chore(deps): bump the npm_and_yarn group across 3 directories with 23 updates - #3
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
… updates Bumps the npm_and_yarn group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rollup](https://github.com/rollup/rollup) | `2.67.1` | `2.80.0` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `10.2.5` | `19.2.18` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `10.2.5` | `19.2.20` | | [next](https://github.com/vercel/next.js) | `10.1.3` | `15.5.18` | | [apollo-server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/apollo-server) | `3.6.7` | `3.13.0` | | [@remix-run/node](https://github.com/remix-run/remix/tree/HEAD/packages/remix-node) | `1.5.1` | `2.17.2` | | [aws-sdk](https://github.com/aws/aws-sdk-js) | `2.875.0` | `2.1693.0` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.13.8` | `7.29.4` | | [browserstack-local](https://github.com/browserstack/browserstack-local-nodejs) | `1.4.8` | `1.5.13` | | [flatted](https://github.com/WebReflection/flatted) | `2.0.2` | `3.4.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.8` | `1.16.0` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.7` | `4.7.9` | | [immutable](https://github.com/immutable-js/immutable-js) | `4.0.0` | `4.3.8` | | [picomatch](https://github.com/micromatch/picomatch) | `2.2.2` | `2.3.2` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `6.11.3` | `6.11.6` | | [socket.io-parser](https://github.com/socketio/socket.io) | `3.3.2` | `4.0.5` | | [underscore](https://github.com/jashkenas/underscore) | `1.12.1` | `1.13.8` | Bumps the npm_and_yarn group with 2 updates in the /scenarios/browser directory: [webpack](https://github.com/webpack/webpack) and [lodash](https://github.com/lodash/lodash). Bumps the npm_and_yarn group with 1 update in the /scenarios/browser/nextjs-client directory: [next](https://github.com/vercel/next.js). Updates `rollup` from 2.67.1 to 2.80.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/v2.80.0/CHANGELOG.md) - [Commits](rollup/rollup@v2.67.1...v2.80.0) Updates `@angular/compiler` from 10.2.5 to 19.2.18 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v19.2.18/packages/compiler) Updates `@angular/core` from 10.2.5 to 19.2.20 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v19.2.20/packages/core) Updates `next` from 10.1.3 to 15.5.18 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v10.1.3...v15.5.18) Updates `apollo-server` from 3.6.7 to 3.13.0 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Commits](https://github.com/apollographql/apollo-server/commits/apollo-server@3.13.0/packages/apollo-server) Updates `@remix-run/node` from 1.5.1 to 2.17.2 - [Release notes](https://github.com/remix-run/remix/releases) - [Changelog](https://github.com/remix-run/remix/blob/remix@2.17.2/CHANGELOG.md) - [Commits](https://github.com/remix-run/remix/commits/remix@2.17.2/packages/remix-node) Updates `aws-sdk` from 2.875.0 to 2.1693.0 - [Release notes](https://github.com/aws/aws-sdk-js/releases) - [Commits](aws/aws-sdk-js@v2.875.0...v2.1693.0) Updates `@babel/plugin-transform-modules-systemjs` from 7.13.8 to 7.29.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) Updates `apollo-server-core` from 3.6.7 to 3.13.0 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Commits](https://github.com/apollographql/apollo-server/commits/apollo-server-core@3.13.0/packages/apollo-server-core) Updates `browserstack-local` from 1.4.8 to 1.5.13 - [Release notes](https://github.com/browserstack/browserstack-local-nodejs/releases) - [Commits](browserstack/browserstack-local-nodejs@v1.4.8...v1.5.13) Updates `flatted` from 2.0.2 to 3.4.2 - [Commits](WebReflection/flatted@v2.0.2...v3.4.2) Updates `follow-redirects` from 1.14.8 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.16.0) Updates `handlebars` from 4.7.7 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.7...v4.7.9) Updates `immutable` from 4.0.0 to 4.3.8 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.0.0...v4.3.8) Updates `picomatch` from 2.2.2 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.2.2...2.3.2) Updates `protobufjs` from 6.11.3 to 6.11.6 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@v6.11.3...v6.11.6) Updates `react-router` from 6.3.0 to 6.30.3 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@6.30.3/packages/react-router) Updates `socket.io-parser` from 3.3.2 to 4.0.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/commits) Updates `underscore` from 1.12.1 to 1.13.8 - [Commits](jashkenas/underscore@1.12.1...1.13.8) Updates `uuid` from 3.3.2 to 3.4.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v3.3.2...v3.4.0) Updates `webpack` from 5.62.1 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.62.1...v5.104.1) Updates `ajv` from 6.12.6 to 8.20.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v8.20.0) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `next` from 12.3.7 to 16.2.6 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v10.1.3...v15.5.18) --- updated-dependencies: - dependency-name: rollup dependency-version: 2.80.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 19.2.18 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 19.2.20 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.5.18 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: apollo-server dependency-version: 3.13.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@remix-run/node" dependency-version: 2.17.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: aws-sdk dependency-version: 2.1693.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: apollo-server-core dependency-version: 3.13.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserstack-local dependency-version: 1.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 4.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 6.11.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: react-router dependency-version: 6.30.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-version: 4.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: underscore dependency-version: 1.13.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: 3.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 8.20.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-version: 16.2.6 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 17 updates in the / directory:
2.67.12.80.010.2.519.2.1810.2.519.2.2010.1.315.5.183.6.73.13.01.5.12.17.22.875.02.1693.07.13.87.29.41.4.81.5.132.0.23.4.21.14.81.16.04.7.74.7.94.0.04.3.82.2.22.3.26.11.36.11.63.3.24.0.51.12.11.13.8Bumps the npm_and_yarn group with 2 updates in the /scenarios/browser directory: webpack and lodash.
Bumps the npm_and_yarn group with 1 update in the /scenarios/browser/nextjs-client directory: next.
Updates
rollupfrom 2.67.1 to 2.80.0Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
d17ae152.80.0d6dee5eValidate bundle stays within output dir (#6277)c9bd03d2.79.248aef33fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)69ff4182.79.104dce1bUpdate changelog159137efix: typo docs and contributors link in CONTRIBUTING.md (#4639)e1392b3Update type definition of resolveId (#4641)7836357Improve performance of chunk naming collision check (#4643)71d20c9Reduce permissions for repl-artefacts.yml workflow (#4630)Updates
@angular/compilerfrom 10.2.5 to 19.2.18Release notes
Sourced from @angular/compiler's releases.
Changelog
Sourced from @angular/compiler's changelog.
... (truncated)
Commits
26cdc53fix(core): sanitize sensitive attributes on SVG script elements7c42e2efix(compiler): prevent XSS via SVG animationattributeNameand MathML/SVG URLs24bab55fix(compiler): lexer support for template literals in object literals (#61601)fc2483erefactor(compiler): avoid duplication betweenFactoryTargettype (#61571)8e54b57build: move private testing helpers outsideplatform-browser/testing(#61571)44bb328fix(compiler): avoid conflicts between HMR code and local symbols (#61550)1007079build: update compiler-cli to not be stamped when used for the compiler in ng...0d025c5build: support newng_projectrule (#61336)899cb4arefactor: add explicit types for exports relying on inferred call return type...1312eb1build: remove irrelevant madge circular deps tests (#61209)Updates
@angular/corefrom 10.2.5 to 19.2.20Release notes
Sourced from @angular/core's releases.
Changelog
Sourced from @angular/core's changelog.
... (truncated)
Commits
621c707fix(core): sanitize translated form attributesb89b0a8fix(core): sanitize translated attribute bindings with interpolations7475487fix(core): block creation of sensitive URI attributes from ICU messages26cdc53fix(core): sanitize sensitive attributes on SVG script elements7c42e2efix(compiler): prevent XSS via SVG animationattributeNameand MathML/SVG URLs70d0639fix(core): introduceBootstrapContextfor improved server bootstrapping (#6...73d3e00build: fix failing test (#61683)9e1cd49fix(migrations): preserve comments when removing unused imports (#61674)a6d5479build: migrate platform-server to rules_js (#61619)2a26944build: migrate platform-browser and platform-browser-dynamic package to use r...Updates
nextfrom 10.1.3 to 15.5.18Release notes
Sourced from next's releases.
... (truncated)
Commits
9ff92cev15.5.1800ebe23[backport] Disable build caches for production/staging/force-preview deploys ...62c97abv15.5.17423623aTurbopack: Match proxy matchers with webpack implementation (#93594)fa78739Turbopack: Fix middleware matcher suffix (#93590)36e62c6[backport] Turbopack: more strict vergen setup (#93588)36589b5[backport][test] Pin package manager to patch versions (#93596)ad6fd4ev15.5.1679d7dffIgnore malformed CSP nonce headers (#103)c4f6908router-server: guard upgrade proxy against absolute-url SSRF (#77) (#102)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.
Updates
apollo-serverfrom 3.6.7 to 3.13.0Commits
f93284eReleaseea2e2c3Releasefac578aRelease6247d96Release538151bReleasef519e1dRelease985c079Release2bf7f66chore(deps): update all non-major dependencies (main) (#6852)f6c5c9fReleasee6097d6ReleaseUpdates
@remix-run/nodefrom 1.5.1 to 2.17.2Release notes
Sourced from @remix-run/node's releases.
Changelog
Sourced from @remix-run/node's changelog.
... (truncated)
Commits
3920349Version 2.17.264d88deValidate session id in file session storage (#10806)91ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)3869e0echore: Update version for release (#10643)00107c5chore: Update version for release (pre) (#10642)45df312chore: Update version for release (#10628)f90aa1fchore: Update version for release (pre) (#10627)Updates
aws-sdkfrom 2.875.0 to 2.1693.0Release notes
Sourced from aws-sdk's releases.
... (truncated)
Commits
9d3c66eUpdates SDK to v2.1693.0c039567test(client-elastictranscoder): remove feature test (#4711)f5b1a6fdocs: end-of-support (#4706)657d6fechore: use ssh private key for git sync (#4705)c12585bchore: remove regression label management (#4699)966fa6cUpdates SDK to v2.1692.05d0e38aDelete EC2 launch configuration e2e tests (#4685)b9ce346chore: fix issue config (#4683)c066681Update issue template config and disable docs requests (#4682)163a7cfModified bug issue template to add checkbox to report potential regression. (...Updates
@babel/plugin-transform-modules-systemjsfrom 7.13.8 to 7.29.4Release notes
Sourced from @babel/plugin-transform-modules-systemjs's releases.
... (truncated)
Commits
a458f66v7.29.432ebd5a[7.x backport]fix(systemjs): improve module string name support (#17974)aa8394ev7.29.00053db6Update polyfill packages (#17727)61647aev7.28.5a177d55[Babel 8] Uset.traverseFastto replace somepath.traverse(#17518)eebd3a0v7.27.1317e332Enforce node protocol import (#17207)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)cd24cc0chore: Update TS 5.7 (#17053)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/plugin-transform-modules-systemjssince your current version.Updates
apollo-server-corefrom 3.6.7 to 3.13.0Commits
f93284eRelease4745ebeRename option from disableValidation to dangerouslyDisableValidation11f5981Add disableValidation option to apollo-server-coreea2e2c3Release1dd45b8get CI passingd38b43bMerge pull request from GHSA-j5g3-5c8r-7qfxfac578aRelease8554050Update protobuf (version-3) (#7412)6247d96Release538151bReleaseUpdates
browserstack-localfrom 1.4.8 to 1.5.13Release notes
Sourced from browserstack-local's releases.
Commits
fa2dcbc1.5.13dcfaf7bMerge pull request #175 from browserstack/LOC-6635_sdk_binary_compatibilitye79cd0eRemove debug log4376222Fix url ref18f9a57Add Async method to fetch download url for async flow7fd6ce11.5.126498856Merge pull request #174 from browserstack/LOC-5083_add_arm64_support560755fLOC-5083: Add support for Linux arm64 binary4586a3e1.5.1118bfc1dMerge pull request #173 from browserstack/wmic_deprecationMaintainer changes
This version was pushed to npm by browserstack-admin, a new releaser for browserstack-local since your current version.
Updates
flattedfrom 2.0.2 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
follow-redirectsfrom 1.14.8 to 1.16.0Commits
0c23a22Release version 1.16.0 of the npm package.844c4d3Add sensitiveHeaders option.5e8b8d0ci: add Node.js 24.x to the CI matrix7953e22ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v686dc1f8Sanitizing input.21ef28aRelease version 1.15.11 of the npm package.7c88135Roll back tree shaking.6e389baRelease version 1.15.10 of the npm package.5bc496eShake me up before you go-go.694d6b4Bump minimist from 1.2.5 to 1.2.8Updates
handlebarsfrom 4.7.7 to 4.7.9Release notes
Sourced from handlebars's releases.