Bumps the npm_and_yarn group with 3 updates in the / directory: vite, braces and micromatch.
Bumps the npm_and_yarn group with 2 updates in the /examples/.example-template directory: @babel/traverse and vite.
Bumps the npm_and_yarn group with 2 updates in the /examples/meteor-v3-vue directory: @babel/traverse and vite.
Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay directory: braces, micromatch and mongodb.
Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay/.babel-plugin directory: @babel/traverse, braces and json5.
Bumps the npm_and_yarn group with 3 updates in the /examples/react directory: @babel/traverse, vite and rollup.
Bumps the npm_and_yarn group with 5 updates in the /examples/solid directory:
Bumps the npm_and_yarn group with 4 updates in the /npm-packages/@meteor-vite/plugin-zodern-relay directory: vite, braces, micromatch and rollup.
Bumps the npm_and_yarn group with 1 update in the /npm-packages/meteor-vite directory: vite.
Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.
Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.
The MongoDB Node.js team is pleased to announce version 4.17.2 of the mongodb package!
Release Notes
Fix connection leak when serverApi is enabled
When enabling serverApi the driver's RTT mesurment logic (used to determine the closest node) still sent the legacy hello command "isMaster" causing the server to return an error. Unfortunately, the error handling logic did not correctly destroy the socket which would cause a leak.
Both sending the correct hello command and the error handling connection clean up logic are fixed in this change.
Bumps the npm_and_yarn group with 3 updates in the / directory: vite, braces and micromatch. Bumps the npm_and_yarn group with 2 updates in the /examples/.example-template directory: @babel/traverse and vite. Bumps the npm_and_yarn group with 2 updates in the /examples/meteor-v3-vue directory: @babel/traverse and vite. Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay directory: braces, micromatch and mongodb. Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay/.babel-plugin directory: @babel/traverse, braces and json5. Bumps the npm_and_yarn group with 3 updates in the /examples/react directory: @babel/traverse, vite and rollup. Bumps the npm_and_yarn group with 5 updates in the /examples/solid directory:
7.23.4
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
Bumps the npm_and_yarn group with 6 updates in the /examples/svelte directory:
7.23.2
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
3.59.2
4.2.19
Bumps the npm_and_yarn group with 5 updates in the /examples/vue directory:
7.23.2
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
Bumps the npm_and_yarn group with 4 updates in the /npm-packages/@meteor-vite/plugin-zodern-relay directory: vite, braces, micromatch and rollup. Bumps the npm_and_yarn group with 1 update in the /npm-packages/meteor-vite directory: vite.
Updates
vite
from 4.5.3 to 4.5.5Changelog
Sourced from vite's changelog.
Commits
f1d8845
release: v4.5.52466c08
release: v4.5.4e812716
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)b901438
fix: backport #18112, fs raw queryUpdates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
micromatch
from 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e
4.0.8a0e6841
run verb to generate README documentation4ec2884
Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805
Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7
lint67fcce6
fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3
fix: CVE numbers in CHANGELOGd9dbd9a
feat: updated CHANGELOG2ab1315
fix: use actions/setup-node@v41406ea3
feat: rework test to work on macos with node 10,12 and 14Updates
@babel/traverse
from 7.23.7 to 7.25.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
2533cfb
v7.25.7611d958
[babel 8] CreateTSClassImplements|TSInterfaceHeritage
nodes (#16731)506bf91
RemoveBABEL_TYPES_8_BREAKING
flag and enable it by default (#16817)9e14f7d
chore: Enable more lint rules (#16827)e69a7e5
fix: issue with node path keys updated on unrelated paths (#16814)7467c9d
[Babel 8] Remove someScope
methods (#16705)0a55713
[Babel 8] RemoveDecimalLiteral
AST (#16807)69d65f1
[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0
(#16800)2f72b97
v7.25.6faceae9
fix:path.getAssignmentIdentifiers
may beundefined
(#16727)Updates
vite
from 4.5.2 to 4.5.5Changelog
Sourced from vite's changelog.
Commits
f1d8845
release: v4.5.52466c08
release: v4.5.4e812716
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)b901438
fix: backport #18112, fs raw queryUpdates
rollup
from 3.29.4 to 3.29.5Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
dfd233d
3.29.52ef77c0
Fix DOM Clobbering CVEUpdates
@babel/traverse
from 7.25.6 to 7.25.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
2533cfb
v7.25.7611d958
[babel 8] CreateTSClassImplements|TSInterfaceHeritage
nodes (#16731)506bf91
RemoveBABEL_TYPES_8_BREAKING
flag and enable it by default (#16817)9e14f7d
chore: Enable more lint rules (#16827)e69a7e5
fix: issue with node path keys updated on unrelated paths (#16814)7467c9d
[Babel 8] Remove someScope
methods (#16705)0a55713
[Babel 8] RemoveDecimalLiteral
AST (#16807)69d65f1
[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0
(#16800)2f72b97
v7.25.6faceae9
fix:path.getAssignmentIdentifiers
may beundefined
(#16727)Updates
vite
from 4.5.5 to 5.4.9Changelog
Sourced from vite's changelog.
Commits
f1d8845
release: v4.5.52466c08
release: v4.5.4e812716
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)b901438
fix: backport #18112, fs raw queryUpdates
rollup
from 3.29.5 to 4.24.0Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
dfd233d
3.29.52ef77c0
Fix DOM Clobbering CVEUpdates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
micromatch
from 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e
4.0.8a0e6841
run verb to generate README documentation4ec2884
Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805
Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7
lint67fcce6
fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3
fix: CVE numbers in CHANGELOGd9dbd9a
feat: updated CHANGELOG2ab1315
fix: use actions/setup-node@v41406ea3
feat: rework test to work on macos with node 10,12 and 14Updates
mongodb
from 4.8.1 to 4.17.2Release notes
Sourced from mongodb's releases.
... (truncated)
Changelog
Sourced from mongodb's changelog.