Closed dependabot[bot] closed 1 month ago
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-data-channel-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-dom-element-manipulation directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-floating-window-plugin directory:
Bumps the npm_and_yarn group with 3 updates in the /samples/sample-generic-content-sidekick-plugin directory: @babel/traverse, postcss and ws. Bumps the npm_and_yarn group with 7 updates in the /samples/sample-nav-bar-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-options-dropdown-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-presentation-dropdown-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-presentation-toolbar-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-ui-commands-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-ui-events-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-use-meeting directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-camera-dropdown-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-list-dropdown-plugin directory:
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-list-item-additional-information-plugin directory:
Updates @babel/traverse from 7.21.5 to 7.24.8
@babel/traverse
Sourced from @babel/traverse's releases.
@babel/traverse
v7.24.8 (2024-07-11) Thanks @H0onnn, @jkup and @SreeXD for your first pull requests! :eyeglasses: Spec Compliance babel-parser #16567 Do not use strict mode in TS declare (@liuxingbaoyu) :bug: Bug Fix babel-generator #16630 Correctly print parens around in in for heads (@nicolo-ribaudo) #16626 Fix printing of comments in await using (@nicolo-ribaudo) #16591 fix typescript code generation for yield expression inside type expre… (@SreeXD) babel-parser #16613 Disallow destructuring assignment in using declarations (@H0onnn) #16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu) babel-types #16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo) babel-plugin-transform-typescript #16566 fix: Correctly handle export import x = (@liuxingbaoyu) :nail_care: Polish babel-generator #16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo) babel-traverse #16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu) Committers: 9 Amjad Yahia Robeen Hassan (@amjed-98) Babel Bot (@babel-bot) Huáng Jùnliàng (@JLHwung) Jon Kuperman (@jkup) Nagendran N (@SreeXD) Nicolò Ribaudo (@nicolo-ribaudo) Sukka (@SukkaW) @H0onnn @liuxingbaoyu v7.24.7 (2024-06-05) :bug: Bug Fix babel-node #16554 Allow extra flags in babel-node (@nicolo-ribaudo) babel-traverse #16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu) babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management #16524 fix: Transform using in switch correctly (@liuxingbaoyu) :house: Internal babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
Thanks @H0onnn, @jkup and @SreeXD for your first pull requests!
@H0onnn
@jkup
@SreeXD
babel-parser
declare
@liuxingbaoyu
babel-generator
in
for
@nicolo-ribaudo
await using
using
.value: undefined
babel-types
ObjectTypeInternalSlot
babel-plugin-transform-typescript
export import x =
async
for await
babel-traverse
Scope.globals
@amjed-98
@babel-bot
@JLHwung
@SukkaW
babel-node
constantViolations
babel-helper-transform-fixture-test-runner
babel-plugin-proposal-explicit-resource-management
switch
babel-helpers
babel-runtime-corejs2
babel-runtime-corejs3
babel-runtime
... (truncated)
Sourced from @babel/traverse's changelog.
v7.24.8 (2024-07-11) :eyeglasses: Spec Compliance babel-parser #16567 Do not use strict mode in TS declare (@liuxingbaoyu) :bug: Bug Fix babel-generator #16630 Correctly print parens around in in for heads (@nicolo-ribaudo) #16626 Fix printing of comments in await using (@nicolo-ribaudo) #16591 fix typescript code generation for yield expression inside type expre… (@SreeXD) babel-parser #16613 Disallow destructuring assignment in using declarations (@H0onnn) #16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu) babel-types #16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo) babel-plugin-transform-typescript #16566 fix: Correctly handle export import x = (@liuxingbaoyu) :nail_care: Polish babel-generator #16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo) babel-traverse #16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu) v7.24.7 (2024-06-05) :bug: Bug Fix babel-node #16554 Allow extra flags in babel-node (@nicolo-ribaudo) babel-traverse #16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu) babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management #16524 fix: Transform using in switch correctly (@liuxingbaoyu) :house: Internal babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime #16525 Delete unused array helpers (@blakewilson) v7.24.6 (2024-05-24) :bug: Bug Fix babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties #16514 Fix source maps for private member expressions (@nicolo-ribaudo) babel-core, babel-generator, babel-plugin-transform-modules-commonjs #16515 Fix source maps for template literals (@nicolo-ribaudo) babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators #16485 Support undecorated static accessor in anonymous classes (@JLHwung) #16484 Fix decorator bare yield await (@JLHwung) babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3 #16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung) babel-parser, babel-plugin-transform-typescript
@blakewilson
babel-helper-create-class-features-plugin
babel-plugin-transform-class-properties
babel-core
babel-plugin-transform-modules-commonjs
babel-plugin-proposal-decorators
1f5af44
c90bb0c
_
e0368a8
683c654
cfe13c2
globals
c36fa6a
12619ff
424fc90
bf1e9a3
4463aa5
Updates braces from 3.0.2 to 3.0.3
braces
74b2db2
88f1429
415d660
190510f
716eb9f
a5851e5
2092bd1
9f5b4cf
98414f9
665ab5d
Updates express from 4.18.2 to 4.19.2
express
Sourced from express's releases.
4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix ci after location patch by @wesleytodd in expressjs/express#5552 fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556 Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1 4.19.0 What's Changed fix typo in release date by @UlisesGascon in expressjs/express#5527 docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511 docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510 Add note on how to update docs for new release by @crandmck in expressjs/express#5541 Prevent open redirect allow list bypass due to encodeurl Release 4.19.0 by @wesleytodd in expressjs/express#5551 New Contributors @crandmck made their first contribution in expressjs/express#5541 Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0 4.18.3 Main Changes Fix routing requests without method deps: body-parser@1.20.2 Fix strict json error message on Node.js 19+ deps: content-type@~1.0.5 deps: raw-body@2.5.2 Other Changes Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032 build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034 ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027 test: remove unused function arguments in params by @raksbisht in expressjs/express#5124 Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119 Fixed typos by @raksbisht in expressjs/express#5117 examples: remove unused params by @raksbisht in expressjs/express#5113 fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130 fix: typos in History.md by @raksbisht in expressjs/express#5131 build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028 test: remove unused function arguments in params by @raksbisht in expressjs/express#5137
Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2
@wesleytodd
Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1
@UlisesGascon
@crandmck
Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0
@vcsjones
@abenhamdine
@armujahid
@raksbisht
Sourced from express's changelog.
4.19.2 / 2024-03-25 Improved fix for open redirect allow list bypass 4.19.1 / 2024-03-20 Allow passing non-strings to res.location with new encoding handling checks 4.19.0 / 2024-03-20 Prevent open redirect allow list bypass due to encodeurl deps: cookie@0.6.0 4.18.3 / 2024-02-29 Fix routing requests without method deps: body-parser@1.20.2 Fix strict json error message on Node.js 19+ deps: content-type@~1.0.5 deps: raw-body@2.5.2 deps: cookie@0.6.0 Add partitioned option
partitioned
04bc627
da4d763
4f0f6cc
a003cfa
a1fa90f
11f2b1d
084e365
0867302
567c9c6
69a4cf2
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates follow-redirects from 1.15.2 to 1.15.6
follow-redirects
35a517c
c4f847f
8526b4a
b1677ce
d8914f7
6585820
7a6567e
05629af
1cba8e8
72bc2a4
Updates postcss from 8.4.23 to 8.4.39
postcss
Sourced from postcss's releases.
8.4.39 Fixed CssSyntaxError types (by @romainmenke). 8.4.38 Fixed endIndex: 0 in errors and warnings (by @romainmenke). 8.4.37 Fixed original.column are not numbers error in another case. 8.4.36 Fixed original.column are not numbers error on broken previous source map. 8.4.35 Avoid ! in node.parent.nodes type. Allow to pass undefined to node adding method to simplify types. 8.4.34 Fixed AtRule#nodes type (by @tim-we). Cleaned up code (by @DrKiraDmitry). 8.4.33 Fixed NoWorkResult behavior difference with normal mode (by @romainmenke). Fixed NoWorkResult usage conditions (by @ahmdammarr). 8.4.32 Fixed postcss().process() types (by @ferreira-tb). 8.4.31 Fixed \r parsing to fix CVE-2023-44270. 8.4.30 Improved source map performance (by @romainmenke). 8.4.29 Fixed Node#source.offset (by @idoros). Fixed docs (by @coliff). 8.4.28 Fixed Root.source.end for better source map (by @romainmenke). Fixed Result.root types when process() has no parser. 8.4.27 Fixed Container clone methods types. 8.4.26 Fixed clone methods types. 8.4.25 Improve stringify performance (by @romainmenke). Fixed docs (by @vikaskaliramna07).
CssSyntaxError
@romainmenke
endIndex: 0
original.column are not numbers
!
node.parent.nodes
undefined
AtRule#nodes
@tim-we
@DrKiraDmitry
NoWorkResult
@ahmdammarr
postcss().process()
@ferreira-tb
\r
Node#source.offset
@idoros
@coliff
Root.source.end
Result.root
process()
Container
@vikaskaliramna07
Sourced from postcss's changelog.
8.4.39 Fixed CssSyntaxError types (by @romainmenke). 8.4.38 Fixed endIndex: 0 in errors and warnings (by @romainmenke). 8.4.37 Fixed original.column are not numbers error in another case. 8.4.36 Fixed original.column are not numbers error on broken previous source map. 8.4.35 Avoid ! in node.parent.nodes type. Allow to pass undefined to node adding method to simplify types. 8.4.34 Fixed AtRule#nodes type (by Tim Weißenfels). Cleaned up code (by Dmitry Kirillov). 8.4.33 Fixed NoWorkResult behavior difference with normal mode (by Romain Menke). Fixed NoWorkResult usage conditions (by @ahmdammarr). 8.4.32 Fixed postcss().process() types (by Andrew Ferreira). 8.4.31 Fixed \r parsing to fix CVE-2023-44270. 8.4.30 Improved source map performance (by Romain Menke). 8.4.29 Fixed Node#source.offset (by Ido Rosenthal). Fixed docs (by Christian Oliff). 8.4.28 Fixed Root.source.end for better source map (by Romain Menke). Fixed Result.root types when process() has no parser. 8.4.27 Fixed Container clone methods types. 8.4.26 Fixed clone methods types. 8.4.25 Improve stringify performance (by Romain Menke). Fixed docs (by @vikaskaliramna07).
e0efb16
48304c5
155ac57
1b9b466
3f4d96e
b952be7
b512b29
f9a9868
79052c2
0eedad4
Updates webpack-dev-middleware from 5.3.3 to 5.3.4
webpack-dev-middleware
Sourced from webpack-dev-middleware's releases.
v5.3.4 5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac)
Sourced from webpack-dev-middleware's changelog.
5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac)
86071ea
189c4ac
Updates ws from 8.13.0 to 8.18.0
ws
Sourced from ws's releases.
8.18.0 Features Added support for Blob (#2229). 8.17.1 Bug fixes Fixed a DoS vulnerability (#2231). A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server. const http = require('http'); const WebSocket = require('ws'); const wss = new WebSocket.Server({ port: 0 }, function () { const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split(''); const headers = {}; let count = 0; for (let i = 0; i < chars.length; i++) { if (count === 2000) break; for (let j = 0; j < chars.length; j++) { const key = chars[i] + chars[j]; headers[key] = 'x'; if (++count === 2000) break; } } headers.Connection = 'Upgrade'; headers.Upgrade = 'websocket'; headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ=='; headers['Sec-WebSocket-Version'] = '13'; const request = http.request({ headers: headers, host: '127.0.0.1', port: wss.address().port }); request.end(); }); The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.
Blob
A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
server.maxHeadersCount
const http = require('http'); const WebSocket = require('ws'); const wss = new WebSocket.Server({ port: 0 }, function () { const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split(''); const headers = {}; let count = 0; for (let i = 0; i < chars.length; i++) { if (count === 2000) break; for (let j = 0; j < chars.length; j++) { const key = chars[i] + chars[j]; headers[key] = 'x'; if (++count === 2000) break; } } headers.Connection = 'Upgrade'; headers.Upgrade = 'websocket'; headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ=='; headers['Sec-WebSocket-Version'] = '13'; const request = http.request({ headers: headers, host: '127.0.0.1', port: wss.address().port }); request.end(); });
const wss = new WebSocket.Server({ port: 0 }, function () { const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split(''); const headers = {}; let count = 0;
for (let i = 0; i < chars.length; i++) { if (count === 2000) break;
for (let j = 0; j < chars.length; j++) { const key = chars[i] + chars[j]; headers[key] = 'x'; if (++count === 2000) break; }
}
headers.Connection = 'Upgrade'; headers.Upgrade = 'websocket'; headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ=='; headers['Sec-WebSocket-Version'] = '13';
const request = http.request({ headers: headers, host: '127.0.0.1', port: wss.address().port });
request.end(); });
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.
976c53c
59b9629
0d1b5e6
15f11a0
3c56601
e55e510
6a00029
ddfe4a8
crypto.randomFillSync()
b73b118
29694a5
highWaterMark
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-data-channel-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-dom-element-manipulation directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-floating-window-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 3 updates in the /samples/sample-generic-content-sidekick-plugin directory: @babel/traverse, postcss and ws. Bumps the npm_and_yarn group with 7 updates in the /samples/sample-nav-bar-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-options-dropdown-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-presentation-dropdown-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-presentation-toolbar-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-ui-commands-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-ui-events-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-use-meeting directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-camera-dropdown-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-list-dropdown-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Bumps the npm_and_yarn group with 7 updates in the /samples/sample-user-list-item-additional-information-plugin directory:
7.21.5
7.24.8
3.0.2
3.0.3
4.18.2
4.19.2
1.15.2
1.15.6
8.4.23
8.4.39
5.3.3
5.3.4
8.13.0
8.18.0
Updates
@babel/traverse
from 7.21.5 to 7.24.8Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
1f5af44
v7.24.8c90bb0c
[babel 8] Remove methods starting with_
in@babel/traverse
(#16504)e0368a8
Avoid checkingScope.globals
multiple times (#16619)683c654
Enable some lint rules (#16605)cfe13c2
[babel 8] Updateglobals
dependency (#16600)c36fa6a
Update typescript-eslint v8 (#16557)12619ff
improve getBindingIdentifiers.keys typing (#16570)424fc90
Update to TypeScript 5.5 (#16536)bf1e9a3
v7.24.74463aa5
fix: incorrectconstantViolations
with destructuring (#16522)Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
express
from 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
follow-redirects
from 1.15.2 to 1.15.6Commits
35a517c
Release version 1.15.6 of the npm package.c4f847f
Drop Proxy-Authorization across hosts.8526b4a
Use GitHub for disclosure.b1677ce
Release version 1.15.5 of the npm package.d8914f7
Preserve fragment in responseUrl.6585820
Release version 1.15.4 of the npm package.7a6567e
Disallow bracketed hostnames.05629af
Prefer native URL instead of deprecated url.parse.1cba8e8
Prefer native URL instead of legacy url.resolve.72bc2a4
Simplify _processResponse error handling.Updates
postcss
from 8.4.23 to 8.4.39Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
e0efb16
Release 8.4.39 version48304c5
Update dependencies155ac57
Merge pull request #1947 from romainmenke/fix-css-syntax-error-type--reliable...1b9b466
fix CssSyntaxError type declaration3f4d96e
Update dependenciesb952be7
Update CI actionsb512b29
Typof9a9868
Move to pnpm 9 and Node.js 2279052c2
Merge pull request #1940 from Xvezda/patch-10eedad4
Update changed urlsUpdates
webpack-dev-middleware
from 5.3.3 to 5.3.4Release notes
Sourced from webpack-dev-middleware's releases.
Changelog
Sourced from webpack-dev-middleware's changelog.
Commits
86071ea
chore(release): 5.3.4189c4ac
fix(security): do not allow to read files above (#1779)Updates
ws
from 8.13.0 to 8.18.0Release notes
Sourced from ws's releases.
... (truncated)
Commits
976c53c
[dist] 8.18.059b9629
[feature] Add support forBlob
(#2229)0d1b5e6
[security] Use more descriptive text for 2017 vulnerability link15f11a0
[security] Add new DoS vulnerability to SECURITY.md3c56601
[dist] 8.17.1e55e510
[security] Fix crash when the Upgrade header cannot be read (#2231)6a00029
[test] Increase code coverageddfe4a8
[perf] Reduce the amount ofcrypto.randomFillSync()
callsb73b118
[dist] 8.17.029694a5
[test] Use thehighWaterMark
variableUpdates
@babel/traverse
from 7.21.5 to 7.24.8Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
1f5af44
v7.24.8c90bb0c
[babel 8] Remove methods starting with_
in@babel/traverse
(#16504)e0368a8
Avoid checkingScope.globals
multiple times (#16619)683c654
Enable some lint rules (#16605)cfe13c2
[babel 8] Updateglobals
dependency (#16600)c36fa6a
Update typescript-eslint v8 (#16557)12619ff
improve getBindingIdentifiers.keys typing (#16570)424fc90
Update to TypeScript 5.5 (#16536)bf1e9a3
v7.24.74463aa5
fix: incorrectconstantViolations
with destructuring (#16522)Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscapin... _Description has been truncated_