chore(deps): bump the npm_and_yarn group across 10 directories with 30 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the npm_and_yarn group with 3 updates in the / directory: postcss, vitest and next.
Bumps the npm_and_yarn group with 13 updates in the /examples/user-management/expo-user-management directory:

Package	From	To
next	14.2.21	15.1.7
@babel/traverse	7.24.5	7.24.7
braces	3.0.2	3.0.3
cross-spawn	6.0.5	6.0.6
fast-loops	1.1.3	1.1.4
fast-xml-parser	4.3.6	4.5.3
micromatch	4.0.5	4.0.8
nanoid	3.3.7	3.3.8
expo	51.0.8	52.0.37
react-native-document-picker	8.1.1	8.2.2
es5-ext	0.10.62	0.10.64
send	0.18.0	0.19.0
serve-static	1.15.0	1.16.2

Bumps the npm_and_yarn group with 7 updates in the /examples/user-management/nextjs-user-management directory:

Package	From	To
next	14.2.3	14.2.21
braces	3.0.2	3.0.3
cookie	0.6.0	0.7.2
@supabase/ssr	0.4.0	0.5.2
cross-spawn	7.0.3	7.0.6
micromatch	4.0.5	4.0.8
nanoid	3.3.7	3.3.8

Bumps the npm_and_yarn group with 11 updates in the /examples/user-management/nuxt3-user-management directory:

Package	From	To
next	14.2.21	15.1.7
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
micromatch	4.0.5	4.0.8
nanoid	3.3.7	3.3.8
rollup	4.20.0	4.34.8
vite	5.3.5	5.4.14
es5-ext	0.10.62	0.10.64
send	0.18.0	0.19.0
serve-static	1.15.0	1.16.2
nuxt	3.12.4	3.15.4

Bumps the npm_and_yarn group with 4 updates in the /examples/user-management/react-user-management directory: postcss, next, @babel/traverse and es5-ext.
Bumps the npm_and_yarn group with 4 updates in the /examples/user-management/solid-user-management directory: postcss, next, @babel/traverse and es5-ext.
Bumps the npm_and_yarn group with 9 updates in the /examples/user-management/svelte-user-management directory:

Package	From	To
postcss	8.4.24	8.5.3
next	14.2.21	15.1.7
braces	3.0.2	3.0.3
micromatch	4.0.5	4.0.8
svelte	3.49.0	5.20.4
@sveltejs/vite-plugin-svelte	1.0.2	5.0.3
svelte-check	2.8.1	4.1.4
svelte-preprocess	4.10.7	6.0.3
es5-ext	0.10.62	0.10.64

Bumps the npm_and_yarn group with 10 updates in the /examples/user-management/sveltekit-user-management directory:

Package	From	To
next	14.2.21	15.1.7
braces	3.0.2	3.0.3
nanoid	3.3.7	3.3.8
rollup	4.14.2	4.34.8
svelte	4.2.18	4.2.19
vite	5.3.3	5.4.14
@supabase/ssr	0.4.0	0.5.2
@sveltejs/vite-plugin-svelte	3.1.1	5.0.3
svelte-check	3.8.4	4.1.4
@sveltejs/kit	2.5.18	2.17.2

Bumps the npm_and_yarn group with 3 updates in the /examples/user-management/vue3-user-management directory: postcss, next and es5-ext.
Bumps the npm_and_yarn group with 8 updates in the /examples/with-cloudflare-workers directory:

Package	From	To
next	14.2.21	15.1.7
braces	3.0.2	3.0.3
cross-spawn	7.0.3	7.0.6
nanoid	3.3.4	3.3.8
ws	8.13.0	8.18.1
es5-ext	0.10.62	0.10.64
undici	5.20.0	5.28.5
wrangler	2.20.1	3.109.3

Updates postcss from 8.4.38 to 8.5.3

Release notes

Sourced from postcss's releases.

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

8.4.49

• Fixed custom syntax without source.offset (by @​romainmenke).

8.4.48

• Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

• Removed debug code.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

• Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

• Fixed custom syntax without source.offset (by @​romainmenke).

8.4.48

• Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

• Removed debug code.

8.4.46

• Fixed Cannot read properties of undefined (reading 'before').

8.4.45

• Removed unnecessary fix which could lead to infinite loop.

8.4.44

• Another way to fix markClean is not a function error.

8.4.43

• Fixed markClean is not a function error.

8.4.42

• Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

8.4.40

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

8.4.39

• Fixed CssSyntaxError types (by @​romainmenke).

Commits

• 22c309d Release 8.5.3 version
• a2b594f Update ESLint config
• 8232ba0 Fix tests
• 5082831 Fix text
• 4fdb54b update: parser.js to clarify error message
• 06006ec AtRule can be empty
• 755f08f fix typo: them -> then (#2016)
• 692fcde Release 8.5.2 version
• b70e98f Update dependencies
• ba587e3 Fix end position of rules with ownSemicon (#2012)
• Additional commits viewable in compare view

Updates vitest from 2.1.8 to 2.1.9

Release notes

Sourced from vitest's releases.

v2.1.9

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport vitest-dev/vitest#7317 to v2 - by @​hi-ogawa in vitest-dev/vitest#7318
• (backport #7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in vitest-dev/vitest#7343

    View changes on GitHub

Commits

• c9e59a0 chore: release v2.1.9
• e0fe1d8 fix: backport #7317 to v2 (#7318)
• See full diff in compare view

Updates next from 14.2.21 to 15.1.7

Release notes

Sourced from next's releases.

v15.1.7

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: work around setTimeout memory leak, improve wrappers (#75727)
• add additional x-middleware-set-cookie filtering (#75869)
• fix: ensure lint worker errors aren't silenced (#75766)

Credits

Huge thanks to @​lubieowoce and @​ztanner for helping!

v15.1.6

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: don't memory-leak promises passed to waitUntil (#75041)
• backport: fix prerender issue with intercepting routes + generateStaticParams (#75170)

Credits

Huge thanks to @​lubieowoce and @​ztanner for helping!

v15.1.5

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Fix missing revalidate with notFound() (#75009)
• fix: when metadatabase is set we should not warn (#74840)
• Fix @​vercel/og license SPDX expression (#74745)
• fix: ts language server rule metadata should allow null (#74704)
• fix: eslint rule of using img in metadata routes (#74864)
• Fix presentation when onerror receives an event without error (#74643)
• fix fetch lock not being consistently released #74623 (#75028)

Credits

Huge thanks to @​ijjk, @​huozhi, @​matmannion and @​ztanner for helping!

v15.1.4

[!NOTE]

... (truncated)

Commits

• eb883cd v15.1.7
• c536898 fix: work around setTimeout memory leak, improve wrappers (#75727)
• c25fa95 Fix corepack keys (#75600)
• 22ce8ea Update CI config for Windows runner (#74850)
• 2bd6588 add additional x-middleware-set-cookie filtering (#75869)
• 0d9f605 fix: ensure lint worker errors aren't silenced (#75766) (#75778)
• b010112 test: fix eslint plugin test (#75687)
• 38a6d01 v15.1.6
• 7099753 backport: fix prerender issue with intercepting routes + generateStaticParams...
• 819d575 [E2E] Fix config file conflict (#73818)
• Additional commits viewable in compare view

Updates vite from 5.2.14 to 5.4.14

Release notes

Sourced from vite's releases.

v5.4.14

Please refer to CHANGELOG.md for details.

v5.4.13

Please refer to CHANGELOG.md for details.

v5.4.12

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v5.4.11

Please refer to CHANGELOG.md for details.

v5.4.10

Please refer to CHANGELOG.md for details.

v5.4.9

Please refer to CHANGELOG.md for details.

v5.4.8

Please refer to CHANGELOG.md for details.

v5.4.7

Please refer to CHANGELOG.md for details.

v5.4.6

Please refer to CHANGELOG.md for details.

v5.4.5

Please refer to CHANGELOG.md for details.

v5.4.4

Please refer to CHANGELOG.md for details.

v5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.3

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.2

Please refer to CHANGELOG.md for details.

v5.4.2

Please refer to CHANGELOG.md for details.

plugin-legacy@5.4.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

5.4.14 (2025-01-21)

• fix: preview.allowedHosts with specific values was not respected (#19246) (9df6e6b), closes #19246
• fix: allow CORS from loopback addresses by default (#19249) (7d1699c), closes #19249

5.4.13 (2025-01-20)

• fix: try parse server.origin URL (#19241) (5946215), closes #19241

5.4.12 (2025-01-20)

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
• fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
• fix: verify token for HMR WebSocket connection (b71a5c8)
• chore: add deps update changelog (ecd2375)

5.4.11 (2024-11-11)

• fix(deps): update dependencies of postcss-modules (ceb15db), closes #18617

5.4.10 (2024-10-23)

• fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412

5.4.9 (2024-10-14)

• fix: bump launch-editor-middleware to v2.9.1 (#18348) (508d9ab), closes #18348
• fix(css): fix lightningcss dep url resolution with custom root (#18125) (eae00b5), closes #18125
• fix(data-uri): only match ids starting with data: (#18241) (96084d6), closes #18241
• fix(deps): bump tsconfck (#18322) (dc5434c), closes #18322
• fix(hmr): don't try to rewrite imports for direct CSS soft invalidation (#18252) (851b258), closes #18252
• fix(ssr): (backport #18150) fix source map remapping with multiple sources (#18204) (262a879), closes #18204
• chore: update all url references of vitejs.dev to vite.dev (#18276) (c23558a), closes #18276
• chore: update license copyright (#18278) (1864eb1), closes #18278
• docs: update homepage (#18274) (ae44163), closes #18274

5.4.8 (2024-09-25)

... (truncated)

Commits

• e7eb3c5 release: v5.4.14
• 7d1699c fix: allow CORS from loopback addresses by default (#19249)
• 9df6e6b fix: preview.allowedHosts with specific values was not respected (#19246)
• a1824c5 release: v5.4.13
• 5946215 fix: try parse server.origin URL (#19241)
• f428aa9 release: v5.4.12
• 9da4abc fix!: check host header to prevent DNS rebinding attacks and introduce `serve...
• b71a5c8 fix: verify token for HMR WebSocket connection
• dfea38f fix!: default server.cors: false to disallow fetching from untrusted origins
• ecd2375 chore: add deps update changelog
• Additional commits viewable in compare view

Updates next from 14.2.21 to 15.1.7

Release notes

Sourced from next's releases.

v15.1.7

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: work around setTimeout memory leak, improve wrappers (#75727)
• add additional x-middleware-set-cookie filtering (#75869)
• fix: ensure lint worker errors aren't silenced (#75766)

Credits

Huge thanks to @​lubieowoce and @​ztanner for helping!

v15.1.6

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• fix: don't memory-leak promises passed to waitUntil (#75041)
• backport: fix prerender issue with intercepting routes + generateStaticParams (#75170)

Credits

Huge thanks to @​lubieowoce and @​ztanner for helping!

v15.1.5

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Fix missing revalidate with notFound() (#75009)
• fix: when metadatabase is set we should not warn (#74840)
• Fix @​vercel/og license SPDX expression (#74745)
• fix: ts language server rule metadata should allow null (#74704)
• fix: eslint rule of using img in metadata routes (#74864)
• Fix presentation when onerror receives an event without error (#74643)
• fix fetch lock not being consistently released #74623 (#75028)

Credits

Huge thanks to @​ijjk, @​huozhi, @​matmannion and @​ztanner for helping!

v15.1.4

[!NOTE]

... (truncated)

Commits

• eb883cd v15.1.7
• c536898 fix: work around setTimeout memory leak, improve wrappers (#75727)
• c25fa95 Fix corepack keys (#75600)
• 22ce8ea Update CI config for Windows runner (#74850)
• 2bd6588 add additional x-middleware-set-cookie filtering (#75869)
• 0d9f605 fix: ensure lint worker errors aren't silenced (#75766) (#75778)
• b010112 test: fix eslint plugin test (#75687)
• 38a6d01 v15.1.6
• 7099753 backport: fix prerender issue with intercepting routes + generateStaticParams...
• 819d575 [E2E] Fix config file conflict (#73818)
• Additional commits viewable in compare view

Updates @babel/traverse from 7.24.5 to 7.24.7

Release notes

Sourced from @​babel/traverse's releases.

v7.24.7 (2024-06-05)

🐛 Bug Fix

• babel-node
  • #16554 Allow extra flags in babel-node (@​nicolo-ribaudo)
• babel-traverse
  • #16522 fix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
• babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  • #16524 fix: Transform using in switch correctly (@​liuxingbaoyu)

🏠 Internal

• babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16525 Delete unused array helpers (@​blakewilson)

Committers: 7

• Amjad Yahia Robeen Hassan (@​amjed-98)
• Babel Bot (@​babel-bot)
• Blake Wilson (@​blakewilson)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Sukka (@​SukkaW)
• @​liuxingbaoyu

v7.24.6 (2024-05-24)

Thanks @​amjed-98, @​blakewilson, @​coelhucas, and @​SukkaW for your first PRs!

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #16514 Fix source maps for private member expressions (@​nicolo-ribaudo)
• babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • #16515 Fix source maps for template literals (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #16485 Support undecorated static accessor in anonymous classes (@​JLHwung)
  • #16484 Fix decorator bare yield await (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
• babel-parser, babel-plugin-transform-typescript
  • #16476 fix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)

🏠 Internal

• babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16501 Generate helper metadata at build time (@​nicolo-ribaudo)
• babel-helpers
  • #16499 Add tsconfig.json for @babel/helpers/src/helpers (@​nicolo-ribaudo)
• babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16495 Move all runtime helpers to individual files (@​nicolo-ribaudo)
• babel-parser, babel-traverse
  • #16482 Statically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
• Other

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.24.7 (2024-06-05)

🐛 Bug Fix

• babel-node
  • #16554 Allow extra flags in babel-node (@​nicolo-ribaudo)
• babel-traverse
  • #16522 fix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
• babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  • #16524 fix: Transform using in switch correctly (@​liuxingbaoyu)

🏠 Internal

• babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16525 Delete unused array helpers (@​blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #16514 Fix source maps for private member expressions (@​nicolo-ribaudo)
• babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • #16515 Fix source maps for template literals (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #16485 Support undecorated static accessor in anonymous classes (@​JLHwung)
  • #16484 Fix decorator bare yield await (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
• babel-parser, babel-plugin-transform-typescript
  • #16476 fix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)

🏠 Internal

• babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16501 Generate helper metadata at build time (@​nicolo-ribaudo)
• babel-helpers
  • #16499 Add tsconfig.json for @babel/helpers/src/helpers (@​nicolo-ribaudo)
• babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16495 Move all runtime helpers to individual files (@​nicolo-ribaudo)
• babel-parser, babel-traverse
  • #16482 Statically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
• Other
  • #16466 Migrate import assertions syntax (@​JLHwung)

Commits

• bf1e9a3 v7.24.7
• 4463aa5 fix: incorrect constantViolations with destructuring (#16522)
• 07bd000 Improve getBindingIdentifiers (#16544)
• 17a5502 [Babel 8] Remove extra.shorthand (#16521)
• 7934963 Use type: module in all package.jsons (#16535)
• 9630250 v7.24.6
• 1f010df Explicitly define NodePath.prototype.* (#16488)
• 6e3539b [babel 8] Publish .d.ts files for every package (#16416)
• e37e64d Use eslint v9 (#16479)
• 3ff20b9 Statically generate boilerplate for bitfield accessors (#16482)
• Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

• 74b2db2 3.0.3
• 88f1429 update eslint. lint, fix unit tests.
• 415d660 Snyk js braces 6838727 (#40)
• 190510f fix tests, skip 1 test in test/braces.expand
• 716eb9f readme bump
• a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
• 2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
• 9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
• 98414f9 remove funding file
• 665ab5d update keepEscaping doc (#27)
• Additional commits viewable in compare view

Updates cross-spawn from 6.0.5 to 6.0.6

Changelog

Sourced from cross-spawn's changelog.

6.0.6 (2024-11-18)

Bug Fixes

• disable regexp backtracking (#160) (ba5aaef)
• core: support worker threads (#127) (f4af31c)

Commits

• d35c865 chore(release): 6.0.6
• 5a37e19 chore: update package.json and package.lock
• ba5aaef fix: disable regexp backtracking (#160)
• f4af31c fix(core): support worker threads (#127)
• See full diff in compare view

Updates fast-loops from 1.1.3 to 1.1.4

Commits

• See full diff in compare view

Updates fast-xml-parser from 4.3.6 to 4.5.3

Commits

• See full diff in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

• backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

• this is basically v4.0.5, with some README updates
• it is vulnerable to CVE-2024-4067
• Updated braces to v3.0.3 to avoid CVE-2024-4068
• does NOT break API compatibility

[4.0.6] - 2024-05-21

• Added hasBraces to check if a pattern contains braces.
• Fixes CVE-2024-4067
• BREAKS API COMPATIBILITY
• Should be labeled as a major release, but it's not.

Commits

• 8bd704e 4.0.8
• a0e6841 run verb to generate README documentation
• 4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
• 03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
• 814f5f7 lint
• 67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
• 113f2e3 fix: CVE numbers in CHANGELOG
• d9dbd9a feat: updated CHANGELOG
• 2ab1315 fix: use actions/setup-node@v4
• 1406ea3 feat: rework test to work on macos with node 10,12 and 14
• Additional commits viewable in compare view

Updates nanoid from 3.3.7 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

• Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

Commits

• 3044cd5 Release 3.3.8 version
• 4fe3495 Update size limit
• d643045 Fix pool pollution, infinite loop (#510)
• See full diff in compare view

Updates expo from 51.0.8 to 52.0.37

Changelog

Sourced from expo's changelog.

52.0.37 - 2025-02-20

🐛 Bug fixes

• Fixed EAS Update support for DOM Components. (#35042 by @​kudo)

52.0.36 - 2025-02-19

🐛 Bug fixes

• Fixed expo/fetch cancelStreaming issue on Android. (#34892 by @​kudo)
• Fixed Cannot read property 'matchContents' of undefined error for DOM Components. (#34894 by @​kudo)

52.0.35 - 2025-02-14

This version does not introduce any user-facing changes.

52.0.34 - 2025-02-14

This version does not introduce any user-facing changes.

52.0.33 - 2025-02-12

This version does not introduce any user-facing changes.

52.0.32 - 2025-02-10

🐛 Bug fixes

• [Android] Avoid PromiseAlreadySettledException on canceling expo/fetch requests. (#34778 by @​yukukotani)

52.0.31 - 2025-02-06

This version does not introduce any user-facing changes.

52.0.30 - 2025-02-04

💡 Others

• Added a debug only warning and style for zero height DOM components. (#34375 by @​kudo)

52.0.29 - 2025-02-04

This version does not introduce any user-facing changes.

52.0.28 - 2025-01-27

This version does not introduce any user-facing changes.

52.0.27 - 2025-01-20

... (truncated)

Commits

• See full diff in compare view

Updates react-native-document-picker from 8.1.1 to 8.2.2

Release notes

Sourced fro...

Description has been truncated