chore(deps): bump the dependencies group across 1 directory with 2 updates

[dependabot[bot]]

Bumps the dependencies group with 2 updates in the / directory: @nodesecure/js-x-ray and pacote.

Updates @nodesecure/js-x-ray from 6.3.0 to 7.1.1

Release notes

Sourced from @​nodesecure/js-x-ray's releases.

v7.1.1

What's Changed

• refactor: implement API exports & minimal docs by @​fraxken in NodeSecure/js-x-ray#264

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v7.1.0...v7.1.1

v7.1.0

What's Changed

• chore(deps): bump the github-actions group with 2 updates by @​dependabot in NodeSecure/js-x-ray#255
• chore(deps-dev): bump eslint from 8.57.0 to 9.0.0 in the development-dependencies group by @​dependabot in NodeSecure/js-x-ray#257
• Create EntryFilesAnalyzer class to analyze a set of entry files by @​jean-michelet in NodeSecure/js-x-ray#258
• Handle ImportExpression nodes by @​jean-michelet in NodeSecure/js-x-ray#261
• chore(deps): bump the github-actions group with 5 updates by @​dependabot in NodeSecure/js-x-ray#262
• add shady link regex for check url with ips by @​sairuss7 in NodeSecure/js-x-ray#260
• docs: add sairuss7 as a contributor for code by @​allcontributors in NodeSecure/js-x-ray#263

EntryFilesAnalyzer

import { EntryFilesAnalyser } from "@nodesecure/js-x-ray";
const efa = new EntryFilesAnalyser();
const entryFiles = ["./path/to/file"];
for await (const fileResult of efa.analyse(entryFiles)) {
console.log(entryFiles);
}

New Contributors

• @​sairuss7 made their first contribution in NodeSecure/js-x-ray#260

Full Changelog: https://github.com/NodeSecure/js-x-ray/compare/v7.0.0...v7.1.0

v7.0.0

What's Changed

• chore(deps): bump is-svg from 4.4.0 to 5.0.0 by @​dependabot in NodeSecure/js-x-ray#181
• Docs: Fix badges in workspaces by @​fabnguess in NodeSecure/js-x-ray#184
• fix the example in readme to prevent "location" field displays wrong way when running as script with Node.js. (nested displayed as [Array]) by @​zxkmm in NodeSecure/js-x-ray#185
• refactor(test): move regress to /issues folder by @​fraxken in NodeSecure/js-x-ray#186
• refactor: remove ASTDeps class and rename Anaysis to SourceFile by @​fraxken in NodeSecure/js-x-ray#187
• refactor: use new SourceParser class by @​fraxken in NodeSecure/js-x-ray#189
• chore(deps): bump string-width from 5.1.2 to 7.0.0 by @​dependabot in NodeSecure/js-x-ray#182
• refactor(probe): allow array of validateNode functions by @​fraxken in NodeSecure/js-x-ray#191
• docs: estree-ast-utils typo by @​PierreDemailly in NodeSecure/js-x-ray#192
• fix(estree-ast-utils): add missing d.ts by @​fraxken in NodeSecure/js-x-ray#193
• feat(getCallExpressionIdentifier): add resolveCallExpression option by @​fraxken in NodeSecure/js-x-ray#194
• refactor: new ProbeRunner class by @​fraxken in NodeSecure/js-x-ray#195
• fix(unsafe-import): warning on unsafe-import using eval/require by @​tchapacan in NodeSecure/js-x-ray#190

... (truncated)

Commits

• 12baaaf 7.1.1
• ed6ae3e refactor: implement API exports & minimal docs (#264)
• c24938b 7.1.0
• 583edff docs: add sairuss7 as a contributor for code (#263)
• 9a9cdae feat: add shady link regex for check url with ips (#260)
• 8807519 chore(deps): bump the github-actions group with 5 updates (#262)
• cfe2475 Handle ImportExpression nodes (#261)
• 55f52fa Create EntryFilesAnalyzer class to analyze a set of entry files (#258)
• f1095a1 chore(deps-dev): bump eslint in the development-dependencies group (#257)
• 062b48d chore(deps): bump the github-actions group with 2 updates (#255)
• Additional commits viewable in compare view

Updates pacote from 17.0.7 to 18.0.6

Release notes

Sourced from pacote's releases.

v18.0.6

18.0.6 (2024-05-07)

Bug Fixes

• 79441a5 #371 clean up requires (#371) (@​wraithgar)
• b19aacb #369 isolate full and corgi packuments in packumentCache (#369) (@​wraithgar)

v18.0.5

18.0.5 (2024-05-06)

Bug Fixes

• 5e75582 #368 dont set _contentLength if not in headers (#368) (@​lukekarrys)
• 1b6950b #365 move bin to its own directory (@​lukekarrys)
• 1b6950b #365 refactor: symbol cleanup (#365) (@​lukekarrys)

v18.0.4

18.0.4 (2024-05-04)

Bug Fixes

• 5fd2c80 #363 linting: no-unused-vars (@​lukekarrys)

Chores

• d867639 #363 bump @​npmcli/template-oss to 4.22.0 (@​lukekarrys)
• a235f37 #363 postinstall for dependabot template-oss PR (@​lukekarrys)

v18.0.3

18.0.3 (2024-04-30)

Dependencies

• 5ecce7a #360 npm-registry-fetch@17.0.0 (#360)

v18.0.2

18.0.2 (2024-04-24)

Bug Fixes

• 116b277 #358 don't strip underscore attributes in .manifest() (#358) (@​wraithgar)

v18.0.1

18.0.1 (2024-04-23)

Bug Fixes

• b547e0d #356 use @​npmcli/package-json (#356) (@​lukekarrys)

... (truncated)

Changelog

Sourced from pacote's changelog.

18.0.6 (2024-05-07)

Bug Fixes

• 79441a5 #371 clean up requires (#371) (@​wraithgar)
• b19aacb #369 isolate full and corgi packuments in packumentCache (#369) (@​wraithgar)

18.0.5 (2024-05-06)

Bug Fixes

• 5e75582 #368 dont set _contentLength if not in headers (#368) (@​lukekarrys)
• 1b6950b #365 move bin to its own directory (@​lukekarrys)
• 1b6950b #365 refactor: symbol cleanup (#365) (@​lukekarrys)

18.0.4 (2024-05-04)

Bug Fixes

• 5fd2c80 #363 linting: no-unused-vars (@​lukekarrys)

Chores

• d867639 #363 bump @​npmcli/template-oss to 4.22.0 (@​lukekarrys)
• a235f37 #363 postinstall for dependabot template-oss PR (@​lukekarrys)

18.0.3 (2024-04-30)

Dependencies

• 5ecce7a #360 npm-registry-fetch@17.0.0 (#360)

18.0.2 (2024-04-24)

Bug Fixes

• 116b277 #358 don't strip underscore attributes in .manifest() (#358) (@​wraithgar)

18.0.1 (2024-04-23)

Bug Fixes

• b547e0d #356 use @​npmcli/package-json (#356) (@​lukekarrys)

18.0.0 (2024-04-15)

⚠️ BREAKING CHANGES

• The silent option was used to control whether @npmcli/run-script would write a banner via console.log. Now ouput will be emitted via an process.emit('output').

... (truncated)

Commits

• f54ea83 chore: release 18.0.6 (#370)
• 79441a5 fix: clean up requires (#371)
• b19aacb fix: isolate full and corgi packuments in packumentCache (#369)
• 8b58a32 chore: release 18.0.5 (#367)
• 5e75582 fix: dont set _contentLength if not in headers (#368)
• 1b6950b fix(refactor): symbol cleanup (#365)
• 005d8a9 chore: release 18.0.4 (#364)
• 5fd2c80 fix(linting): no-unused-vars
• a235f37 chore: postinstall for dependabot template-oss PR
• d867639 chore: bump @​npmcli/template-oss to 4.22.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

Superseded by #243.