Bump the npm_and_yarn group across 2 directories with 14 updates #1

dependabot · 2024-12-10T03:53:37Z

Bumps the npm_and_yarn group with 12 updates in the /BuildYourOwnCanvasSamples/1.starter-full-bundle directory:

Package	From	To
node-fetch	`2.5.0`	`2.6.7`
axios	`0.18.1`	`removed`
@azure/storage-blob	`10.3.0`	`10.5.0`
find-my-way	`2.0.1`	`2.2.5`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`
minimatch	`3.0.4`	`3.1.2`
moment	`2.24.0`	`2.30.1`
node-notifier	`5.4.0`	`8.0.2`
node-dev	`4.0.0`	`8.0.0`
qs	`6.7.0`	`6.13.1`
semver	`5.7.0`	`5.7.2`

Bumps the npm_and_yarn group with 12 updates in the /BuildYourOwnCanvasSamples/2.location-and-file-uploading/web directory:

Package	From	To
node-fetch	`2.5.0`	`2.6.7`
axios	`0.18.1`	`removed`
@azure/storage-blob	`10.3.0`	`10.5.0`
find-my-way	`2.0.1`	`2.2.5`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`
minimatch	`3.0.4`	`3.1.2`
moment	`2.24.0`	`2.30.1`
node-notifier	`5.4.0`	`8.0.2`
node-dev	`4.0.0`	`8.0.0`
qs	`6.7.0`	`6.13.1`
semver	`5.7.0`	`5.7.2`

Updates node-fetch from 2.5.0 to 2.6.7

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

v2.6.6

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352

Full Changelog: node-fetch/node-fetch@v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

v2.6.0

See CHANGELOG.

Commits

1ef4b56 backport of #1449 (#1453)
8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)
f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...
b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)
18193c5 fix v2.6.3 that did not sending query params (#1301)
ace7536 fix: properly encode url with unicode characters (#1291)
152214c Fix(package.json): Corrected main file path in package.json (#1274)
b5e2e41 update version number
2358a6c Honor the size option after following a redirect and revert data uri support
8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Removes axios

Updates @azure/storage-blob from 10.3.0 to 10.5.0

Commits

See full diff in compare view

Updates follow-redirects from 1.5.10 to 1.11.0

Commits

0de31a8 Release version 1.11.0 of the npm package.
7a2a67a Fix Travis on Node 4.
8e9006c Update dependencies.
724087d Drop Authorization on cross-host redirect.
670c3a7 Release version 1.10.0 of the npm package.
f98d981 Introduce error types and codes.
9df47ad Release version 1.9.1 of the npm package.
ca2d528 Update dependencies.
137c8cf Catch and re-emit request errors.
42971cc Skip inapplicable test.
Additional commits viewable in compare view

Updates find-my-way from 2.0.1 to 2.2.5

Release notes

Sourced from find-my-way's releases.

v2.2.5

Fixes:

Enable versioning on demand - #172 This fix disables the automatic route versioning unless a user has configured at least once a route with the version option.

v2.2.4

📚 PR:

Fix path params match issue (#159) (#160)

v2.2.3

Fixes:

Wildcard route should not be blocked by Parametric with a different method - #152

v2.2.2

Fixes:

No match path param with ignoreTrailingSlash - #146

Use req and res type alias to simplify code - #142

v2.2.1

Fixes:

Fix uppercase static path - #136

Fix type definitions - #137

v2.2.0

Features:

Added support for onBadUrl - #134

v2.1.2

Fixes:

Fixed wildcard handling in case of multiple http methods - #133

Fixes readme typo - #131

v2.1.1

Fix prettyPrint indent - #130

v2.1.0

Expose routes registered - #128

Commits

b846810 Bumped v2.2.5
264a688 Bumped v2.2.4
771d019 Standard
0118ab6 Enable versioning on demand (#172)
1bcedc7 Fix path params match issue (#159) (#160)
4e9d226 Bumped v2.2.3
b4cb4f5 fix #151 Wildcard route should not be blocked by Parametric with diff… (#152)
a5d041f Bumped v2.2.2
275f03f No match path param with ignoreTrailingSlash (#146)
6a3bfaf Use req and res type alias to simplify code (#142)
Additional commits viewable in compare view

Updates json-schema from 0.2.3 to 0.4.0

Commits

f6f6a3b Use a little more robust method of checking instances
ef60987 Update version
b62f1da Protect against constructor modification, #84
fb427cd Link to json-schema-org repository in addition to site, fixes #54
22f1461 Don't allow proto property to be used for schema default/coerce, fixes #84
c52a27c Get basic test to pass
b3f42b3 Add security policy
3b0cec3 Update version
c28470f Update readme to acknowledge the state of the package
7dff9cd Merge pull request #81 from hodovani/patch-1
Additional commits viewable in compare view

Updates jsprim from 1.4.1 to 1.4.2

Changelog

Sourced from jsprim's changelog.

v1.4.2 (2021-11-29)

#35 Backport json-schema 0.4.0 to version 1.4.x

Commits

5c8475f joyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.x
See full diff in compare view

Maintainer changes

This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.

Updates minimatch from 3.0.4 to 3.1.2

Commits

699c459 3.1.2
2f2b5ff fix: trim pattern
25d7c0d 3.1.1
55dda29 fix: treat nocase:true as always having magic
5e1fb8d 3.1.0
f8145c5 Add 'allowWindowsEscape' option
570e8b1 add publishConfig for v3 publishes
5b7cd33 3.0.6
20b4b56 [fix] revert all breaking syntax changes
2ff0388 document, expose, and test 'partial:true' option
Additional commits viewable in compare view

Updates moment from 2.24.0 to 2.30.1

Changelog

Sourced from moment's changelog.

2.30.1

Release Dec 27, 2023

Revert moment/moment#5827, because it's breaking a lot of TS code.

2.30.0 Full changelog

Release Dec 26, 2023

2.29.4

Release Jul 6, 2022

#6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

Release Apr 17, 2022

#5995 [bugfix] Remove const usage

#5990 misc: fix advisory link

2.29.2 See full changelog

Release Apr 3 2022

Address GHSA-8hfj-j24r-96c4

2.29.1 See full changelog

Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

2.29.0 See full changelog

Release Sept 22, 2020

New locales (es-mx, bn-bd). Minor bugfixes and locale improvements. More tests. Moment is in maintenance mode. Read more at this link: https://momentjs.com/docs/#/-project-status/

2.28.0 See full changelog

Release Sept 13, 2020

Fix bug where .format() modifies original instance, and locale updates

2.27.0 See full changelog

... (truncated)

Commits

485d9a7 Build 2.30.1
e048b09 Bump version to 2.30.1
f9f2d58 Update changelog for 2.30.1
a52ffb2 Revert "Merge pull request #5827 from BobZombie:feature/fix_d.ts"
ddd6809 Build 2.30.0
be64d00 Bump version to 2.30.0
ad41179 Update changelog for 2.30.0
63fe479 [misc] Make code ES6 compatible
0f0195f Revert "Merge pull request #5599 from Alanscut:issue_4985"
15b82f5 Revert "Merge pull request #5597 from Alanscut:issue-5596"
Additional commits viewable in compare view

Updates node-notifier from 5.4.0 to 8.0.2

Changelog

Sourced from node-notifier's changelog.

v8.0.2

Fixes potential security issue with non-escaping input parameters for notify-send.

v8.0.0

Breaking changes:

Expire time for notify-send is made to match macOS and Windows with default time of 10 seconds. The API is changed to take seconds as input and converting it to milliseconds before passing it on to notify-send. See #341.

v7.0.2

Updates dependencies

Fixes issue with haning Windows notifications when disabled (#335)

v7.0.1

Fixes import of uuid, removes deprecation warnings

v7.0.0

Features

NotifySend support for app-name (#299, see docs)

Breaking Changes

All notify messages now have auto bound context to make it easier to pass as variables/arguments (#306)

Updated snoreToast to version 0.7.0 with new input features (#293)

Breaking snoreToast: Sanitizing data now changes "timedout" to "timeout"

v6.0.0

Breaking Changes

Dropped support for node v6. As of v6 we currently support node versions 8, 10, and 12 (latest).

Updated to the latest version of SnoreToast. This removes support for the wait option in that environment as it is now always on. Prepares the way for other new features added to the WindowsToaster.

Other

Update to latest version of dependencies.

v5.4.4

Fixes potential security issue with non-escaping input parameters for notify-send.

v5.4.3

Fixes potential security issue with non-escaping input parameters for notify-send.

... (truncated)

Commits

3420977 v8.0.2
a141580 patch: fixes security issue with non-escaping inputs [GHSL-2020-373]
5d62799 v8.0.1
0c4a80d chore: adds changelog
f5a7bc6 fix: test cases
b9d148d patch: fixes possible injection issue for notify-send
c374fe1 v8.0.0
25ffe15 Bumps dependencies
ee7916a Merge pull request #341 from mikaelbr/timeoutNotifySend
e3decb2 Updates documentation
Additional commits viewable in compare view

Updates node-dev from 4.0.0 to 8.0.0

Release notes

Sourced from node-dev's releases.

v8.0.0 / 2022-12-30

Suppress experimental warnings in node v18 (@tmont)

Drop support for node v12, new minimum version of node is v14 (@bjornstar)

[devDependencies] Update @types/node, eslint, husky, lint-staged, & tap (@bjornstar)

v7.4.3 / 2022-04-17

[loaders] Pass on unsupported extension errors when format is not builtin or commonjs (@bjornstar)

[devDependencies] Update most devDependencies to their latest versions (@bjornstar)

[dependencies] Update minimist, resolve & semver (@bjornstar)

v7.4.2 / 2022-03-29

[wrap] Worker threads inherit node arguments, we only need the main thread to listen for file changes (@lehni)

v7.4.1 / 2022-03-27

[loaders] Do not attempt to resolve urls unless they are file:// urls (@bjornstar)

v7.4.0 / 2022-03-26

Use --require to invoke the wrapper (@kherock)

[loaders] Use fileURLToPath to ensure support on Windows (@kherock)

[wrap] Suppress warnings about using experimental loaders (@kherock)

[tests] Ensure tests pass even if warnings are emitted (@bjornstar)

[CI] Add tests for node v12.10, v12.16, and v17 (@bjornstar)

v7.3.1 / 2022-03-24

Add --experimental-modules for ESM module support on node <12.17 (@bjornstar)

Use ipc.mjs for get-source-loader.mjs (@bjornstar)

[test] Move extensions options tests into their own directory (@bjornstar)

v7.3.0 / 2022-03-22

Add --no-warnings node option (@lehni)

Enable ESM support when package type is set to module (@lehni)

v7.2.0 / 2022-03-04

Add --preserve-symlinks node option

Update tap to v15.1.6

Update eslint to v8.10.0

[README] Fix typo

Add a more explicit test for "All command-line arguments that are not node-dev options are passed on to the node process."

[README] Add special note about delimiting scripts

v7.1.0 / 2021-10-24

[ESM] Update experimental-loader to use new load method from node v16.12.0 onwards

Developer Updates

@types/node updated from v14.14.37 to v16.11.3

eslint updated from v7.25.0 to v8.0.1

husky updated from v6.0.0 to v7.0.4

lint-staged updated from v10.5.4 to v11.2.3

ts-node updated from v9.1.1 to v10.3.1

... (truncated)

Changelog

Sourced from node-dev's changelog.

v8.0.0 / 2022-12-30

Suppress experimental warnings in node v18 (@tmont)

Drop support for node v12, new minimum version of node is v14 (@bjornstar)

[devDependencies] Update @types/node, eslint, husky, lint-staged, & tap (@bjornstar)

v7.4.3 / 2022-04-17

[loaders] Pass on unsupported extension errors when format is not builtin or commonjs (@bjornstar)

[devDependencies] Update most devDependencies to their latest versions (@bjornstar)

[dependencies] Update minimist, resolve & semver (@bjornstar)

v7.4.2 / 2022-03-29

[wrap] Worker threads inherit node arguments, we only need the main thread to listen for file changes (@lehni)

v7.4.1 / 2022-03-27

[loaders] Do not attempt to resolve urls unless they are file:// urls (@bjornstar)

v7.4.0 / 2022-03-26

Use --require to invoke the wrapper (@kherock)

[loaders] Use fileURLToPath to ensure support on Windows (@kherock)

[wrap] Suppress warnings about using experimental loaders (@kherock)

[tests] Ensure tests pass even if warnings are emitted (@bjornstar)

[CI] Add tests for node v12.10, v12.16, and v17 (@bjornstar)

v7.3.1 / 2022-03-24

Add --experimental-modules for ESM module support on node <12.17 (@bjornstar)

Use ipc.mjs for get-source-loader.mjs (@bjornstar)

[test] Move extensions options tests into their own directory (@bjornstar)

v7.3.0 / 2022-03-22

Add --no-warnings node option (@lehni)

Enable ESM support when package type is set to module (@lehni)

v7.2.0 / 2022-03-04

Add --preserve-symlinks node option

Update tap to v15.1.6

Update eslint to v8.10.0

[README] Fix typo

Add a more explicit test for "All command-line arguments that are not node-dev options are passed on to the node process."

[README] Add special note about delimiting scripts

v7.1.0 / 2021-10-24

... (truncated)

Commits

3bc8997 v8.0.0 / 2022-12-30
780913a [github] Drop tests for node v17.x
bd73bbc remove custom handling for various node v12 versions of experimental loaders
93cfca0 Stop testing on node v12
8db42c7 enable experimental-warning test
a696359 suppress experimental warnings on node 18+
d791afa v7.4.3 / 2022-04-17
4897b33 [Loaders] Only return the format if it's builtin or commonjs (fixes #287)
4d92c49 v7.4.2 / 2022-03-29
920dcb3 [ESM] Fix crash with worker threads (#285)
Additional commits viewable in compare view

Updates qs from 6.7.0 to 6.13.1

Changelog

Sourced from qs's changelog.

6.13.1

[Fix] stringify: avoid a crash when a filter key is null

[Fix] utils.merge: functions should not be stringified into keys

[Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset

[Fix] stringify: ensure a non-string filter does not crash

[Refactor] use __proto__ syntax instead of Object.create for null objects

[Refactor] misc cleanup

[Tests] utils.merge: add some coverage

[Tests] fix a test case

[actions] split out node 10-20, and 20+

[Dev Deps] update es-value-fixtures, mock-property, object-inspect, tape

6.13.0

[New] parse: add strictDepth option (#511)

[Tests] use npm audit instead of aud

6.12.3

[Fix] parse: properly account for strictNullHandling when allowEmptyArrays

[meta] fix changelog indentation

6.12.2

[Fix] parse: parse encoded square brackets (#506)

[readme] add CII best practices badge

6.12.1

[Fix] parse: Disable decodeDotInKeys by default to restore previous behavior (#501)

[Performance] utils: Optimize performance under large data volumes, reduce memory usage, and speed up processing (#502)

[Refactor] utils: use +=

[Tests] increase coverage

6.12.0

[New] parse/stringify: add decodeDotInKeys/encodeDotKeys options (#488)

[New] parse: add duplicates option

[New] parse/stringify: add allowEmptyArrays option to allow [] in object values (#487)

[Refactor] parse/stringify: move allowDots config logic to its own variable

[Refactor] stringify: move option-handling code into normalizeStringifyOptions

[readme] update readme, add logos (#484)

[readme] stringify: clarify default arrayFormat behavior

[readme] fix line wrapping

[readme] remove dead badges

[Deps] update side-channel

[meta] make the dist build 50% smaller

[meta] add sideEffects flag

[meta] run build in prepack, not prepublish

[Tests] parse: remove useless tests; add coverage

[Tests] stringify: increase coverage

[Tests] use mock-property

[Tests] stringify: improve coverage

[Dev Deps] update @ljharb/eslint-config , aud, has-override-mistake, has-property-descriptors, mock-property, npmignore, object-inspect, tape

... (truncated)

Commits

f1ee037 v6.13.1
afd20d0 [Dev Deps] update object-inspect
d185cee [actions] split out node 10-20, and 20+
4cf5567 [Dev Deps] update es-value-fixtures, tape
3c8a6f5 [Refactor] use __proto__ syntax instead of Object.create for null objects
96f4d93 [Fix] stringify: avoid a crash when a filter key is null
aa1f0a8 [Fix] utils.merge: functions should not be stringified into keys
2a548a9 [Tests] utils.merge: add some coverage
3e750c1 [Refactor] misc cleanup
ca55d0f [Fix] parse: avoid a crash with interpretNumericEntities: true, comma: true...
Additional commits viewable in compare view

Updates semver from 5.7.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
c83c18c 5.7.1
956e228 Correct typo in README
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates xml2js from 0.4.19 to 0.5.0

Commits

9f730bb Update package.json with latest PR
50a492a Merge pull request #603 from autopulated/master
7bc3c5d Merge pull request #598 from fnimick/master
f412a12 Merge pull request #635 from wisesimpson/patch-1
d318ce0 Update README.md
581b19a use Object.create(null) to create all parsed objects (prevent prototype repla...
a212950 Add documentation for explicitCharkey option
1832e0b Merge pull request #512 from economia/master
198063c Merge pull request #556 from Omega-Ariston/fix-issue544
0d71785 Merge pull request #562 from Omega-Ariston/addDocExample
Additional commits viewable in compare view

Updates node-fetch from 2.5.0 to 2.6.7

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

v2.6.6

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352

Full Changelog: node-fetch/node-fetch@v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

v2.6.0

See CHANGELOG.

Commits

1ef4b56 backport of #1449 (#1453)
8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)
f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...
b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)
18193c5 fix v2.6.3 that did not sending query params (#1301)
ace7536 fix: properly encode url with unicode characters (#1291)
152214c Fix(package.json): Corrected main file path in package.json (#1274)
b5e2e41 update version number
2358a6c Honor the size option after following a redirect and revert data uri support
8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Removes axios

Updates @azure/storage-blob from 10.3.0 to 10.5.0

Commits

See full diff in compare view

Updates follow-redirects from 1.5.10 to 1.11.0

Commits

0de31a8 Release version 1.11.0 of the npm package.
7a2a67a Fix Travis on Node 4.
8e9006c Update dependencies.
724087d Drop Authorization on cross-host redirect.
670c3a7 Release version 1.10.0 of the npm package.
f98d981 Introduce error types and codes.
9df47ad Release version 1.9.1 of the npm package.
ca2d528 Update dependencies.
137c8cf Catch and re-emit request errors.
42971cc Skip inapplicable test.
Additional commits viewable in compare view

Updates find-my-way from 2.0.1 to 2.2.5

Release notes

Sourced from find-my-way's releases.

v2.2.5

Fixes:

Enable versioning on demand - #172 This fix disables the automatic route versioning unless a user has configured at least once a route with the version option.

v2.2.4

📚 PR:

Fix path params match issue (#159) (#160)

v2.2.3

Fixes:

Wildcard route should not be blocked by Parametric with a different method - #152

v2.2.2

Fixes:

No match path param with ignoreTrailingSlash - #146

Use req and res type alias to simplify code - #142

v2.2.1

Fixes:

Fix uppercase static path - #136

Fix type definitions - #137

v2.2.0

Features:

Added support for onBadUrl - #134

v2.1.2

Fixes:

Fixed wildcard handling in case of multiple http methods - #133

Fixes readme typo - #131

v2.1.1

Fix prettyPrint indent - #130

v2.1.0

Expose routes registered - #128

Commits

b846810 Bumped v2.2.5
264a688 Bumped v2.2.4
771d019 Standard
0118ab6 Enable versioning on demand (#172)
1bcedc7 Fix path params match issue (#159) (#160)
4e9d226 Bumped v2.2.3
b4cb4f5 fix #151 Wildcard route should not be blocked by Parametric with diff… (#152)
a5d041f Bumped v2.2.2
275f03f No match path param with ignoreTrailingSlash (#146)
6a3bfaf Use req and res type alias to simplify code (#142)
Additional commits viewable in compare view

Updates json-schema from 0.2.3 to 0.4.0

Commits

f6f6a3b Use a little more robust method of checking instances
ef60987 Update version
b62f1da Protect against constructor modification, #84
fb427cd Link to json-schema-org repository in addition to site, fixes #54
22f1461 Don't allow proto property to be used for schema default/coerce, fixes #84
c52a27c Get basic test to pass
b3f42b3 Add security policy
3b0cec3 Update version
c28470f Update readme to acknowledge the state of the package
7dff9cd Merge pull request #81 from hodovani/patch-1
Additional commits viewable in compare view

Updates jsprim from 1.4.1 to 1.4.2

Changelog

Sourced from jsprim's changelog.

v1.4.2 (2021-11-29)

#35 Backport json-schema 0.4.0 to version 1.4.x

Commits

5c8475f ...
Description has been truncated

Bumps the npm_and_yarn group with 12 updates in the /BuildYourOwnCanvasSamples/1.starter-full-bundle directory: | Package | From | To | | --- | --- | --- | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.5.0` | `2.6.7` | | [axios](https://github.com/axios/axios) | `0.18.1` | `removed` | | [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js) | `10.3.0` | `10.5.0` | | [find-my-way](https://github.com/delvedor/find-my-way) | `2.0.1` | `2.2.5` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [moment](https://github.com/moment/moment) | `2.24.0` | `2.30.1` | | [node-notifier](https://github.com/mikaelbr/node-notifier) | `5.4.0` | `8.0.2` | | [node-dev](https://github.com/fgnass/node-dev) | `4.0.0` | `8.0.0` | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.13.1` | | [semver](https://github.com/npm/node-semver) | `5.7.0` | `5.7.2` | Bumps the npm_and_yarn group with 12 updates in the /BuildYourOwnCanvasSamples/2.location-and-file-uploading/web directory: | Package | From | To | | --- | --- | --- | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.5.0` | `2.6.7` | | [axios](https://github.com/axios/axios) | `0.18.1` | `removed` | | [@azure/storage-blob](https://github.com/Azure/azure-sdk-for-js) | `10.3.0` | `10.5.0` | | [find-my-way](https://github.com/delvedor/find-my-way) | `2.0.1` | `2.2.5` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [moment](https://github.com/moment/moment) | `2.24.0` | `2.30.1` | | [node-notifier](https://github.com/mikaelbr/node-notifier) | `5.4.0` | `8.0.2` | | [node-dev](https://github.com/fgnass/node-dev) | `4.0.0` | `8.0.0` | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.13.1` | | [semver](https://github.com/npm/node-semver) | `5.7.0` | `5.7.2` | Updates `node-fetch` from 2.5.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.5.0...v2.6.7) Removes `axios` Updates `@azure/storage-blob` from 10.3.0 to 10.5.0 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/storage-file_10.3.0...@azure/storage-blob_10.5.0) Updates `follow-redirects` from 1.5.10 to 1.11.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.5.10...v1.11.0) Updates `find-my-way` from 2.0.1 to 2.2.5 - [Release notes](https://github.com/delvedor/find-my-way/releases) - [Commits](delvedor/find-my-way@v2.0.1...v2.2.5) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `moment` from 2.24.0 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.24.0...2.30.1) Updates `node-notifier` from 5.4.0 to 8.0.2 - [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md) - [Commits](mikaelbr/node-notifier@v5.4.0...v8.0.2) Updates `node-dev` from 4.0.0 to 8.0.0 - [Release notes](https://github.com/fgnass/node-dev/releases) - [Changelog](https://github.com/fgnass/node-dev/blob/master/CHANGELOG.md) - [Commits](fgnass/node-dev@v4.0.0...v8.0.0) Updates `qs` from 6.7.0 to 6.13.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.13.1) Updates `semver` from 5.7.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.0...v5.7.2) Updates `xml2js` from 0.4.19 to 0.5.0 - [Commits](Leonidas-from-XIV/node-xml2js@0.4.19...0.5.0) Updates `node-fetch` from 2.5.0 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.5.0...v2.6.7) Removes `axios` Updates `@azure/storage-blob` from 10.3.0 to 10.5.0 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/storage-file_10.3.0...@azure/storage-blob_10.5.0) Updates `follow-redirects` from 1.5.10 to 1.11.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.5.10...v1.11.0) Updates `find-my-way` from 2.0.1 to 2.2.5 - [Release notes](https://github.com/delvedor/find-my-way/releases) - [Commits](delvedor/find-my-way@v2.0.1...v2.2.5) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `moment` from 2.24.0 to 2.30.1 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.24.0...2.30.1) Updates `node-notifier` from 5.4.0 to 8.0.2 - [Changelog](https://github.com/mikaelbr/node-notifier/blob/master/CHANGELOG.md) - [Commits](mikaelbr/node-notifier@v5.4.0...v8.0.2) Updates `node-dev` from 4.0.0 to 8.0.0 - [Release notes](https://github.com/fgnass/node-dev/releases) - [Changelog](https://github.com/fgnass/node-dev/blob/master/CHANGELOG.md) - [Commits](fgnass/node-dev@v4.0.0...v8.0.0) Updates `qs` from 6.7.0 to 6.13.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.13.1) Updates `semver` from 5.7.0 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.0...v5.7.2) Updates `xml2js` from 0.4.19 to 0.5.0 - [Commits](Leonidas-from-XIV/node-xml2js@0.4.19...0.5.0) --- updated-dependencies: - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@azure/storage-blob" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: find-my-way dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-notifier dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-dev dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@azure/storage-blob" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: find-my-way dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: moment dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-notifier dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-dev dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: xml2js dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 10, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 2 directories with 14 updates #1

Bump the npm_and_yarn group across 2 directories with 14 updates #1

dependabot bot commented on behalf of github Dec 10, 2024

Bump the npm_and_yarn group across 2 directories with 14 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 2 directories with 14 updates #1

Conversation

dependabot bot commented on behalf of github Dec 10, 2024

v2.6.7

Security patch release

What's Changed

v2.6.6

What's Changed

v2.6.2

v2.6.1

v2.6.0

v2.2.5

v2.2.4

v2.2.3

v2.2.2

v2.2.1

v2.2.0

v2.1.2

v2.1.1

v2.1.0

v1.4.2 (2021-11-29)

2.30.1

2.30.0 Full changelog

2.29.4

2.29.3 Full changelog

2.29.2 See full changelog

2.29.1 See full changelog

2.29.0 See full changelog

2.28.0 See full changelog

2.27.0 See full changelog

v8.0.2

v8.0.0

v7.0.2

v7.0.1

v7.0.0

Features

Breaking Changes

v6.0.0

Breaking Changes

Other

v5.4.4

v5.4.3

v8.0.0 / 2022-12-30

v7.4.3 / 2022-04-17

v7.4.2 / 2022-03-29

v7.4.1 / 2022-03-27

v7.4.0 / 2022-03-26

v7.3.1 / 2022-03-24

v7.3.0 / 2022-03-22

v7.2.0 / 2022-03-04

v7.1.0 / 2021-10-24

Developer Updates

v8.0.0 / 2022-12-30

v7.4.3 / 2022-04-17

v7.4.2 / 2022-03-29

v7.4.1 / 2022-03-27

v7.4.0 / 2022-03-26

v7.3.1 / 2022-03-24

v7.3.0 / 2022-03-22

v7.2.0 / 2022-03-04

v7.1.0 / 2021-10-24

6.13.1

6.13.0

6.12.3

6.12.2

6.12.1

6.12.0

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

`v8.0.2`

`v8.0.0`

`v7.0.2`

`v7.0.1`

`v7.0.0`

`v6.0.0`

`v5.4.4`

`v5.4.3`