matthewhudson / current-device

📱 The easiest way to write conditional CSS and/or JavaScript based on device operating system (iOS, Android, Blackberry, Windows, Firefox OS, MeeGo), orientation (Portrait vs. Landscape), and type (Tablet vs. Mobile).
https://matthewhudson.github.io/current-device/
MIT License
3.94k stars 587 forks source link

Bump socket.io-parser and nwb #323

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps socket.io-parser to 3.4.1 and updates ancestor dependency nwb. These dependencies need to be updated together.

Updates socket.io-parser from 3.1.3 to 3.4.1

Release notes

Sourced from socket.io-parser's releases.

3.4.1

Bug Fixes

  • prevent DoS (OOM) via massive packets (#95) (dcb942d)

Links

3.4.0

This release mostly contains a bump of the debug package.

Links

3.3.2

Bug Fixes

  • prevent DoS (OOM) via massive packets (#95) (89197a0)

Links

3.3.1

Links

3.3.0

Bug Fixes

  • remove any reference to the global variable (b47efb2)

Links

3.2.0

Bug fixes

  • properly detect typed arrays (#85)
  • properly handle JSON.stringify errors (#84)

Note

... (truncated)

Changelog

Sourced from socket.io-parser's changelog.

3.4.1 (2020-05-13)

Bug Fixes

  • prevent DoS (OOM) via massive packets (#95) (dcb942d)
Commits
  • a8130ce chore: release 3.4.1
  • dcb942d fix: prevent DoS (OOM) via massive packets (#95)
  • a5d0435 test: transpile to es5 with babelify
  • 652402a [chore] Release 3.4.0
  • 9b3572e [chore] Bump debug to version 4.1.0 (#92)
  • de1fd36 [docs] Fix incorrect socket.io-protocol version in Readme (#89)
  • 0de72b9 [chore] Release 3.3.0
  • b47efb2 [fix] Remove any reference to the global variable
  • d95e38f [chore] Update the Makefile
  • b57e063 [test] Update travis configuration
  • Additional commits viewable in compare view


Updates nwb from 0.23.0 to 0.25.2

Release notes

Sourced from nwb's releases.

v0.25.2

Fixed

  • Bumped Node.js version in templates.

v0.25.1

Changed

  • Don't include docs/ in the npm package.

v0.25.0

Breaking Changes

  • Node.js 8 is no longer supported; Node.js 10.13.0 is now the minimum required version, as per many of nwb's dependencies.

Browser Support

Configuration

  • Deprecated using a string for webpack.autoprefixer config to configure supported browsers - this will no longer do anything and should be moved to the new browsers config.

  • Removed support for babel.stage and webpack.uglify config deprecated in nwb v0.24.0.

  • copy-webpack-plugin v6.0.0 has breaking changes to its options which you should read if you're using webpack.copy config.

    In particular, the ignore option in a copy pattern must now be put inside the new globOptions option.

Dependencies

Added

  • Added top-level browsers config to configure supported browsers. This supports using separate browserslist queries for development and production.

... (truncated)

Changelog

Sourced from nwb's changelog.

0.25.2 / 2020-05-20

Fixed

  • Bumped Node.js version in templates.

0.25.1 / 2020-05-20

Changed

  • Don't include docs/ in the npm package.

0.25.0 / 2020-05-20

Breaking Changes

  • Node.js 8 is no longer supported; Node.js 10.13.0 is now the minimum required version, as per many of nwb's dependencies.

Browser Support

Configuration

  • Deprecated using a string for webpack.autoprefixer config to configure supported browsers - this will no longer do anything and should be moved to the new browsers config.

  • Removed support for babel.stage and webpack.uglify config deprecated in nwb v0.24.0.

  • copy-webpack-plugin v6.0.0 has breaking changes to its options which you should read if you're using webpack.copy config.

    In particular, the ignore option in a copy pattern must now be put inside the new globOptions option.

Dependencies

... (truncated)

Commits
  • 8963342 Release v0.25.2
  • 24f77a3 Bump Node.js version in templates
  • afe6dd1 Release v0.25.1
  • 7b50e35 Release v0.25.0
  • 2f71b69 Update dependencies
  • 3a5fde7 Move changes from 2+ majorish releses ago to an archive file
  • 524a642 Add targets config for preset-env
  • d028177 Update dependencies
  • c8e9dbf Added top-level browsers config for configuring browser support with a browse...
  • bf05318 Breaking: Drop support for Node.js 8 - Node.js 10.13.0 is now the minimum req...
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/matthewhudson/current-device/network/alerts).
dependabot[bot] commented 1 year ago

Superseded by #324.