search

the-control-group / authx

An authentication & authorization platform for service-oriented architectures.
MIT License
47 stars 6 forks source link

Bump the minor-updates group with 19 updates #644

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 6 months ago

Bumps the minor-updates group with 19 updates:

Package From To
koa 2.13.4 2.15.2
@types/koa 2.13.1 2.15.0
@types/auth-header 1.0.2 1.0.6
@types/koa 2.13.1 2.15.0
@types/koa-send 4.1.3 4.1.6
dataloader 2.1.0 2.2.2
graphql-relay 0.6.0 0.10.1
pg 8.7.3 8.11.4
@types/pg 7.14.11 8.11.4
@opencensus/core 0.0.22 0.1.0
graphql-middleware 6.1.31 6.1.35
@types/http-proxy 1.17.9 1.17.14
cookies 0.8.0 0.9.1
@types/memory-fs 0.3.3 0.3.7
html-webpack-plugin 5.5.0 5.6.0
webpack 5.76.0 5.91.0
@types/webpack 5.28.0 5.28.5
eslint-plugin-react 7.30.1 7.34.1
bcrypt 5.0.1 5.1.1
@types/bcrypt 3.0.1 5.0.2

Updates koa from 2.13.4 to 2.15.2

Changelog

Sourced from koa's changelog.

2.15.2 / 2024-03-21

fixes

  • [94e8def] - fix: handle upper case protocol like HTTP or HTTPS (#1806) (fengmk2 )

2.15.1 / 2024-03-15

fixes

  • [2510b0b] - fix: formatting redirect url on http(s) protocol url (#1803) (fengmk2 )

2.15.0 / 2023-12-29

features

  • [1684a8f] - feat: bump cookies v0.9.0 for CHIPS (#1791) (Noah Gao )

2.14.2 / 2023-04-12

fixes

  • [6b60fa6] - fix: can not get currentContext in error handler (#1757) (Gxkl )

2.14.1 / 2022-12-07

fixes

  • [cb92bc9] - fix: should export createAsyncCtxStorageMiddleware function on application (#1724) (fengmk2 )

2.14.0 / 2022-12-06

features

  • [a293122] - feat: support asyncLocalStorage (#1721) (fengmk2 )
Commits


Updates @types/koa from 2.13.1 to 2.15.0

Commits


Updates @types/auth-header from 1.0.2 to 1.0.6

Commits


Updates @types/koa from 2.13.1 to 2.15.0

Commits


Updates @types/koa-send from 4.1.3 to 4.1.6

Commits


Updates dataloader from 2.1.0 to 2.2.2

Release notes

Sourced from dataloader's releases.

v2.2.2

What's Changed

New Contributors

Full Changelog: https://github.com/graphql/dataloader/compare/v2.2.1...v2.2.2

v2.2.1

What's Changed

Full Changelog: https://github.com/graphql/dataloader/compare/v2.2.0...v2.2.1

v2.2.0

What's Changed

New Contributors

Full Changelog: https://github.com/graphql/dataloader/compare/v2.1.0...v2.2.0

Changelog

Sourced from dataloader's changelog.

2.2.2

Patch Changes

2.2.1

Patch Changes

2.2.0

Minor Changes

Patch Changes

  • #318 588a8b6 Thanks @​boopathi! - Fix the propagation of sync throws in the batch function to the loader function instead of crashing the process wtih an uncaught exception.
  • #321 3cd3a43 Thanks @​thekevinbrown! - Resolves an issue where the maxBatchSize parameter wouldn't be fully used on each batch sent to the backend loader.
Commits
Maintainer changes

This version was pushed to npm by saihaj, a new releaser for dataloader since your current version.


Updates graphql-relay from 0.6.0 to 0.10.1

Release notes

Sourced from graphql-relay's releases.

v0.10.0 (2021-12-19)

Breaking Change 💥

New Feature 🚀

Bug Fix 🐞

Polish 💅

Internal 🏠

Committers: 2

v0.9.0 (2021-09-13)

Breaking Change 💥

New Feature 🚀

Bug Fix 🐞

Dependency 📦

Committers: 2

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by benjie, a new releaser for graphql-relay since your current version.


Updates pg from 8.7.3 to 8.11.4

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

pg@8.8.0

pg-pool@3.5.0

pg@8.7.0

  • Add optional config to pool to allow process to exit if pool is idle.

pg-cursor@2.7.0

pg@8.6.0

pg-query-stream@4.0.0

  • Library has been converted to Typescript. The behavior is identical, but there could be subtle breaking changes due to class names changing or other small inconsistencies introduced by the conversion.

pg@8.5.0

... (truncated)

Commits


Updates @types/pg from 7.14.11 to 8.11.4

Commits


Updates @opencensus/core from 0.0.22 to 0.1.0

Release notes

Sourced from @​opencensus/core's releases.

v0.1.0

Summary

This release is mostly dependency upgrades for security, except for fix #879. The Typescript version was also bumped to 3.x. While mostly backward compatible, this is being released as a semver-incompatible minor version bump to v0.1.0.

Changelog

  • chore(stackdriver): upgrade google-auth-library, drop node8 (#887)
  • chore: upgrade gRPC, ts to newest compatible version (#907) BREAKING CHANGE: upgrade to TypeScript 3.x
  • chore(deps): pin googleapis, lock file maintenance (#928)

All Commits

9f6c6839 chore(deps): pin googleapis, lock file maintenance (#928) 3099c34a chore: enable renovate lockfile maintenance (#927) 3c26adb1 chore(deps): update dependency nyc to v15 (#926) a07ef305 chore(deps): update dependency redis to v3 (#773) bd1a7740 chore(deps): update dependency ts-mocha to v8 (#861) 4b447fcc chore(deps): update dependency @​types/mocha to v8 (#817) 567fa646 chore(deps): update dependency lerna to v3 (#559) 62676fdb chore: audit fix all production dependencies (#908) e1f09d17 chore(deps): update all non-major dependencies (#922) 3b0a008f chore(deps): pin dependency lerna to v2.11.0 (#920) 6f01c76a chore(deps): pin dependencies (#919) 144e3764 TEMP testing renovate on my fork (#918) d7d36cdb chore: upgrade gcp-metadata to 4.x (#911) 23f240ec chore: update renovate config to be less noisy (#912) af67cfe6 chore(deps-dev): bump codecov (#890) 5de75baf chore(deps): bump lodash in /packages/opencensus-instrumentation-grpc (#898) 224fa8ce chore(deps): bump lodash from 4.17.10 to 4.17.21 (#897) e5e71a32 chore(deps-dev): bump axios in /packages/opencensus-exporter-prometheus (#909) 2633fd6b fix(deps): update dependency @​grpc/proto-loader to ^0.6.0 (#902) 270bb591 chore(deps): update dependency sinon to v11 (#904) e1c20ed4 chore: use github actions for CI runs (#905) 9bd4f114 chore: upgrade gRPC, ts to newest compatible version (#907) 03d0c9e9 chore: add initial noop github action (#906) 2ee9c928 Fix traceid validator (#879) 8864dcf6 chore(deps): bump lodash from 4.17.13 to 4.17.19 (#822) 783ff4b0 chore(zpages): upgrade ejs to 3.1.6 (#888) b62d2e2b chore(deps-dev): bump axios in /packages/opencensus-exporter-zpages (#880) c0cf287c chore(stackdriver): upgrade google-auth-library (#887) d0a825d3 chore: update broken package-lock resolves (#886) 909a4204 Nominating myself (@​aabmass) as codeowner (#868)

All Changes

https://github.com/census-instrumentation/opencensus-node/compare/v0.0.22...v0.1.0

Changelog

Sourced from @​opencensus/core's changelog.

0.1.0 - 2021-07-27

  • chore(stackdriver): upgrade google-auth-library, drop node8 (#887)
  • chore: upgrade gRPC, ts to newest compatible version (#907) BREAKING CHANGE: upgrade to TypeScript 3.x
  • chore(deps): pin googleapis, lock file maintenance (#928)
Commits
  • 786dec3 chore(multiple): 0.1.0 release proposal (#930)
  • 0cd83cc chore: skip private modules in node8 ci (#931)
  • 9f6c683 chore(deps): pin googleapis, lock file maintenance (#928)
  • 3099c34 chore: enable renovate lockfile maintenance (#927)
  • 3c26adb chore(deps): update dependency nyc to v15 (#926)
  • a07ef30 chore(deps): update dependency redis to v3 (#773)
  • bd1a774 chore(deps): update dependency ts-mocha to v8 (#861)
  • 4b447fc chore(deps): update dependency @​types/mocha to v8 (#817)
  • 567fa64 chore(deps): update dependency lerna to v3 (#559)
  • 62676fd chore: audit fix all production dependencies (#908)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​opencensus/core since your current version.


Updates graphql-middleware from 6.1.31 to 6.1.35

Release notes

Sourced from graphql-middleware's releases.

v6.1.35

6.1.35 (2023-07-07)

Performance Improvements

v6.1.34

6.1.34 (2023-05-10)

Bug Fixes

v6.1.33

6.1.33 (2022-10-07)

Bug Fixes

v6.1.32

6.1.32 (2022-07-27)

Bug Fixes

Commits


Updates @types/http-proxy from 1.17.9 to 1.17.14

Commits


Updates cookies from 0.8.0 to 0.9.1

Release notes

Sourced from cookies's releases.

0.9.1

  • Fix incorrectly disallowing equals sign in cookie value

0.9.0

  • Add partitioned option for CHIPS support
  • Add priority option for Priority cookie support
  • Fix accidental cookie name/value truncation when given invalid chars
  • Fix maxAge option to reject invalid values
  • Remove quotes from returned quoted cookie value
  • Use req.socket over deprecated req.connection
  • pref: small lookup regexp optimization
Changelog

Sourced from cookies's changelog.

0.9.1 / 2024-01-01

  • Fix incorrectly disallowing equals sign in cookie value

0.9.0 / 2023-12-28

  • Add partitioned option for CHIPS support
  • Add priority option for Priority cookie support
  • Fix accidental cookie name/value truncation when given invalid chars
  • Fix maxAge option to reject invalid values
  • Remove quotes from returned quoted cookie value
  • Use req.socket over deprecated req.connection
  • pref: small lookup regexp optimization
Commits
  • b58c720 0.9.1
  • 0458556 Fix incorrectly disallowing equals sign in cookie value
  • 62b4701 0.9.0
  • 0951fdf build: fix code coverage aggregate upload
  • bd38fe8 build: use $GITHUB_OUTPUT for environment list
  • 56894f0 build: actions/checkout@v3
  • db10216 docs: switch badges to badgen
  • 03b05bc Add "partitioned" option for CHIPS support
  • cd757d1 build: eslint@8.56.0
  • 2fb212e build: support Node.js 21.x
  • Additional commits viewable in compare view


Updates @types/memory-fs from 0.3.3 to 0.3.7

Commits


Updates html-webpack-plugin from 5.5.0 to 5.6.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.0 (2023-12-19)

Features

  • add @rspack/core as an optional peer dependency (#1829) (56ff3ae)
  • Added support type=systemjs-module via the scriptLoading option (#1822) (7effc30)

Bug Fixes

5.5.4 (2023-12-06)

Bug Fixes

5.5.3 (2023-06-10)

Bug Fixes

5.5.2 (2023-06-08)

Bug Fixes

5.5.1 (2023-04-15)

Bug Fixes

  • perf: defer loading of pretty-error to improve startup time (#1789) (988709d)
Commits
  • ebfa1ce chore(release): 5.6.0
  • 56ff3ae feat: add @rspack/core as an optional peer dependency (#1829)
  • c79f2cf fix: memoy leak (#1836)
  • 7effc30 feat: Added support type=systemjs-module via the scriptLoading option (#1...
  • 318cd4d docs: add html-webpack-inject-attributes-plugin to readme (#1787)
  • 91ba8bb chore(release): 5.5.4
  • fe231d3 docs: add js-entry-webpack-plugin (#1732)
  • 5c15284 test: case for watch/serve and reemitting assets (#1812)
  • a214736 fix: reemit assets from loaders (#1811)
  • 0db3c2b refactor: fix regression after refactor and testing (#1810)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.


Updates webpack from 5.76.0 to 5.91.0

Release notes

Sourced from webpack's releases.

v5.91.0

Bug Fixes

  • Deserializer for ignored modules doesn't crash
  • Allow the unsafeCache option to be a proxy object
  • Normalize the snapshot.unmanagedPaths option
  • Fixed fs types
  • Fixed resolve's plugins types
  • Fixed wrongly calculate postOrderIndex
  • Fixed watching types
  • Output import attrbiutes/import assertions for external JS imports
  • Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same
  • [CSS] Output layer/supports/media for external CSS imports

New Features

  • Allow to customize the stage of BannerPlugin
  • [CSS] Support CSS exports convention
  • [CSS] support CSS local ident name
  • [CSS] Support __webpack_nonce__ for CSS chunks
  • [CSS] Support fetchPriority for CSS chunks
  • [CSS] Allow to use LZW to compress css head meta (enabled in the production mode by default)
  • [CSS] Support prefetch/preload for CSS chunks

v5.90.3

Bug Fixes

  • don't mangle when destructuring a reexport
  • types for Stats.toJson() and Stats.toString()
  • many internal types
  • [CSS] clean up export css local vars

Perf

  • simplify and optimize chunk graph creation

v5.90.2

Bug Fixes

  • use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
  • the setStatus() of the HMR module should not return an array, which may cause infinite recursion
  • __webpack_exports_info__.xxx.canMangle shouldn't always same as default
  • mangle export with destructuring
  • use new runtime to reconsider skipped connections activeState
  • make dynamic import optional in try/catch
  • improve auto publicPath detection

Dependencies & Maintenance

  • improve CI setup and include Node.js@21

... (truncated)

Commits
  • 60daca5 chore(release): 5.91.0
  • 8dad9ce chore(deps-dev): bump @​babel/preset-react from 7.23.3 to 7.24.1
  • a3229f9 chore(deps-dev): bump @​babel/core from 7.24.0 to 7.24.1
  • 40c2e44 chore(deps-dev): bump @​types/node from 20.11.29 to 20.11.30
  • a04faba chore(deps-dev): bump memfs from 4.7.7 to 4.8.0
  • 8f22221 chore(deps): bump es-module-lexer from 1.4.1 to 1.4.2
  • 8df6912 chore(deps): bump es-module-lexer from 1.4.1 to 1.4.2
  • 711c618 chore(deps-dev): bump memfs from 4.7.7 to 4.8.0
  • c462bb3 chore(deps-dev): bump @​types/node from 20.11.29 to 20.11.30
  • f0d3e3e chore(deps-dev): bump @​babel/preset-react from 7.23.3 to 7.24.1
  • Additional commits viewable in compare view


Updates @types/webpack from 5.28.0 to 5.28.5

Commits


Updates eslint-plugin-react from 7.30.1 to 7.34.1

Release notes

Sourced from eslint-plugin-react's releases.

v7.34.1

Fixed

Changed

  • [boolean-prop-naming]: improve error message (@​ljharb)

#1000: jsx-eslint/eslint-plugin-react#1000 #1002: jsx-eslint/eslint-plugin-react#1002 #1005: jsx-eslint/eslint-plugin-react#1005 #100: jsx-eslint/eslint-plugin-react#100 #1010: jsx-eslint/eslint-plugin-react#1010 #1013: jsx-eslint/eslint-plugin-react#1013 #1022: jsx-eslint/eslint-plugin-react#1022 #1029: jsx-eslint/eslint-plugin-react#1029

sonarcloud[bot] commented 6 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

dependabot[bot] commented 6 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.