Bump the npm_and_yarn group across 1 directory with 22 updates
Type: Pull Request
State: Open
Association: None
Comments: 1
(about 1 year ago)
(about 1 year ago)
dependencies javascript
Bumps the npm_and_yarn group with 18 updates in the / directory:
| Package | From | To |
|---|---|---|
| axios | 0.19.0 |
0.30.0 |
| @babel/helpers | 7.5.5 |
7.27.1 |
| @babel/traverse | 7.5.5 |
7.27.1 |
| ajv | 6.10.2 |
6.12.6 |
| browserify-sign | 4.0.4 |
4.2.3 |
| color-string | 1.5.3 |
1.9.1 |
| decode-uri-component | 0.2.0 |
0.2.2 |
| dns-packet | 1.3.1 |
1.3.4 |
| elliptic | 6.5.0 |
6.6.1 |
| eventsource | 1.0.7 |
1.1.2 |
| express | 4.17.1 |
4.21.2 |
| fsevents | 1.2.9 |
1.2.13 |
| handlebars | 4.1.2 |
4.7.8 |
| hosted-git-info | 2.7.1 |
2.8.9 |
| merge-deep | 3.0.2 |
3.0.3 |
| path-parse | 1.0.6 |
1.0.7 |
| tmpl | 1.0.4 |
1.0.5 |
| url-parse | 1.4.7 |
1.5.10 |
Updates axios from 0.19.0 to 0.30.0
Release notes
Sourced from axios's releases.
Release v0.30.0
Release notes:
Bug Fixes
- fix: modify log while request is aborted by
@mori5321in axios/axios#4917- fix: update CHANGELOG.md for v0.x by
@TehZarathustrain axios/axios#6271- fix: modify upgrade guide for 0.28.1's breaking change by
@nafegerin axios/axios#6787- fix: backport allowAbsoluteUrls vulnerability fix to v0.x by
@thatguyinabeaniein axios/axios#6829- fix: add allowAbsoluteUrls type by
@thatguyinabeaniein axios/axios#6849Contributors to this release
@mori5321made their first contribution in axios/axios#4917@TehZarathustramade their first contribution in axios/axios#6271@nafegermade their first contribution in axios/axios#6787@thatguyinabeaniemade their first contribution in axios/axios#6829Full Changelog: https://github.com/axios/axios/compare/v0.29.0...v0.30.0
v0.29.0
Release notes:
Bug Fixes
- fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by
@Sean-Powellin axios/axios#6402- fix: omit nulls in params by
@Willshawin axios/axios#6394- fix(backport): fix paramsSerializer function validation by
@solonzhuin axios/axios#6361- fix: Regular Expression Denial of Service (ReDoS) by
@qiongshushengin axios/axios#6708Contributors to this release
@Sean-Powellmade their first contribution in axios/axios#6402@Willshawmade their first contribution in axios/axios#6394@solonzhumade their first contribution in axios/axios#6361@qiongshushengmade their first contribution in axios/axios#6708Release v0.28.1
Release notes:
Release notes:
Bug Fixes
- fix(backport): custom params serializer support (#6263)
- fix(backport): uncaught ReferenceError
reqis not defined (#6307)Release v0.28.0
Release notes:
Bug Fixes
- fix(security): fixed CVE-2023-45857 by backporting
withXSRFTokenoption to v0.x (#6091)Backports from v1.x:
... (truncated)
Changelog
Sourced from axios's changelog.
0.30.0 (2025-03-26)
Release notes:
Bug Fixes
- fix: modify log while request is aborted (#4917)
- fix: update CHANGELOG.md for v0.x (#6271)
- fix: modify upgrade guide for 0.28.1's breaking change (#6787)
- fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)
- fix: add allowAbsoluteUrls type (#6849)
0.29.0 (2024-11-21)
Release notes:
Bug Fixes
- fix(backport): backport security fixes in commits #6167 and #6163 (#6402)
- fix: omit nulls in params (#6394)
- fix(backport): fix paramsSerializer function validation (#6361)
- fix: regular expression denial of service (ReDoS) (#6708)
0.28.1 (2024-03-24)
Release notes:
Bug Fixes
- fix(backport): custom params serializer support (#6263)
- fix(backport): uncaught ReferenceError
reqis not defined (#6307)0.28.0 (2024-02-12)
Release notes:
Bug Fixes
- fix(security): fixed CVE-2023-45857 by backporting
withXSRFTokenoption to v0.x (#6091)Backports from v1.x:
- Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
- Fixing content-type header repeated (#4745)
- Fixed timeout error message for HTTP (#4738)
- Added
axios.formToJSONmethod (#4735)- URL params serializer (#4734)
- Fixed toFormData Blob issue on node>v17 (#4728)
- Adding types for progress event callbacks (#4675)
- Fixed max body length defaults (#4731)
... (truncated)
Commits
6e922e4chore: added build artifactsa06ed1echore: added pre-release artifactsc010622feat: add type for allowAbsoluteUrls (#6849)02c3c69fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)8603e67docs: modify upgrade guide for 0.28.1's breaking change (#6787)f0642eefix(docs): update CHANGELOG.md for v0.x (#6271)0630c32fix: modify log while request is aborted (#4917)7750b8cchore(release): prep release v0.29.04840cb2fix: regular expression denial of service issues (#6708)2e36cdbfix(backport): fix paramsSerializer function validation (#6361)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.
Updates @babel/helpers from 7.5.5 to 7.27.1
Release notes
Sourced from @babel/helpers's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/helpers's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1b1f9184ReduceinteropRequireWildcardsize (#16538)9c351e5Useclassand add type definitions forregenerator(#17220)0f95b74ReduceregeneratorRuntimesize (#17213)317e332Enforce node protocol import (#17207)14ef1e9Babel 8 cleanup (#17211)97105cbRe-convert regeneratorRuntime to helper format (#17205)1b93b0cMove regenerator files to the relevant packages (#17205)b953a8fRemove bundled regeneratorRuntime helper (#17205)6874c25Prepare LICENSE files for incorporating regenerator (#17205)- Additional commits viewable in compare view
Updates @babel/traverse from 7.5.5 to 7.27.1
Release notes
Sourced from @babel/traverse's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/traverse's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.162af1a6fix: do expressions should allow early exit (#17137)8e23272[Babel 8] perf: Improve traverse performance (#16965)9a40d85[Babel 8]: Remove record and tuple syntax support (#17242)4d39e9dHarden variable declarator validations (#17217)6cd1c60Reduce generated names size for the 10th-11th (#17221)a5c8992fix: Objects and arrays with multiple references should not be evaluated (#17...fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)5c350eav7.27.0582538cAllowtraverseFastto exit early (#17169)- Additional commits viewable in compare view
Updates ajv from 6.10.2 to 6.12.6
Release notes
Sourced from ajv's releases.
v6.12.6
Fix performance issue of "url" format.
v6.12.5
Fix uri scheme validation (
@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)v6.12.4
Fix: coercion of one-item arrays to scalar that should fail validation (failing example).
v6.12.3
Pass schema object to processCode function Option for strictNumbers (
@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)v6.12.2
Removed post-install script
v6.12.1
Docs and dependency updates
v6.12.0
Improved hostname validation (
@sambauers, #1143) Optionkeywordsto add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot,@MattiAstedrone) Docs:
- error logging example (
@RadiationSickness)- TypeScript usage notes (
@thetric)v6.11.0
Time formats support two digit and colon-less variants of timezone offset (#1061 ,
@cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test
Commits
fe591436.12.6d580d3eMerge pull request #1298 from ajv-validator/fix-urlfd36389fix: regular expression for "url" format490e34cdocs: link to v7-beta branch9cd93a1docs: note about v7 in readme877d286Merge pull request #1262 from b4h0-c4t/refactor-opt-object-typef1c8e456.12.5764035eMerge branch 'ChALkeR-chalker/fix-comma'3798160Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...a3c7ebaMerge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...- Additional commits viewable in compare view
Updates browserify-sign from 4.0.4 to 4.2.3
Changelog
Sourced from browserify-sign's changelog.
v4.2.3 - 2024-03-05
Commits
- [patch] widen support to 0.12
9247adf- [patch] drop minimum node support to v1
4d0ee49- [Dev Deps] update
aud,npmignore,tape87f3a35- [actions] remove redundant finisher
37a4758- [Deps] pin
hash-baseto ~3.0, due to a breaking change9e2bf12- [Deps] update
parse-asn1 [f427270`](https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c)- [Deps] update
ellipticfb261ce- [Deps] pin
ellipticdue to a breaking change168e16fv4.2.2 - 2023-10-25
Fixed
- [Tests] log when openssl doesn't support cipher
[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)Commits
- Only apps should have lockfiles
09a8995- [eslint] switch to eslint
83fe463- [meta] add
npmignoreandauto-changelog4418183- [meta] fix package.json indentation
9ac5a5e- [Tests] migrate from travis to github actions
d845d85- [Fix]
sign: throw on unsupported padding scheme8767739- [Fix] properly check the upper bound for DSA signatures
85994cd- [Tests] handle openSSL not supporting a scheme
f5f17c2- [Deps] update
bn.js,browserify-rsa,elliptic,parse-asn1,readable-stream,safe-buffera67d0eb- [Dev Deps] update
nyc,standard,tapecc5350b- [Tests] always run coverage; downgrade
nyc75ce1d5- [meta] add
safe-publish-latestdcf49ce- [Tests] add
npm run posttest75dd8fd- [Dev Deps] update
tape3aec038- [Tests] skip unsupported schemes
703c83e- [Tests] node < 6 lacks array
includes3aa43cf- [Dev Deps] fix eslint range
98d4e0dv4.2.1 - 2020-08-04
Merged
v4.2.0 - 2020-05-18
Merged
- switch to safe buffer
[#53](https://github.com/crypto-browserify/browserify-sign/issues/53)
... (truncated)
Commits
bf2c3ecv4.2.39247adf[patch] widen support to 0.12f427270[Deps] update `parse-asn187f3a35[Dev Deps] updateaud,npmignore,tapefb261ce[Deps] updateelliptic4d0ee49[patch] drop minimum node support to v19e2bf12[Deps] pinhash-baseto ~3.0, due to a breaking change168e16f[Deps] pinellipticdue to a breaking change37a4758[actions] remove redundant finisher4af5a90v4.2.2- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates color-string from 1.5.3 to 1.9.1
Release notes
Sourced from color-string's releases.
1.9.0
Minor Release 1.9.0
- Add parsing of exponential alpha values for HWB and HSL (#66)
Thanks to
@babycannotsayfor their contribution!1.8.2
Patch release 1.8.2
- Fix incorrect handling of optional comma in rgb() regex (#65)
Thanks to
@gerdasiand@mastertheblasterfor reporting and confirming the bug!1.8.1
Patch release 1.8.1
- Fix rgb alpha percentage parsing from int to float (#61)
Thanks to
@clytrasfor their contribution!1.8.0
Minor release 1.8.0
- Add anchors to keyword regex (#64)
Thanks to
@cq360767996for their contribution!1.7.4
Patch Release 1.7.4
- Fix bug in
.to.hex()output if the inputs aren't rounded numbers (#25)1.7.3
Patch Release 1.7.3
- Fix hue modulo operation (#50)
Thanks to
@adroitwhizfor their contributions.1.7.2
Patch Release 1.7.2
- Fix issue where color-string with incorrectly return a color for properties on Object's prototype like "constructor". (#45)
Thanks to
@tolmaskyfor their contributions.1.7.1
Patch release 1.7.1
... (truncated)
Commits
- See full diff in compare view
Updates decode-uri-component from 0.2.0 to 0.2.2
Release notes
Sourced from decode-uri-component's releases.
v0.2.2
- Prevent overwriting previously decoded tokens 980e0bf
https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2
v0.2.1
- Switch to GitHub workflows 76abc93
- Fix issue where decode throws - fixes #6 746ca5d
- Update license (#1) 486d7e2
- Tidelift tasks a650457
- Meta tweaks 66e1c28
https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1
Package Dependencies
Security Advisories
Axios Cross-Site Request Forgery Vulnerability
Prototype Pollution in Ajv
Technical Details
| ID: | 1131852 |
| UUID: | 3090201714 |
| Node ID: | PR_kwDOOwk0Yc6XlfOd |
| Host: | GitHub |
| Repository: | 2freemanall/create-react-app-lambda |