Bump the npm_and_yarn group across 1 directory with 17 updates#42
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the npm_and_yarn group across 1 directory with 17 updates#42dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Contributor
|
@dependabot rebase |
Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tsup](https://github.com/egoist/tsup) | `8.0.1` | `8.3.5` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `8.3.5` | `8.6.18` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.24.0` | `7.29.2` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.14` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [@tootallnate/once](https://github.com/TooTallNate/once) | `2.0.0` | `removed` | | [flatted](https://github.com/WebReflection/flatted) | `3.2.9` | `3.4.2` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | | [yaml](https://github.com/eemeli/yaml) | `1.10.2` | `1.10.3` | | [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.15.1` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.2` | `removed` | | [tmp](https://github.com/raszi/node-tmp) | `0.0.33` | `removed` | | [webpack](https://github.com/webpack/webpack) | `5.95.0` | `5.106.2` | Updates `tsup` from 8.0.1 to 8.3.5 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.0.1...v8.3.5) Updates `storybook` from 8.3.5 to 8.6.18 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.18/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.6.18/code/core) Updates `@babel/helpers` from 7.24.0 to 7.29.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-helpers) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `brace-expansion` from 1.1.11 to 1.1.14 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.14) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Removes `@tootallnate/once` Updates `flatted` from 3.2.9 to 3.4.2 - [Commits](WebReflection/flatted@v3.2.9...v3.4.2) Updates `handlebars` from 4.7.8 to 4.7.9 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `yaml` from 1.10.2 to 1.10.3 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v1.10.2...v1.10.3) Updates `qs` from 6.13.0 to 6.15.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.15.1) Updates `rollup` from 4.22.4 to 4.60.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.22.4...v4.60.3) Removes `serialize-javascript` Removes `tmp` Updates `webpack` from 5.95.0 to 5.106.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.95.0...v5.106.2) --- updated-dependencies: - dependency-name: "@babel/helpers" dependency-version: 7.29.2 dependency-type: indirect - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: brace-expansion dependency-version: 1.1.14 dependency-type: indirect - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect - dependency-name: qs dependency-version: 6.15.1 dependency-type: indirect - dependency-name: rollup dependency-version: 4.60.3 dependency-type: indirect - dependency-name: serialize-javascript dependency-version: dependency-type: indirect - dependency-name: storybook dependency-version: 8.6.18 dependency-type: direct:development - dependency-name: tmp dependency-version: dependency-type: indirect - dependency-name: tsup dependency-version: 8.3.5 dependency-type: direct:production - dependency-name: webpack dependency-version: 5.106.2 dependency-type: indirect - dependency-name: yaml dependency-version: 1.10.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
8c2751e to
df2eb05
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 16 updates in the / directory:
8.0.18.3.58.3.58.6.187.24.07.29.23.14.13.14.21.1.111.1.143.1.23.1.52.0.0removed3.2.93.4.24.7.84.7.94.17.214.18.12.3.12.3.21.10.21.10.36.13.06.15.16.0.2removed0.0.33removed5.95.05.106.2Updates
tsupfrom 8.0.1 to 8.3.5Release notes
Sourced from tsup's releases.
... (truncated)
Commits
cd03e1echore: release v8.3.5fddd451fix: runexperimentalDtsonly once (#1236)21b1193chore: release v8.3.4580e03dci: fix release workflow01b38f2chore: release v8.3.34f5b71eci: fix release workflowe80dad6chore: release v8.3.2f4af79aci: fix release workflow (#1241)4b72d61chore: release v8.3.141c98fffix: supportNode16andNodeNextmodule resolution inexperimentalDts(...Updates
storybookfrom 8.3.5 to 8.6.18Release notes
Sourced from storybook's releases.
Changelog
Sourced from storybook's changelog.
... (truncated)
Commits
81930adBump version from "8.6.17" to "8.6.18" [skip ci]9dbe9b1Formattingc90626eAdd missing import7d88ff1Core: Backport origin/host validation and update related configurationsc6e550aBump version from "8.6.16" to "8.6.17" [skip ci]9cf9d89Core: Require token for websocket connections7e51515Bump version from "8.6.15" to "8.6.16" [skip ci]3812b43Bump version from 8.6.14 to 8.6.15 MANUALLY4a04cb2filter env vars from .env filesab87178Bump version from "8.6.13" to "8.6.14" [skip ci]Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for storybook since your current version.
Updates
@babel/helpersfrom 7.24.0 to 7.29.2Release notes
Sourced from @babel/helpers's releases.
... (truncated)
Commits
37d5595v7.29.21c0a08d[7.x backport] fix: Properly handle await in finally (#17805)d7f4008v7.28.699dcba5chore: enable some ts-eslint rules (#17592)c1b55f6Useeslint.config.mts(#17573)35055e3v7.28.418d88b8Improve@babel/coretypings (#17471)ef155f5v7.28.3741cbd2chore: fix various typos across codebase (#17476)cac0ff4v7.28.2Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/helperssince your current version.Updates
js-yamlfrom 3.14.1 to 3.14.2Changelog
Sourced from js-yaml's changelog.
... (truncated)
Commits
9963d363.14.2 released10d3c8edist rebuild5278870fix prototype pollution in merge (<<) (#731)Updates
brace-expansionfrom 1.1.11 to 1.1.14Release notes
Sourced from brace-expansion's releases.
Commits
10c05fc1.1.141afa1b2Add opt-in { max } mitigation to v1 legacy line (#103)2fbb6a2Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)0d7652eBackport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)6c353ca1.1.137fd684fBackport fix for GHSA-f886-m6hf-6m8v (#95)44f33b41.1.12c460dbdpkg: publish on tag 1.xccb8ac6fmtc3c73c8Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)Updates
minimatchfrom 3.1.2 to 3.1.5Commits
7bba9783.1.5bd25942docs: add warning about ReDoS1a9c27cfix partial matching of globstar patterns1a2e0843.1.4ae24656update lockfileb100374limit recursion for **, improve perf considerably26ffeaalockfile update9eca892lock node version to 1400c323b3.1.330486b2update CI matrix and actionsRemoves
@tootallnate/onceUpdates
flattedfrom 3.2.9 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
handlebarsfrom 4.7.8 to 4.7.9Release notes
Sourced from handlebars's releases.
Changelog
Sourced from handlebars's changelog.
Commits
dce542cv4.7.98a41389Update release notes68d8df5Fix security issuesb2a0831Fix browser tests9f98c16Fix release script45443b4Revert "Improve partial indenting performance"8841a5fFix CI errors with lintinge0137c2fix: enable shell mode for spawn to resolve Windows EINVAL issuee914d60Improve rendering performance7de4b41Upgrade GitHub Actions checkout and setup-node on 4.x branchUpdates
lodashfrom 4.17.21 to 4.18.1Release notes
Sourced from lodash's releases.
Commits
cb0b9b9release(patch): bump main to 4.18.1 (#6177)75535f5chore: prune stale advisory refs (#6170)62e91bcdocs: remove n_ Node.js < 6 REPL note from README (#6165)59be2derelease(minor): bump to 4.18.0 (#6161)af63457fix: broken tests for _.template 879aaa91073a76fix: linting issues879aaa9fix: validate imports keys in _.templatefe8d32efix: block prototype pollution in baseUnset via constructor/prototype traversal18ba0a3refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)b819080ci: add dist sync validation workflow (#6137)Updates
picomatchfrom 2.3.1 to 2.3.2Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
... (truncated)
Commits
81cba8dPublish 2.3.2fc1f6b6Merge commit from forkeec17aeMerge commit from fork78f8ca4Merge pull request #156 from micromatch/backport-1443f4f10eMerge pull request #144 from Jason3S/jdent-object-propertiesUpdates
yamlfrom 1.10.2 to 1.10.3Commits
cfe8f041.10.37abcf45fix: Catch stack overflow during CST compositiona0252f8chore: Add rules avoiding processing of tests/json-test-suitea5e83b0style: Apply updates Prettier rulesb8ddca0chore: Refresh lockfile395f892ci: Use a different (working) submodule checkout6fd2720test-events: Add {} and [] indicators to flow maps & sequencesUpdates
qsfrom 6.13.0 to 6.15.1Changelog
Sourced from qs's changelog.
... (truncated)
Commits
3f5e1c5v6.15.1c85b67f[Fix]parse:parameterLimit: InfinitywiththrowOnLimitExceeded: trues...4dfa0f0[Deps] update@ljharb/eslint-configdbb05d7[Dev Deps] update@ljharb/eslint-config,iconv-liteb0cfe7c[Tests] increase coveraged9b4c66v6.15.0cb41a54[New]parse: addstrictMergeoption to wrap object/primitive conflicts in...88e1563[Fix]duplicatesoption should not apply to bracket notation keys9d441d2Merge backport release tags v6.0.6–v6.13.3 into main85cc8cav6.12.5Updates
rollupfrom 4.22.4 to 4.60.3Release notes
Sourced from rollup's releases.