Bumps the npm_and_yarn group with 3 updates in the / directory: vite, braces and micromatch.
Bumps the npm_and_yarn group with 2 updates in the /examples/.example-template directory: @babel/traverse and vite.
Bumps the npm_and_yarn group with 2 updates in the /examples/meteor-v3-vue directory: @babel/traverse and vite.
Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay directory: braces, micromatch and mongodb.
Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay/.babel-plugin directory: @babel/traverse, braces and json5.
Bumps the npm_and_yarn group with 3 updates in the /examples/react directory: @babel/traverse, vite and rollup.
Bumps the npm_and_yarn group with 5 updates in the /examples/solid directory:
Bumps the npm_and_yarn group with 4 updates in the /npm-packages/@meteor-vite/plugin-zodern-relay directory: vite, braces, micromatch and rollup.
Bumps the npm_and_yarn group with 1 update in the /npm-packages/meteor-vite directory: vite.
Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.
Looks like this PR is already up-to-date with release! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.
Bumps the npm_and_yarn group with 3 updates in the / directory: vite, braces and micromatch. Bumps the npm_and_yarn group with 2 updates in the /examples/.example-template directory: @babel/traverse and vite. Bumps the npm_and_yarn group with 2 updates in the /examples/meteor-v3-vue directory: @babel/traverse and vite. Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay directory: braces, micromatch and mongodb. Bumps the npm_and_yarn group with 3 updates in the /examples/meteor-v3-vue/packages/zodern-relay/.babel-plugin directory: @babel/traverse, braces and json5. Bumps the npm_and_yarn group with 3 updates in the /examples/react directory: @babel/traverse, vite and rollup. Bumps the npm_and_yarn group with 5 updates in the /examples/solid directory:
7.23.4
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
Bumps the npm_and_yarn group with 6 updates in the /examples/svelte directory:
7.23.2
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
3.59.2
4.2.19
Bumps the npm_and_yarn group with 5 updates in the /examples/vue directory:
7.23.2
7.25.7
4.5.2
4.5.5
3.0.2
3.0.3
4.0.5
4.0.8
3.29.4
3.29.5
Bumps the npm_and_yarn group with 4 updates in the /npm-packages/@meteor-vite/plugin-zodern-relay directory: vite, braces, micromatch and rollup. Bumps the npm_and_yarn group with 1 update in the /npm-packages/meteor-vite directory: vite.
Updates
vite
from 4.5.5 to 5.1.8Changelog
Sourced from vite's changelog.
... (truncated)
Commits
fe63231
release: v5.1.85caa08f
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)03f1033
fix: fs raw query (#18112)e710c2f
release: v5.1.75a056dd
fix:fs.deny
with globs with directories (#16250)6f7466e
release: v5.1.6a862ecb
chore(deps): update all non-major dependencies (#16131)8403546
fix: server middleware mode resolve (#16122)b6fb323
fix: check for publicDir before checking if it is a parent directory (#16046)fd9de04
fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#16124)Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
micromatch
from 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e
4.0.8a0e6841
run verb to generate README documentation4ec2884
Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805
Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7
lint67fcce6
fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3
fix: CVE numbers in CHANGELOGd9dbd9a
feat: updated CHANGELOG2ab1315
fix: use actions/setup-node@v41406ea3
feat: rework test to work on macos with node 10,12 and 14Updates
@babel/traverse
from 7.23.7 to 7.25.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
2533cfb
v7.25.7611d958
[babel 8] CreateTSClassImplements|TSInterfaceHeritage
nodes (#16731)506bf91
RemoveBABEL_TYPES_8_BREAKING
flag and enable it by default (#16817)9e14f7d
chore: Enable more lint rules (#16827)e69a7e5
fix: issue with node path keys updated on unrelated paths (#16814)7467c9d
[Babel 8] Remove someScope
methods (#16705)0a55713
[Babel 8] RemoveDecimalLiteral
AST (#16807)69d65f1
[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0
(#16800)2f72b97
v7.25.6faceae9
fix:path.getAssignmentIdentifiers
may beundefined
(#16727)Updates
vite
from 4.5.2 to 4.5.5Changelog
Sourced from vite's changelog.
... (truncated)
Commits
fe63231
release: v5.1.85caa08f
fix: avoid DOM Clobbering gadget ingetRelativeUrlFromDocument
(#18115)03f1033
fix: fs raw query (#18112)e710c2f
release: v5.1.75a056dd
fix:fs.deny
with globs with directories (#16250)6f7466e
release: v5.1.6a862ecb
chore(deps): update all non-major dependencies (#16131)8403546
fix: server middleware mode resolve (#16122)b6fb323
fix: check for publicDir before checking if it is a parent directory (#16046)fd9de04
fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#16124)Updates
rollup
from 3.29.4 to 3.29.5Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
dfd233d
3.29.52ef77c0
Fix DOM Clobbering CVEUpdates
@babel/traverse
from 7.25.6 to 7.25.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
2533cfb
v7.25.7611d958
[babel 8] CreateTSClassImplements|TSInterfaceHeritage
nodes (#16731)506bf91
RemoveBABEL_TYPES_8_BREAKING
flag and enable it by default (#16817)9e14f7d
chore: Enable more lint rules (#16827)e69a7e5
fix: issue with node path keys updated on unrelated paths (#16814)7467c9d
[Babel 8] Remove someScope
methods (#16705)0a55713
[Babel 8] RemoveDecimalLiteral
AST (#16807)69d65f1
[babel 8] Require Node.js^18.20.0 || ^20.17.0 || >=22.8.0
(#16800)@dependabot rebase
@dependabot rebase
Looks like this PR is already up-to-date with release! If you'd still like to recreate it from scratch, overwriting any edits, you can request
@dependabot recreate
.Superseded by #209.