Bump the npm_and_yarn group across 1 directories with 7 updates

[dependabot[bot]]

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package	From	To
semver	7.3.8	7.5.2
@babel/traverse	7.20.7	7.24.0
get-func-name	2.0.0	2.0.2
json5	1.0.1	1.0.2
word-wrap	1.2.3	1.2.5
xml2js	0.4.19	0.6.2
aws-sdk	2.1280.0	2.1573.0

Updates semver from 7.3.8 to 7.5.2

Release notes

Sourced from semver's releases.

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

• 58c791f #566 diff when detecting major change from prerelease (#566) (@​lukekarrys)
• 5c8efbc #565 preserve build in raw after inc (#565) (@​lukekarrys)
• 717534e #564 better handling of whitespace (#564) (@​lukekarrys)

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

• d30d25a #559 show type on invalid semver error (#559) (@​tjenkinson)

v7.5.0

7.5.0 (2023-04-17)

Features

• 503a4e5 #548 allow identifierBase to be false (#548) (@​lsvalina)

Bug Fixes

• e219bb4 #552 throw on bad version with correct error message (#552) (@​wraithgar)
• fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@​tjenkinson)
• 2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@​macno)

v7.4.0

7.4.0 (2023-04-10)

Features

• 113f513 #532 identifierBase parameter for .inc (#532) (@​wraithgar, @​b-bly)
• 48d8f8f #530 export new RELEASE_TYPES constant (@​hcharley)

Bug Fixes

• 940723d #538 intersects with v0.0.0 and v0.0.0-0 (#538) (@​wraithgar)
• aa516b5 #535 faster parse options (#535) (@​H4ad)
• 61e6ea1 #536 faster cache key factory for range (#536) (@​H4ad)
• f8b8b61 #541 optimistic parse (#541) (@​H4ad)
• 796cbe2 #533 semver.diff prerelease to release recognition (#533) (@​wraithgar, @​dominique-blockchain)
• 3f222b1 #537 reuse comparators on subset (#537) (@​H4ad)
• f66cc45 #539 faster diff (#539) (@​H4ad)

Documentation

• c5d29df #530 Add "Constants" section to README (@​hcharley)

Changelog

Sourced from semver's changelog.

7.5.2 (2023-06-15)

Bug Fixes

• 58c791f #566 diff when detecting major change from prerelease (#566) (@​lukekarrys)
• 5c8efbc #565 preserve build in raw after inc (#565) (@​lukekarrys)
• 717534e #564 better handling of whitespace (#564) (@​lukekarrys)

7.5.1 (2023-05-12)

Bug Fixes

• d30d25a #559 show type on invalid semver error (#559) (@​tjenkinson)

7.5.0 (2023-04-17)

Features

• 503a4e5 #548 allow identifierBase to be false (#548) (@​lsvalina)

Bug Fixes

• e219bb4 #552 throw on bad version with correct error message (#552) (@​wraithgar)
• fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@​tjenkinson)
• 2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@​macno)

7.4.0 (2023-04-10)

Features

• 113f513 #532 identifierBase parameter for .inc (#532) (@​wraithgar, @​b-bly)
• 48d8f8f #530 export new RELEASE_TYPES constant (@​hcharley)

Bug Fixes

• 940723d #538 intersects with v0.0.0 and v0.0.0-0 (#538) (@​wraithgar)
• aa516b5 #535 faster parse options (#535) (@​H4ad)
• 61e6ea1 #536 faster cache key factory for range (#536) (@​H4ad)
• f8b8b61 #541 optimistic parse (#541) (@​H4ad)
• 796cbe2 #533 semver.diff prerelease to release recognition (#533) (@​wraithgar, @​dominique-blockchain)
• 3f222b1 #537 reuse comparators on subset (#537) (@​H4ad)
• f66cc45 #539 faster diff (#539) (@​H4ad)

Documentation

• c5d29df #530 Add "Constants" section to README (@​hcharley)

Commits

• e7b78de chore: release 7.5.2
• 58c791f fix: diff when detecting major change from prerelease (#566)
• 5c8efbc fix: preserve build in raw after inc (#565)
• 717534e fix: better handling of whitespace (#564)
• 2f738e9 chore: bump @​npmcli/template-oss from 4.14.1 to 4.15.1 (#558)
• aa016a6 chore: release 7.5.1
• d30d25a fix: show type on invalid semver error (#559)
• 09c69e2 chore: bump @​npmcli/template-oss from 4.13.0 to 4.14.1 (#555)
• 5b02ad7 chore: release 7.5.0
• e219bb4 fix: throw on bad version with correct error message (#552)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.

Updates @babel/traverse from 7.20.7 to 7.24.0

Release notes

Sourced from @​babel/traverse's releases.

v7.24.0 (2024-02-28)

Thanks @​ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

:rocket: New Feature

• babel-standalone
  • #11696 Export babel tooling packages in @babel/standalone (@​ajihyf)
• babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  • #16267 Implement noUninitializedPrivateFieldAccess assumption (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16242 Support decorator 2023-11 normative updates (@​JLHwung)
• babel-preset-flow
  • #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@​nicolo-ribaudo)
  • #16284 Add experimental_useHermesParser option in preset-flow (@​liuxingbaoyu)
• babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  • #16172 Add transform support for JSON modules imports (@​nicolo-ribaudo)
• babel-plugin-transform-runtime
  • #16241 Add back moduleName option to @babel/plugin-transform-runtime (@​nicolo-ribaudo)
• babel-parser, babel-types
  • #16277 Allow import attributes for TSImportType (@​sosukesuzuki)

:bug: Bug Fix

• babel-plugin-proposal-do-expressions, babel-traverse
  • #16305 fix: avoid popContext on unvisited node paths (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  • #16312 Fix class private properties when privateFieldsAsSymbols (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  • #16307 Fix the support of arguments in private get/set method (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  • #16287 Reduce decorator static property size (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #16281 Fix evaluation order of decorators with cached receiver (@​nicolo-ribaudo)
  • #16279 Fix decorator this memoization (@​JLHwung)
  • #16266 Preserve static on decorated private accessor (@​nicolo-ribaudo)
  • #16258 fix: handle decorated async private method and generator (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  • #16275 Fix class private properties when privateFieldsAsProperties (@​liuxingbaoyu)
• babel-helpers
  • #16268 Do not consider arguments in a helper as a global reference (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #16270 Handle symbol key class elements decoration (@​JLHwung)
  • #16265 Do not define access.get for public setter decorators (@​nicolo-ribaudo)

:nail_care: Polish

• babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  • #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@​nicolo-ribaudo)

:house: Internal

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.24.0 (2024-02-28)

:rocket: New Feature

• babel-standalone
  • #11696 Export babel tooling packages in @babel/standalone (@​ajihyf)
• babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  • #16267 Implement noUninitializedPrivateFieldAccess assumption (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #16242 Support decorator 2023-11 normative updates (@​JLHwung)
• babel-preset-flow
  • #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@​nicolo-ribaudo)
  • #16284 Add experimental_useHermesParser option in preset-flow (@​liuxingbaoyu)
• babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  • #16172 Add transform support for JSON modules imports (@​nicolo-ribaudo)
• babel-plugin-transform-runtime
  • #16241 Add back moduleName option to @babel/plugin-transform-runtime (@​nicolo-ribaudo)
• babel-parser, babel-types
  • #16277 Allow import attributes for TSImportType (@​sosukesuzuki)

:bug: Bug Fix

• babel-plugin-proposal-do-expressions, babel-traverse
  • #16305 fix: avoid popContext on unvisited node paths (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  • #16312 Fix class private properties when privateFieldsAsSymbols (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  • #16307 Fix the support of arguments in private get/set method (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  • #16287 Reduce decorator static property size (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #16281 Fix evaluation order of decorators with cached receiver (@​nicolo-ribaudo)
  • #16279 Fix decorator this memoization (@​JLHwung)
  • #16266 Preserve static on decorated private accessor (@​nicolo-ribaudo)
  • #16258 fix: handle decorated async private method and generator (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  • #16275 Fix class private properties when privateFieldsAsProperties (@​liuxingbaoyu)
• babel-helpers
  • #16268 Do not consider arguments in a helper as a global reference (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #16270 Handle symbol key class elements decoration (@​JLHwung)
  • #16265 Do not define access.get for public setter decorators (@​nicolo-ribaudo)

:nail_care: Polish

• babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  • #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@​nicolo-ribaudo)

:house: Internal

• babel-helper-transform-fixture-test-runner
  • #16278 Continue writing output.js when exec.js throws (@​liuxingbaoyu)

:microscope: Output optimization

... (truncated)

Commits

• ce59160 v7.24.0
• bd5abd5 fix: avoid popContext on unvisited node paths (#16305)
• 08a057c Use Object.hasOwn when available (#16248)
• a0dd614 v7.23.9
• 1200542 fix: Don't throw in getTypeAnnotation when using TS+inference (#15383)
• e428a6d v7.23.7
• d292822 fix: Crash when removing without Program (#16191)
• d02c1f7 v7.23.6
• cce807f Bump debug to ^4.3.1 (#16164)
• 8479012 v7.23.5
• Additional commits viewable in compare view

Updates get-func-name from 2.0.0 to 2.0.2

Release notes

Sourced from get-func-name's releases.

v2.0.2

What's Changed

Revert previous changes that shipped this as an ES module.

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.2

v2.0.1

What's Changed

Fix https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.1

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by keithamus, a new releaser for get-func-name since your current version.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

• Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

• a62db1e 1.0.2
• e0c23fe docs: update CHANGELOG for v1.0.2
• 62a6540 fix: add proto to objects and arrays
• See full diff in compare view

Updates word-wrap from 1.2.3 to 1.2.5

Release notes

Sourced from word-wrap's releases.

1.2.5

Changes:

Reverts default value for options.indent to two spaces ' '.

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.4...1.2.5

1.2.4

What's Changed

• Remove default indent by @​mohd-akram in jonschlinkert/word-wrap#24
• 🔒fix: CVE 2023 26115 (2) by @​OlafConijn in jonschlinkert/word-wrap#41
• :lock: fix: CVE-2023-26115 by @​aashutoshrathi in jonschlinkert/word-wrap#33
• chore: publish workflow by @​OlafConijn in jonschlinkert/word-wrap#42

New Contributors

• @​mohd-akram made their first contribution in jonschlinkert/word-wrap#24
• @​OlafConijn made their first contribution in jonschlinkert/word-wrap#41
• @​aashutoshrathi made their first contribution in jonschlinkert/word-wrap#33

Full Changelog: https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4

Commits

• 207044e 1.2.5
• 9894315 revert default indent
• f64b188 run verb to generate README
• 03ea082 Merge pull request #42 from jonschlinkert/chore/publish-workflow
• 420dce9 Merge pull request #41 from jonschlinkert/fix/CVE-2023-26115-2
• bfa694e Update .github/workflows/publish.yml
• ace0b3c chore: bump version to 1.2.4
• 6fd7275 chore: add publish workflow
• 30d6daf chore: fix test
• 655929c chore: remove package-lock
• Additional commits viewable in compare view

Updates xml2js from 0.4.19 to 0.6.2

Commits

• cf3e061 New release, 0.6.2
• cb2f77e Fix read-only constraint via mistyped key name
• 8e9a120 Update version number for release 0.6.1
• 30f9d61 Replace filtering of names with defineProperty
• ba46e54 Update package lock
• 0e29f0e Release new version
• a25035c Remove old unused files
• 1de4688 Merge pull request #680 from Leonidas-from-XIV/zap-dependency-fix
• 3b97ae5 Merge pull request #681 from Leonidas-from-XIV/cve-compat-fix
• 167a385 Fix zap to be the original dependency
• Additional commits viewable in compare view

Updates aws-sdk from 2.1280.0 to 2.1573.0

Release notes

Sourced from aws-sdk's releases.

Release v2.1573.0

See changelog for more information.

Release v2.1572.0

See changelog for more information.

Release v2.1571.0

See changelog for more information.

Release v2.1570.0

See changelog for more information.

Release v2.1569.0

See changelog for more information.

Release v2.1568.0

See changelog for more information.

Release v2.1567.0

See changelog for more information.

Release v2.1566.0

See changelog for more information.

Release v2.1565.0

See changelog for more information.

Release v2.1564.0

See changelog for more information.

Release v2.1563.0

See changelog for more information.

Release v2.1562.0

See changelog for more information.

Release v2.1561.0

See changelog for more information.

Release v2.1560.0

See changelog for more information.

Release v2.1559.0

See changelog for more information.

Release v2.1558.0

See changelog for more information.

Release v2.1557.0

See changelog for more information.

... (truncated)

Commits

• 6515747 Updates SDK to v2.1573.0
• 7bb5913 Update links for migration guidance in README (#4600)
• 018cdec Updates SDK to v2.1572.0
• c7c010a Add upcoming end-of-support message in postinstall (#4599)
• a274bcf Explicitly mention upcoming end-of-support in README (#4598)
• b0bfb28 Update README with v2 end-of-support announcement (#4597)
• eda0c49 Add message about JS SDK v2 end-of-support (#4596)
• a9a6e0a Updates SDK to v2.1571.0
• 13f1d44 Updates SDK to v2.1570.0
• 4ac8c37 Updates SDK documentation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/agutoli/serverless-layers/network/alerts).