jonorthwash / ud-annotatrix

GNU General Public License v3.0
59 stars 49 forks source link

build(deps): bump minimist, mocha and nyc #511

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps minimist to 1.2.6 and updates ancestor dependencies minimist, mocha and nyc. These dependencies need to be updated together.

Updates minimist from 0.0.8 to 1.2.6

Changelog

Sourced from minimist's changelog.

v1.2.6 - 2022-03-21

Commits

  • test from prototype pollution PR bc8ecee
  • isConstructorOrProto adapted from PR c2b9819
  • security notice for additional prototype pollution issue ef88b93

v1.2.5 - 2020-03-12

v1.2.4 - 2020-03-11

Commits

  • security notice 4cf1354
  • additional test for constructor prototype pollution 1043d21

v1.2.3 - 2020-03-10

Commits

  • more failing proto pollution tests 13c01a5
  • even more aggressive checks for protocol pollution 38a4d1c

v1.2.2 - 2020-03-10

Commits

v1.2.1 - 2020-03-10

Merged

Commits

v1.2.0 - 2015-08-24

Commits

... (truncated)

Commits


Updates mocha from 5.2.0 to 10.2.0

Release notes

Sourced from mocha's releases.

v10.2.0

10.2.0 / 2022-12-11

:tada: Enhancements

  • #4945: API: add possibility to decorate ESM name before import (@​j0tunn)

:bug: Fixes

:book: Documentation

v10.1.0

10.1.0 / 2022-10-16

:tada: Enhancements

:nut_and_bolt: Other

v10.0.0

10.0.0 / 2022-05-01

:boom: Breaking Changes

:nut_and_bolt: Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.2.0 / 2022-12-11

:tada: Enhancements

  • #4945: API: add possibility to decorate ESM name before import (@​j0tunn)

:bug: Fixes

:book: Documentation

10.1.0 / 2022-10-16

:tada: Enhancements

:nut_and_bolt: Other

10.0.0 / 2022-05-01

:boom: Breaking Changes

:nut_and_bolt: Other

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by juergba, a new releaser for mocha since your current version.


Updates nyc from 12.0.2 to 15.1.0

Changelog

Sourced from nyc's changelog.

15.1.0 (2020-06-01)

Features

  • experimental: Support using --all with node.js ESM (#1320) (992359a)

15.0.1 (2020-04-02)

Bug Fixes

15.0.0 (2019-12-20)

⚠ BREAKING CHANGES

  • The flow and jsx parser plugins are no longer enabled by default.
  • Node.js 8 is now required to run nyc
  • Remove NYC_ROOT_ID and NYC_INSTRUMENTER environmental variables.
  • The root field has been removed from processinfo files.

Features

Bug Fixes

14.1.1 (2019-05-09)

... (truncated)

Commits
  • de7baa4 chore(release): 15.1.0
  • 992359a feat(experimental): Support using --all with node.js ESM (#1320)
  • 086fd20 chore: Regenerate package-lock, update source-map-support test (#1314)
  • b20f751 chore: add bugs (used, e.g., by npmjs) (#1313)
  • 6898e88 chore: Fix CHANGELOG.md version header
  • d9a76d5 chore(release): 15.0.1
  • 3a577f0 fix: Ignore insignificant lines when coalesce text report (#1300)
  • df34c1c fix: Data merge concurrency limit to prevent OOM (#1293)
  • befbf08 chore: A test where nyc output help text to stderr was flaky (#1269)
  • 9260a70 docs: Remove nyc containing object in json config examples (#1276)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by coreyfarrell, a new releaser for nyc since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jonorthwash/ud-annotatrix/network/alerts).