Skip to content

Bump the npm_and_yarn group across 1 directory with 21 updates#13

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-79c11d5b02
Open

Bump the npm_and_yarn group across 1 directory with 21 updates#13
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-79c11d5b02

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 7, 2025

Bumps the npm_and_yarn group with 20 updates in the / directory:

Package From To
aws-sdk 2.771.0 2.814.0
serverless-offline 6.8.0 8.1.0
@babel/traverse 7.12.1 7.28.0
cached-path-relative 1.0.2 1.1.0
color-string 1.5.4 1.9.1
decode-uri-component 0.2.0 0.2.2
handlebars 4.7.6 4.7.8
jszip 3.5.0 3.10.1
minimist 1.2.5 1.2.8
moment-timezone 0.5.31 0.5.48
moment 2.29.1 2.30.1
node-fetch 2.6.1 2.7.0
protobufjs 6.10.1 6.11.4
qs 6.5.2 6.5.3
shell-quote 1.7.2 1.8.3
shelljs 0.8.4 0.8.5
simple-get 2.8.1 2.8.2
socket.io-parser 3.3.1 3.3.4
tar-fs 1.16.3 1.16.5
tar 6.0.5 6.2.1

Updates aws-sdk from 2.771.0 to 2.814.0

Changelog

Sourced from aws-sdk's changelog.

2.814.0

  • bugfix: Credentials: SDK will throw if shared ini file's profile name can be resolved to proto
  • feature: EC2: EBS io2 volumes now supports Multi-Attach
  • feature: PersonalizeRuntime: Updated FilterValues regex pattern to align with Filter Expression.
  • feature: RDS: Adds IAM DB authentication information to the PendingModifiedValues output of the DescribeDBInstances API. Adds ClusterPendingModifiedValues information to the output of the DescribeDBClusters API.

2.813.0

  • feature: ConfigService: Adding PutExternalEvaluation API which grants permission to deliver evaluation result to AWS Config
  • feature: DLM: Provide Cross-account copy event based policy support in DataLifecycleManager (DLM)
  • feature: EC2: C6gn instances are powered by AWS Graviton2 processors and offer 100 Gbps networking bandwidth. These instances deliver up to 40% better price-performance benefit versus comparable x86-based instances
  • feature: Imagebuilder: This release adds support for building and distributing container images within EC2 Image Builder.
  • feature: KMS: Added CreationDate and LastUpdatedDate timestamps to ListAliases API response
  • feature: Route53: This release adds support for DNSSEC signing in Amazon Route 53.
  • feature: Route53Resolver: Route 53 Resolver adds support for enabling resolver DNSSEC validation in virtual private cloud (VPC).
  • feature: SQS: Amazon SQS adds queue attributes to enable high throughput FIFO.
  • feature: ServiceCatalog: Support TagOptions sharing with Service Catalog portfolio sharing.

2.812.0

  • feature: CostExplorer: This release updates the "MonitorArnList" from a list of String to be a list of Arn for both CreateAnomalySubscription and UpdateAnomalySubscription APIs
  • feature: Location: Initial release of Amazon Location Service. A new geospatial service providing capabilities to render maps, geocode/reverse geocode, track device locations, and detect geofence entry/exit events.
  • feature: QuickSight: QuickSight now supports connecting to federated data sources of Athena
  • feature: WellArchitected: This is the first release of AWS Well-Architected Tool API support, use to review your workload and compare against the latest AWS architectural best practices.

2.811.0

  • feature: Amp: (New Service) Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor containerized applications securely and at scale.
  • feature: GreengrassV2: AWS IoT Greengrass V2 is a new major version of AWS IoT Greengrass. This release adds several updates such as modular components, continuous deployments, and improved ease of use.
  • feature: IoTAnalytics: FileFormatConfiguration enables data store to save data in JSON or Parquet format. S3Paths enables you to specify the S3 objects that save your channel messages when you reprocess the pipeline.
  • feature: IoTFleetHub: AWS IoT Fleet Hub, a new feature of AWS IoT Device Management that provides a web application for monitoring and managing device fleets connected to AWS IoT at scale.
  • feature: IoTWireless: AWS IoT for LoRaWAN enables customers to setup a private LoRaWAN network by connecting their LoRaWAN devices and gateways to the AWS cloud without managing a LoRaWAN Network Server.
  • feature: Iot: AWS IoT Rules Engine adds Kafka Action that allows sending data to Apache Kafka clusters inside a VPC. AWS IoT Device Defender adds custom metrics and machine-learning based anomaly detection.
  • feature: IotDeviceAdvisor: AWS IoT Core Device Advisor is fully managed test capability for IoT devices. Device manufacturers can use Device Advisor to test their IoT devices for reliable and secure connectivity with AWS IoT.
  • feature: Lambda: Added support for Apache Kafka as a event source. Added support for TumblingWindowInSeconds for streams event source mappings. Added support for FunctionResponseTypes for streams event source mappings
  • feature: SSM: Adding support for Change Manager API content

2.810.0

  • feature: DevOpsGuru: Documentation updates for DevOps Guru.
  • feature: EC2: Add c5n.metal to ec2 instance types list
  • feature: GlobalAccelerator: This release adds support for custom routing accelerators

2.809.0

  • feature: AutoScaling: Documentation updates and corrections for Amazon EC2 Auto Scaling API Reference and SDKs.
  • feature: CloudTrail: CloudTrailInvalidClientTokenIdException is now thrown when a call results in the InvalidClientTokenId error code. The Name parameter of the AdvancedEventSelector data type is now optional.
  • feature: IoTSiteWise: Added the ListAssetRelationships operation and support for composite asset models, which represent structured sets of properties within asset models.

2.808.0

  • feature: EC2: TGW connect simplifies connectivity of SD-WAN appliances; IGMP support for TGW multicast; VPC Reachability Analyzer for VPC resources connectivity analysis.
  • feature: Kendra: Amazon Kendra now supports adding synonyms to an index through the new Thesaurus resource.
  • feature: NetworkManager: This release adds API support for Transit Gateway Connect integration into AWS Network Manager.

2.807.0

... (truncated)

Commits
  • 8875a35 Updates SDK to v2.814.0
  • dd83d67 throw at invalid profile name in shared ini file (#3585)
  • ee0c5a3 Updates SDK to v2.813.0
  • 468d15b Updates SDK to v2.812.0
  • c50132f Update README.md with references to JS SDK V3 (#3582)
  • 3e19b08 Updates SDK to v2.811.0
  • f26c00d Updates SDK to v2.810.0
  • b393a6e Adds automatic PreSignedUrl generation to RDS.StartDBInstanceAutomatedBackups...
  • fa57967 Updates SDK to v2.809.0
  • 9a52018 Updates SDK to v2.808.0
  • Additional commits viewable in compare view

Updates serverless-offline from 6.8.0 to 8.1.0

Release notes

Sourced from serverless-offline's releases.

v8.1.0

New feature:

v8.0.0

Breaking changes:

New feature:

v7.1.0

New feature:

Bug fixes:

v7.0.0

Breaking changes:

New feature:

Bug fixes:

Chores

v6.9.0

New feature:

Bug fixes:

Chores

Commits
  • 77b3659 chore: Release v8.1.0
  • c9b4f9e feat: Add support for Python 3.9 runtime (#1267)
  • 6eb15d7 chore: Release v8.0.0
  • ed06c2d feat: Update hapi version to support Node 16 and drop Node 10 (#1235)
  • 60d034b chore: Release 7.1.0
  • 3fb5b69 fix: Child processes are cleaned up when useChildProcesses is used
  • b320b18 fix: Remove multiplication of this.#timeout by 1000 (#1177)
  • 3178501 feat: Support Ruby handlers with :: in path definition (#1218)
  • 4dbab1a Merge pull request #1178 from grakic/no-strip-trailing-slash
  • e9695ec Add '--noStripTrailingSlashInUrl' option
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by pgrzesik, a new releaser for serverless-offline since your current version.


Updates @babel/traverse from 7.12.1 to 7.28.0

Release notes

Sourced from @​babel/traverse's releases.

v7.28.0 (2025-07-02)

🚀 New Feature

  • babel-node
  • babel-types
  • babel-compat-data, babel-preset-env
  • babel-core, babel-parser
  • babel-generator, babel-parser
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • babel-parser, babel-traverse, babel-types
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

🐛 Bug Fix

🏠 Internal

  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

Committers: 5

v7.27.7 (2025-06-26)

Thanks @​arthur-mountain and @​evankanderson for your first PRs!

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-classes
  • babel-parser

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.28.0 (2025-07-02)

🚀 New Feature

  • babel-node
  • babel-types
  • babel-compat-data, babel-preset-env
  • babel-core, babel-parser
  • babel-generator, babel-parser
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • babel-parser, babel-traverse, babel-types
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

🐛 Bug Fix

🏠 Internal

  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

v7.27.7 (2025-06-26)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-classes
  • babel-parser

🐛 Bug Fix

🏠 Internal

  • babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
    • #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@​JLHwung)

... (truncated)

Commits

Updates cached-path-relative from 1.0.2 to 1.1.0

Commits

Updates color-string from 1.5.4 to 1.9.1

Release notes

Sourced from color-string's releases.

1.9.0

Minor Release 1.9.0

  • Add parsing of exponential alpha values for HWB and HSL (#66)

Thanks to @​babycannotsay for their contribution!

1.8.2

Patch release 1.8.2

  • Fix incorrect handling of optional comma in rgb() regex (#65)

Thanks to @​gerdasi and @​mastertheblaster for reporting and confirming the bug!

1.8.1

Patch release 1.8.1

  • Fix rgb alpha percentage parsing from int to float (#61)

Thanks to @​clytras for their contribution!

1.8.0

Minor release 1.8.0

  • Add anchors to keyword regex (#64)

Thanks to @​cq360767996 for their contribution!

1.7.4

Patch Release 1.7.4

  • Fix bug in .to.hex() output if the inputs aren't rounded numbers (#25)

1.7.3

Patch Release 1.7.3

  • Fix hue modulo operation (#50)

Thanks to @​adroitwhiz for their contributions.

1.7.2

Patch Release 1.7.2

  • Fix issue where color-string with incorrectly return a color for properties on Object's prototype like "constructor". (#45)

Thanks to @​tolmasky for their contributions.

1.7.1

Patch release 1.7.1

... (truncated)

Commits

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

Updates handlebars from 4.7.6 to 4.7.8

Release notes

Sourced from handlebars's releases.

v4.7.8

  • Make library compatible with workers (#1894) - 3d3796c
  • Don't rely on Node.js global object (#1776) - 2954e7e
  • Fix compiling of each block params in strict mode (#1855) - 30dbf04
  • Fix rollup warning when importing Handlebars as ESM - 03d387b
  • Fix bundler issue with webpack 5 (#1862) - c6c6bbb
  • Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.8 - July 27th, 2023

  • Make library compatible with workers (#1894) - 3d3796c
  • Don't rely on Node.js global object (#1776) - 2954e7e
  • Fix compiling of each block params in strict mode (#1855) - 30dbf04
  • Fix rollup warning when importing Handlebars as ESM - 03d387b
  • Fix bundler issue with webpack 5 (#1862) - c6c6bbb
  • Use https instead of git for mustache submodule - 88ac068

Commits

v4.7.7 - February 15th, 2021

  • fix weird error in integration tests - eb860c0
  • fix: check prototype property access in strict-mode (#1736) - b6d3de7
  • fix: escape property names in compat mode (#1736) - f058970
  • refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8
  • chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

  • the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

Commits
  • 8dc3d25 v4.7.8
  • 668c4fb Fix browser tests in CI pipeline
  • c65c6cc Test on Node 18
  • 3d3796c Make library compatible with workers
  • 075b354 Fix sync issue with npm lock-file
  • 30dbf04 Fix compiling of each block params in strict mode
  • e3a5448 Fix bundler issue with webpack 5
  • 8e23642 Fix integration-tests issue with npm >= 7
  • 88ac068 use https instead of git for mustache submodule
  • c68bc08 Fix typo
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.


Updates jsonpath-plus from 3.0.0 to 5.1.0

Release notes

Sourced from jsonpath-plus's releases.

v5.1.0

5.1.0 (2021-06-24)

  • Enhancement: support double-quoted bracket notation
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

v5.0.7

5.0.7 (2021-04-12)

v5.0.6

5.0.6 (2021-04-09)

  • Fix: Remove static modifiers (@​sdolski)
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

v5.0.5

5.0.5 (2021-04-09)

  • Fix: Avoid cache corruption when the returned structure is modified. Fixes #102. (@​tejodorus)

5.0.4 (2021-03-02)

  • Fix: allow falsey at values in filter (now may require checking for presence of @ in some cases); fixes #136
  • Docs: Add old missing release info (reconciling with GitHub releases)
  • Docs: Update README to reflect 1.2.0 was not a released version (subsume release details into 2.0.0)
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

5.0.3 (2021-02-06)

  • Fix: Add package exports for browser and umd (#145) (@​gjvoosten)
  • Update: Build as per refactoring
  • Docs: Update as per typedoc update
  • Docs: Update license badges per latest
  • Linting: As per latest ash-nazg
  • CI: Update from Travis -> GitHub Actions
  • npm: Switch from eslint-plugin-sonarjs to eslint-plugin-radar
  • npm: Switch to pnpm
  • npm: Update devDeps.

5.0.2 (2021-01-15)

  • Fix: Proper Node CommonJS export; fixes #144

... (truncated)

Changelog

Sourced from jsonpath-plus's changelog.

5.1.0 (2021-06-24)

  • Enhancement: support double-quoted bracket notation
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

5.0.7 (2021-04-12)

5.0.6 (2021-04-09)

  • Fix: Remove static modifiers (@​sdolski)
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

5.0.5 (2021-04-09)

  • Fix: Avoid cache corruption when the returned structure is modified. Fixes #102. (@​tejodorus)

5.0.4 (2021-03-02)

  • Fix: allow falsey at values in filter (now may require checking for presence of @ in some cases); fixes #136
  • Docs: Add old missing release info (reconciling with GitHub releases)
  • Docs: Update README to reflect 1.2.0 was not a released version (subsume release details into 2.0.0)
  • Linting: As per latest ash-nazg
  • npm: Update devDeps.

5.0.3 (2021-02-06)

  • Fix: Add package exports for browser and umd (#145) (@​gjvoosten)
  • Update: Build as per refactoring
  • Docs: Update as per typedoc update
  • Docs: Update license badges per latest
  • Linting: As per latest ash-nazg
  • CI: Update from Travis -> GitHub Actions
  • npm: Switch from eslint-plugin-sonarjs to eslint-plugin-radar
  • npm: Switch to pnpm
  • npm: Update devDeps.

5.0.2 (2021-01-15)

  • Fix: Proper Node CommonJS export; fixes #144

5.0.1 (2021-01-15)

  • Fix: Proper Node CommonJS export; fixes #143

... (truncated)

Commits

Updates jszip from 3.5.0 to 3.10.1

Changelog

Sourced from jszip's changelog.

v3.10.1 2022-08-02

  • Add sponsorship files.
    • If you appreciate the time spent maintaining JSZip then I would really appreciate your sponsorship.
  • Consolidate metadata types and expose OnUpdateCallback #851 and #852
  • use const instead var in example from README.markdown #828
  • Switch manual download link to HTTPS #839

Internals:

  • Replace jshint with eslint #842
  • Add performance tests #834

v3.10.0 2022-05-20

  • Change setimmediate dependency to more efficient one. Fixes Stuk/jszip#617 (see #829)
  • Update types of currentFile metadata to include null (see #826)

v3.9.1 2022-04-06

  • Fix recursive definition of InputFileFormat introduced in 3.9.0.

v3.9.0 2022-04-04

  • Update types JSZip#loadAsync to accept a promise for data, and remove arguments from new JSZip() (see #752)
  • Update types for compressionOptions to JSZipFileOptions and JSZipGeneratorOptions (see #722)
  • Add types for generateInternalStream (see #774)

v3.8.0 2022-03-30

  • Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. Many thanks to McCaulay Hudson for reporting.

v3.7.1 2021-08-05

  • Fix build of dist files.
    • Note: this version ensures the changes from 3.7.0 are actually included in the dist files. Thanks to Evan W for reporting.

v3.7.0 2021-07-23

  • Fix: Use a null prototype object for this.files (see #766)
    • This change might break existing code if it uses prototype methods on the .files property of a zip object, for example zip.files.toString(). This approach is taken to prevent files in the zip overriding object methods that would exist on a normal object.

v3.6.0 2021-02-09

  • Fix: redirect main to dist on browsers (see #742)
  • Fix duplicate require DataLengthProbe, utils (see #734)
  • Fix small error in read_zip.md (see #703)
Commits

Updates minimist from 1.2.5 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

  • Merge tag 'v0.2.3' a026794
  • [eslint] fix indentation and whitespace 5368ca4
  • [eslint] fix indentation and whitespace e5f5067
  • [eslint] more cleanup 62fde7d
  • [eslint] more cleanup 36ac5d0
  • [meta] add auto-changelog 73923d2
  • [actions] add reusable workflows d80727d
  • [eslint] add eslint; rules to enable later are warnings 48bc06a
  • [eslint] fix indentation 34b0f1c
  • [readme] rename and add badges 5df0fe4
  • [Dev Deps] switch from covert to nyc a48b128
  • [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
  • [meta] create FUNDING.yml; add funding in package.json 3639e0c
  • [meta] use npmignore to autogenerate an npmignore file be2e038
  • Only apps should have lockfiles 282b570
  • isConstructorOrProto adapted from PR ef9153f
  • [Dev Deps] update @ljharb/eslint-config, aud 098873c
  • [Dev Deps] update @ljharb/eslint-config, aud 3124ed3
  • [meta] add safe-publish-latest 4b927de
  • [Tests] add aud in posttest b32d9bd
  • [meta] update repo URLs f9fdfc0
  • [actions] Avoid 0.6 tests due to build failures ba92fe6
  • [Dev Deps] update tape 950eaa7
  • [Dev Deps] add missing npmignore dev dep 3226afa
  • Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

@dependabot
Bump the npm_and_yarn group across 1 directory with 21 updates
820fc29 
Bumps the npm_and_yarn group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aws-sdk](https://github.com/aws/aws-sdk-js) | `2.771.0` | `2.814.0` |
| [serverless-offline](https://github.com/dherault/serverless-offline) | `6.8.0` | `8.1.0` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.12.1` | `7.28.0` |
| [cached-path-relative](https://github.com/ashaffer/cached-path-relative) | `1.0.2` | `1.1.0` |
| [color-string](https://github.com/Qix-/color-string) | `1.5.4` | `1.9.1` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.6` | `4.7.8` |
| [jszip](https://github.com/Stuk/jszip) | `3.5.0` | `3.10.1` |
| [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.31` | `0.5.48` |
| [moment](https://github.com/moment/moment) | `2.29.1` | `2.30.1` |
| [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.1` | `2.7.0` |
| [protobufjs](https://github.com/protobufjs/protobuf.js) | `6.10.1` | `6.11.4` |
| [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` |
| [shell-quote](https://github.com/ljharb/shell-quote) | `1.7.2` | `1.8.3` |
| [shelljs](https://github.com/shelljs/shelljs) | `0.8.4` | `0.8.5` |
| [simple-get](https://github.com/feross/simple-get) | `2.8.1` | `2.8.2` |
| [socket.io-parser](https://github.com/Automattic/socket.io-parser) | `3.3.1` | `3.3.4` |
| [tar-fs](https://github.com/mafintosh/tar-fs) | `1.16.3` | `1.16.5` |
| [tar](https://github.com/isaacs/node-tar) | `6.0.5` | `6.2.1` |



Updates `aws-sdk` from 2.771.0 to 2.814.0
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/v2.814.0/CHANGELOG.md)
- [Commits](aws/aws-sdk-js@v2.771.0...v2.814.0)

Updates `serverless-offline` from 6.8.0 to 8.1.0
- [Release notes](https://github.com/dherault/serverless-offline/releases)
- [Changelog](https://github.com/dherault/serverless-offline/blob/master/CHANGELOG.md)
- [Commits](dherault/serverless-offline@v6.8.0...v8.1.0)

Updates `@babel/traverse` from 7.12.1 to 7.28.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.0/packages/babel-traverse)

Updates `cached-path-relative` from 1.0.2 to 1.1.0
- [Commits](https://github.com/ashaffer/cached-path-relative/commits)

Updates `color-string` from 1.5.4 to 1.9.1
- [Release notes](https://github.com/Qix-/color-string/releases)
- [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md)
- [Commits](Qix-/color-string@1.5.4...1.9.1)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Updates `handlebars` from 4.7.6 to 4.7.8
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.6...v4.7.8)

Updates `jsonpath-plus` from 3.0.0 to 5.1.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v3.0.0...v5.1.0)

Updates `jszip` from 3.5.0 to 3.10.1
- [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md)
- [Commits](Stuk/jszip@v3.5.0...v3.10.1)

Updates `minimist` from 1.2.5 to 1.2.8
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

Updates `moment-timezone` from 0.5.31 to 0.5.48
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.31...0.5.48)

Updates `moment` from 2.29.1 to 2.30.1
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.1...2.30.1)

Updates `node-fetch` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.1...v2.7.0)

Updates `protobufjs` from 6.10.1 to 6.11.4
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/commits)

Updates `qs` from 6.5.2 to 6.5.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.5.2...v6.5.3)

Updates `shell-quote` from 1.7.2 to 1.8.3
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.7.2...v1.8.3)

Updates `shelljs` from 0.8.4 to 0.8.5
- [Release notes](https://github.com/shelljs/shelljs/releases)
- [Changelog](https://github.com/shelljs/shelljs/blob/main/CHANGELOG.md)
- [Commits](shelljs/shelljs@v0.8.4...v0.8.5)

Updates `simple-get` from 2.8.1 to 2.8.2
- [Commits](feross/simple-get@v2.8.1...v2.8.2)

Updates `socket.io-parser` from 3.3.1 to 3.3.4
- [Release notes](https://github.com/Automattic/socket.io-parser/releases)
- [Changelog](https://github.com/socketio/socket.io-parser/blob/3.3.4/CHANGELOG.md)
- [Commits](socketio/socket.io-parser@3.3.1...3.3.4)

Updates `tar-fs` from 1.16.3 to 1.16.5
- [Commits](mafintosh/tar-fs@v1.16.3...v1.16.5)

Updates `tar` from 6.0.5 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.0.5...v6.2.1)

---
updated-dependencies:
- dependency-name: aws-sdk
  dependency-version: 2.814.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: serverless-offline
  dependency-version: 8.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-version: 7.28.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cached-path-relative
  dependency-version: 1.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: color-string
  dependency-version: 1.9.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-version: 0.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: handlebars
  dependency-version: 4.7.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jsonpath-plus
  dependency-version: 5.1.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jszip
  dependency-version: 3.10.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: moment-timezone
  dependency-version: 0.5.48
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: moment
  dependency-version: 2.30.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: node-fetch
  dependency-version: 2.7.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-version: 6.11.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.5.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: shell-quote
  dependency-version: 1.8.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: shelljs
  dependency-version: 0.8.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: simple-get
  dependency-version: 2.8.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-parser
  dependency-version: 3.3.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar-fs
  dependency-version: 1.16.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 6.2.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2025
This was referenced Aug 7, 2025
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants