search

topcoder-platform / admin-app

Customer support application
7 stars 25 forks source link

Bump debug, auth0-js and browser-sync #225

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps debug to 2.6.9 and updates ancestor dependencies debug, auth0-js and browser-sync. These dependencies need to be updated together.

Updates debug from 1.0.5 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

  • Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @​zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

  • remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

  • Fix: Module's export default syntax fix for IE8 Expected identifier error
  • Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @​pi0)

... (truncated)

Commits


Updates auth0-js from 6.4.2 to 9.20.0

Release notes

Sourced from auth0-js's releases.

v9.20.0

Added

v9.19.2

Changed

Fixed

v9.19.1

This release includes some clarification updates to the readme, as well as a culmination of security patches from dependabot.

Changed

Security

  • Security: Bump dev dependencies and update lockfile #1244 (evansims)

v9.19.0

This release by default now stores additional cookies for backward compatibility when using the SameSite attribute, for those older browsers that do not understand SameSite=None. As well as creating the normal transaction cookies with Secure=true and SameSite=none, it also stores a _x_compat cookie (where x is the name of the original cookie) which only sets Secure=true.

If the generation of these extra cookies is undesirable or unnecessary for your use case, you can turn them back off by setting legacySameSiteCookie: false in the SDK configuration.

Added

v9.18.1

Fixed

v9.18.0

Added

v9.17.0

Added

  • Add xRequestLanguage, which sends X-Request-Language header to /passwordless/start #1210 (stevehobbsdev)

Fixed

... (truncated)

Changelog

Sourced from auth0-js's changelog.

v9.20.0 (2022-12-13)

Full Changelog

Added

v9.19.2 (2022-11-04)

Full Changelog

Changed

Fixed

v9.19.1 (2022-09-09)

Full Changelog

Changed

Security

  • Security: Bump dev dependencies and update lockfile #1244 (evansims)

v9.19.0 (2022-01-25)

Full Changelog

Added

v9.18.1 (2022-01-14)

Full Changelog

Fixed

... (truncated)

Commits
  • a05f99e Release v9.20.0 (#1280)
  • 05dbf4a Merge pull request #1277 from DominickBattistini/passwordlessCaptcha
  • a03f7f4 Merge branch 'master' into passwordlessCaptcha
  • 3c1b23d Merge pull request #1279 from auth0/dependabot/npm_and_yarn/decode-uri-compon...
  • 68c6a78 Bump decode-uri-component from 0.2.0 to 0.2.2
  • 5fb57ea Add jsdoc for captcha argument on passwordless/start
  • bd35c1a getChallenge to passwordless, additional tests
  • 0e65fb4 renderPasswordlessChallenge
  • de9c54a Release v9.19.2 (#1274)
  • 60563bc support timeout option in Popup.loginWithCredentials (#1273)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by auth0-oss, a new releaser for auth0-js since your current version.


Updates browser-sync from 2.18.13 to 2.27.11

Release notes

Sourced from browser-sync's releases.

2.27.9

What's Changed

A bug prevented the help output from displaying - it was introduced when the CLI parser yargs was updated, and is now fixed :)

Full Changelog: https://github.com/BrowserSync/browser-sync/compare/v2.27.8...v2.27.9

2.27.8

This release upgrades Socket.io (client+server) to the latest versions - solving the following issues, and silencing security warning :)

PR:

Resolved Issues:

Thanks to @​lachieh for the original PR, which helped me land this fix

added snippet: boolean option

This release adds a feature to address BrowserSync/browser-sync#1882

Sometimes you don't want Browsersync to auto-inject it's connection snippet into your HTML - now you can disable it globally via either a CLI param or the new snippet option :)

browser-sync . --no-snippet

or in any Browsersync configuration

const config = {
  snippet: false,
};

the original request was related to Eleventy usage, so here's how that would look

eleventyConfig.setBrowserSyncConfig({
  snippet: false,
});

... (truncated)

Changelog

Sourced from browser-sync's changelog.

2.23.1 (2018-01-01)

2.8.2 (2015-07-31)

Bug Fixes

  • https: add newly generated ssl self-signed certs that will expire for 10 years - fixes (45104a7), closes #750

2.8.1 (2015-07-28)

Bug Fixes

  • web-sockets: Use separate server for web sockets in proxy mode - fixes #625 (40017b4), closes #625

Features

  • serve-static: Added option serveStatic to allow proxy/snippet mode to easily serve local fil (384ef67)

2.7.13 (2015-06-28)

Bug Fixes

  • snippet: Allow async attribute to be removed from snippet with snippetOptions.async = fal (c32bec6), closes #670
  • socket-options: allow socket.domain string|fn for setting domain only on socket path - fixes #69 (5157432), closes #690

Features

  • api: expose sockets to public api (985682c)

2.7.12 (2015-06-17)

Bug Fixes

  • client-script: allow proxy to also use client script middleware (c5fdbbf)
  • client-script: serve cached/gzipped client JS file - fixes #657 (dbe9ffe), closes #657

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/topcoder-platform/admin-app/network/alerts).