Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump semver, jsonwebtoken, react-scripts, cross-env, eslint and eslint-plugin-import in /litmus-portal/frontend #4022

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 24, 2023

Bumps semver to 7.5.3 and updates ancestor dependencies semver, jsonwebtoken, react-scripts, cross-env, eslint and eslint-plugin-import. These dependencies need to be updated together.

Updates semver from 7.3.5 to 7.5.3

Release notes

Sourced from semver's releases.

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

Documentation

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

v7.5.0

7.5.0 (2023-04-17)

Features

Bug Fixes

v7.4.0

7.4.0 (2023-04-10)

Features

Bug Fixes

... (truncated)

Changelog

Sourced from semver's changelog.

7.5.3 (2023-06-22)

Bug Fixes

Documentation

7.5.2 (2023-06-15)

Bug Fixes

7.5.1 (2023-05-12)

Bug Fixes

7.5.0 (2023-04-17)

Features

Bug Fixes

7.4.0 (2023-04-10)

Features

Bug Fixes

... (truncated)

Commits
  • 7fdf1ef chore: release 7.5.3
  • bf53dd8 docs: add example for > comparator (#569)
  • abdd93d fix: set max lengths in regex for numeric and build identifiers (#571)
  • e7b78de chore: release 7.5.2
  • 58c791f fix: diff when detecting major change from prerelease (#566)
  • 5c8efbc fix: preserve build in raw after inc (#565)
  • 717534e fix: better handling of whitespace (#564)
  • 2f738e9 chore: bump @​npmcli/template-oss from 4.14.1 to 4.15.1 (#558)
  • aa016a6 chore: release 7.5.1
  • d30d25a fix: show type on invalid semver error (#559)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.


Updates jsonwebtoken from 8.5.1 to 9.0.0

Changelog

Sourced from jsonwebtoken's changelog.

9.0.0 - 2022-12-21

Breaking changes: See Migration from v8 to v9

Breaking changes

  • Removed support for Node versions 11 and below.
  • The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]auth0/node-jsonwebtoken@8345030)
  • RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]auth0/node-jsonwebtoken@ecdf6cc)
  • Key types must be valid for the signing / verification algorithm

Security fixes

  • security: fixes Arbitrary File Write via verify function - CVE-2022-23529
  • security: fixes Insecure default algorithm in jwt.verify() could lead to signature validation bypass - CVE-2022-23540
  • security: fixes Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - CVE-2022-23541
  • security: fixes Unrestricted key type could lead to legacy keys usage - CVE-2022-23539
Commits
  • e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33
  • 5eaedbf chore(ci): remove github test actions job (#861)
  • cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)
  • ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...
  • 8345030 fix(sign&verify)!: Remove default none support from sign and verify met...
  • 7e6a86b Upload OpsLevel YAML (#849)
  • 74d5719 docs: update references vercel/ms references (#770)
  • d71e383 docs: document "invalid token" error
  • 3765003 docs: fix spelling in README.md: Peak -> Peek (#754)
  • a46097e docs: make decode impossible to discover before verify
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.


Updates react-scripts from 3.4.4 to 5.0.1

Commits

Updates cross-env from 5.2.1 to 7.0.3

Release notes

Sourced from cross-env's releases.

v7.0.3

7.0.3 (2020-12-01)

Bug Fixes

  • add maintenance mode notice (fe80c84)

v7.0.2

7.0.2 (2020-03-05)

Reverts

v7.0.1

7.0.1 (2020-03-03)

Bug Fixes

v7.0.0

7.0.0 (2020-01-25)

Features

BREAKING CHANGES

  • Drop Node 8 support

v6.0.3

6.0.3 (2019-10-02)

Bug Fixes

  • do not compile anything (67f21c3)

v6.0.2

6.0.2 (2019-10-01)

... (truncated)

Commits

Updates eslint from 6.8.0 to 8.43.0

Release notes

Sourced from eslint's releases.

v8.43.0

Features

  • 14581ff feat: directive prologue detection and autofix condition in quotes (#17284) (Francesco Trotta)
  • e50fac3 feat: add declaration loc to message in block-scoped-var (#17252) (Milos Djermanovic)
  • 1b7faf0 feat: add skipJSXText option to no-irregular-whitespace rule (#17182) (Azat S)

Bug Fixes

  • 5338b56 fix: normalize cwd passed to ESLint/FlatESLint constructor (#17277) (Milos Djermanovic)
  • 54383e6 fix: Remove no-extra-parens autofix for potential directives (#17022) (Francesco Trotta)

Documentation

  • 8b855ea docs: resubmit pr17061 doc changes (#17292) (唯然)
  • 372722e docs: resubmit pr17012 doc changes (#17293) (唯然)
  • 67e7af3 docs: resubmit custom-rules doc changes (#17294) (唯然)
  • 9e3d77c docs: Resubmit Fix formatting in Custom Rules docs (#17281) (Milos Djermanovic)
  • 503647a docs: Resubmit markVariableAsUsed docs (#17280) (Nicholas C. Zakas)
  • e0cf0d8 docs: Custom rule & plugin tutorial (#17024) (Ben Perlmutter)
  • 8e51ea9 docs: resubmit no-new rule documentation (#17264) (Nitin Kumar)
  • 1b217f8 docs: resubmit Custom Processors documentation (#17265) (Nitin Kumar)
  • 428fc76 docs: resubmit Create Plugins documentation (#17268) (Nitin Kumar)
  • bdca88c docs: resubmit Configuration Files documentation (#17267) (Nitin Kumar)
  • f5c01f2 docs: resubmit Manage Issues documentation (#17266) (Nitin Kumar)
  • b199295 docs: Resubmit custom rules update docs (#17273) (Ben Perlmutter)
  • 0e9980c docs: add new omitLastInOneLineClassBody option to the semi rule (#17263) (Nitin Kumar)
  • cb2560f docs: Resubmit getScope/getDeclaredVariables docs (#17262) (Nicholas C. Zakas)
  • 85d2b30 docs: explain how to include predefined globals (#17261) (Marcus Wyatt)
  • de4d3c1 docs: update flat config default ignore patterns (#17258) (Milos Djermanovic)
  • 3912f3a docs: Improve ignores documentation (#17239) (Francesco Trotta)
  • 35e11d3 docs: fix typos and missing info (#17257) (Ed Lucas)
  • 0bc257c docs: Clarify no-div-regex rule docs (#17051) (#17255) (Francesco Trotta)
  • 788d836 docs: add references to MIT License (#17248) (Milos Djermanovic)
  • 58aab6b docs: Update README (GitHub Actions Bot)
  • 3ef5814 docs: Revert all changes after the license change (#17227) (Milos Djermanovic)
  • 03fc4aa docs: Update README (GitHub Actions Bot)

Chores

  • 78350f6 chore: upgrade @​eslint/js@​8.43.0 (#17295) (Milos Djermanovic)
  • 62bf759 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • e0a2448 chore: docs package.license ISC => MIT (#17254) (唯然)
  • 6a0196c chore: use eslint-plugin-eslint-plugin flat configs (#17204) (Milos Djermanovic)

v8.42.0

Features

  • b8448ff feat: correct no-useless-return behaviour in try statements (#16996) (Nitin Kumar)

Bug Fixes

  • a589636 fix: Config with ignores and without files should not always apply (#17181) (Milos Djermanovic)
  • c4fad17 fix: Correct ignore message for "node_modules" subfolders (#17217) (Francesco Trotta)

Documentation

... (truncated)

Changelog

Sourced from eslint's changelog.

v8.43.0 - June 16, 2023

  • 78350f6 chore: upgrade @​eslint/js@​8.43.0 (#17295) (Milos Djermanovic)
  • 8b855ea docs: resubmit pr17061 doc changes (#17292) (唯然)
  • 62bf759 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • 14581ff feat: directive prologue detection and autofix condition in quotes (#17284) (Francesco Trotta)
  • 372722e docs: resubmit pr17012 doc changes (#17293) (唯然)
  • 67e7af3 docs: resubmit custom-rules doc changes (#17294) (唯然)
  • 5338b56 fix: normalize cwd passed to ESLint/FlatESLint constructor (#17277) (Milos Djermanovic)
  • 9e3d77c docs: Resubmit Fix formatting in Custom Rules docs (#17281) (Milos Djermanovic)
  • 503647a docs: Resubmit markVariableAsUsed docs (#17280) (Nicholas C. Zakas)
  • 54383e6 fix: Remove no-extra-parens autofix for potential directives (#17022) (Francesco Trotta)
  • e0cf0d8 docs: Custom rule & plugin tutorial (#17024) (Ben Perlmutter)
  • 8e51ea9 docs: resubmit no-new rule documentation (#17264) (Nitin Kumar)
  • 1b217f8 docs: resubmit Custom Processors documentation (#17265) (Nitin Kumar)
  • 428fc76 docs: resubmit Create Plugins documentation (#17268) (Nitin Kumar)
  • bdca88c docs: resubmit Configuration Files documentation (#17267) (Nitin Kumar)
  • f5c01f2 docs: resubmit Manage Issues documentation (#17266) (Nitin Kumar)
  • b199295 docs: Resubmit custom rules update docs (#17273) (Ben Perlmutter)
  • e50fac3 feat: add declaration loc to message in block-scoped-var (#17252) (Milos Djermanovic)
  • 0e9980c docs: add new omitLastInOneLineClassBody option to the semi rule (#17263) (Nitin Kumar)
  • cb2560f docs: Resubmit getScope/getDeclaredVariables docs (#17262) (Nicholas C. Zakas)
  • 85d2b30 docs: explain how to include predefined globals (#17261) (Marcus Wyatt)
  • de4d3c1 docs: update flat config default ignore patterns (#17258) (Milos Djermanovic)
  • 3912f3a docs: Improve ignores documentation (#17239) (Francesco Trotta)
  • 35e11d3 docs: fix typos and missing info (#17257) (Ed Lucas)
  • e0a2448 chore: docs package.license ISC => MIT (#17254) (唯然)
  • 0bc257c docs: Clarify no-div-regex rule docs (#17051) (#17255) (Francesco Trotta)
  • 1b7faf0 feat: add skipJSXText option to no-irregular-whitespace rule (#17182) (Azat S)
  • 788d836 docs: add references to MIT License (#17248) (Milos Djermanovic)
  • 58aab6b docs: Update README (GitHub Actions Bot)
  • 6a0196c chore: use eslint-plugin-eslint-plugin flat configs (#17204) (Milos Djermanovic)
  • 030a827 Revert "feat: docs license (#17010)" (#17231) (唯然)
  • 3ef5814 docs: Revert all changes after the license change (#17227) (Milos Djermanovic)
  • 03fc4aa docs: Update README (GitHub Actions Bot)

v8.42.0 - June 2, 2023

  • 6ca5b7c chore: upgrade @​eslint/js@​8.42.0 (#17236) (Milos Djermanovic)
  • 67fc5e7 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • 0892412 refactor: remove Identifier listener in no-irregular-whitespace (#17235) (Milos Djermanovic)
  • a589636 fix: Config with ignores and without files should not always apply (#17181) (Milos Djermanovic)
  • 01d7142 docs: Update README (GitHub Actions Bot)
  • f67d298 test: Add FlatESLint tests with missing config files (#17164) (Milos Djermanovic)
  • e5182b7 docs: Update README (GitHub Actions Bot)
  • c4fad17 fix: Correct ignore message for "node_modules" subfolders (#17217) (Francesco Trotta)
  • 5b68d51 chore: Fix fixedsize attribute in code path analysis DOT debug output (#17202) (Milos Djermanovic)
  • b8448ff feat: correct no-useless-return behaviour in try statements (#16996) (Nitin Kumar)
  • 37432f2 chore: update descriptions in key-spacing tests (#17195) (Milos Djermanovic)

... (truncated)

Commits

Updates eslint-plugin-import from 2.23.4 to 2.27.5

Release notes

Sourced from eslint-plugin-import's releases.

v2.25.2

Full Changelog: import-js/eslint-plugin-import@v2.25.1...v2.25.2

v2.25.1

Full Changelog: import-js/eslint-plugin-import@v2.25.0...v2.25.1

v2.25.0

What's Changed

New Contributors

Full Changelog: import-js/eslint-plugin-import@v2.24.2...v2.25.0

v2.24.2

No release notes provided.

v2.24.1

https://github.com/import-js/eslint-plugin-import/blob/v2.24.1/CHANGELOG.md#2241---2021-08-19

v2.24.0

https://github.com/import-js/eslint-plugin-import/blob/v2.24.0/CHANGELOG.md#2240---2021-08-08

Changelog

Sourced from eslint-plugin-import's changelog.

[2.27.5] - 2023-01-16

Fixed

[2.27.4] - 2023-01-11

Fixed

  • semver should be a prod dep (#2668)

[2.27.3] - 2023-01-11

Fixed

  • [no-empty-named-blocks]: rewrite rule to only check import declarations (#2666)

[2.27.2] - 2023-01-11

Fixed

  • [no-duplicates]: do not unconditionally require typescript (#2665)

[2.27.1] - 2023-01-11

Fixed

[2.27.0] - 2023-01-11

Added

Fixed

  • [order]: move nested imports closer to main import entry (#2396, thanks [@​pri1311])
  • [no-restricted-paths]: fix an error message (

…int and eslint-plugin-import

Bumps [semver](https://github.com/npm/node-semver) to 7.5.3 and updates ancestor dependencies [semver](https://github.com/npm/node-semver), [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken), [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts), [cross-env](https://github.com/kentcdodds/cross-env), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import). These dependencies need to be updated together.


Updates `semver` from 7.3.5 to 7.5.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.3.5...v7.5.3)

Updates `jsonwebtoken` from 8.5.1 to 9.0.0
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0)

Updates `react-scripts` from 3.4.4 to 5.0.1
- [Release notes](https://github.com/facebook/create-react-app/releases)
- [Changelog](https://github.com/facebook/create-react-app/blob/main/CHANGELOG-3.x.md)
- [Commits](https://github.com/facebook/create-react-app/commits/[email protected]/packages/react-scripts)

Updates `cross-env` from 5.2.1 to 7.0.3
- [Release notes](https://github.com/kentcdodds/cross-env/releases)
- [Changelog](https://github.com/kentcdodds/cross-env/blob/master/CHANGELOG.md)
- [Commits](kentcdodds/cross-env@v5.2.1...v7.0.3)

Updates `eslint` from 6.8.0 to 8.43.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v6.8.0...v8.43.0)

Updates `eslint-plugin-import` from 2.23.4 to 2.27.5
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.23.4...v2.27.5)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
- dependency-name: jsonwebtoken
  dependency-type: direct:production
- dependency-name: react-scripts
  dependency-type: direct:production
- dependency-name: cross-env
  dependency-type: direct:development
- dependency-name: eslint
  dependency-type: direct:development
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 24, 2023
@Jonsy13 Jonsy13 closed this Nov 3, 2023
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/litmus-portal/frontend/semver-and-jsonwebtoken-and-react-scripts-and-cross-env-and-eslint-and-eslint-plugin-import-7.5.3 branch November 3, 2023 06:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant