verdaccio / monorepo

🏰 Core dependencies and plugins for verdaccio 5.x branch ⚠️ DEPRECATED
https://verdaccio.org
MIT License
81 stars 62 forks source link

fix(deps): update all core dependencies #717

Open renovate[bot] opened 3 months ago

renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/cli (source) 7.24.5 -> 7.24.8 age adoption passing confidence
@babel/core (source) 7.24.5 -> 7.25.2 age adoption passing confidence
@babel/node (source) 7.23.9 -> 7.25.0 age adoption passing confidence
@babel/plugin-proposal-decorators (source) 7.24.1 -> 7.24.7 age adoption passing confidence
@babel/plugin-proposal-function-sent (source) 7.24.1 -> 7.24.7 age adoption passing confidence
@babel/plugin-proposal-throw-expressions (source) 7.24.1 -> 7.24.7 age adoption passing confidence
@babel/plugin-transform-async-to-generator (source) 7.24.1 -> 7.24.7 age adoption passing confidence
@babel/plugin-transform-classes (source) 7.24.5 -> 7.25.4 age adoption passing confidence
@babel/plugin-transform-runtime (source) 7.24.3 -> 7.25.4 age adoption passing confidence
@babel/preset-env (source) 7.24.5 -> 7.25.4 age adoption passing confidence
@babel/preset-typescript (source) 7.24.1 -> 7.24.7 age adoption passing confidence
@babel/register (source) 7.23.7 -> 7.24.6 age adoption passing confidence
@babel/runtime (source) 7.24.5 -> 7.25.4 age adoption passing confidence
@types/lodash (source) 4.17.4 -> 4.17.7 age adoption passing confidence
@verdaccio/config (source) 7.0.0-next-7.15 -> 7.0.0-next-7.20 age adoption passing confidence
@verdaccio/core (source) 7.0.0-next-7.15 -> 7.0.0-next-7.20 age adoption passing confidence
@verdaccio/types (source) 12.0.0-next-7.3 -> 12.0.0-next-7.5 age adoption passing confidence
async (source) 3.2.5 -> 3.2.6 age adoption passing confidence
debug 4.3.4 -> 4.3.6 age adoption passing confidence
snyk 1.1291.0 -> 1.1293.0 age adoption passing confidence
typedoc (source) ^0.25.0 -> ^0.26.0 age adoption passing confidence
typedoc-umlclass ^0.9.0 -> ^0.10.0 age adoption passing confidence

Release Notes

babel/babel (@​babel/cli) ### [`v7.24.8`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7248-2024-07-11) [Compare Source](https://togithub.com/babel/babel/compare/v7.24.7...v7.24.8) ##### :eyeglasses: Spec Compliance - `babel-parser` - [#​16567](https://togithub.com/babel/babel/pull/16567) Do not use strict mode in TS `declare` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :bug: Bug Fix - `babel-generator` - [#​16630](https://togithub.com/babel/babel/pull/16630) Correctly print parens around `in` in `for` heads ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#​16626](https://togithub.com/babel/babel/pull/16626) Fix printing of comments in `await using` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#​16591](https://togithub.com/babel/babel/pull/16591) fix typescript code generation for yield expression inside type expre… ([@​SreeXD](https://togithub.com/SreeXD)) - `babel-parser` - [#​16613](https://togithub.com/babel/babel/pull/16613) Disallow destructuring assignment in `using` declarations ([@​H0onnn](https://togithub.com/H0onnn)) - [#​16490](https://togithub.com/babel/babel/pull/16490) fix: do not add `.value: undefined` to regexp literals ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-types` - [#​16615](https://togithub.com/babel/babel/pull/16615) Remove boolean props from `ObjectTypeInternalSlot` visitor keys ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-transform-typescript` - [#​16566](https://togithub.com/babel/babel/pull/16566) fix: Correctly handle `export import x =` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :nail_care: Polish - `babel-generator` - [#​16625](https://togithub.com/babel/babel/pull/16625) Avoid unnecessary parens around `async` in `for await` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-traverse` - [#​16619](https://togithub.com/babel/babel/pull/16619) Avoid checking `Scope.globals` multiple times ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ### [`v7.24.7`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7247-2024-06-05) [Compare Source](https://togithub.com/babel/babel/compare/v7.24.6...v7.24.7) ##### :bug: Bug Fix - `babel-node` - [#​16554](https://togithub.com/babel/babel/pull/16554) Allow extra flags in babel-node ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-traverse` - [#​16522](https://togithub.com/babel/babel/pull/16522) fix: incorrect `constantViolations` with destructuring ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-transform-fixture-test-runner`, `babel-plugin-proposal-explicit-resource-management` - [#​16524](https://togithub.com/babel/babel/pull/16524) fix: Transform `using` in `switch` correctly ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :house: Internal - `babel-helpers`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16525](https://togithub.com/babel/babel/pull/16525) Delete unused array helpers ([@​blakewilson](https://togithub.com/blakewilson)) ### [`v7.24.6`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7246-2024-05-24) [Compare Source](https://togithub.com/babel/babel/compare/v7.24.5...v7.24.6) ##### :bug: Bug Fix - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-class-properties` - [#​16514](https://togithub.com/babel/babel/pull/16514) Fix source maps for private member expressions ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core`, `babel-generator`, `babel-plugin-transform-modules-commonjs` - [#​16515](https://togithub.com/babel/babel/pull/16515) Fix source maps for template literals ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators` - [#​16485](https://togithub.com/babel/babel/pull/16485) Support undecorated static accessor in anonymous classes ([@​JLHwung](https://togithub.com/JLHwung)) - [#​16484](https://togithub.com/babel/babel/pull/16484) Fix decorator bare yield await ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-runtime-corejs3` - [#​16483](https://togithub.com/babel/babel/pull/16483) Fix: throw TypeError if addInitializer is called after finished ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-parser`, `babel-plugin-transform-typescript` - [#​16476](https://togithub.com/babel/babel/pull/16476) fix: Correctly parse `cls.fn = x` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :house: Internal - `babel-core`, `babel-helpers`, `babel-plugin-transform-runtime`, `babel-preset-env`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16501](https://togithub.com/babel/babel/pull/16501) Generate helper metadata at build time ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helpers` - [#​16499](https://togithub.com/babel/babel/pull/16499) Add `tsconfig.json` for `@babel/helpers/src/helpers` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-cli`, `babel-helpers`, `babel-plugin-external-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-modules-commonjs`, `babel-plugin-transform-modules-systemjs`, `babel-plugin-transform-runtime`, `babel-preset-env`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16495](https://togithub.com/babel/babel/pull/16495) Move all runtime helpers to individual files ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-parser`, `babel-traverse` - [#​16482](https://togithub.com/babel/babel/pull/16482) Statically generate boilerplate for bitfield accessors ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - Other - [#​16466](https://togithub.com/babel/babel/pull/16466) Migrate import assertions syntax ([@​JLHwung](https://togithub.com/JLHwung))
verdaccio/verdaccio (@​verdaccio/config) ### [`v7.0.0-next-7.20`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.19...@verdaccio/config@7.0.0-next-7.20) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.19...@verdaccio/config@7.0.0-next-7.20) ### [`v7.0.0-next-7.19`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.18...@verdaccio/config@7.0.0-next-7.19) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.18...@verdaccio/config@7.0.0-next-7.19) ### [`v7.0.0-next-7.18`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.17...@verdaccio/config@7.0.0-next-7.18) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.17...@verdaccio/config@7.0.0-next-7.18) ### [`v7.0.0-next-7.17`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.16...@verdaccio/config@7.0.0-next-7.17) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.16...@verdaccio/config@7.0.0-next-7.17) ### [`v7.0.0-next-7.16`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.15...@verdaccio/config@7.0.0-next-7.16) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.15...@verdaccio/config@7.0.0-next-7.16)
verdaccio/verdaccio (@​verdaccio/core) ### [`v7.0.0-next-7.20`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-720) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.19...@verdaccio/core@7.0.0-next-7.20) ### [`v7.0.0-next-7.19`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-719) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.18...@verdaccio/core@7.0.0-next-7.19) ### [`v7.0.0-next-7.18`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-718) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.17...@verdaccio/core@7.0.0-next-7.18) ### [`v7.0.0-next-7.17`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-717) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.16...@verdaccio/core@7.0.0-next-7.17) ##### Patch Changes - [`6e764e3`](https://togithub.com/verdaccio/verdaccio/commit/6e764e3): feat: add support for npm owner ### [`v7.0.0-next-7.16`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-716) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.15...@verdaccio/core@7.0.0-next-7.16)
caolan/async (async) ### [`v3.2.6`](https://togithub.com/caolan/async/compare/v3.2.5...v3.2.6) [Compare Source](https://togithub.com/caolan/async/compare/v3.2.5...v3.2.6)
debug-js/debug (debug) ### [`v4.3.6`](https://togithub.com/debug-js/debug/releases/tag/4.3.6) [Compare Source](https://togithub.com/debug-js/debug/compare/4.3.5...4.3.6) #### What's Changed - Avoid using deprecated RegExp.$1 by [@​bluwy](https://togithub.com/bluwy) in [https://github.com/debug-js/debug/pull/969](https://togithub.com/debug-js/debug/pull/969) #### New Contributors - [@​bluwy](https://togithub.com/bluwy) made their first contribution in [https://github.com/debug-js/debug/pull/969](https://togithub.com/debug-js/debug/pull/969) **Full Changelog**: https://github.com/debug-js/debug/compare/4.3.5...4.3.6 ### [`v4.3.5`](https://togithub.com/debug-js/debug/releases/tag/4.3.5) [Compare Source](https://togithub.com/debug-js/debug/compare/4.3.4...4.3.5) ### Patch - [`cac39b1`](https://togithub.com/debug-js/debug/commit/cac39b1c5b018b0fe93a53a05f084eee543d17f5) Fix/debug depth ([#​926](https://togithub.com/debug-js/debug/issues/926)) Thank you [@​calvintwr](https://togithub.com/calvintwr) for the fix.
snyk/snyk (snyk) ### [`v1.1293.0`](https://togithub.com/snyk/cli/releases/tag/v1.1293.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1292.4...v1.1293.0) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) ##### News - Starting with this version, Snyk cli binaries will be distributed via `downloads.snyk.io` instead of `static.snyk.io`. This includes intallation from `npm`, `homebrew` and `scoop` as well as many of the CI/CD integrations. ##### Features - **sbom:** add support for license issues in sbom test ([6948668](https://togithub.com/snyk/snyk/commit/6948668d57523c2e7fd76ff363cf2d1625b6f0f3)) - **auth:** Use OAuth2 as default authentication mechanism ([35949c4](https://togithub.com/snyk/snyk/commit/35949c4acdd3bcbd510a6ac076523f21366b91c2)) - **config:** Introduce config environment command ([0d8dd2b](https://togithub.com/snyk/snyk/commit/0d8dd2b04278e38fe5fd335ec3023f753c944988)) - **container:** When docker is not installed, platform parameter is now supported ([64b405d](https://togithub.com/snyk/snyk/commit/64b405d02733fb2423798f4cfbff19fa04110c2d)) ##### Bug Fixes - **auth:** align auth failure error messages for oauth ([e3bfec3](https://togithub.com/snyk/snyk/commit/e3bfec354e56499a2266a45804d0a93d17f46bce)) - **auth:** ensure environment variable precedence for auth tokens ([24417d6](https://togithub.com/snyk/snyk/commit/24417d6e7c7661c1a288a1f01502af17fdb54e64)) - **test:** fix a bug related to multi-project .NET folder structures ([755a38f](https://togithub.com/snyk/snyk/commit/755a38fc6b5c7b4f7631fced9e8f0fd8ed391819)) - **test:** multiple pnpm workspace improvements ([da5c14f](https://togithub.com/snyk/snyk/commit/da5c14fc344f17c7ac8c0969f2e0cb24ba59b6cd)) - **test:** fixes a bug regarding Snyk attempting to get the dependencies from the wrong nuget \*.deps.json file.([2e17434](https://togithub.com/snyk/snyk/commit/2e17434de99d342ea7dcedf5ba5bd250aae85eb3)) - **test:** support for pipenv with python 3.12 ([09df3bc](https://togithub.com/snyk/snyk/commit/09df3bc7dbcb184a56021ead7703732fa66ea273)) - **test:** support multi-part comparison for python pip versions. ([b625eb9](https://togithub.com/snyk/snyk/commit/b625eb90410d69047ef87b65cc0289f9360251fe)) - **container:** container monitor with --json now outputs valid json([039c9bd](https://togithub.com/snyk/snyk/commit/039c9bd13efa9397a8e442e80206bfabcc529125)) - **container:** support hashing large .jar files ([6f82231](https://togithub.com/snyk/snyk/commit/6f822317209e8b60bb07bf073bdcb9c78f402eb8)) - **sbom:** fix issues in JSON output of `sbom test` command, include CWE values on `CWE` property ([#​5331](https://togithub.com/snyk/snyk/issues/5331)) ([99773c3](https://togithub.com/snyk/snyk/commit/99773c3eac6c41c61c9da7fc0f1b991e5298dc37)) - **sbom:** include all detected dep-graphs of a container image ([ea43977](https://togithub.com/snyk/snyk/commit/ea439770e88093d1a99d88957f48ea63ea82b09a)) - **iac:** fixed an issue where the resource path was missing for certain Terraform resources. [IAC-3015](\[0b5823a]\(https://github.com/snyk/snyk/commit/0b5823ae2673bfbec7a055c881e8055eeb8c01ee\)) - **general:** map previously unhandled exit codes to exit code 2 ([9fde4fe](https://togithub.com/snyk/snyk/commit/9fde4fec680f2ae0650baf6b1cfed5908984e9ef)) - **general:** use entitlements when signing bundled macos binaries ([bebc59c](https://togithub.com/snyk/snyk/commit/bebc59cbfbd20aef2e8531845579f2d78c5b07ca)) ### [`v1.1292.4`](https://togithub.com/snyk/cli/releases/tag/v1.1292.4) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1292.3...v1.1292.4) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) #### Complete changelog ##### Bug Fixes - **deployment:** Rollback of digital signature for the bundled macOS binary ([#​5416](https://togithub.com/snyk/cli/pull/5416)) ### [`v1.1292.3`](https://togithub.com/snyk/cli/releases/tag/v1.1292.3) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1292.2...v1.1292.3) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) ##### Complete changelog ##### Bug Fixes - **deployment:** Add digital signature for the bundled macOS binary ([#​5404](https://togithub.com/snyk/cli/pull/5404)) ### [`v1.1292.2`](https://togithub.com/snyk/cli/releases/tag/v1.1292.2) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1292.1...v1.1292.2) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) #### Complete changelog ##### Bug Fixes - **container test:** Improve the accuracy of identifying npm projects within docker images by removing the explicit folder ignore rules ([#​5384](https://togithub.com/snyk/snyk/issues/5384)) - **container test:** Pass platform parameter when pulling an image from a container registry ([#​5360](https://togithub.com/snyk/snyk/issues/5360)) ### [`v1.1292.1`](https://togithub.com/snyk/cli/releases/tag/v1.1292.1) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1292.0...v1.1292.1) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) #### Complete changelog ##### Bug Fixes - **test,monitor**: fix improper permission error handling when accessing 'enablePnpmCli' feature flag ### [`v1.1292.0`](https://togithub.com/snyk/cli/releases/tag/v1.1292.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1291.1...v1.1292.0) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) ##### News This Snyk CLI release delivers an assortment of bug fixes and improvements. - We've added support for pnpm, giving you more flexibility in your project setup. - You can now scan npm/yarn projects even without lockfiles, ensuring comprehensive vulnerability detection regardless of your dependency management approach. - We're committed to strengthening security. This release includes redaction of additional sensitive data in debug logs, minimizing potential risks. #### Complete changelog ##### Features - **test:** Added pnpm support under 'enablePnpmCli' feature flag ([#​5181](https://togithub.com/snyk/snyk/issues/5181)) ([46769cc](https://togithub.com/snyk/snyk/commit/46769ccefc0c9ca98a44ad4bdd2b4d8161294dbf)) - **test:** Support scan of npm/yarn projects without lockfiles ([e2d77a9](https://togithub.com/snyk/snyk/commit/e2d77a93da3701f4ade32e7432f870945c3763b2)) - **monitor:** Set target-reference in the monitor request ([51ed8f5](https://togithub.com/snyk/snyk/commit/51ed8f53595d7545537900762836823ced29c958)) - **code:** Centrally check if code test is enabled ([#​5239](https://togithub.com/snyk/snyk/issues/5239)) ([e5a00e2](https://togithub.com/snyk/snyk/commit/e5a00e24cbe17b3b9859a39d74f1fe85e773ae4b)) - **sbom:** Improve depgraph for Maven projects ([fbb33d7](https://togithub.com/snyk/snyk/commit/fbb33d7e17f5866501abd4e4022e86eecb390415)) - **sbom:** Use RFC 3339 for all timestamps in sbom test result ([#​5204](https://togithub.com/snyk/snyk/issues/5204)) ([91bf191](https://togithub.com/snyk/snyk/commit/91bf1911997534c0bc2a6c0e093cf113f1292c49)) - **language-server:** Add --all-projects flag scans by default[#​5247](https://togithub.com/snyk/snyk/issues/5247)k/snyk/issues/5247\)) ([fdcf30e](https://togithub.com/snyk/snyk/commit/fdcf30e7421b7f8342d11003508f293661264a66)) - **language-server:** Enable incremental scanning[#​5291](https://togithub.com/snyk/snyk/issues/5291)k/snyk/issues/5291\)) ([d198685](https://togithub.com/snyk/snyk/commit/d1986856b152419e1712fa2c35b9b73303c428f9)) - **language-server:** Add support for IDE themes ([c1c4d08](https://togithub.com/snyk/snyk/commit/c1c4d0805252ee96c7e081edd6b4e42a23cee3b8)) - **language-server:** Consistent styling across intellij and vscode ([#​5282](https://togithub.com/snyk/snyk/issues/5282)) ([9aa6f76](https://togithub.com/snyk/snyk/commit/9aa6f76201661e8270a92ccc38c75285df435634)) - **logging:** Redact additional types of sensitive data from debug logs ([#​5254](https://togithub.com/snyk/snyk/issues/5254)) ([056cdab](https://togithub.com/snyk/snyk/commit/056cdab070102aec927db831090b5bb82df9d31e)) ##### Bug Fixes - **auth:** Autodetect IDE usage and fallback to API token based authentication ([#​5241](https://togithub.com/snyk/snyk/issues/5241)) ([4c795e0](https://togithub.com/snyk/snyk/commit/4c795e008e17386ac04466a45a9785e81258853b)) - **iac:** Upgrade iac custom rules to address Vulnerabilities[#​5191](https://togithub.com/snyk/snyk/issues/5191)yk/snyk/issues/5191\)) ([453db24](https://togithub.com/snyk/snyk/commit/453db24fb3fa8e58e4a69920ba18045ecbd650a2)) - **language-server:** Caching problem when no vulnerabilities in the IDE ([#​5223](https://togithub.com/snyk/snyk/issues/5223)) ([89c9491](https://togithub.com/snyk/snyk/commit/89c949162edd89d0553b6e6cbb1c14c62379eae9)) - **language-server:** Remove incorrect /v1 path ([#​5214](https://togithub.com/snyk/snyk/issues/5214)) ([cf16470](https://togithub.com/snyk/snyk/commit/cf16470090b6f1db7fd7f7577a243e4d356d843f)) - **dependencies:** Update dependencies to reduce vulnerabilities ([#​5131](https://togithub.com/snyk/snyk/issues/5131)) ([4c7cb3c](https://togithub.com/snyk/snyk/commit/4c7cb3cd0931e0b8717425ac4857b116cee001ee)) - **sbom:** sbom test output padding ([e3b7cac](https://togithub.com/snyk/snyk/commit/e3b7cac1b3fc628407e1ba520302f3569684d115)) - **sbom:** Fix container purl generation for apt and rpm ([#​5207](https://togithub.com/snyk/snyk/issues/5207)) ([fa9d512](https://togithub.com/snyk/snyk/commit/fa9d512512203adcdc133ed988ac260543f8816a)) - **sbom:** Retain error code during SBOM generation ([#​5202](https://togithub.com/snyk/snyk/issues/5202)) ([5e98aaa](https://togithub.com/snyk/snyk/commit/5e98aaa6b14fe2d3622a3cc1ce76b655f43bb42c)) - **test:** support cyclic dependencies in maven with dverbose ([#​5208](https://togithub.com/snyk/snyk/issues/5208)) ([fb24c02](https://togithub.com/snyk/snyk/commit/fb24c024a8bee69ae59acf79adfac7866255b2b7)) - **test:** Add tool version and informationUri to sarif output ([#​5203](https://togithub.com/snyk/snyk/issues/5203)) ([b899fd3](https://togithub.com/snyk/snyk/commit/b899fd3af211e8b95656a08b9b0ecefc086ef5d5)) - **test:** fixing several .NET bugs ([#​5217](https://togithub.com/snyk/snyk/issues/5217)) ([c27d767](https://togithub.com/snyk/snyk/commit/c27d7671c1c9d20089f10663b71875e6bcf05481)) - **test:** fixing a bug causing .NET beta scanning to fail on older versions of .NET ([#​5228](https://togithub.com/snyk/snyk/issues/5228)) ([5fdecf7](https://togithub.com/snyk/snyk/commit/5fdecf72e6f370bd31baadce6d1e5273018798c1)) - **test:** .NET runtime resolution testing now supports projects targeting .NET Standard frameworks ([#​5169](https://togithub.com/snyk/snyk/issues/5169)) ([44d0861](https://togithub.com/snyk/snyk/commit/44d0861e41de81f847c6b57c74a67c5fc816e9df)) - **test:** fix issues of type 'Cannot find module ...' in snyk-docker-plugin ([#​5301](https://togithub.com/snyk/snyk/issues/5301)) ([88efd54](https://togithub.com/snyk/snyk/commit/88efd549956513fd3052de8af47da5d0a1bfb477)) - **monitor:** fix project name when using assets-project-name flag ([#​5077](https://togithub.com/snyk/snyk/issues/5077)) ([57dc718](https://togithub.com/snyk/snyk/commit/57dc7189eb6c353041b8526af3fe939b0526d996)) ### [`v1.1291.1`](https://togithub.com/snyk/cli/releases/tag/v1.1291.1) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1291.0...v1.1291.1) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) ##### Bug Fixes - **dependencies:** Upgrade go-getter to v1.7.4 to fix vulnerabilities ([#​5252](https://togithub.com/snyk/snyk/issues/5252))
TypeStrong/TypeDoc (typedoc) ### [`v0.26.6`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0266-2024-08-18) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.5...v0.26.6) ##### Features - Use of the `@extends` block tag no longer produces warnings, [#​2659](https://togithub.com/TypeStrong/TypeDoc/issues/2659). This tag should only be used in JavaScript projects to specify the type parameters used when extending a parent class. It will not be rendered. - Added new `navigation.compactFolders` option to prevent TypeDoc from compacting folders, similar to the VSCode option. [#​2667](https://togithub.com/TypeStrong/TypeDoc/issues/2667). ##### Bug Fixes - The `suppressCommentWarningsInDeclarationFiles` option now correctly ignores warnings in `.d.cts` and `.d.mts` files, [#​2647](https://togithub.com/TypeStrong/TypeDoc/issues/2647). - Restored re-exports in the page navigation menu, [#​2671](https://togithub.com/TypeStrong/TypeDoc/issues/2671). - JSON serialized projects will no longer contain reflection IDs for other projects created in the same run. [Gerrit0/typedoc-plugin-zod#6](https://togithub.com/Gerrit0/typedoc-plugin-zod/issues/6). - In packages mode the reflection ID counter will no longer be reset when converting projects. This previously could result in links to files not working as expected. ### [`v0.26.5`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0265-2024-07-21) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.4...v0.26.5) ##### Features - TypeDoc now exposes array option defaults under `OptionDefaults`, [#​2640](https://togithub.com/TypeStrong/TypeDoc/issues/2640). ##### Bug Fixes - Constructor parameters which share a name with a property on a parent class will no longer inherit the comment on the parent class, [#​2636](https://togithub.com/TypeStrong/TypeDoc/issues/2636). - Packages mode will now attempt to use the comment declared in the comment class for inherited members, [#​2622](https://togithub.com/TypeStrong/TypeDoc/issues/2622). - TypeDoc no longer crashes when `@document` includes an empty file, [#​2638](https://togithub.com/TypeStrong/TypeDoc/issues/2638). - API: Event listeners added later with the same priority will be called later, [#​2643](https://togithub.com/TypeStrong/TypeDoc/issues/2643). ##### Thanks! - [@​bladerunner2020](https://togithub.com/bladerunner2020) ### [`v0.26.4`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0264-2024-07-10) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.3...v0.26.4) ##### Bug Fixes - The page navigation sidebar no longer incorrectly includes re-exports if the same member is exported with multiple names [#​2625](https://togithub.com/TypeStrong/TypeDoc/issues/2625). - Page navigation now ensures the current page is visible when the page is first loaded, [#​2626](https://togithub.com/TypeStrong/TypeDoc/issues/2626). - If a relative linked image is referenced multiple times, TypeDoc will no longer sometimes produce invalid links to the image [#​2627](https://togithub.com/TypeStrong/TypeDoc/issues/2627). - `@link` tags will now be validated in referenced markdown documents, [#​2629](https://togithub.com/TypeStrong/TypeDoc/issues/2629). - `@link` tags are now resolved in project documents, [#​2629](https://togithub.com/TypeStrong/TypeDoc/issues/2629). - HTML/JSON output generated by TypeDoc now contains a trailing newline, [#​2632](https://togithub.com/TypeStrong/TypeDoc/issues/2632). - TypeDoc now correctly handles markdown documents with CRLF line endings, [#​2628](https://togithub.com/TypeStrong/TypeDoc/issues/2628). - `@hidden` is now properly applied when placed in a function implementation comment, [#​2634](https://togithub.com/TypeStrong/TypeDoc/issues/2634). - Comments on re-exports are now rendered. ##### Thanks! - [@​bukowa](https://togithub.com/bukowa) - [@​garrett-hopper](https://togithub.com/garrett-hopper) ### [`v0.26.3`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0263-2024-06-28) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.2...v0.26.3) ##### Features - "On This Page" navigation now includes the page groups in collapsible sections, [#​2616](https://togithub.com/TypeStrong/TypeDoc/issues/2616). ##### Bug Fixes - `mailto:` links are no longer incorrectly recognized as relative paths, [#​2613](https://togithub.com/TypeStrong/TypeDoc/issues/2613). - Added `@since` to the default list of recognized tags, [#​2614](https://togithub.com/TypeStrong/TypeDoc/issues/2614). - Relative paths to directories will no longer cause the directory to be copied into the media directory, [#​2617](https://togithub.com/TypeStrong/TypeDoc/issues/2617). ### [`v0.26.2`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0262-2024-06-24) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.1...v0.26.2) ##### Features - Added a `--suppressCommentWarningsInDeclarationFiles` option to disable warnings from parsing comments in declaration files, [#​2611](https://togithub.com/TypeStrong/TypeDoc/issues/2611). - Improved comment discovery to more closely match TypeScript's discovery when getting comments for members of interfaces/classes, [#​2084](https://togithub.com/TypeStrong/TypeDoc/issues/2084), [#​2545](https://togithub.com/TypeStrong/TypeDoc/issues/2545). ##### Bug Fixes - The `text` non-highlighted language no longer causes warnings when rendering, [#​2610](https://togithub.com/TypeStrong/TypeDoc/issues/2610). - If a comment on a method is inherited from a parent class, and the child class does not use an `@param` tag from the parent, TypeDoc will no longer warn about the `@param` tag. ### [`v0.26.1`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0261-2024-06-22) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.26.0...v0.26.1) ##### Features - Improved Korean translation coverage, [#​2602](https://togithub.com/TypeStrong/TypeDoc/issues/2602). ##### Bug Fixes - Added `@author` to the default list of recognized tags, [#​2603](https://togithub.com/TypeStrong/TypeDoc/issues/2603). - Anchor links are no longer incorrectly checked for relative paths, [#​2604](https://togithub.com/TypeStrong/TypeDoc/issues/2604). - Fixed an issue where line numbers reported in error messages could be incorrect, [#​2605](https://togithub.com/TypeStrong/TypeDoc/issues/2605). - Fixed relative link detection for markdown links containing code in their label, [#​2606](https://togithub.com/TypeStrong/TypeDoc/issues/2606). - Fixed an issue with packages mode where TypeDoc would use (much) more memory than required, [#​2607](https://togithub.com/TypeStrong/TypeDoc/issues/2607). - TypeDoc will no longer crash when asked to render highlighted code for an unsupported language, [#​2609](https://togithub.com/TypeStrong/TypeDoc/issues/2609). - Fixed an issue where relatively-linked files would not be copied to the output directory in packages mode. - Fixed an issue where modifier tags were not applied to top level modules in packages mode. - Fixed an issue where excluded tags were not removed from top level modules in packages mode. - `.jsonc` configuration files are now properly read as JSONC, rather than being passed to `require`. ##### Thanks! - [@​KNU-K](https://togithub.com/KNU-K) ### [`v0.26.0`](https://togithub.com/TypeStrong/TypeDoc/blob/HEAD/CHANGELOG.md#v0260-2024-06-22) [Compare Source](https://togithub.com/TypeStrong/TypeDoc/compare/v0.25.13...v0.26.0) ##### Breaking Changes - Drop support for Node 16. - Moved from `marked` to `markdown-it` for parsing as marked has moved to an async model which supporting would significantly complicate TypeDoc's rendering code. This means that any projects setting `markedOptions` needs to be updated to use `markdownItOptions`. Unlike `marked@4`, `markdown-it` pushes lots of functionality to plugins. To use plugins, a JavaScript config file must be used with the `markdownItLoader` option. - Updated Shiki from 0.14 to 1.x. This should mostly be a transparent update which adds another 23 supported languages and 13 supported themes. As Shiki adds additional languages, the time it takes to load the highlighter increases linearly. To avoid rendering taking longer than necessary, TypeDoc now only loads a few common languages. Additional languages can be loaded by setting the `--highlightLanguages` option. - Changed default of `--excludePrivate` to `true`. - Renamed `--sitemapBaseUrl` to `--hostedBaseUrl` to reflect that it can be used for more than just the sitemap. - Removed deprecated `navigation.fullTree` option. - Removed `--media` option, TypeDoc will now detect image links within your comments and markdown documents and automatically copy them to the site. - Removed `--includes` option, use the `@document` tag instead. - Removed `--stripYamlFrontmatter` option, TypeDoc will always do this now. - Renamed the `--htmlLang` option to `--lang`. - Removed the `--gaId` option for Google Analytics integration and corresponding `analytics` theme member, [#​2600](https://togithub.com/TypeStrong/TypeDoc/issues/2600). - All function-likes may now have comments directly attached to them. This is a change from previous versions of TypeDoc where functions comments were always moved down to the signature level. This mostly worked, but caused problems with type aliases, so was partially changed in 0.25.13. This change was extended to apply not only to type aliases, but also other function-likes declared with variables and callable properties. As a part of this change, comments on the implementation signature of overloaded functions will now be added to the function reflection, and will not be inherited by signatures of that function, [#​2521](https://togithub.com/TypeStrong/TypeDoc/issues/2521). - API: TypeDoc now uses a typed event emitter to provide improved type safety, this found a bug where `Converter.EVENT_CREATE_DECLARATION` was emitted for `ProjectReflection` in some circumstances. - API: `MapOptionDeclaration.mapError` has been removed. - API: Deprecated `BindOption` decorator has been removed. - API: `DeclarationReflection.indexSignature` has been renamed to `DeclarationReflection.indexSignatures`. Note: This also affects JSON serialization. TypeDoc will support JSON output from 0.25 through at least 0.26. - API: `JSONOutput.SignatureReflection.typeParameter` has been renamed to `typeParameters` to match the JS API. - API: `DefaultThemeRenderContext.iconsCache` has been removed as it is no longer needed. - API: `DefaultThemeRenderContext.hook` must now be passed `context` if required by the hook. ##### Features - Added support for TypeScript 5.5. - Added new `--projectDocuments` option to specify additional Markdown documents to be included in the generated site [#​247](https://togithub.com/TypeStrong/TypeDoc/issues/247), [#​1870](https://togithub.com/TypeStrong/TypeDoc/issues/1870), [#​2288](https://togithub.com/TypeStrong/TypeDoc/issues/2288), [#​2565](https://togithub.com/TypeStrong/TypeDoc/issues/2565). - TypeDoc now has the architecture in place to support localization. No languages besides English are currently shipped in the package, but it is now possible to add support for additional languages, [#​2475](https://togithub.com/TypeStrong/TypeDoc/issues/2475). - Added support for a `packageOptions` object which specifies options that should be applied to each entry point when running with `--entryPointStrategy packages`, [#​2523](https://togithub.com/TypeStrong/TypeDoc/issues/2523). - `--hostedBaseUrl` will now be used to generate a `` element in the project root page, [#​2550](https://togithub.com/TypeStrong/TypeDoc/issues/2550). - Added support for documenting individual elements of a union type, [#​2585](https://togithub.com/TypeStrong/TypeDoc/issues/2585). Note: This feature is only available on type aliases directly containing unions. - TypeDoc will now log the number of errors/warnings errors encountered, if any, after a run, [#​2581](https://togithub.com/TypeStrong/TypeDoc/issues/2581). - New option, `--customFooterHtml` to add custom HTML to the generated page footer, [#​2559](https://togithub.com/TypeStrong/TypeDoc/issues/2559). - TypeDoc will now copy modifier tags to children if specified in the `--cascadedModifierTags` option, [#​2056](https://togithub.com/TypeStrong/TypeDoc/issues/2056). - TypeDoc will now warn if mutually exclusive modifier tags are specified for a comment (e.g. both `@alpha` and `@beta`), [#​2056](https://togithub.com/TypeStrong/TypeDoc/issues/2056). - Groups and categories can now be collapsed in the page body, [#​2330](https://togithub.com/TypeStrong/TypeDoc/issues/2330). - Added support for JSDoc `@hideconstructor` tag. This tag should only be used to work around [TypeScript#58653](https://togithub.com/TypeScript/TypeDoc/issues/58653), prefer the more general `@hidden`/`@ignore` tag to hide members normally, [#​2577](https://togithub.com/TypeStrong/TypeDoc/issues/2577). - Added `--useHostedBaseUrlForAbsoluteLinks` option to use the `--hostedBaseUrl` option to produce absolute links to pages on a site, [#​940](https://togithub.com/TypeStrong/TypeDoc/issues/940). - Tag headers now generate permalinks in the default theme, [#​2308](https://togithub.com/TypeStrong/TypeDoc/issues/2308). - TypeDoc now attempts to use the "most likely name" for a symbol if the symbol is not present in the documentation, [#​2574](https://togithub.com/TypeStrong/TypeDoc/issues/2574). - Fixed an issue where the "On This Page" section would include markdown if the page contained headings which contained markdown. - TypeDoc will now warn if a block tag is used which is not defined by the `--blockTags` option. - Added three new sort strategies `documents-first`, `documents-last`, and `alphabetical-ignoring-documents` to order markdown documents. - Added new `--alwaysCreateEntryPointModule` option. When set, TypeDoc will always create a `Module` for entry points, even if only one is provided. If `--projectDocuments` is used to add documents, this option defaults to `true`, otherwise, defaults to `false`. - Added new `--highlightLanguages` option to control what Shiki language packages are loaded. - TypeDoc will now render union elements on new lines if there are more than 3 items in the union. - TypeDoc will now only render the "Type Declaration" section if it will provide additional information not already presented in the page. This results in significantly smaller documentation pages in many cases where that section would just repeat what has already been presented in the rendered type. - Added `comment.beforeTags` and `comment.afterTags` hooks for plugin use. Combined with `CommentTag.skipRendering` this can be used to provide custom

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

socket-security[bot] commented 2 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/cli@7.24.8 Transitive: environment, filesystem, shell +20 806 kB nicolo-ribaudo
npm/@babel/core@7.25.2 environment, filesystem, unsafe +41 11.2 MB nicolo-ribaudo
npm/@babel/node@7.25.0 Transitive: environment, eval, filesystem, shell +47 5.51 MB nicolo-ribaudo
npm/@babel/plugin-proposal-decorators@7.24.7 Transitive: environment +32 7.56 MB nicolo-ribaudo
npm/@babel/plugin-proposal-function-sent@7.24.7 Transitive: environment +26 6.64 MB nicolo-ribaudo
npm/@babel/plugin-proposal-throw-expressions@7.24.7 None +2 255 kB nicolo-ribaudo
npm/@babel/plugin-transform-async-to-generator@7.24.7 Transitive: environment +28 6.76 MB nicolo-ribaudo
npm/@babel/plugin-transform-classes@7.25.4 Transitive: environment, filesystem +37 9.49 MB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/plugin-transform-runtime@7.25.4 Transitive: environment, filesystem, unsafe +49 13.1 MB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/preset-env@7.25.4 Transitive: environment, filesystem, unsafe +152 25.3 MB existentialism, hzoo, jlhwung, ...1 more
npm/@babel/preset-typescript@7.24.7 Transitive: environment +39 8.16 MB nicolo-ribaudo
npm/@babel/register@7.24.6 environment, filesystem, unsafe +21 1.18 MB nicolo-ribaudo
npm/@babel/runtime@7.25.4 None +1 276 kB nicolo-ribaudo
npm/@types/lodash@4.17.7 None 0 867 kB types
npm/@verdaccio/config@7.0.0-next-7.20 environment, filesystem +9 1.44 MB verdaccio.npm
npm/@verdaccio/core@7.0.0-next-7.20 filesystem, network Transitive: environment, eval, unsafe +13 2.83 MB verdaccio.npm
npm/@verdaccio/types@12.0.0-next-7.5 None 0 70.2 kB verdaccio.npm
npm/async@3.2.6 None 0 808 kB aearly
npm/debug@4.3.6 environment +1 49.3 kB qix
npm/snyk@1.1293.0 environment, filesystem, network, shell Transitive: eval, unsafe +32 50.7 MB snyk-admin

🚮 Removed packages: npm/@babel/cli@7.24.5), npm/@babel/core@7.24.5), npm/@babel/node@7.23.9), npm/@babel/plugin-proposal-decorators@7.24.1), npm/@babel/plugin-proposal-function-sent@7.24.1), npm/@babel/plugin-proposal-throw-expressions@7.24.1), npm/@babel/plugin-transform-async-to-generator@7.24.1), npm/@babel/plugin-transform-classes@7.24.5), npm/@babel/plugin-transform-runtime@7.24.3), npm/@babel/preset-env@7.24.5), npm/@babel/preset-typescript@7.24.1), npm/@babel/register@7.23.7), npm/@babel/runtime@7.24.5), npm/@types/lodash@4.17.4), npm/@verdaccio/config@7.0.0-next-7.15), npm/@verdaccio/core@7.0.0-next-7.15), npm/@verdaccio/types@12.0.0-next-7.3), npm/async@3.2.5), npm/snyk@1.1291.0)

View full report↗︎

socket-security[bot] commented 2 months ago

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎