Bump the npm_and_yarn group across 1 directory with 8 updates #12
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.21.1` | | [crypto-js](https://github.com/brix/crypto-js) | `3.1.9-1` | `4.2.0` | | [debug](https://github.com/debug-js/debug) | `4.1.1` | `4.3.7` | | [marked](https://github.com/markedjs/marked) | `0.7.0` | `4.0.10` | | [pug](https://github.com/pugjs/pug) | `2.0.4` | `3.0.3` | | [redis](https://github.com/redis/node-redis) | `2.8.0` | `3.1.1` | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `1.132.0` | `3.16.0` | Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `express` from 4.17.1 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md) - [Commits](expressjs/express@4.17.1...4.21.1) Updates `crypto-js` from 3.1.9-1 to 4.2.0 - [Commits](brix/crypto-js@3.1.9-1...4.2.0) Updates `debug` from 4.1.1 to 4.3.7 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.1.1...4.3.7) Updates `marked` from 0.7.0 to 4.0.10 - [Release notes](https://github.com/markedjs/marked/releases) - [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json) - [Commits](markedjs/marked@v0.7.0...v4.0.10) Updates `pug` from 2.0.4 to 3.0.3 - [Release notes](https://github.com/pugjs/pug/releases) - [Commits](https://github.com/pugjs/pug/compare/pug@2.0.4...pug@3.0.3) Updates `redis` from 2.8.0 to 3.1.1 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](redis/node-redis@v.2.8.0...v3.1.1) Updates `simple-git` from 1.132.0 to 3.16.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.16.0/simple-git) --- updated-dependencies: - dependency-name: body-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: crypto-js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: debug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: marked dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: pug dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: redis dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: simple-git dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) |
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
1.19.01.20.34.17.14.21.13.1.9-14.2.04.1.14.3.70.7.04.0.102.0.43.0.32.8.03.1.11.132.03.16.0Updates
body-parserfrom 1.19.0 to 1.20.3Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
... (truncated)
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: qs@6.12.3 (#521)9478591fix: pin to node@22.4.183db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
expressfrom 4.17.1 to 4.21.1Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
... (truncated)
Commits
8e229f94.21.1a024c8afix(deps): cookie@0.7.17e562c64.21.01bcde96fix(deps): qs@6.13.0 (#5946)7d36477fix(deps): serve-static@1.16.2 (#5951)40d2d8ffix(deps): finalhandler@1.3.177ada90Deprecate"back"magic string in redirects (#5935)21df4214.20.04c9ddc1feat: upgrade to serve-static@0.16.09ebe5d5feat: upgrade to send@0.19.0 (#5928)Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.
Updates
crypto-jsfrom 3.1.9-1 to 4.2.0Commits
808f499Merge branch 'release/4.2.0'd5af3aeUpdate release notes.9496e07Bump version.421dd53Change default hash algorithm and iteration's for PBKDF2 to prevent weak secu...d1f4f4dUpdate grunt.c755289Discontinued1da3dabDiscontinued4dcaa7aMerge pull request #380 from Alanscut/dev762feb2chore: rename BF to Blowfishfb81418feat: blowfish supportUpdates
debugfrom 4.1.1 to 4.3.7Release notes
Sourced from debug's releases.
... (truncated)
Commits
bc609144.3.7c63e96eUpgrade ms to version 2.1.3 (#819)382864aremove archaic badges from readmec33b4644.3.67956a45Avoid using deprecated RegExp.$15464bdd4.3.5f244adaupdate authorship contact infocac39b1Fix/debug depth (#926)f66cb2dremove .github folder (and the outdated issue templates)d161662Update ISSUE_TEMPLATE.mdMaintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.
Updates
markedfrom 0.7.0 to 4.0.10Release notes
Sourced from marked's releases.
... (truncated)
Commits
ae01170chore(release): 4.0.10 [skip ci]fceda57🗜️ build [skip ci]8f80657fix(security): fix redos vulnerabilitiesc4a3ccdMerge pull request from GHSA-rrrm-qjm4-v8hfd7212a6chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)5a84db5chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)2bc67a5chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)98996b8chore(deps-dev): Bump@babel/preset-envfrom 7.16.5 to 7.16.7 (#2353)ebc2c95chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)e5171a9chore(release): 4.0.9 [skip ci]Updates
pugfrom 2.0.4 to 3.0.3Release notes
Sourced from pug's releases.
... (truncated)
Commits
32acfe8fix: ensure template names are valid identifiers (#3438)4767cafrefactor: convert pug-error to TypeScript (#3355)a724446chore: update character-parser (#3354)6cca8f7docs: fix GitHub format in README (#3335)d4b7f60Properly handle errors originating from included files when compileDebug is e...d6f0615fix capture groups for "each" statements (#3274)73ea7cffix: keep lexer plugins inside tag interpolation (#3296)29a53c5fix: Fix pug-lexer parsed escaped interpolations incorrectly (#3299)60b1b15chore: update supported versions (#3315)991e78ffix: sanitise and escape theprettyoption (#3314)Maintainer changes
This version was pushed to npm by pug-bot, a new releaser for pug since your current version.
Updates
redisfrom 2.8.0 to 3.1.1Changelog
Sourced from redis's changelog.
Commits
fc28860Bump version to 3.1.1 (#1597)2d11b6dfix #1569 - improve monitor_regex (#1595)7e77de8Add Chat (#1594)5d3e995Merge branch 'master' of https://github.com/NodeRedis/node-redisb797cf2add user to README.md79f34c2Bump version to 3.1.0 (#1590)7fdc54efix for 428e1c8a7b2322c2650294638cb1663ac5692728 - fix auth retry when redis ...09f0fe8"fix" tests428e1c8Add support for Redis 6auth pass [user](#1508)bb208d0Add codeclimate badge (#1572)Maintainer changes
This version was pushed to npm by leibale, a new releaser for redis since your current version.
Updates
simple-gitfrom 1.132.0 to 3.16.0Release notes
Sourced from simple-git's releases.
... (truncated)
Changelog
Sourced from simple-git's changelog.
... (truncated)
Commits
1a12952Version Packagesec97a39Block unsafe pack (push --exec) (#882)0a623e5Feat/unsafe pack (#881)97fde2cAdd support for using the-Bmodifier instead of the default-bwhen usin...edfd459Update readme.mdc9fc61fVersion Packagesde570acFix/non strings (#867)d4764bfVersion Packages7746480Chore: bump lerna, jest and create prettier workflow (#862)6b3c631Create theunsafeplugin to configure howsimple-gittreats known potenti...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.