search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
77 stars 14 forks source link

Bump the production-dependencies group across 1 directory with 19 updates #482

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the production-dependencies group with 19 updates in the / directory:

Package From To
@sentry/node 7.22.0 8.19.0
@sentry/tracing 7.22.0 7.114.0
better-sqlite3 9.4.3 11.1.2
config 3.3.9 3.3.12
@types/config 3.3.1 3.3.4
express 4.18.2 4.19.2
html-to-text 8.0.0 9.0.5
@types/html-to-text 8.0.1 9.0.4
humanize-duration 3.27.2 3.32.1
@types/humanize-duration 3.27.1 3.27.4
jsdom 24.0.0 24.1.1
matrix-appservice-bridge 9.0.1 10.1.0
parse-duration 1.0.2 1.1.0
pg 8.8.0 8.12.0
@types/pg 8.6.5 8.11.6
shell-quote 1.7.3 1.8.1
@types/shell-quote 1.7.1 1.7.5
ulidx 2.2.1 2.3.0
yaml 2.3.2 2.4.5

Updates @sentry/node from 7.22.0 to 8.19.0

Release notes

Sourced from @​sentry/node's releases.

8.19.0

  • feat(core): Align Span interface with OTEL (#12898)
  • feat(express): Allow to pass options to setupExpressErrorHandler (#12952)
  • feat(node): Add request parameter to httpIntegration ignore callbacks (#12930)
  • feat(vercel-edge): Add dedupe as default integration (#12957)
  • fix(angular): Remove afterSendEvent listener once root injector is destroyed (#12786)
  • fix(browser): Fix bug causing unintentional dropping of transactions (#12933)
  • fix(feedback): Add a missing call of Actor.appendToDom method when DOMContentLoaded event is triggered (#12973)
  • fix(node): Pass inferred name & attributes to tracesSampler (#12945)

Work in this release was contributed by @​jaspreet57 and @​arturovt. Thank you for your contribution!

Bundle size 📦

Path Size
@​sentry/browser 22.3 KB
@​sentry/browser (incl. Tracing) 33.72 KB
@​sentry/browser (incl. Tracing, Replay) 69.81 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 63.11 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 74.2 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 86.52 KB
@​sentry/browser (incl. Tracing, Replay, Feedback, metrics) 88.39 KB
@​sentry/browser (incl. metrics) 26.62 KB
@​sentry/browser (incl. Feedback) 38.98 KB
@​sentry/browser (incl. sendFeedback) 26.93 KB
@​sentry/browser (incl. FeedbackAsync) 31.54 KB
@​sentry/react 25.07 KB
@​sentry/react (incl. Tracing) 36.79 KB
@​sentry/vue 26.44 KB
@​sentry/vue (incl. Tracing) 35.6 KB
@​sentry/svelte 22.44 KB
CDN Bundle 23.52 KB
CDN Bundle (incl. Tracing) 35.5 KB
CDN Bundle (incl. Tracing, Replay) 69.91 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 75.17 KB
CDN Bundle - uncompressed 69 KB
CDN Bundle (incl. Tracing) - uncompressed 105.1 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 216.88 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 229.6 KB
@​sentry/nextjs (client) 36.65 KB
@​sentry/sveltekit (client) 34.37 KB
@​sentry/node 111.29 KB
@​sentry/node - without tracing 88.71 KB
@​sentry/aws-serverless 97.88 KB

8.18.0

Important Changes

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

8.19.0

  • feat(core): Align Span interface with OTEL (#12898)
  • fix(angular): Remove afterSendEvent listener once root injector is destroyed (#12786)
  • fix(browser): Fix bug causing unintentional dropping of transactions (#12933)
  • fix(feedback): Add a missing call of Actor.appendToDom method when DOMContentLoaded event is triggered (#12973)
  • feat(vercel-edge): Add dedupe as default integration (#12957)
  • fix(node): Pass inferred name & attributes to tracesSampler (#12945)
  • feat(express): Allow to pass options to setupExpressErrorHandler (#12952)

Work in this release was contributed by @​jaspreet57 and @​arturovt. Thank you for your contribution!

8.18.0

Important Changes

  • ref: Deprecate enableTracing (12897)

The enableTracing option has been deprecated and will be removed in the next major version. We recommend removing it in favor of the tracesSampleRate and tracesSampler options. If you want to enable performance monitoring, please set the tracesSampleRate to a sample rate of your choice, or provide a sampling function as tracesSampler option instead. If you want to disable performance monitoring, remove the tracesSampler and tracesSampleRate options.

Other Changes

  • feat(node): Expose exclude and include options for ESM loader (#12910)
  • feat(browser): Add user agent to INP standalone span attributes (#12896)
  • feat(nextjs): Add experimental_captureRequestError for onRequestError hook (#12885)
  • feat(replay): Bump rrweb to 2.25.0 (#12478)
  • feat(tracing): Add long animation frame tracing (#12646)
  • fix: Cleanup hooks when they are not used anymore (#12852)
  • fix(angular): Guard ErrorEvent check in ErrorHandler to avoid throwing in Node environments (#12892)
  • fix(inp): Ensure INP spans have correct transaction (#12871)
  • fix(nestjs): Do not make SentryTraced() decorated functions async (#12879)
  • fix(nextjs): Support automatic instrumentation for app directory with custom page extensions (#12858)
  • fix(node): Ensure correct URL is passed to ignoreIncomingRequests callback (#12929)
  • fix(otel): Do not add otel.kind: INTERNAL attribute (#12841)
  • fix(solidstart): Set proper sentry origin for solid router integration when used in solidstart sdk (#12919)
  • fix(sveltekit): Add Vite peer dep for proper type resolution (#12926)
  • fix(tracing): Ensure you can pass null as parentSpan in startSpan* (#12928)
  • ref(core): Small bundle size improvement (#12830)

Work in this release was contributed by @​GitSquared, @​ziyadkhalil and @​mcous. Thank you for your contributions!

8.17.0

  • feat: Upgrade OTEL deps (#12809)
  • fix(nuxt): Add module to build:transpile script (#12843)
  • fix(browser): Allow SDK initialization in NW.js apps (#12846)

... (truncated)

Commits


Updates @sentry/tracing from 7.22.0 to 7.114.0

Release notes

Sourced from @​sentry/tracing's releases.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK package:

// Before
import * as Sentry fromv '@sentry/browser';
</tr></table>

... (truncated)

Changelog

Sourced from @​sentry/tracing's changelog.

7.114.0

Important Changes

  • fix(browser/v7): Continuously record CLS (#11935)

This release fixes a bug that caused the cumulative layout shift (CLS) web vital not to be reported in a majority of the cases where it should have been reported. With this change, the CLS web vital should now always be reported for pageloads with layout shift. If a pageload did not have layout shift, no CLS web vital should be reported.

Please note that upgrading the SDK to this version may cause data in your dashboards to drastically change.

Other Changes

  • build(aws-lambda/v7): Turn off lambda layer publishing (#11875)
  • feat(v7): Add tunnel support to multiplexed transport (#11851)
  • fix(opentelemetry-node): support HTTP_REQUEST_METHOD attribute (#11929)
  • fix(react/v7): Fix react router v4/v5 span names (#11940)

7.113.0

Important Changes

  • feat(node): Support Node 22 (#11754)

This release adds support for Node 22! 🎉

It also adds prebuilt-binaries for Node 22 to @sentry/profiling-node.

Other Changes

  • feat(feedback): [v7] New feedback button design (#11841)
  • feat(replay/v7): Upgrade rrweb packages to 2.15.0 (#11752)
  • fix(ember/v7): Ensure unnecessary spans are avoided (#11848)

7.112.2

  • fix(nextjs|sveltekit): Ensure we can pass browserTracingIntegration (#11765)

7.112.1

  • fix(ember/v7): Do not create rendering spans without transaction (#11750)

7.112.0

Important Changes

  • feat: Export pluggable integrations from SDK packages (#11723)

Instead of installing @sentry/integrations, you can now import the pluggable integrations directly from your SDK

... (truncated)

Commits


Updates better-sqlite3 from 9.4.3 to 11.1.2

Release notes

Sourced from better-sqlite3's releases.

v11.1.2

What's Changed

New Contributors

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.1.1...v11.1.2

v11.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.1.0...v11.1.1

v11.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v11.0.0...v11.1.0

Note: this release failed due to electron v26-windows-ARM prebuilds failing.

v11.0.0

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.1.0...v11.0.0

Major version was bumped due to dropping support of Node.js v21 and Electron v25.

v10.1.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v10.0.0...v10.1.0

v10.0.0

What's Changed

Full Changelog: https://github.com/WiseLibs/better-sqlite3/compare/v9.6.0...v10.0.0

v9.6.0

... (truncated)

Commits


Updates config from 3.3.9 to 3.3.12

Release notes

Sourced from config's releases.

v3.3.12

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.11...v3.3.12

v3.3.11

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.10...v3.3.11

v3.3.10

What's Changed

New Contributors

Full Changelog: https://github.com/node-config/node-config/compare/v3.3.9...v3.3.10

Commits
  • fbcc02e Remove usage of deprecated utils to fix warnings in Node 22
  • fb5033d Version bump
  • aac0693 fix: webpack bundling compatibility
  • a1bb7e8 chore: Bumped version to 3.3.10
  • c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
  • aa7cdea fix: regexp for cson handling, revert promise changes
  • 0058701 feat: default to json5 for json parsing
  • 1761c96 Repaired 1 broken test, disabled another that I question ever worked
  • 8c52ea2 Fix source maps when using ts config files
  • a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
  • Additional commits viewable in compare view


Updates @types/config from 3.3.1 to 3.3.4

Commits


Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

4.18.3

Main Changes

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

  • Prevent open redirect allow list bypass due to encodeurl
  • deps: cookie@0.6.0

4.18.3 / 2024-02-29

  • Fix routing requests without method
  • deps: body-parser@1.20.2
    • Fix strict json error message on Node.js 19+
    • deps: content-type@~1.0.5
    • deps: raw-body@2.5.2
  • deps: cookie@0.6.0
    • Add partitioned option
Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: cookie@0.6.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates html-to-text from 8.0.0 to 9.0.5

Commits
  • 28dbb4d html-to-text v9.0.5 cli v0.5.4 - bump deps
  • a185c14 add a link to attribute selectors syntax
  • 5c7a2b2 cleanup package scripts
  • e5519c8 support escape sequences in selectors
  • d8cb382 html-to-text version 9.0.4
  • c049ac6 fix for missing table cells in incomplete tables
  • 6336d9b update readme [skip ci]
  • fa85d3c regenerate package-lock.json
  • 99388e6 html-to-text version 9.0.3
  • 5ddab20 document the usage of metadata object
  • Additional commits viewable in compare view


Updates @types/html-to-text from 8.0.1 to 9.0.4

Commits


Updates humanize-duration from 3.27.2 to 3.32.1

Changelog

Sourced from humanize-duration's changelog.

3.32.1 / 2024-05-25

  • fix: hide unit count if 2 in Arabic (see #222)

3.32.0 / 2024-03-29

  • new: Amharic support (am)
  • change: use Object.assign internally on newer runtimes, which should be slightly faster

3.31.0 / 2023-11-10

  • new: Central Kurdish support (ckb)

3.30.0 / 2023-09-17

  • new: Uzbek support (uz and uz_CYR)

3.29.0 / 2023-07-09

  • new: digitReplacements option
  • change: cleaned up documentation
  • change: shrank package size slightly

3.28.0 / 2023-01-14

  • new: Mongolian support (mn)

3.27.3 / 2022-08-26

  • fix: ordering for Swahili (see #207)
Commits
  • 2082b0b 3.32.1
  • b3f3254 Update changelog and bower.json for 3.32.1
  • 10ad3dd Hide unit count if 2 in Arabic
  • 17362ec Add link to new fork
  • a6946b2 Update GitHub actions
  • 4373d00 3.32.0
  • 6a381dd Update changelog and bower.json for 3.32.0 release
  • 5ef5c05 Use Object.assign where possible
  • a5622d2 Minor: use @internal JSDoc tag where applicable
  • c843604 Update devDependencies to latest versions
  • Additional commits viewable in compare view


Updates @types/humanize-duration from 3.27.1 to 3.27.4

Commits


Updates jsdom from 24.0.0 to 24.1.1

Release notes

Sourced from jsdom's releases.

Version 24.1.1

  • Fixed selection methods to trigger the selectionchange event on the Document object. (piotr-oles)

Version 24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Changelog

Sourced from jsdom's changelog.

24.1.1

  • Fixed selection methods to trigger the selectionchange event on the Document object. (piotr-oles)

24.1.0

  • Added the getSetCookie() method to the Headers class. (ushiboy)
  • Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
  • Updated rweb-cssom, which can now parse additional CSS constructs.
Commits
  • ee8b615 Version 24.1.1
  • 4c167b3 Update ESLint to v9
  • c8a5103 Update dependencies and dev dependencies
  • b2235af Trigger selectionchange event on document when selection changes
  • 4555914 Version 24.1.0
  • a693107 Fix elements with names from Object.prototype
  • 8738255 Add regression test for comma selector
  • a343932 Implement the getSetCookie() method of Headers
  • f2fa507 Update URLs and fix grammar error
  • 7dc7ab9 Fix getComputedStyle() not-implemented message
  • Additional commits viewable in compare view


Updates matrix-appservice-bridge from 9.0.1 to 10.1.0

Release notes

Sourced from matrix-appservice-bridge's releases.

10.1.0 2024-01-08

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Changelog

Sourced from matrix-appservice-bridge's changelog.

10.1.0 (2024-01-08)

Features

  • Support MSC4040 a.ka. _matrix-fed. SRV records in the host resolver. (#492)

Bugfixes

  • Start checking types on dependencies to avoid publishing broken type releases. (#490)
  • Fix NeDB errors if you haven't installed the nedb packages. (#491)

Internal Changes

  • Update typedoc to 0.25.6 (#489)

10.0.0 (2024-01-05)

Deprecations and Removals

  • Don't use a package alias for @​vector-im/matrix-bot-sdk. (#480)
  • Drop support for Node 18, add support for Node 20, 21. (#487)
  • NeDB-based stores are now deprecated. You may still use them by adding "nedb" as a dependency to your project, but no new features or bugfixes are planned. (#488)

Internal Changes

  • Refactor membership cache. (#477)
Commits


Updates parse-duration from 1.0.2 to 1.1.0

Commits


Updates pg from 8.8.0 to 8.12.0

Changelog

Sourced from pg's changelog.

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

Commits


Updates @types/pg from 8.6.5 to 8.11.6

Commits


Updates shell-quote from 1.7.3 to 1.8.1

Changelog

Sourced from shell-quote's changelog.

v1.8.1 - 2023-04-07

Fixed

  • [Fix] parse: preserve whitespace in comments
    dependabot[bot] commented 1 month ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.