Bump the npm_and_yarn group across 1 directory with 5 updates

[dependabot[bot]]

Bumps the npm_and_yarn group with 4 updates in the / directory: undici, axios, homebridge-config-ui-x and ip.

Updates undici from 6.5.0 to 6.11.1

Release notes

Sourced from undici's releases.

v6.11.1

:warning: Security Release ⚠️

What's Changed

• Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
• Fixes https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 CVE-2024-30261
• Revert "fix: don't leak internal class (#3024)" by @​mcollina in nodejs/undici#3044

Full Changelog: https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1

v6.11.0

What's Changed

• refactor(#3023): Pass headers as array instead by @​metcoder95 in nodejs/undici#3025
• fix: don't leak internal class by @​ronag in nodejs/undici#3024
• build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by @​dependabot in nodejs/undici#3034
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @​dependabot in nodejs/undici#3038
• build(deps-dev): bump borp from 0.9.1 to 0.10.0 by @​dependabot in nodejs/undici#2947
• missing commits by @​ronag in nodejs/undici#3040
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in nodejs/undici#3036
• fix: regexp pattern by @​tsctx in nodejs/undici#3041

Full Changelog: https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0

v6.10.2

What's Changed

• Do not fail test if streams support typed arrays by @​mcollina in nodejs/undici#2978
• fix(fetch): properly redirect non-ascii location header url by @​Xvezda in nodejs/undici#2971
• perf: Remove double-stringify in setCookie by @​peterver in nodejs/undici#2980
• [fix #2982] use DispatcherInterceptor type for Dispatcher#Compose by @​clovis-guillemot in nodejs/undici#2983
• fix: make EventSource properties enumerable by @​MattBidewell in nodejs/undici#2987
• docs: ✏️ fixed benchmark links by @​benhalverson in nodejs/undici#2991
• fix(#2986): bad start check by @​metcoder95 in nodejs/undici#2992
• fix(H2 Client): bind stream 'data' listener only after received 'response' event by @​St3ffGv4 in nodejs/undici#2985
• feat: added search input by @​benhalverson in nodejs/undici#2993
• chore: validate responses can be consumed without a Content-Length or… by @​jacob-ebey in nodejs/undici#2995
• fix error message by @​KhafraDev in nodejs/undici#2998
• Revert "perf: reuse TextDecoder instance (#2863)" by @​panva in nodejs/undici#2999
• test: remove only by @​metcoder95 in nodejs/undici#3001

New Contributors

• @​Xvezda made their first contribution in nodejs/undici#2971
• @​peterver made their first contribution in nodejs/undici#2980
• @​clovis-guillemot made their first contribution in nodejs/undici#2983
• @​MattBidewell made their first contribution in nodejs/undici#2987
• @​benhalverson made their first contribution in nodejs/undici#2991
• @​St3ffGv4 made their first contribution in nodejs/undici#2985
• @​jacob-ebey made their first contribution in nodejs/undici#2995

... (truncated)

Commits

• 6df3c73 Bumped v6.11.1
• c346b66 Revert "fix: don't leak internal class (#3024)"
• d542b8c Merge pull request from GHSA-9qxr-qj54-h672
• 6805746 Merge pull request from GHSA-m4v8-wqvr-p9f7
• ee5f892 Bumped v6.11.0
• 71a6d74 Merge branch 'main' of github.com:nodejs/undici
• 0f0f239 fix: regexp pattern (#3041)
• 31f9e67 build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#3036)
• c8a43ae fixup
• 8b5e2c8 fixup
• Additional commits viewable in compare view

Updates axios from 0.27.2 to 1.6.8

Release notes

Sourced from axios's releases.

Release v1.6.8

Release notes:

Bug Fixes

• AxiosHeaders: fix AxiosHeaders conversion to an object during config merging (#6243) (2656612)
• import: use named export for EventEmitter; (7320430)
• vulnerability: update follow-redirects to 1.15.6 (#6300) (8786e0f)

Contributors to this release

• Jay
• Dmitriy Mozgovoy
• Mitchell
• Emmanuel
• Lucas Keller
• Aditya Mogili
• Miroslav Petrov

Release v1.6.7

Release notes:

Bug Fixes

• capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

• Dmitriy Mozgovoy
• zhoulixiang

Release v1.6.6

Release notes:

Bug Fixes

• fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
• wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

• Ilya Priven
• Zao Soula

Release v1.6.5

Release notes:

Bug Fixes

• ci: refactor notify action as a job of publish action; (#6176) (0736f95)
• dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.6.8 (2024-03-15)

Bug Fixes

• AxiosHeaders: fix AxiosHeaders conversion to an object during config merging (#6243) (2656612)
• import: use named export for EventEmitter; (7320430)
• vulnerability: update follow-redirects to 1.15.6 (#6300) (8786e0f)

Contributors to this release

• Jay
• Dmitriy Mozgovoy
• Mitchell
• Emmanuel
• Lucas Keller
• Aditya Mogili
• Miroslav Petrov

1.6.7 (2024-01-25)

Bug Fixes

• capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

• Dmitriy Mozgovoy
• zhoulixiang

1.6.6 (2024-01-24)

Bug Fixes

• fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
• wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

• Ilya Priven
• Zao Soula

1.6.5 (2024-01-05)

Bug Fixes

• ci: refactor notify action as a job of publish action; (#6176) (0736f95)

... (truncated)

Commits

• ab3f0f9 chore(release): v1.6.8 (#6303)
• 2656612 fix(AxiosHeaders): fix AxiosHeaders conversion to an object during config mer...
• 7320430 fix(import): use named export for EventEmitter;
• 8786e0f fix(vulnerability): update follow-redirects to 1.15.6 (#6300)
• d844227 chore: update and bump deps (#6238)
• caa0625 docs: update README responseEncoding types (#6194)
• 41c4584 docs: Update README.md to point to current axios version in CDN links (#6196)
• bf6974f chore(ci): add npm tag action; (#6231)
• a52e4d9 chore(release): v1.6.7 (#6204)
• 2b69888 chore: remove unnecessary check (#6186)
• Additional commits viewable in compare view

Updates homebridge-config-ui-x from 4.55.1 to 4.56.1

Release notes

Sourced from homebridge-config-ui-x's releases.

4.56.1

Bug Fixes

• drop @homebridge/node-pty-prebuilt-multiarch to v0.11.12 (resolves git requirement)

Homebridge Dependencies

• @homebridge/hap-client @ v1.10.0
• @homebridge/node-pty-prebuilt-multiarch @ v0.11.12
• @homebridge/plugin-ui-utils @ v1.0.2

4.56.0

UI Changes

• improve power options button display (#1961) (@​mkz212)
• update credits modal with supporters
• add warning to remove-single-cached-accessory (#1985) (@​mkz212)
• refactor backup and restore modals, separate items on settings page
• standardise modal sizes
• standardise warning sections on settings modals
• minor adjustments to settings page
• update icons on settings page (#1990) (@​mkz212)
• break-word in plugin config (#1993) (@​mkz212)
• Fix crash with missing homepage package.json property (#2013) (@​regaw-leinad)
• improve ui of settings page (#2016) (@​mkz212)
• improve ui of settings page (#2026) (@​mkz212)
• remove mdns interface tooltips
• network interface widget: custom interface
• fix status widget graphs
• add 'report an issue' link to plugin menu
• configurable action button class on confirm component
• refactor widget settings view with styled checkboxes
• refactor accessory info view with styled checkboxes
• remove NPM/GitHub icons from plugin modals
• refactor user add/edit with styled checkboxes
• hide plugin logs menu item when plugin is disabled
• refactor add room button and modal

Translation Changes

• updates to uk.json language file (#1978) (#1979) (@​xrust83)
• updates to th.json language file (#1982) (@​tomzt)
• updates to fr.json language file (#1991) (@​SonnyT72)
• updates to ja.json language file (@​yima0913)
• Correct slow restart message (#2006) (@​jamieburchell)
• updates to es.json language file (#2020) (@​AxelDreemurr)

Other Changes

• improve GitHub actions

... (truncated)

Changelog

Sourced from homebridge-config-ui-x's changelog.

v4.56.1 (2024-04-03)

Bug Fixes

• drop @homebridge/node-pty-prebuilt-multiarch to v0.11.12 (resolves git requirement)

Homebridge Dependencies

• @homebridge/hap-client @ v1.10.0
• @homebridge/node-pty-prebuilt-multiarch @ v0.11.12
• @homebridge/plugin-ui-utils @ v1.0.2

v4.56.0 (2024-04-02)

UI Changes

• improve power options button display (#1961) (@​mkz212)
• update credits modal with supporters
• add warning to remove-single-cached-accessory (#1985) (@​mkz212)
• refactor backup and restore modals, separate items on settings page
• standardise modal sizes
• standardise warning sections on settings modals
• minor adjustments to settings page
• update icons on settings page (#1990) (@​mkz212)
• break-word in plugin config (#1993) (@​mkz212)
• Fix crash with missing homepage package.json property (#2013) (@​regaw-leinad)
• improve ui of settings page (#2016) (@​mkz212)
• improve ui of settings page (#2026) (@​mkz212)
• remove mdns interface tooltips
• network interface widget: custom interface
• fix status widget graphs
• add 'report an issue' link to plugin menu
• configurable action button class on confirm component
• refactor widget settings view with styled checkboxes
• refactor accessory info view with styled checkboxes
• remove NPM/GitHub icons from plugin modals
• refactor user add/edit with styled checkboxes
• hide plugin logs menu item when plugin is disabled
• refactor add room button and modal

Translation Changes

• updates to uk.json language file (#1978) (#1979) (@​xrust83)
• updates to th.json language file (#1982) (@​tomzt)
• updates to fr.json language file (#1991) (@​SonnyT72)
• updates to ja.json language file (@​yima0913)
• Correct slow restart message (#2006) (@​jamieburchell)
• updates to es.json language file (#2020) (@​AxelDreemurr)

Other Changes

... (truncated)

Commits

• e11fc5a drop @homebridge/node-pty-prebuilt-multiarch to v0.11.12 (#2034)
• 2263c8d 4.56.0
• 54b1bab latest <- beta (#1980)
• b7722c0 standardise README to same as other hb repos
• 8766a12 standardise CHANGELOG to same as homebridge
• 9072904 refactor add room button and modal
• 2e84d78 hide plugin logs menu item when plugin is disabled
• ad41f61 refactor user add/edit with styled checkboxes
• 7caf95d remove npm/github icons from plugin modals
• 399d416 refactor accessory info view with styled checkboxes
• Additional commits viewable in compare view

Updates follow-redirects from 1.15.5 to 1.15.6

Commits

• 35a517c Release version 1.15.6 of the npm package.
• c4f847f Drop Proxy-Authorization across hosts.
• 8526b4a Use GitHub for disclosure.
• See full diff in compare view

Updates ip from 1.1.8 to 1.1.9

Commits

• 1ecbf2f 1.1.9
• 6a3ada9 lib: fixed CVE-2023-42282 and added unit test
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/donavanbecker/homebridge-resideo/network/alerts).

[github-actions[bot]]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[github-actions[bot]]

This pull request has been automatically closed because it has not had recent activity. Thank you for your contributions.

[dependabot[bot]]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml