Bump the npm_and_yarn group across 1 directory with 31 updates

Open

Number: #1
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: None
Comments: 0

Created: May 15, 2025 at 05:47 PM UTC
(about 1 year ago)

Updated: May 15, 2025 at 05:47 PM UTC
(about 1 year ago)

Labels:
dependencies javascript

Description:

Bumps the npm_and_yarn group with 26 updates in the /Reactivities/client-app directory:

Package	From	To
axios	`0.26.1`	`0.30.0`
semver	`6.3.0`	`7.7.2`
semver	`7.3.7`	`7.7.2`
core-js-compat	`3.21.1`	`3.42.0`
@babel/helpers	`7.17.9`	`7.27.1`
@babel/runtime	`7.17.9`	`7.27.1`
@babel/runtime-corejs3	`7.17.9`	`7.27.1`
@babel/traverse	`7.17.9`	`7.27.1`
body-parser	`1.19.2`	`1.20.3`
express	`4.17.3`	`4.21.2`
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
ejs	`3.1.6`	`3.1.10`
http-proxy-middleware	`2.0.4`	`2.0.9`
json5	`1.0.1`	`1.0.2`
micromatch	`4.0.5`	`4.0.8`
minimatch	`3.0.4`	`3.1.2`
recursive-readdir	`2.2.2`	`2.2.3`
nanoid	`3.3.2`	`3.3.11`
rollup	`2.70.1`	`2.79.2`
serialize-javascript	`6.0.0`	`6.0.2`
terser	`5.12.1`	`5.39.2`
tough-cookie	`4.0.0`	`4.1.4`
webpack	`5.72.0`	`5.99.8`
webpack-dev-middleware	`5.3.1`	`5.3.4`
word-wrap	`1.2.3`	`1.2.5`

Updates axios from 0.26.1 to 0.30.0

Release notes

Sourced from axios's releases.

Release v0.30.0

Release notes:

Bug Fixes

fix: modify log while request is aborted by @mori5321 in axios/axios#4917

fix: update CHANGELOG.md for v0.x by @TehZarathustra in axios/axios#6271

fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in axios/axios#6787

fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in axios/axios#6829

fix: add allowAbsoluteUrls type by @thatguyinabeanie in axios/axios#6849

Contributors to this release

@mori5321 made their first contribution in axios/axios#4917

@TehZarathustra made their first contribution in axios/axios#6271

@nafeger made their first contribution in axios/axios#6787

@thatguyinabeanie made their first contribution in axios/axios#6829

Full Changelog: https://github.com/axios/axios/compare/v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in axios/axios#6402

fix: omit nulls in params by @Willshaw in axios/axios#6394

fix(backport): fix paramsSerializer function validation by @solonzhu in axios/axios#6361

fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in axios/axios#6708

Contributors to this release

@Sean-Powell made their first contribution in axios/axios#6402

@Willshaw made their first contribution in axios/axios#6394

@solonzhu made their first contribution in axios/axios#6361

@qiongshusheng made their first contribution in axios/axios#6708

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

... (truncated)

Changelog

Sourced from axios's changelog.

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

fix: modify log while request is aborted (#4917)

fix: update CHANGELOG.md for v0.x (#6271)

fix: modify upgrade guide for 0.28.1's breaking change (#6787)

fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)

fix: add allowAbsoluteUrls type (#6849)

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 (#6402)

fix: omit nulls in params (#6394)

fix(backport): fix paramsSerializer function validation (#6361)

fix: regular expression denial of service (ReDoS) (#6708)

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated (#4745)

Fixed timeout error message for HTTP (#4738)

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 (#4728)

Adding types for progress event callbacks (#4675)

Fixed max body length defaults (#4731)

... (truncated)

Commits

6e922e4 chore: added build artifacts
a06ed1e chore: added pre-release artifacts
c010622 feat: add type for allowAbsoluteUrls (#6849)
02c3c69 fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)
8603e67 docs: modify upgrade guide for 0.28.1's breaking change (#6787)
f0642ee fix(docs): update CHANGELOG.md for v0.x (#6271)
0630c32 fix: modify log while request is aborted (#4917)
7750b8c chore(release): prep release v0.29.0
4840cb2 fix: regular expression denial of service issues (#6708)
2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
Additional commits viewable in compare view

Updates semver from 6.3.0 to 7.7.2

Release notes

Sourced from semver's releases.

v7.7.2

7.7.2 (2025-05-12)

Bug Fixes

fcafb61 #780 add missing 'use strict' directives (#780) (@Fdawgs)

c99f336 #781 prerelease identifier starting with digits (#781) (@mbtools)

Chores

c760403 #784 template-oss-apply for workflow permissions (#784) (@wraithgar)

2677f2a #778 bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778) (@dependabot[bot], @npm-cli-bot)

v7.7.1

7.7.1 (2025-02-03)

Bug Fixes

af761c0 #764 inc: fully capture prerelease identifier (#764) (@wraithgar)

v7.7.0

7.7.0 (2025-01-29)

Features

0864b3c #753 add "release" inc type (#753) (@mbtools)

Bug Fixes

d588e37 #755 diff: fix prerelease to stable version diff logic (#755) (@eminberkayd, berkay.daglar)

8a34bde #754 add identifier validation to inc() (#754) (@mbtools)

Documentation

67e5478 #756 readme: added missing period for consistency (#756) (@shaymolcho)

868d4bb #749 clarify comment about obsolete prefixes (#749) (@mbtools, @ljharb)

Chores

145c554 #741 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])

753e02b #747 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#747) (@dependabot[bot], @npm-cli-bot)

0b812d5 #744 postinstall for dependabot template-oss PR (@hashtagchris)

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

v7.6.1

7.6.1 (2024-05-04)

... (truncated)

Changelog

Sourced from semver's changelog.

7.7.2 (2025-05-12)

Bug Fixes

fcafb61 #780 add missing 'use strict' directives (#780) (@Fdawgs)

c99f336 #781 prerelease identifier starting with digits (#781) (@mbtools)

Chores

c760403 #784 template-oss-apply for workflow permissions (#784) (@wraithgar)

2677f2a #778 bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778) (@dependabot[bot], @npm-cli-bot)

7.7.1 (2025-02-03)

Bug Fixes

af761c0 #764 inc: fully capture prerelease identifier (#764) (@wraithgar)

7.7.0 (2025-01-29)

Features

0864b3c #753 add "release" inc type (#753) (@mbtools)

Bug Fixes

d588e37 #755 diff: fix prerelease to stable version diff logic (#755) (@eminberkayd, berkay.daglar)

8a34bde #754 add identifier validation to inc() (#754) (@mbtools)

Documentation

67e5478 #756 readme: added missing period for consistency (#756) (@shaymolcho)

868d4bb #749 clarify comment about obsolete prefixes (#749) (@mbtools, @ljharb)

Chores

145c554 #741 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])

753e02b #747 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#747) (@dependabot[bot], @npm-cli-bot)

0b812d5 #744 postinstall for dependabot template-oss PR (@hashtagchris)

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

... (truncated)

Commits

281055e chore: release 7.7.2 (#783)
fcafb61 fix: add missing 'use strict' directives (#780)
c760403 chore: template-oss-apply for workflow permissions (#784)
c99f336 fix: prerelease identifier starting with digits (#781)
2677f2a chore: bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778)
0b98655 chore: bump @npmcli/template-oss from 4.23.4 to 4.23.6 (#760)
30c438b chore: release 7.7.1 (#765)
af761c0 fix(inc): fully capture prerelease identifier (#764)
2cfcbb5 chore: release 7.7.0 (#750)
d588e37 fix(diff): fix prerelease to stable version diff logic (#755)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.

Updates semver from 7.3.7 to 7.7.2

Release notes

Sourced from semver's releases.

v7.7.2

7.7.2 (2025-05-12)

Bug Fixes

fcafb61 #780 add missing 'use strict' directives (#780) (@Fdawgs)

c99f336 #781 prerelease identifier starting with digits (#781) (@mbtools)

Chores

c760403 #784 template-oss-apply for workflow permissions (#784) (@wraithgar)

2677f2a #778 bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778) (@dependabot[bot], @npm-cli-bot)

v7.7.1

7.7.1 (2025-02-03)

Bug Fixes

af761c0 #764 inc: fully capture prerelease identifier (#764) (@wraithgar)

v7.7.0

7.7.0 (2025-01-29)

Features

0864b3c #753 add "release" inc type (#753) (@mbtools)

Bug Fixes

d588e37 #755 diff: fix prerelease to stable version diff logic (#755) (@eminberkayd, berkay.daglar)

8a34bde #754 add identifier validation to inc() (#754) (@mbtools)

Documentation

67e5478 #756 readme: added missing period for consistency (#756) (@shaymolcho)

868d4bb #749 clarify comment about obsolete prefixes (#749) (@mbtools, @ljharb)

Chores

145c554 #741 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])

753e02b #747 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#747) (@dependabot[bot], @npm-cli-bot)

0b812d5 #744 postinstall for dependabot template-oss PR (@hashtagchris)

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

v7.6.1

7.6.1 (2024-05-04)

... (truncated)

Changelog

Sourced from semver's changelog.

7.7.2 (2025-05-12)

Bug Fixes

fcafb61 #780 add missing 'use strict' directives (#780) (@Fdawgs)

c99f336 #781 prerelease identifier starting with digits (#781) (@mbtools)

Chores

c760403 #784 template-oss-apply for workflow permissions (#784) (@wraithgar)

2677f2a #778 bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778) (@dependabot[bot], @npm-cli-bot)

7.7.1 (2025-02-03)

Bug Fixes

af761c0 #764 inc: fully capture prerelease identifier (#764) (@wraithgar)

7.7.0 (2025-01-29)

Features

0864b3c #753 add "release" inc type (#753) (@mbtools)

Bug Fixes

d588e37 #755 diff: fix prerelease to stable version diff logic (#755) (@eminberkayd, berkay.daglar)

8a34bde #754 add identifier validation to inc() (#754) (@mbtools)

Documentation

67e5478 #756 readme: added missing period for consistency (#756) (@shaymolcho)

868d4bb #749 clarify comment about obsolete prefixes (#749) (@mbtools, @ljharb)

Chores

145c554 #741 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])

753e02b #747 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#747) (@dependabot[bot], @npm-cli-bot)

0b812d5 #744 postinstall for dependabot template-oss PR (@hashtagchris)

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

... (truncated)

Commits

281055e chore: release 7.7.2 (#783)
fcafb61 fix: add missing 'use strict' directives (#780)
c760403 chore: template-oss-apply for workflow permissions (#784)
c99f336 fix: prerelease identifier starting with digits (#781)
2677f2a chore: bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778)
0b98655 chore: bump @npmcli/template-oss from 4.23.4 to 4.23.6 (#760)
30c438b chore: release 7.7.1 (#765)
af761c0 fix(inc): fully capture prerelease identifier (#764)
2cfcbb5 chore: release 7.7.0 (#750)
d588e37 fix(diff): fix prerelease to stable version diff logic (#755)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.

Updates core-js-compat from 3.21.1 to 3.42.0

Changelog

Sourced from core-js-compat's changelog.

3.42.0 - 2025.04.30

Changes v3.41.0...v3.42.0 (142 commits)

Map upsert proposal:

Moved to stage 2.7, April 2025 TC39 meeting

Validation order of WeakMap.prototype.getOrInsertComputed updated following tc39/proposal-upsert#79

Built-ins:

Map.prototype.getOrInsert

Map.prototype.getOrInsertComputed

WeakMap.prototype.getOrInsert

WeakMap.prototype.getOrInsertComputed

Don't call well-known Symbol methods for RegExp on primitive values following tc39/ecma262#3009:

For avoid performance regression, temporarily, only in own core-js implementations

Built-ins:

String.prototype.matchAll

String.prototype.match

String.prototype.replaceAll

String.prototype.replace

String.prototype.search

String.prototype.split

Added workaround for the Uint8Array.prototype.setFromBase64 bug in some of Linux builds of WebKit

Implemented early-error iterator closing following tc39/ecma262#3467, including fix of a WebKit bug, in the following methods:

Iterator.prototype.drop

Iterator.prototype.every

Iterator.prototype.filter

Iterator.prototype.find

Iterator.prototype.flatMap

Iterator.prototype.forEach

Iterator.prototype.map

Iterator.prototype.reduce

Iterator.prototype.some

Iterator.prototype.take

Fixed missing forced replacement of AsyncIterator helpers

Added closing of sync iterator when async wrapper yields a rejection following tc39/ecma262#2600. Affected methods:

Array.fromAsync (due to the lack of async feature detection capability - temporarily, only in own core-js implementation)

AsyncIterator.from

Iterator.prototype.toAsync

Added detection for throwing on undefined initial parameter in Iterator.prototype.reduce (see WebKit bug)

core-js-compat and core-js-builder API:

Added 'intersect' support for targets.esmodules (Babel 7 behavior)

Fixed handling of targets.esmodules: true (Babel 7 behavior)

Compat data improvements:

Explicit Resource Management features disabled (again) in V8 ~ Chromium 135 and re-added in 136

RegExp.escape marked as shipped from V8 ~ Chromium 136

Error.isError marked as shipped from FF138

Explicit Resource Management features re-enabled in Deno 2.2.10

Iterator helpers proposal features marked as supported from Deno 1.38.1 since it seems they were disabled in 1.38.0

Iterator.prototype.{ drop, reduce, take } methods marked as fixed in Bun 1.2.11

Added NodeJS 24.0 compat data mapping

Updated Electron 36 and added Electron 37 compat data mapping

Added Opera Android 88 and 89 compat data mapping

... (truncated)

Commits

ce8281c v3.42.0
25e6e04 add Electron 37 compat data mapping
997aeb1 mark Iterator.prototype.{ drop, reduce, take } methods as fixed from Bun 1....
dc0e812 Added detection for throwing on undefined initial parameter in `Iterator.pr...
8c45510 update Node 24.0 compat data mapping
357eaf7 Explicit Resource Management features re-enabled in Deno 2.2.10
4fb53b0 add Opera Android 89 compat data mapping
bd7f399 Merge pull request #1407 from zloirock/3467
05f0df1 fix a WebKit bug with incorrect iterator closing algorithm
96a8c35 revert compat data changes since it's changes related only to some strange Li...
Additional commits viewable in compare view

Updates @babel/helpers from 7.17.9 to 7.27.1

Release notes

Sourced from @babel/helpers's releases.

v7.27.1 (2025-04-30)

Thanks @kermanx and @woaitsAryan for your first PRs!

:eyeglasses: Spec Compliance

babel-parser

#17254 Allow using of as lexical declaration within for (@JLHwung)

#17230 Disallow get/set in TSPropertySignature (@JLHwung)

babel-parser, babel-types

#17193 Stricter TSImportType options parsing (@JLHwung)

:bug: Bug Fix

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse

#17137 fix: do expressions should allow early exit (@kermanx)

babel-helper-wrap-function, babel-plugin-transform-async-to-generator

#17251 Fix: propagate argument evaluation errors through async promise chain (@magic-akari)

babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator

#17231 fix apply()/call() annotated as pure (@Lacsw)

babel-helper-fixtures, babel-parser

#17233 Create ChainExpression within TSInstantiationExpression (@JLHwung)

babel-generator, babel-parser

#17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@JLHwung)

babel-parser

#17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@JLHwung)

#17080 Fix start of TSParameterProperty (@JLHwung)

babel-compat-data, babel-preset-env

#17228 Update firefox bugfix compat data (@JLHwung)

babel-traverse

#17156 fix: Objects and arrays with multiple references should not be evaluated (@liuxingbaoyu)

babel-generator

#17216 Fix: support const type parameter in generator (@JLHwung)

:nail_care: Polish

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

#17221 Reduce generated names size for the 10th-11th (@nicolo-ribaudo)

:house: Internal

babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17263 Remove unused regenerator-runtime dep in @babel/runtime (@nicolo-ribaudo)

babel-compat-data, babel-preset-env

#17256 Tune plugin compat data (@JLHwung)

babel-compat-data, babel-standalone

#17236 migrate babel-compat-data build script to mjs (@JLHwung)

babel-register

#16844 Migrate @babel/register to cts (

Pull Request Statistics

Commits:
1

Files Changed:
2

Additions:
+1985

Deletions:
-1106

Package Dependencies

Package:
@babel/helpers

Ecosystem:
npm

Version Change:
7.17.9 → 7.27.1

Update Type:
Minor

Package:
@babel/traverse

Ecosystem:
npm

Version Change:
7.17.9 → 7.27.1

Update Type:
Minor

Package:
axios

Ecosystem:
npm

Version Change:
0.26.1 → 0.30.0

Update Type:
Minor

Package:
@babel/runtime

Ecosystem:
npm

Version Change:
7.17.9 → 7.27.1

Update Type:
Minor

Package:
tough-cookie

Ecosystem:
npm

Version Change:
4.0.0 → 4.1.4

Update Type:
Minor

Package:
cross-spawn

Ecosystem:
npm

Version Change:
7.0.3 → 7.0.6

Update Type:
Patch

Package:
http-proxy-middleware

Ecosystem:
npm

Version Change:
2.0.4 → 2.0.9

Update Type:
Patch

Package:
webpack

Ecosystem:
npm

Version Change:
5.72.0 → 5.99.8

Update Type:
Minor

Package:
serialize-javascript

Ecosystem:
npm

Version Change:
6.0.0 → 6.0.2

Update Type:
Patch

Package:
nanoid

Ecosystem:
npm

Version Change:
3.3.2 → 3.3.11

Update Type:
Patch

Package:
@babel/runtime-corejs3

Ecosystem:
npm

Version Change:
7.17.9 → 7.27.1

Update Type:
Minor

Package:
braces

Ecosystem:
npm

Version Change:
3.0.2 → 3.0.3

Update Type:
Patch

Package:
express

Ecosystem:
npm

Version Change:
4.17.3 → 4.21.2

Update Type:
Minor

Package:
terser

Ecosystem:
npm

Version Change:
5.12.1 → 5.39.2

Update Type:
Minor

Package:
decode-uri-component

Ecosystem:
npm

Version Change:
0.2.0 → 0.2.2

Update Type:
Patch

Package:
micromatch

Ecosystem:
npm

Version Change:
4.0.5 → 4.0.8

Update Type:
Patch

Package:
rollup

Ecosystem:
npm

Version Change:
2.70.1 → 2.79.2

Update Type:
Minor

Package:
minimatch

Ecosystem:
npm

Version Change:
3.0.4 → 3.1.2

Update Type:
Minor

Package:
ejs

Ecosystem:
npm

Version Change:
3.1.6 → 3.1.10

Update Type:
Patch

Package:
semver

Ecosystem:
npm

Version Change:
7.3.7 → 7.7.2

Update Type:
Minor

Package:
word-wrap

Ecosystem:
npm

Version Change:
1.2.3 → 1.2.5

Update Type:
Patch

Package:
json5

Ecosystem:
npm

Version Change:
1.0.1 → 1.0.2

Update Type:
Patch

Package:
body-parser

Ecosystem:
npm

Version Change:
1.19.2 → 1.20.3

Update Type:
Minor

Package:
webpack-dev-middleware

Ecosystem:
npm

Version Change:
5.3.1 → 5.3.4

Update Type:
Patch

Package:
recursive-readdir

Ecosystem:
npm

Version Change:
2.2.2 → 2.2.3

Update Type:
Patch

Package:
core-js-compat

Ecosystem:
npm

Version Change:
3.21.1 → 3.42.0

Update Type:
Minor

Security Advisories

Axios Cross-Site Request Forgery Vulnerability

GHSA-wf5p-g6vw-rhxx CVE-2023-45857 MODERATE

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any ho...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`319800`
UUID:	`2522772275`
Node ID:	`PR_kwDOHLEPG86WXnMz`
Host:	GitHub
Repository:	codemonkey85/DotNetReactTutorial
Merge State:	Unknown