huridocs / uwazi

Uwazi is a web-based, open-source solution for building and sharing document collections
http://www.uwazi.io
MIT License
242 stars 80 forks source link

Bump cookie and @types/cookie #7462

Closed dependabot[bot] closed 15 hours ago

dependabot[bot] commented 1 day ago

Bumps cookie and @types/cookie. These dependencies needed to be updated together. Updates cookie from 0.7.0 to 1.0.2

Release notes

Sourced from cookie's releases.

v1.0.2

Fixed

  • Loosen cookie name/value validation (#210)
  • fix: options.priority used incorrect fallback (#207) by @​jonchurch

Added

https://github.com/jshttp/cookie/compare/v1.0.1...v1.0.2

v1.0.1

Added

  • Allow case insensitive options (#194) 3bed080

https://github.com/jshttp/cookie/compare/v1.0.0...v1.0.1

v1.0.0

Breaking changes

  • Use modern JS features, ship TypeScript definition (#175) 1cc64ff
    • Adds __esModule marker, imports need to use import { parse, serialize } or import * as cookie
  • Minimum node.js v18
  • Uses null prototype object for parse return value
  • Changes strict and priority to match the lower case strings (i.e. low, not LOW or Low)
  • Require maxAge to be an integer using Number.isInteger check
  • Delegates decode implementation details to decode option (i.e. error handling and quote parsing is defined by decode)
    • Delegate quote parsing to decode (#180) c4a2597
    • Shift try/catch to decode (#179) 93a5b97
  • Improve arg/option error messages (#162) e206fd5 @​MaoShizhong

Other

  • Remove hasOwnProperty, use undefined check for performance (#183) 8f3ee9e @​gurgunday

https://github.com/jshttp/cookie/compare/v0.7.2...v1.0.0

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

https://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)

... (truncated)

Commits


Updates @types/cookie from 0.6.0 to 1.0.0

Commits


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mfacar commented 15 hours ago

@dependabot ignore this major version

dependabot[bot] commented 15 hours ago

This option is only available on single-dependency pull requests, as the versions in multi-dependency pull requests may differ.

If you'd like to ignore all updates for these dependencies just reply @dependabot ignore these dependencies.

dependabot[bot] commented 15 hours ago

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.