Bump the npm_and_yarn group across 3 directories with 13 updates #97

dependabot · 2024-06-18T15:03:23Z

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package	From	To
ejs	`3.1.7`	`3.1.10`
express	`4.18.1`	`4.19.2`
passport	`0.4.1`	`0.6.0`
ws	`7.5.7`	`7.5.10`
ajv	`5.5.2`	`6.12.6`
eslint	`4.19.1`	`9.5.0`
engine.io	`6.2.1`	`6.5.5`
socket.io	`4.5.0`	`4.7.5`

Bumps the npm_and_yarn group with 10 updates in the /dana-bot directory:

Package	From	To
ejs	`3.1.7`	`3.1.10`
express	`4.17.3`	`4.19.2`
passport	`0.2.2`	`0.6.0`
ws	`7.5.3`	`7.5.10`
ajv	`5.5.2`	`6.12.6`
eslint	`4.19.1`	`9.5.0`
engine.io	`6.2.1`	`6.5.5`
socket.io	`4.5.3`	`4.7.5`
node-forge	`0.10.0`	`1.3.1`
google-p12-pem	`3.1.0`	`3.1.4`

Bumps the npm_and_yarn group with 1 update in the /dana-websocket-client directory: ws.

Updates ejs from 3.1.7 to 3.1.10

Release notes

Sourced from ejs's releases.

v3.1.10

Version 3.1.10

v3.1.9

Version 3.1.9

v3.1.8

Version 3.1.8

Commits

d3f807d Version 3.1.10
9ee26dd Mocha TDD
e469741 Basic pollution protection
715e950 Merge pull request #756 from Jeffrey-mu/main
cabe314 Include advanced usage examples
29b076c Added header
11503c7 Merge branch 'main' of github.com:mde/ejs into main
7690404 Added security banner to README
f47d7ae Update SECURITY.md
828cea1 Update SECURITY.md
Additional commits viewable in compare view

Updates express from 4.18.1 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates passport from 0.4.1 to 0.6.0

Changelog

Sourced from passport's changelog.

[0.6.0] - 2022-05-20

Added

authenticate(), req#login, and req#logout accept a keepSessionInfo: true option to keep session information after regenerating the session.

Changed

req#login() and req#logout() regenerate the the session and clear session information by default.

req#logout() is now an asynchronous function and requires a callback function as the last argument.

Security

Improved robustness against session fixation attacks in cases where there is physical access to the same system or the application is susceptible to cross-site scripting (XSS).

[0.5.3] - 2022-05-16

Fixed

initialize() middleware extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions again, reverting change from 0.5.1.

[0.5.2] - 2021-12-16

Fixed

Introduced a compatibility layer for strategies that depend directly on passport@0.4.x or earlier (such as passport-azure-ad), which were broken by the removal of private variables in passport@0.5.1.

[0.5.1] - 2021-12-15

Added

Informative error message in session strategy if session support is not available.

Changed

authenticate() middleware, rather than initialize() middleware, extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions.

[0.5.0] - 2021-09-23

Changed

initialize() middleware extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions.

... (truncated)

Commits

c33067b 0.6.0
3052bb4 Update changelog.
42630cb Merge pull request #900 from jaredhanson/fix-fixation
8dd79fe Use utils-merge rather than Object.assign for compatibility.
4f6bd5b Change keepSessionData to keepSessionData.
46756e5 Silence verbose logging.
987b191 Add tests.
f8a175f Add tests.
29a90d6 No need to guard callback existence.
bfba8a1 Add tests.
Additional commits viewable in compare view

Updates ws from 7.5.7 to 7.5.10

Release notes

Sourced from ws's releases.

7.5.10

Bug fixes

Backported e55e5106 to the 7.x release line (22c28763).

7.5.9

Bug fixes

Backported bc8bd34e to the 7.x release line (0435e6e1).

7.5.8

Bug fixes

Backported 0fdcc0af to the 7.x release line (2758ed35).

Backported d68ba9e1 to the 7.x release line (dc1781bc).

Commits

d962d70 [dist] 7.5.10
22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
8a78f87 [dist] 7.5.9
0435e6e [security] Fix same host check for ws+unix: redirects
4271f07 [dist] 7.5.8
dc1781b [security] Drop sensitive headers when following insecure redirects
2758ed3 [fix] Abort the handshake if the Upgrade header is invalid
See full diff in compare view

Updates ajv from 5.5.2 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates eslint from 4.19.1 to 9.5.0

Release notes

Sourced from eslint's releases.

v9.5.0

Features

b2d256c feat: no-sparse-arrays report on "comma" instead of the whole array (#18579) (fisker Cheung)

Bug Fixes

6880286 fix: treat * as a universal pattern (#18586) (Milos Djermanovic)

7fbe211 fix: message template for all files ignored (#18564) (Milos Djermanovic)

469cb36 fix: Don't lint the same file multiple times (#18552) (Milos Djermanovic)

5cff638 fix: improve message for ignored files without a matching config (#18404) (Francesco Trotta)

Documentation

455f7fd docs: add section about including .gitignore files (#18590) (Milos Djermanovic)

721eafe docs: update info about universal files patterns (#18587) (Francesco Trotta)

8127127 docs: Update README (GitHub Actions Bot)

55c2a66 docs: Update README (GitHub Actions Bot)

eb76282 docs: Update README (GitHub Actions Bot)

ff6e96e docs: baseConfig and overrideConfig can be arrays (#18571) (Milos Djermanovic)

d2d83e0 docs: Add mention of eslint-transforms to v9 migration guide (#18566) (Nicholas C. Zakas)

9ce6832 docs: add callout box for unintuitive behavior (#18567) (Ben McCann)

b8db99c docs: Add VS Code info to config migration guide (#18555) (Nicholas C. Zakas)

518a35c docs: Mention config migrator (#18561) (Nicholas C. Zakas)

eb440fc docs: specifying files with arbitrary or no extension (#18539) (Francesco Trotta)

38c159e docs: Provide example of reading package.json for plugins meta (#18530) (Nicholas C. Zakas)

d16a659 docs: add link to migration guide for --ext CLI option (#18537) (Milos Djermanovic)

73408de docs: add link to configuration file docs before examples (#18535) (Milos Djermanovic)

Chores

f588160 chore: upgrade @eslint/js@9.5.0 (#18591) (Milos Djermanovic)

5890841 chore: package.json update for @eslint/js release (Jenkins)

e9f4ccd chore: remove unused eslint-disable directive (#18589) (Milos Djermanovic)

4b23ffd refactor: Move JS parsing logic into JS language (#18448) (Nicholas C. Zakas)

1495b93 chore: update WebdriverIO packages (#18558) (Christian Bromann)

cea7ede chore: add website donate link instead of opencollective (#18582) (Strek)

ec94880 chore: package.json update for eslint-config-eslint release (Jenkins)

6912586 chore: extract formatting rules into separate config (#18560) (Milos Djermanovic)

9738f7e ci: fix CLI flags for c8, raise thresholds (#18554) (Francesco Trotta)

c6de7bb chore: update dependency markdownlint-cli to ^0.41.0 (#18538) (renovate[bot])

2c8fd34 ci: pin @wdio/browser-runner v8.36.0 (#18540) (唯然)

v9.4.0

Features

89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)

Bug Fixes

f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)

7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)

389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)

70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

Documentation

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.5.0 - June 14, 2024

f588160 chore: upgrade @eslint/js@9.5.0 (#18591) (Milos Djermanovic)

5890841 chore: package.json update for @eslint/js release (Jenkins)

455f7fd docs: add section about including .gitignore files (#18590) (Milos Djermanovic)

e9f4ccd chore: remove unused eslint-disable directive (#18589) (Milos Djermanovic)

721eafe docs: update info about universal files patterns (#18587) (Francesco Trotta)

4b23ffd refactor: Move JS parsing logic into JS language (#18448) (Nicholas C. Zakas)

6880286 fix: treat * as a universal pattern (#18586) (Milos Djermanovic)

8127127 docs: Update README (GitHub Actions Bot)

b2d256c feat: no-sparse-arrays report on "comma" instead of the whole array (#18579) (fisker Cheung)

1495b93 chore: update WebdriverIO packages (#18558) (Christian Bromann)

cea7ede chore: add website donate link instead of opencollective (#18582) (Strek)

55c2a66 docs: Update README (GitHub Actions Bot)

eb76282 docs: Update README (GitHub Actions Bot)

ff6e96e docs: baseConfig and overrideConfig can be arrays (#18571) (Milos Djermanovic)

7fbe211 fix: message template for all files ignored (#18564) (Milos Djermanovic)

ec94880 chore: package.json update for eslint-config-eslint release (Jenkins)

d2d83e0 docs: Add mention of eslint-transforms to v9 migration guide (#18566) (Nicholas C. Zakas)

6912586 chore: extract formatting rules into separate config (#18560) (Milos Djermanovic)

9ce6832 docs: add callout box for unintuitive behavior (#18567) (Ben McCann)

b8db99c docs: Add VS Code info to config migration guide (#18555) (Nicholas C. Zakas)

518a35c docs: Mention config migrator (#18561) (Nicholas C. Zakas)

469cb36 fix: Don't lint the same file multiple times (#18552) (Milos Djermanovic)

9738f7e ci: fix CLI flags for c8, raise thresholds (#18554) (Francesco Trotta)

eb440fc docs: specifying files with arbitrary or no extension (#18539) (Francesco Trotta)

38c159e docs: Provide example of reading package.json for plugins meta (#18530) (Nicholas C. Zakas)

c6de7bb chore: update dependency markdownlint-cli to ^0.41.0 (#18538) (renovate[bot])

5cff638 fix: improve message for ignored files without a matching config (#18404) (Francesco Trotta)

d16a659 docs: add link to migration guide for --ext CLI option (#18537) (Milos Djermanovic)

73408de docs: add link to configuration file docs before examples (#18535) (Milos Djermanovic)

2c8fd34 ci: pin @wdio/browser-runner v8.36.0 (#18540) (唯然)

v9.4.0 - May 31, 2024

010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)

5e1b5dc chore: package.json update for @eslint/js release (Jenkins)

d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)

594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)

525fdff docs: fix components files (#18519) (Tanuj Kanti)

89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)

80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)

f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)

7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)

f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)

389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)

70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

v9.3.0 - May 17, 2024

... (truncated)

Commits

5352357 9.5.0
f425600 Build: changelog update for 9.5.0
f588160 chore: upgrade @eslint/js@9.5.0 (#18591)
5890841 chore: package.json update for @eslint/js release
455f7fd docs: add section about including .gitignore files (#18590)
e9f4ccd chore: remove unused eslint-disable directive (#18589)
721eafe docs: update info about universal files patterns (#18587)
4b23ffd refactor: Move JS parsing logic into JS language (#18448)
6880286 fix: treat * as a universal pattern (#18586)
8127127 docs: Update README
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.

Updates ansi-regex from 2.1.1 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

v5.0.0

Breaking

Require Node.js 8 166a0d5

Enhancements

Add TypeScript definition (#32) e77ea17

chalk/ansi-regex@v4.1.0...v5.0.0

v4.1.0

Support more escape code like links (#29) 96200bb

chalk/ansi-regex@v4.0.0...v4.1.0

Commits

a9babce 5.0.1
4657833 fix incorrect format
c3c0b3f Fix potential ReDoS (#37)
178363b Move to GitHub Actions (#35)
0755e66 Add @Qix- to funding.yml
2b56fb0 5.0.0
f26f7fe Meta tweaks
e77ea17 Add TypeScript definition (#32)
166a0d5 Require Node.js 8
f115fca Tidelift tasks
Additional commits viewable in compare view

Updates engine.io from 6.2.1 to 6.5.5

Release notes

Sourced from engine.io's releases.

6.5.5

This release contains a bump of the ws dependency, which includes an important security fix.

Advisory: GHSA-3h5v-q93c-6h6q

Bug Fixes

types: make socket.request writable (#697) (0efa04b)

Links

Diff: socketio/engine.io@6.5.4...6.5.5

Client release: -

ws@~8.17.1 (diff)

6.5.4

This release contains some minor changes which should improve the memory usage of the server, notably this.

Links

Diff: socketio/engine.io@6.5.3...6.5.4

Client release: -

ws version: ~8.11.0 (no change)

6.5.3

Bug Fixes

improve compatibility with node16 module resolution (#689) (c6bf8c0)

webtransport: properly handle abruptly closed connections (ff1c861)

Links

Diff: socketio/engine.io@6.5.2...6.5.3

Client release: -

ws version: ~8.11.0 (no change)

6.5.2

Bug Fixes

webtransport: add proper framing (a306db0)

Links

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.5.5 (2024-06-18)

This release contains a bump of the ws dependency, which includes an important security fix.

Advisory: GHSA-3h5v-q93c-6h6q

Bug Fixes

types: make socket.request writable (#697) (0efa04b)

Dependencies

ws@~8.17.1 (diff)

3.6.2 (2024-06-18)

This release contains a bump of the ws dependency, which includes an important security fix.

Advisory: GHSA-3h5v-q93c-6h6q

Dependencies

ws@~7.5.10 (diff)

6.5.4 (2023-11-09)

This release contains some minor changes which should improve the memory usage of the server, notably this.

Dependencies

ws@~8.11.0 (no change)

6.5.3 (2023-10-06)

Bug Fixes

improve compatibility with node16 module resolution (#689) (c6bf8c0)

webtransport: properly handle abruptly closed connections (ff1c861)

Dependencies

... (truncated)

Commits

0cb977a chore(release): 6.5.5
adaa207 chore(deps): bump ws from 8.11.0 to 8.17.1 (#702)
0efa04b fix(types): make socket.request writable (#697)
ff0fbfb chore(release): 6.5.4
09acb17 ci: add Node.js 20 in the test matrix
39937f8 refactor: minor cleanups
43c1c1c refactor: simplify code
3b5e79e refactor: remove useless references
f27a6c3 refactor: remove useless reference
2da559a chore(release): 6.5.3
Additional commits viewable in compare view

Updates socket.io from 4.5.0 to 4.7.5

Release notes

Sourced from socket.io's releases.

4.7.5

Bug Fixes

close the adapters when the server is closed (bf64870)

remove duplicate pipeline when serving bundle (e426f3e)

Links

Diff: socketio/socket.io@4.7.4...4.7.5

Client release: 4.7.5

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.4

Bug Fixes

typings: calling io.emit with no arguments incorrectly errored (cb6d2e0), closes #4914

Links

Diff: socketio/socket.io@4.7.3...4.7.4

Client release: 4.7.4

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.3

Bug Fixes

return the first response when broadcasting to a single socket (#4878) (df8e70f)

typings: allow to bind to a non-secure Http2Server (#4853) (8c9ebc3)

Links

Diff: socketio/socket.io@4.7.2...4.7.3

Client release: 4.7.3

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.2

Bug Fixes

clean up child namespace when client is rejected in middleware (#4773) (0731c0d)

webtransport: properly handle WebTransport-only connections (3468a19)

webtransport: add proper framing (a306db0)

Links

... (truncated)

Changelog

Sourced from socket.io's changelog.

4.7.5 (2024-03-14)

Bug Fixes

close the adapters when the server is closed (bf64870)

remove duplicate pipeline when serving bundle (e426f3e)

Dependencies

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.4 (2024-01-12)

Bug Fixes

typings: calling io.emit with no arguments incorrectly errored (cb6d2e0), closes #4914

Dependencies

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.3 (2024-01-03)

Bug Fixes

return the first response when broadcas...
Description has been truncated

Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ejs](https://github.com/mde/ejs) | `3.1.7` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.18.1` | `4.19.2` | | [passport](https://github.com/jaredhanson/passport) | `0.4.1` | `0.6.0` | | [ws](https://github.com/websockets/ws) | `7.5.7` | `7.5.10` | | [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `6.12.6` | | [eslint](https://github.com/eslint/eslint) | `4.19.1` | `9.5.0` | | [engine.io](https://github.com/socketio/engine.io) | `6.2.1` | `6.5.5` | | [socket.io](https://github.com/socketio/socket.io) | `4.5.0` | `4.7.5` | Bumps the npm_and_yarn group with 10 updates in the /dana-bot directory: | Package | From | To | | --- | --- | --- | | [ejs](https://github.com/mde/ejs) | `3.1.7` | `3.1.10` | | [express](https://github.com/expressjs/express) | `4.17.3` | `4.19.2` | | [passport](https://github.com/jaredhanson/passport) | `0.2.2` | `0.6.0` | | [ws](https://github.com/websockets/ws) | `7.5.3` | `7.5.10` | | [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `6.12.6` | | [eslint](https://github.com/eslint/eslint) | `4.19.1` | `9.5.0` | | [engine.io](https://github.com/socketio/engine.io) | `6.2.1` | `6.5.5` | | [socket.io](https://github.com/socketio/socket.io) | `4.5.3` | `4.7.5` | | [node-forge](https://github.com/digitalbazaar/forge) | `0.10.0` | `1.3.1` | | [google-p12-pem](https://github.com/googleapis/google-p12-pem) | `3.1.0` | `3.1.4` | Bumps the npm_and_yarn group with 1 update in the /dana-websocket-client directory: [ws](https://github.com/websockets/ws). Updates `ejs` from 3.1.7 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.7...v3.1.10) Updates `express` from 4.18.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) Updates `passport` from 0.4.1 to 0.6.0 - [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md) - [Commits](jaredhanson/passport@v0.4.1...v0.6.0) Updates `ws` from 7.5.7 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.7...7.5.10) Updates `ajv` from 5.5.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v5.5.2...v6.12.6) Updates `eslint` from 4.19.1 to 9.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v4.19.1...v9.5.0) Updates `ansi-regex` from 2.1.1 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v5.0.1) Updates `engine.io` from 6.2.1 to 6.5.5 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@6.2.1...6.5.5) Updates `socket.io` from 4.5.0 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io@4.5.0...4.7.5) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `ejs` from 3.1.7 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.7...v3.1.10) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) Updates `passport` from 0.2.2 to 0.6.0 - [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md) - [Commits](jaredhanson/passport@v0.4.1...v0.6.0) Updates `ws` from 7.5.3 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.7...7.5.10) Updates `ajv` from 5.5.2 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v5.5.2...v6.12.6) Updates `eslint` from 4.19.1 to 9.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v4.19.1...v9.5.0) Updates `ansi-regex` from 2.1.1 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v5.0.1) Updates `engine.io` from 6.2.1 to 6.5.5 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@6.2.1...6.5.5) Updates `socket.io` from 4.5.3 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io@4.5.0...4.7.5) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `node-forge` from 0.10.0 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.1) Updates `google-p12-pem` from 3.1.0 to 3.1.4 - [Release notes](https://github.com/googleapis/google-p12-pem/releases) - [Changelog](https://github.com/googleapis/google-p12-pem/blob/main/CHANGELOG.md) - [Commits](googleapis/google-p12-pem@v3.1.0...v3.1.4) Updates `socket.io-parser` from 4.2.1 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `ws` from 7.5.3 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.7...7.5.10) --- updated-dependencies: - dependency-name: ejs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: passport dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eslint dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: passport dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eslint dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: google-p12-pem dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-06-19T17:03:59Z

Superseded by #98.

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 18, 2024

dependabot bot mentioned this pull request Jun 18, 2024

Bump the npm_and_yarn group across 3 directories with 13 updates #96

Closed

dependabot bot closed this Jun 19, 2024

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-651e4578a0 branch June 19, 2024 17:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 3 directories with 13 updates #97

Bump the npm_and_yarn group across 3 directories with 13 updates #97

Uh oh!

dependabot bot commented on behalf of github Jun 18, 2024

Uh oh!

dependabot bot commented on behalf of github Jun 19, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the npm_and_yarn group across 3 directories with 13 updates #97

Bump the npm_and_yarn group across 3 directories with 13 updates #97

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 18, 2024

v3.1.10

v3.1.9

v3.1.8

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

4.18.2 / 2022-10-08

[0.6.0] - 2022-05-20

Added

Changed

Security

[0.5.3] - 2022-05-16

Fixed

[0.5.2] - 2021-12-16

Fixed

[0.5.1] - 2021-12-15

Added

Changed

[0.5.0] - 2021-09-23

Changed

7.5.10

Bug fixes

7.5.9

Bug fixes

7.5.8

Bug fixes

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v6.12.0

v6.11.0

v6.10.2

v6.10.1

v6.10.0

v6.9.0

v9.5.0

Features

Bug Fixes

Documentation

Chores

v9.4.0

Features

Bug Fixes

Documentation

v5.0.1

Fixes (backport of 6.0.1 to v5)

v5.0.0

Breaking

Enhancements

v4.1.0

6.5.5

Bug Fixes

Links

6.5.4

Links

6.5.3

Bug Fixes

Links

6.5.2

Bug Fixes

Links

Fixes (backport of `6.0.1` to v5)