chore(deps): update devdependencies (non-major) (master) (patch) #1438

mend-for-github-com · 2024-10-09T02:21:21Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@open-wc/semantic-dom-diff (source)	`0.19.4` -> `0.19.9`
@types/ramda (source)	`0.27.44` -> `0.27.66`
@types/serve-handler (source)	`6.1.1` -> `6.1.4`
@whitespace/storybook-addon-html	`5.0.0` -> `5.0.3`
chai (source)	`4.3.4` -> `4.3.10`
chai-a11y-axe (source)	`1.3.1` -> `1.3.2`
chokidar	`3.5.2` -> `3.5.3`
command-line-args	`5.2.0` -> `5.2.1`
command-line-usage	`6.1.1` -> `6.1.3`
depcheck	`1.4.2` -> `1.4.7`
eslint-plugin-import	`2.25.2` -> `2.25.4`
fibers	`5.0.0` -> `5.0.3`
glob	`7.2.0` -> `7.2.3`
got	`11.8.2` -> `11.8.6`
husky	`7.0.2` -> `7.0.4`
immer	`9.0.6` -> `9.0.21`
jimp	`0.16.1` -> `0.16.13`
karma-chrome-launcher	`3.1.0` -> `3.1.1`
karma-file-fixtures-preprocessor	`3.0.1` -> `3.0.2`
karma-firefox-launcher	`2.1.1` -> `2.1.3`
lint-staged	`11.2.0` -> `11.2.6`
minimist	`1.2.6` -> `1.2.8`
standard-version	`9.3.1` -> `9.3.2`
style-dictionary	`3.0.1` -> `3.0.3`
stylelint-no-unsupported-browser-features	`5.0.2` -> `5.0.4`
ts-loader	`9.2.5` -> `9.2.9`
tslib (source)	`2.3.0` -> `2.3.1`
web-component-analyzer	`1.1.6` -> `1.1.7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

open-wc/open-wc (@open-wc/semantic-dom-diff)

`v0.19.9`

Compare Source

Patch Changes

9e49e7a: fix(deps): update @web/* dependencies

`v0.19.8`

Compare Source

Patch Changes

2629244: Change return type from Assertion to Promise

`v0.19.7`

Compare Source

Patch Changes

735b009: Avoid saving unchanged snapshots

`v0.19.6`

Patch Changes

a7e9c20: chore(semantic-dom-diff): updates dependencies

`v0.19.5`

Patch Changes

b9b11ad: support snapshot testing with Web Test Runner
b6e868d: Use latest dependencies
40837d1: - use latest axe-core
- allow not required attributes in role testing
580ce0e: Snapshot testing with WTR updated to not modify the snapshot files running the test

whitespace-se/storybook-addon-html (@whitespace/storybook-addon-html)

chaijs/chai (chai)

`v4.3.10`

Compare Source

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

upgrade all dependencies by @keithamus in https://github.com/chaijs/chai/pull/1540

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

`v4.3.9`

Compare Source

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

`v4.3.8`

Compare Source

What's Changed

4.x.x: Fix link to commit logs on GitHub by @bugwelle in https://github.com/chaijs/chai/pull/1487
build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by @dependabot in https://github.com/chaijs/chai/pull/1488
Small typo in test.js by @mavaddat in https://github.com/chaijs/chai/pull/1459
docs: specify return type of objDisplay by @scarf005 in https://github.com/chaijs/chai/pull/1490
Update CONTRIBUTING.md by @matheus-rodrigues00 in https://github.com/chaijs/chai/pull/1521
Fix: update exports.version to current version by @peanutenthusiast in https://github.com/chaijs/chai/pull/1534

New Contributors

@bugwelle made their first contribution in https://github.com/chaijs/chai/pull/1487
@mavaddat made their first contribution in https://github.com/chaijs/chai/pull/1459
@scarf005 made their first contribution in https://github.com/chaijs/chai/pull/1490
@matheus-rodrigues00 made their first contribution in https://github.com/chaijs/chai/pull/1521
@peanutenthusiast made their first contribution in https://github.com/chaijs/chai/pull/1534

Full Changelog: chaijs/chai@v4.3.7...v4.3.8

`v4.3.7`

Compare Source

What's Changed

fix: deep-eql bump package to support symbols comparison by @snewcomer in https://github.com/chaijs/chai/pull/1483

Full Changelog: chaijs/chai@v4.3.6...v4.3.7

`v4.3.6`

Compare Source

Update loupe to 2.3.1

`v4.3.5`

Compare Source

build chaijs fca5bb1
build(deps-dev): bump codecov from 3.1.0 to 3.7.1 (#1446) 747eb4e
fix package.json exports 022c2fa
fix: package.json - deprecation warning on exports field (#1400) 5276af6
feat: use chaijs/loupe for inspection (#1401) (#1407) c8a4e00

open-wc/open-wc (chai-a11y-axe)

`v1.3.2`

Patch Changes

40837d1: - use latest axe-core
- allow not required attributes in role testing
6940a3c: fix: override bad publication

paulmillr/chokidar (chokidar)

`v3.5.3`

Compare Source

What's Changed

types: use correct type def for ignored option by @iheyunfei in https://github.com/paulmillr/chokidar/pull/1140
Update chokidar-cli link in README.md by @mcecode in https://github.com/paulmillr/chokidar/pull/1142
handle promise rejection when a symlink's target does not exist. Fixe… by @nicks in https://github.com/paulmillr/chokidar/pull/1010
fix: improve add and unwatch TypeScript definitions by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1157
Enable dtslinting by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1158
style: delete yarn.lock by @alan-agius4 in https://github.com/paulmillr/chokidar/pull/1159

New Contributors

@iheyunfei made their first contribution in https://github.com/paulmillr/chokidar/pull/1140
@mcecode made their first contribution in https://github.com/paulmillr/chokidar/pull/1142
@nicks made their first contribution in https://github.com/paulmillr/chokidar/pull/1010
@alan-agius4 made their first contribution in https://github.com/paulmillr/chokidar/pull/1157

Full Changelog: paulmillr/chokidar@3.5.2...3.5.3

75lb/command-line-args (command-line-args)

`v5.2.1`

Compare Source

75lb/command-line-usage (command-line-usage)

`v6.1.3`

Compare Source

`v6.1.2`

Compare Source

depcheck/depcheck (depcheck)

`v1.4.7`

Compare Source

Full Changelog

Fixed bugs:

False positive missing dependency with SCSS files on Windows #838
A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

Update babel packages to latest #843 (legobeat)
Support package.json subpath imports #836 (dobesv)
--quiet: don't print an empty line if nothing to report #835 (seansfkelley)
chore: bump dependencies #801 (legobeat)

`v1.4.6`

Compare Source

Full Changelog

Closed issues:

Add explicitResourceManagement to default TS babel config #833
Flag to make logs readable and less verbose #759

Merged pull requests:

Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
Support projects field in jest configuration #831 (dobesv)
Handle scoped package bin with default name #830 (dobesv)
feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
fix(sass): don't detect transitive dependencies #827 (miluoshi)
feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
fix(storybook): parse package names out of addons array #825 (miluoshi)

`v1.4.5`

Compare Source

Full Changelog

`v1.4.3`

Compare Source

Full Changelog

Fixed bugs:

Different results when running depcheck from npm install -g vs npx #689
Fails with Top-Level Await #671

Closed issues:

false alert on file src/server.js #655
Svelte Support #650
False positive: types-only dependencies #568

Merged pull requests:

feat(eslint): add support for .eslintrc.cjs #681 (shian15810)
feat(types): improve typings #680 (shian15810)
cli: --oneline option #679 (vanodevium)
fix: allow using @types-module for typescript type-only imports #670 (rexxars)
Support next.config.js with next-transpile-modules #660 (crossjs)
Fix scss parsing for non-import '@' keywords #658 (Dylanlan)
feat: detect deps used with -r in package.json #657 (Dylanlan)
Support babel.config.js(on) files #656 (crossjs)

import-js/eslint-plugin-import (eslint-plugin-import)

`v2.25.4`

Compare Source

Fixed

importType: avoid crashing on a non-string' ([#2305], thanks [@ljharb])
[first]: prevent crash when parsing angular templates ([#2210], thanks [@ljharb])
importType: properly resolve @/*-aliased imports as internal ([#2334], thanks [@ombene])
[named]/ExportMap: handle named imports from CJS modules that use dynamic import ([#2341], thanks [@ludofischer])

Changed

[no-default-import]: report on the token "default" instead of the entire node ([#2299], thanks [@pmcelhaney])
[Docs] [order]: Remove duplicate mention of default ([#2280], thanks [@johnthagen])
[Deps] update eslint-module-utils

`v2.25.3`

Compare Source

Fixed

[extensions]: ignore unresolveable type-only imports ([#2270], [#2271], thanks [@jablko])
importType: fix isExternalModule calculation ([#2282], thanks [@mx-bernhard])
[no-import-module-exports]: avoid false positives with a shadowed module or exports ([#2297], thanks [@ljharb])

Changed

[Docs] [order]: add type to the default groups ([#2272], thanks [@charpeni])
[readme] Add note to TypeScript docs to install appropriate resolver ([#2279], thanks [@johnthagen])
[Refactor] importType: combine redundant isScoped and isScopedModule (thanks [@ljharb])
[Docs] HTTP => HTTPS ([#2287], thanks [@Schweinepriester])

laverdet/node-fibers (fibers)

`v5.0.2`

Compare Source

`v5.0.1`

Compare Source

isaacs/node-glob (glob)

`v7.2.3`

Compare Source

`v7.2.2`

Compare Source

sindresorhus/got (got)

`v11.8.6`

Compare Source

Destroy request object after successful response

`v11.8.5`

Compare Source

Backport security fix sindresorhus/got@861ccd9
- CVE-2022-33987

`v11.8.3`

Compare Source

Bump cacheable-request dependency (#1921) 9463bb6
Fix HTTPError missing .code property (#1739) 0e167b8

typicode/husky (husky)

`v7.0.4`

Compare Source

No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.

`v7.0.3`

Compare Source

immerjs/immer (immer)

`v9.0.21`

Compare Source

Bug Fixes

ensure type exports is first in package.json export declaration (#1018) (b6ccd0f)

`v9.0.20`

Compare Source

Bug Fixes

patching maps failed when using number keys (#1025) (dd83e2e)

`v9.0.19`

Compare Source

Bug Fixes

don't freeze drafts returned from produce if they were passed in as draft (#917) (46867f8)
produce results should never be frozen when returned from nested produces, to prevent 'hiding' drafts. Fixes #935 (a810960)
release and publish from 'main' rather than 'master' branch (82acc40)
revert earlier fix (#990) for recursive types (#1014) (3eeb331)
Upgrade Github actions to Node 16 attempt 1 (9d4ea93)
Upgrade Github actions to Node 16 attempt 2 (082eecd)

`v9.0.18`

Compare Source

Bug Fixes

Preserve insertion order of Sets, fixes #819 (#976) (b3eeb69)
unnecessarily recursive Draft type (#990) (b9eae1d)

`v9.0.17`

Compare Source

Bug Fixes

special case NaN in setter (#912) (5721bb7)

`v9.0.16`

Compare Source

Bug Fixes

protect isDraftable against undefined constructor (#969) (ced4563)

`v9.0.15`

Compare Source

Bug Fixes

Add "types" to exports for TypeScript 4.7 (#946) (85ce6b7)

`v9.0.14`

Compare Source

Bug Fixes

Use .esm.js module for backwards compatibility with old build tools (#939) (d30d219)

`v9.0.13`

Compare Source

Bug Fixes

consistent recipe return type in produceWithPatches (#934) (220d61d)
incorrect return type for async produceWithPatches (#933) (9f7623d)

`v9.0.12`

Compare Source

Bug Fixes

produceWithPatches should not wrap result in Immutable, fixes #850, #881 (d8f2636)

`v9.0.11`

Compare Source

Bug Fixes

incorrect patches for delete on arrays. Fixes #879 (d91a659)

`v9.0.10`

Compare Source

Bug Fixes

No patches being generated for root primitive replacements. Fixes #888 (0f96270)

`v9.0.9`

Compare Source

Bug Fixes

make sure produceWithPatches accepts promises (d80e823)

`v9.0.8`

Compare Source

Bug Fixes

immerjs#876 Ensure empty patch set for atomic set+delete on Map (#878) (e140918)

`v9.0.7`

Compare Source

Bug Fixes

Append to array when key is "-" (#872) (2afdb1b)

jimp-dev/jimp (jimp)

`v0.16.13`

Compare Source

🐛 Bug Fix

Bump qs from 6.5.2 to 6.5.3 #1130 (@dependabot[bot])
Fixed typo in the bug report template #1109 (@danielholmes)
@jimp/plugin-crop
- fixed plugin-crop full width slices math #1073 (@endreszabo)
@jimp/core, jimp, @jimp/plugin-color
- Fix edgeHandling types #1080 (@domdomegg)
jimp
- Readme: Fix measureText sample code #1102 (@dkong @hipstersmoothie)
@jimp/plugin-print
- Update README.md #1120 (@mfuatnuroglu)
@jimp/core
- upgrade file-type #1108 (@krudos)

⚠️ Pushed to `master`

set at org (@hipstersmoothie)
set user directly (@hipstersmoothie)
try this (@hipstersmoothie)
update key (@hipstersmoothie)
fix patch (@hipstersmoothie)
fixing release (@hipstersmoothie)
test auto fix (@hipstersmoothie)
fix repo (@hipstersmoothie)
testing (@hipstersmoothie)
fix token (@hipstersmoothie)
actually fix release (@hipstersmoothie)
fix checkout? (@hipstersmoothie)
@jimp/core, jimp, @jimp/plugin-print
- try this (@hipstersmoothie)
@jimp/cli, @jimp/core, jimp, @jimp/plugin-blit, @jimp/plugin-color, @jimp/test-utils, @jimp/png
- update linting (@hipstersmoothie)
@jimp/cli, @jimp/core, @jimp/custom, jimp, @jimp/plugin-blit, @jimp/plugin-blur, @jimp/plugin-circle, @jimp/plugin-color, @jimp/plugin-contain, @jimp/plugin-cover, @jimp/plugin-crop, @jimp/plugin-displace, @jimp/plugin-dither, @jimp/plugin-fisheye, @jimp/plugin-flip, @jimp/plugin-gaussian, @jimp/plugin-invert, @jimp/plugin-mask, @jimp/plugin-normalize, @jimp/plugin-print, @jimp/plugin-resize, @jimp/plugin-rotate, @jimp/plugin-scale, @jimp/plugin-shadow, @jimp/plugin-threshold, @jimp/plugins, @jimp/test-utils, @jimp/bmp, @jimp/gif, @jimp/jpeg, @jimp/png, @jimp/tiff, @jimp/types, @jimp/utils
- upgrade prettier (@hipstersmoothie)

🏠 Internal

only build node 16 #1127 (@hipstersmoothie)

📝 Documentation

it's -> its ;) #992 (@stuarth)

Authors: 9

@dependabot[bot]
@krudos
@mfuatnuroglu
Adam Jones (@domdomegg)
Andrew Lisowski (@hipstersmoothie)
Daniel Holmes (@danielholmes)
Dara Kong (@dkong)
Endre Szabo (@endreszabo)
Stuart Hinson (@stuarth)

`v0.16.12`

Compare Source

`v0.16.11`

Compare Source

`v0.16.10`

Compare Source

`v0.16.9`

Compare Source

`v0.16.8`

Compare Source

`v0.16.7`

Compare Source

`v0.16.6`

Compare Source

`v0.16.5`

Compare Source

`v0.16.4`

Compare Source

[`v0.16.

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

github-actions · 2024-10-09T02:21:33Z

🚀

Latest successful build of the PR deployed here.

🚀

sonarcloud · 2024-10-20T02:26:18Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

mend-for-github-com bot added the patch release label Oct 9, 2024

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 6 times, most recently from 6610230 to f4cdd3c Compare October 16, 2024 02:33

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch 2 times, most recently from 3de050a to b0d93d7 Compare October 18, 2024 02:31

chore(deps): update devdependencies (non-major)

a306ca4

mend-for-github-com bot force-pushed the whitesource-remediate/master-patch-dev-dependencies-non-major branch from b0d93d7 to a306ca4 Compare October 20, 2024 02:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update devdependencies (non-major) (master) (patch) #1438

chore(deps): update devdependencies (non-major) (master) (patch) #1438

mend-for-github-com bot commented Oct 9, 2024

github-actions bot commented Oct 9, 2024

sonarcloud bot commented Oct 20, 2024

chore(deps): update devdependencies (non-major) (master) (patch) #1438

Are you sure you want to change the base?

chore(deps): update devdependencies (non-major) (master) (patch) #1438

Conversation

mend-for-github-com bot commented Oct 9, 2024

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

What's Changed

What's Changed

New Contributors

What's Changed

Patch Changes

What's Changed

New Contributors

Fixed

Changed

Fixed

Changed

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

🐛 Bug Fix

⚠️ Pushed to master

🏠 Internal

📝 Documentation

Authors: 9

[`v0.16.

Configuration

github-actions bot commented Oct 9, 2024

sonarcloud bot commented Oct 20, 2024

Quality Gate passed

⚠️ Pushed to `master`