chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 3 updates in the /performance directory: [webpack](https://github.com/webpack/webpack), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [braces](https://github.com/micromatch/braces). Bumps the npm_and_yarn group with 12 updates in the /webui/react directory: | Package | From | To | | --- | --- | --- | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.23.7` | `7.26.8` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `6.2.2` | `6.3.0` | | [uplot](https://github.com/leeoniya/uPlot) | `1.6.18` | `1.6.31` | | [express](https://github.com/expressjs/express) | `4.19.2` | `4.20.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.2.11` | `5.4.14` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.0` | `1.6.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.0` | `1.6.1` | | [@adobe/css-tools](https://github.com/adobe/css-tools) | `4.3.1` | `4.4.1` | | [cookie](https://github.com/jshttp/cookie) | `0.6.0` | `0.7.1` | | [express](https://github.com/expressjs/express) | `4.20.0` | `4.21.2` | | [ejs](https://github.com/mde/ejs) | `3.1.8` | `3.1.10` | | [ws](https://github.com/websockets/ws) | `7.5.2` | `7.5.10` | Updates `webpack` from 5.76.1 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.76.1...v5.97.1) Updates `@babel/traverse` from 7.13.17 to 7.26.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.8/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `serialize-javascript` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2) Updates `@babel/traverse` from 7.23.7 to 7.26.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.8/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `path-to-regexp` from 6.2.2 to 6.3.0 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v6.2.2...v6.3.0) Updates `uplot` from 1.6.18 to 1.6.31 - [Release notes](https://github.com/leeoniya/uPlot/releases) - [Commits](leeoniya/uPlot@1.6.18...1.6.31) Updates `express` from 4.19.2 to 4.20.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.19.2...4.20.0) Updates `vite` from 5.2.11 to 5.4.14 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.14/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.14/packages/vite) Updates `vitest` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v1.6.1/packages/vitest) Updates `@vitest/coverage-v8` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v1.6.1/packages/coverage-v8) Updates `@adobe/css-tools` from 4.3.1 to 4.4.1 - [Changelog](https://github.com/adobe/css-tools/blob/main/History.md) - [Commits](https://github.com/adobe/css-tools/commits) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `cookie` from 0.6.0 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.6.0...v0.7.1) Updates `express` from 4.20.0 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.19.2...4.20.0) Updates `esbuild` from 0.20.2 to 0.21.5 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.20.2...v0.21.5) Updates `rollup` from 4.17.2 to 4.34.6 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.17.2...v4.34.6) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `ejs` from 3.1.8 to 3.1.10 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.8...v3.1.10) Updates `ws` from 7.5.2 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.2...7.5.10) --- updated-dependencies: - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uplot dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@vitest/coverage-v8" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@adobe/css-tools" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: esbuild dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Reviewer's Guide by SourceryThis PR bumps multiple npm and yarn dependencies across two directories. In the /performance directory, webpack is updated to address bug fixes and performance improvements. In the /webui/react directory, several dependencies including path-to-regexp, uplot, express, vite, vitest, and @vitest/coverage-v8 have their versions bumped to incorporate upstream changes and security fixes. The changes are applied by modifying the package.json files and updating the corresponding package-lock.json files where applicable. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 3 updates in the /performance directory: webpack, @babel/traverse and braces.
Bumps the npm_and_yarn group with 12 updates in the /webui/react directory:
7.23.77.26.83.0.23.0.36.2.26.3.01.6.181.6.314.19.24.20.05.2.115.4.141.6.01.6.11.6.01.6.14.3.14.4.10.6.00.7.14.20.04.21.23.1.83.1.107.5.27.5.10Updates
webpackfrom 5.76.1 to 5.97.1Release notes
Sourced from webpack's releases.
... (truncated)
Commits
3612d36chore(release): 5.97.1eb7ac6ffix: perf regression554be24fix: sub define key should't be renamed when it's a defined variable5e0e780refactor: issue #1903058fb035fix: sub define key should't be renamed when it's a defined variableaf1fd12perf: regression34f19cbfix: package.json0ec7f5drefactor: issue #190305e7b8a2fix:package.json644f1d1refactor: no extra work for CSS unescapingUpdates
@babel/traversefrom 7.13.17 to 7.26.8Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
0593941v7.26.8e02b0ff[Babel 8] Create TSTemplateLiteralType (#17066)2d95140v7.26.7ad572fdfix: Remove type-onlyimport x = y.z(#17025)74181cfv7.26.5d35794e[Babel 8] Create TSEnumBody for TSEnumDeclaration (#16979)cd24cc0chore: Update TS 5.7 (#17053)cf7b9cdv7.26.4f33704aRevert "perf: Improve scope information collection performance" (#17005)36ca8fav7.26.3Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
serialize-javascriptfrom 6.0.1 to 6.0.2Release notes
Sourced from serialize-javascript's releases.
Commits
b71ec236.0.2f27d65dfix: serialize URL string contents to prevent XSS (#173)02499c0Bump@babel/traversefrom 7.10.1 to 7.23.7 (#171)0d88527docs: update readme with URL support (#146)e2a3a91chore: update node version and lock file5a1fa64fix typo (#164)Updates
@babel/traversefrom 7.23.7 to 7.26.8Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
0593941v7.26.8e02b0ff[Babel 8] Create TSTemplateLiteralType (#17066)2d95140v7.26.7ad572fdfix: Remove type-onlyimport x = y.z(#17025)74181cfv7.26.5d35794e[Babel 8] Create TSEnumBody for TSEnumDeclaration (#16979)cd24cc0chore: Update TS 5.7 (#17053)cf7b9cdv7.26.4f33704aRevert "perf: Improve scope information collection performance" (#17005)36ca8fav7.26.3Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
path-to-regexpfrom 6.2.2 to 6.3.0Release notes
Sourced from path-to-regexp's releases.
Commits
75a92c36.3.0f1253b4Add backtrack protection to 6.x (#324)Updates
uplotfrom 1.6.18 to 1.6.31Release notes
Sourced from uplot's releases.
Commits
f98d1d31.6.31efc3a3fdemo fix41b96d1bump rollupa4edb29don't flatten linear ranging until < 1e-24 (follow-up to b2433b4)91de800fix cursor sync when x keys don't match. close #967.3a448dcfix wind direction math. close #970.e6fcc60Add Svelte integration to readme (#948)2d13780implement custom scalesb2433b4better handling for values < 1e-14 with log y axise579947timeseries-discrete demo. close #939.Updates
expressfrom 4.19.2 to 4.20.0Release notes
Sourced from express's releases.
Changelog
Sourced from express's changelog.
Commits
21df4214.20.04c9ddc1feat: upgrade to [email protected]9ebe5d5feat: upgrade to [email protected] (#5928)ec4a01bfeat: upgrade to [email protected] (#5926)54271f6fix: don't render redirect values in anchor href125bb74[email protected] (#5902)2a980ad[email protected] (#5781)a3e7e05docs: specify new instructions forquestionanddiscussc5addb9deps: [email protected] (#5603)e35380adocs: add@IamLizuto the triage team (#5836)Updates
vitefrom 5.2.11 to 5.4.14Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
e7eb3c5release: v5.4.147d1699cfix: allow CORS from loopback addresses by default (#19249)9df6e6bfix:preview.allowedHostswith specific values was not respected (#19246)a1824c5release: v5.4.135946215fix: try parseserver.originURL (#19241)f428aa9release: v5.4.129da4abcfix!: check host header to prevent DNS rebinding attacks and introduce `serve...b71a5c8fix: verify token for HMR WebSocket connection