Singularity-Game / Singularity

✨ A Web-Based Singing Game! ✨
GNU Affero General Public License v3.0
8 stars 0 forks source link

Bump the npm_and_yarn group across 1 directory with 22 updates #20

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 6 months ago

Bumps the npm_and_yarn group with 21 updates in the / directory:

Package From To
mysql2 3.3.2 3.9.7
semver 7.3.8 7.5.4
@nrwl/angular 15.9.2 15.9.7
@angular-devkit/build-angular 15.2.8 15.2.11
@angular/cli 15.2.1 15.2.11
@nrwl/eslint-plugin-nx 15.9.2 15.9.7
@nrwl/jest 15.9.2 15.9.7
@nrwl/nest 15.9.2 15.9.7
@nrwl/node 15.9.2 15.9.7
@cypress/request 2.88.12 3.0.1
cypress 8.7.0 13.8.1
express 4.18.1 4.19.2
@nestjs/core 9.0.5 10.3.8
@nestjs/platform-express 9.0.0 10.3.8
@nestjs/serve-static 3.0.1 4.0.2
@nestjs/typeorm 9.0.1 10.0.2
@nestjs/testing 9.0.0 10.3.8
follow-redirects 1.15.5 1.15.6
ip 2.0.0 2.0.1
tar 6.1.15 6.2.1
webpack-dev-middleware 5.3.3 5.3.4

Updates mysql2 from 3.3.2 to 3.9.7

Release notes

Sourced from mysql2's releases.

v3.9.7

3.9.7 (2024-04-21)

Bug Fixes

  • security: sanitize timezone parameter value to prevent code injection - report by zhaoyudi (Nebulalab) (#2608) (7d4b098)

v3.9.6

3.9.6 (2024-04-18)

Bug Fixes

  • binary parser sometimes reads out of packet bounds when results contain null and typecast is false (#2601) (705835d)

v3.9.5

3.9.5 (2024-04-17)

Bug Fixes

  • revert breaking change in results creation (#2591) (f7c60d0)

v3.9.4

3.9.4 (2024-04-09)

Bug Fixes

  • SSL: separate each certificate into an individual item #2542 (63f1055)
  • security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)
    • Fixes a potential RCE attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • security: improve results object creation (#2574) (4a964a3)
    • Fixes a potential Prototype Pollution attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • docs: improve the contribution guidelines (#2552) (8a818ce)

v3.9.3

3.9.3 (2024-03-26)

Bug Fixes

  • security: improve cache key formation (#2424) (0d54b0c)
    • Fixes a potential parser cache poisoning attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • update Amazon RDS SSL CA cert (#2131) (d9dccfd)

v3.9.2

3.9.2 (2024-02-26)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.9.7 (2024-04-21)

Bug Fixes

  • security: sanitize timezone parameter value to prevent code injection (#2608) (7d4b098)

3.9.6 (2024-04-18)

Bug Fixes

  • binary parser sometimes reads out of packet bounds when results contain null and typecast is false (#2601) (705835d)

3.9.5 (2024-04-17)

Bug Fixes

  • revert breaking change in results creation (#2591) (f7c60d0)

3.9.4 (2024-04-09)

Bug Fixes

  • docs: improve the contribution guidelines (#2552) (8a818ce)
  • security: improve results object creation (#2574) (4a964a3)
  • security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)

3.9.3 (2024-03-26)

Bug Fixes

  • security: improve cache key formation (#2424) (0d54b0c)
    • Fixes a potential parser cache poisoning attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
  • update Amazon RDS SSL CA cert (#2131) (d9dccfd)

3.9.2 (2024-02-26)

Bug Fixes

3.9.1 (2024-01-29)

... (truncated)

Commits
  • 2d3cad8 chore(master): release 3.9.7 (#2609)
  • 7d4b098 fix(security): sanitize timezone parameter value to prevent code injection (#...
  • 2efd6ab build(deps): bump lucide-react from 0.371.0 to 0.372.0 in /website (#2606)
  • e3391ed build(deps): bump lucide-react from 0.368.0 to 0.371.0 in /website (#2604)
  • 4f58caa chore(master): release 3.9.6 (#2603)
  • 705835d fix: binary parser sometimes reads out of packet bounds when results contain ...
  • 2129818 chore(master): release 3.9.5 (#2600)
  • f7c60d0 fix: revert breaking change in results creation (#2591)
  • 7f5b395 build(deps-dev): bump @​typescript-eslint/eslint-plugin in /website (#2596)
  • a770052 build(deps-dev): bump @​typescript-eslint/parser in /website (#2595)
  • Additional commits viewable in compare view


Updates semver from 7.3.8 to 7.5.4

Release notes

Sourced from semver's releases.

v7.5.4

7.5.4 (2023-07-07)

Bug Fixes

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

Documentation

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

v7.5.0

7.5.0 (2023-04-17)

Features

Bug Fixes

v7.4.0

7.4.0 (2023-04-10)

... (truncated)

Changelog

Sourced from semver's changelog.

7.5.4 (2023-07-07)

Bug Fixes

7.5.3 (2023-06-22)

Bug Fixes

Documentation

7.5.2 (2023-06-15)

Bug Fixes

7.5.1 (2023-05-12)

Bug Fixes

7.5.0 (2023-04-17)

Features

Bug Fixes

7.4.0 (2023-04-10)

Features

... (truncated)

Commits
  • 36cd334 chore: release 7.5.4
  • 8456d87 chore: postinstall for dependabot template-oss PR
  • dde1f00 chore: postinstall for dependabot template-oss PR
  • dffcd1b chore: bump @​npmcli/template-oss from 4.16.0 to 4.17.0
  • d619f66 chore: postinstall for dependabot template-oss PR
  • 3bc4247 chore: bump @​npmcli/template-oss from 4.15.1 to 4.16.0
  • cc6fde2 fix: trim each range set before parsing
  • 99d8287 fix: correctly parse long build ids as valid (#583)
  • 4f0f6b1 chore: fix arguments in whitespace test (#574)
  • 6bd1a37 chore: remove duplicate test in semver class (#575)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.


Updates @nrwl/angular from 15.9.2 to 15.9.7

Commits


Updates @angular-devkit/build-angular from 15.2.8 to 15.2.11

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v15.2.11

15.2.11 (2024-03-25)

@​angular-devkit/build-angular

Commit Description
fix - c6feb0bb0 update webpack-dev-middleware to 6.1.2

v15.2.10

15.2.10 (2023-10-05)

@​angular-devkit/build-angular

Commit Description
fix - 05213c95b update dependency postcss to v8.4.31

v15.2.9

15.2.9 (2023-06-28)

@​angular/cli

Commit Description
fix - f36e38a91 update direct semver dependencies to 7.5.3
Changelog

Sourced from @​angular-devkit/build-angular's changelog.

15.2.11 (2024-03-25)

@​angular-devkit/build-angular

Commit Type Description
c6feb0bb0 fix update webpack-dev-middleware to 6.1.2

18.0.0-next.0 (2024-03-21)

Breaking Changes

@​angular/cli

  • Node.js support for versions <18.19.1 and <20.11.1 has been removed.

@​angular-devkit/build-angular

  • The support for the legacy Sass build pipeline, previously accessible via NG_BUILD_LEGACY_SASS when utilizing webpack-based builders, has been removed.

Deprecations

@​angular-devkit/schematics

  • NodePackageLinkTask in @angular-devkit/schematics. A custom task should be created instead.

@​angular/cli

Commit Type Description
ac3019570 feat add ng dev alias to ng serve
c7b208555 refactor remove support for Node.js versions <18.19.1 and <20.11.1

@​schematics/angular

Commit Type Description
f452589e2 feat use TypeScript bundler module resolution for new projects

@​angular-devkit/build-angular

Commit Type Description
ee9ec2301 fix Internal server error: Invalid URL when using a non localhost IP
8a54875cb fix handle wrapping of class expressions emitted by esbuild
97973059e refactor remove Sass legacy implementation

... (truncated)

Commits
  • 69c4624 release: cut the v15.2.11 release
  • 61f92fd build: update ng-dev config to work with Node.js 18.19
  • a398d2f test: disable failing test
  • c6feb0b fix(@​angular-devkit/build-angular): update webpack-dev-middleware to 6.1.2
  • b479063 release: cut the v15.2.10 release
  • bfc1f0f test: install specific npm version in npm version E2E test
  • 05213c9 fix(@​angular-devkit/build-angular): update dependency postcss to v8.4.31
  • 00d9708 release: cut the v15.2.9 release
  • f36e38a fix(@​angular/cli): update direct semver dependencies to 7.5.3
  • See full diff in compare view


Updates @angular/cli from 15.2.1 to 15.2.11

Release notes

Sourced from @​angular/cli's releases.

v15.2.11

15.2.11 (2024-03-25)

@​angular-devkit/build-angular

Commit Description
fix - c6feb0bb0 update webpack-dev-middleware to 6.1.2

v15.2.10

15.2.10 (2023-10-05)

@​angular-devkit/build-angular

Commit Description
fix - 05213c95b update dependency postcss to v8.4.31

v15.2.9

15.2.9 (2023-06-28)

@​angular/cli

Commit Description
fix - f36e38a91 update direct semver dependencies to 7.5.3
Changelog

Sourced from @​angular/cli's changelog.

Commits
  • 69c4624 release: cut the v15.2.11 release
  • 61f92fd build: update ng-dev config to work with Node.js 18.19
  • a398d2f test: disable failing test
  • c6feb0b fix(@​angular-devkit/build-angular): update webpack-dev-middleware to 6.1.2
  • b479063 release: cut the v15.2.10 release
  • bfc1f0f test: install specific npm version in npm version E2E test
  • 05213c9 fix(@​angular-devkit/build-angular): update dependency postcss to v8.4.31
  • 00d9708 release: cut the v15.2.9 release
  • f36e38a fix(@​angular/cli): update direct semver dependencies to 7.5.3
  • cdb34b5 release: cut the v15.2.8 release
  • Additional commits viewable in compare view


Updates @nrwl/eslint-plugin-nx from 15.9.2 to 15.9.7

Commits


Updates @nrwl/jest from 15.9.2 to 15.9.7

Commits


Updates @nrwl/nest from 15.9.2 to 15.9.7

Commits


Updates @nrwl/node from 15.9.2 to 15.9.7

Commits


Updates @cypress/request from 2.88.12 to 3.0.1

Release notes

Sourced from @​cypress/request's releases.

v3.0.1

3.0.1 (2023-09-06)

Bug Fixes

v3.0.0

3.0.0 (2023-08-08)

Features

  • Add allowInsecureRedirect option (c5bcf21)

BREAKING CHANGES

  • The allowInsecureRedirect is false by default, which may cause issues if your usage relies on insecure redirects. For the former behavior, you can opt in to insecure redirects by setting the option to true, but it is not recommended.

Co-authored-by: Szymon Drosdzol szymon@doyensec.com

Changelog

Sourced from @​cypress/request's changelog.

Change Log

v2.88.0 (2018/08/10)

v2.87.0 (2018/05/21)

v2.86.0 (2018/05/15)

v2.85.0 (2018/03/12)

v2.84.0 (2018/03/12)

v2.83.0 (2017/09/27)

v2.82.0 (2017/09/19)

v2.81.0 (2017/03/09)

v2.80.0 (2017/03/04)

... (truncated)

Commits


Updates cypress from 8.7.0 to 13.8.1

Release notes

Sourced from cypress's releases.

v13.8.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-8-1

v13.8.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-8-0

v13.7.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-3

v13.7.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2

v13.7.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1

v13.7.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-0

v13.6.6

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-6

v13.6.5

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-5

v13.6.4

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-4

v13.6.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-3

v13.6.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-2

v13.6.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-1

v13.6.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-0

v13.5.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-1

v.13.5.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-0

v13.4.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-4-0

v13.3.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by atofstryker, a new releaser for cypress since your current version.


Updates express from 4.18.1 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option

4.18.2 / 2022-10-08

  • Fix regression routing a large stack in a single route
  • deps: body-parser@1.20.1
    • deps: qs@6.11.0
    • perf: remove unnecessary object clone
  • deps: qs@6.11.0
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates @nestjs/core from 9.0.5 to 10.3.8

Release notes

Sourced ... _Description has been truncated_

dependabot[bot] commented 6 months ago

Superseded by #21.