socket-security[bot]
commented
3 weeks ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@google-cloud/bigquery@6.0.3 | environment, filesystem Transitive: network | +16 |
1.58 MB | google-wombot |
| npm/@google-cloud/storage@6.7.0 | environment, filesystem Transitive: network | +7 |
1.11 MB | google-wombot |
| npm/@types/fluent-ffmpeg@2.1.24 | None | 0 |
21.8 kB | types |
| npm/@types/lodash@4.17.0 | None | 0 |
862 kB | types |
| npm/@types/underscore@1.11.4 | None | 0 |
249 kB | types |
| npm/@types/uuid@9.0.8 | None | 0 |
6.74 kB | types |
| npm/fluent-ffmpeg@2.1.3 | environment, filesystem, shell | +3 |
12.5 MB | njoyard |
| npm/underscore@1.13.6 | eval | 0 |
903 kB | jgonggrijp |
| npm/uuid@10.0.0 | None | 0 |
168 kB | broofa |
🚮 Removed packages: npm/@nkalupahana/react-circular-slider@2.3.5, npm/@sentry/react@7.119.1, npm/@testing-library/jest-dom@5.17.0, npm/@testing-library/react@11.2.7, npm/@testing-library/user-event@12.8.3, npm/@types/jest@26.0.24, npm/@types/lodash@4.17.4, npm/@types/luxon@2.4.0, npm/@types/node@12.20.55, npm/@types/react-dom@16.9.24, npm/@types/react-router-dom@5.3.3, npm/@types/react-router@5.1.20, npm/@types/react-transition-group@4.4.10, npm/@types/react@16.14.60, npm/@types/smoothscroll-polyfill@0.3.4, npm/@types/toastify-js@1.12.3, npm/@types/ua-parser-js@0.7.39, npm/@typescript-eslint/eslint-plugin@5.62.0, npm/@typescript-eslint/parser@5.62.0
Bumps cookie and express. These dependencies needed to be updated together. Updates
cookiefrom 0.6.0 to 0.7.1Release notes
Sourced from cookie's releases.
Commits
cf4658f0.7.16a8b8f5Allow leading dot for domain (#174)58015c0Remove more code and perf wins (#172)ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)d6f39b0Fix tests for old node6bb701fRemove failing scorecardMaintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
expressfrom 4.21.0 to 4.21.1Release notes
Sourced from express's releases.
Changelog
Sourced from express's changelog.
Commits
8e229f94.21.1a024c8afix(deps): cookie@0.7.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show