webpack / webpack-dev-middleware

A development middleware for webpack
MIT License
2.5k stars 377 forks source link

chore(deps-dev): bump the dependencies group across 1 directory with 7 updates #1949

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the dependencies group with 6 updates in the / directory:

Package From To
@commitlint/cli 19.4.1 19.5.0
@commitlint/config-conventional 19.4.1 19.5.0
express 4.19.2 4.21.0
hono 4.5.11 4.6.1
husky 9.1.5 9.1.6
typescript 5.5.4 5.6.2

Updates @commitlint/cli from 19.4.1 to 19.5.0

Release notes

Sourced from @​commitlint/cli's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v19.4.1...v19.5.0

Changelog

Sourced from @​commitlint/cli's changelog.

19.5.0 (2024-09-11)

Features

Commits


Updates @commitlint/config-conventional from 19.4.1 to 19.5.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v19.4.1...v19.5.0

Changelog

Sourced from @​commitlint/config-conventional's changelog.

19.5.0 (2024-09-11)

Note: Version bump only for package @​commitlint/config-conventional

Commits


Updates express from 4.19.2 to 4.21.0

Release notes

Sourced from express's releases.

4.21.0

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.0 / 2024-09-11

  • Deprecate res.location("back") and res.redirect("back") magic string
  • deps: serve-static@1.16.2
    • includes send@0.19.0
  • deps: finalhandler@1.3.1
  • deps: qs@6.13.0

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits


Updates finalhandler from 1.3.0 to 1.3.1

Changelog

Sourced from finalhandler's changelog.

v2.0.0 / 2024-09-02

  • drop support for node <18
  • ignore status message for HTTP/2 (#53)

v1.2.1 / 2024-09-02

  • Gracefully handle when handling an error and socket is null

1.2.0 / 2022-03-22

  • Remove set content headers that break response
  • deps: on-finished@2.4.1
  • deps: statuses@2.0.1
    • Rename 425 Unordered Collection to standard 425 Too Early

1.1.2 / 2019-05-09

  • Set stricter Content-Security-Policy header
  • deps: parseurl@~1.3.3
  • deps: statuses@~1.5.0

1.1.1 / 2018-03-06

  • Fix 404 output for bad / missing pathnames
  • deps: encodeurl@~1.0.2
    • Fix encoding % as last character
  • deps: statuses@~1.4.0

1.1.0 / 2017-09-24

  • Use res.headersSent when available

1.0.6 / 2017-09-22

  • deps: debug@2.6.9

1.0.5 / 2017-09-15

  • deps: parseurl@~1.3.2
    • perf: reduce overhead for full URLs
    • perf: unroll the "fast-path" RegExp

... (truncated)

Commits


Updates hono from 4.5.11 to 4.6.1

Release notes

Sourced from hono's releases.

v4.6.1

What's Changed

New Contributors

Full Changelog: https://github.com/honojs/hono/compare/v4.6.0...v4.6.1

v4.6.0

Hono v4.6.0 is now available!

One of the highlights of this release is the Context Storage Middleware. Let's introduce it.

Context Storage Middleware

Many users may have been waiting for this feature. The Context Storage Middleware uses AsyncLocalStorage to allow handling of the current Context object even outside of handlers.

For example, let’s define a Hono app with a variable message: string.

type Env = {
  Variables: {
    message: string
  }
}

const app = new Hono<Env>()

To enable Context Storage Middleware, register contextStorage() as middleware at the top and set the message value.

import { contextStorage } from 'hono/context-storage'

//...

app.use(contextStorage())

app.use(async (c, next) => {
c.set('message', 'Hello!')
await next()
})

getContext() returns the current Context object, allowing you to get the value of the message variable outside the handler.

import { getContext } from 'hono/context-storage'

</tr></table>

... (truncated)

Commits


Updates husky from 9.1.5 to 9.1.6

Release notes

Sourced from husky's releases.

v9.1.6

What's Changed

New Contributors

Full Changelog: https://github.com/typicode/husky/compare/v9.1.5...v9.1.6

Commits


Updates typescript from 5.5.4 to 5.6.2

Release notes

Sourced from typescript's releases.

TypeScript 5.6

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.6 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.6 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

Commits
  • a7e3374 Bump version to 5.6.2 and LKG
  • 2063357 🤖 Pick PR #59708 (LEGO: Pull request from lego/hb_537...) into release-5.6 (#...
  • 4fe7e41 🤖 Pick PR #59670 (fix(59649): ts Move to a new file d...) into release-5.6 (#...
  • 1a03e53 🤖 Pick PR #59761 (this can be nullish) into release-5.6 (#59762)
  • 6212132 Update LKG
  • bbb5faf 🤖 Pick PR #59542 (Fixing delay caused in vscode due t...) into release-5.6 (#...
  • e6914a5 Bump version to 5.6.1-rc and LKG
  • 34121c4 Update LKG
  • 2a30c2a Merge remote-tracking branch 'origin/main' into release-5.6
  • 936a79b Expose TypeChecker. getAwaitedType to public (#59268)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 3 weeks ago

Looks like these dependencies are updatable in another way, so this is no longer needed.