search

GSA / code-gov-front-end

Front-end of code.gov
https://code.gov
Other
44 stars 57 forks source link

Bump the npm_and_yarn group across 1 directory with 17 updates #610

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the npm_and_yarn group with 13 updates in the / directory:

Package From To
marked 1.2.9 4.0.10
postcss 7.0.39 8.4.31
@cypress/request 2.88.12 3.0.1
cypress 4.12.1 13.7.2
tough-cookie 2.5.0 removed
favicons 6.2.2 7.2.0
favicons-webpack-plugin 4.2.0 6.0.1
jest 24.9.0 29.7.0
express 4.18.2 4.19.2
ip 1.1.5 1.1.9
node-forge 0.10.0 1.3.1
webpack-dev-server 3.11.3 5.0.4
tar 6.2.0 6.2.1

Updates marked from 1.2.9 to 4.0.10

Release notes

Sourced from marked's releases.

v4.0.10

4.0.10 (2022-01-13)

Bug Fixes

  • security: fix redos vulnerabilities (8f80657)

v4.0.9

4.0.9 (2022-01-06)

Bug Fixes

v4.0.8

4.0.8 (2021-12-19)

Bug Fixes

v4.0.7

4.0.7 (2021-12-09)

Bug Fixes

v4.0.6

4.0.6 (2021-12-02)

Bug Fixes

v4.0.5

4.0.5 (2021-11-25)

Bug Fixes

  • table after paragraph without blank line (#2298) (5714212)

v4.0.4

4.0.4 (2021-11-19)

... (truncated)

Commits
  • ae01170 chore(release): 4.0.10 [skip ci]
  • fceda57 🗜️ build [skip ci]
  • 8f80657 fix(security): fix redos vulnerabilities
  • c4a3ccd Merge pull request from GHSA-rrrm-qjm4-v8hf
  • d7212a6 chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)
  • 5a84db5 chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)
  • 2bc67a5 chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)
  • 98996b8 chore(deps-dev): Bump @​babel/preset-env from 7.16.5 to 7.16.7 (#2353)
  • ebc2c95 chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)
  • e5171a9 chore(release): 4.0.9 [skip ci]
  • Additional commits viewable in compare view


Updates postcss from 7.0.39 to 8.4.31

Release notes

Sourced from postcss's releases.

8.4.31

  • Fixed \r parsing to fix CVE-2023-44270.

8.4.30

8.4.29

8.4.28

  • Fixed Root.source.end for better source map (by @​romainmenke).
  • Fixed Result.root types when process() has no parser.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

8.4.21

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

8.4.18

8.4.17

8.4.16

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.31

  • Fixed \r parsing to fix CVE-2023-44270.

8.4.30

  • Improved source map performance (by Romain Menke).

8.4.29

  • Fixed Node#source.offset (by Ido Rosenthal).
  • Fixed docs (by Christian Oliff).

8.4.28

  • Fixed Root.source.end for better source map (by Romain Menke).
  • Fixed Result.root types when process() has no parser.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

  • Fixed TypeScript support with node16 (by Remco Haszing).

8.4.21

  • Fixed Input#error types (by Aleks Hudochenkov).

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

  • Fixed whitespace preserving after AST transformations (by Romain Menke).

8.4.18

  • Fixed an error on absolute: true with empty sourceContent (by Rene Haas).

8.4.17

  • Fixed Node.before() unexpected behavior (by Romain Menke).
  • Added TOC to docs (by Mikhail Dedov).

8.4.16

... (truncated)

Commits


Updates @cypress/request from 2.88.12 to 3.0.1

Release notes

Sourced from @​cypress/request's releases.

v3.0.1

3.0.1 (2023-09-06)

Bug Fixes

v3.0.0

3.0.0 (2023-08-08)

Features

  • Add allowInsecureRedirect option (c5bcf21)

BREAKING CHANGES

  • The allowInsecureRedirect is false by default, which may cause issues if your usage relies on insecure redirects. For the former behavior, you can opt in to insecure redirects by setting the option to true, but it is not recommended.

Co-authored-by: Szymon Drosdzol szymon@doyensec.com

Changelog

Sourced from @​cypress/request's changelog.

Change Log

v2.88.0 (2018/08/10)

v2.87.0 (2018/05/21)

v2.86.0 (2018/05/15)

v2.85.0 (2018/03/12)

v2.84.0 (2018/03/12)

v2.83.0 (2017/09/27)

v2.82.0 (2017/09/19)

v2.81.0 (2017/03/09)

v2.80.0 (2017/03/04)

... (truncated)

Commits


Updates cypress from 4.12.1 to 13.7.2

Release notes

Sourced from cypress's releases.

v13.7.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2

v13.7.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1

v13.7.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-0

v13.6.6

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-6

v13.6.5

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-5

v13.6.4

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-4

v13.6.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-3

v13.6.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-2

v13.6.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-1

v13.6.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-0

v13.5.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-1

v.13.5.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-0

v13.4.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-4-0

v13.3.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-3

v13.3.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-2

v13.3.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-1

v13.3.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-0

... (truncated)

Commits
  • dd922a8 chore: release 13.7.2 (#29249)
  • 339f64b chore: reduce flake in windows-run-app-integration-tests-chrome by not testin...
  • 4d97a0f dependency: update dependency express to v4.19.2 [security] (#29211)
  • 77b43ef chore: Update v8 snapshot cache (#29234)
  • 1ae7c9e fix: re-initialize DOM subscriptions from a full snapshot on cdp reconnect (#...
  • 425ba79 fix: Allow option values containing quotation marks to be selected (#29214)
  • c05f3a5 chore(deps): update dependency cypress-example-kitchensink to v2.0.5 (#29229)
  • 1da8001 chore: Update Chrome (beta) to 124.0.6367.18 (#29212)
  • 3a739f3 perf: improve replay upload resiliency (#29174)
  • fb87950 chore: Update Chrome (stable) to 123.0.6312.86 (#29202)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by atofstryker, a new releaser for cypress since your current version.


Removes tough-cookie

Updates favicons from 6.2.2 to 7.2.0

Release notes

Sourced from favicons's releases.

v7.2.0

  • added support for splashscrens: iPhone 14 Pro, iPhone 15 Pro, iPhone 15, iPhone 14 Pro Max, iPhone 15 Pro Max, iPhone 15 Plus, 8.3” iPad Mini, 10.9” iPad Air

v7.1.5

  • Update sharp to 0.33

v7.1.4

  • Update sharp to 0.32.4
  • Update xml2js to 0.6.1

v7.1.3

No release notes provided.

v7.1.2

  • Update xml2js to 0.5.0
  • Update sharp to 0.32.0
  • Update Typescript to 5

v7.1.1

No release notes provided.

v7.1.0

  • A new cache busting option cacheBustingQueryParam is added

v7.0.2

  • Allow to specify which icons to generate and their options simultaneously #407
  • Opt-in support of SVG icons #401
  • Throw an error if background is not specified and Windows icon is generated #408
  • Update dependencies to their latest versions

v7.0.1

  • Change minimal supported version of NodeJS to 14.x #402
  • re-export FaviconOptions #404

v7.0.0

Notable changes

  • Maskable icons #336
  • Remove dependency on to-ico
  • Replace Jimp by Sharp #338
  • [BREAKING] Predictable picking of source image #350
  • New option output to control which files are generated. This may be useful for those who want to generate different versions of manifest (e.g. per-locale) and reuse icons
  • Proper escaping of application name and short name https://github.com/itgalaxy/favicons/commit/7ac5abf0e08a43730608771a2776b9d752733a5b
  • Add support for related_applications (#352)
  • [BREAKING] Drop support of Firefox OS and Opera Coast.
  • New option manifestFileName. It may be used if you want to rename a manifest file: { files: { windows: { manifestFileName: "file.xml" } } }.
  • [BREAKING] Rename manifest.json to manifest.webmanifest
  • [BREAKING] Remove support of Gulp
  • Add webmanifest's shortcuts support #378

... (truncated)

Commits
  • c0591a3 7.2.0
  • 837cd1c Added new snapshot images
  • 6da7153 Added support for latest Apple Splash-Screens
  • 1b7ecf5 Fix repository url
  • a3e5e7c 7.1.5
  • d86748c Make unit tests ES modules
  • 3bd8436 Update minor dependencies
  • 702be9f Update Sharp to 0.33
  • 606fe94 chore(deps): bump sharp from 0.32.4 to 0.32.6
  • cdaa232 chore(deps-dev): bump @​babel/traverse from 7.22.8 to 7.23.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by andy128k, a new releaser for favicons since your current version.


Updates favicons-webpack-plugin from 4.2.0 to 6.0.1

Changelog

Sourced from favicons-webpack-plugin's changelog.

6.0.1 (2023-08-13)

  • update dependencies to their latest versions

6.0.0 (2022-11-21)

  • update dependencies to their latest versions (#342)

6.0.0-alpha.2 (2022-10-26)

  • support string array in options.logo (#332)
  • support options.logoMaskable (#333)
  • update manifest file extension (#341)

6.0.0-alpha.1 (2022-10-02)

  • Upgrage favicons to v7.0.1
  • Upgrade all dependencies to their latest versions

5.0.2 (2021-02-23)

Bug Fixes

  • ignore empty tags generated by favicons (5f94f54), closes #260

5.0.1 (2021-02-04)

Bug Fixes

  • remove unused dependencies (f3c5b17)

5.0.0 (2021-02-03)

âš  BREAKING CHANGES

  • file based cache will only work if you configure webpacks filesystem cache
  • favicons needs to be installed separately
  • drop webpack@4 support

Features

  • add manifest option (e2928c4)
  • add support for webpack 5 publicPath 'auto' and relative favicons (7293186)
  • generate custom manifest in light mode (db677fc)
  • turn favicons into a peer dependency (8141094)
  • use the processAssets webpack api to add assets (d15d92f)
  • use webpack 5 cache system and remove child compilation (c1dc12c)

... (truncated)

Commits
  • 4751ab1 Version 6.0.1
  • a353147 Update dependencies
  • 92d9e1b Update CI and minimal supported version of NodeJS
  • 41004ae Use async-await syntax in runCached
  • 7879498 Generate test coverage report in HTML format too
  • d8567b6 Hide private methods. Regenerate type declarations.
  • 3a800f0 Extract findHtmlWebpackPlugin function
  • 7d52c5f Replace tapAsync with tapPromise
  • 6331e91 Lift common code
  • 1179c1b Update dependencies
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by andy128k, a new releaser for favicons-webpack-plugin since your current version.


Updates jest from 24.9.0 to 29.7.0

Release notes

Sourced from jest's releases.

v29.7.0

Features

  • [create-jest] Add npm init / yarn create initialiser for Jest projects (#14465)
  • [jest-validate] Allow deprecation warnings for unknown options (#14499)

Fixes

  • [jest-resolver] Replace unmatched capture groups in moduleNameMapper with empty string instead of undefined (#14507)
  • [jest-snapshot] Allow for strings as well as template literals in inline snapshots (#14465)
  • [@jest/test-sequencer] Calculate test runtime if perStats.duration is missing (#14473)

Performance

  • [@jest/create-cache-key-function] Cache access of NODE_ENV and BABEL_ENV (#14455)

Chore & Maintenance

  • [jest-cli] Move internal config initialisation logic to the create-jest package (#14465)

New Contributors

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.4...v29.7.0

v29.6.4

Fixes

  • [jest-core] Fix typo in scheduleAndRun performance marker (#14434)
  • [jest-environment-node] Make sure atob and btoa are writeable in Node 20 (#14446)
  • [jest-worker] Additional error wrapper for parentPort.postMessage to fix unhandled DataCloneError. (#14437)

New Contributors

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.3...v29.6.4

v29.6.3

Fixes

  • [expect, @jest/expect-utils] ObjectContaining support symbol as key (#14414)
  • [expect] Remove @types/node from dependencies (#14385)
  • [jest-core] Use workers in watch mode by default to avoid crashes (#14059 & #14085).
  • [jest-reporters] Update istanbul-lib-instrument dependency to v6. (#14401)
  • [jest-mock] Revert #13692 as it was a breaking change (#14429)
  • [jest-mock] Revert #13866 as it was a breaking change (#14429)

... (truncated)

Changelog

Sourced from jest's changelog.

29.7.0

Features

  • [create-jest] Add npm init / yarn create initialiser for Jest projects (#14465)
  • [jest-validate] Allow deprecation warnings for unknown options (#14499)

Fixes

  • [jest-resolver] Replace unmatched capture groups in moduleNameMapper with empty string instead of undefined (#14507)
  • [jest-snapshot] Allow for strings as well as template literals in inline snapshots (#14465)
  • [@jest/test-sequencer] Calculate test runtime if perStats.duration is missing (#14473)

Performance

  • [@jest/create-cache-key-function] Cache access of NODE_ENV and BABEL_ENV (#14455)

Chore & Maintenance

  • [jest-cli] Move internal config initialisation logic to the create-jest package (#14465)

29.6.4

Fixes

  • [jest-core] Fix typo in scheduleAndRun performance marker (#14434)
  • [jest-environment-node] Make sure atob and btoa are writeable in Node 20 (#14446)
  • [jest-worker] Additional error wrapper for parentPort.postMessage to fix unhandled DataCloneError. (#14437)

29.6.3

Fixes

  • [expect, @jest/expect-utils] ObjectContaining support sumbol as key (#14414)
  • [expect] Remove @types/node from dependencies (#14385)
  • [jest-core] Use workers in watch mode by default to avoid crashes (#14059 & #14085).
  • [jest-reporters] Update istanbul-lib-instrument dependency to v6. (#14401)
  • [jest-mock] Revert #13692 as it was a breaking change (#14429)
  • [jest-mock] Revert #13866 as it was a breaking change (#14429)
  • [jest-mock] Revert #13867 as it was a breaking change (#14429)
  • [@jest/reporters] Marks Reporter's hooks as optional (#14433)
  • [jest-runtime] Fix dynamic ESM import module bug when loaded module through jest.isolateModulesAsync (#14397)

Chore & Maintenance

  • [jest-changed-files, jest-circus, jest-console, @jest/core, @jest/runtime, @jest/transform] Use invariant and notEmpty from jest-util rather than own internal (#14366)

29.6.2

Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by simenb, a new releaser for jest since your current version.


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates ip from 1.1.5 to 1.1.9

Commits


Updates minimist from 0.0.8 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

  • Merge tag 'v0.2.3' a026794
  • [eslint] fix indentation and whitespace
    dependabot[bot] commented 5 months ago

    Superseded by #611.