Bump the npm_and_yarn group with 13 updates #80
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 13 updates: | Package | From | To | | --- | --- | --- | | [karma](https://github.com/karma-runner/karma) | `6.3.4` | `6.4.4` | | [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.3` | | [cookie](https://github.com/jshttp/cookie) | `0.4.1` | `0.7.2` | | [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` | | [log4js](https://github.com/log4js-node/log4js-node) | `6.3.0` | `6.9.1` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [nanoid](https://github.com/ai/nanoid) | `3.1.23` | `removed` | | [mocha](https://github.com/mochajs/mocha) | `9.0.3` | `11.1.0` | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.13.0` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.0` | `6.0.2` | | [socket.io](https://github.com/socketio/socket.io) | `3.1.2` | `4.8.1` | | [socket.io-parser](https://github.com/Automattic/socket.io-parser) | `4.0.4` | `4.2.4` | | [ws](https://github.com/websockets/ws) | `7.4.6` | `8.17.1` | Updates `karma` from 6.3.4 to 6.4.4 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v6.3.4...v6.4.4) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `cookie` from 0.4.1 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.2) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `log4js` from 6.3.0 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v6.3.0...v6.9.1) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Removes `nanoid` Updates `mocha` from 9.0.3 to 11.1.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v9.0.3...v11.1.0) Updates `qs` from 6.7.0 to 6.13.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.13.0) Updates `serialize-javascript` from 6.0.0 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.0...v6.0.2) Updates `socket.io` from 3.1.2 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `ws` from 7.4.6 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...8.17.1) --- updated-dependencies: - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Comment on lines
+6
to
+19
| runs-on: ubuntu-22.04 | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: Use Node.js 12.x | ||
| uses: actions/setup-node@v1 | ||
| with: | ||
| node-version: 12.x | ||
| - name: npm install, build, and test | ||
| run: | | ||
| npm install | ||
| npm run build | ||
| npm test | ||
| env: | ||
| CI: true | ||
| - uses: actions/checkout@v4 | ||
| - name: Use Node.js | ||
| uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: 22.x | ||
| - name: npm install, build, and test | ||
| run: | | ||
| npm install | ||
| npm run build | ||
| npm test | ||
| env: | ||
| CI: true |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
joshblack
approved these changes
Mar 11, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 13 updates:
6.3.46.4.41.19.01.20.30.4.10.7.22.2.02.2.36.3.06.9.11.2.51.2.83.1.23removed9.0.311.1.06.7.06.13.06.0.06.0.23.1.24.8.14.0.44.2.47.4.68.17.1Updates
karmafrom 6.3.4 to 6.4.4Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
84f85e7chore(release): 6.4.4 [skip ci]a4d1284build(deps-dev): bump ws from 6.2.1 to 6.2.3d8cf806chore(release): 6.4.3 [skip ci]d7f2d69fix: add build commits for patch release85a2eebbuild(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.20bffce2build(deps): updated socket.io version to fix security issues with socket.io-...86667abbuild(deps): bump follow-redirects from 1.11.0 to 1.15.4450fdfddocs: Add deprecation notice to Karma README9de3c00chore(release): 6.4.2 [skip ci]c6a4271fix: few typosUpdates
body-parserfrom 1.19.0 to 1.20.3Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
... (truncated)
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: [email protected] (#521)9478591fix: pin to [email protected]83db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
cookiefrom 0.4.1 to 0.7.2Release notes
Sourced from cookie's releases.
Commits
d19eaa10.7.2bc38ffdFix object assignment ofhasOwnProperty(#177)cf4658f0.7.16a8b8f5Allow leading dot for domain (#174)58015c0Remove more code and perf wins (#172)ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)Maintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
log4jsfrom 6.3.0 to 6.9.1Changelog
Sourced from log4js's changelog.
... (truncated)
Commits
26dcec66.9.163ae5b9Merge pull request #1379 from log4js-node/update-docs185fa66docs: updated changelog for 6.9.1ed54dc2Merge pull request #1378 from log4js-node/1377-defaultparsecallstack-cant-par...2628688fix(7922e82): regex for stacktraceb3919d86.9.07cfe8a4Merge pull request #1376 from log4js-node/update-docsf89e7b6docs: updated changelog for 6.9.00082928Merge pull request #1375 from log4js-node/update-docsc0db6a4docs: added thatlog4js.getLogger()may calllog4js.configure()Updates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Removes
nanoidUpdates
mochafrom 9.0.3 to 11.1.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
a87fb11chore(main): release 11.1.0 (#5277)3c191c0feat: replacestrip-ansiwithutil.stripVTControlCharacters(#5267)8f1c8d8feat: bump yargs to 17 (#5165)6caa902chore(main): release 11.0.2 (#5269)259f8f8fix: catch exceptions setting Error.stackTraceLimit (#5254)210d658fix: error handling for unexpected numeric arguments passed to cli (#5263)6f10d12docs: replace "New in" with "Since" in version annotations (#5262)f729cd0docs: correct outdatedstatus: accepting prslink (#5268)4c558fbchore(main): release 11.0.1 (#5257)a5bd707Release v11.0.1Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
qsfrom 6.7.0 to 6.13.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
5cf516cv6.13.08d56df2[New]parse: addstrictDepthoptionc9a6694[Tests] usenpm auditinstead ofaudf90cc35v6.12.31bf9f7a[Fix]parse: properly account forstrictNullHandlingwhenallowEmptyArrays7ebf48b[meta] fix changelog indentationd0dff11v6.12.2f0b8d03[Dev Deps] update@ljharb/eslint-config,object-inspect,tape81835ff[Fix]:parse: parse encoded square bracketsdb47dcc[readme] add CII best practices badgeUpdates
serialize-javascriptfrom 6.0.0 to 6.0.2Release notes
Sourced from serialize-javascript's releases.
Commits
b71ec236.0.2