Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm_and_yarn group with 7 updates #4530

Merged
merged 1 commit into from
Nov 15, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2024

Bumps the npm_and_yarn group with 7 updates:

Package From To
cookie 0.4.2 0.7.1
lighthouse 12.2.1 12.2.2
braces 2.3.2 3.0.3
webpack 4.47.0 5.95.0
elliptic 6.5.7 6.6.1
http-proxy-middleware 2.0.6 2.0.7
mermaid 10.8.0 11.4.0

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates lighthouse from 12.2.1 to 12.2.2

Changelog

Sourced from lighthouse's changelog.

12.2.2 (2024-11-14)

Full Changelog

We expect this release to ship in the DevTools of Chrome 133, and to PageSpeed Insights within 2 weeks.

New contributors

Thanks to our new contributors 👽🐷🐰🐯🐻!

Core

  • network-monitor: treat EventSource as non-critical (#16225)
  • target-manager: ignore target if type is unknown (#16221)

CLI

  • create writeFile destination if necessary (#15990)

Deps

  • upgrade puppeteer to 23.8.0 (#16248)
  • upgrade third-party-web to 0.26.1 (#16219)
  • upgrade puppeteer to 23.5.2 (#16220)
  • lighthouse-stack-packs: upgrade to 1.12.2 (#16242)
  • lodash: migrate lodash to lodash-es (#16211)
  • sentry: upgrade to v7 (#16215)

Clients

  • lr: set CPU throttling based on benchmark (#16226)
  • lr: fix wrong render-blocking-resources transfer size (#16190)

I18n

Docs

  • readme: add lighthouse-matchers to related projects (#16239)
  • readme: add Guardius to services list (#16235)

Tests

  • smoke: fix devtools test runner & a11y errors (#16236)

Misc

... (truncated)

Commits

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

  • The undocumented .makeRe method was removed

Non-breaking changes

  • Caching was removed
Commits

Updates webpack from 4.47.0 to 5.95.0

Release notes

Sourced from webpack's releases.

v5.95.0

Bug Fixes

  • Fixed hanging when attempting to read a symlink-like file that it can't read
  • Handle default for import context element dependency
  • Merge duplicate chunks call after split chunks
  • Generate correctly code for dynamically importing the same file twice and destructuring
  • Use content hash as [base] and [name] for extracted DataURI's
  • Distinguish module and import in module-import for externals import's
  • [Types] Make EnvironmentPlugin default values types less strict
  • [Types] Typescript 5.6 compatibility

New Features

  • Add new optimization.avoidEntryIife option (true by default for the production mode)
  • Pass output.hash* options to loader context

Performance

  • Avoid unneeded re-visit in build chunk graph

v5.94.0

Bug Fixes

  • Added runtime condition for harmony reexport checked
  • Handle properly data/http/https protocols in source maps
  • Make bigint optimistic when browserslist not found
  • Move @​types/eslint-scope to dev deps
  • Related in asset stats is now always an array when no related found
  • Handle ASI for export declarations
  • Mangle destruction incorrect with export named default properly
  • Fixed unexpected asi generation with sequence expression
  • Fixed a lot of types

New Features

  • Added new external type "module-import"
  • Support webpackIgnore for new URL() construction
  • [CSS] @import pathinfo support

Security

  • Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

  • Generate correct relative path to runtime chunks
  • Makes DefinePlugin quieter under default log level
  • Fixed mangle destructuring default in namespace import

... (truncated)

Commits
  • e20fd63 chore(release): 5.95.0
  • 4866b0d feat: added new optimization.entryIife option
  • d90f692 fix: merge duplicate chunks after split chunks
  • 90dec30 fix(externals): distinguish “module” and “import” in “module-import”
  • c1a0a46 fix(externals): distinguish “module” and “import” in “module-import”
  • 14d8fa8 fix: all tests cases
  • dae16ad feat: pass output.hash* options to loader context
  • 75d185d feat: pass output.hash* options to loader context
  • 46e0b9c test: update
  • 8e62f9f test
  • Additional commits viewable in compare view

Updates elliptic from 6.5.7 to 6.6.1

Commits

Updates http-proxy-middleware from 2.0.6 to 2.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.7

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7

v2.0.7-beta.1

Full Changelog: chimurai/http-proxy-middleware@v2.0.7-beta.0...v2.0.7-beta.1

v2.0.7-beta.0

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7-beta.0

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.7

  • ci(github actions): add publish.yml
  • fix(filter): handle errors
Commits

Updates mermaid from 10.8.0 to 11.4.0

Release notes

Sourced from mermaid's releases.

[email protected]

Minor Changes

  • #5999 742ad7c Thanks @​knsv! - Adding Kanban board, a new diagram type

  • #5880 bdf145f Thanks @​yari-dewalt! - Class diagram changes:

    • Updates the class diagram to the new unified way of rendering.
    • Includes a new "classBox" shape to be used in diagrams
    • Other updates such as:
      • the option to hide the empty members box in class diagrams,
      • support for handDrawn look,
      • the introduction of the classDef statement into class diagrams,
      • support for styling the default class,
      • support lollipop interfaces.
    • Includes fixes / additions for #5562 #3139 and #4037

Patch Changes

[email protected]

Minor Changes

Patch Changes

  • #5849 6c5b7ce Thanks @​ReneLombard! - Fixed an issue when the mermaid classdiagram crashes when adding a . to the namespace. Forexample

    classDiagram
      namespace Company.Project.Module {
        class GenericClass~T~ {
          +addItem(item: T)
          +getItem() T
        }
      }
    
    Loading
  • #5914 de2c05c Thanks @​aloisklink! - Ban DOMPurify v3.1.7 as a dependency

... (truncated)

Commits
  • 56f522e Merge pull request #6008 from mermaid-js/changeset-release/master
  • d4e5acc Version Packages
  • ef9cbb6 Merge pull request #6009 from mermaid-js/chore/fix-changeset-for-#5880
  • 8a0ecc1 chore: update changeset for #5880
  • c6e1271 Merge pull request #6007 from mermaid-js/release/11.4.0
  • b022943 [autofix.ci] apply automated fixes
  • 97c61d8 added changeset for class diagram
  • 1c66237 test(unit): update docs unit test snapshot
  • 8ef5d32 Typescript fixes
  • c1ca351 Fix (tmp) for handling of config of htmlLabels ion note. MOvint class box out...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `0.7.1` |
| [lighthouse](https://github.com/GoogleChrome/lighthouse) | `12.2.1` | `12.2.2` |
| [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` |
| [webpack](https://github.com/webpack/webpack) | `4.47.0` | `5.95.0` |
| [elliptic](https://github.com/indutny/elliptic) | `6.5.7` | `6.6.1` |
| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.6` | `2.0.7` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `10.8.0` | `11.4.0` |


Updates `cookie` from 0.4.2 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.2...v0.7.1)

Updates `lighthouse` from 12.2.1 to 12.2.2
- [Release notes](https://github.com/GoogleChrome/lighthouse/releases)
- [Changelog](https://github.com/GoogleChrome/lighthouse/blob/main/changelog.md)
- [Commits](GoogleChrome/lighthouse@v12.2.1...v12.2.2)

Updates `braces` from 2.3.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/commits/3.0.3)

Updates `webpack` from 4.47.0 to 5.95.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v4.47.0...v5.95.0)

Updates `elliptic` from 6.5.7 to 6.6.1
- [Commits](indutny/elliptic@v6.5.7...v6.6.1)

Updates `http-proxy-middleware` from 2.0.6 to 2.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.7)

Updates `mermaid` from 10.8.0 to 11.4.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/mermaid-js/mermaid/compare/[email protected])

---
updated-dependencies:
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lighthouse
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mermaid
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 15, 2024

The following labels could not be found: pr: dependencies.

@dependabot dependabot bot requested a review from ajay-dhangar as a code owner November 15, 2024 14:28
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great job, @dependabot[bot]! 🎉 Thank you for submitting your pull request to CodeHarborHub. We appreciate your contribution and enthusiasm! Our team will review it soon. If you have any questions or need further assistance, feel free to reach out. Thanks for contributing!

Copy link
Contributor

deepsource-io bot commented Nov 15, 2024

Here's the code health analysis summary for commits b5fef66..ecadb8b. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link
Member

@ajay-dhangar ajay-dhangar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💖

@ajay-dhangar ajay-dhangar merged commit 77e04a7 into main Nov 15, 2024
8 of 9 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-7d31631540 branch November 15, 2024 14:33
Copy link

⚡️ Lighthouse Report for the Deploy Preview of this PR 🚀

🔗 Site: CodeHarborHub | Live Site

URL 🌐 Performance Accessibility Best Practices SEO 📊
/ 🔴 28 🟡 82 🟡 75 🟢 100 📄
/docs 🟡 56 🟢 90 🟢 96 🟢 100 📄
/docs/category/javascript 🟡 64 🟢 90 🟢 96 🟢 100 📄
/courses 🟡 51 🟢 90 🟢 96 🟢 100 📄
/courses/category/reactjs 🟡 64 🟢 90 🟢 96 🟢 100 📄
/blog 🟡 54 🟢 90 🟢 96 🟡 86 📄
/showcase 🟡 54 🟢 91 🟡 75 🟡 86 📄
/community 🟡 61 🟢 90 🟢 96 🟢 100 📄
/docs/tags 🟡 57 🟢 90 🟢 96 🟡 86 📄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant