search

Jeff-Lewis / cls-hooked

cls-hooked : CLS using AsynWrap or async_hooks instead of async-listener for node 4.7+
BSD 2-Clause "Simplified" License
758 stars 89 forks source link

chore(deps): bump the npm_and_yarn group across 1 directories with 9 updates #83

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 7 months ago

Bumps the npm_and_yarn group with 5 updates in the /. directory:

Package From To
js-yaml 3.6.1 3.13.1
tap 10.7.3 18.7.0
minimist 0.0.8 1.2.8
mocha 6.2.2 6.2.3
pathval 1.1.0 1.1.1

Updates js-yaml from 3.6.1 to 3.13.1

Changelog

Sourced from js-yaml's changelog.

[3.13.1] - 2019-04-05

Security

  • Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

Security

  • Security fix: safeLoad() can hang when arrays with nested refs used as key. Now throws exception for nested arrays. #475.

[3.12.2] - 2019-02-26

Fixed

  • Fix noArrayIndent option for root level, #468.

[3.12.1] - 2019-01-05

Added

  • Added noArrayIndent option, #432.

[3.12.0] - 2018-06-02

Changed

  • Support arrow functions without a block statement, #421.

[3.11.0] - 2018-03-05

Added

  • Add arrow functions suport for !!js/function.

Fixed

  • Fix dump in bin/octal/hex formats for negative integers, #399.

[3.10.0] - 2017-09-10

Fixed

  • Fix condenseFlow output (quote keys for sure, instead of spaces), #371, #370.
  • Dump astrals as codepoints instead of surrogate pair, #368.

[3.9.1] - 2017-07-08

Fixed

  • Ensure stack is present for custom errors in node 7.+, #351.

[3.9.0] - 2017-07-08

Added

  • Add condenseFlow option (to create pretty URL query params), #346.

Fixed

... (truncated)

Commits


Updates tap from 10.7.3 to 18.7.0

Release notes

Sourced from tap's releases.

tap@18.7.0

No release notes provided.

tap@18.6.1

No release notes provided.

tap@18.6.0

No release notes provided.

tap@18.5.8

No release notes provided.

tap@18.5.7

No release notes provided.

tap@18.5.6

No release notes provided.

tap@18.5.5

No release notes provided.

tap@18.5.4

No release notes provided.

tap@18.5.1

No release notes provided.

tap@18.5.0

No release notes provided.

tap@18.4.6

No release notes provided.

tap@18.4.5

No release notes provided.

tap@18.4.4

No release notes provided.

tap@18.4.3

No release notes provided.

tap@18.4.1

No release notes provided.

tap@18.4.0

What's Changed

Note: The formatting of Symbol objects and enumerable Symbol properties has changed in snapshots and object diffs.

... (truncated)

Commits
  • 5187113 update versions
  • 5bb7ca8 remove shell:true from publish script
  • 2f9abd3 changelog 18.7
  • f105701 late-bind t.context, so it can be set in before()
  • ae2deb7 always initialize t.context
  • e906d21 tcompare: update test to strip out node version specific cruft
  • dc8dadd ci: node 20 and 21 only
  • 0768324 remove windows from CI
  • 5063b46 chore: use --loader in bootstrap
  • 51e8a31 bootstrap: run nx in --verbose mode
  • Additional commits viewable in compare view


Updates minimist from 0.0.8 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

  • Merge tag 'v0.2.3' a026794
  • [eslint] fix indentation and whitespace 5368ca4
  • [eslint] fix indentation and whitespace e5f5067
  • [eslint] more cleanup 62fde7d
  • [eslint] more cleanup 36ac5d0
  • [meta] add auto-changelog 73923d2
  • [actions] add reusable workflows d80727d
  • [eslint] add eslint; rules to enable later are warnings 48bc06a
  • [eslint] fix indentation 34b0f1c
  • [readme] rename and add badges 5df0fe4
  • [Dev Deps] switch from covert to nyc a48b128
  • [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
  • [meta] create FUNDING.yml; add funding in package.json 3639e0c
  • [meta] use npmignore to autogenerate an npmignore file be2e038
  • Only apps should have lockfiles 282b570
  • isConstructorOrProto adapted from PR ef9153f
  • [Dev Deps] update @ljharb/eslint-config, aud 098873c
  • [Dev Deps] update @ljharb/eslint-config, aud 3124ed3
  • [meta] add safe-publish-latest 4b927de
  • [Tests] add aud in posttest b32d9bd
  • [meta] update repo URLs f9fdfc0
  • [actions] Avoid 0.6 tests due to build failures ba92fe6
  • [Dev Deps] update tape 950eaa7
  • [Dev Deps] add missing npmignore dev dep 3226afa
  • Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits
  • 6901ee2 v1.2.8
  • a026794 Merge tag 'v0.2.3'
  • c0b2661 v0.2.3
  • 63b8fee [Fix] Fix long option followed by single dash (#17)
  • 72239e6 [Tests] Remove duplicate test (#12)
  • 34b0f1c [eslint] fix indentation
  • 3226afa [Dev Deps] add missing npmignore dev dep
  • 098873c [Dev Deps] update @ljharb/eslint-config, aud
  • 9ec4d27 [Fix] Fix long option followed by single dash
  • ba92fe6 [actions] Avoid 0.6 tests due to build failures
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.


Updates mocha from 6.2.2 to 6.2.3

Release notes

Sourced from mocha's releases.

v6.2.3 (latest-6)

6.2.3 / 2020-03-25

:lock: Security Fixes

Changelog

Sourced from mocha's changelog.

6.2.3 / 2020-03-25

:lock: Security Fixes

Commits
Maintainer changes

This version was pushed to npm by juergba, a new releaser for mocha since your current version.


Updates flat from 4.1.0 to 4.1.1

Commits
Maintainer changes

This version was pushed to npm by timoxley, a new releaser for flat since your current version.


Updates lodash from 4.17.10 to 4.17.15

Commits


Updates y18n from 3.2.1 to 4.0.3

Changelog

Sourced from y18n's changelog.

4.0.3 (2021-04-07)

Bug Fixes

  • release: 4.x.x should not enforce Node 10 (#126) (1e21a53)

4.0.1 (2020-11-30)

Bug Fixes

4.0.0 (2017-10-10)

Bug Fixes

  • allow support for falsy values like 0 in tagged literal (#45) (c926123)

Features

  • __: added tagged template literal support (#44) (0598daf)

BREAKING CHANGES

  • __: dropping Node 0.10/Node 0.12 support
Commits
  • 0aa97c5 chore: release 4.x.x (#128)
  • a8e7f04 build(release-please): configure branch properly (#127)
  • 1e21a53 fix(release): 4.x.x should not enforce Node 10 (#126)
  • 8dc7580 docs: update CHANGELOG
  • 7de58ca fix: address prototype pollution issue
  • 45d2568 chore(release): 4.0.0
  • 9f11b1e chore: add standard-version as npm run release (#54)
  • d6fa907 chore(package): update mocha to version 4.0.1 (#52)
  • 0594bc4 chore(package): update coveralls to version 3.0.0 (#51)
  • f69b8ca chore(package): update chai to version 4.0.1 (#46)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.


Updates pathval from 1.1.0 to 1.1.1

Release notes

Sourced from pathval's releases.

v1.1.1

Fixes a security issue around prototype pollution.

Commits
  • db6c3e3 chore: v1.1.1
  • 7859e0e Merge pull request #60 from deleonio/fix/vulnerability-prototype-pollution
  • 49ce1f4 style: correct rule in package.json
  • c77b9d2 fix: prototype pollution vulnerability + working tests
  • 49031e4 chore: remove very old nodejs
  • 57730a9 chore: update deps and tool configuration
  • a123018 Merge pull request #55 from chaijs/remove-lgtm
  • 07eb4a8 Delete MAINTAINERS
  • a0147cd Merge pull request #54 from astorije/patch-1
  • aebb278 Center repo name on README
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by chai, a new releaser for pathval since your current version.


Updates qs from 6.3.2 to 6.9.1

Changelog

Sourced from qs's changelog.

6.9.1

  • [Fix] parse: with comma true, handle field that holds an array of arrays (#335)
  • [Fix] parse: with comma true, do not split non-string values (#334)
  • [meta] add funding field
  • [Dev Deps] update eslint, @ljharb/eslint-config
  • [Tests] use shared travis-ci config

6.9.0

  • [New] parse/stringify: Pass extra key/value argument to decoder (#333)
  • [Dev Deps] update eslint, @ljharb/eslint-config, evalmd
  • [Tests] parse: add passing arrayFormat tests
  • [Tests] add posttest using npx aud to run npm audit without a lockfile
  • [Tests] up to node v12.10, v11.15, v10.16, v8.16
  • [Tests] Buffer.from in node v5.0-v5.9 and v4.0-v4.4 requires a TypedArray

6.8.3

  • [Fix] parse: ignore __proto__ keys (#428)
  • [Robustness] stringify: avoid relying on a global undefined (#427)
  • [Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)
  • [readme] remove travis badge; add github actions/codecov badges; update URLs
  • [Tests] clean up stringify tests slightly
  • [Docs] add note and links for coercing primitive values (#408)
  • [meta] fix README.md (#399)
  • [actions] backport actions from main
  • [Dev Deps] backport updates from main
  • [Refactor] stringify: reduce branching
  • [meta] do not publish workflow files

6.8.2

  • [Fix] proper comma parsing of URL-encoded commas (#361)
  • [Fix] parses comma delimited array while having percent-encoded comma treated as normal text (#336)

6.8.1

  • [Fix] parse: Fix parsing array from object with comma true (#359)
  • [Fix] parse: throw a TypeError instead of an Error for bad charset (#349)
  • [Fix] parse: with comma true, handle field that holds an array of arrays (#335)
  • [fix] parse: with comma true, do not split non-string values (#334)
  • [meta] add tidelift marketing copy
  • [meta] add funding field
  • [Dev Deps] update eslint, @ljharb/eslint-config, tape, safe-publish-latest, evalmd, has-symbols, iconv-lite, mkdirp, object-inspect
  • [Tests] parse: add passing arrayFormat tests
  • [Tests] use shared travis-ci configs
  • [Tests] Buffer.from in node v5.0-v5.9 and v4.0-v4.4 requires a TypedArray
  • [actions] add automatic rebasing / merge commit blocking

6.8.0

  • [New] add depth=false to preserve the original key; [Fix] depth=0 should preserve the original key (#326)
  • [New] [Fix] stringify symbols and bigints
  • [Fix] ensure node 0.12 can stringify Symbols
  • [Fix] fix for an impossible situation: when the formatter is called with a non-string value

... (truncated)

Commits
  • 7b36800 v6.9.1
  • 6151be3 [Tests] use shared travis-ci config
  • b9a032f [meta] add funding field
  • 1f35831 [Dev Deps] update eslint, @ljharb/eslint-config
  • f884e2d [Fix] parse: with comma true, handle field that holds an array of arrays
  • 698b683 [fix] parse: with comma true, do not split non-string values
  • 670254b v6.9.0
  • dadf9db [Tests] parse: add passing arrayFormat tests
  • df0cb44 [Dev Deps] update eslint
  • 7f216ee [New] parse/stringify: Pass extra key/value argument to decoder
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jeff-Lewis/cls-hooked/network/alerts).
dependabot[bot] commented 4 months ago

Superseded by #88.