contentful / apps

Apps on the Contentful Marketplace and resources to build them
https://contentful.com/marketplace
138 stars 148 forks source link

chore(deps): bump cookie, express and msw in /apps/google-analytics-4/frontend #9212

Closed dependabot[bot] closed 1 week ago

dependabot[bot] commented 2 weeks ago

Bumps cookie to 0.7.1 and updates ancestor dependencies cookie, express and msw. These dependencies need to be updated together.

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1

0.7.0

https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates express from 4.20.0 to 4.21.1

Release notes

Sourced from express's releases.

4.21.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

Changelog

Sourced from express's changelog.

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0
Commits


Updates msw from 0.49.3 to 2.6.4

Release notes

Sourced from msw's releases.

v2.6.4 (2024-11-10)

Bug Fixes

  • prevent infinite loop when bypassing sendBeacon() requests (#2353) (2fa98c327acc51189f87789d9155c4ec57be2299) @​kettanaito
  • remove the internal bypass request header before performing the request as-is in Node.js (#2353) (2fa98c327acc51189f87789d9155c4ec57be2299) @​kettanaito

v2.6.3 (2024-11-10)

Bug Fixes

  • handleRequest: remove transformResponse option (#2351) (74c4a3a89970bbfc498c812790daef13766dea72) @​kettanaito

v2.6.2 (2024-11-07)

Bug Fixes

  • update @bundled-es-modules/cookie to 2.0.1 (#2312) (c134352e8206b91740247f4f196767ab8a8eb921) @​kettanaito

v2.6.1 (2024-11-06)

Bug Fixes

  • prevent instanceof handler check failures between different MSW versions (#2349) (28d26bd7fa585d76f9ca69a67dfa70a234450ed9) @​kettanaito

v2.6.0 (2024-10-29)

Features

v2.5.2 (2024-10-27)

Bug Fixes

  • enable provenance for publishing (#2334) (e9b0636c2c50c2aa9fc8d522469fbd96cfd7ccf0) @​kettanaito

v2.5.1 (2024-10-24)

Bug Fixes

v2.5.0 (2024-10-22)

Features

  • isolate parent and child frames when handling requests (#2324) (a1a81ba00170bbcdfc6f64baa4a3630e153d77b3) @​kettanaito

v2.4.13 (2024-10-22)

... (truncated)

Commits
  • c40eac6 chore(release): v2.6.4
  • 336f644 docs: add ryan to silver sponsors (#2354)
  • 2fa98c3 fix: prevent infinite loop when bypassing sendBeacon() requests (#2353)
  • 8cb7b01 chore(release): v2.6.3
  • 74c4a3a fix(handleRequest): remove transformResponse option (#2351)
  • cfcc617 chore(release): v2.6.2
  • c134352 fix: update @bundled-es-modules/cookie to 2.0.1 (#2312)
  • 078fa08 chore(release): v2.6.1
  • 28d26bd fix: prevent instanceof handler check failures between different MSW versio...
  • 3135575 chore(release-preview): always run for workflow_dispatch trigger (#2350)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/contentful/apps/network/alerts).
netlify[bot] commented 2 weeks ago

Deploy Preview for ecommerce-app-base-components canceled.

Name Link
Latest commit 071eb2e005a04c4dc16b0f2ca3fe4bf6b215f2d7
Latest deploy log https://app.netlify.com/sites/ecommerce-app-base-components/deploys/6737b61b870e2b000855aaa7
dependabot[bot] commented 1 week ago

Superseded by #9233.