mozilla-iam / auth0-custom-lock

Front-end for the newly refreshed auth0 “Lock” interface: the New Login Experience (NLX)
Mozilla Public License 2.0
8 stars 15 forks source link

Bump tough-cookie, auth0-deploy-cli, gulp-sass and node-sass #374

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Removes tough-cookie. It's no longer used after updating ancestor dependencies tough-cookie, auth0-deploy-cli, gulp-sass and node-sass. These dependencies need to be updated together.

Removes tough-cookie

Updates auth0-deploy-cli from 4.3.1 to 7.17.7

Release notes

Sourced from auth0-deploy-cli's releases.

v7.17.7

Fixed

  • Delay processing of action triggers until deployed actions register #809
  • Process custom domains prior to branding settings #811

v7.17.6

Changed

  • Improve handling of custom text prompts, reducing high-volume errors and timeouts by leveraging connection pooling for controlled execution #804

v7.17.5

Fixed

  • Obfuscating sensitive log streams keys #800
  • Prevent exporting of disallowed tenant flags #799

v7.17.4

Fixed

  • Prevent tenant flag "Additional properties not allowed" error by only updating publicly-available feature flags #797

v7.17.3

Fixed

  • Keyword preservation for client grant audience field #793

v7.17.2

Fixed

  • API error when no tenant flags defined #780
  • Keyword preservation in a resource's identifier fields #784

v7.17.1

Fixed

  • Tenant-agnostic filenames for client grants if more than fifty clients and fifty resource servers #764
  • Unintentional exclusion of clients when injecting access token via AUTH0_ACCESS_TOKEN #775

v7.17.0

Added

Fixed

  • Enabled wrapping of @@ARRAY_REPLACE@@ keyword markers with single quotes in YAML resource configuration files #760

v7.16.1

Fixed

... (truncated)

Changelog

Sourced from auth0-deploy-cli's changelog.

[7.17.7] - 2023-07-07

Fixed

  • Delay processing of action triggers until deployed actions register #809
  • Process custom domains prior to branding settings #811

[7.17.6] - 2023-06-23

Changed

  • Improve handling of custom text prompts, reducing high-volume errors and timeouts by leveraging connection pooling for controlled execution #804

[7.17.5] - 2023-06-08

Fixed

  • Obfuscating sensitive log streams keys #800
  • Prevent exporting of disallowed tenant flags #799

[7.17.4] - 2023-06-06

Fixed

  • Prevent tenant flag "Additional properties not allowed" error by only updating publicly-available feature flags #797

[7.17.3] - 2023-05-24

Fixed

  • Keyword preservation for client grant audience field #793

[7.17.2] - 2023-04-19

Fixed

  • API error when no tenant flags defined #780
  • Keyword preservation in a resource's identifier fields #784

[7.17.1] - 2023-03-31

Fixed

  • Tenant-agnostic filenames for client grants if more than fifty clients and fifty resource servers #764
  • Unintentional exclusion of clients when injecting access token via AUTH0_ACCESS_TOKEN #775

[7.17.0] - 2023-03-03

Added

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by auth0-oss, a new releaser for auth0-deploy-cli since your current version.


Updates gulp-sass from 4.1.0 to 5.1.0

Release notes

Sourced from gulp-sass's releases.

v5.1.0

Huge shout out to @​XhmikosR for putting a ton of effort into this release 🎉

What's Changed

New Contributors

Full Changelog: https://github.com/dlmanning/gulp-sass/compare/v5.0.0...v5.1.0

v5.0.0

First and foremost a huge shout out to @​mxmason for making this long awaited release possible <3

Breaking changes

  • Require Node >= 12
  • Require Gulp 4
  • Drop dependency on the deprecate node-sass
  • Remove hardcoded default Sass compiler

Upgrading to v5

It is now required to explicitly install a Sass compiler.

npm install gulp-sass sass
</tr></table> 

... (truncated)

Changelog

Sourced from gulp-sass's changelog.

gulp-sass Changelog

v5.0.0

June 25, 2021

https://github.com/dlmanning/gulp-sass/releases/tag/v5.0.0

v4.1.1

June 24, 2021

https://github.com/dlmanning/gulp-sass/releases/tag/v4.1.1

Commits


Updates node-sass from 4.14.1 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Commits


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mozilla-iam/auth0-custom-lock/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.