build(deps): bump the npm_and_yarn group across 1 directory with 57 updates by dependabot[bot] · Pull Request #3 · thehashrocket/angular-cli

dependabot · 2024-06-11T08:45:33Z

Bumps the npm_and_yarn group with 47 updates in the / directory:

Package	From	To
loader-utils	`1.1.0`	`1.4.2`
lodash	`4.17.4`	`4.17.21`
semver	`5.4.1`	`5.7.2`
webpack-dev-middleware	`1.12.0`	`5.3.4`
@angular/core	`4.3.5`	`10.2.5`
express	`4.15.4`	`4.19.2`
minimist	`1.2.0`	`1.2.6`
request	`2.81.0`	`2.88.2`
@types/request	`2.0.1`	`2.48.12`
tar	`3.2.0`	`6.2.1`
tree-kill	`1.1.0`	`1.2.2`
node-sass	`4.5.3`	`7.0.0`
ansi-html	`0.0.7`	`removed`
webpack-dev-server	`2.5.1`	`5.0.4`
async	`2.5.0`	`2.6.4`
braces	`1.8.5`	`3.0.3`
watchpack	`1.4.0`	`1.7.5`
browserify-sign	`4.0.4`	`4.2.3`
color-string	`0.3.0`	`removed`
css-loader	`0.28.5`	`7.1.2`
cssnano	`3.10.0`	`7.0.2`
css-what	`2.1.0`	`6.1.0`
elliptic	`6.4.0`	`6.5.5`
es5-ext	`0.10.27`	`0.10.64`
fsevents	`1.1.2`	`2.3.3`
handlebars	`4.0.10`	`4.7.8`
postcss-url	`5.1.2`	`10.1.3`
hawk	`3.1.3`	`removed`
request	`2.81.0`	`2.88.2`
fsevents	`1.1.2`	`2.3.3`
hosted-git-info	`2.5.0`	`2.8.9`
html-minifier	`3.5.3`	`removed`
html-webpack-plugin	`2.30.1`	`5.6.0`
is-my-json-valid	`2.16.0`	`2.20.6`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.0`	`1.4.2`
json5	`0.5.1`	`removed`
loader-utils	`1.1.0`	`1.4.2`
istanbul-instrumenter-loader	`2.0.0`	`3.0.1`
source-map-loader	`0.2.1`	`0.2.4`
webpack	`3.4.1`	`5.91.0`
minimatch	`3.0.4`	`3.0.8`
path-parse	`1.0.5`	`1.0.7`
postcss	`5.2.17`	`8.4.38`
autoprefixer	`6.7.7`	`10.4.19`
postcss-loader	`1.3.3`	`8.1.1`
shell-quote	`1.6.1`	`1.8.1`
shelljs	`0.7.8`	`removed`
eslint	`3.19.0`	`9.4.0`
trim-off-newlines	`1.0.1`	`1.0.3`

Updates loader-utils from 1.1.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

v1.4.0

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Commits

331ad50 chore(release): 1.4.2
17cbf8f fix: ReDoS problem (#226)
8f082b3 chore(release): 1.4.1
4504e34 fix: security problem (#220)
d95b8b5 chore(release): 1.4.0
cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)
06d36cf chore(release): 1.3.0
469eeba feat: support the [query] template for the interpolatedName method (#162)
909c99d chore: funding.yml config and CI fix (#159)
b5b74f0 Set up CI with Azure Pipelines
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.

Updates lodash from 4.17.4 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
ded9bc6 Bump to v4.17.20.
63150ef Documentation fixes.
00f0f62 test.js: Remove trailing comma.
846e434 Temporarily use a custom fork of lodash-cli.
5d046f3 Re-enable Travis tests on 4.17 branch.
aa816b3 Remove /npm-package.
d7fbc52 Bump to v4.17.19
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.

Updates semver from 5.4.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
c83c18c 5.7.1
956e228 Correct typo in README
8055dda 5.7.0
604e73d auto-publishing scripts
bed01e2 remove the nomin comments, since we don't minify any more anyway
9cb68f1 document parse method
38d42ca 5.7 changelog
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates webpack-dev-middleware from 1.12.0 to 5.3.4

Release notes

Sourced from webpack-dev-middleware's releases.

v5.3.4

5.3.4 (2024-03-20)

Bug Fixes

security: do not allow to read files above (#1779) (189c4ac)

v5.3.3

5.3.3 (2022-05-18)

Bug Fixes

types for Request and Response (#1271) (eeb8aa8)

v5.3.2

5.3.2 (2022-05-17)

Bug Fixes

node types (#1195) (d68ab36)

compatibility with Node.js 18

v5.3.1

5.3.1 (2022-02-01)

Bug Fixes

types (#1187) (0f82e1d)

v5.3.0

5.3.0 (2021-12-16)

Features

added types (a2fa77f)

removed cjs wrapper (#1146) (b6d53d3)

v5.2.2

5.2.2 (2021-11-17)

Chore

update schema-utils package to 4.0.0 version

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

5.3.4 (2024-03-20)

Bug Fixes

security: do not allow to read files above (#1779) (189c4ac)

5.3.3 (2022-05-18)

Bug Fixes

types for Request and Response (#1271) (eeb8aa8)

5.3.2 (2022-05-17)

Bug Fixes

node types (#1195) (d68ab36)

5.3.1 (2022-02-01)

Bug Fixes

types (#1187) (0f82e1d)

5.3.0 (2021-12-16)

Features

added types (a2fa77f)

removed cjs wrapper (#1146) (b6d53d3)

5.2.2 (2021-11-17)

Chore

update schema-utils package to 4.0.0 version

5.2.1 (2021-09-25)

internal release, no visible changes and features

5.2.0 (2021-09-24)

... (truncated)

Commits

86071ea chore(release): 5.3.4
189c4ac fix(security): do not allow to read files above (#1779)
f3c62b8 chore(release): 5.3.3
eeb8aa8 fix: types for Request and Response (#1271)
1a45388 chore(release): 5.3.2
b8fb945 chore(deps): memfs force update (#1269)
f88067d chore: update deps and ci (#1260)
7186318 chore(deps-dev): bump @commitlint/cli
57c50ef ci: update checkout, setup-node, and codecov actions (#1267)
840146a chore(deps-dev): bump @babel/preset-env
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-dev-middleware since your current version.

Updates @angular/core from 4.3.5 to 10.2.5

Changelog

Sourced from @angular/core's changelog.

10.2.5 (2021-04-14)

Bug Fixes

compiler-cli: show a more specific error for Ivy NgModules (#41534) (#41598) (f630f33)

core: fix possible XSS attack in development through SSR (#40525) (ba8da74)

10.2.4 (2020-12-17)

Bug Fixes

core: fix possible XSS attack in development through SSR. (#40152) (0b8e3d5)

core: set ngDevMode to false when calling enableProdMode() (#40160) (90570c0)

10.2.3 (2020-11-09)

Bug Fixes

compiler: ensure that i18n message-parts have the correct source-span (#39589) (e67a331)

compiler: skipping leading whitespace should not break placeholder source-spans (#39589) (2b684b7), closes #39195

compiler-cli: avoid duplicate diagnostics about unknown pipes (#39517) (861e4fa)

compiler-cli: do not drop non-Angular decorators when downleveling (#39577) (1c6cf8a), closes #39574

10.2.2 (2020-11-04)

Bug Fixes

compiler-cli: report missing pipes when fullTemplateTypeCheck is disabled (#39320) (71d0063), closes #38195

core: markDirty() should only mark flags when really scheduling tick. (#39316) (8c82106), closes #39296

router: Ensure all outlets are used when commands have a prefix (#39456) (85d5242)

Performance Improvements

core: do not recurse into modules that have already been registered (#39514) (812355c), closes #39487

... (truncated)

Commits

ba8da74 fix(core): fix possible XSS attack in development through SSR (#40525)
90570c0 fix(core): set ngDevMode to false when calling enableProdMode() (#40160)
0b8e3d5 fix(core): fix possible XSS attack in development through SSR. (#40152)
1aee8b3 refactor(compiler): store the fullStart location on ParseSourceSpans (#39...
812355c perf(core): do not recurse into modules that have already been registered (#3...
8f36c21 refactor(router): Small refactor of createUrlTree and extra tests (#39456)
90acb91 docs: tView.preOrderHooks and tView.preOrderCheckHooks docs update (#39497)
8c82106 fix(core): markDirty() should only mark flags when really scheduling tick. (#...
0b37249 docs(core): update a typo in the comment of ngZoneEventCoalescing (#39423)
3b779a1 docs: fix typo in initializeInputAndOutputAliases docstring (#39438)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @angular/core since your current version.

Updates express from 4.15.4 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

4.18.1 / 2022-04-29

Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

Add "root" option to res.download

Allow options without filename in res.download

Deprecate string and non-integer arguments to res.status

Fix behavior of null/undefined as maxAge in res.cookie

Fix handling very large stacks of sync middleware

Ignore Object.prototype values in settings through app.set/app.get

... (truncated)

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates minimist from 1.2.0 to 1.2.6

Changelog

Sourced from minimist's changelog.

v1.2.6 - 2022-03-21

Commits

test from prototype pollution PR bc8ecee

isConstructorOrProto adapted from PR c2b9819

security notice for additional prototype pollution issue ef88b93

v1.2.5 - 2020-03-12

v1.2.4 - 2020-03-11

Commits

security notice 4cf1354

additional test for constructor prototype pollution 1043d21

v1.2.3 - 2020-03-10

Commits

more failing proto pollution tests 13c01a5

even more aggressive checks for protocol pollution 38a4d1c

v1.2.2 - 2020-03-10

Commits

failing test for protocol pollution 0efed03

cleanup 67d3722

console.dir -> console.log 47acf72

don't assign onto proto 63e7ed0

v1.2.1 - 2020-03-10

Merged

move the opts['--'] example back where it belongs [#63](https://github.com/minimistjs/minimist/issues/63)

Commits

add test 6be5dae

fix bad boolean regexp ac3fc79

Commits

7efb22a 1.2.6
ef88b93 security notice for additional prototype pollution issue
c2b9819 isConstructorOrProto adapted from PR
bc8ecee test from prototype pollution PR
aeb3e27 1.2.5
278677b 1.2.4
4cf1354 security notice
1043d21 additional test for constructor prototype pollution
6457d74 1.2.3
38a4d1c even more aggressive checks for protocol pollution
Additional commits viewable in compare view

Updates request from 2.81.0 to 2.88.2

Changelog

Sourced from request's changelog.

Change Log

v2.88.0 (2018/08/10)

#2996 fix(uuid): import versioned uuid (@kwonoj)

#2994 Update to oauth-sign 0.9.0 (@dlecocq)

#2993 Fix header tests (@simov)

#2904 #515, #2894 Strip port suffix from Host header if the protocol is known. (#2904) (@paambaati)

#2791 Improve AWS SigV4 support. (#2791) (@vikhyat)

#2977 Update test certificates (@simov)

v2.87.0 (2018/05/21)

#2943 Replace hawk dependency with a local implemenation (#2943) (@hueniverse)

v2.86.0 (2018/05/15)

#2885 Remove redundant code (for Node.js 0.9.4 and below) and dependency (@ChALkeR)

#2942 Make Test GREEN Again! (@simov)

#2923 Alterations for failing CI tests (@gareth-robinson)

v2.85.0 (2018/03/12)

#2880 Revert "Update hawk to 7.0.7 (#2880)" (@simov)

v2.84.0 (2018/03/12)

#2793 Fixed calculation of oauth_body_hash, issue #2792 (@dvishniakov)

#2880 Update hawk to 7.0.7 (#2880) (@kornel-kedzierski)

v2.83.0 (2017/09/27)

#2776 Updating tough-cookie due to security fix. (#2776) (@karlnorling)

v2.82.0 (2017/09/19)

#2703 Add Node.js v8 to Travis CI (@ryysud)

#2751 Update of hawk and qs to latest version (#2751) (@Olivier-Moreau)

#2658 Fixed some text in README.md (#2658) (@Marketionist)

#2635 chore(package): update aws-sign2 to version 0.7.0 (#2635) (@greenkeeperio-bot)

#2641 Update README to simplify & update convenience methods (#2641) (@FredKSchott)

#2541 Add convenience method for HTTP OPTIONS (#2541) (@jamesseanwright)

#2605 Add promise support section to README (#2605) (@FredKSchott)

#2579 refactor(lint): replace eslint with standard (#2579) (@ahmadnassri)

#2598 Update codecov to version 2.0.2 🚀 (@greenkeeperio-bot)

#2590 Adds test-timing keepAlive test (@nicjansma)

#2589 fix tabulation on request example README.MD (@odykyi)

#2594 chore(dependencies): har-validator to 5.x [removes babel dep] (@ahmadnassri)

Commits

See full diff in compare view

Updates @types/request from 2.0.1 to 2.48.12

Commits

See full diff in compare view

Updates tar from 3.2.0 to 6.2.1

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

Changelog

Sourced from tar's changelog.

Changelog

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

Add support for brotli compression

Add maxDepth option to prevent extraction into excessively deep folders.

6.1

remove dead link to benchmarks (#313) (@yetzt)

add examples/explanation of using tar.t (@isaacs)

ensure close event is emited after stream has ended (@webark)

replace deprecated String.prototype.substr() (@CommanderRoot, @lukekarrys)

6.0

Drop support for node 6 and 8

fix symlinks and hardlinks on windows being packed with \-style path targets

... (truncated)

Commits

bef7b1e 6.2.1
fe8cd57 prevent extraction in excessively deep subfolders
fe7ebfd remove security.md
5bc9d40 6.2.0
fe1ef5e changelog 6.2
e483220 get rid of npm lint stuff
689928a ci that works outside of npm org
db6f539 file inference improvements for .tbr and .tgz
336fa8f refactor: dry and other pr comments
eeba222 chore: lint fixes
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Updates tree-kill from 1.1.0 to 1.2.2

Release notes

Sourced from tree-kill's releases.

v1.2.1

Changelog:

add missing LICENSE file

fix TypeScript definitions

Commits

cb47838 1.2.2
deee138 fix: handle sanitising better, add tests
ff73dbf fix: sanitise pid parameter (#31)
3b5b8fe update Changelog
d408f04 1.2.1
32624c1 Merge pull request #24 from LinusU/patch-1
c784c3d Add callback-as-second-argument support to typings
6d6843c Merge pull request #21 from orodley/patch-1
d515c80 Add LICENSE file

…pdates Bumps the npm_and_yarn group with 47 updates in the / directory: | Package | From | To | | --- | --- | --- | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.4` | `4.17.21` | | [semver](https://github.com/npm/node-semver) | `5.4.1` | `5.7.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `1.12.0` | `5.3.4` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `4.3.5` | `10.2.5` | | [express](https://github.com/expressjs/express) | `4.15.4` | `4.19.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.6` | | [request](https://github.com/request/request) | `2.81.0` | `2.88.2` | | [@types/request](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/request) | `2.0.1` | `2.48.12` | | [tar](https://github.com/isaacs/node-tar) | `3.2.0` | `6.2.1` | | [tree-kill](https://github.com/pkrumins/node-tree-kill) | `1.1.0` | `1.2.2` | | [node-sass](https://github.com/sass/node-sass) | `4.5.3` | `7.0.0` | | [ansi-html](https://github.com/Tjatse/ansi-html) | `0.0.7` | `removed` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `2.5.1` | `5.0.4` | | [async](https://github.com/caolan/async) | `2.5.0` | `2.6.4` | | [braces](https://github.com/micromatch/braces) | `1.8.5` | `3.0.3` | | [watchpack](https://github.com/webpack/watchpack) | `1.4.0` | `1.7.5` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [color-string](https://github.com/Qix-/color-string) | `0.3.0` | `removed` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `0.28.5` | `7.1.2` | | [cssnano](https://github.com/cssnano/cssnano) | `3.10.0` | `7.0.2` | | [css-what](https://github.com/fb55/css-what) | `2.1.0` | `6.1.0` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.0` | `6.5.5` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.27` | `0.10.64` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.2` | `2.3.3` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.10` | `4.7.8` | | [postcss-url](https://github.com/postcss/postcss-url) | `5.1.2` | `10.1.3` | | [hawk](https://github.com/mozilla/hawk) | `3.1.3` | `removed` | | [request](https://github.com/request/request) | `2.81.0` | `2.88.2` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.2` | `2.3.3` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.5.0` | `2.8.9` | | [html-minifier](https://github.com/kangax/html-minifier) | `3.5.3` | `removed` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `2.30.1` | `5.6.0` | | [is-my-json-valid](https://github.com/mafintosh/is-my-json-valid) | `2.16.0` | `2.20.6` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.0` | `1.4.2` | | [json5](https://github.com/json5/json5) | `0.5.1` | `removed` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [istanbul-instrumenter-loader](https://github.com/webpack-contrib/istanbul-instrumenter-loader) | `2.0.0` | `3.0.1` | | [source-map-loader](https://github.com/webpack-contrib/source-map-loader) | `0.2.1` | `0.2.4` | | [webpack](https://github.com/webpack/webpack) | `3.4.1` | `5.91.0` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.8` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.5` | `1.0.7` | | [postcss](https://github.com/postcss/postcss) | `5.2.17` | `8.4.38` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `6.7.7` | `10.4.19` | | [postcss-loader](https://github.com/webpack-contrib/postcss-loader) | `1.3.3` | `8.1.1` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.6.1` | `1.8.1` | | [shelljs](https://github.com/shelljs/shelljs) | `0.7.8` | `removed` | | [eslint](https://github.com/eslint/eslint) | `3.19.0` | `9.4.0` | | [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) | `1.0.1` | `1.0.3` | Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `lodash` from 4.17.4 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.4...4.17.21) Updates `semver` from 5.4.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.4.1...v5.7.2) Updates `webpack-dev-middleware` from 1.12.0 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v1.12.0...v5.3.4) Updates `@angular/core` from 4.3.5 to 10.2.5 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/10.2.5/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/10.2.5/packages/core) Updates `express` from 4.15.4 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.15.4...4.19.2) Updates `minimist` from 1.2.0 to 1.2.6 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.6) Updates `request` from 2.81.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `@types/request` from 2.0.1 to 2.48.12 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/request) Updates `tar` from 3.2.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v3.2.0...v6.2.1) Updates `tree-kill` from 1.1.0 to 1.2.2 - [Release notes](https://github.com/pkrumins/node-tree-kill/releases) - [Commits](pkrumins/node-tree-kill@v1.1.0...v1.2.2) Updates `node-sass` from 4.5.3 to 7.0.0 - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](sass/node-sass@v4.5.3...v7.0.0) Removes `ansi-html` Updates `webpack-dev-server` from 2.5.1 to 5.0.4 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v2.5.1...v5.0.4) Updates `async` from 2.5.0 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.5.0...v2.6.4) Updates `braces` from 1.8.5 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@1.8.5...3.0.3) Updates `watchpack` from 1.4.0 to 1.7.5 - [Release notes](https://github.com/webpack/watchpack/releases) - [Commits](webpack/watchpack@v1.4.0...v1.7.5) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `chownr` from 1.0.1 to 2.0.0 - [Commits](isaacs/chownr@v1.0.1...v2.0.0) Removes `color-string` Updates `css-loader` from 0.28.5 to 7.1.2 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack/css-loader@v0.28.5...v7.1.2) Updates `cssnano` from 3.10.0 to 7.0.2 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/v3.10.0...cssnano@7.0.2) Updates `css-what` from 2.1.0 to 6.1.0 - [Release notes](https://github.com/fb55/css-what/releases) - [Commits](fb55/css-what@v2.1.0...v6.1.0) Updates `dns-packet` from 1.2.2 to 5.6.1 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.2.2...v5.6.1) Updates `elliptic` from 6.4.0 to 6.5.5 - [Commits](indutny/elliptic@v6.4.0...v6.5.5) Updates `es5-ext` from 0.10.27 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.27...v0.10.64) Updates `fsevents` from 1.1.2 to 2.3.3 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.2...v2.3.3) Updates `handlebars` from 4.0.10 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.10...v4.7.8) Updates `postcss-url` from 5.1.2 to 10.1.3 - [Release notes](https://github.com/postcss/postcss-url/releases) - [Changelog](https://github.com/postcss/postcss-url/blob/master/CHANGELOG.md) - [Commits](postcss/postcss-url@5.1.2...10.1.3) Removes `hawk` Updates `request` from 2.81.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `fsevents` from 1.1.2 to 2.3.3 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.2...v2.3.3) Updates `hosted-git-info` from 2.5.0 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.5.0...v2.8.9) Removes `html-minifier` Updates `html-webpack-plugin` from 2.30.1 to 5.6.0 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v2.30.1...v5.6.0) Updates `http-proxy` from 1.16.2 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.16.2...1.18.1) Updates `is-my-json-valid` from 2.16.0 to 2.20.6 - [Commits](mafintosh/is-my-json-valid@v2.16.0...v2.20.6) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.0 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.0...v1.4.2) Removes `json5` Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `istanbul-instrumenter-loader` from 2.0.0 to 3.0.1 - [Release notes](https://github.com/webpack-contrib/istanbul-instrumenter-loader/releases) - [Changelog](https://github.com/webpack-contrib/istanbul-instrumenter-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/istanbul-instrumenter-loader@v2.0.0...v3.0.1) Updates `source-map-loader` from 0.2.1 to 0.2.4 - [Release notes](https://github.com/webpack-contrib/source-map-loader/releases) - [Changelog](https://github.com/webpack-contrib/source-map-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/source-map-loader@v0.2.1...v0.2.4) Updates `webpack` from 3.4.1 to 5.91.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v3.4.1...v5.91.0) Updates `minimatch` from 3.0.4 to 3.0.8 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.8) Updates `node-forge` from 0.6.33 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.6.33...v1.3.1) Updates `nth-check` from 1.0.1 to 2.1.1 - [Release notes](https://github.com/fb55/nth-check/releases) - [Commits](https://github.com/fb55/nth-check/commits/v2.1.1) Updates `path-parse` from 1.0.5 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `postcss` from 5.2.17 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@5.2.17...8.4.38) Updates `autoprefixer` from 6.7.7 to 10.4.19 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@6.7.7...10.4.19) Updates `postcss-loader` from 1.3.3 to 8.1.1 - [Release notes](https://github.com/webpack-contrib/postcss-loader/releases) - [Changelog](https://github.com/webpack-contrib/postcss-loader/blob/master/CHANGELOG.md) - [Commits](webpack/postcss-loader@1.3.3...v8.1.1) Updates `qs` from 6.4.0 to 6.4.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.4.0...v6.4.1) Updates `shell-quote` from 1.6.1 to 1.8.1 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.8.1) Removes `shelljs` Updates `eslint` from 3.19.0 to 9.4.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v3.19.0...v9.4.0) Updates `sockjs` from 0.3.18 to 0.3.24 - [Release notes](https://github.com/sockjs/sockjs-node/releases) - [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog) - [Commits](sockjs/sockjs-node@v0.3.18...v0.3.24) Updates `tough-cookie` from 2.3.2 to 2.3.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.3.2...v2.3.4) Updates `trim-off-newlines` from 1.0.1 to 1.0.3 - [Commits](stevemao/trim-off-newlines@v1.0.1...v1.0.3) Updates `y18n` from 3.2.1 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...y18n-v4.0.3) Updates `yargs-parser` from 4.2.1 to 13.1.2 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](https://github.com/yargs/yargs-parser/commits) --- updated-dependencies: - dependency-name: loader-utils dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: request dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@types/request" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tar dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: tree-kill dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: node-sass dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ansi-html dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: watchpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: color-string dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: css-loader dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: cssnano dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: css-what dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss-url dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: hawk dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: request dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: html-minifier dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: html-webpack-plugin dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: http-proxy dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: is-my-json-valid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: istanbul-instrumenter-loader dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: source-map-loader dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nth-check dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: autoprefixer dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss-loader dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shelljs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eslint dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: sockjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: trim-off-newlines dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 11, 2024

dependabot bot mentioned this pull request Jun 11, 2024

build(deps): bump the npm_and_yarn group across 1 directory with 57 updates #1

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 1 directory with 57 updates#3

build(deps): bump the npm_and_yarn group across 1 directory with 57 updates#3
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-802e30ec50

dependabot bot commented on behalf of github Jun 11, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jun 11, 2024

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

v1.4.0

1.4.0 (2020-02-19)

Features

v1.3.0

1.3.0 (2020-02-19)

Features

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

1.4.2 (2022-11-11)

Bug Fixes

1.4.1 (2022-11-07)

Bug Fixes

1.4.0 (2020-02-19)

Features

1.3.0 (2020-02-19)

Features

1.2.3 (2018-12-27)

Bug Fixes

1.2.2 (2018-12-27)

Bug Fixes

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v5.3.4

5.3.4 (2024-03-20)

Bug Fixes

v5.3.3

5.3.3 (2022-05-18)

Bug Fixes

v5.3.2

5.3.2 (2022-05-17)

Bug Fixes

v5.3.1

5.3.1 (2022-02-01)

Bug Fixes

v5.3.0

5.3.0 (2021-12-16)

Features

v5.2.2

5.2.2 (2021-11-17)

Chore

5.3.4 (2024-03-20)

Bug Fixes

5.3.3 (2022-05-18)

Bug Fixes

5.3.2 (2022-05-17)

Bug Fixes

5.3.1 (2022-02-01)

Bug Fixes

5.3.0 (2021-12-16)

Features

5.2.2 (2021-11-17)

Chore

5.2.1 (2021-09-25)

5.2.0 (2021-09-24)

10.2.5 (2021-04-14)

Bug Fixes

10.2.4 (2020-12-17)