search

endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES
Apache License 2.0
831 stars 72 forks source link

chore: bump the all-minor-patch group across 1 directory with 19 updates #2623

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the all-minor-patch group with 19 updates in the / directory:

Package From To
ava 6.1.3 6.2.0
eslint-plugin-import 2.29.1 2.31.0
lerna 8.1.8 8.1.9
type-coverage 2.29.1 2.29.7
typedoc 0.26.6 0.26.11
typedoc-plugin-markdown 4.2.5 4.2.10
zx 8.1.8 8.2.0
acorn 8.13.0 8.14.0
execa 9.3.0 9.5.1
ws 8.16.0 8.18.0
requireindex 1.1.0 1.2.0
mocha 10.6.0 10.8.2
@types/mocha 10.0.7 10.0.9
@babel/parser 7.23.6 7.26.2
@babel/traverse 7.23.7 7.25.9
@types/babel__traverse 7.20.5 7.20.6
source-map-js 1.2.0 1.2.1
core-js 3.31.0 3.39.0
terser 5.16.6 5.36.0

Updates ava from 6.1.3 to 6.2.0

Release notes

Sourced from ava's releases.

v6.2.0

What's Changed

New Contributors

Full Changelog: https://github.com/avajs/ava/compare/v6.1.3...v6.2.0

Commits
  • 024de32 6.2.0
  • 563fa5f Pre-release updates
  • e5b355d Link to CLI options to clarify how to run tests in separate processes
  • 86185b4 Add filterNodeArgumentsForWorkerThreads option
  • b15df53 Update dependencies & other general maintenance
  • See full diff in compare view


Updates eslint-plugin-import from 2.29.1 to 2.31.0

Release notes

Sourced from eslint-plugin-import's releases.

v2.31.0

Added

Fixed

Changed

#3073: import-js/eslint-plugin-import#3073 #3072: import-js/eslint-plugin-import#3072 #3071: import-js/eslint-plugin-import#3071 #3070: import-js/eslint-plugin-import#3070 #3068: import-js/eslint-plugin-import#3068 #3066: import-js/eslint-plugin-import#3066 #3065: import-js/eslint-plugin-import#3065 #3062: import-js/eslint-plugin-import#3062 #3052: import-js/eslint-plugin-import#3052 #3043: import-js/eslint-plugin-import#3043 #3032: import-js/eslint-plugin-import#3032 #2996: import-js/eslint-plugin-import#2996 #2817: import-js/eslint-plugin-import#2817 [@​akwodkiewicz]: https://github.com/akwodkiewicz [@​joshuaobrien]: https://github.com/joshuaobrien [@​liuxingbaoyu]: https://github.com/liuxingbaoyu [@​manuth]: https://github.com/manuth [@​michaelfaith]: https://github.com/michaelfaith [@​phryneas]: https://github.com/phryneas

... (truncated)

Changelog

Sourced from eslint-plugin-import's changelog.

[2.31.0] - 2024-10-03

Added

Fixed

  • ExportMap / flat config: include languageOptions in context (#3052, thanks [@​michaelfaith])
  • [no-named-as-default]: Allow using an identifier if the export is both a named and a default export (#3032, thanks [@​akwodkiewicz])
  • [export]: False positive for exported overloaded functions in TS (#3065, thanks [@​liuxingbaoyu])
  • exportMap: export map cache is tainted by unreliable parse results (#3062, thanks [@​michaelfaith])
  • exportMap: improve cacheKey when using flat config (#3072, thanks [@​michaelfaith])
  • adjust "is source type module" checks for flat config (#2996, thanks [@​G-Rath])

Changed

[2.30.0] - 2024-09-02

Added

  • [dynamic-import-chunkname]: add allowEmpty option to allow empty leading comments (#2942, thanks [@​JiangWeixian])
  • [dynamic-import-chunkname]: Allow empty chunk name when webpackMode: 'eager' is set; add suggestions to remove name in eager mode (#3004, thanks [@​amsardesai])
  • [no-unused-modules]: Add ignoreUnusedTypeExports option (#3011, thanks [@​silverwind])
  • add support for Flat Config (#3018, thanks [@​michaelfaith])

Fixed

Changed

  • [Docs] [no-extraneous-dependencies]: Make glob pattern description more explicit (#2944, thanks [@​mulztob])
  • [no-unused-modules]: add console message to help debug #2866
  • [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap (#2982, thanks [@​soryy708])
  • [Refactor] ExportMap: separate ExportMap instance from its builder logic (#2985, thanks [@​soryy708])
  • [Docs] [order]: Add a quick note on how unbound imports and --fix (#2640, thanks [@​minervabot])
  • [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) (#2987, thanks [@​joeyguerra])
  • [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
  • [Refactor] exportMapBuilder: avoid hoisting (#2989, thanks [@​soryy708])
  • [Refactor] ExportMap: extract "builder" logic to separate files (#2991, thanks [@​soryy708])
  • [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option (#3036, thanks [@​liby])
  • [readme] Clarify how to install the plugin (#2993, thanks [@​jwbth])
Commits
  • 91f809b v2.31.0
  • 3f1ac24 [utils] [refactor] parse: avoid using a regex here
  • d225176 [New] extensions: add the checkTypeImports option
  • 5a51b9a [Tests] rule-tester: try this babel class workaround
  • d66cde0 [New] support eslint v9
  • d27a639 [Fix] adjust "is source type module" checks for flat config
  • 1fa8a07 [Refactor] create sourceType helper
  • 0bc1355 [Tests] no-default-export, no-named-export: add test cases with non-modu...
  • 55fa203 [Tests] no-default-export, no-named-export: add test case
  • 6be20df [Docs] no-restricted-paths: fix grammar
  • Additional commits viewable in compare view


Updates lerna from 8.1.8 to 8.1.9

Release notes

Sourced from lerna's releases.

v8.1.9

8.1.9 (2024-10-31)

Bug Fixes

  • add extends property in schema (#4075) (28c8ef2)
  • core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
  • update nx support to latest v20 (#4103) (cb37f19)
  • version: enable changing commit message when using amend (#3954) (529e83f)

Features

  • publish: support full file path for --summary-file (#4039) (cfd573a)
Changelog

Sourced from lerna's changelog.

8.1.9 (2024-10-31)

Bug Fixes

  • add extends property in schema (#4075) (28c8ef2)
  • core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
  • update nx support to latest v20 (#4103) (cb37f19)
Commits


Updates type-coverage from 2.29.1 to 2.29.7

Changelog

Sourced from type-coverage's changelog.

2.29.7 (2024-10-15)

2.29.6 (2024-10-15)

2.29.5 (2024-10-15)

  • fix: reportUnusedIgnore false to disable reportUnusedIgnore when strict (440cf06)
  • fix: ci failure (906bc5b)
  • chore: update dependencies (2ac5cf2)

2.29.2 (2024-08-23)

  • fix: ts plugin prior diagnostics (1c6af3b)
Commits


Updates typedoc from 0.26.6 to 0.26.11

Release notes

Sourced from typedoc's releases.

v0.26.11

Features

  • If hostedBaseUrl is set to the root page on a website, TypeDoc will now include WebSite structured data, #2760.

Bug Fixes

  • Fix support for ESM config files with Node 23, #2752.
  • Fix type errors when using "module": "ESNext" and importing TypeDoc, #2747.
  • Inherited comments on overloaded methods now consider the overload position when inheriting a comment, #2755.

v0.26.10

Bug Fixes

  • Fixed missing space on page headers, #2748.

v0.26.9

Features

  • Added headings option to control optional headings, #2729.
  • Updated Chinese translations, #2739.
  • Added a folder icon to page navigation elements which are not links, #2741.

Bug Fixes

  • externalSymbolLinkMappings now uses the TypeScript reported link target if available, #2725.
  • TypeDoc will no longer omit the modules page if a project contains only modules/documents, #2730.
  • Fixed missing breadcrumbs on project page, #2728.
  • TypeDoc will no longer render an empty readme page if no readme was found.

Thanks!

v0.26.8

Features

  • Updated Chinese translations, #2706.
  • Exported constants no longer render the type and default value if they are the same, #2717.
  • The HTML output now wraps tag blocks with <div> tags and includes the tag name in a class name, #2723.

Bug Fixes

  • Correctly handle external link resolver link text when referencing an external symbol, #2700.

... (truncated)

Changelog

Sourced from typedoc's changelog.

v0.26.11 (2024-11-01)

Features

  • If hostedBaseUrl is set to the root page on a website, TypeDoc will now include WebSite structured data, #2760.

Bug Fixes

  • Fix support for ESM config files with Node 23, #2752.
  • Fix type errors when using "module": "ESNext" and importing TypeDoc, #2747.
  • Inherited comments on overloaded methods now consider the overload position when inheriting a comment, #2755.

v0.26.10 (2024-10-16)

Bug Fixes

  • Fixed missing space on page headers, #2748.

v0.26.9 (2024-10-11)

Features

  • Added headings option to control optional headings, #2729.
  • Updated Chinese translations, #2739.
  • Added a folder icon to page navigation elements which are not links, #2741.

Bug Fixes

  • externalSymbolLinkMappings now uses the TypeScript reported link target if available, #2725.
  • TypeDoc will no longer omit the modules page if a project contains only modules/documents, #2730.
  • Fixed missing breadcrumbs on project page, #2728.
  • TypeDoc will no longer render an empty readme page if no readme was found.

Thanks!

v0.26.8 (2024-10-04)

Features

  • Updated Chinese translations, #2706.
  • Exported constants no longer render the type and default value if they are the same, #2717.
  • The HTML output now wraps tag blocks with <div> tags and includes the tag name in a class name, #2723.

Bug Fixes

  • Correctly handle external link resolver link text when referencing an external symbol, #2700.

... (truncated)

Commits
  • c4b6545 Update changelog for release
  • f3fde9f Bump version to 0.26.11
  • 713d036 Add structured WebSite data to index page if possible
  • 18c4661 Consider overload position when discovering comments
  • ab8f4eb Smarter path handling
  • f06401f Also use import when loading plugins
  • 23f29f3 Fix ESM config files on Node 23
  • 0e1afae Remove implements Map from stable key map
  • 2c73a28 Update changelog for release
  • 94759c3 Bump version to 0.26.10
  • Additional commits viewable in compare view


Updates typedoc-plugin-markdown from 4.2.5 to 4.2.10

Release notes

Sourced from typedoc-plugin-markdown's releases.

typedoc-plugin-markdown@4.2.10

Patch Changes

  • Enhanced the formatting and structure of accessor output (#711)

typedoc-plugin-markdown@4.2.9

Patch Changes

  • Expose @return block tags on declarations (#694)
  • Add parentheses on function names in type declaration table views (#696)

typedoc-plugin-markdown@4.2.8

Patch Changes

  • Fix missing slash when public path is prefixed with http (#688)

typedoc-plugin-markdown@4.2.7

Patch Changes

  • Correctly handle top level custom groups in navigation (#685)
  • Fix missing index descriptions for some signatures (#670)
  • Add '?' for optional type declarations in tables

typedoc-plugin-markdown@4.2.6

Patch Changes

  • Expose missing entrypoints to navigation (#663)
  • Fix missing function descriptions in indexes
Changelog

Sourced from typedoc-plugin-markdown's changelog.

4.2.10 (2024-11-01)

Patch Changes

  • Enhanced the formatting and structure of accessor output (#711)

4.2.9 (2024-10-01)

Patch Changes

  • Expose @return block tags on declarations (#694)
  • Add parentheses on function names in type declaration table views (#696)

4.2.8 (2024-09-22)

Patch Changes

  • Fix missing slash when public path is prefixed with http (#688)

4.2.7 (2024-09-05)

Patch Changes

  • Correctly handle top level custom groups in navigation (#685)
  • Fix missing index descriptions for some signatures (#670)
  • Add '?' for optional type declarations in tables

4.2.6 (2024-08-25)

Patch Changes

  • Expose missing entrypoints to navigation (#663)
  • Fix missing function descriptions in indexes
Commits
  • 646e5f2 Version Packages
  • 9460196 fix(core): improve accessor output (#711)
  • e9dcf48 chore(core): updated packages
  • 986c97c chore(docs): updated changelog date
  • 1cd85ca Version Packages
  • 563875e fix(core): add parentheses on function names in type declaration table views ...
  • 300db20 fix(core): expose "@​return" block tags on declarations (#694)
  • 974a60d chore(docs): updated docs
  • e60b02e Version Packages
  • a7e4775 fix(core): fix missing slash when public path is prefixed with http (#688)
  • Additional commits viewable in compare view


Updates zx from 8.1.8 to 8.2.0

Release notes

Sourced from zx's releases.

8.2.0

Pipes supercharge today! 🚀

Features

  • Delayed piping. You can fill dependent streams at any time during the origin process lifecycle (even when finished) without losing data. #914
const result = $`echo 1; sleep 1; echo 2; sleep 1; echo 3`
const piped1 = result.pipe`cat`
let piped2

setTimeout(() => {

piped2 = result.pipecat

}, 1500)


await piped1

assert.equal((await piped1).toString(), '1\n2\n3\n')

assert.equal((await piped2).toString(), '1\n2\n3\n')



const file = tempfile()
const fileStream = fs.createWriteStream(file)
const p = $`echo "hello"`
  .pipe(
    new Transform({
      transform(chunk, encoding, callback) {
        callback(null, String(chunk).toUpperCase())
      },
    })
  )
  .pipe(fileStream)

p instanceof WriteStream             // true

await p === fileStream               // true

(await fs.readFile(file)).toString() // 'HELLO\n'

Chore

8.1.9

Today's release is a minor update that includes:

Enhancements

  • We have replaced ProcessOutput fields with lazy getters to reduce mem consumption #903, #908
  • Reduced ReDos risks for codeblock patterns #906
  • Kept argv reference on update #916
  • Strengthened Shell interface to properly handle sync mode #915:

... (truncated)

Commits


Updates acorn from 8.13.0 to 8.14.0

Commits


Updates execa from 9.3.0 to 9.5.1

Release notes

Sourced from execa's releases.

v9.5.1

Bug fixes

v9.5.0

Features

await execa({stdout: {file: 'output.txt', append: true}})`npm run build`;

v9.4.1

Bug fixes

v9.4.0

Features

  • We've created a separate package called nano-spawn. It is similar to Execa but with fewer features, for a much smaller package size. More info.

Bug fixes

Documentation

v9.3.1

Thanks @​holic and @​jimhigson for your contributions!

Bugs

Bugs (types)

  • Fix type of the env option. It was currently failing for Remix or Next.js users. (by @​holic) (#1141)

Documentation

Commits


Updates ws from 8.16.0 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

  • Added support for Blob (#2229).

8.17.1

Bug fixes

  • Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');

const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;


for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;


for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';

  if (++count === 2000) break;
}



}


headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';


const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});


request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits
  • 976c53c [dist] 8.18.0
  • 59b9629 [feature] Add support for Blob (#2229)
  • 0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
  • 15f11a0 [security] Add new DoS vulnerability to SECURITY.md
  • 3c56601 [dist] 8.17.1
  • e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
  • 6a00029 [test] Increase code coverage
  • ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
  • b73b118 [dist] 8.17.0
  • 29694a5 [test] Use the highWaterMark variable
  • Additional commits viewable in compare view


Updates requireindex from 1.1.0 to 1.2.0

Commits


Updates mocha from 10.6.0 to 10.8.2

Release notes

Sourced from mocha's releases.

v10.8.2

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)
  • test link in html reporter (#5224) (f054acc)

📚 Documentation

  • indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

  • fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

  • deps: bump the github-actions group with 1 update (#5132) (e536ab2)

v10.8.1

10.8.1 (2024-10-29)

🩹 Fixes

v10.8.0

10.8.0 (2024-10-29)

🌟 Features

🩹 Fixes

📚 Documentation

... (truncated)

Changelog

Sourced from mocha's changelog.

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (
    dependabot[bot] commented 2 weeks ago

    Superseded by #2628.