Closed dependabot[bot] closed 4 months ago
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/cli-spinners@2.9.2 | None | 0 |
32.1 kB | sindresorhus |
npm/escalade@3.1.2 | filesystem | 0 |
11.6 kB | lukeed |
npm/get-caller-file@2.0.5 | None | 0 |
4.72 kB | stefanpenner |
npm/ieee754@1.2.1 | None | 0 |
6.8 kB | feross |
npm/inherits@2.0.4 | None | 0 |
3.96 kB | isaacs |
npm/mime-db@1.52.0 | None | 0 |
206 kB | dougwilson |
npm/object-assign@4.1.1 | None | 0 |
5.49 kB | sindresorhus |
npm/os-tmpdir@1.0.2 | None | 0 |
3.06 kB | sindresorhus |
npm/safer-buffer@2.1.2 | None | 0 |
42.3 kB | chalker |
npm/signal-exit@3.0.7 | None | 0 |
9.96 kB | isaacs |
npm/util-deprecate@1.0.2 | None | 0 |
5.48 kB | tootallnate |
🚮 Removed packages: npm/@babel/plugin-proposal-class-properties@7.18.6, npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6, npm/@babel/plugin-proposal-optional-chaining@7.21.0, npm/@babel/plugin-syntax-export-default-from@7.24.1, npm/@babel/plugin-syntax-flow@7.24.1, npm/@babel/plugin-transform-flow-strip-types@7.24.1, npm/@babel/plugin-transform-react-display-name@7.24.1, npm/@babel/plugin-transform-react-jsx@7.23.4, npm/is-docker@2.2.1, npm/is-wsl@2.2.0, npm/metro-config@0.80.9, npm/metro-core@0.80.9, npm/metro@0.80.9
Superseded by #11.
Bumps the npm_and_yarn group with 3 updates in the / directory: braces, undici and ws.
Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
undici
from 6.17.0 to 6.19.2Release notes
Sourced from undici's releases.
... (truncated)
Commits
532b7b2
Bumped v6.19.2 (#3342)a7441d8
fix: interceptors.d.ts has no default export (#3332)5dadb95
build: usehusky
ashusky install
is deprecated (#3340)035524e
fix #3337 (#3338)f6b9b44
Bumped v6.19.1 (#3336)1573f69
don't append empty origin (#3335)981fb3d
Bumped v6.19.039869b2
feature: support pre-shared sessions (#3325)7f54a24
doc: clearify the behaviour ofbodyTimeout
in the request (#3324)9785b15
build(deps): bump node frome6d4495
to075a5cc
in /build (#3326)Updates
ws
from 6.2.2 to 6.2.3Release notes
Sourced from ws's releases.
Commits
d87f3b6
[dist] 6.2.3eeb76d3
[security] Fix crash when the Upgrade header cannot be read (#2231)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show