Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm_and_yarn group across 2 directories with 6 updates #51

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 21, 2024

Bumps the npm_and_yarn group with 3 updates in the /. directory: axios, vite and ip.
Bumps the npm_and_yarn group with 3 updates in the /cf-tsdocs-worker directory: ip, miniflare and wrangler.

Updates axios from 1.6.5 to 1.6.6

Release notes

Sourced from axios's releases.

Release v1.6.6

Release notes:

Bug Fixes

  • fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
  • wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

Changelog

Sourced from axios's changelog.

1.6.6 (2024-01-24)

Bug Fixes

  • fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
  • wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

Commits

Updates vite from 5.0.10 to 5.0.12

Changelog

Sourced from vite's changelog.

5.0.12 (2024-01-19)

5.0.11 (2024-01-05)

Commits
  • ee81e19 release: v5.0.12
  • 91641c4 fix: fs deny for case insensitive systems (#15653)
  • ef89f80 fix: await configResolved hooks of worker plugins (#15597) (#15605)
  • b44c493 release: v5.0.11
  • d2aa096 fix: inject __vite__mapDeps code before sourcemap file comment (#15483)
  • 2a540ee chore(deps): update tj-actions/changed-files action to v41 (#15476)
  • 5ea9edb fix(html): handle offset magic-string slice error (#15435)
  • 49d21fe chore(deps): update dependency strip-literal to v2 (#15475)
  • 8de7bd2 fix(assets): avoid splitting , inside base64 value of srcset attribute (#...
  • 19e3c9a fix: don't pretransform classic script links (#15361)
  • See full diff in compare view

Updates ip from 1.1.8 to 1.1.9

Commits

Updates ip from 2.0.0 to 2.0.1

Commits

Updates miniflare from 3.20231025.0 to 3.20240129.3

Release notes

Sourced from miniflare's releases.

miniflare@3.20240129.3

Minor Changes

  • #4795 027f9719 Thanks @​mrbbot! - feat: pass Miniflare instance as argument to custom service binding handlers

    This change adds a new Miniflare-typed parameter to function-valued service binding handlers. This provides easy access to the correct bindings when re-using service functions across instances.

    import assert from "node:assert";
    import { Miniflare, Response } from "miniflare";
    const mf = new Miniflare({
    serviceBindings: {
    SERVICE(request, instance) {
    assert(instance === mf);
    return new Response();
    },
    },
    });

  • #4795 027f9719 Thanks @​mrbbot! - feat: allow URLs to be passed in hyperdrives

    Previously, the hyperdrives option only accepted strings as connection strings. This change allows URL objects to be passed too.

  • #4795 027f9719 Thanks @​mrbbot! - feat: add support for custom root paths

    Miniflare has lots of file-path-valued options (e.g. scriptPath, kvPersist, textBlobBindings). Previously, these were always resolved relative to the current working directory before being used. This change adds a new rootPath shared, and per-worker option for customising this behaviour. Instead of resolving relative to the current working directory, Miniflare will now resolve path-valued options relative to the closest rootPath option. Paths are still resolved relative to the current working directory if no rootPaths are defined. Worker-level rootPaths are themselves resolved relative to the shared rootPath if defined.

    import { Miniflare } from "miniflare";
    const mf1 = new Miniflare({
    scriptPath: "index.mjs",
    });
    const mf2 = new Miniflare({
    rootPath: "a/b",
    scriptPath: "c/index.mjs",
    });
    const mf3 = new Miniflare({

... (truncated)

Changelog

Sourced from miniflare's changelog.

3.20240129.3

Minor Changes

  • #4795 027f9719 Thanks @​mrbbot! - feat: pass Miniflare instance as argument to custom service binding handlers

    This change adds a new Miniflare-typed parameter to function-valued service binding handlers. This provides easy access to the correct bindings when re-using service functions across instances.

    import assert from "node:assert";
    import { Miniflare, Response } from "miniflare";
    const mf = new Miniflare({
    serviceBindings: {
    SERVICE(request, instance) {
    assert(instance === mf);
    return new Response();
    },
    },
    });

  • #4795 027f9719 Thanks @​mrbbot! - feat: allow URLs to be passed in hyperdrives

    Previously, the hyperdrives option only accepted strings as connection strings. This change allows URL objects to be passed too.

  • #4795 027f9719 Thanks @​mrbbot! - feat: add support for custom root paths

    Miniflare has lots of file-path-valued options (e.g. scriptPath, kvPersist, textBlobBindings). Previously, these were always resolved relative to the current working directory before being used. This change adds a new rootPath shared, and per-worker option for customising this behaviour. Instead of resolving relative to the current working directory, Miniflare will now resolve path-valued options relative to the closest rootPath option. Paths are still resolved relative to the current working directory if no rootPaths are defined. Worker-level rootPaths are themselves resolved relative to the shared rootPath if defined.

    import { Miniflare } from "miniflare";
    const mf1 = new Miniflare({
    scriptPath: "index.mjs",
    });
    const mf2 = new Miniflare({
    rootPath: "a/b",
    scriptPath: "c/index.mjs",
    });
    const mf3 = new Miniflare({
    rootPath: "/a/b",

... (truncated)

Commits

Updates wrangler from 3.15.0 to 3.28.4

Release notes

Sourced from wrangler's releases.

wrangler@3.28.4

Patch Changes

  • #5050 88be4b84 Thanks @​nora-soderlund! - fix: allow kv:namespace create to accept a namespace name that contains characters not allowed in a binding name

    This command tries to use the namespace name as the binding. Previously, we would unnecessarily error if this namespace name did not fit the binding name constraints. Now we accept such names and then remove invalid characters when generating the binding name.

wrangler@3.28.3

Patch Changes

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: make sure getPlatformProxy produces a production-like caches object

    make sure that the caches object returned to getPlatformProxy behaves in the same manner as the one present in production (where calling unsupported methods throws a helpful error message)

    note: make sure that the unsupported methods are however not included in the CacheStorage type definition

  • #5030 55ea0721 Thanks @​mrbbot! - fix: don't suggest reporting user errors to GitHub

    Wrangler has two different types of errors: internal errors caused by something going wrong, and user errors caused by an invalid configuration. Previously, we would encourage users to submit bug reports for user errors, even though there's nothing we can do to fix them. This change ensures we only suggest this for internal errors.

  • #4900 3389f2e9 Thanks @​OilyLime! - feature: allow hyperdrive users to set local connection string as environment variable

    Wrangler dev now supports the HYPERDRIVE_LOCAL_CONNECTION_STRING environmental variable for connecting to a local database instance when testing Hyperdrive in local development. This environmental variable takes precedence over the localConnectionString set in wrangler.toml.

  • #5033 b1ace91b Thanks @​mrbbot! - fix: wait for actual port before opening browser with --port=0

    Previously, running wrangler dev --remote --port=0 and then immediately pressing b would open localhost:0 in your default browser. This change queues up opening the browser until Wrangler knows the port the dev server was started on.

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: relax the getPlatformProxy's' cache request/response types

    prior to these changes the caches obtained from getPlatformProxy would use unknowns as their types, this proved too restrictive and incompatible with the equivalent @cloudflare/workers-types types, we decided to use anys instead to allow for more flexibility whilst also making the type compatible with workers-types

  • Updated dependencies [7723ac17, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719]:

    • miniflare@3.20240129.3

wrangler@3.28.2

Patch Changes

... (truncated)

Changelog

Sourced from wrangler's changelog.

3.28.4

Patch Changes

  • #5050 88be4b84 Thanks @​nora-soderlund! - fix: allow kv:namespace create to accept a namespace name that contains characters not allowed in a binding name

    This command tries to use the namespace name as the binding. Previously, we would unnecessarily error if this namespace name did not fit the binding name constraints. Now we accept such names and then remove invalid characters when generating the binding name.

3.28.3

Patch Changes

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: make sure getPlatformProxy produces a production-like caches object

    make sure that the caches object returned to getPlatformProxy behaves in the same manner as the one present in production (where calling unsupported methods throws a helpful error message)

    note: make sure that the unsupported methods are however not included in the CacheStorage type definition

  • #5030 55ea0721 Thanks @​mrbbot! - fix: don't suggest reporting user errors to GitHub

    Wrangler has two different types of errors: internal errors caused by something going wrong, and user errors caused by an invalid configuration. Previously, we would encourage users to submit bug reports for user errors, even though there's nothing we can do to fix them. This change ensures we only suggest this for internal errors.

  • #4900 3389f2e9 Thanks @​OilyLime! - feature: allow hyperdrive users to set local connection string as environment variable

    Wrangler dev now supports the HYPERDRIVE_LOCAL_CONNECTION_STRING environmental variable for connecting to a local database instance when testing Hyperdrive in local development. This environmental variable takes precedence over the localConnectionString set in wrangler.toml.

  • #5033 b1ace91b Thanks @​mrbbot! - fix: wait for actual port before opening browser with --port=0

    Previously, running wrangler dev --remote --port=0 and then immediately pressing b would open localhost:0 in your default browser. This change queues up opening the browser until Wrangler knows the port the dev server was started on.

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: relax the getPlatformProxy's' cache request/response types

    prior to these changes the caches obtained from getPlatformProxy would use unknowns as their types, this proved too restrictive and incompatible with the equivalent @cloudflare/workers-types types, we decided to use anys instead to allow for more flexibility whilst also making the type compatible with workers-types

  • Updated dependencies [7723ac17, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719]:

    • miniflare@3.20240129.3

3.28.2

Patch Changes

... (truncated)

Commits

Updates undici from 5.27.0 to 5.28.3

Release notes

Sourced from undici's releases.

v5.28.3

⚠️ Security Release ⚠️

Fixes:

Full Changelog: nodejs/undici@v5.28.2...v5.28.3

v5.28.2

What's Changed

New Contributors

Full Changelog: nodejs/undici@v5.28.1...v5.28.2

v5.28.1

What's Changed

Full Changelog: nodejs/undici@v5.28.0...v5.28.1

v5.28.0

What's Changed

... (truncated)

Commits

Updates wrangler from 3.15.0 to 3.28.4

Release notes

Sourced from wrangler's releases.

wrangler@3.28.4

Patch Changes

  • #5050 88be4b84 Thanks @​nora-soderlund! - fix: allow kv:namespace create to accept a namespace name that contains characters not allowed in a binding name

    This command tries to use the namespace name as the binding. Previously, we would unnecessarily error if this namespace name did not fit the binding name constraints. Now we accept such names and then remove invalid characters when generating the binding name.

wrangler@3.28.3

Patch Changes

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: make sure getPlatformProxy produces a production-like caches object

    make sure that the caches object returned to getPlatformProxy behaves in the same manner as the one present in production (where calling unsupported methods throws a helpful error message)

    note: make sure that the unsupported methods are however not included in the CacheStorage type definition

  • #5030 55ea0721 Thanks @​mrbbot! - fix: don't suggest reporting user errors to GitHub

    Wrangler has two different types of errors: internal errors caused by something going wrong, and user errors caused by an invalid configuration. Previously, we would encourage users to submit bug reports for user errors, even though there's nothing we can do to fix them. This change ensures we only suggest this for internal errors.

  • #4900 3389f2e9 Thanks @​OilyLime! - feature: allow hyperdrive users to set local connection string as environment variable

    Wrangler dev now supports the HYPERDRIVE_LOCAL_CONNECTION_STRING environmental variable for connecting to a local database instance when testing Hyperdrive in local development. This environmental variable takes precedence over the localConnectionString set in wrangler.toml.

  • #5033 b1ace91b Thanks @​mrbbot! - fix: wait for actual port before opening browser with --port=0

    Previously, running wrangler dev --remote --port=0 and then immediately pressing b would open localhost:0 in your default browser. This change queues up opening the browser until Wrangler knows the port the dev server was started on.

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: relax the getPlatformProxy's' cache request/response types

    prior to these changes the caches obtained from getPlatformProxy would use unknowns as their types, this proved too restrictive and incompatible with the equivalent @cloudflare/workers-types types, we decided to use anys instead to allow for more flexibility whilst also making the type compatible with workers-types

  • Updated dependencies [7723ac17, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719]:

    • miniflare@3.20240129.3

wrangler@3.28.2

Patch Changes

... (truncated)

Changelog

Sourced from wrangler's changelog.

3.28.4

Patch Changes

  • #5050 88be4b84 Thanks @​nora-soderlund! - fix: allow kv:namespace create to accept a namespace name that contains characters not allowed in a binding name

    This command tries to use the namespace name as the binding. Previously, we would unnecessarily error if this namespace name did not fit the binding name constraints. Now we accept such names and then remove invalid characters when generating the binding name.

3.28.3

Patch Changes

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: make sure getPlatformProxy produces a production-like caches object

    make sure that the caches object returned to getPlatformProxy behaves in the same manner as the one present in production (where calling unsupported methods throws a helpful error message)

    note: make sure that the unsupported methods are however not included in the CacheStorage type definition

  • #5030 55ea0721 Thanks @​mrbbot! - fix: don't suggest reporting user errors to GitHub

    Wrangler has two different types of errors: internal errors caused by something going wrong, and user errors caused by an invalid configuration. Previously, we would encourage users to submit bug reports for user errors, even though there's nothing we can do to fix them. This change ensures we only suggest this for internal errors.

  • #4900 3389f2e9 Thanks @​OilyLime! - feature: allow hyperdrive users to set local connection string as environment variable

    Wrangler dev now supports the HYPERDRIVE_LOCAL_CONNECTION_STRING environmental variable for connecting to a local database instance when testing Hyperdrive in local development. This environmental variable takes precedence over the localConnectionString set in wrangler.toml.

  • #5033 b1ace91b Thanks @​mrbbot! - fix: wait for actual port before opening browser with --port=0

    Previously, running wrangler dev --remote --port=0 and then immediately pressing b would open localhost:0 in your default browser. This change queues up opening the browser until Wrangler knows the port the dev server was started on.

  • #5026 04584722 Thanks @​dario-piotrowicz! - fix: relax the getPlatformProxy's' cache request/response types

    prior to these changes the caches obtained from getPlatformProxy would use unknowns as their types, this proved too restrictive and incompatible with the equivalent @cloudflare/workers-types types, we decided to use anys instead to allow for more flexibility whilst also making the type compatible with workers-types

  • Updated dependencies [7723ac17, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719, 027f9719]:

    • miniflare@3.20240129.3

3.28.2

Patch Changes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 3 updates in the /. directory: [axios](https://github.com/axios/axios), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [ip](https://github.com/indutny/node-ip).
Bumps the npm_and_yarn group with 3 updates in the /cf-tsdocs-worker directory: [ip](https://github.com/indutny/node-ip), [miniflare](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/miniflare) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `axios` from 1.6.5 to 1.6.6
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.6.5...v1.6.6)

Updates `vite` from 5.0.10 to 5.0.12
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.0.12/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.0.12/packages/vite)

Updates `ip` from 1.1.8 to 1.1.9
- [Commits](indutny/node-ip@v1.1.8...v1.1.9)

Updates `ip` from 2.0.0 to 2.0.1
- [Commits](indutny/node-ip@v1.1.8...v1.1.9)

Updates `miniflare` from 3.20231025.0 to 3.20240129.3
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/miniflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/miniflare@3.20240129.3/packages/miniflare)

Updates `wrangler` from 3.15.0 to 3.28.4
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@3.28.4/packages/wrangler)

Updates `undici` from 5.27.0 to 5.28.3
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.27.0...v5.28.3)

Updates `wrangler` from 3.15.0 to 3.28.4
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@3.28.4/packages/wrangler)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
- dependency-name: vite
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: miniflare
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: wrangler
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
- dependency-name: wrangler
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2024

Superseded by #53.

@dependabot dependabot bot closed this Mar 16, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-security-group-e3b7701d63 branch March 16, 2024 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants