chore: bump the npm_and_yarn group across 1 directory with 19 updates #303
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [got](https://github.com/sindresorhus/got) | `8.3.1` | `11.8.5` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `17.4.4` | `19.0.3` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [highlight.js](https://github.com/highlightjs/highlight.js) | `9.16.2` | `10.7.3` | | [lowlight](https://github.com/wooorm/lowlight) | `1.13.1` | `1.20.0` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [mout](https://github.com/mout/mout) | `0.11.1` | `1.2.4` | | [iso-3166-1-alpha-2](https://github.com/georgzoeller/iso-3166-1-alpha-2) | `1.0.0` | `1.0.2` | | [nanoid](https://github.com/ai/nanoid) | `3.1.23` | `removed` | | [mocha](https://github.com/mochajs/mocha) | `9.0.2` | `11.1.0` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.6.1` | `1.8.2` | Updates `got` from 8.3.1 to 11.8.5 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v8.3.1...v11.8.5) Updates `semantic-release` from 17.4.4 to 19.0.3 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v17.4.4...v19.0.3) Updates `ansi-regex` from 2.1.1 to 3.0.0 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@2.1.1...v3.0.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `highlight.js` from 9.16.2 to 10.7.3 - [Release notes](https://github.com/highlightjs/highlight.js/releases) - [Changelog](https://github.com/highlightjs/highlight.js/blob/10.7.3/CHANGES.md) - [Commits](highlightjs/highlight.js@9.16.2...10.7.3) Updates `lowlight` from 1.13.1 to 1.20.0 - [Release notes](https://github.com/wooorm/lowlight/releases) - [Changelog](https://github.com/wooorm/lowlight/blob/main/changelog.md) - [Commits](wooorm/lowlight@1.13.1...1.20.0) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `mout` from 0.11.1 to 1.2.4 - [Changelog](https://github.com/mout/mout/blob/master/CHANGELOG.md) - [Commits](mout/mout@v0.11.1...v1.2.4) Updates `iso-3166-1-alpha-2` from 1.0.0 to 1.0.2 - [Release notes](https://github.com/georgzoeller/iso-3166-1-alpha-2/releases) - [Commits](https://github.com/georgzoeller/iso-3166-1-alpha-2/commits) Removes `nanoid` Updates `mocha` from 9.0.2 to 11.1.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v9.0.2...v11.1.0) Updates `node-fetch` from 2.6.1 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.1...v2.7.0) Updates `npm` from 7.17.0 to 8.19.4 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/v8.19.4/CHANGELOG.md) - [Commits](npm/cli@v7.17.0...v8.19.4) Updates `@npmcli/arborist` from 2.6.2 to 5.6.3 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/arborist-v5.6.3/workspaces/arborist/CHANGELOG.md) - [Commits](https://github.com/npm/cli/commits/arborist-v5.6.3/workspaces/arborist) Updates `ip` from 1.1.5 to 2.0.0 - [Commits](indutny/node-ip@v1.1.5...v2.0.0) Updates `tar` from 6.1.0 to 6.1.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.0...v6.1.11) Updates `serialize-javascript` from 6.0.0 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.0...v6.0.2) Updates `shell-quote` from 1.6.1 to 1.8.2 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.6.1...v1.8.2) --- updated-dependencies: - dependency-name: got dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: semantic-release dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: highlight.js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lowlight dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mout dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: iso-3166-1-alpha-2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@npmcli/arborist" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
This was referenced Feb 20, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the / directory:
8.3.111.8.517.4.419.0.33.0.23.0.30.2.00.2.29.16.210.7.31.13.11.20.01.2.51.2.80.11.11.2.41.0.01.0.23.1.23removed9.0.211.1.01.6.11.8.2Updates
gotfrom 8.3.1 to 11.8.5Release notes
Sourced from got's releases.
... (truncated)
Commits
5e17bb711.8.5bce8ce7Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc8ced192Fix build670eb0411.8.420f29feBackport #1543: Initialize globalResponse in case of ignored HTTPError (#2017)0da732f11.8.39463bb6Bump cacheable-request dependency (#1921)0e167b8HTTPError code set to 'HTTPError' #1711 (#1739)f896aa511.8.23bd245fInstantiate CacheableLookup only when needed (#1529)Updates
semantic-releasefrom 17.4.4 to 19.0.3Release notes
Sourced from semantic-release's releases.
... (truncated)
Commits
58a226ffix(log-repo): use the original form of the repo url to remove the need to ma...17d60d3build(deps): bump npm from 8.3.1 to 8.12.0 (#2447)ab45ab1chore(lint): disabled rules that dont apply to this project (#2408)ea389c3chore(deps): update dependency yargs-parser to 13.1.2 [security] (#2402)fa994dbbuild(deps): bump node-fetch from 2.6.1 to 2.6.7 (#2399)b79116bbuild(deps): bump trim-off-newlines from 1.0.1 to 1.0.36fd7e56build(deps): bump minimist from 1.2.5 to 1.2.62b94bb4docs: update broken link to CI config recipes (#2378)b4bc191docs: Correct circleci workflow (#2365)2c30e26Merge pull request #2333 from semantic-release/nextUpdates
ansi-regexfrom 2.1.1 to 3.0.0Commits
0a8cc193.0.0d9d806eMinor tweaks69bebf6Support urxvt escapes (#13)3dff5e7Use Map instead of Object for the fixturesbaacbabRequire Node.js 4 and meta tweaksUpdates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
highlight.jsfrom 9.16.2 to 10.7.3Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.
... (truncated)
Commits
0c4cc8a(chore) release 10.7.3d38b332fix(parser) Resolve issue with missing TS property (#3225)00233d6(chore) release 10.7.24630cde(chore) throttle deprecation messages (#3092)421b23b(chore) fix TS issue, bump 10.7.17ec45af(chore) bump version to 10.7.0bfb5a59enh(parser) new highlight() API (#3053)6f24850(cleanup) better boolean naming695ff64(chore) add shebang for build script23ae72c(chore) rename master branch to mainMaintainer changes
This version was pushed to npm by highlightjs_bot, a new releaser for highlight.js since your current version.
Updates
lowlightfrom 1.13.1 to 1.20.0Release notes
Sourced from lowlight's releases.
Commits
a16ced31.20.0f551808Update linksf2156f9UpdateHighlight.jsto~10.7.006d3e3fUpdate dev-dependencies128f916Remove release jobbc0934c1.19.0cd70821UpdateHighlight.jsto~10.6.02d4c8a61.18.0d2793e5Update dev-dependenciesfdbbf14UpdateHighlight.jsto~10.5.0Updates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
moutfrom 0.11.1 to 1.2.4Changelog
Sourced from mout's changelog.
... (truncated)
Commits
a1faf70v1.2.417ffdc2Merge pull request #279 from ssong/fix-for-CVE-2022-2121303fe21bchore: run pretest0892a37fix: mitigate prototype pollutioned23d74test: check for prototype pollution93e99c9Merge branch 'master' of github.com:mout/moutea3d2d8Merge branch 'SepehrAsh-master'1416daccorrects formatting1edd6cfMerge branch 'master' of https://github.com/SepehrAsh/mout into SepehrAsh-master707eb48Merge pull request #266 from mout/dependabot/npm_and_yarn/showdown-1.9.1Maintainer changes
This version was pushed to npm by roboshoes, a new releaser for mout since your current version.
Updates
iso-3166-1-alpha-2from 1.0.0 to 1.0.2Commits
Removes
nanoidUpdates
mochafrom 9.0.2 to 11.1.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
a87fb11chore(main): release 11.1.0 (#5277)3c191c0feat: replacestrip-ansiwithutil.stripVTControlCharacters(#5267)8f1c8d8feat: bump yargs to 17 (#5165)6caa902chore(main): release 11.0.2 (#5269)259f8f8fix: catch exceptions setting Error.stackTraceLimit (#5254)210d658fix: error handling for unexpected numeric arguments passed to cli (#5263)6f10d12docs: replace "New in" with "Since" in version annotations (#5262)f729cd0docs: correct outdatedstatus: accepting prslink (#5268)4c558fbchore(main): release 11.0.1 (#5257)a5bd707Release v11.0.1Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
node-fetchfrom 2.6.1 to 2.7.0Release notes
Sourced from node-fetch's releases.
... (truncated)
Commits
9b9d458feat:AbortError(#1744)65ae25afix: Remove the default connection close header (#1765)8bc3a7cfix: socket variable testing for undefined (#1726)afb36f6Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7fix: handle bom in text and json (#1739)70f592dfix: "global is not defined" (#1704)0f1ebb0Prevent error when response is null (#1699)6e9464dci(release): install dependenciesdd2a0baci(release): install dependencies49bef02ci(release): use latest Node LTSMaintainer changes
This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.
Updates
npmfrom 7.17.0 to 8.19.4Release notes
Sourced from npm's releases.