Bump the npm-dependencies group with 30 updates

[dependabot[bot]]

Bumps the npm-dependencies group with 30 updates:

Package	From	To
core-js	3.35.1	3.36.0
puppeteer	22.0.0	22.1.0
puppeteer-screen-recorder	2.1.2	3.0.3
webpack	5.90.1	5.90.3
@csstools/css-parser-algorithms	2.5.0	2.6.0
@csstools/media-query-list-parser	2.1.7	2.1.8
@csstools/selector-specificity	3.0.1	3.0.2
@jridgewell/resolve-uri	3.1.1	3.1.2
@puppeteer/browsers	2.0.0	2.0.1
@types/node	20.11.17	20.11.19
call-bind	1.0.6	1.0.7
caniuse-lite	1.0.30001585	1.0.30001588
chromium-bidi	0.5.8	0.5.9
data-uri-to-buffer	6.0.1	6.0.2
define-data-property	1.1.2	1.1.4
electron-to-chromium	1.4.665	1.4.678
flatted	3.2.9	3.3.1
get-uri	6.0.2	6.0.3
has-property-descriptors	1.0.1	1.0.2
has-proto	1.0.1	1.0.3
istanbul-reports	3.1.6	3.1.7
lilconfig	3.0.0	3.1.1
pac-resolver	7.0.0	7.0.1
proxy-agent	6.3.1	6.4.0
puppeteer-core	22.0.0	22.1.0
socks	2.7.1	2.7.3
spdx-exceptions	2.4.0	2.5.0
streamx	2.15.8	2.16.1
tar-fs	3.0.4	3.0.5
terser	5.27.0	5.27.2

Updates core-js from 3.35.1 to 3.36.0

Changelog

Sourced from core-js's changelog.

3.36.0 - 2024.02.14

• ArrayBuffer.prototype.transfer and friends proposal:
  • Built-ins:
    • ArrayBuffer.prototype.detached
    • ArrayBuffer.prototype.transfer
    • ArrayBuffer.prototype.transferToFixedLength
  • Moved to stable ES, Febrary 2024 TC39 meeting
  • Added es. namespace modules, /es/ and /stable/ namespaces entries
• Uint8Array to / from base64 and hex proposal:
  • Methods:
    • Uint8Array.fromBase64
    • Uint8Array.fromHex
    • Uint8Array.prototype.toBase64
    • Uint8Array.prototype.toHex
  • Moved to stage 3, Febrary 2024 TC39 meeting
  • Added /actual/ namespace entries
  • Skipped adding new methods of writing to existing arrays to clarification some moments
• Promise.try proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meeting
• Added an entry point for the new TC39 proposals stage - core-js/stage/2.7 - still empty
• Fixed regression in Set.prototype.intersection feature detection
• Fixed a missed check in Array.prototype.{ indexOf, lastIndexOf, includes }, #1325, thanks @​minseok-choe
• Fixed a missed check in Array.prototype.{ reduce, reduceRight }, #1327, thanks @​minseok-choe
• Fixed Array.from and some other methods with proxy targets, #1322, thanks @​minseok-choe
• Fixed dependencies loading for modules from ArrayBuffer.prototype.transfer and friends proposal in some specific cases in IE10-
• Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required
• Added instance methods polyfills to entries of collections static methods that produce collection instances
• Added missed Date.prototype.toJSON to JSON.stringify entries dependencies
• Added debugging info in some missed cases
• Compat data improvements:
  • { Map, Object }.groupBy, Promise.withResolvers, ArrayBuffer.prototype.transfer and friends marked as supported from Safari 17.4
  • New Set methods fixed and marked as supported from V8 ~ Chrome 123
  • Added Deno 1.40 compat data mapping
  • Symbol.metadata marked as supported from Deno 1.40.4
  • Updated Electron 30 compat data mapping

Commits

• 77123c4 3.36.0
• a3d51ed fix dependencies loading for modules from ArrayBuffer.prototype.transfer an...
• b90f2f5 add an entry point for the new TC39 proposals stage - core-js/stage/2.7 - s...
• 5e68a01 move Uint8Array to / from base64 and hex proposal to stage 3
• 4c51d71 move ArrayBuffer.prototype.transfer and friends to stable ES
• 3348b1a move Promise.try to stage 2
• e7f6af0 use a constant as a error message
• b36ca26 Merge pull request #1328 from minseok-choe/fix/issue-flat, close #1327
• 661eab7 add debugging info in some missed cases
• 96da3a4 Add missed check in array-reduce.js
• Additional commits viewable in compare view

Updates puppeteer from 22.0.0 to 22.1.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v22.1.0

22.1.0 (2024-02-17)

Features

• support closing workers (#11870) (1bdae40)

Bug Fixes

• Chrome for Testing downloads have a new URL (#11923) (f00a94a)
• deprecate Page.prototype.target (#11872) (15c986c)
• frameElement should work for framesets (#11842) (c5cee0e)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 2.0.0 to 2.0.1

puppeteer: v22.1.0

22.1.0 (2024-02-17)

Miscellaneous Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 22.0.0 to 22.1.0
    • @​puppeteer/browsers bumped from 2.0.0 to 2.0.1

Commits

• f6e7cbc chore: release main (#11901)
• f00a94a fix: Chrome for Testing downloads have a new URL (#11923)
• e35aff8 test: remove redundant expectations (#11932)
• aef584c test: do not use quirks mode for test files (#11930)
• eea5884 test: enable cookie tests for Firefox (#11931)
• 472ec75 test: enable skipped tests (#11869)
• 5721e66 build: auto-remove duplicate expectations (#11922)
• f1e3c5b chore: update expectations (#11921)
• a02c7a5 chore: wait for frames to be destroyed (#11919)
• bd4d0fe chore: waitForNavigation should fail if navigation aborts or fails (#11914)
• Additional commits viewable in compare view

Updates puppeteer-screen-recorder from 2.1.2 to 3.0.3

Release notes

Sourced from puppeteer-screen-recorder's releases.

V3.0.3

Release V3.0.3

Breaking Changes

• [X] Minimum recommended node version 16
• [X] Update recommended puppeteer version > 19.0

Improvement

• [X] Fixed Frame drop issue
• [X] Added metadata option for the video
• [X] Added addition video output options

Changelog

Sourced from puppeteer-screen-recorder's changelog.

3.0.3 (2024-02-18)

3.0.2 (2024-02-18)

3.0.1 (2024-02-18)

3.0.0 (2024-02-18)

2.2.0 (2024-02-18)

Features

• add autopad option on ffmpeg configuration (6f53e21)

Commits

• See full diff in compare view

Updates webpack from 5.90.1 to 5.90.3

Release notes

Sourced from webpack's releases.

v5.90.3

Bug Fixes

• don't mangle when destructuring a reexport
• types for Stats.toJson() and Stats.toString()
• many internal types
• [CSS] clean up export css local vars

Perf

• simplify and optimize chunk graph creation

v5.90.2

Bug Fixes

• use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
• the setStatus() of the HMR module should not return an array, which may cause infinite recursion
• __webpack_exports_info__.xxx.canMangle shouldn't always same as default
• mangle export with destructuring
• use new runtime to reconsider skipped connections activeState
• make dynamic import optional in try/catch
• improve auto publicPath detection

Dependencies & Maintenance

• improve CI setup and include Node.js@21

Commits

• 651b3d6 chore(release): 5.90.3
• c8d4b5e fix: more types
• 5b9f6e4 perf: simplify and optimize chunk graph creation
• 1addd26 refactor: more types
• 65d547f fix: should not mangle when destructuring a reexport
• 0b2a5a0 fix(css): clean up export css local vars
• 0258e6c update snapshot
• 2360e3a fix: clean up export css local vars
• fc7b34d fix: should not mangle when destructuring a reexport
• 780f891 (perf) Simplify and optimize chunk graph creation
• Additional commits viewable in compare view

Updates @csstools/css-parser-algorithms from 2.5.0 to 2.6.0

Changelog

Sourced from @​csstools/css-parser-algorithms's changelog.

2.6.0

February 19, 2024

• Add support for multiple replacement values in replaceComponentValues

Commits

• See full diff in compare view

Updates @csstools/media-query-list-parser from 2.1.7 to 2.1.8

Changelog

Sourced from @​csstools/media-query-list-parser's changelog.

2.1.8

February 19, 2024

• Updated @csstools/css-parser-algorithms to 2.6.0 (minor)

Commits

• See full diff in compare view

Updates @csstools/selector-specificity from 3.0.1 to 3.0.2

Changelog

Sourced from @​csstools/selector-specificity's changelog.

3.0.2

February 19, 2024

• Fixed specificity calculation for :any() and :-webkit-any() pseudo class functions. by @​carlosjeurissen

Commits

• See full diff in compare view

Updates @jridgewell/resolve-uri from 3.1.1 to 3.1.2

Release notes

Sourced from @​jridgewell/resolve-uri's releases.

v3.1.2

What's Changed

• Use const enum for UrlType by @​sapphi-red in jridgewell/resolve-uri#120
  • Reduces file size by ~18%

New Contributors

• @​sapphi-red made their first contribution in jridgewell/resolve-uri#120

Full Changelog: https://github.com/jridgewell/resolve-uri/compare/v3.1.1...v3.1.2

Commits

• caa7a29 3.1.2
• e4b1e34 Merge pull request #120 from sapphi-red/main
• 3b69ba0 Use const enum for UrlType
• See full diff in compare view

Updates @puppeteer/browsers from 2.0.0 to 2.0.1

Release notes

Sourced from @​puppeteer/browsers's releases.

browsers: v2.0.1

2.0.1 (2024-02-17)

Bug Fixes

• Chrome for Testing downloads have a new URL (#11923) (f00a94a)

Commits

• f6e7cbc chore: release main (#11901)
• f00a94a fix: Chrome for Testing downloads have a new URL (#11923)
• e35aff8 test: remove redundant expectations (#11932)
• aef584c test: do not use quirks mode for test files (#11930)
• eea5884 test: enable cookie tests for Firefox (#11931)
• 472ec75 test: enable skipped tests (#11869)
• 5721e66 build: auto-remove duplicate expectations (#11922)
• f1e3c5b chore: update expectations (#11921)
• a02c7a5 chore: wait for frames to be destroyed (#11919)
• bd4d0fe chore: waitForNavigation should fail if navigation aborts or fails (#11914)
• Additional commits viewable in compare view

Updates @types/node from 20.11.17 to 20.11.19

Commits

• See full diff in compare view

Updates call-bind from 1.0.6 to 1.0.7

Changelog

Sourced from call-bind's changelog.

v1.0.7 - 2024-02-12

Commits

• [Refactor] use es-define-property 09b76a0
• [Deps] update get-intrinsic, set-function-length ad5136d

Commits

• 25c006c v1.0.7
• 09b76a0 [Refactor] use es-define-property
• ad5136d [Deps] update get-intrinsic, set-function-length
• See full diff in compare view

Updates caniuse-lite from 1.0.30001585 to 1.0.30001588

Commits

• 9887720 Update caniuse-db 1.0.30001588
• 488de59 Update caniuse-db 1.0.30001587
• See full diff in compare view

Updates chromium-bidi from 0.5.8 to 0.5.9

Release notes

Sourced from chromium-bidi's releases.

chromium-bidi: v0.5.9

0.5.9 (2024-02-07)

Features

• allow Chrome-specific params in user contexts (#1814) (4b9d742)
• generalize worker realm (#1779) (a79e1a2)

Bug Fixes

• enable cdp Network domain when needed (#1785) (7be907d)

Changelog

Sourced from chromium-bidi's changelog.

0.5.9 (2024-02-07)

Features

• allow Chrome-specific params in user contexts (#1814) (4b9d742)
• generalize worker realm (#1779) (a79e1a2)

Bug Fixes

• enable cdp Network domain when needed (#1785) (7be907d)

Commits

• 9526a4a chore(main): release chromium-bidi 0.5.9 (#1820)
• a79e1a2 feat: generalize worker realm (#1779)
• 4bf69ac test: another proxy test fix (#1842)
• 89c15f4 test: fix the proxy test (#1841)
• 223ef0d build(deps): Bump wpt from 5a5bd1e to 33b559d (#1840)
• 08cce32 chore: fix not gc after detach (#1836)
• d54423b chore: common npm separator (#1835)
• d23c3e9 build(spec): update WebDriverBidi types (#1831)
• ce4d3e1 ci: fix CI again (#1834)
• 17d98db chore: fix pytest warn (#1832)
• Additional commits viewable in compare view

Updates data-uri-to-buffer from 6.0.1 to 6.0.2

Release notes

Sourced from data-uri-to-buffer's releases.

data-uri-to-buffer@6.0.2

Patch Changes

• c881a18: Use native Buffer decoding in Node.js

Changelog

Sourced from data-uri-to-buffer's changelog.

6.0.2

Patch Changes

• c881a18: Use native Buffer decoding in Node.js

Commits

• d4d3cd0 Version Packages (#271)
• c881a18 Use native decoding of base64 in Node.js (#269)
• See full diff in compare view

Updates define-data-property from 1.1.2 to 1.1.4

Changelog

Sourced from define-data-property's changelog.

v1.1.4 - 2024-02-13

Commits

• [Refactor] use es-define-property 90f2f4c
• [Dev Deps] update @types/object.getownpropertydescriptors cd929d9

v1.1.3 - 2024-02-12

Commits

• [types] hand-write d.ts instead of emitting it 0cbc988
• [meta] simplify exports 690781e
• [Dev Deps] update hasown; clean up DT packages 6cdfd1c
• [actions] cleanup 3142bc6
• [meta] add funding 8474423
• [Deps] update get-intrinsic 3e9be00

Commits

• e313da5 v1.1.4
• 90f2f4c [Refactor] use es-define-property
• cd929d9 [Dev Deps] update @types/object.getownpropertydescriptors
• aff45d1 v1.1.3
• 0cbc988 [types] hand-write d.ts instead of emitting it
• 690781e [meta] simplify exports
• 3142bc6 [actions] cleanup
• 3e9be00 [Deps] update get-intrinsic
• 6cdfd1c [Dev Deps] update hasown; clean up DT packages
• 8474423 [meta] add funding
• See full diff in compare view

Updates electron-to-chromium from 1.4.665 to 1.4.678

Commits

• 503411b 1.4.678
• 751a9ed generate new version
• 418b4b0 1.4.677
• f863d1d generate new version
• 35de16a 1.4.676
• e2c0726 generate new version
• a616116 1.4.675
• 3649e9c generate new version
• f94c669 1.4.674
• 6af5bd5 generate new version
• Additional commits viewable in compare view

Updates flatted from 3.2.9 to 3.3.1

Commits

• 8eb4d90 3.3.1
• f3e9b4b Fixed another typo on TS definition
• a4e42fc 3.3.0
• 9a2c66c Fixed types and TS logo in npm
• 37be626 Removed jsr.json from npm
• ff64696 3.2.13
• 7a280ed Fixed typo in JSDoc TS
• 49f5eff 3.2.12
• a9dffe6 Last attempt to fix jsr.io
• a22589f Still trying to fix jsr.io publishing
• Additional commits viewable in compare view

Updates get-uri from 6.0.2 to 6.0.3

Release notes

Sourced from get-uri's releases.

get-uri@6.0.3

Patch Changes

• c854e4c: Update fs-extra to v11
• Updated dependencies [c881a18]
  • data-uri-to-buffer@6.0.2

Changelog

Sourced from get-uri's changelog.

6.0.3

Patch Changes

• c854e4c: Update fs-extra to v11
• Updated dependencies [c881a18]
  • data-uri-to-buffer@6.0.2

Commits

• d4d3cd0 Version Packages (#271)
• c854e4c [get-uri] Update fs-extra to v11 (#279)
• See full diff in compare view

Updates has-property-descriptors from 1.0.1 to 1.0.2

Changelog

Sourced from has-property-descriptors's changelog.

v1.0.2 - 2024-02-12

Commits

• [Refactor] use es-define-property f93a8c8
• [Dev Deps] update aud, npmignore, tape 42b0c9d
• [Deps] update get-intrinsic 35e9b46

Commits

• 69037fc v1.0.2
• f93a8c8 [Refactor] use es-define-property
• 35e9b46 [Deps] update get-intrinsic
• 42b0c9d [Dev Deps] update aud, npmignore, tape
• See full diff in compare view

Updates has-proto from 1.0.1 to 1.0.3

Changelog

Sourced from has-proto's changelog.

v1.0.3 - 2024-02-19

Commits

• [types] add missing declaration file 26ecade

v1.0.2 - 2024-02-19

Commits

• add types 6435262
• [Dev Deps] update @ljharb/eslint-config, aud, npmignore, tape f16a5e4
• [Refactor] tiny cleanup d1f1a4b
• [meta] add sideEffects flag e7ab1a6

Commits

• 8aac68e v1.0.3
• 26ecade [types] add missing declaration file
• 5ba1815 v1.0.2
• e7ab1a6 [meta] add sideEffects flag
• 6435262 add types
• d1f1a4b [Refactor] tiny cleanup
• f16a5e4 [Dev Deps] update @ljharb/eslint-config, aud, npmignore, tape
• See full diff in compare view

Updates istanbul-reports from 3.1.6 to 3.1.7

Release notes

Sourced from istanbul-reports's releases.

istanbul-reports: v3.1.7

3.1.7 (2024-02-19)

Bug Fixes

• ux: address bug with firefox event handling (2207a87)

Changelog

Sourced from istanbul-reports's changelog.

3.1.7 (2024-02-19)

Bug Fixes

• ux: address bug with firefox event handling (2207a87)

Commits

• 72aa1fb chore: release main (#766)
• 048667a build: rename master to main (#765)
• 2207a87 fix(ux): address bug with firefox event handling
• 8caf771 chore: fix spelling issues (#746)
• See full diff in compare view

Updates lilconfig from 3.0.0 to 3.1.1

Release notes

Sourced from lilconfig's releases.

v3.1.1 Security release

1. Fix security vulnerability by migrating from typescript to javascript with TSDoc comments. See #48
2. Use tabs instead of spaces

Due to how typescript compilation works I had to use eval() to have a dynamic import in project compiled to commonjs in v3.1.0. Eval call introduced a security vulnerability as it was pointed out to me by kind people from Secfault Security. As there is currently no way to make typescript output dynamic import with a commonjs target I migrated the source code to be in javascript. This means that the code in this repository is the code that gets published to npm. The package still includes first party typescript types in index.d.ts file that gets published as well. The runtime code now uses TSDoc annotations to maintain type safety.

v3.1.0 Support ESM config files (async api only)

Lilconfig now supports loading ESM configuration files.

ESM configs can be searched or loaded via async API only.

ESM syntax can be valid in either

• .js and .mjs files in projects with "type": "module" in package.json
• .mjs files in projects that use commonjs

Thanks for pushing this feature @​marekdedic

Commits

• 0157290 3.1.1
• 5b986e1 fix lints in tests
• b6a94f0 udpdated package-lock.json
• 7295f00 package.json should use 2 spaces
• b1ac17c make tsc never emit files
• c5aeeed shorten files in package.json
• a8a3fb7 lint everything in src dir
• 1b6bcf3 migrate to tabs
• 2c68a1a remove .d.ts from import paths
• 7fb11f4 return missing type for sets
• Additional commits viewable in compare view

Updates pac-resolver from 7.0.0 to 7.0.1

Release notes

Sourced from pac-resolver's releases.

pac-resolver@7.0.1

Patch Changes

• a954da3: fix GHSA-78xj-cgh5-2h22 vulnerability

Changelog

Sourced from pac-resolver's changelog.

7.0.1

Patch Changes

• a954da3: fix GHSA-78xj-cgh5-2h22 vulnerability

Commits

• d4d3cd0 Version Packages (#271)
• a954da3 [pac-resolver] Remove ip dependency (#281)
• aaebfa4 Prettier
• 5923589 Moved licenses to separate files (#251)
• See full diff in compare view

Updates proxy-agent from 6.3.1 to 6.4.0

Release notes

Sourced from proxy-agent's releases.

proxy-agent@6.4.0

Minor Changes

• e7e0e56: Allow getProxyForUrl() option to return a Promise

Patch Changes

• Updated dependencies [c3c405e]
  • http-proxy-agent@7.0.1
  • https-proxy-agent@7.0.3

Changelog

Sourced from proxy-agent's changelog.

6.4.0

Minor Changes

• e7e0e56: Allow getProxyForUrl() option to return a Promise

Patch Changes

• Updated dependencies [c3c405e]
  • http-proxy-agent@7.0.1
  • https-proxy-agent@7.0.3

Commits

• d4d3cd0 Version Packages (#271)
• e7e0e56 [proxy-agent] Allow asynchronous getProxyForUrl (#275)
• 5923589 Moved licenses to separate files (#251)
• 523b74c Restrict use of global URL in certain packages (#246)
• See full diff in compare view

Updates puppeteer-core from 22.0.0 to 22.1.0

Release notes

Sourced from puppeteer-core's releases.

puppeteer-core: v22.1.0

22.1.0 (2024-02-17)

Features

• support closing workers (#11870) (1bdae40)

Bug Fixes

• Chrome for Testing downloads have a new URL (#11923) (f00a94a)
• deprecate Page.prototype.target (#11872) (15c986c)
• frameElement should work for framesets (#11842) (c5cee0e)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 2.0.0 to 2.0.1

Commits

• f6e7cbc chore: release main (#11901)
• f00a94a fix: Chrome for Testing downloads have a new URL (#11923)
• e35aff8 test: remove redundant expectations (#11932)
• aef584c test: do not use quirks mode for test files (#11930)
• eea5884 test: enable cookie tests for Firefox (#11931)
• 472ec75 test: enable skipped tests (#11869)
• 5721e66 build: auto-remove duplicate expectations (#11922)
• f1e3c5b chore: update expectations (#11921)
• a02c7a5 chore: wait for frames to be destroyed (#11919)
• bd4d0fe chore: waitForNavigation should fail if navigation aborts or fails (#11914)
• Additional commits viewable in compare view

Updates socks from 2.7.1 to 2.7.3

<... _Description has been truncated_

[aviary2-wf]

Security Insights

No security relevant content was detected by automated scans.

Action Items

• Review PR for security impact; comment "security review required" if needed or unsure

• Verify aviary.yaml coverage of security relevant code

  Questions or Comments? Reach out on Slack: #support-infosec.