ACGN-stock / acgn-stock

PTT ACGN股票交易市場
https://acgn-stock.com
MIT License
262 stars 37 forks source link

Bump tough-cookie, bcrypt and prerender-node #674

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Removes tough-cookie. It's no longer used after updating ancestor dependencies tough-cookie, bcrypt and prerender-node. These dependencies need to be updated together.

Removes tough-cookie

Updates bcrypt from 1.0.3 to 5.1.0

Release notes

Sourced from bcrypt's releases.

v5.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/kelektiv/node.bcrypt.js/compare/v5.0.1...v5.1.0

v5.0.1

Update node-pre-gyp to 1.0.0

v5.0.0

  • Fix the bcrypt "wrap-around" bug. It affects passwords with lengths >= 255. It is uncommon but it's a bug nevertheless. Previous attempts to fix the bug was unsuccessful.
  • Experimental support for z/OS
  • Fix a bug related to NUL in password input
  • Update node-pre-gyp to 0.15.0

v4.0.1

bcrypt 4.0.1

v4.0.0

NAPI support

v3.0.8

  • Update node-pre-gyp to 0.14
  • Pre-built binaries for NodeJS 13

v3.0.7

bcrypt 3.0.7

v3.0.6

... (truncated)

Changelog

Sourced from bcrypt's changelog.

5.1.0 (2022-10-06)

  • Update node-pre-gyp to 1.0.10
  • Replace nodeunit with jest as the testing library

5.0.1 (2021-02-22)

  • Update node-pre-gyp to 1.0.0

5.0.0 (2020-06-02)

  • Fix the bcrypt "wrap-around" bug. It affects passwords with lengths >= 255. It is uncommon but it's a bug nevertheless. Previous attempts to fix the bug was unsuccessful.
  • Experimental support for z/OS
  • Fix a bug related to NUL in password input
  • Update node-pre-gyp to 0.15.0

4.0.1 (2020-02-27)

  • Fix compilation errors in Alpine linux

4.0.0 (2020-02-17)

  • Switch to NAPI bcrypt
  • Drop support for NodeJS 8

3.0.8 (2019-12-31)

  • Update node-pre-gyp to 0.14
  • Pre-built binaries for NodeJS 13

3.0.7 (2019-10-18)

  • Update nan to 2.14.0
  • Update node-pre-gyp to 0.13

3.0.6 (2019-04-11)

  • Update nan to 2.13.2

3.0.5 (2019-03-19)

  • Update nan to 2.13.1
  • NodeJS 12 compatibility
  • Remove node-pre-gyp from bundled dependencies

3.0.4-napi (2019-03-08)

  • Sync N-API bcrypt with NAN bcrypt

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by amitosh, a new releaser for bcrypt since your current version.


Updates prerender-node from 3.2.1 to 3.7.0

Changelog

Sourced from prerender-node's changelog.

## 3.7.0 (2023-05-22) Added:

  • Add Google-InspectionTool to the recognized user agents

## 3.6.0 (2023-03-15) Added:

  • .webp, .woff2 extensions to the list of extensions that are not prerendered
  • Add AhrefsBot to the recognized user agents
  • Add AhrefsSiteAudit to the recognized user agents
  • Add Iframely to the recognized user agents
  • Add screaming frog to the recognized user agents

## 3.5.0 () Added:

  • cancelRender flag in afterRender callback

3.4.2 (2022-03-21)

Fixed:

3.4.1 (2022-01-17)

Added:

  • Add seznam.cz bot to the recognized user agents

3.4.0 (2021-11-09)

Changed:

  • Replace requests lib with the native nodejs http and https modules

3.3.0 (2021-11-04)

Changed:

  • Add telegram bot to the recognized user agents

3.2.5 (2019-07-30)

Changed:

  • Updated lodash and mocha to resolve security vulnerability warning

3.2.4 (2019-04-08)

Changed:

  • Updated devDependencies to latest versions for running tests

3.2.3 (2019-04-08)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by lluczo, a new releaser for prerender-node since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ACGN-stock/acgn-stock/network/alerts).