search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
82 stars 14 forks source link

Bump the production-dependencies group with 19 updates #440

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the production-dependencies group with 19 updates:

Package From To
@sentry/node 7.22.0 8.4.0
@sentry/tracing 7.22.0 7.114.0
@sinclair/typebox 0.32.29 0.32.31
better-sqlite3 9.4.3 10.0.0
config 3.3.9 3.3.11
@types/config 3.3.1 3.3.4
express 4.18.2 4.19.2
html-to-text 8.0.0 9.0.5
@types/html-to-text 8.0.1 9.0.4
humanize-duration 3.27.2 3.32.0
@types/humanize-duration 3.27.1 3.27.4
matrix-appservice-bridge 9.0.1 10.1.0
parse-duration 1.0.2 1.1.0
pg 8.8.0 8.11.5
@types/pg 8.6.5 8.11.6
shell-quote 1.7.3 1.8.1
@types/shell-quote 1.7.1 1.7.5
ulidx 2.2.1 2.3.0
yaml 2.3.2 2.4.2

Updates @sentry/node from 7.22.0 to 8.4.0

Release notes

Sourced from @​sentry/node's releases.

8.4.0

Important Changes

  • feat(nextjs): Trace pageloads in App Router (#12157)

If you are using Next.js version 14.3.0-canary.64 or above, the Sentry Next.js SDK will now trace clientside pageloads with React Server Components. This means, that client-side errors like Error: An error occurred in the Server Components render., which previously didn't give you much information on how that error was caused, can now be traced back to a specific error in a server component.

  • feat(angular): Add Support for Angular 18 (#12183)

This release guarantees support for Angular 18 with @sentry/angular.

Other Changes

  • feat(deps): Bump @​opentelemetry/instrumentation-aws-lambda from 0.41.0 to 0.41.1 (#12078)
  • fix(metrics): Ensure string values are interpreted for metrics (#12165)

Bundle size 📦

Path Size
@​sentry/browser 21.74 KB
@​sentry/browser (incl. Tracing) 32.88 KB
@​sentry/browser (incl. Tracing, Replay) 68.25 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 61.66 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 72.28 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 84.33 KB
@​sentry/browser (incl. Feedback) 37.75 KB
@​sentry/browser (incl. sendFeedback) 26.31 KB
@​sentry/browser (incl. FeedbackAsync) 30.73 KB
@​sentry/react 24.43 KB
@​sentry/react (incl. Tracing) 35.88 KB
@​sentry/vue 25.68 KB
@​sentry/vue (incl. Tracing) 34.7 KB
@​sentry/svelte 21.88 KB
CDN Bundle 24.28 KB
CDN Bundle (incl. Tracing) 34.35 KB
CDN Bundle (incl. Tracing, Replay) 68.04 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 73.03 KB
CDN Bundle - uncompressed 71.46 KB
CDN Bundle (incl. Tracing) - uncompressed 101.87 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 211.5 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 223.85 KB
@​sentry/nextjs (client) 35.14 KB
@​sentry/sveltekit (client) 33.48 KB
@​sentry/node 114.31 KB
@​sentry/aws-serverless 103.2 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.4.0

Important Changes

  • feat(nextjs): Trace pageloads in App Router (#12157)

If you are using Next.js version 14.3.0-canary.64 or above, the Sentry Next.js SDK will now trace clientside pageloads with React Server Components. This means, that client-side errors like Error: An error occurred in the Server Components render., which previously didn't give you much information on how that error was caused, can now be traced back to a specific error in a server component.

  • feat(angular): Add Support for Angular 18 (#12183)

This release guarantees support for Angular 18 with @sentry/angular.

Other Changes

  • feat(deps): Bump @​opentelemetry/instrumentation-aws-lambda from 0.41.0 to 0.41.1 (#12078)
  • fix(metrics): Ensure string values are interpreted for metrics (#12165)

8.3.0

Important Changes

  • Better Node Framework Span Data

This release improves data quality of spans emitted by Express, Fastify, Connect, Koa, Nest.js and Hapi.

  • feat(node): Ensure connect spans have better data (#12130)

  • feat(node): Ensure express spans have better data (#12107)

  • feat(node): Ensure fastify spans have better data (#12106)

  • feat(node): Ensure hapi spans have better data (#12140)

  • feat(node): Ensure koa spans have better data (#12108)

  • feat(node): Ensure Nest.js spans have better data (#12139)

  • feat(deps): Bump @​opentelemetry/instrumentation-express from 0.38.0 to 0.39.0 (#12079)

  • feat(node): No-code init via --import=@sentry/node/init (#11999)

When using Sentry in ESM mode, you can now use Sentry without manually calling init like this:

 SENTRY_DSN=https://examplePublicKey@o0.ingest.sentry.io/0 node --import=@sentry/node/init app.mjs

When using CommonJS, you can do:

 SENTRY_DSN=https://examplePublicKey@o0.ingest.sentry.io/0 node --require=@sentry/node/init app.js

... (truncated)

Commits
  • fa14035 release: 8.4.0
  • 5e5c933 Merge pull request #12190 from getsentry/prepare-release/8.4.0
  • b203c2b meta(changelog): Update changelog for 8.4.0
  • d5a332c feat(nextjs): Trace pageloads in App Router (#12157)
  • 4caf92c ci(e2e): Use react beta for Next.js canary tests (#12186)
  • a0332fa feat(deps): Bump @​opentelemetry/instrumentation-aws-lambda from 0.41.0 to 0.4...
  • 6c28d4b feat(angular): Add Support for Angular 18 (#12183)
  • a45bdd1 fix(metrics): Ensure string values are interpreted for metrics (#12165)
  • 6254629 Merge pull request #12173 from getsentry/master
  • 37d09ca Merge branch 'release/8.3.0'
  • Additional commits viewable in compare view


Updates @sentry/tracing from 7.22.0 to 7.114.0

Release notes

Sourced from @​sentry/tracing's releases.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK package:

// Before
import * as Sentry fromv '@sentry/browser';
</tr></table>

... (truncated)

Changelog

Sourced from @​sentry/tracing's changelog.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK

... (truncated)

Commits


Updates @sinclair/typebox from 0.32.29 to 0.32.31

Commits


Updates better-sqlite3 from 9.4.3 to 10.0.0

Release notes

Sourced from better-sqlite3's releases.

v10.0.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.6.0...v10.0.0

v9.6.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.5.0...v9.6.0

v9.5.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.5...v9.5.0

v9.4.5

Fixed pre-built binaries for some platforms. (WiseLibs/better-sqlite3#1168)

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.4...v9.4.5

v9.4.4

What's Changed

New Contributors

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.3...v9.4.4

Commits


Updates config from 3.3.9 to 3.3.11

Release notes

Sourced from config's releases.

v3.3.11

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.10...v3.3.11

v3.3.10

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.9...v3.3.10

Commits
  • fb5033d Version bump
  • aac0693 fix: webpack bundling compatibility
  • a1bb7e8 chore: Bumped version to 3.3.10
  • c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
  • aa7cdea fix: regexp for cson handling, revert promise changes
  • 0058701 feat: default to json5 for json parsing
  • 1761c96 Repaired 1 broken test, disabled another that I question ever worked
  • 8c52ea2 Fix source maps when using ts config files
  • a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
  • 46d0c31 replace var to let and const
  • See full diff in compare view


Updates @types/config from 3.3.1 to 3.3.4

Commits


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates html-to-text from 8.0.0 to 9.0.5

Commits
  • 28dbb4d html-to-text v9.0.5 cli v0.5.4 - bump deps
  • a185c14 add a link to attribute selectors syntax
  • 5c7a2b2 cleanup package scripts
  • e5519c8 support escape sequences in selectors
  • d8cb382 html-to-text version 9.0.4
  • c049ac6 fix for missing table cells in incomplete tables
  • 6336d9b update readme [skip ci]
  • fa85d3c regenerate package-lock.json
  • 99388e6 html-to-text version 9.0.3
  • 5ddab20 document the usage of metadata object
  • Additional commits viewable in compare view


Updates @types/html-to-text from 8.0.1 to 9.0.4

Commits


Updates humanize-duration from 3.27.2 to 3.32.0

Changelog

Sourced from humanize-duration's changelog.

3.32.0 / 2024-03-29

  • new: Amharic support (am)
  • change: use Object.assign internally on newer runtimes, which should be slightly faster

3.31.0 / 2023-11-10

  • new: Central Kurdish support (ckb)

3.30.0 / 2023-09-17

  • new: Uzbek support (uz and uz_CYR)

3.29.0 / 2023-07-09

  • new: digitReplacements option
  • change: cleaned up documentation
  • change: shrank package size slightly

3.28.0 / 2023-01-14

  • new: Mongolian support (mn)

3.27.3 / 2022-08-26

  • fix: ordering for Swahili (see #207)
Commits
  • 4373d00 3.32.0
  • 6a381dd Update changelog and bower.json for 3.32.0 release
  • 5ef5c05 Use Object.assign where possible
  • a5622d2 Minor: use @internal JSDoc tag where applicable
  • c843604 Update devDependencies to latest versions
  • d884a02 Fix formatting for am
  • 52ff733 Add Amharic support
  • 83ff853 Use a better type for DigitReplacements
  • d88a1bf Add noImplicitAny TypeScript option
  • 392c869 Update devDependencies to latest versions
  • Additional commits viewable in compare view


Updates @types/humanize-duration from 3.27.1 to 3.27.4

Commits


Updates matrix-appservice-bridge from 9.0.1 to 10.1.0

Release notes

Sourced from matrix-appservice-bridge's releases.

10.1.0 2024-01-08

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Changelog

Sourced from matrix-appservice-bridge's changelog.

10.1.0 (2024-01-08)

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Commits


Updates parse-duration from 1.0.2 to 1.1.0

Commits


Updates pg from 8.8.0 to 8.11.5

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

Commits


Updates @types/pg from 8.6.5 to 8.11.6

Commits


Updates shell-quote from 1.7.3 to 1.8.1

Changelog

Sourced from shell-quote's changelog.

v1.8.1 - 2023-04-07

Fixed

Commits

  • [Refactor] parse: hoist getVar to module level b42ac73
  • [Refactor] hoist some vars to module level 8f0c5c3
  • [Refactor] parse: use slice over substr, cache some values fcb2e1a
  • [Refactor] parse: a bit of cleanup 6780ec5
  • [Refactor] parse: tweak the regex to not match nothing 227d474
  • [Tests] increase coverage a66de94
  • [Refactor] parse: avoid shadowing a function arg 1d58679

v1.8.0 - 2023-01-30

Commits

  • [New] extract parse and quote to their own deep imports 553fdfc
  • [Tests] add nyc coverage fd7ddcd
  • [New] Add support for here strings (&lt;&lt;&lt;) 9802fb3
  • [New] parse: Add syntax support for duplicating input file descriptors 216b198
  • [Dev Deps] update @ljharb/eslint-config, aud, tape 85f8e31
  • [Tests] add evalmd c5549fc
  • [actions] update checkout action 62e9b49

v1.7.4 - 2022-10-12

Merged

Commits

  • [eslint] fix indentation and whitespace aaa9d1f
  • [eslint] additional cleanup 397cb62
  • [meta] add auto-changelog 497fca5
  • [actions] add reusable workflows 4763c36
  • [eslint] add eslint 6ee1437
  • [readme] rename, add badges 7eb5134
  • [meta] update URLs 67381b6
  • [meta] create FUNDING.yml; add funding in package.json 8641572
  • [meta] use npmignore to autogenerate an npmignore file 2e2007a
  • Only apps should have lockfiles f97411e
  • [Dev Deps] update tape 051f608
  • [meta] add safe-publish-latest 18cadf9
  • [Tests] add aud in posttest dc1cc12

... (truncated)

Commits
  • da8a3ab v1.8.1
  • a66de94 [Tests] increase coverage
  • dependabot[bot] commented 4 months ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.