search

aspect-build / rules_js

High-performance Bazel rules for running Node.js tools and building JavaScript projects
https://docs.aspect.build/rules/aspect_rules_js
Apache License 2.0
310 stars 107 forks source link

chore(deps): update dependency jsonpath-plus to v10 #1966

Open renovate[bot] opened 1 month ago

renovate[bot] commented 1 month ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jsonpath-plus 7.2.0 -> 10.2.0 age adoption passing confidence

Release Notes

s3u/JSONPath (jsonpath-plus) ### [`v10.2.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1020) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.1.0...v10.2.0) - fix(eval): improve security of safe-eval ([#​233](https://redirect.github.com/s3u/JSONPath/issues/233)) - chore: update deps. and devDeps. ### [`v10.1.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1010) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.7...v10.1.0) - feat: add typeof operator to safe script ### [`v10.0.7`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1007) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.6...v10.0.7) - fix(security): prevent `constructor` access - docs: add security policy file ### [`v10.0.6`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1006) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.5...v10.0.6) - fix(security): prevent `call`/`apply` invocation of `Function` ### [`v10.0.5`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1005) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.4...v10.0.5) - fix: remove overly aggressive disabling of native functions but disallow `__proto__` ### [`v10.0.4`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1004) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.3...v10.0.4) - fix(security): further prevent binding of Function calls which may evade detection ### [`v10.0.3`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1003) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.2...v10.0.3) - fix(security): prevent binding of Function calls which may evade detection ### [`v10.0.2`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1002) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/v10.0.1...v10.0.2) - fix(security): prevent Function calls outside of member expressions ### [`v10.0.1`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1001) - fix(security): prohibit `Function` in "safe" vm ### [`v10.0.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#1000) BREAKING CHANGES: - Require Node 18+ - fix(security): use safe vm by default in Node - chore: bump jsep, devDeps. and lint ### [`v9.0.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#900) [Compare Source](https://redirect.github.com/s3u/JSONPath/compare/5fb1382e36f1e8e4d8f89031016a6141125f99ab...v9.0.0) BREAKING CHANGES: - Removes `preventEval` property. Prefer `eval: false` instead. - Changed behavior of `eval` property. In the browser, `eval`/`Function` won't be used by default to evaluate expressions. Instead, we'll safely evaluate using a subset of JavaScript. To resume using unsafe eval in the browser, pass in the option `eval: "native"` - feat: add safe eval for browser and `eval` option ([#​185](https://redirect.github.com/s3u/JSONPath/issues/185)) ([@​80avin](https://redirect.github.com/80avin)) - feat: add `ignoreEvalErrors` property ([@​80avin](https://redirect.github.com/80avin)) ### [`v8.1.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#810) - feat: add basic cli ([#​206](https://redirect.github.com/s3u/JSONPath/issues/206)) ([@​vid](https://redirect.github.com/vid)) ### [`v8.0.0`](https://redirect.github.com/s3u/JSONPath/blob/HEAD/CHANGES.md#800) - Breaking change: Bump Node `engines` to 14 - feat: add support for nested filter expressions ([@​carlosingles](https://redirect.github.com/carlosingles)) - docs: update README and license ([@​akirataguchi115](https://redirect.github.com/akirataguchi115)) - docs: github workflow badge ([@​dsanch3z](https://redirect.github.com/dsanch3z))

Configuration

📅 Schedule: Branch creation - "after 2am every weekday,before 5am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.

aspect-workflows[bot] commented 1 month ago

Test

:warning: Buildkite build #6745 failed.

Test

e2e/bzlmod

All tests were cache hits

5 tests (100.0%) were fully cached saving 857ms.

Test

e2e/gyp_no_install_script

All tests were cache hits

2 tests (100.0%) were fully cached saving 503ms.

Test

e2e/js_image_oci

All tests were cache hits

1 test (100.0%) was fully cached saving 7s.

Test

e2e/npm_link_package

All tests were cache hits

3 tests (100.0%) were fully cached saving 820ms.

Test

e2e/npm_link_package-esm

All tests were cache hits

3 tests (100.0%) were fully cached saving 1s.

Test

e2e/npm_translate_lock

All tests were cache hits

1 test (100.0%) was fully cached saving 34ms.

Test

e2e/npm_translate_lock_empty

All tests were cache hits

1 test (100.0%) was fully cached saving 34ms.

Test

e2e/npm_translate_lock_multi

All tests were cache hits

2 tests (100.0%) were fully cached saving 171ms.

Test

e2e/npm_translate_lock_partial_clone

All tests were cache hits

1 test (100.0%) was fully cached saving 129ms.

Test

e2e/npm_translate_lock_replace_packages

All tests were cache hits

3 tests (100.0%) were fully cached saving 503ms.

Test

e2e/npm_translate_lock_subdir_patch

All tests were cache hits

1 test (100.0%) was fully cached saving 222ms.

Test

e2e/npm_translate_package_lock

All tests were cache hits

1 test (100.0%) was fully cached saving 131ms.

Test

e2e/npm_translate_yarn_lock

All tests were cache hits

1 test (100.0%) was fully cached saving 131ms.

Test

e2e/package_json_module

All tests were cache hits

1 test (100.0%) was fully cached saving 590ms.

Test

e2e/pnpm_lockfiles

All tests were cache hits

40 tests (100.0%) were fully cached saving 3s.

Test

e2e/pnpm_workspace

All tests were cache hits

10 tests (100.0%) were fully cached saving 3s.

Test

e2e/pnpm_workspace_rerooted

All tests were cache hits

12 tests (100.0%) were fully cached saving 2s.

Test

e2e/repo_mapping

All tests were cache hits

2 tests (100.0%) were fully cached saving 474ms.

Test

e2e/rules_foo

All tests were cache hits

2 tests (100.0%) were fully cached saving 470ms.

Test

e2e/runfiles

All tests were cache hits

1 test (100.0%) was fully cached saving 443ms.

Test

e2e/vendored_node

All tests were cache hits

1 test (100.0%) was fully cached saving 199ms.

Buildifier

Format