search

zuck / alighieri

A distraction-free tool for novelists and writers
https://zuck.github.io/alighieri/
MIT License
118 stars 25 forks source link

chore(deps): bump express and @quasar/app #27

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps express to 4.17.3 and updates ancestor dependency @quasar/app. These dependencies need to be updated together.

Updates express from 4.17.1 to 4.17.3

Release notes

Sourced from express's releases.

4.17.3

  • deps: accepts@~1.3.8
    • deps: mime-types@~2.1.34
    • deps: negotiator@0.6.3
  • deps: body-parser@1.19.2
    • deps: bytes@3.1.2
    • deps: qs@6.9.7
    • deps: raw-body@2.4.3
  • deps: cookie@0.4.2
  • deps: qs@6.9.7
    • Fix handling of __proto__ keys
  • pref: remove unnecessary regexp for trust proxy

4.17.2

  • Fix handling of undefined in res.jsonp
  • Fix handling of undefined when "json escape" is enabled
  • Fix incorrect middleware execution with unanchored RegExps
  • Fix res.jsonp(obj, status) deprecation message
  • Fix typo in res.is JSDoc
  • deps: body-parser@1.19.1
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
    • deps: qs@6.9.6
    • deps: raw-body@2.4.2
    • deps: safe-buffer@5.2.1
    • deps: type-is@~1.6.18
  • deps: content-disposition@0.5.4
    • deps: safe-buffer@5.2.1
  • deps: cookie@0.4.1
    • Fix maxAge option to reject invalid values
  • deps: proxy-addr@~2.0.7
    • Use req.socket over deprecated req.connection
    • deps: forwarded@0.2.0
    • deps: ipaddr.js@1.9.1
  • deps: qs@6.9.6
  • deps: safe-buffer@5.2.1
  • deps: send@0.17.2
    • deps: http-errors@1.8.1
    • deps: ms@2.1.3
    • pref: ignore empty http tokens
  • deps: serve-static@1.14.2
    • deps: send@0.17.2
  • deps: setprototypeof@1.2.0
Changelog

Sourced from express's changelog.

4.17.3 / 2022-02-16

  • deps: accepts@~1.3.8
    • deps: mime-types@~2.1.34
    • deps: negotiator@0.6.3
  • deps: body-parser@1.19.2
    • deps: bytes@3.1.2
    • deps: qs@6.9.7
    • deps: raw-body@2.4.3
  • deps: cookie@0.4.2
  • deps: qs@6.9.7
    • Fix handling of __proto__ keys
  • pref: remove unnecessary regexp for trust proxy

4.17.2 / 2021-12-16

  • Fix handling of undefined in res.jsonp
  • Fix handling of undefined when "json escape" is enabled
  • Fix incorrect middleware execution with unanchored RegExps
  • Fix res.jsonp(obj, status) deprecation message
  • Fix typo in res.is JSDoc
  • deps: body-parser@1.19.1
    • deps: bytes@3.1.1
    • deps: http-errors@1.8.1
    • deps: qs@6.9.6
    • deps: raw-body@2.4.2
    • deps: safe-buffer@5.2.1
    • deps: type-is@~1.6.18
  • deps: content-disposition@0.5.4
    • deps: safe-buffer@5.2.1
  • deps: cookie@0.4.1
    • Fix maxAge option to reject invalid values
  • deps: proxy-addr@~2.0.7
    • Use req.socket over deprecated req.connection
    • deps: forwarded@0.2.0
    • deps: ipaddr.js@1.9.1
  • deps: qs@6.9.6
  • deps: safe-buffer@5.2.1
  • deps: send@0.17.2
    • deps: http-errors@1.8.1
    • deps: ms@2.1.3
    • pref: ignore empty http tokens
  • deps: serve-static@1.14.2
    • deps: send@0.17.2
  • deps: setprototypeof@1.2.0
Commits
  • 3d7fce5 4.17.3
  • f906371 build: update example dependencies
  • 6381bc6 deps: qs@6.9.7
  • a007863 deps: body-parser@1.19.2
  • e98f584 Revert "build: use minimatch@3.0.4 for Node.js < 4"
  • a659137 tests: use strict mode
  • a39e409 tests: prevent leaking changes to NODE_ENV
  • 82de4de examples: fix path traversal in downloads example
  • 12310c5 build: use nyc for test coverage
  • 884657d examples: remove bitwise syntax for includes check
  • Additional commits viewable in compare view


Updates @quasar/app from 2.0.8 to 2.4.3

Release notes

Sourced from @​quasar/app's releases.

@​quasar/app-v2.4.3

Fixes

  • fix(app): (backport from Qv2's q/app-*) preFetch may error out with newer vue-router #14172

Donations

Quasar Framework is an open-source MIT licensed project that has been made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider:

@​quasar/app-v2.4.2

Changes

  • feat(app): upgraded deps
  • fix(app/ts): enable type-checking to Vue files

Donations

Quasar Framework is an open-source MIT licensed project that has been made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider:

@​quasar/app-v2.4.0/1

  • feat(app): Upgrade to Vue 2.7 [2.7.1] (support for: composition API, SFC script setup, CSS v-bind)

Warning before upgrading and using linting

Due to the requirements of Vue 2.7 enforced by Vue Team you should also upgrade your linting packages:

1) package.json

For JS only (not TS):

// old
"babel-eslint": "^10.0.1",
"eslint": "^7.21.0",
"eslint-plugin-vue": "^7.7.0",
"eslint-loader": "^3.0.3",

// new
"@​babel/eslint-parser": "^7.13.14",
"eslint": "^8.10.0",
"eslint-plugin-vue": "^9.0.0",
"eslint-webpack-plugin": "^2.0.0",

For TS only:

// old
</tr></table>

... (truncated)

Commits
  • d24bf40 chore(app): Bump version
  • 60d0ddf feat(docs): Update QBtn/QBreadcrumbs/QItem/QRouteTab pages for the updated ro...
  • 6603aa2 feat(QTabs): tweak updateActiveRoute + improve tabs-router example
  • 0c77106 feat(QTabs): enhance updateActiveRoute algorithm -- now has queryScore too
  • e0c43f7 chore(ui/API): update addedIn version for a few features
  • 7d152e9 feat(ui): Ability to cancel navigation for QBreadcrumbsEl/QItem; enhance canc...
  • cebd845 feat(touch events): use passive mode in more cases #12822 (#14474)
  • 5221ac1 chore(QTabs): shorter algorithm for onClick
  • f5671d5 fix(QTabs): wait for router navigation confirmation before update model
  • 0ccf68f fix(QTabs): correctly unwatch route at unregister
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zuck/alighieri/network/alerts).