build(deps): bump the npm_and_yarn group across 3 directories with 17 updates #71
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 3 updates in the /pw_ide/ts/pigweed-vscode directory: [webpack](https://github.com/webpack/webpack), [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [elliptic](https://github.com/indutny/elliptic). Bumps the npm_and_yarn group with 10 updates in the /pw_web/log-viewer directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.2.8` | `5.4.11` | | [@75lb/deep-merge](https://github.com/75lb/deep-merge) | `1.1.1` | `1.1.2` | | [ip](https://github.com/indutny/node-ip) | `1.1.9` | `removed` | | [@open-wc/testing](https://github.com/open-wc/open-wc/tree/HEAD/packages/testing) | `3.0.0-next.5` | `3.2.2` | | [@web/dev-server](https://github.com/modernweb-dev/web/tree/HEAD/packages/dev-server) | `0.4.0` | `0.4.6` | | [@web/test-runner-core](https://github.com/modernweb-dev/web/tree/HEAD/packages/test-runner-core) | `0.13.0` | `0.13.4` | | [pac-resolver](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/pac-resolver) | `7.0.0` | `7.0.1` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.3` | Bumps the npm_and_yarn group with 4 updates in the /pw_web/webconsole directory: [braces](https://github.com/micromatch/braces), [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [nanoid](https://github.com/ai/nanoid) and [next](https://github.com/vercel/next.js). Updates `webpack` from 5.93.0 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.93.0...v5.97.1) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `elliptic` from 6.5.5 to 6.6.1 - [Commits](indutny/elliptic@v6.5.5...v6.6.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `vite` from 5.2.8 to 5.4.11 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.11/packages/vite) Updates `@75lb/deep-merge` from 1.1.1 to 1.1.2 - [Commits](75lb/deep-merge@v1.1.1...v1.1.2) Removes `ip` Updates `@open-wc/testing` from 3.0.0-next.5 to 3.2.2 - [Release notes](https://github.com/open-wc/open-wc/releases) - [Changelog](https://github.com/open-wc/open-wc/blob/master/packages/testing/CHANGELOG.md) - [Commits](https://github.com/open-wc/open-wc/commits/@open-wc/[email protected]/packages/testing) Updates `@web/dev-server` from 0.4.0 to 0.4.6 - [Release notes](https://github.com/modernweb-dev/web/releases) - [Changelog](https://github.com/modernweb-dev/web/blob/master/packages/dev-server/CHANGELOG.md) - [Commits](https://github.com/modernweb-dev/web/commits/@web/[email protected]/packages/dev-server) Updates `@web/test-runner-core` from 0.13.0 to 0.13.4 - [Release notes](https://github.com/modernweb-dev/web/releases) - [Changelog](https://github.com/modernweb-dev/web/blob/master/packages/test-runner-core/CHANGELOG.md) - [Commits](https://github.com/modernweb-dev/web/commits/@web/[email protected]/packages/test-runner-core) Updates `pac-resolver` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/TooTallNate/proxy-agents/releases) - [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/pac-resolver/CHANGELOG.md) - [Commits](https://github.com/TooTallNate/proxy-agents/commits/[email protected]/packages/pac-resolver) Updates `socks` from 2.7.1 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](JoshGlazebrook/socks@2.7.1...2.8.3) Updates `nanoid` from 3.3.7 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `postcss` from 8.4.38 to 8.5.1 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.5.1) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `rollup` from 3.29.4 to 4.30.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v4.30.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `nanoid` from 3.3.6 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.6...3.3.8) Updates `next` from 12.2.3 to 14.2.21 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.2.3...v14.2.21) --- updated-dependencies: - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@75lb/deep-merge" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@open-wc/testing" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@web/dev-server" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@web/test-runner-core" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: pac-resolver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request. |
1 similar comment
|
Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
bot
deleted the
dependabot/npm_and_yarn/pw_ide/ts/pigweed-vscode/npm_and_yarn-cc6ca2afbf
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 3 updates in the /pw_ide/ts/pigweed-vscode directory: webpack, cross-spawn and elliptic.
Bumps the npm_and_yarn group with 10 updates in the /pw_web/log-viewer directory:
3.0.23.0.37.0.37.0.65.2.85.4.111.1.11.1.21.1.9removed3.0.0-next.53.2.20.4.00.4.60.13.00.13.47.0.07.0.12.7.12.8.3Bumps the npm_and_yarn group with 4 updates in the /pw_web/webconsole directory: braces, cross-spawn, nanoid and next.
Updates
webpackfrom 5.93.0 to 5.97.1Release notes
Sourced from webpack's releases.
... (truncated)
Commits
3612d36chore(release): 5.97.1eb7ac6ffix: perf regression554be24fix: sub define key should't be renamed when it's a defined variable5e0e780refactor: issue #1903058fb035fix: sub define key should't be renamed when it's a defined variableaf1fd12perf: regression34f19cbfix: package.json0ec7f5drefactor: issue #190305e7b8a2fix:package.json644f1d1refactor: no extra work for CSS unescapingUpdates
cross-spawnfrom 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)Updates
ellipticfrom 6.5.5 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.034c8534fix: signature verification due to leading zeros3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from forkUpdates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
cross-spawnfrom 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)Updates
vitefrom 5.2.8 to 5.4.11Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
c54c860release: v5.4.115f52bc8release: v5.4.107d1a3bcfix: backport #18367,augment hash for CSS files to prevent chromium erroring ...898d61frelease: v5.4.9508d9abfix: bump launch-editor-middleware to v2.9.1 (#18348)dc5434cfix(deps): bump tsconfck (#18322)851b258fix(hmr): don't try to rewrite imports for direct CSS soft invalidation (#18252)96084d6fix(data-uri): only match ids starting withdata:(#18241)eae00b5fix(css): fix lightningcss dep url resolution with custom root (#18125)c23558achore: update all url references of vitejs.dev to vite.dev (#18276)Updates
@75lb/deep-mergefrom 1.1.1 to 1.1.2Commits
83d415f1.1.29fda173Fix CIa68541fReplace lodash.assignwith package with lodash/assignWith.js. Fixes #1Removes
ipUpdates
@open-wc/testingfrom 3.0.0-next.5 to 3.2.2Release notes
Sourced from
@open-wc/testing's releases.... (truncated)
Changelog
Sourced from
@open-wc/testing's changelog.... (truncated)
Commits
c4debddVersion Packages (#2737)e94ca9achore(testing): remove unused dependencies (#2736)d91a621Version Packages14e4270feat: new a11y rules (#2686)57ddb3cVersion Packages3289e0efix(testing|testing-helpers): export oneDefaultPreventedEvent through testing...74f51a7Version Packagesf077923fix(deps): update dependency@types/chai-domto v10182490Version Packages (#2508)b187c0bAdd types export to testing & testing-helpers (#2507)Updates
@web/dev-serverfrom 0.4.0 to 0.4.6Release notes
Sourced from
@web/dev-server's releases.Changelog
Sourced from
@web/dev-server's changelog.Commits
50adf1cVersion Packages39ff6fffix: replace ip dependency due to security bug CVE-2024-2941503f3c6fVersion Packages553d0c7Version Packages9dd1013Update puppeteer to version 22.0.05b00600Version Packagese657791fix: remove vulnerability by updatingippackage6a1ed05Version Packagesfa46b6cfeat: Add option to modify chokidar watchOptions with@web/dev-server90e4472ci: use workspaces to run node testsUpdates
@web/test-runner-corefrom 0.13.0 to 0.13.4Release notes
Sourced from
@web/test-runner-core's releases.Changelog
Sourced from
@web/test-runner-core's changelog.Commits
aadcbeaVersion Packages (#2817)3ac9d02chore: bump chokidar to v450adf1cVersion Packages39ff6fffix: replace ip dependency due to security bug CVE-2024-2941503f3c6fVersion Packages5b00600Version Packagese657791fix: remove vulnerability by updatingippackage54d65a4ci: align reporters across all packages26b7368chore: format90e4472ci: use workspaces to run node testsUpdates
pac-resolverfrom 7.0.0 to 7.0.1Release notes
Sourced from pac-resolver's releases.
Changelog
Sourced from pac-resolver's changelog.
Commits
d4d3cd0Version Packages (#271)a954da3[pac-resolver] Removeipdependency (#281)aaebfa4Prettier5923589Moved licenses to separate files (#251)Updates
socksfrom 2.7.1 to 2.8.3Release notes
Sourced from socks's releases.
Commits
a2a06d92.8.3992b002Fix bug with ipv6 conversion in ipToBuffer (#101)99633aev280 (#98)89d8c07Fix package lock for 2.7.x (#97)66b7f73remove ip package (#94)Updates
nanoidfrom 3.3.7 to 3.3.8Changelog
Sourced from nanoid's changelog.
Commits
3044cd5Release 3.3.8 version4fe3495Update size limitd643045Fix pool pollution, infinite loop (#510)89d82d2Release 3.3.7 version5022c35Update dual-publish3e7a8e5Remove benchmark from CI for v3d356144Fix CI for v337b25dfMove to pnpm 8Updates
postcssfrom 8.4.38 to 8.5.1Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
Commits
7b02c75Release 8.5.1 version4c15339Update dependencies7efe91eImprove backwards compat forInput#document(#2000)6873270Release 8.5 version4223bb9Fix 80 columns limit80e2401AddInput#document(#1996)6f86879Update dependencies85cbbecFix pnpm version on CI76caa57Update dependencies46ff246Move to pnpm 10Updates
wsfrom 7.5.9 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
rollupfrom 3.29.4 to 4.30.1Release notes
Sourced from rollup's releases.