pcon / SalesforceApps

A collection of apps written for the Salesforce platform
GNU General Public License v2.0
36 stars 12 forks source link

Bump csv-parse and jsforce in /sso_example #45

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps csv-parse to 4.16.3 and updates ancestor dependency jsforce. These dependencies need to be updated together.

Updates csv-parse from 1.3.3 to 4.16.3

Changelog

Sourced from csv-parse's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.3.0 (2022-07-10)

Features

  • ts module Node16 and type declaration to exports field (#341) (4b0283d)

5.2.2 (2022-07-01)

Bug Fixes

  • csv-parse: encoding detection with bom (#350) (fd75e66)

5.2.1 (2022-06-29)

Bug Fixes

  • csv-parse: rtrim encoding support (fix #349) (8bf52f0)

5.2.0 (2022-06-14)

Features

  • csv-parse: cast_date as a function (fix #342) (2807d29)

5.1.0 (2022-05-24)

Features

... (truncated)

Commits
  • 0fd5209 chore(release): publish
  • 2a44e91 chore: latest dependencies
  • 1ec2317 docs(csv-parse): new ltrim and rtrim samples
  • 8222676 docs(csv-parse): new cast_date sample
  • 5471985 fix(csv-parse): remove support for cast_date, no test
  • 6b34c28 chore(release): publish
  • ab76c84 chore: merge new changelog generation
  • 01cc7d0 chore(release): publish
  • b90cf12 chore: remove publish custom scripts
  • e622123 chore: generate all build files
  • Additional commits viewable in compare view


Updates jsforce from 1.9.1 to 1.11.0

Release notes

Sourced from jsforce's releases.

Release v1.11.0

No release notes provided.

Release v1.10.0

fix: serializing Apex REST request body into JSON (#946) fix: buffer compatibility with node 10 fix: support multiple conditions per field fix: csv-parse update from 4.6.3 to 4.10.1 to address vulnerabilities fix: lodash to 4.17.19 to fix Object Prototype Pollution Security vulnerability feat(conn): batch describe of sobjects and allows if-modified-since header on single describe

Release 1.9.3

  • Bump csv-parse to 4.6.3 for security issue (#930, #940)

Release 1.9.2

  • Upgrade vulnerable depending libs (e.g. lodash) (#904)
  • Tooling: Fix CRUD (#808)
  • Streaming: multiple ReplayExtension instances interfere (#814)
  • Fix recursive bug in CSV parsing (#826)
  • Fix upsert error in collection (#813)
Commits
  • 9cb317c Merge pull request #1197 from jsforce/mdonnalley/1.11.0
  • ecde5f5 chore: release 1.11.0
  • 2efa7d4 Merge pull request #1196 from jsforce/mdonnalley/bump-faye
  • 2090653 chore: bump faye to 1.4.0
  • 888edd0 Merge pull request #1099 from jsforce/fix-lodash-template-vnl
  • aa3dc90 add built files
  • 32931cd apply npm audit fix
  • 2eeb4c1 upgrade gulp-uglify
  • b8bae03 Merge pull request #1062 from moonejon/fixing-typo-elapsed
  • 41049e6 Merge branch 'master' into fixing-typo-elapsed
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by mdonnalley, a new releaser for jsforce since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pcon/SalesforceApps/network/alerts).