search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
Academic Free License v3.0
68 stars 13 forks source link

Bump the production-dependencies group across 1 directory with 20 updates #474

Open dependabot[bot] opened 1 week ago

dependabot[bot] commented 1 week ago

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
@sentry/node 7.22.0 8.14.0
@sentry/tracing 7.22.0 7.114.0
@sinclair/typebox 0.32.29 0.32.34
better-sqlite3 9.4.3 11.1.2
config 3.3.9 3.3.12
@types/config 3.3.1 3.3.4
express 4.18.2 4.19.2
html-to-text 8.0.0 9.0.5
@types/html-to-text 8.0.1 9.0.4
humanize-duration 3.27.2 3.32.1
@types/humanize-duration 3.27.1 3.27.4
jsdom 24.0.0 24.1.0
matrix-appservice-bridge 9.0.1 10.1.0
parse-duration 1.0.2 1.1.0
pg 8.8.0 8.12.0
@types/pg 8.6.5 8.11.6
shell-quote 1.7.3 1.8.1
@types/shell-quote 1.7.1 1.7.5
ulidx 2.2.1 2.3.0
yaml 2.3.2 2.4.5

Updates @sentry/node from 7.22.0 to 8.14.0

Release notes

Sourced from @​sentry/node's releases.

8.14.0

Important Changes

  • feat(nestjs): Filter 4xx errors (#12695)

The @sentry/nestjs SDK no longer captures 4xx errors automatically.

Other Changes

  • chore(react): Remove private namespace JSX (#12691)
  • feat(deps): bump @​opentelemetry/propagator-aws-xray from 1.25.0 to 1.25.1 (#12719)
  • feat(deps): bump @​prisma/instrumentation from 5.16.0 to 5.16.1 (#12718)
  • feat(node): Add registerEsmLoaderHooks option (#12684)
  • feat(opentelemetry): Expose sampling helper (#12674)
  • fix(browser): Make sure measure spans have valid start timestamps (#12648)
  • fix(hapi): Widen type definitions (#12710)
  • fix(nextjs): Attempt to ignore critical dependency warnings (#12694)
  • fix(react): Fix React jsx runtime import for esm (#12740)
  • fix(replay): Start replay in afterAllSetup instead of next tick (#12709)

Work in this release was contributed by @​quisido. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 22.22 KB
@​sentry/browser (incl. Tracing) 33.38 KB
@​sentry/browser (incl. Tracing, Replay) 69.12 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 62.45 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 73.18 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 85.8 KB
@​sentry/browser (incl. Tracing, Replay, Feedback, metrics) 87.66 KB
@​sentry/browser (incl. metrics) 26.5 KB
@​sentry/browser (incl. Feedback) 38.86 KB
@​sentry/browser (incl. sendFeedback) 26.85 KB
@​sentry/browser (incl. FeedbackAsync) 31.45 KB
@​sentry/react 24.97 KB
@​sentry/react (incl. Tracing) 36.43 KB
@​sentry/vue 26.33 KB
@​sentry/vue (incl. Tracing) 35.24 KB
@​sentry/svelte 22.36 KB
CDN Bundle 23.42 KB
CDN Bundle (incl. Tracing) 35.12 KB
CDN Bundle (incl. Tracing, Replay) 69.22 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 74.41 KB
CDN Bundle - uncompressed 68.8 KB
CDN Bundle (incl. Tracing) - uncompressed 103.82 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 214.21 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 226.92 KB

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.14.0

Important Changes

  • feat(nestjs): Filter 4xx errors (#12695)

The @sentry/nestjs SDK no longer captures 4xx errors automatically.

Other Changes

  • chore(react): Remove private namespace JSX (#12691)
  • feat(deps): bump @​opentelemetry/propagator-aws-xray from 1.25.0 to 1.25.1 (#12719)
  • feat(deps): bump @​prisma/instrumentation from 5.16.0 to 5.16.1 (#12718)
  • feat(node): Add registerEsmLoaderHooks option (#12684)
  • feat(opentelemetry): Expose sampling helper (#12674)
  • fix(browser): Make sure measure spans have valid start timestamps (#12648)
  • fix(hapi): Widen type definitions (#12710)
  • fix(nextjs): Attempt to ignore critical dependency warnings (#12694)
  • fix(react): Fix React jsx runtime import for esm (#12740)
  • fix(replay): Start replay in afterAllSetup instead of next tick (#12709)

Work in this release was contributed by @​quisido. Thank you for your contribution!

8.13.0

Important Changes

  • feat(nestjs): Add Nest SDK This release adds a dedicated SDK for NestJS (@sentry/nestjs) in alpha state. The SDK is a drop-in replacement for the Sentry Node SDK (@sentry/node) supporting the same set of features. See the docs for how to use the SDK.

Other Changes

  • deps: Bump bundler plugins to 2.20.1 (#12641)
  • deps(nextjs): Remove react peer dep and allow rc (#12670)
  • feat: Update OTEL deps (#12635)
  • feat(deps): bump @​prisma/instrumentation from 5.15.0 to 5.15.1 (#12627)
  • feat(node): Add context info for missing instrumentation (#12639)
  • fix(feedback): Improve feedback error message (#12647)

8.12.0

Important Changes

  • feat(solid): Remove need to pass router hooks to solid integration (breaking)

This release introduces breaking changes to the @sentry/solid package (which is currently out in alpha).

We've made it easier to get started with the solid router integration by removing the need to pass use* hooks explicitly to solidRouterBrowserTracingIntegration. Import solidRouterBrowserTracingIntegration from

... (truncated)

Commits


Updates @sentry/tracing from 7.22.0 to 7.114.0

Release notes

Sourced from @​sentry/tracing's releases.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK package:

// Before
import * as Sentry fromv '@sentry/browser';
</tr></table>

... (truncated)

Changelog

Sourced from @​sentry/tracing's changelog.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK

... (truncated)

Commits


Updates @sinclair/typebox from 0.32.29 to 0.32.34

Commits


Updates better-sqlite3 from 9.4.3 to 11.1.2

Release notes

Sourced from better-sqlite3's releases.

v11.1.2

What's Changed

New Contributors

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.1.1...v11.1.2

v11.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.1.0...v11.1.1

v11.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.0.0...v11.1.0

Note: this release failed due to electron v26-windows-ARM prebuilds failing.

v11.0.0

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.1.0...v11.0.0

Major version was bumped due to dropping support of Node.js v21 and Electron v25.

v10.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.0.0...v10.1.0

v10.0.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.6.0...v10.0.0

v9.6.0

... (truncated)

Commits


Updates config from 3.3.9 to 3.3.12

Release notes

Sourced from config's releases.

v3.3.12

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.11...v3.3.12

v3.3.11

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.10...v3.3.11

v3.3.10

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.9...v3.3.10

Commits
  • fbcc02e Remove usage of deprecated utils to fix warnings in Node 22
  • fb5033d Version bump
  • aac0693 fix: webpack bundling compatibility
  • a1bb7e8 chore: Bumped version to 3.3.10
  • c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
  • aa7cdea fix: regexp for cson handling, revert promise changes
  • 0058701 feat: default to json5 for json parsing
  • 1761c96 Repaired 1 broken test, disabled another that I question ever worked
  • 8c52ea2 Fix source maps when using ts config files
  • a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
  • Additional commits viewable in compare view


Updates @types/config from 3.3.1 to 3.3.4

Commits


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates html-to-text from 8.0.0 to 9.0.5

Commits
  • 28dbb4d html-to-text v9.0.5 cli v0.5.4 - bump deps
  • a185c14 add a link to attribute selectors syntax
  • 5c7a2b2 cleanup package scripts
  • e5519c8 support escape sequences in selectors
  • d8cb382 html-to-text version 9.0.4
  • c049ac6 fix for missing table cells in incomplete tables
  • 6336d9b update readme [skip ci]
  • fa85d3c regenerate package-lock.json
  • 99388e6 html-to-text version 9.0.3
  • 5ddab20 document the usage of metadata object
  • Additional commits viewable in compare view


Updates @types/html-to-text from 8.0.1 to 9.0.4

Commits


Updates humanize-duration from 3.27.2 to 3.32.1

Changelog

Sourced from humanize-duration's changelog.

3.32.1 / 2024-05-25

  • fix: hide unit count if 2 in Arabic (see #222)

3.32.0 / 2024-03-29

  • new: Amharic support (am)
  • change: use Object.assign internally on newer runtimes, which should be slightly faster

3.31.0 / 2023-11-10

  • new: Central Kurdish support (ckb)

3.30.0 / 2023-09-17

  • new: Uzbek support (uz and uz_CYR)

3.29.0 / 2023-07-09

  • new: digitReplacements option
  • change: cleaned up documentation
  • change: shrank package size slightly

3.28.0 / 2023-01-14

  • new: Mongolian support (mn)

3.27.3 / 2022-08-26

  • fix: ordering for Swahili (see #207)
Commits
  • 2082b0b 3.32.1
  • b3f3254 Update changelog and bower.json for 3.32.1
  • 10ad3dd Hide unit count if 2 in Arabic
  • 17362ec Add link to new fork
  • a6946b2 Update GitHub actions
  • 4373d00 3.32.0
  • 6a381dd Update changelog and bower.json for 3.32.0 release
  • 5ef5c05 Use Object.assign where possible
  • a5622d2 Minor: use @internal JSDoc tag where applicable
  • c843604 Update devDependencies to latest versions
  • Additional commits viewable in compare view


Updates @types/humanize-duration from 3.27.1 to 3.27.4

Commits


Updates jsdom from 24.0.0 to 24.1.0

Release notes

Sourced from jsdom's releases.

Version 24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Changelog

Sourced from jsdom's changelog.

24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Commits
  • 4555914 Version 24.1.0
  • a693107 Fix elements with names from Object.prototype
  • 8738255 Add regression test for comma selector
  • a343932 Implement the getSetCookie() method of Headers
  • f2fa507 Update URLs and fix grammar error
  • 7dc7ab9 Fix getComputedStyle() not-implemented message
  • f5f2468 Update dependencies and most dev dependencies
  • b32d82b Fix wpt failure in overwritten-customElements-global.html
  • See full diff in compare view


Updates matrix-appservice-bridge from 9.0.1 to 10.1.0

Release notes

Sourced from matrix-appservice-bridge's releases.

10.1.0 2024-01-08

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Changelog

Sourced from matrix-appservice-bridge's changelog.

10.1.0 (2024-01-08)

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Commits


Updates parse-duration from 1.0.2 to 1.1.0

Commits


Updates pg from 8.8.0 to 8.12.0

Changelog

Sourced from pg's changelog.

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

Commits


Updates @types/pg from 8.6.5 to 8.11.6

Commits


Updates shell-quote from 1.7.3 to 1.8.1

Changelog

Sourced from shell-quote's changelog.

v1.8.1 - 2023-04-07

Fixed

Commits

  • [Refactor] parse: hoist getVar to module level b42ac73
  • [Refactor] hoist some vars to module level 8f0c5c3
  • [Refactor] parse: use slice over substr, cache some values
  • © Githubissues.
  • Githubissues is a development platform for aggregating issues.