Bump the npm_and_yarn group across 1 directory with 14 updates #131
+23,267
−15,494
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [gatsby](https://github.com/gatsbyjs/gatsby) | `2.20.25` | `4.25.7` | | [gatsby-plugin-sharp](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-sharp) | `2.5.6` | `4.25.1` | | [gatsby-transformer-remark](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-transformer-remark) | `2.7.3` | `5.25.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [minimist](https://github.com/minimistjs/minimist) | `0.2.1` | `0.2.4` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `2.6.0` | `` | | [graphql-tools](https://github.com/ardatan/graphql-tools/tree/HEAD/packages/graphql-tools) | `6.0.10` | `6.2.6` | Updates `gatsby` from 2.20.25 to 4.25.7 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/compare/gatsby@2.20.25...gatsby@4.25.7) Updates `gatsby-plugin-sharp` from 2.5.6 to 4.25.1 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-sharp/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-plugin-sharp@4.25.1/packages/gatsby-plugin-sharp) Updates `gatsby-transformer-remark` from 2.7.3 to 5.25.1 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-transformer-remark/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/gatsby-transformer-remark@5.25.1/packages/gatsby-transformer-remark) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `engine.io` from 3.4.1 to 6.2.1 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@3.4.1...6.2.1) Updates `flat` from 4.1.0 to 5.0.2 - [Release notes](https://github.com/hughsk/flat/releases) - [Commits](hughsk/flat@4.1.0...5.0.2) Updates `minimatch` from 3.0.3 to 3.0.4 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.3...v3.0.4) Updates `minimist` from 0.2.1 to 0.2.4 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.2.1...v0.2.4) Updates `http-cache-semantics` from 3.8.1 to 4.1.0 - [Commits](kornelski/http-cache-semantics@v3.8.1...v4.1.0) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Removes `simple-git` Updates `graphql-tools` from 6.0.10 to 6.2.6 - [Release notes](https://github.com/ardatan/graphql-tools/releases) - [Changelog](https://github.com/ardatan/graphql-tools/blob/master/packages/graphql-tools/CHANGELOG.md) - [Commits](https://github.com/ardatan/graphql-tools/commits/graphql-tools@6.2.6/packages/graphql-tools) Updates `socket.io-parser` from 3.3.0 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@3.3.0...4.2.4) Updates `ua-parser-js` from 0.7.21 to 1.0.37 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/1.0.37/changelog.md) - [Commits](faisalman/ua-parser-js@0.7.21...1.0.37) --- updated-dependencies: - dependency-name: gatsby dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: gatsby-plugin-sharp dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: gatsby-transformer-remark dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: flat dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: simple-git dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: graphql-tools dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates in the / directory:
2.20.254.25.72.5.64.25.12.7.35.25.10.2.00.2.20.2.10.2.46.5.26.5.32.6.06.0.106.2.6Updates
gatsbyfrom 2.20.25 to 4.25.7Release notes
Sourced from gatsby's releases.
... (truncated)
Commits
db5eb18chore(release): Publishfc22f4bfix(gatsby): don't serve codeframes for files outside of compilation (#38059)...8889bfechore(release): Publishd3d5fd0fix(gatsby-source-wordpress): prevent inconsistent schema customization (#377...5bdef4afix(gatsby): don't block event loop during inference (#37780) (#37801)50e3f94chore(release): Publish3f8477dchore: Update get-unowned-packages script to use npm 9 syntaxdcf88edfix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...3be4a80chore(release): Publish98c4d27feat(gatsby): add initial webhook body env var to bootstrap context (#37478) ...Updates
gatsby-plugin-sharpfrom 2.5.6 to 4.25.1Release notes
Sourced from gatsby-plugin-sharp's releases.
... (truncated)
Changelog
Sourced from gatsby-plugin-sharp's changelog.
... (truncated)
Commits
50e3f94chore(release): Publishdcf88edfix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...5e72a5dchore(release): Publish2dc715dchore: remove tracedSVG (#37093) (#37127)9f4c0b9chore(release): Publish87f280achore(release): Publish nextea00e12chore(release): Publish next6815536chore(release): Publish next53a4e5achore(changelogs): update changelogs (#36605)ba43263chore(release): Publish next pre-minorUpdates
gatsby-transformer-remarkfrom 2.7.3 to 5.25.1Release notes
Sourced from gatsby-transformer-remark's releases.
... (truncated)
Changelog
Sourced from gatsby-transformer-remark's changelog.
... (truncated)
Commits
4dcca80chore(release): Publish59076c8fix(gatsby-transformer-remark): Disallow JS frontmatter by default (#37244) (...5e72a5dchore(release): Publish9f4c0b9chore(release): Publish87f280achore(release): Publish nextea00e12chore(release): Publish next53a4e5achore(changelogs): update changelogs (#36605)ba43263chore(release): Publish next pre-minor3bc957bchore(changelogs): update changelogs (#36501)232d3b6chore(release): Publish nextUpdates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
engine.iofrom 3.4.1 to 6.2.1Release notes
Sourced from engine.io's releases.
... (truncated)
Changelog
Sourced from engine.io's changelog.
... (truncated)
Commits
24b847bchore(release): 6.2.1425e833fix: catch errors when destroying invalid upgrades (#658)99adb00chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...d196f6achore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)7c1270fchore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)535a01dci: add Node.js 18 in the test matrix1b71a6fdocs: remove "Vanilla JS" highlight from README (#656)917d1d2refactor: replace deprecatedString.prototype.substr()(#646)020801achore: add changelog for version 3.6.0ed1d6f9test: make test script work on Windows (#643)Updates
flatfrom 4.1.0 to 5.0.2Commits
e5ffd66Release 5.0.2fdb79d5Update dependencies, refresh lockfile, format with standard.e52185dTest against node 14 in CI.0189cb1Avoid arrow function syntax.f25d3a1Release 5.0.154cc7aduse standard formatting779816edrop dependencies2eea6d3Bump lodash from 4.17.15 to 4.17.19a61a554Bump acorn from 7.1.0 to 7.4.020ef0efFix prototype pollution on unflattenMaintainer changes
This version was pushed to npm by timoxley, a new releaser for flat since your current version.
Updates
minimatchfrom 3.0.3 to 3.0.4Commits
e46989av3.0.4ddfacbdupdate brace-expansion55ed736update package scripts and depsUpdates
minimistfrom 0.2.1 to 0.2.4Changelog
Sourced from minimist's changelog.
Commits
8c6be48v0.2.4d031f9b[Dev Deps] updatetape3dbebff[Tests] check side-effects of pollution protection34e20b8[Robustness] rework isConstructorOrProtoc0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,audMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
http-cache-semanticsfrom 3.8.1 to 4.1.0Commits
ed83aecExplain trust server date1b35980rfc 5861 (stale-if-error, stale-while-revalidate)2c2fac2Drop trustServerDateeb7028fTest names84cc9a8Bumpae5ecd5Add status to tests385b5d3Minor storable bug8ff37cbFix test1988c3fRename var7160146Merge pull request #24 from non-binary/nb/fix-validators-typoUpdates
qsfrom 6.5.2 to 6.5.3Changelog
Sourced from qs's changelog.
Commits
298bfa5v6.5.3ed0f5dc[Fix]parse: ignore__proto__keys (#428)691e739[Robustness]stringify: avoid relying on a globalundefined(#427)1072d57[readme] remove travis badge; add github actions/codecov badges; update URLs12ac1c4[meta] fix README.md (#399)0338716[actions] backport actions from main5639c20Clean up license text so it’s properly detected as BSD-3-Clause51b8a0badd FUNDING.yml45f6759[Fix] fix for an impossible situation: when the formatter is called with a no...f814a7f[Dev Deps] backport from mainRemoves
simple-gitUpdates
graphql-toolsfrom 6.0.10 to 6.2.6Changelog
Sourced from graphql-tools's changelog.
... (truncated)
Commits
69d8499chore(release): update monorepo packages versions (#2132)96a7555fix(release): don't transitively update to v7 (#2131)9468a46chore(release): update monorepo packages versions (#2129)be1a157v7 (#1935)6ba5accchore(release): update monorepo packages versions (#2077)533d6d5introducechangesetsto manage release and canary flows (#2008)3aa8565v6.2.363a176dv6.2.242a11d9v6.2.1427093bAdd an additional ES5-compatible bundle (#1909)Updates
socket.io-parserfrom 3.3.0 to 4.2.4Release notes
Sourced from socket.io-parser's releases.
... (truncated)
Changelog
Sourced from socket.io-parser's changelog.
... (truncated)
Commits
164ba2achore(release): 4.2.4b0e6400fix: properly detect plain objectsd9db473fix: ensure reserved events cannot be used as event names6a5a004docs(changelog): include changelog for release 3.4.3b6c824fchore(release): 4.2.3dcc70d9refactor: export typescript declarations for the commonjs build3b78117fix: check the format of the event name0841bd5chore: bump ua-parser-js from 1.0.32 to 1.0.33 (#121)28dd668chore(release): 4.2.222c42e3fix: calling destroy() should clear all internal stateUpdates `ua-pa...
Description has been truncated