Bump the npm_and_yarn group across 1 directory with 14 updates #422
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 12 updates in the /jupyterlab-extension directory: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.12.17` | `7.25.6` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [glob-parent](https://github.com/gulpjs/glob-parent) | `5.1.1` | `5.1.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `1.8.0` | `1.9.0` | | [postcss](https://github.com/postcss/postcss) | `8.4.5` | `8.4.47` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.24` | `0.7.39` | | [webpack](https://github.com/webpack/webpack) | `5.11.1` | `5.94.0` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [ws](https://github.com/websockets/ws) | `7.4.2` | `7.5.10` | | [xlsx](https://github.com/SheetJS/sheetjs) | `0.17.5` | `removed` | | @materialsproject/mp-react-components | `0.1.9` | `0.1.12` | Updates `@babel/traverse` from 7.12.17 to 7.25.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.6/packages/babel-traverse) Updates `axios` from 0.21.1 to 0.19.2 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.19.2/CHANGELOG.md) - [Commits](axios/axios@v0.21.1...v0.19.2) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `follow-redirects` from 1.13.2 to 1.5.10 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.2...v1.5.10) Updates `glob-parent` from 5.1.1 to 5.1.2 - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `path-to-regexp` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v1.8.0...v1.9.0) Updates `postcss` from 8.4.5 to 8.4.47 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.5...8.4.47) Updates `ua-parser-js` from 0.7.24 to 0.7.39 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.39/changelog.md) - [Commits](faisalman/ua-parser-js@0.7.24...0.7.39) Updates `webpack` from 5.11.1 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.11.1...v5.94.0) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `ws` from 7.4.2 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.2...7.5.10) Removes `xlsx` Updates `@materialsproject/mp-react-components` from 0.1.9 to 0.1.12 --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xlsx dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@materialsproject/mp-react-components" dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
tschaume
deleted the
dependabot/npm_and_yarn/jupyterlab-extension/npm_and_yarn-6210821fe3
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the /jupyterlab-extension directory:
7.12.177.25.63.0.23.0.35.1.15.1.21.2.51.2.81.8.01.9.08.4.58.4.470.7.240.7.395.11.15.94.01.2.31.2.57.4.27.5.100.17.5removed0.1.90.1.12Updates
@babel/traversefrom 7.12.17 to 7.25.6Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
2f72b97v7.25.6faceae9fix:path.getAssignmentIdentifiersmay beundefined(#16727)46ee612Remove someNodePathmethods (#16655)2fdc8b5fix: Generate sequence expression parentheses correctly (#16764)cbf124cv7.25.42b289fbfix: skip computed key when renaming (#16756)575863cAvoid unnecessary parens around sequence expressions (#16722)5174ad1Clean all always enabled parser plugins (#16572)52718abDiscontinue babel-eslint-config-internal (#16718)dba45d3IgnoredevDependencieswhen generatingtsconfig.json(#16659)Updates
axiosfrom 0.21.1 to 0.19.2Changelog
Sourced from axios's changelog.
... (truncated)
Commits
2a0ff47Releasing 0.19.217cc1d6Updating changlog for 0.19.2 releasec7488c7Remove unnecessary XSS check introduced by #2451 (#2679)351cf29Fix link formatting in CHANGELOG.md to display PR number in parens as link (#...960e1c8Releasing 0.19.18a9421dFixing typo in CHANGELOG.md: s/Functionallity/Functionality (#2639)ee47120If this place is false, it will report an error, so you should delete the use...03e6f4bFixing invalid agent issue (#1904)dc4bc49fix: fix ignore set withCredentials false (#2582)13c948eRemove 'includes' API, fix CI build failure (#2574)Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
follow-redirectsfrom 1.13.2 to 1.5.10Commits
9184275Release version 1.5.10 of the npm package.988acfaUpdate dependencies.41f20b9Preserve ports when the host option is used.5b76cf3Test on Node 11.d62452bIn Node 11, aborted is a boolean.4fbbad5Ensure all tests return their promise.c01a2b4Fix typo.5373becAdd downloads badge.69a430cUpdate author and contributors.5ebe201Update license date.Updates
glob-parentfrom 5.1.1 to 5.1.2Release notes
Sourced from glob-parent's releases.
Changelog
Sourced from glob-parent's changelog.
Commits
eb2c439chore: update changelog12bcb6cchore: release 5.1.2f923116fix: eliminate ReDoS (#36)0b014a7chore: add JSDoc returns information (#33)2b24ebdchore: generate initial changelogUpdates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
path-to-regexpfrom 1.8.0 to 1.9.0Release notes
Sourced from path-to-regexp's releases.
Commits
c75eb101.9.0925ac8eAdd backtrack protection to 1.x release (#320)32a14b0Fixre.exec('/test/route')result (#267)Updates
postcssfrom 8.4.5 to 8.4.47Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
5e6fd13Release 8.4.47 version714bc10Typo439d20eRelease 8.4.46 versionb93582fUpdate dependenciesc51e467Fix error on inserting node without raws in some cases829ae47Update dependencies5aaaec2Update remaining workflow jobs to use latest version of actions (#1968)448c4f3Release 8.4.45 version1c77d2eUpdate unnecessary checkf38b329Try to fix CIUpdates
ua-parser-jsfrom 0.7.24 to 0.7.39Release notes
Sourced from ua-parser-js's releases.
Changelog
Sourced from ua-parser-js's changelog.
... (truncated)
Commits
2ad60d4Bump version 0.7.39c25e22fBackport - Fix #743 - Improve device detection for Xiaomia931582Backport - Add new device vendor: itel33eb27dBackport - Improve detection: Amazon Echo Show devicesa77184fBackport - Improve detection: recognize Samsung Galaxy Watch devices as `wear...b6a92c6Backport - Add new device vendor: TCL4303c32Backport - Add new vendor: Nothingbef7c77Backport - Improve browser detection for Quark (#737)06e3c8dBackport - Add new browser: Helio241eb47Backport - Add new browsers: Wolvic & Pico BrowserUpdates
webpackfrom 5.11.1 to 5.94.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
eabf85dchore(release): 5.94.0955e057security: fix DOM clobbering in auto public path9822387test: fixcbb86edtest: fix5ac3d7ffix: unexpected asi generation with sequence expression2411661security: fix DOM clobbering in auto public pathb8c03d4fix: unexpected asi generation with sequence expressionf46a03crevert: do not use heuristic fallback for "module-import"60f1898fix: do not use heuristic fallback for "module-import"66306aaRevert "fix: module-import get fallback from externalsPresets"Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Updates
word-wrapfrom 1.2.3 to 1.2.5Release notes
Sourced from word-wrap's releases.
Commits
207044e1.2.59894315revert default indentf64b188run verb to generate README03ea082Merge pull request #42 from jonschlinkert/chore/publish-workflow420dce9Merge pull request #41 from jonschlinkert/fix/CVE-2023-26115-2bfa694eUpdate .github/workflows/publish.ymlace0b3cchore: bump version to 1.2.46fd7275chore: add publish workflow30d6dafchore: fix test655929cchore: remove package-lockUpdates
wsfrom 7.4.2 to 7.5.10Release notes
Sourced from ws's releases.