forked from NHSDigital/nhsuk-react-components
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the npm_and_yarn group across 1 directory with 14 updates #1
Open
dependabot
wants to merge
1
commit into
main
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-e4fe498da5
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rollup](https://github.com/rollup/rollup) | `2.47.0` | `2.79.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.2.1` | `4.5.5` | | [css-what](https://github.com/fb55/css-what) | `5.0.0` | `5.1.0` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx) | `7.2.0` | `7.7.1` | | [nanoid](https://github.com/ai/nanoid) | `3.3.4` | `3.3.8` | | [nth-check](https://github.com/fb55/nth-check) | `2.0.0` | `2.1.1` | | [tar](https://github.com/isaacs/node-tar) | `6.1.13` | `6.2.1` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Updates `rollup` from 2.47.0 to 2.79.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v2.47.0...v2.79.2) Updates `vite` from 4.2.1 to 4.5.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.5/packages/vite) Updates `css-what` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/fb55/css-what/releases) - [Commits](fb55/css-what@v5.0.0...v5.1.0) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `markdown-to-jsx` from 7.2.0 to 7.7.1 - [Release notes](https://github.com/quantizor/markdown-to-jsx/releases) - [Changelog](https://github.com/quantizor/markdown-to-jsx/blob/main/CHANGELOG.md) - [Commits](quantizor/markdown-to-jsx@v7.2.0...v7.7.1) Updates `nanoid` from 3.3.4 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.4...3.3.8) Updates `nth-check` from 2.0.0 to 2.1.1 - [Release notes](https://github.com/fb55/nth-check/releases) - [Commits](fb55/nth-check@v2.0.0...v2.1.1) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `postcss` from 8.4.21 to 8.4.49 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.21...8.4.49) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `tar` from 6.1.13 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.13...v6.2.1) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: rollup dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: css-what dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-to-jsx dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nth-check dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Pull requests that update a dependency file
label
Dec 12, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 10 updates in the / directory:
2.47.0
2.79.2
4.2.1
4.5.5
5.0.0
5.1.0
3.1.9
3.1.10
4.18.2
4.21.2
7.2.0
7.7.1
3.3.4
3.3.8
2.0.0
2.1.1
6.1.13
6.2.1
1.2.3
1.2.5
Updates
rollup
from 2.47.0 to 2.79.2Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
c9bd03d
2.79.248aef33
fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)69ff418
2.79.104dce1b
Update changelog159137e
fix: typo docs and contributors link in CONTRIBUTING.md (#4639)e1392b3
Update type definition of resolveId (#4641)7836357
Improve performance of chunk naming collision check (#4643)71d20c9
Reduce permissions for repl-artefacts.yml workflow (#4630)8193ea5
Adapt workflow to use Node 14 sub-version to work with branch protection8477f8f
2.79.0Updates
vite
from 4.2.1 to 4.5.5Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
f1d8845
release: v4.5.52466c08
release: v4.5.4e812716
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)b901438
fix: backport #18112, fs raw queryaac695e
release: v4.5.396a7f3a
fix:fs.deny
with globs with directories (#16250)d0360c1
release: v4.5.2eeec23b
fix: fs deny for case insensitive systems (#15653)c075115
release: v4.5.141bb354
fix: backport #15223, proxy html path should be encoded (#15226)Updates
css-what
from 5.0.0 to 5.1.0Release notes
Sourced from css-what's releases.
Commits
f445a74
5.1.0bba0554
build(deps-dev): bump@types/node
from 16.10.2 to 16.10.3 (#623)f6e3f93
build(deps-dev): bump@typescript-eslint/parser
from 4.32.0 to 4.33.0 (#622)cf5b076
build(deps-dev): bump@typescript-eslint/eslint-plugin
(#621)a04a40d
Add 'where' pseudo selector (#620)933a032
build(deps-dev): bump@types/node
from 16.10.1 to 16.10.2 (#619)3ca84d5
build(deps-dev): bump jest from 27.2.3 to 27.2.4 (#618)1e523da
build(deps-dev): bump jest from 27.2.2 to 27.2.3 (#617)479a6c1
build(deps-dev): bump@typescript-eslint/eslint-plugin
(#616)929f943
build(deps-dev): bump@typescript-eslint/parser
from 4.31.2 to 4.32.0 (#615)Updates
ejs
from 3.1.9 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807d
Version 3.1.109ee26dd
Mocha TDDe469741
Basic pollution protection715e950
Merge pull request #756 from Jeffrey-mu/maincabe314
Include advanced usage examples29b076c
Added header11503c7
Merge branch 'main' of github.com:mde/ejs into main7690404
Added security banner to READMEf47d7ae
Update SECURITY.md828cea1
Update SECURITY.mdUpdates
express
from 4.18.2 to 4.21.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
1faf228
4.21.22e0fb64
deps: bump [email protected] (#6209)59fc270
deps: [email protected] (#5956)51fc39c
docs: add funding (#6065)8e229f9
4.21.1a024c8a
fix(deps): [email protected]7e562c6
4.21.01bcde96
fix(deps): [email protected] (#5946)7d36477
fix(deps): [email protected] (#5951)40d2d8f
fix(deps): [email protected]Maintainer changes
This version was pushed to npm by jonchurch, a new releaser for express since your current version.
Updates
markdown-to-jsx
from 7.2.0 to 7.7.1Release notes
Sourced from markdown-to-jsx's releases.
... (truncated)
Changelog
Sourced from markdown-to-jsx's changelog.
... (truncated)
Commits
86bf62d
Version Packages (#633)9d42449
refactor: remove use of cloning so React is no longer strictly requiredf2f58f0
chore: update lockfilef1e6238
chore: make type usage consistent8920038
fix: honor options.createElement if passed7be50e9
omg4b337ae
chore: annoying55ef1a8
chore: adjust site workflowd9dfda1
chore: fix website workflow6564635
Version Packages (#627)Updates
nanoid
from 3.3.4 to 3.3.8Changelog
Sourced from nanoid's changelog.
Commits
3044cd5
Release 3.3.8 version4fe3495
Update size limitd643045
Fix pool pollution, infinite loop (#510)89d82d2
Release 3.3.7 version5022c35
Update dual-publish3e7a8e5
Remove benchmark from CI for v3d356144
Fix CI for v337b25df
Move to pnpm 8d96f392
Release 3.3.6 version8210dfb
Release 3.3.5 versionUpdates
nth-check
from 2.0.0 to 2.1.1Release notes
Sourced from nth-check's releases.
Commits
639fd2a
2.1.10eec65b
fix(test): AddmoduleNameMapper
aeeb067
fix: Fix ESM432ebc6
2.1.03e8cd1e
feat: Addgenerate
andsequence
methods (#207)57a5c62
feat: Add ESM (#206)1ce0c7c
chore(deps-dev): Bump@types/node
from 17.0.34 to 17.0.35 (#205)eebb040
chore(deps-dev): Bump@typescript-eslint/parser
from 5.24.0 to 5.25.0 (#204)a316aaa
chore(deps-dev): Bump@typescript-eslint/eslint-plugin
(#203)454c0de
chore(deps-dev): Bump@typescript-eslint/eslint-plugin
(#202)Updates
path-to-regexp
from 0.1.7 to 0.1.12Release notes
Sourced from path-to-regexp's releases.
Commits
640e694
0.1.12f01c26a
Merge commit from fork0c71192
0.1.118f09549
Add error on bad input valuesc827fce
0.1.1029b96b4
Add backtrack protection to parametersac4c234
Update repo url (#314)bdb6635
0.1.9c4272e4
Allow a non-lookahead regex (#312)51a1955
0.1.8Updates
postcss
from 8.4.21 to 8.4.49Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
aed8b89
Release 8.4.49 version3450630
Fix position calculations when offset is missing (#1983)77420d6
Release 8.4.48 version341529f
Update dependencies66fa667
Add Node.js 23 to CI1a8b261
fix inconsistent position calculations (#1980)1cc6ac3
Clarify usage in docs5e6fd13
Release 8.4.47 version714bc10
Typo439d20e
Release 8.4.46 versionUpdates
send
from 0.18.0 to 0.19.0Release notes
Sourced from send's releases.
Changelog
Sourced from send's changelog.
Commits
9d2db99
0.19.0ae4f298
Merge commit from forkMaintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.
Updates
serve-static
from 1.15.0 to 1.16.2Release notes
Sourced from serve-static's releases.
Changelog
Sourced from serve-static's changelog.
Commits
ec9c5ec
1.16.2f454d37
fix(deps): encodeurl@~2.0.077a8255
1.16.14263f49
fix(deps): [email protected]48c7397
1.16.00c11fad
Merge commit from forkMaintainer changes
This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.
Updates
tar
from 6.1.13 to 6.2.1Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e
6.2.1fe8cd57
prevent extraction in excessively deep subfoldersfe7ebfd
remove security.md5bc9d40
6.2.0fe1ef5e
changelog 6.2e483220
get rid of npm lint stuff689928a
ci that works outside of npm orgdb6f539
file inference improvements for .tbr and .tgz336fa8f
refactor: dry and other pr commentseeba222
chore: lint fixesUpdates
word-wrap
from 1.2.3 to 1.2.5Release notes
Sourced from word-wrap's releases.