Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JS deps security updates #48200

Merged
merged 3 commits into from
Oct 31, 2024
Merged

JS deps security updates #48200

merged 3 commits into from
Oct 31, 2024

Conversation

gzdunek
Copy link
Contributor

@gzdunek gzdunek commented Oct 31, 2024

Closes https://github.com/gravitational/teleport/security/dependabot/319 and https://github.com/gravitational/teleport/security/dependabot/320

I had to add an override for @bundled-es-modules/cookie because it didn't allow updating cookie to anything above 0.5.x ("cookie": "^0.5.0"). We will be able to remove it once a new version of @bundled-es-modules/cookie is released bundled-es-modules/cookie#3.

@gzdunek gzdunek added no-changelog Indicates that a PR does not require a changelog entry backport/branch/v17 labels Oct 31, 2024
@gzdunek gzdunek requested review from ravicious and zmb3 October 31, 2024 10:11
Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-48200.d3pp5qlev8mo18.amplifyapp.com

@@ -28,6 +28,11 @@
"nop": "exit 0"
},
"private": true,
"pnpm": {
"overrides": {
"@bundled-es-modules/cookie>cookie": "0.7.1"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cookie is used only by dev deps (Storybook), so this override seems okay to me. FWIW, path-to-regexp is used only by msw and Storybook as well.

@gzdunek gzdunek added this pull request to the merge queue Oct 31, 2024
Merged via the queue into master with commit b998b92 Oct 31, 2024
42 checks passed
@gzdunek gzdunek deleted the gzdunek/security-deps-updates branch October 31, 2024 12:46
@public-teleport-github-review-bot

@gzdunek See the table below for backport results.

Branch Result
branch/v17 Create PR

ravicious added a commit that referenced this pull request Dec 3, 2024
This was done in #48200 and is no longer needed, since this package
now uses cookie 0.7.2 as a dep.
ravicious added a commit that referenced this pull request Dec 3, 2024
This was done in #48200 and is no longer needed, since this package
now uses cookie 0.7.2 as a dep.
github-merge-queue bot pushed a commit that referenced this pull request Dec 3, 2024
* Bump the ui group across 1 directory with 58 updates

Bumps the ui group with 58 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.18.1` | `6.18.3` |
| [@codemirror/lang-sql](https://github.com/codemirror/lang-sql) | `6.7.1` | `6.8.0` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.34.1` | `6.35.0` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.11.3` | `1.12.2` |
| [@nivo/bar](https://github.com/plouc/nivo/tree/HEAD/packages/bar) | `0.87.0` | `0.88.0` |
| [@uiw/codemirror-themes](https://github.com/uiwjs/react-codemirror) | `4.23.3` | `4.23.6` |
| [@uiw/react-codemirror](https://github.com/uiwjs/react-codemirror) | `4.23.3` | `4.23.6` |
| [react-select](https://github.com/JedWatson/react-select) | `5.8.1` | `5.8.3` |
| [tslib](https://github.com/Microsoft/tslib) | `2.7.0` | `2.8.1` |
| [@storybook/addon-actions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/actions) | `8.3.4` | `8.4.6` |
| [@storybook/addon-controls](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/controls) | `8.3.4` | `8.4.6` |
| [@storybook/addon-toolbars](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/toolbars) | `8.3.4` | `8.4.6` |
| [@storybook/components](https://github.com/storybookjs/storybook/tree/HEAD/code/deprecated/components) | `8.3.4` | `8.4.6` |
| [@storybook/preview-api](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/preview-api) | `8.3.4` | `8.4.6` |
| [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) | `8.3.4` | `8.4.6` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `8.3.4` | `8.4.6` |
| [@storybook/test-runner](https://github.com/storybookjs/test-runner) | `0.19.1` | `0.20.0` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.5.0` | `6.6.3` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.13` | `29.5.14` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.16.10` | `20.17.9` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.10` | `18.3.12` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.0` | `18.3.1` |
| [msw](https://github.com/mswjs/msw) | `2.4.9` | `2.6.6` |
| [msw-storybook-addon](https://github.com/mswjs/msw-storybook-addon/tree/HEAD/packages/msw-addon) | `2.0.3` | `2.0.4` |
| [playwright](https://github.com/microsoft/playwright) | `1.47.2` | `1.49.0` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.1` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `8.3.4` | `8.4.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.2` | `5.7.2` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.25.2` | `7.26.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.4` | `7.26.0` |
| [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.24.7` | `7.25.9` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.24.7` | `7.26.0` |
| [@swc/core](https://github.com/swc-project/swc) | `1.7.26` | `1.9.3` |
| [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) | `3.7.1` | `3.7.2` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.30.0` | `2.31.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `28.8.3` | `28.9.0` |
| [eslint-plugin-jest-dom](https://github.com/testing-library/eslint-plugin-jest-dom) | `5.4.0` | `5.5.0` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.0` | `7.37.2` |
| [jest-fail-on-console](https://github.com/ValentinH/jest-fail-on-console) | `3.3.0` | `3.3.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.12.2` | `8.16.0` |
| [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `5.0.1` | `5.1.3` |
| [@types/styled-system](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/styled-system) | `5.1.22` | `5.1.23` |
| [ace-builds](https://github.com/ajaxorg/ace-builds) | `1.36.2` | `1.36.5` |
| [@opentelemetry/context-zone](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` |
| [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` |
| [@opentelemetry/instrumentation-document-load](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.40.0` | `0.42.0` |
| [@opentelemetry/instrumentation-fetch](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` |
| [@opentelemetry/instrumentation-user-interaction](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.40.0` | `0.42.0` |
| [@opentelemetry/instrumentation-xml-http-request](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` |
| [@opentelemetry/propagator-b3](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` |
| [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.27.0` | `1.28.0` |
| [winston](https://github.com/winstonjs/winston) | `3.14.2` | `3.17.0` |
| [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.23.3` | `3.23.5` |



Updates `@codemirror/autocomplete` from 6.18.1 to 6.18.3
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](codemirror/autocomplete@6.18.1...6.18.3)

Updates `@codemirror/lang-sql` from 6.7.1 to 6.8.0
- [Changelog](https://github.com/codemirror/lang-sql/blob/main/CHANGELOG.md)
- [Commits](codemirror/lang-sql@6.7.1...6.8.0)

Updates `@codemirror/view` from 6.34.1 to 6.35.0
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](codemirror/view@6.34.1...6.35.0)

Updates `@grpc/grpc-js` from 1.11.3 to 1.12.2
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `@nivo/bar` from 0.87.0 to 0.88.0
- [Release notes](https://github.com/plouc/nivo/releases)
- [Changelog](https://github.com/plouc/nivo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/plouc/nivo/commits/v0.88.0/packages/bar)

Updates `@uiw/codemirror-themes` from 4.23.3 to 4.23.6
- [Release notes](https://github.com/uiwjs/react-codemirror/releases)
- [Commits](uiwjs/react-codemirror@v4.23.3...v4.23.6)

Updates `@uiw/react-codemirror` from 4.23.3 to 4.23.6
- [Release notes](https://github.com/uiwjs/react-codemirror/releases)
- [Commits](uiwjs/react-codemirror@v4.23.3...v4.23.6)

Updates `react-select` from 5.8.1 to 5.8.3
- [Release notes](https://github.com/JedWatson/react-select/releases)
- [Changelog](https://github.com/JedWatson/react-select/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/JedWatson/react-select/compare/[email protected]@5.8.3)

Updates `tslib` from 2.7.0 to 2.8.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@v2.7.0...v2.8.1)

Updates `@storybook/addon-actions` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/actions)

Updates `@storybook/addon-controls` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/controls)

Updates `@storybook/addon-toolbars` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/toolbars)

Updates `@storybook/components` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/deprecated/components)

Updates `@storybook/preview-api` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/lib/preview-api)

Updates `@storybook/react` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/renderers/react)

Updates `@storybook/react-vite` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/frameworks/react-vite)

Updates `@storybook/test-runner` from 0.19.1 to 0.20.0
- [Release notes](https://github.com/storybookjs/test-runner/releases)
- [Changelog](https://github.com/storybookjs/test-runner/blob/v0.20.0/CHANGELOG.md)
- [Commits](storybookjs/test-runner@v0.19.1...v0.20.0)

Updates `@testing-library/jest-dom` from 6.5.0 to 6.6.3
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.5.0...v6.6.3)

Updates `@types/jest` from 29.5.13 to 29.5.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `@types/node` from 20.16.10 to 20.17.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 18.3.10 to 18.3.12
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.0 to 18.3.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `msw` from 2.4.9 to 2.6.6
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.4.9...v2.6.6)

Updates `msw-storybook-addon` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/mswjs/msw-storybook-addon/releases)
- [Changelog](https://github.com/mswjs/msw-storybook-addon/blob/main/packages/msw-addon/CHANGELOG.md)
- [Commits](https://github.com/mswjs/msw-storybook-addon/commits/v2.0.4/packages/msw-addon)

Updates `playwright` from 1.47.2 to 1.49.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.47.2...v1.49.0)

Updates `prettier` from 3.3.3 to 3.4.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.4.1)

Updates `storybook` from 8.3.4 to 8.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/lib/cli)

Updates `typescript` from 5.6.2 to 5.7.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.6.2...v5.7.2)

Updates `@babel/core` from 7.25.2 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-core)

Updates `@babel/preset-env` from 7.25.4 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.24.7 to 7.25.9
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-preset-react)

Updates `@babel/preset-typescript` from 7.24.7 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-typescript)

Updates `@swc/core` from 1.7.26 to 1.9.3
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](swc-project/swc@v1.7.26...v1.9.3)

Updates `@vitejs/plugin-react-swc` from 3.7.1 to 3.7.2
- [Release notes](https://github.com/vitejs/vite-plugin-react-swc/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react-swc/blob/main/CHANGELOG.md)
- [Commits](vitejs/vite-plugin-react-swc@v3.7.1...v3.7.2)

Updates `eslint-plugin-import` from 2.30.0 to 2.31.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.30.0...v2.31.0)

Updates `eslint-plugin-jest` from 28.8.3 to 28.9.0
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v28.8.3...v28.9.0)

Updates `eslint-plugin-jest-dom` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/testing-library/eslint-plugin-jest-dom/releases)
- [Commits](testing-library/eslint-plugin-jest-dom@v5.4.0...v5.5.0)

Updates `eslint-plugin-react` from 7.37.0 to 7.37.2
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.0...v7.37.2)

Updates `jest-fail-on-console` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ValentinH/jest-fail-on-console/releases)
- [Commits](ValentinH/jest-fail-on-console@v3.3.0...v3.3.1)

Updates `typescript-eslint` from 8.12.2 to 8.16.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.16.0/packages/typescript-eslint)

Updates `vite-tsconfig-paths` from 5.0.1 to 5.1.3
- [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases)
- [Commits](aleclarson/vite-tsconfig-paths@v5.0.1...v5.1.3)

Updates `@types/styled-system` from 5.1.22 to 5.1.23
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/styled-system)

Updates `ace-builds` from 1.36.2 to 1.36.5
- [Release notes](https://github.com/ajaxorg/ace-builds/releases)
- [Changelog](https://github.com/ajaxorg/ace-builds/blob/master/CHANGELOG.md)
- [Commits](ajaxorg/ace-builds@v1.36.2...v1.36.5)

Updates `@opentelemetry/context-zone` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/core` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/exporter-trace-otlp-http` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0)

Updates `@opentelemetry/instrumentation` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0)

Updates `@opentelemetry/instrumentation-document-load` from 0.40.0 to 0.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js-contrib@sql-common-v0.40.0...instrumentation-pg-v0.42.0)

Updates `@opentelemetry/instrumentation-fetch` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0)

Updates `@opentelemetry/instrumentation-user-interaction` from 0.40.0 to 0.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js-contrib@sql-common-v0.40.0...instrumentation-pg-v0.42.0)

Updates `@opentelemetry/instrumentation-xml-http-request` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0)

Updates `@opentelemetry/propagator-b3` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/resources` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/sdk-trace-base` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/sdk-trace-web` from 1.26.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0)

Updates `@opentelemetry/semantic-conventions` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@v1.27.0...v1.28.0)

Updates `winston` from 3.14.2 to 3.17.0
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.14.2...v3.17.0)

Updates `zod-to-json-schema` from 3.23.3 to 3.23.5
- [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases)
- [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md)
- [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: "@codemirror/lang-sql"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@codemirror/view"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@grpc/grpc-js"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@nivo/bar"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@uiw/codemirror-themes"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: "@uiw/react-codemirror"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: react-select
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: tslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/addon-actions"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/addon-controls"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/addon-toolbars"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/components"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/preview-api"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/react"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/react-vite"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@storybook/test-runner"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: "@types/react-dom"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: msw
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: msw-storybook-addon
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: playwright
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: storybook
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@babel/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@babel/preset-env"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@babel/preset-react"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@babel/preset-typescript"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@swc/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@vitejs/plugin-react-swc"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: eslint-plugin-import
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: eslint-plugin-jest
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: eslint-plugin-jest-dom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: eslint-plugin-react
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: jest-fail-on-console
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: typescript-eslint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: vite-tsconfig-paths
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@types/styled-system"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: ace-builds
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui
- dependency-name: "@opentelemetry/context-zone"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/exporter-trace-otlp-http"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/instrumentation"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/instrumentation-document-load"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/instrumentation-fetch"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/instrumentation-user-interaction"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/instrumentation-xml-http-request"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/propagator-b3"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/resources"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/sdk-trace-base"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/sdk-trace-web"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: "@opentelemetry/semantic-conventions"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: winston
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui
- dependency-name: zod-to-json-schema
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui
...

Signed-off-by: dependabot[bot] <[email protected]>

* Add BroadcastChannel and TransformStream to patched JSDOM env

* Dedupe packages

* Get rid of @types/[email protected] peer dep

First I added an override for @types/node set to ^20.17.9, ran pnpm i,
then I removed the override and ran pnpm i again.

* Cast `message` to `unknown[]`

* Accept `ArrayBufferLike` in `bufferToBase64url` and `arrayBufferToBase64` to make it work with `Uint8Array.buffer`

* Force nwsapi to 2.2.9 for JSDOM ^20.0.3

Co-authored-by: Bartosz Leper <[email protected]>

* Remove override for cookie in @bundled-es-modules/cookie

This was done in #48200 and is no longer needed, since this package
now uses cookie 0.7.2 as a dep.

* Run prettier

* Allow license of prettier

It's MIT, but the check thinks it's "Apache-2.0 AND BSD-2-Clause AND
BSD-3-Clause AND ISC AND MIT".

https://github.com/prettier/prettier/blob/3.4.1/LICENSE

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rafał Cieślak <[email protected]>
Co-authored-by: Grzegorz Zdunek <[email protected]>
Co-authored-by: Bartosz Leper <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/branch/v17 no-changelog Indicates that a PR does not require a changelog entry size/sm
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants