Bump the npm_and_yarn group across 2 directories with 12 updates #1088
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 12 updates in the /ui.frontend.theme.dark directory: | Package | From | To | | --- | --- | --- | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.11.0` | | [postcss](https://github.com/postcss/postcss) | `7.0.39` | `8.4.35` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `9.7.4` | `10.4.17` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `3.4.2` | `6.10.0` | | [cssnano](https://github.com/cssnano/cssnano) | `4.1.10` | `6.0.3` | | [optimize-css-assets-webpack-plugin](https://github.com/NMFR/optimize-css-assets-webpack-plugin) | `5.0.3` | `6.0.1` | | [postcss-loader](https://github.com/webpack-contrib/postcss-loader) | `3.0.0` | `8.1.0` | | [tar](https://github.com/isaacs/node-tar) | `4.4.13` | `4.4.19` | | [dns-packet](https://github.com/mafintosh/dns-packet) | `1.3.1` | `1.3.4` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.10.0` | `1.15.5` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `1.1.9` | | [ws](https://github.com/websockets/ws) | `6.2.1` | `6.2.2` | Bumps the npm_and_yarn group with 12 updates in the /ui.frontend.theme.light directory: | Package | From | To | | --- | --- | --- | | [qs](https://github.com/ljharb/qs) | `6.7.0` | `6.11.0` | | [postcss](https://github.com/postcss/postcss) | `7.0.39` | `8.4.35` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `9.7.4` | `10.4.17` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `3.4.2` | `6.10.0` | | [cssnano](https://github.com/cssnano/cssnano) | `4.1.10` | `6.0.3` | | [optimize-css-assets-webpack-plugin](https://github.com/NMFR/optimize-css-assets-webpack-plugin) | `5.0.3` | `6.0.1` | | [postcss-loader](https://github.com/webpack-contrib/postcss-loader) | `3.0.0` | `8.1.0` | | [tar](https://github.com/isaacs/node-tar) | `4.4.13` | `4.4.19` | | [dns-packet](https://github.com/mafintosh/dns-packet) | `1.3.1` | `1.3.4` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.8` | `1.15.5` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `1.1.9` | | [ws](https://github.com/websockets/ws) | `6.2.1` | `6.2.2` | Updates `qs` from 6.7.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.11.0) Updates `postcss` from 7.0.39 to 8.4.35 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.39...8.4.35) Updates `autoprefixer` from 9.7.4 to 10.4.17 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@9.7.4...10.4.17) Updates `css-loader` from 3.4.2 to 6.10.0 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/css-loader@v3.4.2...v6.10.0) Updates `cssnano` from 4.1.10 to 6.0.3 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/[email protected]) Updates `optimize-css-assets-webpack-plugin` from 5.0.3 to 6.0.1 - [Commits](NMFR/optimize-css-assets-webpack-plugin@v5.0.3...v6.0.1) Updates `postcss-loader` from 3.0.0 to 8.1.0 - [Release notes](https://github.com/webpack-contrib/postcss-loader/releases) - [Changelog](https://github.com/webpack-contrib/postcss-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/postcss-loader@v3.0.0...v8.1.0) Updates `tar` from 4.4.13 to 4.4.19 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.13...v4.4.19) Updates `dns-packet` from 1.3.1 to 1.3.4 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v1.3.4) Updates `follow-redirects` from 1.10.0 to 1.15.5 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.10.0...v1.15.5) Updates `ip` from 1.1.5 to 1.1.9 - [Commits](indutny/node-ip@v1.1.5...v1.1.9) Updates `ws` from 6.2.1 to 6.2.2 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.1...6.2.2) Updates `qs` from 6.7.0 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.7.0...v6.11.0) Updates `postcss` from 7.0.39 to 8.4.35 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.39...8.4.35) Updates `autoprefixer` from 9.7.4 to 10.4.17 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@9.7.4...10.4.17) Updates `css-loader` from 3.4.2 to 6.10.0 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/css-loader@v3.4.2...v6.10.0) Updates `cssnano` from 4.1.10 to 6.0.3 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/[email protected]) Updates `optimize-css-assets-webpack-plugin` from 5.0.3 to 6.0.1 - [Commits](NMFR/optimize-css-assets-webpack-plugin@v5.0.3...v6.0.1) Updates `postcss-loader` from 3.0.0 to 8.1.0 - [Release notes](https://github.com/webpack-contrib/postcss-loader/releases) - [Changelog](https://github.com/webpack-contrib/postcss-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/postcss-loader@v3.0.0...v8.1.0) Updates `tar` from 4.4.13 to 4.4.19 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.13...v4.4.19) Updates `dns-packet` from 1.3.1 to 1.3.4 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v1.3.4) Updates `follow-redirects` from 1.14.8 to 1.15.5 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.10.0...v1.15.5) Updates `ip` from 1.1.5 to 1.1.9 - [Commits](indutny/node-ip@v1.1.5...v1.1.9) Updates `ws` from 6.2.1 to 6.2.2 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.1...6.2.2) --- updated-dependencies: - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: autoprefixer dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: css-loader dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: cssnano dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: optimize-css-assets-webpack-plugin dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: postcss-loader dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: autoprefixer dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: css-loader dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: cssnano dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: optimize-css-assets-webpack-plugin dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: postcss-loader dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/ui.frontend.theme.dark/npm_and_yarn-security-group-cb3ef76dc7
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 12 updates in the /ui.frontend.theme.dark directory:
6.7.06.11.07.0.398.4.359.7.410.4.173.4.26.10.04.1.106.0.35.0.36.0.13.0.08.1.04.4.134.4.191.3.11.3.41.10.01.15.51.1.51.1.96.2.16.2.26.7.06.11.07.0.398.4.359.7.410.4.173.4.26.10.04.1.106.0.35.0.36.0.13.0.08.1.04.4.134.4.191.3.11.3.41.14.81.15.51.1.51.1.96.2.16.2.2Updates
qsfrom 6.7.0 to 6.11.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
56763c1v6.11.0ddd3e29[readme] fix version badgec313472[New] [Fix]stringify: revert 0e903c0; addcommaRoundTripoption95bc018v6.10.50e903c0[Fix]stringify: witharrayFormat: comma, properly include an explicit `[...ba9703cv6.10.44e44019[Fix]stringify: witharrayFormat: comma, include an explicit[]on a s...113b990[Dev Deps] updateobject-inspectc77f38f[Dev Deps] updateeslint,@ljharb/eslint-config,aud,has-symbol,tape2cf45b2[meta] usenpmignoreto autogenerate an npmignore fileUpdates
postcssfrom 7.0.39 to 8.4.35Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
edda95eRelease 8.4.35 version612f360Merge pull request #1924 from postcss/refactor/types5e7449fFix node.parent.nodes type65075dfAllow to pass undefined to adding methods to simplify type check477b3bbRelease 8.4.34 version25af117Update dependenciesbb0314aMerge pull request #1922 from tim-we/improve-at-rule-types9dd5a93Fix at-rule test8322d11Fix visitor testee7fcd4Fix Document#nodesUpdates
autoprefixerfrom 9.7.4 to 10.4.17Release notes
Sourced from autoprefixer's releases.
... (truncated)
Changelog
Sourced from autoprefixer's changelog.
... (truncated)
Commits
46cd2ccRelease 10.4.17 version2738f72Update dependenciesb0a4007Fix user-select: contain1db31f0Update dependencies026083cRelease 10.4.16 version4cda7aeUpdate dependencies7a49d6aUpdate CIa87f4cdimprove performance (#1500)0d6496eUpdate dependenciesd9064cbRemove deprecated browsers from README (#1499)Updates
css-loaderfrom 3.4.2 to 6.10.0Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
7bbb57cchore(release): 6.10.0d641c4dfeat: pass theresourceQueryandresourceFragmentto theautoand `mode...3924679feat: add@rspack/coreas an optional peer dependency (#1568)6f43929feat: support named exports with any charactersf9192eechore(release): 6.9.16515be0fix: css nesting support and@scopeat-rule0751f7adocs: update (#1562)2d17551chore(release): 6.9.0e38116fchore: update dependencies to latest version (#1561)d09ff73test: getLocalIdent and node type (#1560)Updates
cssnanofrom 4.1.10 to 6.0.3Release notes
Sourced from cssnano's releases.
... (truncated)
Commits
796988ePublish cssnano 6.0.31797d35chore: add workflow to publish to npmb1aea33chore(postcss-svgo)): update SVGO to 3.0.21ead72dchore: update postcss-selector-parser to 6.0.15f233b22chore: update postcss-selector-parserbbca7b3chore: update all dependenciesb433b4ctest(cssnano): update google-fonts-complete dependencya2107c6Update development dependencies (#1541)5066593chore: update ESLint config to flat config42249e7fix(postcss-svgo): update SVGO to 3.1.0Maintainer changes
This version was pushed to npm by ludovicofischer, a new releaser for cssnano since your current version.
Updates
optimize-css-assets-webpack-pluginfrom 5.0.3 to 6.0.1Commits
e896b976.0.124ed912fix: cve in dependencies29c44fb6.0.051313e4feat(deps): upgrade cssnano and postcss major version3e6a04c5.0.69567391fix: previous version breaking changes (#156)09d29b35.0.5d0a7da7feat(deps): update dependencies (#154)41d1e23Redirect to css-minimizer-webpack-plugin for webpack 5 or abovee9b84f15.0.4Updates
postcss-loaderfrom 3.0.0 to 8.1.0Release notes
Sourced from postcss-loader's releases.
... (truncated)
Changelog
Sourced from postcss-loader's changelog.
... (truncated)
Commits
df307b5chore(release): 8.1.0512e4c3feat: add@rspack/coreas an optional peer dependency (#679)d53fe9dchore(release): 8.0.08dd0315chore!: minimum supported Node.js version is18.12.0(#677)754c4a5chore(release): 7.3.48ef0c7efix: do not crash if pkg.(d|devD)ependencies unset (#667)84f16bechore: update github action/setup-node (#675)d6a0768chore(deps-dev): bump@babel/traversefrom 7.22.17 to 7.23.2 (#674)fdf99fdchore: upgrade dependencies to the latest version (#671)c05b3bfchore: update github actions/checkout (#665)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for postcss-loader since your current version.
Updates
tarfrom 4.4.13 to 4.4.19Commits
9a6faa04.4.1970ef812drop dirCache for symlink on all platforms3e355154.4.1852b09e3fix: prevent path escape using drive-relative pathsbb93ba2fix: reserve paths properly for unicode, windows2f1bca0fix: prune dirCache properly for unicode, windows9bf70a84.4.176aafff0fix: skip extract if linkpath is stripped entirely5c5059afix: reserve paths case-insensitivelyfd6accb4.4.16Updates
dns-packetfrom 1.3.1 to 1.3.4Commits
ebdf8491.3.4ac57872move all allocUnsafes to allocs for easier maintenancec64c9501.3.30598ba1fix .. in encodingLength010aedb1.3.20d0d593backport encodingLength fix to v1Updates
follow-redirectsfrom 1.10.0 to 1.15.5Commits
b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.3d42aecAdd bracket tests.bcbb096Do not directly set Error properties.192dbe7Release version 1.15.3 of the npm package.Updates
ipfrom 1.1.5 to 1.1.9Commits
1ecbf2f1.1.96a3ada9lib: fixed CVE-2023-42282 and added unit test5dc3b2f1.1.88e6f28blib: even better node 6 support088c9e51.1.71a4ca35lib: add back support for Node.js 6af82ef41.1.6dba19f6package: exclude test folder from publishing7cd7f30ci: use github workflows4de50aelib: node 18 supportUpdates
wsfrom 6.2.1 to 6.2.2Release notes
Sourced from ws's releases.
Commits
9bdb580[dist] 6.2.278c676d[security] Fix ReDoS vulnerabilityUpdates
qsfrom 6.7.0 to 6.11.0Changelog
Sourced from qs's changelog.
... (truncated)
Commits
56763c1v6.11.0ddd3e29[readme] fix version badgec313472[New] [Fix]stringify: revert 0e903c0; addcommaRoundTripoption95bc018v6.10.50e903c0[Fix]stringify: witharrayFormat: comma, properly include an explicit `[...ba9703cv6.10.44e44019[Fix]stringify: witharrayFormat: comma, include an explicit[]on a s...113b990[Dev Deps] updateobject-inspectc77f38f[Dev Deps] updateeslint,@ljharb/eslint-config,aud,has-symbol,tape2cf45b2[meta] usenpmignoreto autogenerate an npmignore fileUpdates
postcssfrom 7.0.39 to 8.4.35Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from p...
Description has been truncated