chore(deps): bump the npm group with 5 updates #1058

dependabot · 2024-03-28T21:41:58Z

Bumps the npm group with 5 updates:

Package	From	To
archiver	`6.0.1`	`7.0.1`
esbuild	`0.20.1`	`0.20.2`
winston	`3.11.0`	`3.13.0`
nock	`13.5.3`	`13.5.4`
selenium-webdriver	`4.18.1`	`4.19.0`

Updates archiver from 6.0.1 to 7.0.1

Release notes

Sourced from archiver's releases.

7.0.1

What’s changed

Maintenance

Add test for stream-like sources @ctalkington (#745)

Dependency updates

Update dependency clsx to v2 @renovate (#694)

Update react monorepo to v17 (major) @renovate (#703)

Update docusaurus monorepo to v3 (major) @renovate (#739)

Update dependency @mdx-js/react to v3 @renovate (#737)

Update react monorepo to v18 (major) @renovate (#704)

Update dependency yauzl to v3.1.2 @renovate (#741)

Lock file maintenance @renovate (#740)

Update dependency zip-stream to v6.0.1 @renovate (#747)

Update dependency archiver-utils to v5.0.2 @renovate (#746)

Lock file maintenance @renovate (#748)

7.0.0

What’s changed

Breaking changes

Drop support for node v12 @ctalkington (#735)

Dependency updates

Update dependency tar-stream to v3.1.7 @renovate (#731)

Update dependency buffer-crc32 to v1 @renovate (#732)

Update dependency zip-stream to v6 @renovate (#734)

Update dependency archiver-utils to v5 @renovate (#730)

Update docusaurus monorepo to v2.4.3 @renovate (#713)

Update dependency rimraf to v5 @renovate (#693)

Update dependency mocha to v10 @renovate (#692)

Update dependency readable-stream to v4 @renovate (#695)

Update dependency yauzl to v3 @renovate (#733)

Lock file maintenance @renovate (#736)

6.0.2

What’s changed

Maintenance

Update actions/checkout action to v4 @renovate (#708)

Update actions/setup-node action to v3.8.2 @renovate (#724)

Update release-drafter/release-drafter action to v5.25.0 @renovate (#726)

Update actions/checkout action to v4.1.1 @renovate (#725)

Update actions/setup-node action to v4 @renovate (#728)

... (truncated)

Changelog

Sourced from archiver's changelog.

Changelog

7.0.1 - March 9, 2024 — Diff

7.0.0 - February 28, 2024 — Diff

6.0.2 - February 27, 2024 — Diff

6.0.1 - September 3, 2023 — Diff

6.0.0 - August 17, 2023 — Diff

Release Archive

Commits

0e0e9ce bump version for release
b4d6479 Update CHANGELOG.md
6a5dccb Lock file maintenance (#748)
fdac04c Add test for stream-like sources (#745)
f48db1a Update dependency archiver-utils to v5.0.2 (#746)
47ac201 Update dependency zip-stream to v6.0.1 (#747)
3377539 Lock file maintenance (#740)
be09d12 Update dependency yauzl to v3.1.2 (#741)
2050cfa Update react monorepo to v18 (#704)
8b60a10 Update dependency @mdx-js/react to v3 (#737)
Additional commits viewable in compare view

Updates esbuild from 0.20.1 to 0.20.2

Release notes

Sourced from esbuild's releases.

v0.20.2
Support TypeScript experimental decorators on abstract class fields (#3684)

With this release, you can now use TypeScript experimental decorators on abstract class fields. This was silently compiled incorrectly in esbuild 0.19.7 and below, and was an error from esbuild 0.19.8 to esbuild 0.20.1. Code such as the following should now work correctly:
// Original code
const log = (x: any, y: string) => console.log(y)
abstract class Foo { @log abstract foo: string }
new class extends Foo { foo = '' }
// Old output (with --loader=ts --tsconfig-raw={&quot;compilerOptions&quot;:{&quot;experimentalDecorators&quot;:true}})
const log = (x, y) => console.log(y);
class Foo {
}
new class extends Foo {
foo = "";
}();
// New output (with --loader=ts --tsconfig-raw={&quot;compilerOptions&quot;:{&quot;experimentalDecorators&quot;:true}})
const log = (x, y) => console.log(y);
class Foo {
}
__decorateClass([
log
], Foo.prototype, "foo", 2);
new class extends Foo {
foo = "";
}();
JSON loader now preserves __proto__ properties (#3700)

Copying JSON source code into a JavaScript file will change its meaning if a JSON object contains the __proto__ key. A literal __proto__ property in a JavaScript object literal sets the prototype of the object instead of adding a property named __proto__, while a literal __proto__ property in a JSON object literal just adds a property named __proto__. With this release, esbuild will now work around this problem by converting JSON to JavaScript with a computed property key in this case:
// Original code
import data from 'data:application/json,{"__proto__":{"fail":true}}'
if (Object.getPrototypeOf(data)?.fail) throw 'fail'
// Old output (with --bundle)
(() => {
// <data:application/json,{"proto":{"fail":true}}>
var json_proto_fail_true_default = { proto: { fail: true } };
// entry.js
if (Object.getPrototypeOf(json_proto_fail_true_default)?.fail)
throw "fail";
})();

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.20.2
Support TypeScript experimental decorators on abstract class fields (#3684)

With this release, you can now use TypeScript experimental decorators on abstract class fields. This was silently compiled incorrectly in esbuild 0.19.7 and below, and was an error from esbuild 0.19.8 to esbuild 0.20.1. Code such as the following should now work correctly:
// Original code
const log = (x: any, y: string) => console.log(y)
abstract class Foo { @log abstract foo: string }
new class extends Foo { foo = '' }
// Old output (with --loader=ts --tsconfig-raw={&quot;compilerOptions&quot;:{&quot;experimentalDecorators&quot;:true}})
const log = (x, y) => console.log(y);
class Foo {
}
new class extends Foo {
foo = "";
}();
// New output (with --loader=ts --tsconfig-raw={&quot;compilerOptions&quot;:{&quot;experimentalDecorators&quot;:true}})
const log = (x, y) => console.log(y);
class Foo {
}
__decorateClass([
log
], Foo.prototype, "foo", 2);
new class extends Foo {
foo = "";
}();
JSON loader now preserves __proto__ properties (#3700)

Copying JSON source code into a JavaScript file will change its meaning if a JSON object contains the __proto__ key. A literal __proto__ property in a JavaScript object literal sets the prototype of the object instead of adding a property named __proto__, while a literal __proto__ property in a JSON object literal just adds a property named __proto__. With this release, esbuild will now work around this problem by converting JSON to JavaScript with a computed property key in this case:
// Original code
import data from 'data:application/json,{"__proto__":{"fail":true}}'
if (Object.getPrototypeOf(data)?.fail) throw 'fail'
// Old output (with --bundle)
(() => {
// <data:application/json,{"proto":{"fail":true}}>
var json_proto_fail_true_default = { proto: { fail: true } };
// entry.js
if (Object.getPrototypeOf(json_proto_fail_true_default)?.fail)
throw "fail";
})();

... (truncated)

Commits

617edda publish 0.20.2 to npm
4780075 fix #3700: json loader preserves __proto__ keys
30bed2d better errors for invalid js decorator syntax
300eeb7 ts: allow non-null assertions in js decorators
4d997d9 fix #3698: yarn pnp edge case with tsconfig.json
cf42954 resolver: improve some debug logging
b0765ae fix some lints
dfa6206 fix some comments (closes #3683)
ae5cc17 fix #3684: abstract experimental decorators
c809af0 fix #2388: allow consuming types without dom types (#3679)
Additional commits viewable in compare view

Updates winston from 3.11.0 to 3.13.0

Release notes

Sourced from winston's releases.

v3.13.0

fix(http): allow passing maximumDepth to prevent big object being stringified (#2425) a237865

winstonjs/winston@v3.12.1...v3.13.0

v3.12.1

Bump @types/node from 20.11.24 to 20.11.29 (#2431) b10b98f

Revert "Remove nonexistent Logger methods from types" (#2434) 0277035

fixed flaky test case (#2412) d95c948

winstonjs/winston@v3.12.0...v3.12.1

v3.12.0

missing timestamp format in ready-to-use-pattern example (#2421) 9e5b407

bump deps (#2422) 4a85e6b

[chore] Run coveralls CI check on Node 20 not 16 (#2418) e153c68

Bump @types/node from 20.8.6 to 20.11.19 (#2413) 587f40f

Update README.md (#2417) 8e99a00

docs: fix anchor in transports docs (#2416) 0bde36b

add winston-transport-vscode to transports docs (#2411) 8fb5b41

Bump @babel/cli from 7.23.0 to 7.23.9 (#2406) a326743

Add winston-newrelic-agent-transport to transport documentation (#2382) cc731ef

Remove newrelic-winston transport entry. (#2405) f077f30

Bump eslint from 8.55.0 to 8.56.0 (#2397) 3943c41

Bump the npm_and_yarn group group with 1 update (#2391) 8260866

Fix unhandled rejection handling (#2390) 333b763

Fix all rimraf usages to the best of my ability; glob is not true by default in rimraf; file archive test only passed every other time using async rimraf, could use further investigation c3f3b5b

Fix rimraf usage in new test 8f3c653

Fix rimraf import in test (why didn't this break in PR CI?) f3836aa

Added functionality to long broken zippedArchive option (#2337) 02d4267

Bump async from 3.2.4 to 3.2.5 (#2378) 069a40d

Bump @babel/preset-env from 7.23.2 to 7.23.7 (#2384) 79282e1

Bump winston-transport; fix test issue (#2386) 05788b9

Bump eslint from 8.51.0 to 8.55.0 (#2375) a7c2eec

Bump std-mocks from 1.0.1 to 2.0.0 (#2361) 85c336e

Bump actions/setup-node from 3 to 4 (#2362) 448d11c

chore(README.md): adds documentation around coloring json formatted logs 91ec069

Remove nonexistent Logger methods from types c3c3911

Update dependencies caf2df6

winstonjs/winston@v3.11.0...v3.12.0

Commits

c63a5ad 3.13.0
a237865 fix(http): allow passing maximumDepth to prevent big object being stringified...
b5eecf0 3.12.1
b10b98f Bump @types/node from 20.11.24 to 20.11.29 (#2431)
0277035 Revert "Remove nonexistent Logger methods from types" (#2434)
d95c948 fixed flaky test case (#2412)
7816869 3.12.0
9e5b407 missing timestamp format in ready-to-use-pattern example (#2421)
4a85e6b bump deps (#2422)
e153c68 [chore] Run coveralls CI check on Node 20 not 16 (#2418)
Additional commits viewable in compare view

Updates nock from 13.5.3 to 13.5.4

Release notes

Sourced from nock's releases.

v13.5.4

13.5.4 (2024-02-26)

Bug Fixes

call fs.createReadStream lazily (#2357) (ba9fc42)

Commits

ba9fc42 fix: call fs.createReadStream lazily (#2357)
81c20dd chore(deps-dev): bump chai from 4.3.10 to 4.4.1 (#2576)
08b2b09 chore(deps-dev): bump prettier from 3.1.0 to 3.2.4 (#2578)
1005698 chore(deps-dev): bump eslint-plugin-import from 2.29.0 to 2.29.1 (#2577)
See full diff in compare view

Updates selenium-webdriver from 4.18.1 to 4.19.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.19.0

Changelog

For each component's detailed changelog, please check:

Ruby

Python

JavaScript

Java

DotNet

IEDriverServer

Commits in this release

28d582c18b - Fix the location of the html files for redirect testing :: Puja Jagani

f4cd087106 - [build] Reusing fix in Rakefile to release python :: Diego Molina

428422b56d - [build] Updating GitPod config :: Diego Molina

ec12c65b34 - [build] Target needs build not run :: Diego Molina

b3af4a6d44 - [build] Fixing dockerfile for gitpod :: Diego Molina

77dd7250fc - CDP 122 (#13603) :: Diego Molina

7ce5ca80f6 - Bumping versions to 4.18.1 :: Diego Molina

b1d3319b48 - Update supported versions for Chrome DevTools :: Diego Molina

c6bd0964f3 - [build] Fixing API docs update :: Diego Molina

989b0ca679 - [build] Bumping versions for Nightly :: Diego Molina

f99f01a049 - Update mirror info (Tue Feb 20 12:06:06 UTC 2024) :: Selenium CI Bot

78029c4597 - Update mirror info (Wed Feb 21 00:15:11 UTC 2024) :: Selenium CI Bot

93c780439f - Bump cryptography from 41.0.4 to 42.0.4 in /py (#13615) :: dependabot[bot]

ddaa4aaed1 - [java] use daemon threads in JdkHttpClient #13601 :: Jörg Sautter

cc93539c6c - [dotnet] Notice about breaking changes at compilation level for desired capabilities :: Nikolay Borisenko

24188440cb - [rb] Run all unit tests in RBE :: Alex Rodionov

da62a402d0 - [dotnet] Correct ChromiumDriverService.AllowedIPAddresses property name (#13626) :: Yevgeniy Shunevych

db517766c1 - [java] use a static class for ProxySelector #13622 :: Jörg Sautter

aefde123a3 - [rb] Update YARD to address GHSA-8mq4-9jjh-9xrc :: Alex Rodionov

d65e38e34f - [rb] Fix documentation generator :: Alex Rodionov

5bc8952c3b - [java] improve memory allocation of an idle relay node #13643 :: Jörg Sautter

c0711e2d0b - Add devcontainer.json to ease local dev environment setup (#13638) :: Trig

1cfe9917c7 - [java] close the httpclient after checking the service status #13643 :: Jörg Sautter

b9a95a32a2 - [dotnet] Fixed parsing of the year in ConsoleApiCalledEventArgs cdp event args :: Nikolay Borisenko

832a31e192 - [Build] Update rules_python to 0.31.0 :: David Burns

ffedae32bb - Run prettifier over the selenium-webdriver node code :: Simon Stewart

3c051755e3 - Fix JS linting errors :: Simon Stewart

8f7c7a4b3c - [ci] automatically close issues marked awaiting answer (#13668) :: Titus Fortner

d266777517 - [ci] Update setup-bazel action :: Alex Rodionov

d073e594b5 - [py] Fix how version numbers are handled :: Simon Stewart

738415711c - Remove some printf debugging :: Simon Stewart

739f5ec672 - [build] Tweaking how nightly build version in Python works :: Diego Molina

ffed982e95 - [build] Installing twine to push to TestPyPi :: Diego Molina

420f074858 - [bidi][java] Add storage module (#13675) :: Puja Jagani

a66db94fdf - [rb] Avoid overescaping browser path :: Alex Rodionov

... (truncated)

Commits

5f9cec8 Release 4.19.0 (#13747)
8ef5136 [rust] Remove non-necessary trace
7660a33 [build] Adapting script to new package-lock.json location.
5affd35 [js] Adding package-lock.json
32d9edd [dotnet][rb][java][js][py] Automated Browser Version Update (#13742)
a179a98 [bidi][java] Update the capture screenshot APIs to include all parameters and...
5b60724 [bidi][java] Fix a bug caused due to typo
1f058a8 [rust] Enhance logic to uncompress DEB files and set toolchain version (#13741)
fbf75fd [rust] Fix Edge management in RPM-based Linux (#13705)
0c81991 [rust] Use apple-flat-package crate to extract PKG files (#13740)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [archiver](https://github.com/archiverjs/node-archiver) | `6.0.1` | `7.0.1` | | [esbuild](https://github.com/evanw/esbuild) | `0.20.1` | `0.20.2` | | [winston](https://github.com/winstonjs/winston) | `3.11.0` | `3.13.0` | | [nock](https://github.com/nock/nock) | `13.5.3` | `13.5.4` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.18.1` | `4.19.0` | Updates `archiver` from 6.0.1 to 7.0.1 - [Release notes](https://github.com/archiverjs/node-archiver/releases) - [Changelog](https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md) - [Commits](archiverjs/node-archiver@6.0.1...7.0.1) Updates `esbuild` from 0.20.1 to 0.20.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.20.1...v0.20.2) Updates `winston` from 3.11.0 to 3.13.0 - [Release notes](https://github.com/winstonjs/winston/releases) - [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md) - [Commits](winstonjs/winston@v3.11.0...v3.13.0) Updates `nock` from 13.5.3 to 13.5.4 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](nock/nock@v13.5.3...v13.5.4) Updates `selenium-webdriver` from 4.18.1 to 4.19.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-4.18.1...selenium-4.19.0) --- updated-dependencies: - dependency-name: archiver dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: esbuild dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: winston dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: nock dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: selenium-webdriver dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-04-08T19:35:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 28, 2024

dependabot bot closed this Apr 8, 2024

dependabot bot deleted the dependabot/npm_and_yarn/v3/npm-8d01e9abab branch April 8, 2024 19:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm group with 5 updates #1058

chore(deps): bump the npm group with 5 updates #1058

dependabot bot commented on behalf of github Mar 28, 2024 •

edited

Loading

dependabot bot commented on behalf of github Apr 8, 2024

chore(deps): bump the npm group with 5 updates #1058

chore(deps): bump the npm group with 5 updates #1058

Conversation

dependabot bot commented on behalf of github Mar 28, 2024 • edited Loading

7.0.1

What’s changed

Maintenance

Dependency updates

7.0.0

What’s changed

Breaking changes

Dependency updates

6.0.2

What’s changed

Maintenance

Changelog

v0.20.2

0.20.2

v3.13.0

v3.12.1

v3.12.0

v13.5.4

13.5.4 (2024-02-26)

Bug Fixes

Selenium 4.19.0

Changelog

Commits in this release

dependabot bot commented on behalf of github Apr 8, 2024

dependabot bot commented on behalf of github Mar 28, 2024 •

edited

Loading