chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates #1427
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…dates Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.6.8` | `1.7.0` | | [pug](https://github.com/pugjs/pug) | `3.0.2` | `3.0.3` | | [undici](https://github.com/nodejs/undici) | `5.28.3` | `6.11.1` | | [firebase](https://github.com/firebase/firebase-js-sdk) | `10.10.0` | `10.12.4` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `17.3.2` | `17.3.8` | | [ejs](https://github.com/mde/ejs) | `3.1.9` | `3.1.10` | | [ws](https://github.com/websockets/ws) | `5.2.3` | `5.2.4` | Updates `axios` from 1.6.8 to 1.7.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.8...v1.7.0) Updates `pug` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/pugjs/pug/releases) - [Commits](https://github.com/pugjs/pug/compare/pug@3.0.2...pug@3.0.3) Updates `undici` from 5.28.3 to 6.11.1 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.3...v6.11.1) Updates `firebase` from 10.10.0 to 10.12.4 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@10.10.0...firebase@10.12.4) Updates `@angular-devkit/build-angular` from 17.3.2 to 17.3.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@17.3.2...17.3.8) Updates `@grpc/grpc-js` from 1.9.14 to 1.9.15 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.14...@grpc/grpc-js@1.9.15) Updates `ejs` from 3.1.9 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.9...v3.1.10) Updates `ws` from 5.2.3 to 5.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@5.2.3...5.2.4) Updates `vite` from 5.1.5 to 5.1.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.1.7/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.1.7/packages/vite) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: pug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: firebase dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
julianpoy
deleted the
dependabot/npm_and_yarn/npm_and_yarn-44a9a7b068
branch
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the / directory:
1.6.81.7.03.0.23.0.35.28.36.11.110.10.010.12.417.3.217.3.83.1.93.1.105.2.35.2.4Updates
axiosfrom 1.6.8 to 1.7.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
3041c61[Release] v1.7.0 (#6408)18b13cbchore(docs): add fetch adapter docs; (#6407)e62099bfix(fetch): fixed a possible memory leak in the AbortController for the strea...b49aa8echore(release): v1.7.0-beta.2 (#6403)d57f03achore(ci): bump create-pull-request version to fix a bug; (#6405)097b0d1chore(ci): add tag resolution for npm releases based on package version; (#6404)870e0a7fix(fetch): fix headers getting from a stream response; (#6401)95a3e8efix(fetch): fix & optimize progress capturing for cases when the request data...ad3174afix(fetch): capitalize HTTP method names; (#6395)b9f4848chore(release): v1.7.0-beta.1 (#6383)Updates
pugfrom 3.0.2 to 3.0.3Release notes
Sourced from pug's releases.
Commits
32acfe8fix: ensure template names are valid identifiers (#3438)4767cafrefactor: convert pug-error to TypeScript (#3355)a724446chore: update character-parser (#3354)6cca8f7docs: fix GitHub format in README (#3335)Updates
undicifrom 5.28.3 to 6.11.1Release notes
Sourced from undici's releases.
... (truncated)
Commits
6df3c73Bumped v6.11.1c346b66Revert "fix: don't leak internal class (#3024)"d542b8cMerge pull request from GHSA-9qxr-qj54-h6726805746Merge pull request from GHSA-m4v8-wqvr-p9f7ee5f892Bumped v6.11.071a6d74Merge branch 'main' of github.com:nodejs/undici0f0f239fix: regexp pattern (#3041)31f9e67build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#3036)c8a43aefixup8b5e2c8fixupUpdates
firebasefrom 10.10.0 to 10.12.4Release notes
Sourced from firebase's releases.
... (truncated)
Commits
67ea4f7Version Packages (#8369)161c122Merge master into releasefd8bd4bDisable extraneous import errors on violating lines in auth tests (#8363)f58d48cUse safevalues to fix trusted types issues reported by tsec (#8301)4b4db85VertexAI: add support for mock responses versioning system (#8361)84fe880Remove .git (#8362)d752e80Upgrade firebase-admin and google/cloud-firestore in rules-unit-testing yarn ...9cd3c1eUpgrade setup-gcloud to v2 (#8286)52f8debVersion Packages (#8345)6d2775bMerge master into releaseUpdates
@angular-devkit/build-angularfrom 17.3.2 to 17.3.8Release notes
Sourced from
@angular-devkit/build-angular's releases.... (truncated)
Changelog
Sourced from
@angular-devkit/build-angular's changelog.... (truncated)
Commits
78bd6darelease: cut the v17.3.8 release4b6ba8dfix(@angular-devkit/schematics):SchematicTestRunner.runExternalSchematicf...3ada6ebfix(@angular/cli): clarify optional migration instructions during ng update4e05c4drelease: cut the v17.3.7 releasecd43c1frefactor(@schematics/angular): link for ignoring files998c720fix(@angular-devkit/build-angular): decode URL pathname decoding during SSG f...1ab1c6cfix(@angular-devkit/schematics): use web standard error check for Deno supportc6b82f6release: cut the v17.3.6 release6f1906fdocs: add explanation of how to set up a new NPM package in Wombatdcec597fix(@angular-devkit/build-angular): properly configure headers for media reso...Updates
@grpc/grpc-jsfrom 1.9.14 to 1.9.15Release notes
Sourced from
@grpc/grpc-js's releases.Commits
08b0422Merge pull request from GHSA-7v5v-9h63-cj86c75e048grpc-js: Bump to 1.9.15d5d62b4grpc-js: Avoid buffering significantly more than max_receive_message_size per...02d0344Merge pull request #2741 from sergiitk/backport-1.9-psm-interop-common-prod-t...cf14020Merge pull request #2729 from sergiitk/psm-interop-common-prod-testsda44229Merge pull request #2738 from murgatroid99/backport-1.9-grpc-js_linkify-it_fix5ae7c8cMerge pull request #2735 from murgatroid99/grpc-js_linkify-it_fixeed21baMerge pull request #2714 from sergiitk/backport-1.9-psm-interop-pkg-dev63763a4Merge pull request #2712 from sergiitk/psm-interop-pkg-devUpdates
ejsfrom 3.1.9 to 3.1.10Release notes
Sourced from ejs's releases.
Commits
d3f807dVersion 3.1.109ee26ddMocha TDDe469741Basic pollution protection715e950Merge pull request #756 from Jeffrey-mu/maincabe314Include advanced usage examples29b076cAdded header11503c7Merge branch 'main' of github.com:mde/ejs into main7690404Added security banner to READMEf47d7aeUpdate SECURITY.md828cea1Update SECURITY.mdUpdates
wsfrom 5.2.3 to 5.2.4Release notes
Sourced from ws's releases.
Commits
aa8fe0a[dist] 5.2.44abd8f6[security] Fix crash when the Upgrade header cannot be read (#2231)36a3f4d[lint] Add space before function parenthesesUpdates
vitefrom 5.1.5 to 5.1.7Changelog
Sourced from vite's changelog.
Commits
e710c2frelease: v5.1.75a056ddfix:fs.denywith globs with directories (#16250)6f7466erelease: v5.1.6a862ecbchore(deps): update all non-major dependencies (#16131)8403546fix: server middleware mode resolve (#16122)b6fb323fix: check for publicDir before checking if it is a parent directory (#16046)fd9de04fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#16124)f699194fix: handle function property extension in namespace import (#16113)0d2df52style(utils): remove null check (#16112)eef9da1fix(worker): throw error when circular worker import is detected and support ...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.