Bump the npm_and_yarn group across 3 directories with 3 updates #77

dependabot · 2025-01-23T17:39:38Z

Bumps the npm_and_yarn group with 1 update in the / directory: undici.
Bumps the npm_and_yarn group with 1 update in the /fixtures/concurrent/time-slicing directory: minimist.
Bumps the npm_and_yarn group with 1 update in the /scripts/bench directory: chrome-launcher.

Updates undici from 5.28.4 to 5.28.5

Release notes

Sourced from undici's releases.

v5.28.5

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

Full Changelog: nodejs/undici@v5.28.4...v5.28.5

Commits

6139ed2 Bumped v5.28.5
711e207 Backport of c2d78cd
See full diff in compare view

Updates minimist from 1.2.5 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates chrome-launcher from 0.13.4 to 0.14.0

Release notes

Sourced from chrome-launcher's releases.

v0.14.0 (Tue, May 18 2021)

ac1f4aff move to minimum node 12; remove rimraf (#237)

dec646c4 deps: remove mkdirp for fs.mkdirSync (#234)

83ab178a update minimum node version (#222)

a5f6eb2f add additional chrome flags (#227)

3a7c9610 reword unset-CHROME_PATH error message

b1b8dc74 rename disabled TranslateUI to Translate to match Chrome (#225)

beb41360 chore: update dependencies and test targets (#221)

df9d564a tests: migrate from travis to github actions (#228)

673da08b tests: add mac/win bots to ci (#232)

a700ae0c docs: fix readme's getInstallations() section (#212)

chrome-flags-for-tools.md update

4b98587d massive update and refactor (#226)

e45b100f minor tweaks to headless and others

3a90c21b fix links

8429ca93 add feature flags description

21db5f9f even more documented flags (#231)

Changelog

Sourced from chrome-launcher's changelog.

v0.14.0 (Tue, May 18 2021)

ac1f4aff move to minimum node 12; remove rimraf (#237)

dec646c4 deps: remove mkdirp for fs.mkdirSync (#234)

83ab178a update minimum node version (#222)

a5f6eb2f add additional chrome flags (#227)

3a7c9610 reword unset-CHROME_PATH error message

b1b8dc74 rename disabled TranslateUI to Translate to match Chrome (#225)

beb41360 chore: update dependencies and test targets (#221)

df9d564a tests: migrate from travis to github actions (#228)

673da08b tests: add mac/win bots to ci (#232)

a700ae0c docs: fix readme's getInstallations() section (#212)

chrome-flags-for-tools.md update

4b98587d massive update and refactor (#226)

e45b100f minor tweaks to headless and others

3a90c21b fix links

8429ca93 add feature flags description

21db5f9f even more documented flags (#231)

Commits

7907523 0.14.0 (#240)
b00fa22 tests(mac): longer timeout for finding installations (#238)
ac1f4af move to minimum node 12; remove rimraf (#237)
673da08 tests: add mac/win bots to ci (#232)
dec646c deps: replace mkdirp.sync with fs.mkdirSync (#234)
a5f6eb2 Add additional chrome flags (#227)
df9d564 tests(ci): migrate from travis to github actions (#228)
3a90c21 docs(chrome-flags-for-tools): fixup a few links
8429ca9 docs(chrome-flags-for-tools): add feature flags description
21db5f9 docs: update chrome-flags-for-tools.md (#231)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by brendankenny, a new releaser for chrome-launcher since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the / directory: [undici](https://github.com/nodejs/undici). Bumps the npm_and_yarn group with 1 update in the /fixtures/concurrent/time-slicing directory: [minimist](https://github.com/minimistjs/minimist). Bumps the npm_and_yarn group with 1 update in the /scripts/bench directory: [chrome-launcher](https://github.com/GoogleChrome/chrome-launcher). Updates `undici` from 5.28.4 to 5.28.5 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.4...v5.28.5) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `chrome-launcher` from 0.13.4 to 0.14.0 - [Release notes](https://github.com/GoogleChrome/chrome-launcher/releases) - [Changelog](https://github.com/GoogleChrome/chrome-launcher/blob/main/changelog.md) - [Commits](GoogleChrome/chrome-launcher@v0.13.4...v0.14.0) --- updated-dependencies: - dependency-name: undici dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chrome-launcher dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 23, 2025

dependabot bot mentioned this pull request Jan 23, 2025

Bump the npm_and_yarn group across 2 directories with 2 updates #76

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 3 directories with 3 updates #77

Bump the npm_and_yarn group across 3 directories with 3 updates #77

Uh oh!

dependabot bot commented on behalf of github Jan 23, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm_and_yarn group across 3 directories with 3 updates #77

Are you sure you want to change the base?

Bump the npm_and_yarn group across 3 directories with 3 updates #77

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 23, 2025

v5.28.5

⚠️ Security Release ⚠️

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

v1.2.7 - 2022-10-10

Commits

v0.14.0 (Tue, May 18 2021)

v0.14.0 (Tue, May 18 2021)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant