Bump the npm_and_yarn group across 4 directories with 3 updates

[dependabot[bot]]

Bumps the npm_and_yarn group with 2 updates in the /plugins/filters/app_janus directory: axios and minimist. Bumps the npm_and_yarn group with 1 update in the /plugins/filters/app_janus_uptrace directory: axios. Bumps the npm_and_yarn group with 1 update in the /plugins/inputs/matrix directory: matrix-js-sdk. Bumps the npm_and_yarn group with 1 update in the /plugins/outputs/matrix directory: matrix-js-sdk.

Updates axios from 1.7.0 to 1.7.4

Release notes

Sourced from axios's releases.

Release v1.7.4

Release notes:

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

Release v1.7.3

Release notes:

Bug Fixes

• adapter: fix progress event emitting; (#6518) (e3c76fc)
• fetch: fix withCredentials request config (#6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

Release v1.7.2

Release notes:

Bug Fixes

• fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

• Dmitriy Mozgovoy

Release v1.7.1

Release notes:

Bug Fixes

• fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

• Dmitriy Mozgovoy

Changelog

Sourced from axios's changelog.

1.7.4 (2024-08-13)

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

1.7.3 (2024-08-01)

Bug Fixes

• adapter: fix progress event emitting; (#6518) (e3c76fc)
• fetch: fix withCredentials request config (#6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

1.7.2 (2024-05-21)

Bug Fixes

• fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

• Dmitriy Mozgovoy

1.7.1 (2024-05-20)

Bug Fixes

• fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

• Dmitriy Mozgovoy

Commits

• abd24a7 chore(release): v1.7.4 (#6544)
• 6b6b605 fix(sec): CVE-2024-39338 (#6539) (#6543)
• 07a661a fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)
• c6cce43 chore(release): v1.7.3 (#6521)
• e3c76fc fix(adapter): fix progress event emitting; (#6518)
• 85d4d0e fix(fetch): fix withCredentials request config (#6505)
• 92cd8ed chore(github): update ISSUE_TEMPLATE.md (#6519)
• 8966ee7 fix(xhr): return original config on errors from XHR adapter (#6515)
• 0e4f9fa chore(release): v1.7.2 (#6414)
• 4f79aef fix(fetch): enhance fetch API detection; (#6413)
• Additional commits viewable in compare view

Updates minimist from 1.2.6 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

• [Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)
• [Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)
• [Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

• [Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)
• [Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)
• [Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)
• [Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)
• [Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)
• [Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)
• [Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

• Merge tag 'v0.2.3' a026794
• [eslint] fix indentation and whitespace 5368ca4
• [eslint] fix indentation and whitespace e5f5067
• [eslint] more cleanup 62fde7d
• [eslint] more cleanup 36ac5d0
• [meta] add auto-changelog 73923d2
• [actions] add reusable workflows d80727d
• [eslint] add eslint; rules to enable later are warnings 48bc06a
• [eslint] fix indentation 34b0f1c
• [readme] rename and add badges 5df0fe4
• [Dev Deps] switch from covert to nyc a48b128
• [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
• [meta] create FUNDING.yml; add funding in package.json 3639e0c
• [meta] use npmignore to autogenerate an npmignore file be2e038
• Only apps should have lockfiles 282b570
• isConstructorOrProto adapted from PR ef9153f
• [Dev Deps] update @ljharb/eslint-config, aud 098873c
• [Dev Deps] update @ljharb/eslint-config, aud 3124ed3
• [meta] add safe-publish-latest 4b927de
• [Tests] add aud in posttest b32d9bd
• [meta] update repo URLs f9fdfc0
• [actions] Avoid 0.6 tests due to build failures ba92fe6
• [Dev Deps] update tape 950eaa7
• [Dev Deps] add missing npmignore dev dep 3226afa
• Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

• 6901ee2 v1.2.8
• a026794 Merge tag 'v0.2.3'
• c0b2661 v0.2.3
• 63b8fee [Fix] Fix long option followed by single dash (#17)
• 72239e6 [Tests] Remove duplicate test (#12)
• 34b0f1c [eslint] fix indentation
• 3226afa [Dev Deps] add missing npmignore dev dep
• 098873c [Dev Deps] update @ljharb/eslint-config, aud
• 9ec4d27 [Fix] Fix long option followed by single dash
• ba92fe6 [actions] Avoid 0.6 tests due to build failures
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates axios from 1.7.0 to 1.7.4

Release notes

Sourced from axios's releases.

Release v1.7.4

Release notes:

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

Release v1.7.3

Release notes:

Bug Fixes

• adapter: fix progress event emitting; (#6518) (e3c76fc)
• fetch: fix withCredentials request config (#6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

Release v1.7.2

Release notes:

Bug Fixes

• fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

• Dmitriy Mozgovoy

Release v1.7.1

Release notes:

Bug Fixes

• fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

• Dmitriy Mozgovoy

Changelog

Sourced from axios's changelog.

1.7.4 (2024-08-13)

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

1.7.3 (2024-08-01)

Bug Fixes

• adapter: fix progress event emitting; (#6518) (e3c76fc)
• fetch: fix withCredentials request config (#6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

1.7.2 (2024-05-21)

Bug Fixes

• fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

• Dmitriy Mozgovoy

1.7.1 (2024-05-20)

Bug Fixes

• fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

• Dmitriy Mozgovoy

Commits

• abd24a7 chore(release): v1.7.4 (#6544)
• 6b6b605 fix(sec): CVE-2024-39338 (#6539) (#6543)
• 07a661a fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)
• c6cce43 chore(release): v1.7.3 (#6521)
• e3c76fc fix(adapter): fix progress event emitting; (#6518)
• 85d4d0e fix(fetch): fix withCredentials request config (#6505)
• 92cd8ed chore(github): update ISSUE_TEMPLATE.md (#6519)
• 8966ee7 fix(xhr): return original config on errors from XHR adapter (#6515)
• 0e4f9fa chore(release): v1.7.2 (#6414)
• 4f79aef fix(fetch): enhance fetch API detection; (#6413)
• Additional commits viewable in compare view

Updates matrix-js-sdk from 32.4.0 to 34.3.1

Release notes

Sourced from matrix-js-sdk's releases.

v34.3.1

Security

• Fixes for CVE-2024-42369 / GHSA-vhr5-g3pm-49fm.

v34.3.0

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.3.0-rc.1

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.3.0-rc.0

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.2.0

... (truncated)

Changelog

Sourced from matrix-js-sdk's changelog.

Changes in 34.3.1 (2024-08-20)

Security

• Fixes for CVE-2024-42369 / GHSA-vhr5-g3pm-49fm.

Changes in 34.3.0 (2024-08-13)

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

Changes in 34.2.0 (2024-07-30)

🐛 Bug Fixes

• Element-R: detect "withheld key" UTD errors, and mark them as such (#4302). Contributed by @​richvdh.

Changes in 34.1.0 (2024-07-16)

✨ Features

• Add ability to choose how many timeline events to sync when peeking (#4300). Contributed by @​jgarplind.
• Remove redundant hack for using the old pickle key in rust crypto (#4282). Contributed by @​richvdh.
• Add fetching the well known in embedded mode. (#4259). Contributed by @​toger5.

🐛 Bug Fixes

• Fix room state being updated with old (now overwritten) state and emitting for those updates. (#4242). Contributed by @​toger5.
• Fix incorrect "Olm is not available" errors (#4301). Contributed by @​richvdh.
• Fix build for example script (#4286). Contributed by @​richvdh.
• Declare matrix-js-sdk as an ES module (#4285). Contributed by @​richvdh.

Changes in 34.0.0 (2024-07-08)

🚨 BREAKING CHANGES

• Fetch capabilities in the background (#4246). Contributed by @​dbkr.

... (truncated)

Commits

• 340bbe1 v34.3.1
• a0efed8 Merge commit from fork
• 1ae0c2f v34.3.0
• de50129 v34.3.0-rc.1
• 5568dfd Move olm to dependencies as its types are needed downstream
• 39216d4 v34.3.0-rc.0
• 8c3b249 Re-add olm dependency which is needed for types
• b8e40ad Resetting package fields for development
• 4e28317 Merge branch 'master' into develop
• 0978067 Fix release-gitflow.yml node version
• Additional commits viewable in compare view

Updates matrix-js-sdk from 32.2.0 to 34.3.1

Release notes

Sourced from matrix-js-sdk's releases.

v34.3.1

Security

• Fixes for CVE-2024-42369 / GHSA-vhr5-g3pm-49fm.

v34.3.0

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.3.0-rc.1

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.3.0-rc.0

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

v34.2.0

... (truncated)

Changelog

Sourced from matrix-js-sdk's changelog.

Changes in 34.3.1 (2024-08-20)

Security

• Fixes for CVE-2024-42369 / GHSA-vhr5-g3pm-49fm.

Changes in 34.3.0 (2024-08-13)

✨ Features

• Bump matrix-widget-api (#4336). Contributed by @​AndrewFerr.
• Also check for MSC3757 for session state keys (#4334). Contributed by @​AndrewFerr.
• Support Futures via widgets (#4311). Contributed by @​AndrewFerr.
• Support MSC4140: Delayed events (Futures) (#4294). Contributed by @​AndrewFerr.
• Handle late-arriving m.room_key.withheld messages (#4310). Contributed by @​richvdh.
• Be specific about what is considered a MSC4143 call member event. (#4328). Contributed by @​toger5.
• Add index.ts for matrixrtc module (#4314). Contributed by @​toger5.

🐛 Bug Fixes

• Fix hashed ID server lookups with no Olm (#4333). Contributed by @​dbkr.

Changes in 34.2.0 (2024-07-30)

🐛 Bug Fixes

• Element-R: detect "withheld key" UTD errors, and mark them as such (#4302). Contributed by @​richvdh.

Changes in 34.1.0 (2024-07-16)

✨ Features

• Add ability to choose how many timeline events to sync when peeking (#4300). Contributed by @​jgarplind.
• Remove redundant hack for using the old pickle key in rust crypto (#4282). Contributed by @​richvdh.
• Add fetching the well known in embedded mode. (#4259). Contributed by @​toger5.

🐛 Bug Fixes

• Fix room state being updated with old (now overwritten) state and emitting for those updates. (#4242). Contributed by @​toger5.
• Fix incorrect "Olm is not available" errors (#4301). Contributed by @​richvdh.
• Fix build for example script (#4286). Contributed by @​richvdh.
• Declare matrix-js-sdk as an ES module (#4285). Contributed by @​richvdh.

Changes in 34.0.0 (2024-07-08)

🚨 BREAKING CHANGES

• Fetch capabilities in the background (#4246). Contributed by @​dbkr.

... (truncated)

Commits

• 340bbe1 v34.3.1
• a0efed8 Merge commit from fork
• 1ae0c2f v34.3.0
• de50129 v34.3.0-rc.1
• 5568dfd Move olm to dependencies as its types are needed downstream
• 39216d4 v34.3.0-rc.0
• 8c3b249 Re-add olm dependency which is needed for types
• b8e40ad Resetting package fields for development
• 4e28317 Merge branch 'master' into develop
• 0978067 Fix release-gitflow.yml node version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sipcapture/paStash/network/alerts).

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}