search

kukuminer / ta-app

Online application and selection platform for teaching assistants
0 stars 0 forks source link

Bump the all-patch-minor group across 1 directory with 4 updates #179

Closed dependabot[bot] closed 4 weeks ago

dependabot[bot] commented 1 month ago

Bumps the all-patch-minor group with 4 updates in the /server directory: async, express, pg-promise and nodemon.

Updates async from 3.2.5 to 3.2.6

Commits
  • 85fb18f Version 3.2.6
  • 8c0c941 Update built files
  • 5f756b4 Fix ReDoS (#1980)
  • 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
  • 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
  • 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
  • afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
  • 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
  • 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
  • f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
  • Additional commits viewable in compare view


Updates express from 4.19.2 to 4.21.0

Release notes

Sourced from express's releases.

4.21.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits


Updates pg-promise from 11.6.0 to 11.9.1

Release notes

Sourced from pg-promise's releases.

11.9.1

  • Documentation updates
  • Dependencies updated

11.9.0

11.8.0

  • Refactoring TypeScript declarations for tasks and transactions. Added export of types ITaskIfOptions and ITxIfOptions from the root.
  • Refactoring _TN function.

11.7.8

  • Refactoring _TN function
  • Documentation updates

11.7.7

  • Fixing null | undefined parameters for _TN function.
  • Adding tests for the function

11.7.6

  • Further improvements for _TN function.

11.7.5

  • Improving TypeScript declaration for _TN function.

11.7.4

  • More fixes for the _TN function.

11.7.3

  • Fixing _TN function again 😸

11.7.2

  • Further improvement of the _TN helper, to support dynamic tag variables.

11.7.1

  • Improved _TN to support regular-string calls.

11.7.0

  • Added template-tag helper _TN, following #931
  • Updated packages
Commits


Updates nodemon from 3.1.0 to 3.1.7

Release notes

Sourced from nodemon's releases.

v3.1.7

3.1.7 (2024-09-20)

Bug Fixes

v3.1.6

3.1.6 (2024-09-19)

Bug Fixes

v3.1.5

3.1.5 (2024-09-17)

Bug Fixes

  • add missing ignore option to type defintion of config (#2224) (254c2ab)

v3.1.4

3.1.4 (2024-06-20)

Bug Fixes

v3.1.3

3.1.3 (2024-06-03)

Bug Fixes

  • cast the nodemon function as Nodemon type (eaa1d54), closes #2206

v3.1.2

3.1.2 (2024-05-29)

Bug Fixes

v3.1.1

3.1.1 (2024-05-25)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 4 weeks ago

Superseded by #180.