Bump the npm_and_yarn group across 2 directories with 17 updates - #6
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Copy link
Copy Markdown
Sorry, something went wrong.
Bumps the npm_and_yarn group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `2.6.0` | `2.6.4` | | [atob](https://github.com/coolaj86/node-browser-compat) | `2.0.3` | `2.1.2` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [chownr](https://github.com/isaacs/chownr) | `1.0.1` | `1.1.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.0` | `6.5.5` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.40` | `0.10.64` | | [extend](https://github.com/justmoon/node-extend) | `3.0.1` | `3.0.2` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.3` | `1.2.13` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.6.0` | `2.8.9` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.5` | `4.17.21` | | [macaddress](https://github.com/scravy/node-macaddress) | `0.2.8` | `0.2.9` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.5` | `1.0.7` | | [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` | Bumps the npm_and_yarn group with 17 updates in the /crx directory: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `2.6.0` | `2.6.4` | | [atob](https://github.com/coolaj86/node-browser-compat) | `2.0.3` | `2.1.2` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [chownr](https://github.com/isaacs/chownr) | `1.0.1` | `1.1.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.0` | `6.5.5` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.40` | `0.10.64` | | [extend](https://github.com/justmoon/node-extend) | `3.0.1` | `3.0.2` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.3` | `1.2.13` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.6.0` | `2.8.9` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [lodash](https://github.com/lodash/lodash) | `4.17.5` | `4.17.21` | | [macaddress](https://github.com/scravy/node-macaddress) | `0.2.8` | `0.2.9` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [mixin-deep](https://github.com/jonschlinkert/mixin-deep) | `1.3.1` | `1.3.2` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.5` | `1.0.7` | | [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` | Updates `async` from 2.6.0 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.0...v2.6.4) Updates `atob` from 2.0.3 to 2.1.2 - [Commits](https://github.com/coolaj86/node-browser-compat/commits) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `chownr` from 1.0.1 to 1.1.4 - [Commits](isaacs/chownr@v1.0.1...v1.1.4) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `elliptic` from 6.4.0 to 6.5.5 - [Commits](indutny/elliptic@v6.4.0...v6.5.5) Updates `es5-ext` from 0.10.40 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.40...v0.10.64) Updates `extend` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v3.0.1...v3.0.2) Updates `fsevents` from 1.1.3 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.3...v1.2.13) Updates `hosted-git-info` from 2.6.0 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.6.0...v2.8.9) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `lodash` from 4.17.5 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.5...4.17.21) Updates `macaddress` from 0.2.8 to 0.2.9 - [Release notes](https://github.com/scravy/node-macaddress/releases) - [Commits](scravy/node-macaddress@0.2.8...0.2.9) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `mixin-deep` from 1.3.1 to 1.3.2 - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Updates `path-parse` from 1.0.5 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `async` from 2.6.0 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.0...v2.6.4) Updates `atob` from 2.0.3 to 2.1.2 - [Commits](https://github.com/coolaj86/node-browser-compat/commits) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `chownr` from 1.0.1 to 1.1.4 - [Commits](isaacs/chownr@v1.0.1...v1.1.4) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `elliptic` from 6.4.0 to 6.5.5 - [Commits](indutny/elliptic@v6.4.0...v6.5.5) Updates `es5-ext` from 0.10.40 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.40...v0.10.64) Updates `extend` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v3.0.1...v3.0.2) Updates `fsevents` from 1.1.3 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.3...v1.2.13) Updates `hosted-git-info` from 2.6.0 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.6.0...v2.8.9) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Updates `lodash` from 4.17.5 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.5...4.17.21) Updates `macaddress` from 0.2.8 to 0.2.9 - [Release notes](https://github.com/scravy/node-macaddress/releases) - [Commits](scravy/node-macaddress@0.2.8...0.2.9) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `mixin-deep` from 1.3.1 to 1.3.2 - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Updates `path-parse` from 1.0.5 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) --- updated-dependencies: - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: atob dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: extend dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: macaddress dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mixin-deep dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: atob dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: extend dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: macaddress dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mixin-deep dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 17 updates in the / directory:
Bumps the npm_and_yarn group with 17 updates in the /crx directory:
Updates async from 2.6.0 to 2.6.4
ChangelogSourced from async's changelog.
Commits- c6bdaca Version 2.6.4
- 8870da9 Update built files
- 4df6754 update changelog
- 8f7f903 Fix prototype pollution vulnerability (#1828)
- f1d8383 Version 2.6.3
- 2b674c1 update changelog
- eab740f fix: udpate lodash. closes #1675
- eaf32be Version 2.6.2
- 684b42e Update built files
- e1bd3da update changelog
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates atob from 2.0.3 to 2.1.2
CommitsUpdates browserify-sign from 4.0.4 to 4.2.3
ChangelogSourced from browserify-sign's changelog.
... (truncated)
Commits- bf2c3ec v4.2.3
- 9247adf [patch] widen support to 0.12
- f427270 [Deps] update `parse-asn1
- 87f3a35 [Dev Deps] update aud, npmignore, tape
- fb261ce [Deps] update elliptic
- 4d0ee49 [patch] drop minimum node support to v1
- 9e2bf12 [Deps] pin hash-base to ~3.0, due to a breaking change
- 168e16f [Deps] pin elliptic due to a breaking change
- 37a4758 [actions] remove redundant finisher
- 4af5a90 v4.2.2
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates chownr from 1.0.1 to 1.1.4
CommitsUpdates decode-uri-component from 0.2.0 to 0.2.2
Release notesSourced from decode-uri-component's releases.
CommitsUpdates elliptic from 6.4.0 to 6.5.5
CommitsUpdates es5-ext from 0.10.40 to 0.10.64
Release notesSourced from es5-ext's releases.
... (truncated)
ChangelogSourced from es5-ext's changelog.
... (truncated)
CommitsUpdates extend from 3.0.1 to 3.0.2
ChangelogSourced from extend's changelog.
CommitsUpdates fsevents from 1.1.3 to 1.2.13
Release notesSourced from fsevents's releases.
CommitsUpdates hosted-git-info from 2.6.0 to 2.8.9
ChangelogSourced from hosted-git-info's changelog.
... (truncated)
Commits- 8d4b369 chore(release): 2.8.9
- 29adfe5 fix: backport regex fix from #76
- afeaefd chore(release): 2.8.8
- 5038b18 fix: #61 & #65 addressing issues w/ url.URL implmentation which regressed nod...
- 7440afa chore(release): 2.8.7
- 2d0bb66 fix: Do not attempt to use url.URL when unavailable
- f2cdfcf fix: Do not pass scp-style URLs to the WhatWG url.URL
- e1b83df chore(release): 2.8.6
- ff259a6 Ensure passwords in hosted Git URLs are correctly escaped
- 624fd6f chore(release): 2.8.5
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.
Updates loader-utils from 1.1.0 to 1.4.2
Release notesSourced from loader-utils's releases.
... (truncated)
ChangelogSourced from loader-utils's changelog.
... (truncated)
Commits- 331ad50 chore(release): 1.4.2
- 17cbf8f fix: ReDoS problem (#226)
- 8f082b3 chore(release): 1.4.1
- 4504e34 fix: security problem (#220)
- d95b8b5 chore(release): 1.4.0
- cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)
- 06d36cf chore(release): 1.3.0
- 469eeba feat: support the [query] template for the interpolatedName method (#162)
- 909c99d chore: funding.yml config and CI fix (#159)
- b5b74f0 Set up CI with Azure Pipelines
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.
Updates lodash from 4.17.5 to 4.17.21
Commits- f299b52 Bump to v4.17.21
- c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
- 3469357 Prevent command injection through _.template's variable option
- ded9bc6 Bump to v4.17.20.
- 63150ef Documentation fixes.
- 00f0f62 test.js: Remove trailing comma.
- 846e434 Temporarily use a custom fork of lodash-cli.
- 5d046f3 Re-enable Travis tests on 4.17 branch.
- aa816b3 Remove /npm-package.
- d7fbc52 Bump to v4.17.19
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates macaddress from 0.2.8 to 0.2.9
Release notesSourced from macaddress's releases.
CommitsUpdates minimatch from 3.0.4 to 3.1.2
CommitsUpdates mixin-deep from 1.3.1 to 1.3.2
Commits- 754f0c2 1.3.2
- 90ee1fa ensure keys are valid when mixing in values
- See full diff in compare view
Maintainer changesThis version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.
Updates path-parse from 1.0.5 to 1.0.7
CommitsUpdates y18n from 3.2.1 to 3.2.2
Release notesSourced from y18n's releases.
Commits- See full diff in compare view
Maintainer changesThis version was pushed to npm by oss-bot, a new releaser for y18n since your current version.
Updates async from 2.6.0 to 2.6.4
ChangelogSourced from async's changelog.
Commits- c6bdaca Version 2.6.4
- 8870da9 Update built files
- 4df6754 update changelog
- 8f7f903 Fix prototype pollution vulnerability (#1828)
- f1d8383 Version 2.6.3
- 2b674c1 update changelog
- eab740f fix: udpate lodash. closes #1675
- eaf32be Version 2.6.2
- 684b42e Update built files
- e1bd3da update changelog
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates atob from 2.0.3 to 2.1.2
CommitsUpdates browserify-sign from 4.0.4 to 4.2.3
ChangelogSourced from browserify-sign's changelog.