chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates#258
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates#258dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…dates Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.2` | `removed` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [hono](https://github.com/honojs/hono) | `4.12.5` | `4.12.9` | | [socket.io-parser](https://github.com/socketio/socket.io) | `4.2.4` | `4.2.6` | | [undici](https://github.com/nodejs/undici) | `7.22.0` | `7.24.6` | | [yauzl](https://github.com/thejoshwolfe/yauzl) | `3.2.0` | `3.2.1` | Removes `serialize-javascript` Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `hono` from 4.12.5 to 4.12.9 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.5...v4.12.9) Updates `socket.io-parser` from 4.2.4 to 4.2.6 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.4...socket.io-parser@4.2.6) Updates `undici` from 7.22.0 to 7.24.6 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.22.0...v7.24.6) Updates `yauzl` from 3.2.0 to 3.2.1 - [Commits](thejoshwolfe/yauzl@3.2.0...3.2.1) --- updated-dependencies: - dependency-name: serialize-javascript dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hono dependency-version: 4.12.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-version: 4.2.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 7.24.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yauzl dependency-version: 3.2.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Contributor
|
PR author is in the excluded authors list. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the / directory:
6.0.2removed3.3.33.4.24.7.84.7.94.12.54.12.94.2.44.2.67.22.07.24.63.2.03.2.1Removes
serialize-javascriptUpdates
flattedfrom 3.3.3 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
handlebarsfrom 4.7.8 to 4.7.9Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
Commits
dce542cv4.7.98a41389Update release notes68d8df5Fix security issuesb2a0831Fix browser tests9f98c16Fix release script45443b4Revert "Improve partial indenting performance"8841a5fFix CI errors with lintinge0137c2fix: enable shell mode for spawn to resolve Windows EINVAL issuee914d60Improve rendering performance7de4b41Upgrade GitHub Actions checkout and setup-node on 4.x branchUpdates
honofrom 4.12.5 to 4.12.9Release notes
Sourced from hono's releases.
Commits
e1ae0eb4.12.966fe9fefix(cors): reflect request origin when credentials is true with wildcard (#4813)50e2611fix(service-worker): makefire()fallback behavior consistent with `handle(...be85106fix(ssg): pass SSG_CONTEXT to forGetInfoURLRequest (#4810)d1722e3feat(client): addPickResponseByStatusCodetype (#4791)8bd9dddfix(request): removeparseBodyfrom bodyCache to prevent TypeError (#4807)fe689ec4.12.80c0bf8dfix(bearer-auth): escape regex metacharacters in bearer auth prefix option (#...488ea6afix(utils/mime): Normalize input extension to lowercase before MIME check (#4...b0aba5b4.12.7Updates
socket.io-parserfrom 4.2.4 to 4.2.6Release notes
Sourced from socket.io-parser's releases.
Commits
522edcdchore(release): socket.io-parser@4.2.63fff7cafix(parser): add a limit to the number of binary attachments37aad11fix: cleanup pending acks on timeout to prevent memory leakba9cd69revert: fix: cleanup pending acks on timeout to prevent memory leak84c2fb7chore(release): engine.io@6.6.607cbe15fix(eio): add@types/wsas dependency (#5458)44ed73ffix(eio): emit initial_headers and headers events in uServer (#5460)da04267fix: cleanup pending acks on timeout to prevent memory leak (#5442)74599a6fix(types): properly import http moduled48718cci: use actions/checkout@v6 and actions/setup-node@v6 (#5449)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for socket.io-parser since your current version.
Updates
undicifrom 7.22.0 to 7.24.6Release notes
Sourced from undici's releases.
... (truncated)
Commits
38eab36Bumped v7.24.6 (#4931)993609dtest: auto-init WPT submodule (#4930)1eacc49build(deps-dev): bump typescript from 5.9.3 to 6.0.2 (#4926)b64e7e4fix: avoid prototype collisions in parseHeaders (#4923)deba679Revert "fix: assume http/https scheme for scheme-less proxy env vars (#4914)"feef62bfix: support Connection header with connection-specific header names per RFC ...a613d9adocs: clarify fetch and FormData pairing (#4922)2ba99a3fix: wrap kConnector call in try/catch to prevent client hang (#4834)a7398c0fix(cache): check Authorization on request headers per RFC 9111 §3.5 (#4911)2b2afbcfix: assume http/https scheme for scheme-less proxy env vars (#4914)Updates
yauzlfrom 3.2.0 to 3.2.1Commits
c469521version 3.2.100c561bfix bounds checking logic on NtfsTimestamp277b294commentde292f2streamed zip file teste00f139truncate long test file names for eCryptfs compatibilityd98e052fix name of Info-ZIPa8951a2update readmeDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.