Bump the npm_and_yarn group across 2 directories with 12 updates

[dependabot[bot]]

Bumps the npm_and_yarn group with 8 updates in the /apps/shop/currency/src directory:

Package	From	To
xml2js	0.4.23	0.5.0
@google-cloud/firestore	4.15.1	7.6.0
@google-cloud/debug-agent	7.1.0	9.0.1
protobufjs	6.11.3	6.11.4
semver	5.7.1	5.7.2
qs	6.5.2	6.5.3
taffydb	2.6.2	removed
google-gax	3.5.2	4.3.2

Bumps the npm_and_yarn group with 7 updates in the /apps/shop/payment/src directory:

Package	From	To
@google-cloud/firestore	4.15.1	7.6.0
@google-cloud/debug-agent	7.1.0	9.0.1
minimatch	3.0.4	3.1.2
protobufjs	6.11.3	6.11.4
semver	5.7.1	5.7.2
taffydb	2.6.2	removed
google-gax	3.5.2	4.3.2

Updates xml2js from 0.4.23 to 0.5.0

Commits

• See full diff in compare view

Updates @google-cloud/firestore from 4.15.1 to 7.6.0

Release notes

Sourced from @​google-cloud/firestore's releases.

v7.6.0

7.6.0 (2024-04-02)

Features

• Vector Search (#2006) (e906b42)

v7.5.0

7.5.0 (2024-03-25)

Features

• Protos and autogen client for vector (#2027) (c65cef0)
• Query Profile (#2014) (9a45ec8)

v7.4.0

7.4.0 (2024-03-15)

Features

• A new message Backup is added (#2021) (6bced86)
• A new message BackupSchedule is added (6bced86)
• A new message CreateBackupScheduleRequest is added (6bced86)
• A new message DailyRecurrence is added (6bced86)
• A new message DeleteBackupRequest is added (6bced86)
• A new message DeleteBackupScheduleRequest is added (6bced86)
• A new message GetBackupRequest is added (6bced86)
• A new message GetBackupScheduleRequest is added (6bced86)
• A new message ListBackupSchedulesRequest is added (6bced86)
• A new message ListBackupSchedulesResponse is added (6bced86)
• A new message ListBackupsRequest is added (6bced86)
• A new message ListBackupsResponse is added (6bced86)
• A new message RestoreDatabaseMetadata is added (6bced86)
• A new message RestoreDatabaseRequest is added (6bced86)
• A new message UpdateBackupScheduleRequest is added (6bced86)
• A new message WeeklyRecurrence is added (6bced86)
• A new method CreateBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method DeleteBackup is added to service FirestoreAdmin (6bced86)
• A new method DeleteBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method GetBackup is added to service FirestoreAdmin (6bced86)
• A new method GetBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method ListBackups is added to service FirestoreAdmin (6bced86)
• A new method ListBackupSchedules is added to service FirestoreAdmin (6bced86)
• A new method RestoreDatabase is added to service FirestoreAdmin (6bced86)
• A new method UpdateBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new resource_definition firestore.googleapis.com/Backup is added (6bced86)
• A new resource_definition firestore.googleapis.com/BackupSchedule is added (6bced86)

... (truncated)

Changelog

Sourced from @​google-cloud/firestore's changelog.

7.6.0 (2024-04-02)

Features

• Vector Search (#2006) (e906b42)

7.5.0 (2024-03-25)

Features

• Protos and autogen client for vector (#2027) (c65cef0)
• Query Profile (#2014) (9a45ec8)

7.4.0 (2024-03-15)

Features

• A new message Backup is added (#2021) (6bced86)
• A new message BackupSchedule is added (6bced86)
• A new message CreateBackupScheduleRequest is added (6bced86)
• A new message DailyRecurrence is added (6bced86)
• A new message DeleteBackupRequest is added (6bced86)
• A new message DeleteBackupScheduleRequest is added (6bced86)
• A new message GetBackupRequest is added (6bced86)
• A new message GetBackupScheduleRequest is added (6bced86)
• A new message ListBackupSchedulesRequest is added (6bced86)
• A new message ListBackupSchedulesResponse is added (6bced86)
• A new message ListBackupsRequest is added (6bced86)
• A new message ListBackupsResponse is added (6bced86)
• A new message RestoreDatabaseMetadata is added (6bced86)
• A new message RestoreDatabaseRequest is added (6bced86)
• A new message UpdateBackupScheduleRequest is added (6bced86)
• A new message WeeklyRecurrence is added (6bced86)
• A new method CreateBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method DeleteBackup is added to service FirestoreAdmin (6bced86)
• A new method DeleteBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method GetBackup is added to service FirestoreAdmin (6bced86)
• A new method GetBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new method ListBackups is added to service FirestoreAdmin (6bced86)
• A new method ListBackupSchedules is added to service FirestoreAdmin (6bced86)
• A new method RestoreDatabase is added to service FirestoreAdmin (6bced86)
• A new method UpdateBackupSchedule is added to service FirestoreAdmin (6bced86)
• A new resource_definition firestore.googleapis.com/Backup is added (6bced86)
• A new resource_definition firestore.googleapis.com/BackupSchedule is added (6bced86)
• Add new types ExplainOptions, ExplainMetrics, PlanSummary, ExecutionStats (#2013) (e598b9d)

... (truncated)

Commits

• 9da9fb0 chore(main): release 7.6.0 (#2033)
• e906b42 feat: Vector Search (#2006)
• d2d6bcb chore: run api-report for main (#2032)
• 1d751a8 chore(main): release 7.5.0 (#2030)
• 9a45ec8 feat: Query Profile (#2014)
• c65cef0 feat: Protos and autogen client for vector (#2027)
• 319adc3 chore(main): release 7.4.0 (#2008)
• 6bced86 feat: A new message Backup is added (#2021)
• eb3d55c chore: include dayofweek proto in update.sh (#2022)
• ea4b6d0 fix: update service definitions (#2016)
• Additional commits viewable in compare view

Updates @google-cloud/debug-agent from 7.1.0 to 9.0.1

Release notes

Sourced from @​google-cloud/debug-agent's releases.

v9.0.1

9.0.1 (2024-02-01)

Bug Fixes

• Repair broken test on Node 20 (#1193) (a600ea8)

v9.0.0

9.0.0 (2023-12-21)

⚠ BREAKING CHANGES

• upgrade to node 14 (#1160)

Bug Fixes

• deps: Update dependency firebase-admin to v12 (#1185) (f757913)
• Increase capture limit to allow Windows tests to pass (#1188) (728b90e)
• Remove unused second parameter (#1161) (f8815fc)

Miscellaneous Chores

• Upgrade to node 14 (#1160) (bd45473)

v8.0.0

8.0.0 (2023-06-06)

⚠ BREAKING CHANGES

• Remove support for deprecated Cloud Debugger API. (#1144)

Features

• Add stop function to allow shutting down the debug agent (#1147) (c292200)
• Remove support for deprecated Cloud Debugger API. (#1144) (7ed8fb2)

Bug Fixes

• Unblock compodoc page generation (#1145) (c5bbb4e)

v7.2.2

7.2.2 (2023-01-16)

Bug Fixes

... (truncated)

Changelog

Sourced from @​google-cloud/debug-agent's changelog.

9.0.1 (2024-02-01)

Bug Fixes

• Repair broken test on Node 20 (#1193) (a600ea8)

9.0.0 (2023-12-21)

⚠ BREAKING CHANGES

• upgrade to node 14 (#1160)

Bug Fixes

• deps: Update dependency firebase-admin to v12 (#1185) (f757913)
• Increase capture limit to allow Windows tests to pass (#1188) (728b90e)
• Remove unused second parameter (#1161) (f8815fc)

Miscellaneous Chores

• Upgrade to node 14 (#1160) (bd45473)

8.0.0 (2023-06-06)

⚠ BREAKING CHANGES

• Remove support for deprecated Cloud Debugger API. (#1144)

Features

• Add stop function to allow shutting down the debug agent (#1147) (c292200)
• Remove support for deprecated Cloud Debugger API. (#1144) (7ed8fb2)

Bug Fixes

• Unblock compodoc page generation (#1145) (c5bbb4e)

7.2.2 (2023-01-16)

Bug Fixes

• Add timeout to firebase db connection attempt (#1132) (8cd89c8)

7.2.1 (2022-12-15)

... (truncated)

Commits

• 10f202b chore(main): release 9.0.1 (#1195)
• fc5e4e0 docs: Document archival status of repository. (#1191)
• 10c7aa3 chore(deps): update codecov/codecov-action action to v4 (#1194)
• a600ea8 fix: Repair broken test on Node 20 (#1193)
• 8bb6588 chore(main): release 9.0.0 (#1162)
• f757913 fix(deps): update dependency firebase-admin to v12 (#1185)
• d2533f2 chore(deps): update dependency @​fastify/busboy to v2.1.0 (#1182)
• 03bbe96 chore: update cloud-rad version to ^0.4.0 (#1181)
• a4209b8 chore(deps): update actions/setup-node action to v4 (#1176)
• a4c3ff8 chore(deps): update dependency @​types/node to v20 (#1177)
• Additional commits viewable in compare view

Updates protobufjs from 6.11.3 to 6.11.4

Commits

• See full diff in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

• 2f8fd41 #585 better handling of whitespace (#585) (@​joaomoreno, @​lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

• 2f8fd41 #585 better handling of whitespace (#585) (@​joaomoreno, @​lukekarrys)

5.7

• Add minVersion method

5.6

• Move boolean loose param to an options object, with backwards-compatibility protection.
• Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

• Add version coercion capabilities

5.4

• Add intersection checking

5.3

• Add minSatisfying method

5.2

• Add prerelease(v) that returns prerelease components

5.1

• Add Backus-Naur for ranges
• Remove excessively cute inspection methods

5.0

• Remove AMD/Browserified build artifacts
• Fix ltr and gtr when using the * range
• Fix for range * with a prerelease identifier

Commits

• f8cc313 chore: release 5.7.2
• 2f8fd41 fix: better handling of whitespace (#585)
• deb5ad5 chore: @​npmcli/template-oss@​4.16.0
• See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates jose from 2.0.6 to 4.15.5

Release notes

Sourced from jose's releases.

v4.15.5

Fixes

• add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176

v4.15.4

Fixes

• types: export GetKeyFunction (#592) (936c9df), closes #591

v4.15.3

This release contains only Node.js CITGM related test updates.

Fixes nodejs/citgm#1011

v4.15.2

Fixes

• build: add a node target for jose-browser-runtime releases (abb63d0)

v4.15.1

Fixes

• resolve missing types for the cryptoRuntime const (1627965)

v4.15.0

Features

• export the used crypto runtime as a constant (0681dda)

v4.14.6

Fixes

• build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

v4.14.5

Refactor

• catch type error when decoding base64url signature (#569) (935e920)
• catch type errors when decoding various base64url strings (9024e87)

v4.14.4

Refactor

• cleanup NODE-ED25519 workerd workarounds (072e83d)

v4.14.3

Reverts

• Revert "fix(types): headers and payloads may only be JSON values and primitives" (06d8101), closes #534

... (truncated)

Changelog

Sourced from jose's changelog.

4.15.5 (2024-03-07)

Fixes

• add a maxOutputLength option to zlib inflate (1b91d88)

4.15.4 (2023-10-14)

Fixes

• types: export GetKeyFunction (#592) (936c9df), closes #591

4.15.3 (2023-10-11)

4.15.2 (2023-10-04)

Fixes

• build: add a node target for jose-browser-runtime releases (abb63d0)

4.15.1 (2023-10-02)

Fixes

• resolve missing types for the cryptoRuntime const (1627965)

4.15.0 (2023-10-02)

Features

• export the used crypto runtime as a constant (0681dda)

4.14.6 (2023-09-04)

Fixes

• build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

4.14.5 (2023-09-02)

Refactor

• catch type error when decoding base64url signature (#569) (935e920)

... (truncated)

Commits

• 765aafd chore(release): 4.15.5
• b36e45e test: add export check to x509 pem import tests
• e839ecb test: stop testing JWE RSA1_5 Algorithm
• 1b91d88 fix: add a maxOutputLength option to zlib inflate
• 9ca2b24 build: remove release action
• f3035d8 chore: cleanup after release
• f0bb220 chore(release): 4.15.4
• 6f38554 chore: bump dev deps
• 936c9df fix(types): export GetKeyFunction (#592)
• 5ac6619 chore: bump dev deps
• Additional commits viewable in compare view

Updates jsonwebtoken from 8.5.1 to 9.0.2

Changelog

Sourced from jsonwebtoken's changelog.

9.0.2 - 2023-08-30

• security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes #921.
• refactor: reduce library size by using lodash specific dependencies, closes #878.

9.0.1 - 2023-07-05

• fix(stubs): allow decode method to be stubbed

9.0.0 - 2022-12-21

Breaking changes: See Migration from v8 to v9

Breaking changes

• Removed support for Node versions 11 and below.
• The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16)
• RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6)
• Key types must be valid for the signing / verification algorithm

Security fixes

• security: fixes Arbitrary File Write via verify function - CVE-2022-23529
• security: fixes Insecure default algorithm in jwt.verify() could lead to signature validation bypass - CVE-2022-23540
• security: fixes Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - CVE-2022-23541
• security: fixes Unrestricted key type could lead to legacy keys usage - CVE-2022-23539

Commits

• bc28861 Release 9.0.2 (#935)
• 96b8906 refactor: use specific lodash packages (#933)
• ed35062 security: Updating semver to 7.5.4 to resolve CVE-2022-25883 (#932)
• 84539b2 Updating package version to 9.0.1 (#920)
• a99fd4b fix(stubs): allow decode method to be stubbed (#876)
• e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33
• 5eaedbf chore(ci): remove github test actions job (#861)
• cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)
• ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...
• 8345030 fix(sign&verify)!: Remove default none support from sign and verify met...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by charlesrea, a new releaser for jsonwebtoken since your current version.

Updates qs from 6.5.2 to 6.5.3

Changelog

Sourced from qs's changelog.

6.5.3

• [Fix] parse: ignore __proto__ keys (#428)
• [Fix] utils.merge: avoid a crash with a null target and a truthy non-array source
• [Fix] correctly parse nested arrays
• [Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)
• [Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided
• [Fix] when parseArrays is false, properly handle keys ending in []
• [Fix] fix for an impossible situation: when the formatter is called with a non-string value
• [Fix] utils.merge: avoid a crash with a null target and an array source
• [Refactor] utils: reduce observable [[Get]]s
• [Refactor] use cached Array.isArray
• [Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)
• [Refactor] parse: only need to reassign the var once
• [Robustness] stringify: avoid relying on a global undefined (#427)
• [readme] remove travis badge; add github actions/codecov badges; update URLs
• [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
• [Docs] Clarify the need for "arrayLimit" option
• [meta] fix README.md (#399)
• [meta] add FUNDING.yml
• [actions] backport actions from main
• [Tests] always use String(x) over x.toString()
• [Tests] remove nonexistent tape option
• [Dev Deps] backport from main

Commits

• 298bfa5 v6.5.3
• ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
• 691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
• 1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
• 12ac1c4 [meta] fix README.md (#399)
• 0338716 [actions] backport actions from main
• 5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
• 51b8a0b add FUNDING.yml
• 45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
• f814a7f [Dev Deps] backport from main
• Additional commits viewable in compare view

Removes taffydb

Updates google-gax from 3.5.2 to 4.3.2

Release notes

Sourced from google-gax's releases.

google-gax: v4.3.2

4.3.2 (2024-03-26)

Bug Fixes

• deps: include new proto changes (#1573) (87b5718)

google-gax: v4.3.1

4.3.1 (2024-02-08)

Bug Fixes

• deps: update dependency @​grpc/grpc-js to ~1.10.0 (#1558) (ea84b7b)
• deps: update google-auth-library to 9.3.0 (#1559) (81978ac)

google-gax: v4.1.0

4.1.0 (2024-01-11)

Features

• server streaming retries (#1496) (8d4c44b)

Bug Fixes

• deps: update google-proto-files to include new field_info proto (#1532) (0c89a17)

google-gax: v4.0.5

4.0.5 (2023-10-17)

Bug Fixes

• deps: update dependency retry-request to v7 (#1515) (85a83a3)
• deps: update grpc-js to 1.9.6 (#1518) (4e1f365)

Changelog

Sourced from google-gax's changelog.

4.3.2 (2024-03-26)

Bug Fixes

• deps: include new proto changes (#1573) (87b5718)

4.3.1 (2024-02-08)

Bug Fixes

• deps: update dependency @​grpc/grpc-js to ~1.10.0 (#1558) (ea84b7b)
• deps: update google-auth-library to 9.3.0 (#1559) (81978ac)

4.3.0 (2024-01-31)

Features

• implement support for Trusted Partner Cloud (#1552) (d51218c)

Bug Fixes

• do not throw DeprecationWarnings for legacy retry behavior (#1551) (2f39306)

4.2.1 (2024-01-26)

Bug Fixes

• run update-protos to include new field_info.proto (#1547) (ae37986)

4.2.0 (2024-01-18)

Features

• expose uuid for autopopulation of request_id (#1542) (6c66e22)

4.1.0 (2024-01-11)

Features

• server streaming retries (#1496) (8d4c44b)

Bug Fixes

... (truncated)

Commits

• 1a3713e chore: release main (#1574)
• 87b5718 fix(deps): include new proto changes (#1573)
• 3ec6d5c chore: release main (#1569)
• 157ec0d chore: release main (#1560)
• ea84b7b fix(deps): update dependency @​grpc/grpc-js to ~1.10.0 (#1558)
• 81978ac fix(deps): update google-auth-library to 9.3.0 (#1559)
• c65cee0 chore: release main (#1553)
• d51218c feat: implement support for Trusted Partner Cloud (#1552)
• 2f39306 fix: do not throw DeprecationWarnings for legacy retry behavior (#1551)
• 3efb193 chore: release main (#1549)
• Additional commits viewable in compare view

Updates word-wrap from 1.2.3 to 1.2.5

Release notes

Sourced from word-wrap's releases.

1.2.5

Changes:

Reverts default value for options.indent to two spaces ' '.

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.4...1.2.5

1.2.4

What's Changed

• Remove default indent by @​mohd-akram in jonschlinkert/word-wrap#24
• 🔒fix: CVE 2023 26115 (2) by @​OlafConijn in jonschlinkert/word-wrap#41
• :lock: fix: CVE-2023-26115 by @​aashutoshrathi in jonschlinkert/word-wrap#33
• chore: publish workflow by @​OlafConijn in jonschlinkert/word-wrap#42

New Contributors

• @​mohd-akram made their first contribution in jonschlinkert/word-wrap#24
• @​OlafConijn made their first contribution in jonschlinkert/word-wrap#41
• @​aashutoshrathi made their first contribution in jonschlinkert/word-wrap#33

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4

Commits

• 207044e 1.2.5
• 9894315 revert default indent
• f64b188 run verb to generate README
• 03ea082 Merge pull request #42 from jonschlinkert/chore/publish-workflow
• 420dce9 Merge pull request #41 from jonschlinkert/fix/CVE-2023-26115-2
• bfa694e Update .github/workflows/publish.yml
• ace0b3c chore: bump version to 1.2.4
• 6fd7275 chore: add publish workflow
• 30d6daf chore: fix test
• 655929c chore: remove package-lock
• Additional commits viewable in compare view

Updates @google-cloud/firestore from 4.15.1 to 7.6.0

Release notes

Sourced from @​google-cloud/firestore's releases.

v7.6.0

7.6.0 (2024-04-02)

Features

• Vector Search (#2006) (e906b42)

v7.5.0

7.5.0 (2024-03-25)

Features

• Protos and autogen client for vector (#2027) (c65cef0)
• Query Profile (#2014) (9a45ec8)

v7.4.0

7.4.0 (2024-03-15)

Features

• A new message Backup is added (#2021) (6bced86)
• A new message BackupSchedule is added (6bced86)
• A new message CreateBackupScheduleRequest is added (6bced86)
• A new message DailyRecurrence is added (6bced86)
• A new message DeleteBackupRequest is added (
  dependabot[bot] commented 5 months ago

  Superseded by #46.