bb9](medikoo/es5-ext@c2e2bb9))
>
> ---------------------------------------------------------------
>
> [Comparison since last release](medikoo/es5-ext@v0.10.63...v0.10.64)
>
> 0.10.63 (2024-02-23)
>
> Bug Fixes
>
> - Do not rely on problematic regex ([3551cdd](medikoo/es5-ext@3551cdd)), addresses [#201](https://redirect.github.com/medikoo/es5-ext/issues/201)
> - Support ES2015+ function definitions in function#toStringTokens() ([a52e957](medikoo/es5-ext@a52e957)), addresses [#021](https://redirect.github.com/medikoo/es5-ext/issues/021)
> - Ensure postinstall script does not crash on Windows, fixes [#181](https://redirect.github.com/medikoo/es5-ext/issues/181) ([bf8ed79](medikoo/es5-ext@bf8ed79))
>
> Maintenance Improvements
>
> - Simplify the manifest message ([7855319](medikoo/es5-ext@7855319))
>
> ---------------------------------------------------------------
>
> [Comparison since last release](medikoo/es5-ext@v0.10.62...v0.10.63)
>
> 0.10.62 (2022-08-02)
>
> Maintenance Improvements
>
> - Manifest improvements:
>
> - ([#190](https://redirect.github.com/medikoo/es5-ext/issues/190)) ([b8dc53f](medikoo/es5-ext@b8dc53f))
> - ([c51d552](medikoo/es5-ext@c51d552))
>
> ---------------------------------------------------------------
>
> [Comparison since last release](medikoo/es5-ext@v0.10.61...v0.10.62)
>
> 0.10.61 (2022-04-20)
>
> Bug Fixes
>
> - Ensure postinstall script does not error ([a0be4fd](medikoo/es5-ext@a0be4fd))
>
> Maintenance Improvements
>
> - Bump dependencies ([d7e0a61](medikoo/es5-ext@d7e0a61))
>
> ---------------------------------------------------------------
>
> [Comparison since last release](medikoo/es5-ext@v0.10.60...v0.10.61)
>
> 0.10.60 (2022-04-07)
>
> Maintenance Improvements
>
> - Improve postinstall script configuration ([ab6b121](medikoo/es5-ext@ab6b121))
>
> ---------------------------------------------------------------
... (truncated)
Changelog
Sourced from [es5-ext's changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md).
> [0.10.64](medikoo/es5-ext@v0.10.63...v0.10.64) (2024-02-27)
>
> Bug Fixes
>
> - Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals ([c2e2bb9](medikoo/es5-ext@c2e2bb9))
>
> [0.10.63](medikoo/es5-ext@v0.10.62...v0.10.63) (2024-02-23)
>
> Bug Fixes
>
> - Do not rely on problematic regex ([3551cdd](medikoo/es5-ext@3551cdd)), addresses [#201](https://redirect.github.com/medikoo/es5-ext/issues/201)
> - Support ES2015+ function definitions in function#toStringTokens() ([a52e957](medikoo/es5-ext@a52e957)), addresses [#021](https://redirect.github.com/medikoo/es5-ext/issues/021)
> - Ensure postinstall script does not crash on Windows, fixes [#181](https://redirect.github.com/medikoo/es5-ext/issues/181) ([bf8ed79](medikoo/es5-ext@bf8ed79))
>
> Maintenance Improvements
>
> - Simplify the manifest message ([7855319](medikoo/es5-ext@7855319))
>
> [0.10.62](medikoo/es5-ext@v0.10.61...v0.10.62) (2022-08-02)
>
> Maintenance Improvements
>
> - Manifest improvements:
>
> - ([#190](https://redirect.github.com/medikoo/es5-ext/issues/190)) ([b8dc53f](medikoo/es5-ext@b8dc53f))
> - ([c51d552](medikoo/es5-ext@c51d552))
>
> [0.10.61](medikoo/es5-ext@v0.10.60...v0.10.61) (2022-04-20)
>
> Bug Fixes
>
> - Ensure postinstall script does not error ([a0be4fd](medikoo/es5-ext@a0be4fd))
>
> Maintenance Improvements
>
> - Bump dependencies ([d7e0a61](medikoo/es5-ext@d7e0a61))
>
> [0.10.60](medikoo/es5-ext@v0.10.59...v0.10.60) (2022-04-07)
>
> Maintenance Improvements
>
> - Improve postinstall script configuration ([ab6b121](medikoo/es5-ext@ab6b121))
>
> [0.10.59](medikoo/es5-ext@v0.10.58...v0.10.59) (2022-03-17)
>
> Maintenance Improvements
>
> - Improve manifest wording ([#122](https://redirect.github.com/medikoo/es5-ext/issues/122)) ([eb7ae59](medikoo/es5-ext@eb7ae59))
> - Update data in manifest ([3d2935a](medikoo/es5-ext@3d2935a))
>
> [0.10.58](medikoo/es5-ext@v0.10.57...v0.10.58) (2022-03-11)
... (truncated)
Commits
- [f76b03d](medikoo/es5-ext@f76b03d) chore: Release v0.10.64
- [2881acd](medikoo/es5-ext@2881acd) chore: Bump dependencies
- [c2e2bb9](medikoo/es5-ext@c2e2bb9) fix: Revert update meant to fix Powershell issue, as it's a regression
- [16f2b72](medikoo/es5-ext@16f2b72) docs: Fix date in the changelog
- [de4e03c](medikoo/es5-ext@de4e03c) chore: Release v0.10.63
- [3fd53b7](medikoo/es5-ext@3fd53b7) chore: Upgrade lint-staged to v13
- [bf8ed79](medikoo/es5-ext@bf8ed79) chore: Ensure postinstall script does not crash on Windows
- [2cbbb07](medikoo/es5-ext@2cbbb07) chore: Bump dependencies
- [22d0416](medikoo/es5-ext@22d0416) chore: Bump LICENSE year
- [a52e957](medikoo/es5-ext@a52e957) fix: Support ES2015+ function definitions in function#toStringTokens()
- Additional commits viewable in [compare view](medikoo/es5-ext@v0.10.53...v0.10.64)
Updates eventsource from 1.0.7 to 1.1.2
Changelog
Sourced from [eventsource's changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md).
> [1.1.2](EventSource/eventsource@v1.1.1...v1.1.2)
>
> - Inline origin resolution, drops original dependency ([#281](https://redirect.github.com/EventSource/eventsource/pull/281) Espen Hovlandsdal)
>
> [1.1.1](EventSource/eventsource@v1.1.0...v1.1.1)
>
> - Do not include authorization and cookie headers on redirect to different origin ([#273](https://redirect.github.com/EventSource/eventsource/pull/273) Espen Hovlandsdal)
>
> [1.1.0](EventSource/eventsource@v1.0.7...v1.1.0)
>
> - Improve performance for large messages across many chunks ([#130](https://redirect.github.com/EventSource/eventsource/pull/130) Trent Willis)
> - Add createConnection option for http or https requests ([#120](https://redirect.github.com/EventSource/eventsource/pull/120) Vasily Lavrov)
> - Support HTTP 302 redirects ([#116](https://redirect.github.com/EventSource/eventsource/pull/116) Ryan Bonte)
> - Prevent sequential errors from attempting multiple reconnections ([#125](https://redirect.github.com/EventSource/eventsource/pull/125) David Patty)
> - Add new to correct test ([#111](https://redirect.github.com/EventSource/eventsource/pull/101) Stéphane Alnet)
> - Fix reconnections attempts now happen more than once ([#136](https://redirect.github.com/EventSource/eventsource/pull/136) Icy Fish)
Commits
- [0a8b85b](EventSource/eventsource@0a8b85b) 1.1.2
- [f99ae66](EventSource/eventsource@f99ae66) docs: update history for 1.1.2
- [06c9721](EventSource/eventsource@06c9721) chore: rebuild polyfill
- [9494642](EventSource/eventsource@9494642) fix: inline origin resolution, drop original dependency ([#281](https://redirect.github.com/EventSource/eventsource/issues/281))
- [aa7a408](EventSource/eventsource@aa7a408) 1.1.1
- [56d489e](EventSource/eventsource@56d489e) chore: rebuild polyfill
- [4a951e5](EventSource/eventsource@4a951e5) docs: update history for 1.1.1
- [f9f6416](EventSource/eventsource@f9f6416) fix: strip sensitive headers on redirect to different origin
- [9dd0687](EventSource/eventsource@9dd0687) 1.1.0
- [49497ba](EventSource/eventsource@49497ba) Update history for 1.1.0 ([#146](https://redirect.github.com/EventSource/eventsource/issues/146))
- Additional commits viewable in [compare view](EventSource/eventsource@v1.0.7...v1.1.2)
Updates express from 4.17.1 to 4.21.0
Release notes
Sourced from [express's releases](https://github.com/expressjs/express/releases).
> 4.21.0
>
> What's Changed
>
> - Deprecate "back" magic string in redirects by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5935](https://redirect.github.com/expressjs/express/pull/5935)
> - ***@***.*** by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5954](https://redirect.github.com/expressjs/express/pull/5954)
> - fix(deps): ***@***.*** by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5951](https://redirect.github.com/expressjs/express/pull/5951)
> - Upgraded dependency qs to 6.13.0 to match qs in body-parser by [@agadzinski93](https://github.com/agadzinski93) in [expressjs/express#5946](https://redirect.github.com/expressjs/express/pull/5946)
>
> New Contributors
>
> - [@agadzinski93](https://github.com/agadzinski93) made their first contribution in [expressjs/express#5946](https://redirect.github.com/expressjs/express/pull/5946)
>
> Full Changelog: ***@***.***(expressjs/express@4.20.0...4.21.0)
>
> 4.20.0
>
> What's Changed
>
> Important
>
> - IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
> - Remove link renderization in html while using res.redirect
>
> Other Changes
>
> - 4.19.2 Staging by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5561](https://redirect.github.com/expressjs/express/pull/5561)
> - remove duplicate location test for data uri by [@wesleytodd](https://github.com/wesleytodd) in [expressjs/express#5562](https://redirect.github.com/expressjs/express/pull/5562)
> - feat: document beta releases expectations by [@marco-ippolito](https://github.com/marco-ippolito) in [expressjs/express#5565](https://redirect.github.com/expressjs/express/pull/5565)
> - Cut down on duplicated CI runs by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5564](https://redirect.github.com/expressjs/express/pull/5564)
> - Add a Threat Model by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5526](https://redirect.github.com/expressjs/express/pull/5526)
> - Assign captain of encodeurl by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5579](https://redirect.github.com/expressjs/express/pull/5579)
> - Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5587](https://redirect.github.com/expressjs/express/pull/5587)
> - docs: update Security.md by [@inigomarquinez](https://github.com/inigomarquinez) in [expressjs/express#5590](https://redirect.github.com/expressjs/express/pull/5590)
> - docs: update triage nomination policy by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5600](https://redirect.github.com/expressjs/express/pull/5600)
> - Add CodeQL (SAST) by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5433](https://redirect.github.com/expressjs/express/pull/5433)
> - docs: add UlisesGascon as triage initiative captain by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5605](https://redirect.github.com/expressjs/express/pull/5605)
> - deps: encodeurl@~2.0.0 by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5569](https://redirect.github.com/expressjs/express/pull/5569)
> - skip QUERY method test by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5628](https://redirect.github.com/expressjs/express/pull/5628)
> - ignore ETAG query test on 21 and 22, reuse skip util by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5639](https://redirect.github.com/expressjs/express/pull/5639)
> - add support ***@***.*** in the CI by [@mertcanaltin](https://github.com/mertcanaltin) in [expressjs/express#5627](https://redirect.github.com/expressjs/express/pull/5627)
> - doc: add table of contents, tc/triager lists to readme by [@mertcanaltin](https://github.com/mertcanaltin) in [expressjs/express#5619](https://redirect.github.com/expressjs/express/pull/5619)
> - List and sort all projects, add captains by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5653](https://redirect.github.com/expressjs/express/pull/5653)
> - docs: add [@UlisesGascon](https://github.com/UlisesGascon) as captain for cookie-parser by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5666](https://redirect.github.com/expressjs/express/pull/5666)
> - ✨ bring back query tests for node 21 by [@ctcpip](https://github.com/ctcpip) in [expressjs/express#5690](https://redirect.github.com/expressjs/express/pull/5690)
> - [v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5672](https://redirect.github.com/expressjs/express/pull/5672)
> - skip QUERY tests for Node 21 only, still not supported by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5695](https://redirect.github.com/expressjs/express/pull/5695)
> - 📝 update people, add ctcpip to TC by [@ctcpip](https://github.com/ctcpip) in [expressjs/express#5683](https://redirect.github.com/expressjs/express/pull/5683)
> - remove minor version pinning from ci by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5722](https://redirect.github.com/expressjs/express/pull/5722)
> - Fix link variable use in attribution section of CODE OF CONDUCT by [@IamLizu](https://github.com/IamLizu) in [expressjs/express#5762](https://redirect.github.com/expressjs/express/pull/5762)
> - Replace Appveyor windows testing with GHA by [@jonchurch](https://github.com/jonchurch) in [expressjs/express#5599](https://redirect.github.com/expressjs/express/pull/5599)
> - Add OSSF Scorecard badge by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5436](https://redirect.github.com/expressjs/express/pull/5436)
> - update scorecard link by [@bjohansebas](https://github.com/bjohansebas) in [expressjs/express#5814](https://redirect.github.com/expressjs/express/pull/5814)
> - Nominate [@IamLizu](https://github.com/IamLizu) to the triage team by [@UlisesGascon](https://github.com/UlisesGascon) in [expressjs/express#5836](https://redirect.github.com/expressjs/express/pull/5836)
> - deps: ***@***.*** by [@blakeembrey](https://github.com/blakeembrey) in [expressjs/express#5603](https://redirect.github.com/expressjs/express/pull/5603)
... (truncated)
Changelog
Sourced from [express's changelog](https://github.com/expressjs/express/blob/4.21.0/History.md).
> 4.21.0 / 2024-09-11
>
> - Deprecate res.location("back") and res.redirect("back") magic string
> - deps: ***@***.***
>
> - includes ***@***.***
>
> - deps: ***@***.***
> - deps: ***@***.***
>
> 4.20.0 / 2024-09-10
>
> - deps: ***@***.***
>
> - Remove link renderization in html while redirecting
>
> - deps: ***@***.***
>
> - Remove link renderization in html while redirecting
>
> - deps: ***@***.***
>
> - add depth option to customize the depth level in the parser
> - IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
>
> - Remove link renderization in html while using res.redirect
> - deps: ***@***.***
>
> - Adds support for named matching groups in the routes using a regex
> - Adds backtracking protection to parameters without regexes defined
>
> - deps: encodeurl@~2.0.0
>
> - Removes encoding of \, |, and ^ to align better with URL spec
>
> - Deprecate passing options.maxAge and options.expires to res.clearCookie
>
> - Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
>
> 4.19.2 / 2024-03-25
>
> - Improved fix for open redirect allow list bypass
>
> 4.19.1 / 2024-03-20
>
> - Allow passing non-strings to res.location with new encoding handling checks
>
> 4.19.0 / 2024-03-20
>
> - Prevent open redirect allow list bypass due to encodeurl
> - deps: ***@***.***
>
> 4.18.3 / 2024-02-29
>
> - Fix routing requests without method
> - deps: ***@***.***
>
> - Fix strict json error message on Node.js 19+
> - deps: content-type@~1.0.5
... (truncated)
Commits
- [7e562c6](expressjs/express@7e562c6) 4.21.0
- [1bcde96](expressjs/express@1bcde96) fix(deps): ***@***.*** ([#5946](https://redirect.github.com/expressjs/express/issues/5946))
- [7d36477](expressjs/express@7d36477) fix(deps): ***@***.*** ([#5951](https://redirect.github.com/expressjs/express/issues/5951))
- [40d2d8f](expressjs/express@40d2d8f) fix(deps): ***@***.***
- [77ada90](expressjs/express@77ada90) Deprecate "back" magic string in redirects ([#5935](https://redirect.github.com/expressjs/express/issues/5935))
- [21df421](expressjs/express@21df421) 4.20.0
- [4c9ddc1](expressjs/express@4c9ddc1) feat: upgrade to ***@***.***
- [9ebe5d5](expressjs/express@9ebe5d5) feat: upgrade to ***@***.*** ([#5928](https://redirect.github.com/expressjs/express/issues/5928))
- [ec4a01b](expressjs/express@ec4a01b) feat: upgrade to ***@***.*** ([#5926](https://redirect.github.com/expressjs/express/issues/5926))
- [54271f6](expressjs/express@54271f6) fix: don't render redirect values in anchor href
- Additional commits viewable in [compare view](expressjs/express@4.17.1...4.21.0)
Maintainer changes
This version was pushed to npm by [wesleytodd](https://www.npmjs.com/~wesleytodd), a new releaser for express since your current version.
Updates follow-redirects from 1.13.2 to 1.15.9
Commits
- [e4e55c7](follow-redirects/follow-redirects@e4e55c7) Release version 1.15.9 of the npm package.
- [31a1abf](follow-redirects/follow-redirects@31a1abf) Attempt much more gentle detection.
- [d2aaa97](follow-redirects/follow-redirects@d2aaa97) Fix url field.
- [62558f0](follow-redirects/follow-redirects@62558f0) Release version 1.15.8 of the npm package.
- [a8d1cee](follow-redirects/follow-redirects@a8d1cee) Return subtlety.
- [458ca8e](follow-redirects/follow-redirects@458ca8e) Fix native URL test for Node 20.
- [ca49e44](follow-redirects/follow-redirects@ca49e44) Handle KeepAlive connections in tests.
- [f3711d7](follow-redirects/follow-redirects@f3711d7) Test on Node 20 and 22.
- [fda0faf](follow-redirects/follow-redirects@fda0faf) Fix typo.
- [760757f](follow-redirects/follow-redirects@760757f) Release version 1.15.7 of the npm package.
- Additional commits viewable in [compare view](follow-redirects/follow-redirects@v1.13.2...v1.15.9)
Updates hosted-git-info from 2.8.8 to 2.8.9
Changelog
Sourced from [hosted-git-info's changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md).
> [2.8.9](npm/hosted-git-info@v2.8.8...v2.8.9) (2021-04-07)
>
> Bug Fixes
>
> - backport regex fix from [#76](https://redirect.github.com/npm/hosted-git-info/issues/76) ([29adfe5](npm/hosted-git-info@29adfe5)), closes [#84](https://redirect.github.com/npm/hosted-git-info/issues/84)
Commits
- [8d4b369](npm/hosted-git-info@8d4b369) chore(release): 2.8.9
- [29adfe5](npm/hosted-git-info@29adfe5) fix: backport regex fix from [#76](https://redirect.github.com/npm/hosted-git-info/issues/76)
- See full diff in [compare view](npm/hosted-git-info@v2.8.8...v2.8.9)
Maintainer changes
This version was pushed to npm by [nlf](https://www.npmjs.com/~nlf), a new releaser for hosted-git-info since your current version.
Updates minimist from 1.2.5 to 1.2.8
Changelog
Sourced from [minimist's changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md).
> [v1.2.8](minimistjs/minimist@v1.2.7...v1.2.8) - 2023-02-09
>
> Merged
>
> - [Fix] Fix long option followed by single dash [[#17](minimistjs/minimist#17)
> - [Tests] Remove duplicate test [[#12](minimistjs/minimist#12)
> - [Fix] opt.string works with multiple aliases [[#10](minimistjs/minimist#10)
>
> Fixed
>
> - [Fix] Fix long option followed by single dash ([#17](https://redirect.github.com/minimistjs/minimist/issues/17)) [[#15](minimistjs/minimist#15)](https://redirect.github.com/minimistjs/minimist/issues/15)
> - [Tests] Remove duplicate test (
---------------------------------------------------------------
You can view, comment on, or merge this pull request online at:
#3
Commit Summary
- [10fe9c6](10fe9c6) Bump the npm_and_yarn group across 1 directory with 22 updates
File Changes
([1 file](https://github.com/reposman33/Etesian-code-assessment/pull/3/files))
- M [yarn.lock](https://github.com/reposman33/Etesian-code-assessment/pull/3/files#diff-51e4f558fae534656963876761c95b83b6ef5da5103c4adef6768219ed76c2de) (819)
Patch Links:
- https://github.com/reposman33/Etesian-code-assessment/pull/3.patch
- https://github.com/reposman33/Etesian-code-assessment/pull/3.diff
—
Reply to this email directly, [view it on GitHub](#3), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AAYNOZVKDEP3Z3AIAZJWFCLZYCTQBAVCNFSM6AAAAABOXDQ5WWVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU2DGOJXGAYTSOA).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Author
|
Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 19 updates in the / directory:
7.12.177.25.62.6.32.6.44.2.14.2.31.5.41.9.10.2.00.2.21.3.11.3.46.5.46.5.70.10.530.10.641.0.71.1.24.17.14.21.01.13.21.15.92.8.82.8.91.2.51.2.83.1.203.3.71.0.61.0.76.1.06.2.11.0.41.0.51.5.11.5.101.2.31.2.5Updates
@babel/traversefrom 7.12.17 to 7.25.6Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
2f72b97v7.25.6faceae9fix:path.getAssignmentIdentifiersmay beundefined(#16727)46ee612Remove someNodePathmethods (#16655)2fdc8b5fix: Generate sequence expression parentheses correctly (#16764)cbf124cv7.25.42b289fbfix: skip computed key when renaming (#16756)575863cAvoid unnecessary parens around sequence expressions (#16722)5174ad1Clean all always enabled parser plugins (#16572)52718abDiscontinue babel-eslint-config-internal (#16718)dba45d3IgnoredevDependencieswhen generatingtsconfig.json(#16659)Updates
asyncfrom 2.6.3 to 2.6.4Changelog
Sourced from async's changelog.
Commits
c6bdacaVersion 2.6.48870da9Update built files4df6754update changelog8f7f903Fix prototype pollution vulnerability (#1828)Maintainer changes
This version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates
browserify-signfrom 4.2.1 to 4.2.3Changelog
Sourced from browserify-sign's changelog.
Commits
bf2c3ecv4.2.39247adf[patch] widen support to 0.12f427270[Deps] update `parse-asn187f3a35[Dev Deps] updateaud,npmignore,tapefb261ce[Deps] updateelliptic4d0ee49[patch] drop minimum node support to v19e2bf12[Deps] pinhash-baseto ~3.0, due to a breaking change168e16f[Deps] pinellipticdue to a breaking change37a4758[actions] remove redundant finisher4af5a90v4.2.2Maintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates
color-stringfrom 1.5.4 to 1.9.1Release notes
Sourced from color-string's releases.
... (truncated)
Commits
d9b04bb1.9.1937b690fix to.keyword returning Object.prototype values (#67)4daceef1.9.094a429eadd parsing of exponential alpha values for HWB and HSLfc2f8801.8.232f3e00fix incorrect handling of optional comma in rgb() regex (fixes #65)0766ca71.8.10710543Fix rgb alpha percentage parsing from int to floatab299a71.8.0bea8702add anchors to keyword regexUpdates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
dns-packetfrom 1.3.1 to 1.3.4Commits
ebdf8491.3.4ac57872move all allocUnsafes to allocs for easier maintenancec64c9501.3.30598ba1fix .. in encodingLength010aedb1.3.20d0d593backport encodingLength fix to v1Updates
ellipticfrom 6.5.4 to 6.5.7Commits
3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from fork75700786.5.5206da2elib: lint0a78e03[Fix] restore node < 4 compatUpdates
es5-extfrom 0.10.53 to 0.10.64Release notes
Sourced from es5-ext's releases.
... (truncated)
Changelog
Sourced from es5-ext's changelog.
... (truncated)
Commits
f76b03dchore: Release v0.10.642881acdchore: Bump dependenciesc2e2bb9fix: Revert update meant to fix Powershell issue, as it's a regression16f2b72docs: Fix date in the changelogde4e03cchore: Release v0.10.633fd53b7chore: Upgradelint-stagedto v13bf8ed79chore: Ensure postinstall script does not crash on Windows2cbbb07chore: Bump dependencies22d0416chore: Bump LICENSE yeara52e957fix: Support ES2015+ function definitions infunction#toStringTokens()Updates
eventsourcefrom 1.0.7 to 1.1.2Changelog
Sourced from eventsource's changelog.
Commits
0a8b85b1.1.2f99ae66docs: update history for 1.1.206c9721chore: rebuild polyfill9494642fix: inline origin resolution, droporiginaldependency (#281)aa7a4081.1.156d489echore: rebuild polyfill4a951e5docs: update history for 1.1.1f9f6416fix: strip sensitive headers on redirect to different origin9dd06871.1.049497baUpdate history for 1.1.0 (#146)Updates
expressfrom 4.17.1 to 4.21.0Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
7e562c64.21.01bcde96fix(deps): [email protected] (#5946)7d36477fix(deps): [email protected] (#5951)40d2d8ffix(deps): [email protected]77ada90Deprecate"back"magic string in redirects (#5935)21df4214.20.04c9ddc1feat: upgrade to [email protected]9ebe5d5feat: upgrade to [email protected] (#5928)ec4a01bfeat: upgrade to [email protected] (#5926)54271f6fix: don't render redirect values in anchor hrefMaintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
follow-redirectsfrom 1.13.2 to 1.15.9Commits
e4e55c7Release version 1.15.9 of the npm package.31a1abfAttempt much more gentle detection.d2aaa97Fix url field.62558f0Release version 1.15.8 of the npm package.a8d1ceeReturn subtlety.458ca8eFix native URL test for Node 20.ca49e44Handle KeepAlive connections in tests.f3711d7Test on Node 20 and 22.fda0fafFix typo.760757fRelease version 1.15.7 of the npm package.Updates
hosted-git-infofrom 2.8.8 to 2.8.9Changelog
Sourced from hosted-git-info's changelog.
Commits
8d4b369chore(release): 2.8.929adfe5fix: backport regex fix from #76Maintainer changes
This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.
Updates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.