search

ministryofjustice / cla_frontend

CLA Front End
http://ministryofjustice.github.io/cla_docs/
MIT License
3 stars 4 forks source link

Bump braces, karma, browser-sync and gulp-imagemin #961

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps braces to 3.0.3 and updates ancestor dependencies braces, karma, browser-sync and gulp-imagemin. These dependencies need to be updated together.

Updates braces from 1.8.5 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

  • The undocumented .makeRe method was removed

Non-breaking changes

  • Caching was removed

[2.3.2] - 2018-04-08

  • start refactoring
  • cover sets

... (truncated)

Commits


Updates karma from 2.0.0 to 6.4.3

Release notes

Sourced from karma's releases.

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

  • client: error out when opening a new tab fails (099b85e)

v6.3.18

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

6.4.2 (2023-04-21)

Bug Fixes

6.4.1 (2022-09-19)

Bug Fixes

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

  • deps: upgrade socket.io to v4.4.1 (52a30bb)

... (truncated)

Commits
  • d8cf806 chore(release): 6.4.3 [skip ci]
  • d7f2d69 fix: add build commits for patch release
  • 85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
  • 0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
  • 86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
  • 450fdfd docs: Add deprecation notice to Karma README
  • 9de3c00 chore(release): 6.4.2 [skip ci]
  • c6a4271 fix: few typos
  • 50f9635 docs: update codeclimate badge in readme.md
  • 0013121 chore(release): 6.4.1 [skip ci]
  • Additional commits viewable in compare view


Updates browser-sync from 2.24.1 to 2.29.3

Release notes

Sourced from browser-sync's releases.

The one that fixes snippetOptions

What's Changed

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.29.2...v2.29.3

v2.29.1

What's Changed

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.29.0...v2.29.1

The one that restores IE11 support 💪

What's Changed

esbuild does not support down-level transpiling as far as IE11 - so when I switched to it, it accidentally broke IE11 support 😢

This is an important issue for me - many devs that support old browsers like IE11 are doing so because their projects are used in public services, or internal applications. Not every developer out there has the luxury of supporting evergreen-only browsers.

So, IE11 will work once again 🎉. Please use the issues thread to make me aware of any problem that's preventing you from using Browsersync in your day job 💪 (and be sure to thumbs-up the issues you want to see resolved)

# IE11 works, again
npm install browser-sync@latest

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.28.3...v2.29.0

the one that finally removes document.write

What's Changed

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.27.12...v2.28.0

2.27.9

What's Changed

A bug prevented the help output from displaying - it was introduced when the CLI parser yargs was updated, and is now fixed :)

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.27.8...v2.27.9

... (truncated)

Commits


Updates gulp-imagemin from 5.0.3 to 9.1.0

Release notes

Sourced from gulp-imagemin's releases.

v9.1.0

  • Update dependencies 127615e

https://github.com/sindresorhus/gulp-imagemin/compare/v9.0.0...v9.1.0

v9.0.0

Breaking

  • Require Node.js 18 70e07e8

https://github.com/sindresorhus/gulp-imagemin/compare/v8.0.0...v9.0.0

v8.0.0

https://github.com/sindresorhus/gulp-imagemin/compare/v7.1.0...v8.0.0

v7.1.0

https://github.com/sindresorhus/gulp-imagemin/compare/v7.0.0...v7.1.0

v7.0.0

Breaking

  • Require Node.js 10 aacca91
  • Replace jpegtran with mozjpeg in the default plugins (#336) 279a91b

https://github.com/sindresorhus/gulp-imagemin/compare/v6.2.0...v7.0.0

v6.2.0

  • Add silent option (#331) 0460c78

https://github.com/sindresorhus/gulp-imagemin/compare/v6.1.1...v6.2.0

v6.1.1

  • Make Gulp an optional peer dependency 165bf8b

https://github.com/sindresorhus/gulp-imagemin/compare/v6.1.0...v6.1.1

v6.1.0

  • Update dependencies 92e224a

https://github.com/sindresorhus/gulp-imagemin/compare/v6.0.0...v6.1.0

v6.0.0

Breaking:

  • Require Node.js 8 6e091ed

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ministryofjustice/cla_frontend/network/alerts).
sonarcloud[bot] commented 3 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

dependabot[bot] commented 3 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.