chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates - #3420
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates#3420dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the npm_and_yarn group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.7` | `7.29.6` | | [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.6.0` | `22.7.7` | | [svgo](https://github.com/svg/svgo) | `1.3.2` | `2.8.3` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.25.9` | `7.29.8` | | [adm-zip](https://github.com/cthackers/adm-zip) | `0.5.16` | `0.5.18` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.18` | | [esbuild](https://github.com/evanw/esbuild) | `0.27.4` | `0.27.7` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.0.3` | `3.1.5` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.11` | `1.16.0` | | [form-data](https://github.com/form-data/form-data) | `4.0.5` | `4.0.6` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` | | [immutable](https://github.com/immutable-js/immutable-js) | `5.1.1` | `5.1.9` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.1.0` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.15.1` | | [launch-editor](https://github.com/vitejs/launch-editor) | `2.10.0` | `2.14.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.4.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.8` | `8.5.26` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `7.0.4` | `7.1.0` | | [tmp](https://github.com/raszi/node-tmp) | `0.2.3` | `0.2.7` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.2` | `5.2.6` | | [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` | Updates `@babel/core` from 7.24.7 to 7.29.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core) Updates `nx` from 22.6.0 to 22.7.7 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.7/packages/nx) Updates `svgo` from 1.3.2 to 2.8.3 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v1.3.2...v2.8.3) Updates `@babel/plugin-transform-modules-systemjs` from 7.25.9 to 7.29.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs) Updates `adm-zip` from 0.5.16 to 0.5.18 - [Release notes](https://github.com/cthackers/adm-zip/releases) - [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md) - [Commits](cthackers/adm-zip@v0.5.16...v0.5.18) Updates `brace-expansion` from 1.1.11 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.18) Updates `esbuild` from 0.27.4 to 0.27.7 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.27.4...v0.27.7) Updates `fast-uri` from 3.0.3 to 3.1.5 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.3...v3.1.5) Updates `follow-redirects` from 1.15.11 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0) Updates `form-data` from 4.0.5 to 4.0.6 - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) Updates `http-proxy-middleware` from 2.0.9 to 2.0.10 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.10/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v2.0.10) Updates `immutable` from 5.1.1 to 5.1.9 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.1.1...v5.1.9) Updates `ip-address` from 10.1.0 to 10.5.0 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.1.0...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.15.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.1/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.15.1) Updates `launch-editor` from 2.10.0 to 2.14.1 - [Commits](vitejs/launch-editor@v2.10.0...v2.14.1) Updates `node-forge` from 1.3.1 to 1.4.0 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.4.0) Updates `postcss` from 8.5.8 to 8.5.26 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.8...8.5.26) Updates `serialize-javascript` from 7.0.4 to 7.1.0 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v7.0.4...v7.1.0) Updates `shell-quote` from 1.8.1 to 1.10.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.1...v1.10.0) Updates `tmp` from 0.2.3 to 0.2.7 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.7) Updates `webpack-dev-server` from 5.2.2 to 5.2.6 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/v5.2.6/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.2...v5.2.6) Updates `websocket-driver` from 0.7.4 to 0.7.5 - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.4...0.7.5) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.6 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: nx dependency-version: 22.7.7 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: svgo dependency-version: 2.8.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: adm-zip dependency-version: 0.5.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.27.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.10 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.15.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.26 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: 7.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.10.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tmp dependency-version: 0.2.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
|
View your CI Pipeline Execution ↗ for commit 942d5c4 ☁️ Nx Cloud last updated this comment at |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 21 updates in the / directory:
7.24.77.29.622.6.022.7.71.3.22.8.37.25.97.29.80.5.160.5.181.1.111.1.180.27.40.27.73.0.33.1.51.15.111.16.04.0.54.0.62.0.92.0.105.1.15.1.910.1.010.5.03.14.13.15.12.10.02.14.11.3.11.4.08.5.88.5.267.0.47.1.00.2.30.2.75.2.25.2.60.7.40.7.5Updates
@babel/corefrom 7.24.7 to 7.29.6Release notes
Sourced from @babel/core's releases.
... (truncated)
Commits
04ea6b2v7.29.699f498a[7.x packport]Improve input source map handling (#18001)feba0a3Preserve original identifier names from input sourcemaps (#17992) (#17998)aa8394ev7.29.0ad0d03f[7.x backport] feat: Allow specifying startLine in code frame (#17739)d7f4008v7.28.6e130225Polish(standalone): improve message on invalid preset/plugin (#17606)99dcba5chore: enable some ts-eslint rules (#17592)c92c491Improve Unicode handling in code-frame tokenizer (#17589)d725e39AddBABEL_7_TO_8_DANGEROUSLY_DISABLE_VERSION_CHECK(#17569)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/coresince your current version.Updates
nxfrom 22.6.0 to 22.7.7Release notes
Sourced from nx's releases.
... (truncated)
Commits
a328bf1fix(core): warn when the self-hosted remote cache disables TLS verification (...a828076fix(core): prevent path traversal / zip-slip in self-hosted remote cache (#36...dc849bbfix(core): update brace-expansion and yaml (#35790)8fd1febfix(core): allow local plugin subpath imports without custom conditions (#35751)22f3c2efix(core): detect vscode copilot ai agent (#35757)0d18512fix(misc): skip$escaping in file paths on windows (#35692)7c1318ffix(core): handle object form of bin field in getPrettierPath (#35680)a3acfd6fix(core): treat undefined task parallelism as parallel when scheduling (#35736)c574207cleanup(core): drop stale@nrwldedup TODO in nx report (#35730)0d002ecfix(core): resolve local plugin subpath imports from source (#35631)Install script changes
This version modifies
postinstallscript that runs during installation. Review the package contents before updating.Updates
svgofrom 1.3.2 to 2.8.3Release notes
Sourced from svgo's releases.
... (truncated)
Commits
628e3bcMerge commit from forkf706b07deps: upgrade to sax v1.5.0b37d90e2.8.0cb7e9beAdd warning about enabling plugins in presets5165ccbMake docs more descriptive72b9722Refactor inlineStyles (#1601)c799503Load .cjs with require only (#1605)4b4391fRefactor basic cli tests (#1595)2d6deeaRemove xmlns:xlink in removeXMLNS plugin (#1508)d29cec4Migrate to picocolors (#1606)Maintainer changes
This version was pushed to npm by sethiii, a new releaser for svgo since your current version.
Updates
@babel/plugin-transform-modules-systemjsfrom 7.25.9 to 7.29.8Release notes
Sourced from @babel/plugin-transform-modules-systemjs's releases.
... (truncated)
Commits
5de11cav7.29.8f08d434fix(systemjs): support proto as an export name (#18044)4fba754v7.29.7a458f66v7.29.432ebd5a[7.x backport]fix(systemjs): improve module string name support (#17974)aa8394ev7.29.00053db6Update polyfill packages (#17727)61647aev7.28.5a177d55[Babel 8] Uset.traverseFastto replace somepath.traverse(#17518)eebd3a0v7.27.1Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@babel/plugin-transform-modules-systemjssince your current version.Updates
adm-zipfrom 0.5.16 to 0.5.18Release notes
Sourced from adm-zip's releases.
Commits
8592b15Incremented version4c61451Merge pull request #563 from JohnJunior/fix/empty-dir-versionafd618eFixed jsdocs7d41d71Fixed sanitize bugedd43edUpdate author and bug report email in package.json83ac9f3Add security section to README692ae21Enhance security policy with vulnerability reporting details46279d7Merge pull request #562 from mielverkerken/masterb091814Merge pull request #551 from matt-fidd/webpack-crashe5b2dd8Merge pull request #564 from JohnJunior/fix/issue-555-data-descriptorUpdates
brace-expansionfrom 1.1.11 to 1.1.18Release notes
Sourced from brace-expansion's releases.
Commits
758fcd61.1.1827fbeedMerge commit from fork5c57cc21.1.17d757f1dnpm ignore.claudecb4b9e4fix: backport GHSA-mh99-v99m-4gvg (#129)447763a1.1.16d74e630fix: v1 backport for CVE-2026-13149 (#122)2203f4f1.1.150b09384Backport v5.0.6 change to v1 (#111)10c05fc1.1.14Updates
esbuildfrom 0.27.4 to 0.27.7Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
2025c9fpublish 0.27.7 to npmc6b586efix typo inMakefilefor@esbuild/win32-x649785e14publish 0.27.6 to npmb169d8cRevert "update go 1.25.7 => 1.26.1"7ac8762runmake update-compat-table8b5ff53remove an incorrectelsee955268fix #4421: lower generated class fields if neededa5a2500ci: movemake test-old-tsb71e7acomit go'sbuildvcsfor more reproducible builds7406b09organizemake platform-alloutput inMakefileUpdates
fast-urifrom 3.0.3 to 3.1.5Release notes
Sourced from fast-uri's releases.
... (truncated)
Commits
5e179cbBumped v3.1.52cad02dMerge commit from fork6aeece6Bumped v3.1.42d50fbafix: reject literal backslash in URI authority0549fe3Bumped v3.1.32a6d357Merge commit from fork919dd8eBumped v3.1.2c65ba57fixup: linting6c86c17Merge commit from forka95158aHandle malformed fragment decoding without throwing (#171)Updates
follow-redirectsfrom 1.15.11 to 1.16.0Commits
0c23a22Release version 1.16.0 of the npm package.844c4d3Add sensitiveHeaders option.5e8b8d0ci: add Node.js 24.x to the CI matrix7953e22ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v686dc1f8Sanitizing input.Updates
form-datafrom 4.0.5 to 4.0.6Changelog
Sourced from form-data's changelog.
Commits
64190dbv4.0.692ae0eb[Deps] updatehasown,mime-typesf31d21e[Dev Deps] update@ljharb/eslint-config,auto-changelog,tape8dff42c[Fix] escape CR, LF, and"in field names and filenames67b0f65[Dev Deps] updatejs-randomness-predictorUpdates
http-proxy-middlewarefrom 2.0.9 to 2.0.10Release notes
Sourced from http-proxy-middleware's releases.
Changelog
Sourced from http-proxy-middleware's changelog.
Commits
f0be839chore(package.json): v2.0.10 (#1271)19c860dci(github-actions): update publish.yml (#1270)d0f7d63fix: harden proxy-table matching to prevent routing bypass (#1268)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.
Updates
immutablefrom 5.1.1 to 5.1.9Release notes
Sourced from immutable's releases.
... (truncated)
Changelog
Sourced from immutable's changelog.