search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
82 stars 14 forks source link

Bump the production-dependencies group across 1 directory with 20 updates #461

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@sentry/node 7.22.0 8.11.0
@sentry/tracing 7.22.0 7.114.0
@sinclair/typebox 0.32.29 0.32.34
better-sqlite3 9.4.3 11.0.0
config 3.3.9 3.3.11
@types/config 3.3.1 3.3.4
express 4.18.2 4.19.2
html-to-text 8.0.0 9.0.5
@types/html-to-text 8.0.1 9.0.4
humanize-duration 3.27.2 3.32.1
@types/humanize-duration 3.27.1 3.27.4
jsdom 24.0.0 24.1.0
matrix-appservice-bridge 9.0.1 10.1.0
parse-duration 1.0.2 1.1.0
pg 8.8.0 8.12.0
@types/pg 8.6.5 8.11.6
shell-quote 1.7.3 1.8.1
@types/shell-quote 1.7.1 1.7.5
ulidx 2.2.1 2.3.0
yaml 2.3.2 2.4.5

Updates @sentry/node from 7.22.0 to 8.11.0

Release notes

Sourced from @​sentry/node's releases.

8.11.0

Important Changes

  • feat(core): Add parentSpan option to startSpan* APIs (#12567)

We've made it easier to create a span as a child of a specific span via the startSpan* APIs. This should allow you to explicitly manage the parent-child relationship of your spans better.

Sentry.startSpan({ name: 'root' }, parent => {
  const span = Sentry.startInactiveSpan({ name: 'xxx', parentSpan: parent });

Sentry.startSpan({ name: 'xxx', parentSpan: parent }, () => {});


Sentry.startSpanManual({ name: 'xxx', parentSpan: parent }, () => {});
});

Other Changes

  • feat(node): Detect release from more providers (#12529)
  • fix(profiling-node): Use correct getGlobalScope import (#12564)
  • fix(profiling-node) sample timestamps need to be in seconds (#12563)
  • ref: Align @sentry/node exports from framework SDKs. (#12589)

Bundle size 📦

Path Size
@​sentry/browser 22.22 KB
@​sentry/browser (incl. Tracing) 33.31 KB
@​sentry/browser (incl. Tracing, Replay) 69.09 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 62.41 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 73.14 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 85.31 KB
@​sentry/browser (incl. Tracing, Replay, Feedback, metrics) 87.17 KB
@​sentry/browser (incl. metrics) 26.5 KB
@​sentry/browser (incl. Feedback) 38.42 KB
@​sentry/browser (incl. sendFeedback) 26.85 KB
@​sentry/browser (incl. FeedbackAsync) 31.42 KB
@​sentry/react 24.96 KB
@​sentry/react (incl. Tracing) 36.35 KB
@​sentry/vue 26.32 KB
@​sentry/vue (incl. Tracing) 35.16 KB
@​sentry/svelte 22.35 KB
CDN Bundle 23.41 KB
CDN Bundle (incl. Tracing) 35.04 KB
CDN Bundle (incl. Tracing, Replay) 69.17 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 74.34 KB
CDN Bundle - uncompressed 68.76 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.11.0

Important Changes

  • feat(core): Add parentSpan option to startSpan* APIs (#12567)

We've made it easier to create a span as a child of a specific span via the startSpan* APIs. This should allow you to explicitly manage the parent-child relationship of your spans better.

Sentry.startSpan({ name: 'root' }, parent => {
  const span = Sentry.startInactiveSpan({ name: 'xxx', parentSpan: parent });

Sentry.startSpan({ name: 'xxx', parentSpan: parent }, () => {});


Sentry.startSpanManual({ name: 'xxx', parentSpan: parent }, () => {});
});

Other Changes

  • feat(node): Detect release from more providers (#12529)
  • fix(profiling-node): Use correct getGlobalScope import (#12564)
  • fix(profiling-node) sample timestamps need to be in seconds (#12563)
  • ref: Align @sentry/node exports from framework SDKs. (#12589)

8.10.0

Important Changes

  • feat(remix): Migrate to opentelemetry-instrumentation-remix. (#12110)

You can now simplify your remix instrumentation by opting-in like this:

const Sentry = require('@sentry/remix');

Sentry.init({
dsn: YOUR_DSN
// opt-in to new auto instrumentation
autoInstrumentRemix: true,
});

With this setup, you do not need to add e.g. wrapExpressCreateRequestHandler anymore. Additionally, the quality of the captured data improves. The old way to use @sentry/remix continues to work, but it is encouraged to use the new setup.

Other Changes

  • feat(browser): Export thirdPartyErrorFilterIntegration from @sentry/browser (#12512)

... (truncated)

Commits


Updates @sentry/tracing from 7.22.0 to 7.114.0

Release notes

Sourced from @​sentry/tracing's releases.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK package:

// Before
import * as Sentry fromv '@sentry/browser';
</tr></table>

... (truncated)

Changelog

Sourced from @​sentry/tracing's changelog.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK

... (truncated)

Commits


Updates @sinclair/typebox from 0.32.29 to 0.32.34

Commits


Updates better-sqlite3 from 9.4.3 to 11.0.0

Release notes

Sourced from better-sqlite3's releases.

v11.0.0

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.1.0...v11.0.0

Major version was bumped due to dropping support of Node.js v21 and Electron v25.

v10.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.0.0...v10.1.0

v10.0.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.6.0...v10.0.0

v9.6.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.5.0...v9.6.0

v9.5.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.5...v9.5.0

v9.4.5

Fixed pre-built binaries for some platforms. (WiseLibs/better-sqlite3#1168)

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.4.4...v9.4.5

v9.4.4

What's Changed

New Contributors

... (truncated)

Commits


Updates config from 3.3.9 to 3.3.11

Release notes

Sourced from config's releases.

v3.3.11

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.10...v3.3.11

v3.3.10

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.9...v3.3.10

Commits
  • fb5033d Version bump
  • aac0693 fix: webpack bundling compatibility
  • a1bb7e8 chore: Bumped version to 3.3.10
  • c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
  • aa7cdea fix: regexp for cson handling, revert promise changes
  • 0058701 feat: default to json5 for json parsing
  • 1761c96 Repaired 1 broken test, disabled another that I question ever worked
  • 8c52ea2 Fix source maps when using ts config files
  • a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
  • 46d0c31 replace var to let and const
  • See full diff in compare view


Updates @types/config from 3.3.1 to 3.3.4

Commits


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates html-to-text from 8.0.0 to 9.0.5

Commits
  • 28dbb4d html-to-text v9.0.5 cli v0.5.4 - bump deps
  • a185c14 add a link to attribute selectors syntax
  • 5c7a2b2 cleanup package scripts
  • e5519c8 support escape sequences in selectors
  • d8cb382 html-to-text version 9.0.4
  • c049ac6 fix for missing table cells in incomplete tables
  • 6336d9b update readme [skip ci]
  • fa85d3c regenerate package-lock.json
  • 99388e6 html-to-text version 9.0.3
  • 5ddab20 document the usage of metadata object
  • Additional commits viewable in compare view


Updates @types/html-to-text from 8.0.1 to 9.0.4

Commits


Updates humanize-duration from 3.27.2 to 3.32.1

Changelog

Sourced from humanize-duration's changelog.

3.32.1 / 2024-05-25

  • fix: hide unit count if 2 in Arabic (see #222)

3.32.0 / 2024-03-29

  • new: Amharic support (am)
  • change: use Object.assign internally on newer runtimes, which should be slightly faster

3.31.0 / 2023-11-10

  • new: Central Kurdish support (ckb)

3.30.0 / 2023-09-17

  • new: Uzbek support (uz and uz_CYR)

3.29.0 / 2023-07-09

  • new: digitReplacements option
  • change: cleaned up documentation
  • change: shrank package size slightly

3.28.0 / 2023-01-14

  • new: Mongolian support (mn)

3.27.3 / 2022-08-26

  • fix: ordering for Swahili (see #207)
Commits
  • 2082b0b 3.32.1
  • b3f3254 Update changelog and bower.json for 3.32.1
  • 10ad3dd Hide unit count if 2 in Arabic
  • 17362ec Add link to new fork
  • a6946b2 Update GitHub actions
  • 4373d00 3.32.0
  • 6a381dd Update changelog and bower.json for 3.32.0 release
  • 5ef5c05 Use Object.assign where possible
  • a5622d2 Minor: use @internal JSDoc tag where applicable
  • c843604 Update devDependencies to latest versions
  • Additional commits viewable in compare view


Updates @types/humanize-duration from 3.27.1 to 3.27.4

Commits


Updates jsdom from 24.0.0 to 24.1.0

Release notes

Sourced from jsdom's releases.

Version 24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Changelog

Sourced from jsdom's changelog.

24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Commits
  • 4555914 Version 24.1.0
  • a693107 Fix elements with names from Object.prototype
  • 8738255 Add regression test for comma selector
  • a343932 Implement the getSetCookie() method of Headers
  • f2fa507 Update URLs and fix grammar error
  • 7dc7ab9 Fix getComputedStyle() not-implemented message
  • f5f2468 Update dependencies and most dev dependencies
  • b32d82b Fix wpt failure in overwritten-customElements-global.html
  • See full diff in compare view


Updates matrix-appservice-bridge from 9.0.1 to 10.1.0

Release notes

Sourced from matrix-appservice-bridge's releases.

10.1.0 2024-01-08

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Changelog

Sourced from matrix-appservice-bridge's changelog.

10.1.0 (2024-01-08)

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Commits


Updates parse-duration from 1.0.2 to 1.1.0

Commits


Updates pg from 8.8.0 to 8.12.0

Changelog

Sourced from pg's changelog.

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

Commits


Updates @types/pg from 8.6.5 to 8.11.6

Commits


Updates shell-quote from 1.7.3 to 1.8.1

Changelog

Sourced from shell-quote's changelog.

v1.8.1 - 2023-04-07

Fixed

Commits

  • [Refactor] parse: hoist getVar to module level b42ac73
  • [Refactor] hoist some vars to module level 8f0c5c3
  • [Refactor] parse: use slice over substr, cache some values fcb2e1a
  • [Refactor] parse: a bit of cleanup 6780ec5
  • [Refactor] parse: tweak the regex to not match nothing 227d474
  • [Tests] increase coverage a66de94
  • [Refactor] parse: avoid shadowing a function arg 1d58679

v1.8.0 - 2023-01-30

Commits

  • [New] extract parse and quote to their own deep imports 553fdfc
  • [Tests] add nyc coverage fd7ddcd
  • [New] Add support for here strings (&lt;&lt;&lt;) 9802fb3
  • [New] parse: Add syntax support for duplicating input file descriptors 216b198
  • [Dev Deps] update @ljharb/eslint-config, aud, tape 85f8e31
  • [Tests] add evalmd c5549fc
  • [actions] update checkout action 62e9b49

v1.7.4 - 2022-10-12

Merged

dependabot[bot] commented 3 months ago

Superseded by #469.