Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm_and_yarn group with 4 updates #132

Closed

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 12, 2024

Bumps the npm_and_yarn group with 4 updates: axios, homebridge-config-ui-x, fast-xml-parser and micromatch.

Updates axios from 1.6.8 to 1.7.7

Release notes

Sourced from axios's releases.

Release v1.7.7

Release notes:

Bug Fixes

  • fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
  • http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

Release v1.7.6

Release notes:

Bug Fixes

  • fetch: fix content length calculation for FormData payload; (#6524) (085f568)
  • fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

Release v1.7.5

Release notes:

Bug Fixes

  • adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
  • core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
  • core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
  • fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

Release v1.7.4

Release notes:

Bug Fixes

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.7.7 (2024-08-31)

Bug Fixes

  • fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
  • http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

1.7.6 (2024-08-30)

Bug Fixes

  • fetch: fix content length calculation for FormData payload; (#6524) (085f568)
  • fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

1.7.5 (2024-08-23)

Bug Fixes

  • adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
  • core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
  • core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
  • fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

1.7.4 (2024-08-13)

Bug Fixes

... (truncated)

Commits
  • 5b8a826 chore(release): v1.7.7 (#6585)
  • 364993f fix(http): fixed support for IPv6 literal strings in url (#5731)
  • d198085 fix(fetch): fix stream handling in Safari by fallback to using a stream reade...
  • d584fcf chore(release): v1.7.6 (#6583)
  • bc03c6c chore(examples): fix module import (#6575)
  • df9889b fix(fetch): optimize signals composing logic; (#6582)
  • ee208cf chore(sponsor): update sponsor block (#6576)
  • 085f568 fix(fetch): fix content length calculation for FormData payload; (#6524)
  • 59cd6b0 chore(release): v1.7.5 (#6574)
  • 6700a8a fix(core): add the missed implementation of AxiosError#status property; (#6573)
  • Additional commits viewable in compare view

Updates homebridge-config-ui-x from 4.56.3 to 4.58.0

Release notes

Sourced from homebridge-config-ui-x's releases.

v4.58.0

⚠️ The minimum version of Homebridge needed for the "child bridge extra configuration" functionality is v1.8.0. The UI will continue to work with Homebridge v1.6.0 or later, however it is always recommended to run the latest version of Homebridge anyway.

UI Changes

  • added warning messages for backup files too large to be restored (@​NorthernMan54)
  • hide node update available icon for synology users
  • various updates to widgets:
    • hide the add widget button when the layout is locked
    • only show the settings cog and draggable cursor on bigger screens and when layout is unlocked
    • Homebridge widget: don't show plugins as up to date until the check has been completed
    • add config options for:
      • CPU widget: added refresh interval and number of data points to show in the graph
      • Memory widget: added refresh interval and number of data points to show in the graph
      • Network widget: added refresh interval and number of data points to show in the graph
  • updates to zh-TW language file (@​tasict)
  • updates to de language file (@​Staubgeborener)
  • updates to th language file (@​tomzt)
  • updates to sv language file (@​emilof)
  • updates to pl language file (@​mkz212 + @​grzegorz914)
  • updates to uk language file (@​xrust83)
  • add log.maxSize/log.truncateSize options (#2161) (@​tjenkinson)
  • fix missing translation string in setup wizard
  • various ui improvements and code consistency, including:
    • new design for the 'manage version' plugin modal
    • updated language strings in some of the settings modals
    • renamed settings sections to be more descriptive (same functionality)
      • Remove Single Cached AccessoryRemove Single Accessory
      • Remove All Cached AccessoriesRemove All Accessories
      • Unpair Bridges / Cameras / TVs / External AccessoriesUnpair Single Bridge
      • Reset Homebridge AccessoryUnpair All Bridges
    • restart Homebridge modal will now appear when closing the unpair single bridge modal (only if at least one bridge is unpaired)
  • offer more info about behaviour when disabling a plugin (on disable plugin modal)
  • change the 'power options' screen from a modal to a page
  • allow child bridge extra configuration in the child bridge modal (requires Homebridge 1.8.0 or above)
  • minor adjustments to settings page, add expands
  • improve plugin compatibility checker
    • this will now compare your Homebridge and node versions against a version of a plugin you are going to install, rather than the version you currently have installed
    • the check will be run when you are installing a plugin, updating a plugin and installing an alternate version of a plugin

UI Fixes

  • fix html parts in ca, fr + sl language files
  • update name of mobile-web-app-capable meta tag (from apple-mobile-web-app-capable)
  • support plugins with dots in their @​scope (#2171) (@​gtalusan)

Other Changes

  • remove unused language strings from i18n files
  • rename instances of BatteryService to Battery

... (truncated)

Changelog

Sourced from homebridge-config-ui-x's changelog.

v4.58.0 (2024-09-08)

⚠️ The minimum version of Homebridge needed for the "child bridge extra configuration" functionality is v1.8.0. The UI will continue to work with Homebridge v1.6.0 or later, however it is always recommended to run the latest version of Homebridge anyway.

UI Changes

  • added warning messages for backup files too large to be restored (@​NorthernMan54)
  • hide node update available icon for synology users
  • various updates to widgets:
    • hide the add widget button when the layout is locked
    • only show the settings cog and draggable cursor on bigger screens and when layout is unlocked
    • add config options for:
      • CPU widget: added refresh interval and number of data points to show in the graph
      • Homebridge widget: don't show plugins as up to date until the check has been completed
      • Memory widget: added refresh interval and number of data points to show in the graph
      • Network widget: added refresh interval and number of data points to show in the graph
  • updates to zh-TW language file (@​tasict)
  • updates to de language file (@​Staubgeborener)
  • updates to th language file (@​tomzt)
  • updates to sv language file (@​emilof)
  • updates to pl language file (@​mkz212 + @​grzegorz914)
  • updates to uk language file (@​xrust83)
  • add log.maxSize/log.truncateSize options (#2161) (@​tjenkinson)
  • fix missing translation string in setup wizard
  • various ui improvements and code consistency, including:
    • new design for the 'manage version' plugin modal
    • updated language strings in some of the settings modals
    • renamed settings sections to be more descriptive (same functionality)
      • Remove Single Cached AccessoryRemove Single Accessory
      • Remove All Cached AccessoriesRemove All Accessories
      • Unpair Bridges / Cameras / TVs / External AccessoriesUnpair Single Bridge
      • Reset Homebridge AccessoryUnpair All Bridges
    • restart Homebridge modal will now appear when closing the unpair single bridge modal (only if at least one bridge is unpaired)
  • offer more info about behaviour when disabling a plugin (on disable plugin modal)
  • change the 'power options' screen from a modal to a page
  • allow child bridge extra configuration in the child bridge modal (requires Homebridge 1.8.0 or above)
  • minor adjustments to settings page, add expands
  • improve plugin compatibility checker
    • this will now compare your Homebridge and node versions against a version of a plugin you are going to install, rather than the version you currently have installed
    • the check will be run when you are installing a plugin, updating a plugin and installing an alternate version of a plugin

UI Fixes

  • fix html parts in ca, fr + sl language files
  • update name of mobile-web-app-capable meta tag (from apple-mobile-web-app-capable)
  • support plugins with dots in their @​scope (#2171) (@​gtalusan)

Other Changes

... (truncated)

Commits

Updates fast-xml-parser from 4.4.0 to 4.5.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

4.5.0 / 2024-09-03

  • feat #666: ignoreAttributes support function, and array of string or regex (By ArtemM)

4.4.1 / 2024-07-28

  • v5 fix: maximum length limit to currency value
  • fix #634: build attributes with oneListGroup and attributesGroupName (#653)(By Andreas Naziris)
  • fix: get oneListGroup to work as expected for array of strings (#662)(By Andreas Naziris)

4.4.0 / 2024-05-18

  • fix #654: parse attribute list correctly for self closing stop node.
  • fix: validator bug when closing tag is not opened. (#647) (By Ryosuke Fukatani)
  • fix #581: typings; return type of tagValueProcessor & attributeValueProcessor (#582) (By monholm)

4.3.6 / 2024-03-16

4.3.5 / 2024-02-24

  • code for v5 is added for experimental use

4.3.4 / 2024-01-10

  • fix: Don't escape entities in CDATA sections (#633) (By wackbyte)

4.3.3 / 2024-01-10

  • Remove unnecessary regex

4.3.2 / 2023-10-02

4.3.1 / 2023-09-24

  • revert back "Fix typings for builder and parser to make return type generic" to avoid failure of existing projects. Need to decide a common approach.

4.3.0 / 2023-09-20

4.2.7 / 2023-07-30

  • Fix: builder should set text node correctly when only textnode is present (#589) (By qianqing)
  • Fix: Fix for null and undefined attributes when building xml (#585) (#598). A null or undefined value should be ignored. (By Eugenio Ceschia)

4.2.6 / 2023-07-17

4.2.5 / 2023-06-22

  • change code implementation

4.2.4 / 2023-06-06

  • fix security bug

... (truncated)

Commits
  • 7ed4606 update package detail
  • 98d8f47 feat #666: add selective ignoreAttributes by pattern or callback (#668)
  • d40e29c update package detail and browser bundles
  • d0bfe8a fix maxlength for currency value
  • 2c14fcf Update bug-report-or-unexpected-output.md
  • acf610f fix #634: build attributes with oneListGroup and attributesGroupName (#653)
  • 931e910 fix: get oneListGroup to work as expected for array of strings (#662)
  • b8e40c8 Update ISSUE_TEMPLATE.md
  • a6265ba chore: add trend image (#658)
  • db1c548 redesign README.md
  • Additional commits viewable in compare view

Updates micromatch from 4.0.7 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 4 updates: [axios](https://github.com/axios/axios), [homebridge-config-ui-x](https://github.com/homebridge/homebridge-config-ui-x), [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [micromatch](https://github.com/micromatch/micromatch).


Updates `axios` from 1.6.8 to 1.7.7
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.6.8...v1.7.7)

Updates `homebridge-config-ui-x` from 4.56.3 to 4.58.0
- [Release notes](https://github.com/homebridge/homebridge-config-ui-x/releases)
- [Changelog](https://github.com/homebridge/homebridge-config-ui-x/blob/latest/CHANGELOG.md)
- [Commits](homebridge/homebridge-config-ui-x@4.56.3...v4.58.0)

Updates `fast-xml-parser` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.4.0...v4.5.0)

Updates `micromatch` from 4.0.7 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.7...4.0.8)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: homebridge-config-ui-x
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: fast-xml-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code minor minor version change labels Sep 12, 2024
Copy link
Author

dependabot bot commented on behalf of github Sep 25, 2024

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Sep 25, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-f547e52dae branch September 25, 2024 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code minor minor version change
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants