search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
82 stars 14 forks source link

Bump the production-dependencies group across 1 directory with 20 updates #448

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 4 months ago

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@sentry/node 7.22.0 8.7.0
@sentry/tracing 7.22.0 7.114.0
@sinclair/typebox 0.32.29 0.32.31
better-sqlite3 9.4.3 11.0.0
config 3.3.9 3.3.11
@types/config 3.3.1 3.3.4
express 4.18.2 4.19.2
html-to-text 8.0.0 9.0.5
@types/html-to-text 8.0.1 9.0.4
humanize-duration 3.27.2 3.32.1
@types/humanize-duration 3.27.1 3.27.4
jsdom 24.0.0 24.1.0
matrix-appservice-bridge 9.0.1 10.1.0
parse-duration 1.0.2 1.1.0
pg 8.8.0 8.11.5
@types/pg 8.6.5 8.11.6
shell-quote 1.7.3 1.8.1
@types/shell-quote 1.7.1 1.7.5
ulidx 2.2.1 2.3.0
yaml 2.3.2 2.4.2

Updates @sentry/node from 7.22.0 to 8.7.0

Release notes

Sourced from @​sentry/node's releases.

8.7.0

Important Changes

  • feat(react): Add TanStack Router integration (#12095)

    This release adds instrumentation for TanStack router with a new tanstackRouterBrowserTracingIntegration in the @sentry/react SDK:

    import * as Sentry from '@sentry/react';
import { createRouter } from '@tanstack/react-router';

    const router = createRouter({
// Your router options...
});
    

    Sentry.init({
dsn: 'PUBLIC_DSN',
integrations: [Sentry.tanstackRouterBrowserTracingIntegration(router)],
tracesSampleRate: 1.0,
});

Other Changes

  • fix(nextjs): Do not hide sourceMappingURL comment on client when nextConfig.productionBrowserSourceMaps: true is set (#12278)

8.6.0

8.6.0 did not release fully, so this 8.7.0 also includes changes from that release.

Important Changes

  • feat(metrics): Add timings method to metrics (#12226)

    This introduces a new method, metrics.timing(), which can be used in two ways:

    1. With a numeric value, to simplify creating a distribution metric. This will default to second as unit:
    Sentry.metrics.timing('myMetric', 100);
    1. With a callback, which will wrap the duration of the callback. This can accept a sync or async callback. It will create an inactive span around the callback and at the end emit a metric with the duration of the span in seconds:
    const returnValue = Sentry.metrics.timing('myMetric', measureThisFunction);

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.7.0

Important Changes

  • feat(react): Add TanStack Router integration (#12095)

    This release adds instrumentation for TanStack router with a new tanstackRouterBrowserTracingIntegration in the @sentry/react SDK:

    import * as Sentry from '@sentry/react';
import { createRouter } from '@tanstack/react-router';

    const router = createRouter({
// Your router options...
});
    

    Sentry.init({
dsn: 'PUBLIC_DSN',
integrations: [Sentry.tanstackRouterBrowserTracingIntegration(router)],
tracesSampleRate: 1.0,
});

Other Changes

  • fix(nextjs): Do not hide sourceMappingURL comment on client when nextConfig.productionBrowserSourceMaps: true is set (#12278)

8.6.0

Important Changes

  • feat(metrics): Add timings method to metrics (#12226)

    This introduces a new method, metrics.timing(), which can be used in two ways:

    1. With a numeric value, to simplify creating a distribution metric. This will default to second as unit:
    Sentry.metrics.timing('myMetric', 100);
    1. With a callback, which will wrap the duration of the callback. This can accept a sync or async callback. It will create an inactive span around the callback and at the end emit a metric with the duration of the span in seconds:
    const returnValue = Sentry.metrics.timing('myMetric', measureThisFunction);

... (truncated)

Commits
  • 41b8f79 release: 8.7.0
  • d4aaa3a Merge pull request #12280 from getsentry/prepare-release/8.7.0
  • 9b09cb2 Merge branch 'master' into prepare-release/8.7.0
  • 4aaaba7 meta: Add Changelog entry for 8.7.0
  • d9562b9 fix(nextjs): Do not hide sourceMappingURL comment on client when `nextConfi...
  • 0d1093d feat(react): Add TanStack Router integration (#12095)
  • bbe7be5 build: Remove @types/rimraf and some rimraf usage (#12276)
  • 81e0fd1 build: Bump node to 18.20.3 (#12271)
  • 264675d Merge pull request #12272 from getsentry/prepare-release/8.6.00
  • bf0a138 test(react): Update react-create-hash-router E2E test (#12262)
  • Additional commits viewable in compare view


Updates @sentry/tracing from 7.22.0 to 7.114.0

Release notes

Sourced from @​sentry/tracing's releases.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK package:

// Before
import * as Sentry fromv '@sentry/browser';
</tr></table>

... (truncated)

Changelog

Sourced from @​sentry/tracing's changelog.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK

... (truncated)

Commits


Updates @sinclair/typebox from 0.32.29 to 0.32.31

Commits


Updates better-sqlite3 from 9.4.3 to 11.0.0

Release notes

Sourced from better-sqlite3's releases.

v11.0.0

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.1.0...v11.0.0

Major version was bumped due to dropping support of Node.js v21 and Electron v25.

v10.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.0.0...v10.1.0

v10.0.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.6.0...v10.0.0

v9.6.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.5.0...v9.6.0

v9.5.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.5...v9.5.0

v9.4.5

Fixed pre-built binaries for some platforms. (WiseLibs/better-sqlite3#1168)

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.4...v9.4.5

v9.4.4

What's Changed

New Contributors

... (truncated)

Commits


Updates config from 3.3.9 to 3.3.11

Release notes

Sourced from config's releases.

v3.3.11

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.10...v3.3.11

v3.3.10

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.9...v3.3.10

Commits
  • fb5033d Version bump
  • aac0693 fix: webpack bundling compatibility
  • a1bb7e8 chore: Bumped version to 3.3.10
  • c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
  • aa7cdea fix: regexp for cson handling, revert promise changes
  • 0058701 feat: default to json5 for json parsing
  • 1761c96 Repaired 1 broken test, disabled another that I question ever worked
  • 8c52ea2 Fix source maps when using ts config files
  • a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
  • 46d0c31 replace var to let and const
  • See full diff in compare view


Updates @types/config from 3.3.1 to 3.3.4

Commits


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates html-to-text from 8.0.0 to 9.0.5

Commits
  • 28dbb4d html-to-text v9.0.5 cli v0.5.4 - bump deps
  • a185c14 add a link to attribute selectors syntax
  • 5c7a2b2 cleanup package scripts
  • e5519c8 support escape sequences in selectors
  • d8cb382 html-to-text version 9.0.4
  • c049ac6 fix for missing table cells in incomplete tables
  • 6336d9b update readme [skip ci]
  • fa85d3c regenerate package-lock.json
  • 99388e6 html-to-text version 9.0.3
  • 5ddab20 document the usage of metadata object
  • Additional commits viewable in compare view


Updates @types/html-to-text from 8.0.1 to 9.0.4

Commits


Updates humanize-duration from 3.27.2 to 3.32.1

Changelog

Sourced from humanize-duration's changelog.

3.32.1 / 2024-05-25

  • fix: hide unit count if 2 in Arabic (see #222)

3.32.0 / 2024-03-29

  • new: Amharic support (am)
  • change: use Object.assign internally on newer runtimes, which should be slightly faster

3.31.0 / 2023-11-10

  • new: Central Kurdish support (ckb)

3.30.0 / 2023-09-17

  • new: Uzbek support (uz and uz_CYR)

3.29.0 / 2023-07-09

  • new: digitReplacements option
  • change: cleaned up documentation
  • change: shrank package size slightly

3.28.0 / 2023-01-14

  • new: Mongolian support (mn)

3.27.3 / 2022-08-26

  • fix: ordering for Swahili (see #207)
Commits
  • 2082b0b 3.32.1
  • b3f3254 Update changelog and bower.json for 3.32.1
  • 10ad3dd Hide unit count if 2 in Arabic
  • 17362ec Add link to new fork
  • a6946b2 Update GitHub actions
  • 4373d00 3.32.0
  • 6a381dd Update changelog and bower.json for 3.32.0 release
  • 5ef5c05 Use Object.assign where possible
  • a5622d2 Minor: use @internal JSDoc tag where applicable
  • c843604 Update devDependencies to latest versions
  • Additional commits viewable in compare view


Updates @types/humanize-duration from 3.27.1 to 3.27.4

Commits


Updates jsdom from 24.0.0 to 24.1.0

Release notes

Sourced from jsdom's releases.

Version 24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Changelog

Sourced from jsdom's changelog.

24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Commits
  • 4555914 Version 24.1.0
  • a693107 Fix elements with names from Object.prototype
  • 8738255 Add regression test for comma selector
  • a343932 Implement the getSetCookie() method of Headers
  • f2fa507 Update URLs and fix grammar error
  • 7dc7ab9 Fix getComputedStyle() not-implemented message
  • f5f2468 Update dependencies and most dev dependencies
  • b32d82b Fix wpt failure in overwritten-customElements-global.html
  • See full diff in compare view


Updates matrix-appservice-bridge from 9.0.1 to 10.1.0

Release notes

Sourced from matrix-appservice-bridge's releases.

10.1.0 2024-01-08

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Changelog

Sourced from matrix-appservice-bridge's changelog.

10.1.0 (2024-01-08)

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Commits


Updates parse-duration from 1.0.2 to 1.1.0

Commits


Updates pg from 8.8.0 to 8.11.5

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

Commits


Updates @types/pg from 8.6.5 to 8.11.6

Commits


Updates shell-quote from 1.7.3 to 1.8.1

Changelog

Sourced from shell-quote's changelog.

v1.8.1 - 2023-04-07

Fixed

Commits

  • [Refactor] parse: hoist getVar to module level b42ac73
  • [Refactor] hoist some vars to module level 8f0c5c3
  • [Refactor] parse: use slice over substr, cache some values fcb2e1a
  • [Refactor] parse: a bit of cleanup 6780ec5
  • [Refactor] parse: tweak the regex to not match nothing 227d474
  • [Tests] increase coverage a66de94
  • [Refactor] parse: avoid shadowing a function arg 1d58679

v1.8.0 - 2023-01-30

Commits

  • [New] extract parse and quote to their own deep imports 553fdfc
  • [Tests] add nyc coverage fd7ddcd
  • [New] Add support for here strings (&lt;&lt;&lt;) 9802fb3
  • [New] parse: Add syntax support for duplicating input file descriptors 216b198
  • [Dev Deps] update @ljharb/eslint-config, aud, tape 85f8e31
  • [Tests] add evalmd c5549fc
  • [actions] update checkout action 62e9b49

v1.7.4 - 2022-10-12

Merged

Commits

  • [eslint] fix indentation and whitespace aaa9d1f
  • [eslint] additional cleanup 397cb62
  • [meta] add auto-changelog 497fca5
  • [actions] add reusable workflows 4763c36
  • [eslint] add eslint 6ee1437
  • [readme] rename, add badges 7eb5134
  • [meta] update URLs 67381b6
  • [meta] create FUNDING.yml; add funding in package.json 8641572
  • [meta] use npmignore to autogenerate an npmignore file 2e2007a
  • Only apps should have lockfiles f97411e
  • [Dev Deps] update tape 051f608
  • [meta] add safe-publish-latest 18cadf9
  • [Tests] add aud in posttest dc1cc12

... (truncated)

Commits
dependabot[bot] commented 3 months ago

Superseded by #461.