build(deps): bump the npm_and_yarn group across 4 directories with 10 updates #8
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [semver](https://github.com/npm/node-semver) | `6.3.1` | `7.6.3` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `6.2.7` | `7.5.8` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `5.28.4` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | | [web3](https://github.com/ChainSafe/web3.js) | `0.20.7` | `1.5.3` | Bumps the npm_and_yarn group with 7 updates in the /docs directory: | Package | From | To | | --- | --- | --- | | [undici](https://github.com/nodejs/undici) | `5.26.2` | `5.28.4` | | [ws](https://github.com/websockets/ws) | `7.5.7` | `7.5.10` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.4` | `6.5.7` | | [express](https://github.com/expressjs/express) | `4.17.3` | `4.19.2` | | [tar](https://github.com/isaacs/node-tar) | `6.1.11` | `6.2.1` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` | | [next](https://github.com/vercel/next.js) | `12.3.4` | `14.1.1` | Bumps the npm_and_yarn group with 1 update in the /packages/hardhat-truffle4 directory: [web3](https://github.com/ChainSafe/web3.js). Bumps the npm_and_yarn group with 1 update in the /packages/hardhat-web3-legacy directory: [web3](https://github.com/ChainSafe/web3.js). Updates `semver` from 6.3.1 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.1...v7.6.3) Updates `@types/semver` from 6.2.7 to 7.5.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `undici` from 5.28.3 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `web3` from 0.20.7 to 1.5.3 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](https://github.com/ChainSafe/web3.js/commits/v1.5.3) Updates `undici` from 5.26.2 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v5.28.4) Updates `ws` from 7.5.7 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `elliptic` from 6.5.4 to 6.5.7 - [Commits](indutny/elliptic@v6.5.4...v6.5.7) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `tar` from 6.1.11 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v6.2.1) Updates `tough-cookie` from 4.0.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4) Updates `next` from 12.3.4 to 14.1.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v12.3.4...v14.1.1) Updates `web3` from 0.20.7 to 4.12.1 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](https://github.com/ChainSafe/web3.js/commits/v1.5.3) Updates `web3` from 0.20.7 to 4.12.1 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/4.x/CHANGELOG.md) - [Commits](https://github.com/ChainSafe/web3.js/commits/v1.5.3) --- updated-dependencies: - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@types/semver" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: web3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: undici dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: web3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: web3 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 5 updates in the / directory:
6.3.17.6.36.2.77.5.85.28.35.28.47.5.97.5.100.20.71.5.3Bumps the npm_and_yarn group with 7 updates in the /docs directory:
5.26.25.28.47.5.77.5.106.5.46.5.74.17.34.19.26.1.116.2.14.0.04.1.412.3.414.1.1Bumps the npm_and_yarn group with 1 update in the /packages/hardhat-truffle4 directory: web3.
Bumps the npm_and_yarn group with 1 update in the /packages/hardhat-web3-legacy directory: web3.
Updates
semverfrom 6.3.1 to 7.6.3Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
0a12d6cchore: release 7.6.3 (#720)73a3d79fix: optimize Range parsing and formatting (#726)2975ecedocs: fix extra backtick typo (#719)eb1380bchore: release 7.6.2 (#714)6466ba9fix(lru): use map.delete() directly (#713)d777418chore: release 7.6.1 (#706)988a8dedeps: uninstalllru-cache(#709)5feeb7fchore: postinstall for dependabot template-oss PRdd09b60chore: bump@npmcli/template-ossto 4.22.0c570a34fix(linting): no-unused-varsUpdates
@types/semverfrom 6.2.7 to 7.5.8Commits
Updates
undicifrom 5.28.3 to 5.28.4Release notes
Sourced from undici's releases.
Commits
fb98306Bumped v5.28.42b39440Merge pull request from GHSA-9qxr-qj54-h67264e3402Merge pull request from GHSA-m4v8-wqvr-p9f7723c4e7Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54bskip failing test due to Node.js changesUpdates
wsfrom 7.5.9 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
web3from 0.20.7 to 1.5.3Release notes
Sourced from web3's releases.
Changelog
Sourced from web3's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by spacesailor, a new releaser for web3 since your current version.
Updates
undicifrom 5.26.2 to 5.28.4Release notes
Sourced from undici's releases.
Commits
fb98306Bumped v5.28.42b39440Merge pull request from GHSA-9qxr-qj54-h67264e3402Merge pull request from GHSA-m4v8-wqvr-p9f7723c4e7Revert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54bskip failing test due to Node.js changesUpdates
wsfrom 7.5.7 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
ellipticfrom 6.5.4 to 6.5.7Commits
3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from fork75700786.5.5206da2elib: lint0a78e03[Fix] restore node < 4 compatUpdates
expressfrom 4.17.3 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
04bc6274.19.2da4d763Improved fix for open redirect allow list bypass4f0f6cc4.19.1a003cfaAllow passing non-strings to res.location with new encoding handling checks f...a1fa90ffixed un-edited version in history.md for 4.19.011f2b1dbuild: fix build due to inconsistent supertest behavior in older versions084e3654.19.00867302Prevent open redirect allow list bypass due to encodeurl567c9c6Add note on how to update docs for new release (#5541)69a4cf2deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
tarfrom 6.1.11 to 6.2.1Release notes
Sourced from tar's releases.
Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
tough-cookiefrom 4.0.0 to 4.1.4Release notes
Sourced from tough-cookie's releases.
... (truncated)
Commits
cacbc37Bump version to 4.1.4a48fb3aAdd tests for url validation50e69bfMerge pull request #261 from postmanlabs/fix/url-string-validation1253d58Merge pull request #409 from corvidism/validators-to-string238367eAdd local alias fortoString4ff4d294.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)12d4747Prevent prototype pollution in cookie memstore (#283)f06b72dFix documentation for store.findCookies, missing allowSpecialUseDomain proper...cf6debdFix incorrect string validation for URLb1a8898fix: allow set cookies with localhost (#253)Maintainer changes
This version was pushed to npm by ccasey, a new releaser for tough-cookie since your current version.
Updates
nextfrom 12.3.4 to 14.1.1Commits
5f59ee5v14.1.1f48b90beven more7f789f4more timeoutab71c4cupdate timeout75f60d9update trigger release workflow74b3f0fServer Action tests (#62655)a6946b6Backport metadata fixes (#62663)4002f4bFix draft mode invariant (#62121)7dbf6f8fix: babel usage with next/image (#61835)3efc842Fix next/server apit push alias for ESM pkg (#61721)Updates
web3from 0.20.7 to 4.12.1Release notes
Sourced from web3's releases.
Changelog
Sourced from web3's changelog.
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by spacesailor, a new releaser for web3 since your current version.
Updates
web3from 0.20.7 to 4.12.1Release notes
Sourced from web3's releases.
Changelog
Sourced from web3's changelog.