search

lukebrogan-mend / juice-shop

MIT License
0 stars 0 forks source link

chore(deps): update mend: high confidence minor and patch dependency updates #40

Open mend-for-github-com[bot] opened 1 month ago

mend-for-github-com[bot] commented 1 month ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/chai (source) 4.3.16 -> 4.3.19 age adoption passing confidence
@types/i18n (source) ^0.12.0 -> ^0.13.0 age adoption passing confidence
@types/jasmine (source) ~3.9.1 -> ~3.10.0 age adoption passing confidence
@types/multer (source) 1.4.11 -> 1.4.12 age adoption passing confidence
@types/pdfkit (source) ^0.10.6 -> ^0.13.0 age adoption passing confidence
@types/unzipper (source) 0.10.9 -> 0.10.10 age adoption passing confidence
@types/validator (source) 13.12.0 -> 13.12.1 age adoption passing confidence
@typescript-eslint/eslint-plugin (source) 6.18.1 -> 6.21.0 age adoption passing confidence
@typescript-eslint/parser (source) 6.18.1 -> 6.21.0 age adoption passing confidence
chai (source) 4.4.1 -> 4.5.0 age adoption passing confidence
cypress (source) 13.13.1 -> 13.14.2 age adoption passing confidence
eslint-config-prettier 7.1.0 -> 7.2.0 age adoption passing confidence
eslint-plugin-import 2.29.1 -> 2.30.0 age adoption passing confidence
ethers (source) 6.13.1 -> 6.13.2 age adoption passing confidence
event-source-polyfill 1.0.26 -> 1.0.31 age adoption passing confidence
http-server ^0.12.3 -> ^0.13.0 age adoption passing confidence
i18n ^0.11.1 -> ^0.15.0 age adoption passing confidence
jasmine-core (source) ~3.9.0 -> ~3.99.0 age adoption passing confidence
karma-chrome-launcher ~3.1.0 -> ~3.2.0 age adoption passing confidence
node-pre-gyp ^0.15.0 -> ^0.17.0 age adoption passing confidence
pdfkit (source) ^0.11.0 -> ^0.15.0 age adoption passing confidence
rxjs (source) 6.6.3 -> 6.6.7 age adoption passing confidence
sanitize-html 1.4.2 -> 1.27.5 age adoption passing confidence
typescript (source) ~4.6.0 -> ~4.9.0 age adoption passing confidence
typescript (source) ~4.8.4 -> ~4.9.0 age adoption passing confidence
unzipper 0.9.15 -> 0.12.3 age adoption passing confidence
winston 3.13.1 -> 3.14.2 age adoption passing confidence
zustand 4.4.1 -> 4.5.5 age adoption passing confidence

Release Notes

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin) ### [`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6210-2024-02-05) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0) ##### 🚀 Features - export plugin metadata - allow `parserOptions.project: false` - **eslint-plugin:** add rule prefer-find ##### 🩹 Fixes - **eslint-plugin:** \[no-unused-vars] don't report on types referenced in export assignment expression - **eslint-plugin:** \[switch-exhaustiveness-check] better support for intersections, infinite types, non-union values - **eslint-plugin:** \[consistent-type-imports] dont report on types used in export assignment expressions - **eslint-plugin:** \[no-unnecessary-condition] handle left-hand optional with exactOptionalPropertyTypes option - **eslint-plugin:** \[class-literal-property-style] allow getter when same key setter exists - **eslint-plugin:** \[no-unnecessary-type-assertion] provide valid fixes for assertions with extra tokens before `as` keyword ##### ❤️ Thank You - auvred - Brad Zacher - Kirk Waiblinger - Pete Gonzalez - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.20.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6200-2024-01-29) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.19.1...v6.20.0) ##### 🚀 Features - **eslint-plugin:** \[member-ordering] allow easy reuse of the default ordering ##### 🩹 Fixes - **eslint-plugin:** \[no-useless-template-literals] incorrect bigint autofix result - **eslint-plugin:** \[prefer-nullish-coalescing] treat any/unknown as non-nullable - **eslint-plugin:** \[no-useless-template-literals] report Infinity & NaN - **eslint-plugin:** \[prefer-readonly] disable checking accessors ##### ❤️ Thank You - Alex Parloti - auvred - James Browning - StyleShit - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.19.1`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6191-2024-01-22) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.19.0...v6.19.1) ##### 🩹 Fixes - **type-utils:** preventing isUnsafeAssignment infinite recursive calls - **eslint-plugin:** \[no-unnecessary-condition] fix false positive for type variable ##### ❤️ Thank You - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.19.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6190-2024-01-15) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.18.1...v6.19.0) ##### 🚀 Features - **eslint-plugin:** \[prefer-promise-reject-errors] add rule - **eslint-plugin:** \[no-array-delete] add new rule - **eslint-plugin:** \[no-useless-template-literals] add fix suggestions ##### 🩹 Fixes - **eslint-plugin:** \[no-unnecessary-type-assertion] detect unnecessary non-null-assertion on a call expression - **eslint-plugin:** \[no-unnecesary-type-assertion] treat unknown/any as nullable ##### ❤️ Thank You - auvred - Brad Zacher - Josh Goldberg ✨ - Joshua Chen - LJX - Steven - StyleShit You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website.
typescript-eslint/typescript-eslint (@​typescript-eslint/parser) ### [`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6210-2024-02-05) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0) ##### 🚀 Features - allow `parserOptions.project: false` ##### ❤️ Thank You - auvred - Brad Zacher - Kirk Waiblinger - Pete Gonzalez - YeonJuan You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.20.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6200-2024-01-29) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.19.1...v6.20.0) This was a version bump only for parser to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.19.1`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6191-2024-01-22) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.19.0...v6.19.1) This was a version bump only for parser to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website. ### [`v6.19.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6190-2024-01-15) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.18.1...v6.19.0) This was a version bump only for parser to align it with other projects, there were no code changes. You can read about our [versioning strategy](https://main--typescript-eslint.netlify.app/users/versioning) and [releases](https://main--typescript-eslint.netlify.app/users/releases) on our website.
chaijs/chai (chai) ### [`v4.5.0`](https://togithub.com/chaijs/chai/releases/tag/v4.5.0) [Compare Source](https://togithub.com/chaijs/chai/compare/v4.4.1...v4.5.0) - Update type detect ([#​1631](https://togithub.com/chaijs/chai/issues/1631)) [`1a36d35`](https://togithub.com/chaijs/chai/commit/1a36d35) #### What's Changed - Update type detect by [@​koddsson](https://togithub.com/koddsson) in [https://github.com/chaijs/chai/pull/1631](https://togithub.com/chaijs/chai/pull/1631) **Full Changelog**: https://github.com/chaijs/chai/compare/v4.4.1...v4.5.0
cypress-io/cypress (cypress) ### [`v13.14.2`](https://togithub.com/cypress-io/cypress/releases/tag/v13.14.2) [Compare Source](https://togithub.com/cypress-io/cypress/compare/v13.14.1...v13.14.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-14-2 ### [`v13.14.1`](https://togithub.com/cypress-io/cypress/releases/tag/v13.14.1) [Compare Source](https://togithub.com/cypress-io/cypress/compare/v13.14.0...v13.14.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-14-1 ### [`v13.14.0`](https://togithub.com/cypress-io/cypress/releases/tag/v13.14.0) [Compare Source](https://togithub.com/cypress-io/cypress/compare/v13.13.3...v13.14.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-14-0 ### [`v13.13.3`](https://togithub.com/cypress-io/cypress/releases/tag/v13.13.3) [Compare Source](https://togithub.com/cypress-io/cypress/compare/v13.13.2...v13.13.3) Changelog: https://docs.cypress.io/guides/references/changelog#13-13-3 ### [`v13.13.2`](https://togithub.com/cypress-io/cypress/releases/tag/v13.13.2) [Compare Source](https://togithub.com/cypress-io/cypress/compare/v13.13.1...v13.13.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-13-2
prettier/eslint-config-prettier (eslint-config-prettier) ### [`v7.2.0`](https://togithub.com/prettier/eslint-config-prettier/blob/HEAD/CHANGELOG.md#Version-720-2021-01-18) [Compare Source](https://togithub.com/prettier/eslint-config-prettier/compare/v7.1.0...v7.2.0) - Added: \[[@​typescript-eslint/object-curly-spacing](https://togithub.com/typescript-eslint/object-curly-spacing)]. - Added: \[react/jsx-newline].
import-js/eslint-plugin-import (eslint-plugin-import) ### [`v2.30.0`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2300---2024-09-02) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.29.1...v2.30.0) ##### Added - \[`dynamic-import-chunkname`]: add `allowEmpty` option to allow empty leading comments (\[[#​2942](https://togithub.com/import-js/eslint-plugin-import/issues/2942)], thanks \[[@​JiangWeixian](https://togithub.com/JiangWeixian)]) - \[`dynamic-import-chunkname`]: Allow empty chunk name when webpackMode: 'eager' is set; add suggestions to remove name in eager mode (\[[#​3004](https://togithub.com/import-js/eslint-plugin-import/issues/3004)], thanks \[[@​amsardesai](https://togithub.com/amsardesai)]) - \[`no-unused-modules`]: Add `ignoreUnusedTypeExports` option (\[[#​3011](https://togithub.com/import-js/eslint-plugin-import/issues/3011)], thanks \[[@​silverwind](https://togithub.com/silverwind)]) - add support for Flat Config (\[[#​3018](https://togithub.com/import-js/eslint-plugin-import/issues/3018)], thanks \[[@​michaelfaith](https://togithub.com/michaelfaith)]) ##### Fixed - \[`no-extraneous-dependencies`]: allow wrong path (\[[#​3012](https://togithub.com/import-js/eslint-plugin-import/issues/3012)], thanks \[[@​chabb](https://togithub.com/chabb)]) - \[`no-cycle`]: use scc algorithm to optimize (\[[#​2998](https://togithub.com/import-js/eslint-plugin-import/issues/2998)], thanks \[[@​soryy708](https://togithub.com/soryy708)]) - \[`no-duplicates`]: Removing duplicates breaks in TypeScript (\[[#​3033](https://togithub.com/import-js/eslint-plugin-import/issues/3033)], thanks \[[@​yesl-kim](https://togithub.com/yesl-kim)]) - \[`newline-after-import`]: fix considerComments option when require (\[[#​2952](https://togithub.com/import-js/eslint-plugin-import/issues/2952)], thanks \[[@​developer-bandi](https://togithub.com/developer-bandi)]) - \[`order`]: do not compare first path segment for relative paths (\[[#​2682](https://togithub.com/import-js/eslint-plugin-import/issues/2682)]) (\[[#​2885](https://togithub.com/import-js/eslint-plugin-import/issues/2885)], thanks \[[@​mihkeleidast](https://togithub.com/mihkeleidast)]) ##### Changed - \[Docs] `no-extraneous-dependencies`: Make glob pattern description more explicit (\[[#​2944](https://togithub.com/import-js/eslint-plugin-import/issues/2944)], thanks \[[@​mulztob](https://togithub.com/mulztob)]) - \[`no-unused-modules`]: add console message to help debug \[[#​2866](https://togithub.com/import-js/eslint-plugin-import/issues/2866)] - \[Refactor] `ExportMap`: make procedures static instead of monkeypatching exportmap (\[[#​2982](https://togithub.com/import-js/eslint-plugin-import/issues/2982)], thanks \[[@​soryy708](https://togithub.com/soryy708)]) - \[Refactor] `ExportMap`: separate ExportMap instance from its builder logic (\[[#​2985](https://togithub.com/import-js/eslint-plugin-import/issues/2985)], thanks \[[@​soryy708](https://togithub.com/soryy708)]) - \[Docs] `order`: Add a quick note on how unbound imports and --fix (\[[#​2640](https://togithub.com/import-js/eslint-plugin-import/issues/2640)], thanks \[[@​minervabot](https://togithub.com/minervabot)]) - \[Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) (\[[#​2987](https://togithub.com/import-js/eslint-plugin-import/issues/2987)], thanks \[[@​joeyguerra](https://togithub.com/joeyguerra)]) - \[actions] migrate OSX tests to GHA (\[[ljharb#37](https://togithub.com/ljharb/eslint-plugin-import/issues/37)], thanks \[[@​aks-](https://togithub.com/aks-)]) - \[Refactor] `exportMapBuilder`: avoid hoisting (\[[#​2989](https://togithub.com/import-js/eslint-plugin-import/issues/2989)], thanks \[[@​soryy708](https://togithub.com/soryy708)]) - \[Refactor] `ExportMap`: extract "builder" logic to separate files (\[[#​2991](https://togithub.com/import-js/eslint-plugin-import/issues/2991)], thanks \[[@​soryy708](https://togithub.com/soryy708)]) - \[Docs] \[`order`]: update the description of the `pathGroupsExcludedImportTypes` option (\[[#​3036](https://togithub.com/import-js/eslint-plugin-import/issues/3036)], thanks \[[@​liby](https://togithub.com/liby)]) - \[readme] Clarify how to install the plugin (\[[#​2993](https://togithub.com/import-js/eslint-plugin-import/issues/2993)], thanks \[[@​jwbth](https://togithub.com/jwbth)])
ethers-io/ethers.js (ethers) ### [`v6.13.2`](https://togithub.com/ethers-io/ethers.js/blob/HEAD/CHANGELOG.md#ethersv6132-2024-07-25-1754) [Compare Source](https://togithub.com/ethers-io/ethers.js/compare/v6.13.1...v6.13.2) - Prevent mutating transactions when signing ([#​4789](https://togithub.com/ethers-io/ethers.js/issues/4789); [1a51af8](https://togithub.com/ethers-io/ethers.js/commit/1a51af85397283601db77ca61d5596b145e7f2cb)).
Yaffle/EventSource (event-source-polyfill) ### [`v1.0.31`](https://togithub.com/Yaffle/EventSource/compare/af4013308b06c30d162208eb18985f39d9c1f633...1.0.31) [Compare Source](https://togithub.com/Yaffle/EventSource/compare/af4013308b06c30d162208eb18985f39d9c1f633...1.0.31) ### [`v1.0.30`](https://togithub.com/Yaffle/EventSource/compare/f864e1fc30fc4dd10c895b10e451a89042ca837b...af4013308b06c30d162208eb18985f39d9c1f633) [Compare Source](https://togithub.com/Yaffle/EventSource/compare/f864e1fc30fc4dd10c895b10e451a89042ca837b...af4013308b06c30d162208eb18985f39d9c1f633) ### [`v1.0.29`](https://togithub.com/Yaffle/EventSource/compare/ccf0883df5318b5f80a42d51144d5234cac6a6b5...f864e1fc30fc4dd10c895b10e451a89042ca837b) [Compare Source](https://togithub.com/Yaffle/EventSource/compare/ccf0883df5318b5f80a42d51144d5234cac6a6b5...f864e1fc30fc4dd10c895b10e451a89042ca837b) ### [`v1.0.28`](https://togithub.com/Yaffle/EventSource/compare/de137927e13d8afac153d2485152ccec48948a7a...ccf0883df5318b5f80a42d51144d5234cac6a6b5) [Compare Source](https://togithub.com/Yaffle/EventSource/compare/de137927e13d8afac153d2485152ccec48948a7a...ccf0883df5318b5f80a42d51144d5234cac6a6b5)
http-party/http-server (http-server) ### [`v0.13.0`](https://togithub.com/http-party/http-server/releases/tag/v0.13.0) [Compare Source](https://togithub.com/http-party/http-server/compare/v0.12.3...v0.13.0) A long time coming, the next major release for http-server! This will be the final release before a switch to actual semantic versioning. This release's major achievement is the internalization of the functionality of the now-abandoned `ecstatic` library, thus removing it as a dependency. Huge thanks to [@​zbynek](https://togithub.com/zbynek) for help on that front, as well as several other included changes. ##### Breaking changes: - No longer sends the header `server: http-server-${version}` with every response ##### New features: - All responses include `Accept-Ranges: bytes` to advertise support for partial requests ##### Fixes - Removes dependency on the abandoned `ecstatic` library - Dependency upgrades to fix several security alerts - `http-server -a 0.0.0.0` will now do what you told it to do, rather than overriding the address to 127.0.0.1 - Will no longer serve binary files with a charset in the Content-Type, fixing serving WebAssembly files, among other issues - Support `.mjs` MimeType correctly ##### Internal - Switched from Travis to GH Actions for CI
mashpie/i18n-node (i18n) ### [`v0.15.1`](https://togithub.com/mashpie/i18n-node/compare/0.15.0...c55f79488ddacf42292409231058036e826976aa) [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.15.0...c55f79488ddacf42292409231058036e826976aa) ### [`v0.15.0`](https://togithub.com/mashpie/i18n-node/releases/tag/v0.15.0): 0.15.0 - Feature [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.14.2...0.15.0) ### Added New `parser` configuration option allows to change the default `JSON` parser to any other parser with same signature, ie: ```js const YAML = require('yaml') /** * JSON.stringify() -> YAML.stringify() * JSON.parse() -> YAML.parse() */ i18n.configure({ extension: '.yml', parser: YAML }) ``` replaces JSON with YAML, so locale files will now format as yaml files. See https://github.com/mashpie/i18n-node#some-words-on-parser-option and https://github.com/mashpie/i18n-node/blob/master/test/i18n.configureParser.js Kudos to [@​mathiashsteffensen](https://togithub.com/mathiashsteffensen) for providing the PR [#​488](https://togithub.com/mashpie/i18n-node/issues/488) ### [`v0.14.2`](https://togithub.com/mashpie/i18n-node/releases/tag/0.14.2): - Bugfix [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.14.1...0.14.2) ### Fixed Fixes [#​493](https://togithub.com/mashpie/i18n-node/issues/493) - using i18n with a combination of retry and sync settings lead to a 'Maximum call stack size exceeded' exception due to an infinite loop while writing phrases to all locale files. ```js const i18n = new I18n({ // [...] retryInDefaultLocale: true, syncFiles: true, }) ``` ### [`v0.14.1`](https://togithub.com/mashpie/i18n-node/releases/tag/0.14.1): - Maintenance [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.14.0...0.14.1) ### Fixed - upgrade all dev dependencies without breaking changes - upgrade all dependencies without breaking changes This also updates to mocha 9.2.0 ([https://github.com/mochajs/mocha/issues/4814](https://togithub.com/mochajs/mocha/issues/4814)) which fixes https://github.com/advisories/GHSA-qrpm-p2h7-hrv2 ### [`v0.14.0`](https://togithub.com/mashpie/i18n-node/releases/tag/0.14.0): - Upgrade [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.13.4...0.14.0) ### Changed - replaces sprintf-js with fast-printf [#​453](https://togithub.com/mashpie/i18n-node/issues/453) - replaces deprecated messageformat with [@​messageformat/core](https://togithub.com/messageformat/core) [#​472](https://togithub.com/mashpie/i18n-node/issues/472) - drops node support <10 - local dev defaults to node 16 ### [`v0.13.4`](https://togithub.com/mashpie/i18n-node/releases/tag/0.13.4): - Maintenance [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.13.3...0.13.4) ### Fixed - upgrade all dev dependencies without breaking changes - upgrade all dependencies without breaking changes see [`aa60ac7`](https://togithub.com/mashpie/i18n-node/commit/aa60ac704d364ab061bc778a1f4551ebb67ca575), [`3139881`](https://togithub.com/mashpie/i18n-node/commit/3139881165896ec3dbb664c66e410a84f06fcfac) and [`4e6963f`](https://togithub.com/mashpie/i18n-node/commit/4e6963fd571bb6b47577bb3fead0edac5325e433) for details ### Added - test directory traversal ([#​486](https://togithub.com/mashpie/i18n-node/issues/486)) ### [`v0.13.3`](https://togithub.com/mashpie/i18n-node/releases/tag/0.13.3): - Maintenance [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.13.2...0.13.3) ### Fixed - upgrade transitive dev dependency of eslint, mocha, zombie to lodash@4.17.21 - upgrade transitive dev dependency of zombie to url-parse@1.5.1 - upgrade transitive dev dependency of eslint-plugin-import to hosted-git-info@2.8.9 ### [`v0.13.2`](https://togithub.com/mashpie/i18n-node/releases/tag/0.13.2): - Maintenance [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.13.1...0.13.2) ### Fixed - moved devDeps from dependencies to devDependencies [#​446](https://togithub.com/mashpie/i18n-node/issues/446) - removed unused packages from all dependencies ### [`v0.13.1`](https://togithub.com/mashpie/i18n-node/releases/tag/0.13.1): - Hotfix [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.13.0...0.13.1) ### Fixed - npx npm-force-resolutions failed [#​445](https://togithub.com/mashpie/i18n-node/issues/445) #### Details A preinstall script was added to force resolving specific versions of lodash and ajv. Those are sub-dependencies of zombie and its packages. Zombie is devDependency of i18n. But zombie still refers to older versions reported to vulnerable - so I decided to force fixed versions. Of course that `preinstall` should count on any `npm install i18n`, it's renamed to `force-resolutions` so I can still resolve audit issues in dev while also supporting clean installs. ```json "scripts": { "preinstall": "npx npm-force-resolutions" } ``` now reads as ```json "scripts": { "force-resolutions": "npx npm-force-resolutions" } ``` And doesn't get triggered by `npm install`. ### [`v0.13.0`](https://togithub.com/mashpie/i18n-node/releases/tag/0.13.0): - Feature Release [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.12.0...0.13.0) ### Added - new option `retryInDefaultLocale` as proposed by PR [#​206](https://togithub.com/mashpie/i18n-node/issues/206) - new option `header` as proposed by PRs [#​390](https://togithub.com/mashpie/i18n-node/issues/390) and [#​407](https://togithub.com/mashpie/i18n-node/issues/407) - pre-commit hooks to ensure code-style (even on contributions) ### Fixed - typos in README ### Changed - tooling: eslint with standard.js & prettier presets replaces jshint ### [`v0.12.0`](https://togithub.com/mashpie/i18n-node/releases/tag/0.12.0): - Feature Release [Compare Source](https://togithub.com/mashpie/i18n-node/compare/0.11.1...0.12.0) ### Added - backward compatible default to singleton with `const i18n = require('i18n')` - create an instance of i18n by `const i18n = new I18n()` #### Example: ```js /** * require I18n with capital I as constructor */ const { I18n } = require("i18n"); /** * create a new instance with it's configuration */ const i18n = new I18n({ locales:['en', 'de'], directory: __dirname + '/locales' }); ```
jasmine/jasmine (jasmine-core) ### [`v3.99.1`](https://togithub.com/jasmine/jasmine/releases/tag/v3.99.1): 3.99.1 [Compare Source](https://togithub.com/jasmine/jasmine/compare/v3.99.0...v3.99.1) Please see the [release notes](https://togithub.com/jasmine/jasmine/blob/main/release_notes/3.99.1.md). ### [`v3.99.0`](https://togithub.com/jasmine/jasmine/releases/tag/v3.99.0): 3.99.0 [Compare Source](https://togithub.com/jasmine/jasmine/compare/v3.10.1...v3.99.0) Please see the [release notes](https://togithub.com/jasmine/jasmine/blob/main/release_notes/3.99.0.md). ### [`v3.10.1`](https://togithub.com/jasmine/jasmine/releases/tag/v3.10.1): 3.10.1 [Compare Source](https://togithub.com/jasmine/jasmine/compare/v3.10.0...v3.10.1) Please see the [release notes](https://togithub.com/jasmine/jasmine/blob/main/release_notes/3.10.1.md). ### [`v3.10.0`](https://togithub.com/jasmine/jasmine/releases/tag/v3.10.0): 3.10.0 [Compare Source](https://togithub.com/jasmine/jasmine/compare/v3.9.0...v3.10.0) Please see the [release notes](https://togithub.com/jasmine/jasmine/blob/main/release_notes/3.10.0.md).
karma-runner/karma-chrome-launcher (karma-chrome-launcher) ### [`v3.2.0`](https://togithub.com/karma-runner/karma-chrome-launcher/blob/HEAD/CHANGELOG.md#320-2023-04-20) [Compare Source](https://togithub.com/karma-runner/karma-chrome-launcher/compare/v3.1.1...v3.2.0) ##### Features - add process.env.ProgramW6432 as root location for binaries ([12a73db](https://togithub.com/karma-runner/karma-chrome-launcher/commit/12a73dba261c78fdba4aff4dbb741ac87adfed01)) #### [3.1.1](https://togithub.com/karma-runner/karma-chrome-launcher/compare/v3.1.0...v3.1.1) (2022-03-09) ##### Bug Fixes - artificially trigger a release ([83fdc3c](https://togithub.com/karma-runner/karma-chrome-launcher/commit/83fdc3ca5666374c677408ed0589e66b1124bec4))
mapbox/node-pre-gyp (node-pre-gyp) ### [`v0.17.0`](https://togithub.com/mapbox/node-pre-gyp/blob/HEAD/CHANGELOG.md#0170) [Compare Source](https://togithub.com/mapbox/node-pre-gyp/compare/ac2a149d836cbcd916c32cbcf25695485219e76b...de39503827e66662f316eaecfe34ce4b781da02a) - Got travis + appveyor green again - Added support for more node versions ### [`v0.16.0`](https://togithub.com/mapbox/node-pre-gyp/blob/HEAD/CHANGELOG.md#0160) [Compare Source](https://togithub.com/mapbox/node-pre-gyp/compare/6ca1a1ccf8b421b1db7b5a3f78767072eb13e4d9...ac2a149d836cbcd916c32cbcf25695485219e76b) - Added Node 15 support in the local database ([https://github.com/mapbox/node-pre-gyp/pull/520](https://togithub.com/mapbox/node-pre-gyp/pull/520))
foliojs/pdfkit (pdfkit) ### [`v0.15.0`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0150---2024-03-23) [Compare Source](https://togithub.com/foliojs/pdfkit/compare/v0.14.0...v0.15.0) - Add subset for PDF/UA - Fix for line breaks in list items ([#​1486](https://togithub.com/foliojs/pdfkit/issues/1486)) - Fix for soft hyphen not being replaced by visible hyphen if necessary ([#​457](https://togithub.com/foliojs/pdfkit/issues/457)) - Optimize output files by ignoring identity transforms - Fix for Acroforms - setting an option to false will still apply the flag ([#​1495](https://togithub.com/foliojs/pdfkit/issues/1495)) - Fix for text extraction in PDFium-based viewers due to invalid ToUnicodeMap ([#​1498](https://togithub.com/foliojs/pdfkit/issues/1498)) - Remove deprecated `write` method - Drop support for Node.js < 18 and for browsers released before 2020 ### [`v0.14.0`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0140---2023-11-09) [Compare Source](https://togithub.com/foliojs/pdfkit/compare/v0.13.0...v0.14.0) - Add support for PDF/A-1b, PDF/A-1a, PDF/A-2b, PDF/A-2a, PDF/A-3b, PDF/A-3a - Update crypto-js to v4.2.0 (properly fix security issue) - Add support for EXIF orientation on JPEG images ([#​626](https://togithub.com/foliojs/pdfkit/issues/626) and [#​1353](https://togithub.com/foliojs/pdfkit/issues/1353)) ### [`v0.13.0`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0130---2021-10-24) [Compare Source](https://togithub.com/foliojs/pdfkit/compare/v0.12.3...v0.13.0) - Add tiling pattern support ### [`v0.12.3`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0123---2021-08-01) - Remove examples from published package ### [`v0.12.2`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0122---2021-08-01) - Fix for PDF accessibility check. ([#​1265](https://togithub.com/foliojs/pdfkit/issues/1265)) - Allow applying 'underline' and 'strike' text styling together on a text - Allow to specify the AcroForm text fontSize - Update crypto-js to v4.0 (properly fix security issue) ### [`v0.12.1`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0121---2021-04-10) [Compare Source](https://togithub.com/foliojs/pdfkit/compare/v0.12.0...v0.12.1) - Update crypto-js to v3.3 (fix security issue) - Update fontkit to 1.8.1 ### [`v0.12.0`](https://togithub.com/foliojs/pdfkit/blob/HEAD/CHANGELOG.md#v0120---2021-04-04) [Compare Source](https://togithub.com/foliojs/pdfkit/compare/v0.11.0...v0.12.0) - Add support for Embedded Files and File Attachment Annotations - Accessibility support - Replace integration tests by visual regression tests - Fix access permissions in PDF version 1.7ext3 - Fix Buffer() is deprecation warning - Add `forms.md` to generate documentation files - Fix "@​" in FontName
reactivex/rxjs (rxjs) ### [`v6.6.7`](https://togithub.com/reactivex/rxjs/compare/6.6.6...6.6.7) [Compare Source](https://togithub.com/reactivex/rxjs/compare/6.6.6...6.6.7) ### [`v6.6.6`](https://togithub.com/reactivex/rxjs/compare/6.6.4...6.6.6) [Compare Source](https://togithub.com/reactivex/rxjs/compare/6.6.4...6.6.6) ### [`v6.6.4`](https://togithub.com/reactivex/rxjs/compare/6.6.3...6.6.4) [Compare Source](https://togithub.com/reactivex/rxjs/compare/6.6.3...6.6.4)
apostrophecms/sanitize-html (sanitize-html) ### [`v1.27.5`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1275-2020-09-23-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1.27.4...9f36c3ca3013b279f9eaa8e85c1ef581bdaf61ba) - Updates README to include ES modules syntax. ### [`v1.27.4`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1274-2020-08-26-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/788b7a649e1ffb0de0d1f0f25a6b0b21093768ca...1.27.4) - Fixes an IE11 regression from using `Array.prototype.includes`, replacing it with `Array.prototype.indexOf`. ### [`v1.27.3`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1273-2020-08-12-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1f45e5f3f3de5789a4c99eea9a106676fe580034...788b7a649e1ffb0de0d1f0f25a6b0b21093768ca) - Fixes a bug when using `transformTags` with out `textFilter`. Thanks to [Andrzej Porebski](https://togithub.com/andpor) for the help with a failing test. ### [`v1.27.2`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1272-2020-07-29-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/8bce25160dab6396cd9c98b7bf490b7e64f35b21...1f45e5f3f3de5789a4c99eea9a106676fe580034) - Fixes CHANGELOG links. Thanks to [Alex Mayer](https://togithub.com/amayer5125) for the contribution. - Replaces `srcset` with `parse-srcset`. Thanks to [Massimiliano Mirra](https://togithub.com/bard) for the contribution. ### [`v1.27.1`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1271-2020-07-15-) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/d7031b3ce21c7e5abb83e4027dca582da496b452...8bce25160dab6396cd9c98b7bf490b7e64f35b21) - Removes the unused chalk dependency. - Adds configuration for a Github stale bot. - Replace `xtend` package with native `Object.assign`. ### [`v1.27.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1270) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/13f3a178669df4334907fbce8501342ba48e3ecd...d7031b3ce21c7e5abb83e4027dca582da496b452) - Adds the `allowedIframeDomains` option. This works similar to `allowedIframeHostnames`, where you would set it to an array of web domains. It would then permit any hostname on those domains to be used in iframe `src` attributes. Thanks to [Stanislav Kravchenko](https://togithub.com/StanisLove) for the contribution. ### [`v1.26.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1260) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/f8e8c40d4cba987f305d3a300b30a7bbee778349...13f3a178669df4334907fbce8501342ba48e3ecd) - Adds the `option` element to the default `nonTextTagsArray` of tags with contents that aren't meant to be displayed visually as text. This can be overridden with the `nonTextTags` option. ### [`v1.25.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1250) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/10ee1276f9722ff0c6f7504f92547d74c4dd3274...f8e8c40d4cba987f305d3a300b30a7bbee778349) - Adds `enforceHtmlBoundary` option to process code bounded by the `html` tag, discarding any code outside of those tags. - Migrates to the main lodash package from the per method packages since they are deprecated and cause code duplication. Thanks to [Merceyz](https://togithub.com/merceyz) for the contribution. - Adds a warning when `style` and `script` tags are allowed, as they are inherently vulnerable to being used in XSS attacks. That warning can be disabled by including the option `allowVulnerableTags: true` so this choice is knowing and explicit. ### [`v1.24.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1240) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/22964d642366eea191e2961898a2df5c6426f3f0...10ee1276f9722ff0c6f7504f92547d74c4dd3274) - Fixes a bug where self-closing tags resulted in deletion with `disallowedTagsMode: 'escape'` set. Thanks to [Thiago Negri](https://togithub.com/thiago-negri) for the contribution. - Adds `abbr` to the default `allowedTags` for better accessibility support. Thanks to [Will Farrell](https://togithub.com/willfarrell) for the contribution. - Adds a `mediaChildren` property to the `frame` object in custom filters. This allows you to check for links or other parent tags that contain self-contained media to prevent collapse, regardless of whether there is also text inside. Thanks to [axdg](https://togithub.com/axdg) for the initial implementation and [Marco Arduini](https://togithub.com/nerfologist) for a failing test contribution. ### [`v1.23.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1230) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/592952e0fcb1b1d7b641e47eabb1d3092d3eb731...22964d642366eea191e2961898a2df5c6426f3f0) - Adds eslint configuration and adds eslint to test script. - Sets `sideEffects: false` on package.json to allow module bundlers like webpack tree-shake this module and all the dependencies from client build. Thanks to [Egor Voronov](https://togithub.com/egorvoronov) for the contribution. - Adds the `tagName` (HTML element name) as a second parameter passed to `textFilter`. Thanks to [Slava](https://togithub.com/slavaGanzin) for the contribution. ### [`v1.22.1`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1221) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1.22.0...592952e0fcb1b1d7b641e47eabb1d3092d3eb731) ncreases the patch version of `lodash.mergewith` to enforce an audit fix. ### [`v1.22.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1220) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1.21.1...1.22.0) bumped `htmlparser2` dependency to the 4.x series. This fixes longstanding bugs and should cause no bc breaks for this module, since the only bc breaks upstream are in regard to features we don't expose in this module. ### [`v1.21.1`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1211) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1.21.0...1.21.1) fixed issue with bad `main` setting in package.json that broke 1.21.0. ### [`v1.21.0`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1210) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/96c8807a9403752dd06576bad1b593a184270f2a...1.21.0) new `disallowedTagsMode` option can be set to `escape` to escape disallowed tags rather than discarding them. Any subtags are handled as usual. If you want to recursively escape them too, you can set `disallowedTagsMode` to `recursiveEscape`. Thanks to Yehonatan Zecharia for this contribution. ### [`v1.20.1`](https://togithub.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#1201) [Compare Source](https://togithub.com/apostrophecms/sanitize-html/compare/1.20.0...

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.