Bump the npm_and_yarn group across 2 directories with 16 updates #1

dependabot · 2024-08-24T06:07:04Z

Bumps the npm_and_yarn group with 14 updates in the / directory:

Package	From	To
pdfjs-dist	`3.10.111`	`4.2.67`
axios	`1.5.1`	`1.7.4`
postcss	`8.4.27`	`8.4.41`
vite	`4.4.8`	`4.5.3`
@babel/traverse	`7.21.5`	`7.25.4`
braces	`3.0.2`	`3.0.3`
readdirp	`2.2.1`	`3.6.0`
micromatch	`4.0.5`	`4.0.8`
readdirp	`2.2.1`	`3.6.0`
ejs	`3.1.9`	`3.1.10`
phin	`2.9.3`	`3.7.1`
oslllo-svg-fixer	`3.0.0`	`5.0.0`
tar	`6.1.15`	`6.2.1`
undici	`5.22.1`	`5.28.4`
@sveltejs/kit	`1.21.0`	`1.30.4`

Bumps the npm_and_yarn group with 2 updates in the /tests/fixture directory: braces and micromatch.

Updates pdfjs-dist from 3.10.111 to 4.2.67

Release notes

Sourced from pdfjs-dist's releases.

v4.2.67

This release includes a new JPX decoder, based on OpenJPEG, which improves JPX image rendering performance and correctness. Moreover, this release contains improvements for the annotation editor, font conversion and the viewer.

Note that text selection boxes for some PDF files may overlap visually. This is a known issue that we currently track in mozilla/pdf.js#17561.

Changes since v4.1.392

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#17924

Convert the history code to use proper private methods by @timvandermeij in mozilla/pdf.js#17925

Update dependencies and translations to the most recent versions by @timvandermeij in mozilla/pdf.js#17927

Remove the tag for missing font subset when trying to find a substitution by @calixteman in mozilla/pdf.js#17930

Fix resetting of cursor-tools when closing the document (PR 17464 follow-up) by @Snuffleupagus in mozilla/pdf.js#17933

Warn when a non-embedded font has an invalid name by @calixteman in mozilla/pdf.js#17934

Remove the mkdirp dependency in favor of the built-in Node.js fs.mkdirSync by @timvandermeij in mozilla/pdf.js#17935

Improve type definitions for the viewer by @ex37 in mozilla/pdf.js#17879

Fix the "must check that invisible fields are made visible" scripting integration test by @timvandermeij in mozilla/pdf.js#17940

Remove the rimraf dependency in favor of the built-in Node.js fs.rmSync in the test folder by @timvandermeij in mozilla/pdf.js#17938

[api-minor] Update the minimum supported Safari version to 16.4 by @Snuffleupagus in mozilla/pdf.js#17942

Fix the "must check that a field has the correct value when a choice is changed" scripting integration test by @timvandermeij in mozilla/pdf.js#17947

[api-minor] Add a jpx decoder based on OpenJPEG 2.5.2 by @calixteman in mozilla/pdf.js#17946

Bump library version to 4.2 by @Snuffleupagus in mozilla/pdf.js#17949

Build the openjpeg-based decoder in a web environment in order to avoid issues when used in node by @calixteman in mozilla/pdf.js#17954

Fix JpxImage API issues (PR 17946 follow-up) by @timvandermeij in mozilla/pdf.js#17951

[JPX] Throw an exception with the error messages returned by openjpeg by @calixteman in mozilla/pdf.js#17956

[Editor] Provide an element to render in the annotation layer after a freetext has been edited (bug 1890535) by @calixteman in mozilla/pdf.js#17914

Remove waitForTimeout usage from the helper functions by @timvandermeij in mozilla/pdf.js#17966

Remove some event listeners with signal in the viewer by @Snuffleupagus in mozilla/pdf.js#17964

[Editor] Don't show the context menu when resizing by @calixteman in mozilla/pdf.js#17973

Correctly update the xref table when an annotation is deleted by @calixteman in mozilla/pdf.js#17970

Update dependencies and translations to the most recent versions by @timvandermeij in mozilla/pdf.js#17972

Improve jpx decoding by around 20% in enabling simd support when compiling OpenJPEG by @calixteman in mozilla/pdf.js#17983

[api-minor] Remove the image-related error message prefixes by @Snuffleupagus in mozilla/pdf.js#17979

Use the pdf.js warn when using jpx decoder by @calixteman in mozilla/pdf.js#17985

Extend the globally cached image main-thread copying to "complex" images as well (PR 17428 follow-up) by @Snuffleupagus in mozilla/pdf.js#17978

Update JpxImage.parseImageProperties to support TypedArray data in IMAGE_DECODERS builds by @Snuffleupagus in mozilla/pdf.js#17977

Add signal-support in the EventBus, and utilize it in the viewer (PR 17964 follow-up) by @Snuffleupagus in mozilla/pdf.js#17967

Set correctly the change property for the event triggered when a choice list is changed by @calixteman in mozilla/pdf.js#17999

Remove all waitForTimeout usage from the annotation integration tests by @timvandermeij in mozilla/pdf.js#17969

Validate explicit destinations on the worker-thread to prevent DataCloneError (issue 17981) by @Snuffleupagus in mozilla/pdf.js#17984

Allow to insert several annotations under the same parent in the structure tree by @calixteman in mozilla/pdf.js#17986

Always enable smoothing when rendering downscaled image by @calixteman in mozilla/pdf.js#17868

Simplify the way to pass the glyph drawing instructions from the worker to the main thread by @calixteman in mozilla/pdf.js#18015

Validate additional font-dictionary properties by @Snuffleupagus in mozilla/pdf.js#18014

Add more validation of width-data by @Snuffleupagus in mozilla/pdf.js#18017

Reduce code-duplication when caching data in CompiledFont.getPathJs by @Snuffleupagus in mozilla/pdf.js#18018

Re-factor SimpleLinkService to extend PDFLinkService by @Snuffleupagus in mozilla/pdf.js#18013

[api-minor] Move the page reference/number caching into the API by @Snuffleupagus in mozilla/pdf.js#18001

v4.1.392

This release features improvements, bugfixes and optimizations for accessibility, annotation rendering, annotation editing, font rendering, form handling, image rendering, text selection and the viewer.

... (truncated)

Commits

49b3881 Merge pull request #18001 from Snuffleupagus/api-pageRefCache
150964d Remove unnecessary check from PDFLinkService.goToDestination (PR 17984 foll...
f6cd039 [api-minor] Move the page reference/number caching into the API
fa69d9a Inline the helper method in PDFLinkService.goToDestination
3052e99 Merge pull request #18013 from Snuffleupagus/SimpleLinkService-extends-PDFLin...
2b2ade7 Merge pull request #18018 from Snuffleupagus/CompiledFont-tweak-caching
627fe2d Merge pull request #18017 from Snuffleupagus/validate-widths
85ff8f3 Reduce code-duplication when caching data in CompiledFont.getPathJs
d411a07 Add more validation of width-data
234067e Merge pull request #18014 from Snuffleupagus/validate-font-properties
Additional commits viewable in compare view

Updates axios from 1.5.1 to 1.7.4

Release notes

Sourced from axios's releases.

Release v1.7.4

Release notes:

Bug Fixes

sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)

sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

Lev Pachmanov

Đỗ Trọng Hải

Release v1.7.3

Release notes:

Bug Fixes

adapter: fix progress event emitting; (#6518) (e3c76fc)

fetch: fix withCredentials request config (#6505) (85d4d0e)

xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

Dmitriy Mozgovoy

Valerii Sidorenko

prianYu

Release v1.7.2

Release notes:

Bug Fixes

fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

Dmitriy Mozgovoy

Release v1.7.1

Release notes:

Bug Fixes

fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

Dmitriy Mozgovoy

Release v1.7.0

Release notes:

Features

... (truncated)

Changelog

Sourced from axios's changelog.

1.7.4 (2024-08-13)

Bug Fixes

sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)

sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

Lev Pachmanov

Đỗ Trọng Hải

1.7.3 (2024-08-01)

Bug Fixes

adapter: fix progress event emitting; (#6518) (e3c76fc)

fetch: fix withCredentials request config (#6505) (85d4d0e)

xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

Dmitriy Mozgovoy

Valerii Sidorenko

prianYu

1.7.2 (2024-05-21)

Bug Fixes

fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

Dmitriy Mozgovoy

1.7.1 (2024-05-20)

Bug Fixes

fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

Dmitriy Mozgovoy

... (truncated)

Commits

abd24a7 chore(release): v1.7.4 (#6544)
6b6b605 fix(sec): CVE-2024-39338 (#6539) (#6543)
07a661a fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)
c6cce43 chore(release): v1.7.3 (#6521)
e3c76fc fix(adapter): fix progress event emitting; (#6518)
85d4d0e fix(fetch): fix withCredentials request config (#6505)
92cd8ed chore(github): update ISSUE_TEMPLATE.md (#6519)
8966ee7 fix(xhr): return original config on errors from XHR adapter (#6515)
0e4f9fa chore(release): v1.7.2 (#6414)
4f79aef fix(fetch): enhance fetch API detection; (#6413)
Additional commits viewable in compare view

Updates postcss from 8.4.27 to 8.4.41

Release notes

Sourced from postcss's releases.

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by @tim-we).

Cleaned up code (by @DrKiraDmitry).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by @romainmenke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by @ferreira-tb).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

Changelog

Sourced from postcss's changelog.

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by Romain Menke).

8.4.29

Fixed Node#source.offset (by Ido Rosenthal).

Fixed docs (by Christian Oliff).

8.4.28

Fixed Root.source.end for better source map (by Romain Menke).

Fixed Result.root types when process() has no parser.

Commits

57e0211 Release 8.4.41 version
f27134f Update dependencies
146d31c Merge pull request #1952 from nex3/rule-props
3707c3b Merge remote-tracking branch 'origin/main' into rule-props
9ab3619 Declare Input.toJSON()
be59ad4 Remove dead website
165154b Update dependencies
6127a44 Declaration#variable do not have setter
536726d Fix type
58fa0ef Sort keys
Additional commits viewable in compare view

Updates vite from 4.4.8 to 4.5.3

Changelog

Sourced from vite's changelog.

4.5.3 (2024-03-24)

fix: fs.deny with globs with directories (#16250) (96a7f3a), closes #16250

4.5.2 (2024-01-19)

fix: fs deny for case insensitive systems (#15653) (eeec23b), closes #15653

4.5.1 (2023-12-04)

fix: backport #15223, proxy html path should be encoded (#15226) (41bb354), closes #15223 #15226

4.5.0 (2023-10-18)

feat: backport mdx as known js source (#14560) (#14670) (45595ef), closes #14560 #14670

feat: scan .marko files (#14669) (ed7bdc5), closes #14669

feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions (#14498) (#14668) (520139c), closes #14498 #14668

4.4.11 (2023-10-05)

revert: "fix: use string manipulation instead of regex to inject esbuild helpers (54e1275), closes #14094

4.4.10 (2023-10-03)

fix: add source map to Web Workers (fix #14216) (#14217) (df6f32f), closes #14216 #14217

fix: handle errors during hasWorkspacePackageJSON function (#14394) (6f6e5de), closes #14394

fix: handle sourcemap correctly when multiple line import exists (#14232) (218861f), closes #14232

fix: if host is specified check whether it is valid (#14013) (b1b816a), closes #14013

fix: include vite/types/* in exports field (#14296) (40e99a1), closes #14296

fix: initWasm options should be optional (#14152) (119c074), closes #14152

fix: restore builtins list (f8b9adb)

fix: use string manipulation instead of regex to inject esbuild helpers (#14094) (128ad8f), closes #14094

fix: ws never connects after restarting server if server.hmr.server is set (#14127) (441642e), closes #14127

fix(analysis): warnings for dynamic imports that use static template literals (#14458) (0c6d289), closes #14458

fix(cli): convert special base (#14283) (d4bc0fb), closes #14283

fix(css): remove pure css chunk sourcemap (#14290) (cd7e033), closes #14290

fix(css): reset render cache on renderStart (#14326) (d334b3d), closes #14326

fix(glob): trigger HMR for glob in a package (#14117) (0f582bf), closes #14117

fix(import-analysis): preserve importedUrls import order (#14465) (269aa43), closes #14465

fix(manifest): preserve pure css chunk assets (#14297) (3d63ae6), closes #14297

... (truncated)

Commits

aac695e release: v4.5.3
96a7f3a fix: fs.deny with globs with directories (#16250)
d0360c1 release: v4.5.2
eeec23b fix: fs deny for case insensitive systems (#15653)
c075115 release: v4.5.1
41bb354 fix: backport #15223, proxy html path should be encoded (#15226)
055d2b8 release: v4.5.0
ed7bdc5 feat: scan .marko files (#14669)
45595ef feat: backport mdx as known js source (#14560) (#14670)
520139c feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions...
Additional commits viewable in compare view

Updates @babel/traverse from 7.21.5 to 7.25.4

Release notes

Sourced from @babel/traverse's releases.

v7.25.4 (2024-08-22)

🐛 Bug Fix

babel-traverse

#16756 fix: Skip computed key when renaming (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16755 fix: Decorator 2018-09 may throw an exception (@liuxingbaoyu)

babel-types

#16710 Visit AST fields nodes according to their syntactical order (@nicolo-ribaudo)

babel-generator

#16709 Print semicolon after TS export namespace as A (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse

#16722 Avoid unnecessary parens around sequence expressions (@nicolo-ribaudo)

babel-generator, babel-plugin-transform-class-properties

#16714 Avoid unnecessary parens around exported arrow functions (@nicolo-ribaudo)

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

#16712 Avoid printing unnecessary parens around object destructuring (@nicolo-ribaudo)

🔬 Output optimization

babel-generator

#16740 Avoid extra spaces between comments/regexps in compact mode (@nicolo-ribaudo)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.25.3 (2024-07-31)

🐛 Bug Fix

babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

#16699 Avoid validating visitors produced by traverse.visitors.merge (@nicolo-ribaudo)

🏠 Internal

babel-parser

#16688 Add @babel/types as a dependency of @babel/parser (@nicolo-ribaudo)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.25.2 (2024-07-30)

🐛 Bug Fix

babel-core, babel-traverse

#16695 Ensure that requeueComputedKeyAndDecorators is available (@nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.4 (2024-08-22)

🐛 Bug Fix

babel-traverse

#16756 fix: Skip computed key when renaming (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16755 fix: Decorator 2018-09 may throw an exception (@liuxingbaoyu)

babel-types

#16710 Visit AST fields nodes according to their syntactical order (@nicolo-ribaudo)

babel-generator

#16709 Print semicolon after TS export namespace as A (@nicolo-ribaudo)

💅 Polish

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse

#16722 Avoid unnecessary parens around sequence expressions (@nicolo-ribaudo)

babel-generator, babel-plugin-transform-class-properties

#16714 Avoid unnecessary parens around exported arrow functions (@nicolo-ribaudo)

babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

#16712 Avoid printing unnecessary parens around object destructuring (@nicolo-ribaudo)

🔬 Output optimization

babel-generator

#16740 Avoid extra spaces between comments/regexps in compact mode (@nicolo-ribaudo)

v7.25.3 (2024-07-31)

🐛 Bug Fix

babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

#16699 Avoid validating visitors produced by traverse.visitors.merge (@nicolo-ribaudo)

🏠 Internal

babel-parser

#16688 Add @babel/types as a dependency of @babel/parser (@nicolo-ribaudo)

v7.25.2 (2024-07-30)

🐛 Bug Fix

babel-core, babel-traverse

#16695 Ensure that requeueComputedKeyAndDecorators is available (@nicolo-ribaudo)

v7.25.1 (2024-07-28)

🐛 Bug Fix

babel-plugin-transform-function-name

#16683 fix: ensureFunctionName may be undefined (@liuxingbaoyu)

babel-plugin-transform-react-constant-elements

#16582 fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer (@keiseiTi)

babel-traverse

#16587 fix: fixed issue16583 + test (@nerodesu017)

🏠 Internal

#16663 Test eslint plugin against eslint 9 (@JLHwung)

v7.25.0 (2024-07-26)

... (truncated)

Commits

cbf124c v7.25.4
2b289fb fix: skip computed key when renaming (#16756)
575863c Avoid unnecessary parens around sequence expressions (#16722)
5174ad1 Clean all always enabled parser plugins (#16572)
52718ab Discontinue babel-eslint-config-internal (#16718)
dba45d3 Ignore devDependencies when generating tsconfig.json (#16659)
787c7cd v7.25.3
992c6e0 Avoid validating visitors produced by traverse.visitors.merge (#16699)
44efb5f print @babel/traverse version on unknown AST types (#16701)
0f8f408 v7.25.2
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates readdirp from 2.2.1 to 3.6.0

Release notes

Sourced from readdirp's releases.

3.3.0

Stabilizes RAM consumption and enables perf management with highWaterMark option. Fixes race conditions related to for-await looping.

3.2.0

Improves performance by 250% and makes streams implementation more idiomatic.

3.1.1

Adds automatic support for fs.stat bigint option on windows.

3.0.0

Huge performance improvements and stream backpressure support.

options.root moved to a separate argument

Emits ream stream

Doesn't use stat() by default.

Minumum node.js requirement is now version 8.x.

Commits

c1482f9 Release 3.6.0.
e353d45 Prettier
6ffb4c6 Update check for fs.stat/fs.lstat bigint support. (#171)
62eea1a Merge pull request #169 from ath0mas/fix/168-recusive-warn
7c31860 Skip with warn for circular symlinks, instead of exit with error (#168)
887e9f3 Release 3.5.0.
a7d43ba Add devdev typescript.
59a7970 Changelog
6119c44microsoft/vscode#108441
6e29e80 Merge pull request #161 from paulmillr/dependabot/npm_and_yarn/types/node-14.0.1
Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates readdirp from 2.2.1 to 3.6.0

Release notes

Sourced from readdirp's releases.

3.3.0

Stabilizes RAM consumption and enables perf management with highWaterMark option. Fixes race conditions related to for-await looping.

3.2.0

Improves performance by 250% and makes streams implementation more idiomatic.

3.1.1

Adds automatic support for fs.stat bigint option on windows.

3.0.0

Huge performance improvements and stream backpressure support.

options.root moved to a separate argument

Emits ream stre...
Description has been truncated

Bumps the npm_and_yarn group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pdfjs-dist](https://github.com/mozilla/pdf.js) | `3.10.111` | `4.2.67` | | [axios](https://github.com/axios/axios) | `1.5.1` | `1.7.4` | | [postcss](https://github.com/postcss/postcss) | `8.4.27` | `8.4.41` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.4.8` | `4.5.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.21.5` | `7.25.4` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [readdirp](https://github.com/paulmillr/readdirp) | `2.2.1` | `3.6.0` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [readdirp](https://github.com/paulmillr/readdirp) | `2.2.1` | `3.6.0` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [phin](https://github.com/ethanent/phin) | `2.9.3` | `3.7.1` | | [oslllo-svg-fixer](https://github.com/oslllo/svg-fixer) | `3.0.0` | `5.0.0` | | [tar](https://github.com/isaacs/node-tar) | `6.1.15` | `6.2.1` | | [undici](https://github.com/nodejs/undici) | `5.22.1` | `5.28.4` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `1.21.0` | `1.30.4` | Bumps the npm_and_yarn group with 2 updates in the /tests/fixture directory: [braces](https://github.com/micromatch/braces) and [micromatch](https://github.com/micromatch/micromatch). Updates `pdfjs-dist` from 3.10.111 to 4.2.67 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v3.10.111...v4.2.67) Updates `axios` from 1.5.1 to 1.7.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.5.1...v1.7.4) Updates `postcss` from 8.4.27 to 8.4.41 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.27...8.4.41) Updates `vite` from 4.4.8 to 4.5.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.3/packages/vite) Updates `@babel/traverse` from 7.21.5 to 7.25.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.4/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `readdirp` from 2.2.1 to 3.6.0 - [Release notes](https://github.com/paulmillr/readdirp/releases) - [Commits](paulmillr/readdirp@2.2.1...3.6.0) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/4.0.8/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `readdirp` from 2.2.1 to 3.6.0 - [Release notes](https://github.com/paulmillr/readdirp/releases) - [Commits](paulmillr/readdirp@2.2.1...3.6.0) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `follow-redirects` from 1.15.3 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.3...v1.15.6) Updates `phin` from 2.9.3 to 3.7.1 - [Commits](https://github.com/ethanent/phin/commits) Updates `oslllo-svg-fixer` from 3.0.0 to 5.0.0 - [Release notes](https://github.com/oslllo/svg-fixer/releases) - [Changelog](https://github.com/oslllo/svg-fixer/blob/master/CHANGELOG.md) - [Commits](oslllo/svg-fixer@v3.0.0...v5.0.0) Updates `tar` from 6.1.15 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.15...v6.2.1) Updates `undici` from 5.22.1 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.22.1...v5.28.4) Updates `@sveltejs/kit` from 1.21.0 to 1.30.4 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/@sveltejs/kit@1.30.4/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@1.30.4/packages/kit) Updates `xml2js` from 0.4.23 to 0.5.0 - [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.5.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/4.0.8/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) --- updated-dependencies: - dependency-name: pdfjs-dist dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: readdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: readdirp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: phin dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: oslllo-svg-fixer dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sveltejs/kit" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Aug 24, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 2 directories with 16 updates #1

Bump the npm_and_yarn group across 2 directories with 16 updates #1

dependabot bot commented on behalf of github Aug 24, 2024

Bump the npm_and_yarn group across 2 directories with 16 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 2 directories with 16 updates #1

Conversation

dependabot bot commented on behalf of github Aug 24, 2024

v4.2.67

Changes since v4.1.392

v4.1.392

Release v1.7.4

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.3

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.2

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.1

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.0

Release notes:

Features

1.7.4 (2024-08-13)

Bug Fixes

Contributors to this release

1.7.3 (2024-08-01)

Bug Fixes

Contributors to this release

1.7.2 (2024-05-21)

Bug Fixes

Contributors to this release

1.7.1 (2024-05-20)

Bug Fixes

Contributors to this release

8.4.41

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30

8.4.29

8.4.28

8.4.41

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30

8.4.29

8.4.28

4.5.3 (2024-03-24)

4.5.2 (2024-01-19)

4.5.1 (2023-12-04)

4.5.0 (2023-10-18)

4.4.11 (2023-10-05)

4.4.10 (2023-10-03)

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix