search

pyx-industries / pyx-identity-resolver

FOSS implementation of ISO1975 link resolver
Apache License 2.0
4 stars 2 forks source link

Bump the npm_and_yarn group across 1 directory with 2 updates #2

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the npm_and_yarn group with 2 updates in the /app directory: webpack and @nestjs/cli.

Updates webpack from 5.93.0 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

  • Added runtime condition for harmony reexport checked
  • Handle properly data/http/https protocols in source maps
  • Make bigint optimistic when browserslist not found
  • Move @​types/eslint-scope to dev deps
  • Related in asset stats is now always an array when no related found
  • Handle ASI for export declarations
  • Mangle destruction incorrect with export named default properly
  • Fixed unexpected asi generation with sequence expression
  • Fixed a lot of types

New Features

  • Added new external type "module-import"
  • Support webpackIgnore for new URL() construction
  • [CSS] @import pathinfo support

Security

  • Fixed DOM clobbering in auto public path
Commits
  • eabf85d chore(release): 5.94.0
  • 955e057 security: fix DOM clobbering in auto public path
  • 9822387 test: fix
  • cbb86ed test: fix
  • 5ac3d7f fix: unexpected asi generation with sequence expression
  • 2411661 security: fix DOM clobbering in auto public path
  • b8c03d4 fix: unexpected asi generation with sequence expression
  • f46a03c revert: do not use heuristic fallback for "module-import"
  • 60f1898 fix: do not use heuristic fallback for "module-import"
  • 66306aa Revert "fix: module-import get fallback from externalsPresets"
  • Additional commits viewable in compare view


Updates @nestjs/cli from 10.4.2 to 10.4.5

Release notes

Sourced from @​nestjs/cli's releases.

Release 10.4.5

  • Merge pull request #2666 from nestjs/renovate/nest-monorepo (a734d81f)
  • Merge pull request #2712 from nestjs/renovate/npm-webpack-vulnerability (587e407e)
  • chore(deps): update dependency @​swc/core to v1.7.21 (4ccad5c5)
  • chore(deps): update commitlint monorepo to v19.4.1 (d3484bfd)
  • fix(deps): update dependency webpack to v5.94.0 [security] (78136826)
  • chore(deps): update dependency @​types/node to v20.16.2 (b9cdc65b)
  • chore(deps): update typescript-eslint monorepo to v8.3.0 (28913e79)
  • chore(deps): update dependency @​swc/core to v1.7.18 (fa03cba8)
  • chore(deps): update dependency eslint to v9.9.1 (89009c4c)
  • chore(deps): update dependency husky to v9.1.5 (769a0606)
  • chore(deps): update typescript-eslint monorepo to v8.2.0 (0f8f78bd)
  • chore(deps): update dependency @​swc/core to v1.7.14 (24bfce40)
  • fix(deps): update dependency @​nestjs/schematics to v10.1.4 (868addea)
  • chore(deps): update dependency @​types/node to v20.16.1 (df9264fc)
  • chore(deps): update dependency @​swc/core to v1.7.12 (cd54a267)
  • chore(deps): update dependency @​types/node to v20.16.0 (acc8e4b4)
  • chore(deps): update dependency @​types/node to v20.15.0 (562e818a)
  • chore(deps): update dependency @​swc/core to v1.7.11 (dd9be115)
  • chore(deps): update dependency lint-staged to v15.2.9 (2c1de383)
  • chore(deps): update typescript-eslint monorepo to v8.1.0 (c1f7432b)
  • chore(deps): update dependency eslint to v9.9.0 (de689668)
  • chore(deps): update dependency @​types/node to v20.14.15 (0c31bb68)
  • chore(deps): update dependency @​swc/core to v1.7.10 (d0f9535e)
  • chore(deps): update dependency @​swc/core to v1.7.9 (36b276a7)

Release 10.4.4

  • fix: concat path and outdir as assets cache key (3cb703f9)

Release 10.4.3

  • Merge pull request #2647 from nestjs/renovate/webpack-5.x (2864899f)
  • Merge pull request #2681 from jaunusa/bugfix/copyPathDepth (f2b3d7e1)
  • fix(assets): copy nested files and directories when no wildcard #2687 (793f3193)
  • chore(deps): update dependency @​commitlint/cli to v19.4.0 (6ebb6e57)
  • chore(deps): update dependency eslint to v9 (2660990e)
  • chore(deps): update dependency lint-staged to v15.2.8 (3795d2ae)
  • chore(deps): update dependency @​types/node to v20.14.14 (9c850f13)
  • chore(deps): update dependency @​swc/core to v1.7.6 (1535c585)
  • chore(deps): update typescript-eslint monorepo to v8 (c0800ffc)
  • fix: allow resolving copy paths for files in project root folder (5e745839)
  • chore(deps): update dependency @​swc/core to v1.7.4 (8416f33e)
  • chore(deps): update typescript-eslint monorepo to v7.18.0 (039ba071)
  • chore(deps): update dependency husky to v9.1.4 (9a71f09c)
  • chore(deps): update dependency @​types/node to v20.14.13 (902c1558)
  • chore(deps): update dependency @​swc/core to v1.7.3 (46cb313c)
  • chore(deps): update dependency husky to v9.1.3 (f8bc48db)
  • chore(deps): update dependency @​swc/core to v1.7.2 (f30661ad)
  • chore(deps): update dependency husky to v9.1.2 (aa13521d)
  • chore(deps): update dependency @​swc/core to v1.7.1 (1b93deb1)
  • chore(deps): update dependency @​types/node to v20.14.12 (0ac320cc)

... (truncated)

Commits
  • 999f806 chore(): release v10.4.5
  • a734d81 Merge pull request #2666 from nestjs/renovate/nest-monorepo
  • 587e407 Merge pull request #2712 from nestjs/renovate/npm-webpack-vulnerability
  • 4ccad5c chore(deps): update dependency @​swc/core to v1.7.21
  • d3484bf chore(deps): update commitlint monorepo to v19.4.1
  • 7813682 fix(deps): update dependency webpack to v5.94.0 [security]
  • b9cdc65 chore(deps): update dependency @​types/node to v20.16.2
  • 28913e7 chore(deps): update typescript-eslint monorepo to v8.3.0
  • fa03cba chore(deps): update dependency @​swc/core to v1.7.18
  • 89009c4 chore(deps): update dependency eslint to v9.9.1
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/pyx-industries/pyx-identity-resolver/network/alerts).
dependabot[bot] commented 1 month ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml