-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
JS deps security updates #48200
JS deps security updates #48200
Conversation
This pull request is automatically being deployed by Amplify Hosting (learn more). |
@@ -28,6 +28,11 @@ | |||
"nop": "exit 0" | |||
}, | |||
"private": true, | |||
"pnpm": { | |||
"overrides": { | |||
"@bundled-es-modules/cookie>cookie": "0.7.1" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
cookie is used only by dev deps (Storybook), so this override seems okay to me. FWIW, path-to-regexp is used only by msw and Storybook as well.
This was done in #48200 and is no longer needed, since this package now uses cookie 0.7.2 as a dep.
This was done in #48200 and is no longer needed, since this package now uses cookie 0.7.2 as a dep.
* Bump the ui group across 1 directory with 58 updates Bumps the ui group with 58 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.18.1` | `6.18.3` | | [@codemirror/lang-sql](https://github.com/codemirror/lang-sql) | `6.7.1` | `6.8.0` | | [@codemirror/view](https://github.com/codemirror/view) | `6.34.1` | `6.35.0` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.11.3` | `1.12.2` | | [@nivo/bar](https://github.com/plouc/nivo/tree/HEAD/packages/bar) | `0.87.0` | `0.88.0` | | [@uiw/codemirror-themes](https://github.com/uiwjs/react-codemirror) | `4.23.3` | `4.23.6` | | [@uiw/react-codemirror](https://github.com/uiwjs/react-codemirror) | `4.23.3` | `4.23.6` | | [react-select](https://github.com/JedWatson/react-select) | `5.8.1` | `5.8.3` | | [tslib](https://github.com/Microsoft/tslib) | `2.7.0` | `2.8.1` | | [@storybook/addon-actions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/actions) | `8.3.4` | `8.4.6` | | [@storybook/addon-controls](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/controls) | `8.3.4` | `8.4.6` | | [@storybook/addon-toolbars](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/toolbars) | `8.3.4` | `8.4.6` | | [@storybook/components](https://github.com/storybookjs/storybook/tree/HEAD/code/deprecated/components) | `8.3.4` | `8.4.6` | | [@storybook/preview-api](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/preview-api) | `8.3.4` | `8.4.6` | | [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) | `8.3.4` | `8.4.6` | | [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `8.3.4` | `8.4.6` | | [@storybook/test-runner](https://github.com/storybookjs/test-runner) | `0.19.1` | `0.20.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.5.0` | `6.6.3` | | [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.13` | `29.5.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.16.10` | `20.17.9` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.10` | `18.3.12` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.0` | `18.3.1` | | [msw](https://github.com/mswjs/msw) | `2.4.9` | `2.6.6` | | [msw-storybook-addon](https://github.com/mswjs/msw-storybook-addon/tree/HEAD/packages/msw-addon) | `2.0.3` | `2.0.4` | | [playwright](https://github.com/microsoft/playwright) | `1.47.2` | `1.49.0` | | [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.1` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `8.3.4` | `8.4.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.6.2` | `5.7.2` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.25.2` | `7.26.0` | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.4` | `7.26.0` | | [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.24.7` | `7.25.9` | | [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.24.7` | `7.26.0` | | [@swc/core](https://github.com/swc-project/swc) | `1.7.26` | `1.9.3` | | [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react-swc) | `3.7.1` | `3.7.2` | | [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.30.0` | `2.31.0` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `28.8.3` | `28.9.0` | | [eslint-plugin-jest-dom](https://github.com/testing-library/eslint-plugin-jest-dom) | `5.4.0` | `5.5.0` | | [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.0` | `7.37.2` | | [jest-fail-on-console](https://github.com/ValentinH/jest-fail-on-console) | `3.3.0` | `3.3.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.12.2` | `8.16.0` | | [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `5.0.1` | `5.1.3` | | [@types/styled-system](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/styled-system) | `5.1.22` | `5.1.23` | | [ace-builds](https://github.com/ajaxorg/ace-builds) | `1.36.2` | `1.36.5` | | [@opentelemetry/context-zone](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/core](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/exporter-trace-otlp-http](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` | | [@opentelemetry/instrumentation-document-load](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.40.0` | `0.42.0` | | [@opentelemetry/instrumentation-fetch](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` | | [@opentelemetry/instrumentation-user-interaction](https://github.com/open-telemetry/opentelemetry-js-contrib) | `0.40.0` | `0.42.0` | | [@opentelemetry/instrumentation-xml-http-request](https://github.com/open-telemetry/opentelemetry-js) | `0.53.0` | `0.55.0` | | [@opentelemetry/propagator-b3](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/resources](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/sdk-trace-web](https://github.com/open-telemetry/opentelemetry-js) | `1.26.0` | `1.28.0` | | [@opentelemetry/semantic-conventions](https://github.com/open-telemetry/opentelemetry-js) | `1.27.0` | `1.28.0` | | [winston](https://github.com/winstonjs/winston) | `3.14.2` | `3.17.0` | | [zod-to-json-schema](https://github.com/StefanTerdell/zod-to-json-schema) | `3.23.3` | `3.23.5` | Updates `@codemirror/autocomplete` from 6.18.1 to 6.18.3 - [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md) - [Commits](codemirror/autocomplete@6.18.1...6.18.3) Updates `@codemirror/lang-sql` from 6.7.1 to 6.8.0 - [Changelog](https://github.com/codemirror/lang-sql/blob/main/CHANGELOG.md) - [Commits](codemirror/lang-sql@6.7.1...6.8.0) Updates `@codemirror/view` from 6.34.1 to 6.35.0 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](codemirror/view@6.34.1...6.35.0) Updates `@grpc/grpc-js` from 1.11.3 to 1.12.2 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `@nivo/bar` from 0.87.0 to 0.88.0 - [Release notes](https://github.com/plouc/nivo/releases) - [Changelog](https://github.com/plouc/nivo/blob/master/CHANGELOG.md) - [Commits](https://github.com/plouc/nivo/commits/v0.88.0/packages/bar) Updates `@uiw/codemirror-themes` from 4.23.3 to 4.23.6 - [Release notes](https://github.com/uiwjs/react-codemirror/releases) - [Commits](uiwjs/react-codemirror@v4.23.3...v4.23.6) Updates `@uiw/react-codemirror` from 4.23.3 to 4.23.6 - [Release notes](https://github.com/uiwjs/react-codemirror/releases) - [Commits](uiwjs/react-codemirror@v4.23.3...v4.23.6) Updates `react-select` from 5.8.1 to 5.8.3 - [Release notes](https://github.com/JedWatson/react-select/releases) - [Changelog](https://github.com/JedWatson/react-select/blob/master/docs/CHANGELOG.md) - [Commits](https://github.com/JedWatson/react-select/compare/[email protected]@5.8.3) Updates `tslib` from 2.7.0 to 2.8.1 - [Release notes](https://github.com/Microsoft/tslib/releases) - [Commits](microsoft/tslib@v2.7.0...v2.8.1) Updates `@storybook/addon-actions` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/actions) Updates `@storybook/addon-controls` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/controls) Updates `@storybook/addon-toolbars` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/addons/toolbars) Updates `@storybook/components` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/deprecated/components) Updates `@storybook/preview-api` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/lib/preview-api) Updates `@storybook/react` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/renderers/react) Updates `@storybook/react-vite` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/frameworks/react-vite) Updates `@storybook/test-runner` from 0.19.1 to 0.20.0 - [Release notes](https://github.com/storybookjs/test-runner/releases) - [Changelog](https://github.com/storybookjs/test-runner/blob/v0.20.0/CHANGELOG.md) - [Commits](storybookjs/test-runner@v0.19.1...v0.20.0) Updates `@testing-library/jest-dom` from 6.5.0 to 6.6.3 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.5.0...v6.6.3) Updates `@types/jest` from 29.5.13 to 29.5.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) Updates `@types/node` from 20.16.10 to 20.17.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 18.3.10 to 18.3.12 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.3.0 to 18.3.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `msw` from 2.4.9 to 2.6.6 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.4.9...v2.6.6) Updates `msw-storybook-addon` from 2.0.3 to 2.0.4 - [Release notes](https://github.com/mswjs/msw-storybook-addon/releases) - [Changelog](https://github.com/mswjs/msw-storybook-addon/blob/main/packages/msw-addon/CHANGELOG.md) - [Commits](https://github.com/mswjs/msw-storybook-addon/commits/v2.0.4/packages/msw-addon) Updates `playwright` from 1.47.2 to 1.49.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.47.2...v1.49.0) Updates `prettier` from 3.3.3 to 3.4.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.3.3...3.4.1) Updates `storybook` from 8.3.4 to 8.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.4.6/code/lib/cli) Updates `typescript` from 5.6.2 to 5.7.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](microsoft/TypeScript@v5.6.2...v5.7.2) Updates `@babel/core` from 7.25.2 to 7.26.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-core) Updates `@babel/preset-env` from 7.25.4 to 7.26.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-env) Updates `@babel/preset-react` from 7.24.7 to 7.25.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.9/packages/babel-preset-react) Updates `@babel/preset-typescript` from 7.24.7 to 7.26.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-typescript) Updates `@swc/core` from 1.7.26 to 1.9.3 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](swc-project/swc@v1.7.26...v1.9.3) Updates `@vitejs/plugin-react-swc` from 3.7.1 to 3.7.2 - [Release notes](https://github.com/vitejs/vite-plugin-react-swc/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react-swc/blob/main/CHANGELOG.md) - [Commits](vitejs/vite-plugin-react-swc@v3.7.1...v3.7.2) Updates `eslint-plugin-import` from 2.30.0 to 2.31.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.30.0...v2.31.0) Updates `eslint-plugin-jest` from 28.8.3 to 28.9.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v28.8.3...v28.9.0) Updates `eslint-plugin-jest-dom` from 5.4.0 to 5.5.0 - [Release notes](https://github.com/testing-library/eslint-plugin-jest-dom/releases) - [Commits](testing-library/eslint-plugin-jest-dom@v5.4.0...v5.5.0) Updates `eslint-plugin-react` from 7.37.0 to 7.37.2 - [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases) - [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md) - [Commits](jsx-eslint/eslint-plugin-react@v7.37.0...v7.37.2) Updates `jest-fail-on-console` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/ValentinH/jest-fail-on-console/releases) - [Commits](ValentinH/jest-fail-on-console@v3.3.0...v3.3.1) Updates `typescript-eslint` from 8.12.2 to 8.16.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.16.0/packages/typescript-eslint) Updates `vite-tsconfig-paths` from 5.0.1 to 5.1.3 - [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases) - [Commits](aleclarson/vite-tsconfig-paths@v5.0.1...v5.1.3) Updates `@types/styled-system` from 5.1.22 to 5.1.23 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/styled-system) Updates `ace-builds` from 1.36.2 to 1.36.5 - [Release notes](https://github.com/ajaxorg/ace-builds/releases) - [Changelog](https://github.com/ajaxorg/ace-builds/blob/master/CHANGELOG.md) - [Commits](ajaxorg/ace-builds@v1.36.2...v1.36.5) Updates `@opentelemetry/context-zone` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/core` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/exporter-trace-otlp-http` from 0.53.0 to 0.55.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0) Updates `@opentelemetry/instrumentation` from 0.53.0 to 0.55.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0) Updates `@opentelemetry/instrumentation-document-load` from 0.40.0 to 0.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@sql-common-v0.40.0...instrumentation-pg-v0.42.0) Updates `@opentelemetry/instrumentation-fetch` from 0.53.0 to 0.55.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0) Updates `@opentelemetry/instrumentation-user-interaction` from 0.40.0 to 0.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js-contrib@sql-common-v0.40.0...instrumentation-pg-v0.42.0) Updates `@opentelemetry/instrumentation-xml-http-request` from 0.53.0 to 0.55.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.53.0...experimental/v0.55.0) Updates `@opentelemetry/propagator-b3` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/resources` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/sdk-trace-base` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/sdk-trace-web` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.26.0...v1.28.0) Updates `@opentelemetry/semantic-conventions` from 1.27.0 to 1.28.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v1.27.0...v1.28.0) Updates `winston` from 3.14.2 to 3.17.0 - [Release notes](https://github.com/winstonjs/winston/releases) - [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md) - [Commits](winstonjs/winston@v3.14.2...v3.17.0) Updates `zod-to-json-schema` from 3.23.3 to 3.23.5 - [Release notes](https://github.com/StefanTerdell/zod-to-json-schema/releases) - [Changelog](https://github.com/StefanTerdell/zod-to-json-schema/blob/master/changelog.md) - [Commits](https://github.com/StefanTerdell/zod-to-json-schema/commits) --- updated-dependencies: - dependency-name: "@codemirror/autocomplete" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: "@codemirror/lang-sql" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@codemirror/view" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@grpc/grpc-js" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@nivo/bar" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@uiw/codemirror-themes" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: "@uiw/react-codemirror" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: react-select dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: tslib dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/addon-actions" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/addon-controls" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/addon-toolbars" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/components" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/preview-api" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/react" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/react-vite" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@storybook/test-runner" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@testing-library/jest-dom" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@types/jest" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@types/react" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui - dependency-name: "@types/react-dom" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui - dependency-name: msw dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: msw-storybook-addon dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui - dependency-name: playwright dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: storybook dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@babel/core" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@babel/preset-env" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@babel/preset-react" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@babel/preset-typescript" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@swc/core" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@vitejs/plugin-react-swc" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: eslint-plugin-import dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: eslint-plugin-jest dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: eslint-plugin-jest-dom dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: eslint-plugin-react dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: jest-fail-on-console dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: typescript-eslint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: vite-tsconfig-paths dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@types/styled-system" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui - dependency-name: ace-builds dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ui - dependency-name: "@opentelemetry/context-zone" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/core" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/exporter-trace-otlp-http" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/instrumentation" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/instrumentation-document-load" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/instrumentation-fetch" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/instrumentation-user-interaction" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/instrumentation-xml-http-request" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/propagator-b3" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/resources" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/sdk-trace-base" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/sdk-trace-web" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: "@opentelemetry/semantic-conventions" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: winston dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ui - dependency-name: zod-to-json-schema dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ui ... Signed-off-by: dependabot[bot] <[email protected]> * Add BroadcastChannel and TransformStream to patched JSDOM env * Dedupe packages * Get rid of @types/[email protected] peer dep First I added an override for @types/node set to ^20.17.9, ran pnpm i, then I removed the override and ran pnpm i again. * Cast `message` to `unknown[]` * Accept `ArrayBufferLike` in `bufferToBase64url` and `arrayBufferToBase64` to make it work with `Uint8Array.buffer` * Force nwsapi to 2.2.9 for JSDOM ^20.0.3 Co-authored-by: Bartosz Leper <[email protected]> * Remove override for cookie in @bundled-es-modules/cookie This was done in #48200 and is no longer needed, since this package now uses cookie 0.7.2 as a dep. * Run prettier * Allow license of prettier It's MIT, but the check thinks it's "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT". https://github.com/prettier/prettier/blob/3.4.1/LICENSE --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rafał Cieślak <[email protected]> Co-authored-by: Grzegorz Zdunek <[email protected]> Co-authored-by: Bartosz Leper <[email protected]>
Closes https://github.com/gravitational/teleport/security/dependabot/319 and https://github.com/gravitational/teleport/security/dependabot/320
I had to add an override for
@bundled-es-modules/cookie
because it didn't allow updatingcookie
to anything above 0.5.x ("cookie": "^0.5.0"
). We will be able to remove it once a new version of@bundled-es-modules/cookie
is released bundled-es-modules/cookie#3.