search

Yelp / beans

Bringing people together, one cup of coffee at a time
MIT License
93 stars 37 forks source link

Bump the all-dependencies group in /frontend with 5 updates #298

Closed dependabot[bot] closed 11 months ago

dependabot[bot] commented 11 months ago

Bumps the all-dependencies group in /frontend with 5 updates:

Package From To
axios 1.5.1 1.6.0
react-router-dom 6.17.0 6.18.0
react-tooltip 5.21.5 5.22.0
eslint 8.52.0 8.53.0
eslint-plugin-jsx-a11y 6.7.1 6.8.0

Updates axios from 1.5.1 to 1.6.0

Release notes

Sourced from axios's releases.

Release v1.6.0

Release notes:

Bug Fixes

  • CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
  • dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
  • types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

  • CVE 2023 45857 ( #6028 )

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

Changelog

Sourced from axios's changelog.

1.6.0 (2023-10-26)

Bug Fixes

  • CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
  • dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
  • types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

  • CVE 2023 45857 ( #6028 )

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

Commits


Updates react-router-dom from 6.17.0 to 6.18.0

Release notes

Sourced from react-router-dom's releases.

react-router-dom-v5-compat@6.4.0-pre.15

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.15
    • react-router-dom@6.4.0-pre.15

react-router-dom-v5-compat@6.4.0-pre.11

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.11
    • react-router-dom@6.4.0-pre.11

react-router-dom-v5-compat@6.4.0-pre.10

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.10
    • react-router-dom@6.4.0-pre.10

react-router-dom-v5-compat@6.4.0-pre.9

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.9
    • react-router-dom@6.4.0-pre.9

react-router-dom-v5-compat@6.4.0-pre.8

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.8
    • react-router-dom@6.4.0-pre.8

react-router-dom-v5-compat@6.4.0-pre.7

Patch Changes

  • Updated dependencies
    • react-router@6.4.0-pre.7
    • react-router-dom@6.4.0-pre.7

react-router-dom-v5-compat@6.4.0-pre.6

Patch Changes

  • 44bce3c6: Fix react-router-dom peer dependency version
    • react-router@6.4.0-pre.6
    • react-router-dom@6.4.0-pre.6

react-router-dom-v5-compat@6.4.0-pre.5

... (truncated)

Changelog

Sourced from react-router-dom's changelog.

6.18.0

Minor Changes

  • Add support for manual fetcher key specification via useFetcher({ key: string }) so you can access the same fetcher instance from different components in your application without prop-drilling (RFC) (#10960)

    • Fetcher keys are now also exposed on the fetchers returned from useFetchers so that they can be looked up by key

  • Add navigate/fetcherKey params/props to useSumbit/Form to support kicking off a fetcher submission under the hood with an optionally user-specified key (#10960)

    • Invoking a fetcher in this way is ephemeral and stateless
    • If you need to access the state of one of these fetchers, you will need to leverage useFetcher({ key }) to look it up elsewhere

Patch Changes

  • Adds a fetcher context to RouterProvider that holds completed fetcher data, in preparation for the upcoming future flag that will change the fetcher persistence/cleanup behavior (#10961)
  • Fix the future prop on BrowserRouter, HashRouter and MemoryRouter so that it accepts a Partial<FutureConfig> instead of requiring all flags to be included. (#10962)
  • Updated dependencies:
    • @remix-run/router@1.11.0
    • react-router@6.18.0
Commits
  • 667f936 chore: Update version for release (#10981)
  • 67af262 chore: Update version for release (pre) (#10978)
  • 1500288 Updates for v7_fetcherPersist post-processing logic (#10977)
  • cacc90b chore: Update version for release (pre) (#10966)
  • 19af0cf Add future.v7_fetcherPersist flag (#10962)
  • cb2d911 Add fetcher data layer (#10961)
  • c0dbcd2 Add useFetcher(key) and <Form navigate={false}> (#10960)
  • 805924d Revert "Ensure Form contains splat portion of pathname when no action is spec...
  • 908a40a Ensure Form contains splat portion of pathname when no action is specified (#...
  • a71b4e2 Merge branch 'release-next' into dev
  • Additional commits viewable in compare view


Updates react-tooltip from 5.21.5 to 5.22.0

Release notes

Sourced from react-tooltip's releases.

v5.22.0

If you like the project, please give the project a GitHub 🌟

What's Changed

Full Changelog: https://github.com/ReactTooltip/react-tooltip/compare/v5.21.7...v5.22.0

v5.21.7

If you like the project, please give the project a GitHub 🌟

What's Changed

Full Changelog: https://github.com/ReactTooltip/react-tooltip/compare/v5.21.6...v5.21.7

v5.21.6

If you like the project, please give the project a GitHub 🌟

What's Changed

Full Changelog: https://github.com/ReactTooltip/react-tooltip/compare/v5.21.5...v5.21.6

Commits


Updates eslint from 8.52.0 to 8.53.0

Release notes

Sourced from eslint's releases.

v8.53.0

Features

  • 528e1c0 feat: Deprecate formatting rules (#17696) (Nicholas C. Zakas)
  • c0b11dd feat: Add suggestions for no-prototype-builtins (#17677) (Yonathan Randolph)

Bug Fixes

  • 1ad6257 fix: ensure that exit code for fatal errors is not overwritten (#17683) (Milos Djermanovic)
  • b329ea7 fix: add ; after JSX nodes in no-object-constructor autofix (#17672) (Francesco Trotta)

Documentation

  • ab8c60d docs: change position of return to top button (#17688) (Tanuj Kanti)
  • 4fc44c0 docs: update twitter icon to new X icon (#17687) (Tanuj Kanti)
  • 4164b2c docs: Update README (GitHub Actions Bot)
  • 8651895 docs: Fix tabs in rule examples (#17653) (Francesco Trotta)
  • 3aec1c5 docs: explained rule fixers and suggestions (#17657) (Josh Goldberg ✨)

Chores

  • ba4d4d5 chore: remove metascraper (#17707) (Milos Djermanovic)
  • 0d07338 chore: Update dependencies (#17706) (Milos Djermanovic)
  • 93256a3 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • 485ec7d test: fix ESLint tests for caching (#17699) (Milos Djermanovic)
  • db06a7f ci: bump actions/setup-node from 3 to 4 (#17676) (dependabot[bot])
  • 994596b ci: run tests in Node.js 21 (#17673) (Francesco Trotta)
Changelog

Sourced from eslint's changelog.

v8.53.0 - November 3, 2023

  • ba4d4d5 chore: remove metascraper (#17707) (Milos Djermanovic)
  • 0d07338 chore: Update dependencies (#17706) (Milos Djermanovic)
  • 93256a3 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • ab8c60d docs: change position of return to top button (#17688) (Tanuj Kanti)
  • 528e1c0 feat: Deprecate formatting rules (#17696) (Nicholas C. Zakas)
  • 485ec7d test: fix ESLint tests for caching (#17699) (Milos Djermanovic)
  • c0b11dd feat: Add suggestions for no-prototype-builtins (#17677) (Yonathan Randolph)
  • 4fc44c0 docs: update twitter icon to new X icon (#17687) (Tanuj Kanti)
  • 1ad6257 fix: ensure that exit code for fatal errors is not overwritten (#17683) (Milos Djermanovic)
  • 4164b2c docs: Update README (GitHub Actions Bot)
  • 8651895 docs: Fix tabs in rule examples (#17653) (Francesco Trotta)
  • 3aec1c5 docs: explained rule fixers and suggestions (#17657) (Josh Goldberg ✨)
  • db06a7f ci: bump actions/setup-node from 3 to 4 (#17676) (dependabot[bot])
  • b329ea7 fix: add ; after JSX nodes in no-object-constructor autofix (#17672) (Francesco Trotta)
  • 994596b ci: run tests in Node.js 21 (#17673) (Francesco Trotta)
Commits


Updates eslint-plugin-jsx-a11y from 6.7.1 to 6.8.0

Changelog

Sourced from eslint-plugin-jsx-a11y's changelog.

v6.8.0 - 2023-11-01

Merged

Fixed

Commits

  • [Tests] migrate helper parsers function from eslint-plugin-react ce4d57f
  • [Refactor] use es-iterator-helpers 52de824
  • [New] mouse-events-have-key-events: add hoverInHandlers/hoverOutHandlers config db64898
  • [New] add polymorphicPropName setting for polymorphic components fffb05b
  • [Fix] isNonInteractiveElement: Upgrade aria-query to 5.3.0 and axobject-query to 3.2.1 64bfea6
  • [Refactor] use hasown instead of has 9a8edde
  • [actions] update used actions 10c061a
  • [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/plugin-transform-flow-strip-types, @babel/register, aud, eslint-doc-generator, eslint-plugin-import, minimist 6d5022d
  • [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, @babel/register, eslint-doc-generator, eslint-plugin-import 4dc7f1e
  • [New] anchor-has-content: Allow title attribute OR aria-label attribute e6bfd5c
  • [patch] mouse-events-have-key-events: rport the attribute, not the node eadd70c
  • [Deps] update @babel/runtime, array-includes, array.prototype.flatmap, object.entries, object.fromentries 46ffbc3
  • [Deps] update @babel/runtime, axobject-query, jsx-ast-utils, semver 5999555
  • [Fix] pin aria-query and axe-core to fix failing tests on main 8d8f016
  • [patch] move semver from Deps to Dev Deps 4da13e7
  • [Deps] update ast-types-flow b755318
  • [Dev Deps] update eslint-plugin-import f1c976b
  • [Deps] unpin language-tags 3d1d26d
  • [Docs] no-static-element-interactions: tabIndex is written tabindex 1271153
  • [Deps] Upgrade ast-types-flow to mitigate Docker user namespacing problems f0d2ddb
  • [Dev Deps] pin jackspeak since 2.1.2+ depends on npm aliases, which kill the install process in npm < 6 0c278f4
Commits
  • 9742753 v6.8.0
  • b755318 [Deps] update ast-types-flow
  • f1c976b [Dev Deps] update eslint-plugin-import
  • 52de824 [Refactor] use es-iterator-helpers
  • 9a8edde [Refactor] use hasown instead of has
  • 46ffbc3 [Deps] update @babel/runtime, array-includes, array.prototype.flatmap, ...
  • 4dc7f1e [Dev Deps] update @babel/cli, @babel/core, @babel/eslint-parser, `@babe...
  • fffb05b [New] add polymorphicPropName setting for polymorphic components
  • 3d1d26d [Deps] unpin language-tags
  • 10c061a [actions] update used actions
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 11 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.