Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group with 33 updates

Closed
Number: #36
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 1
Created: August 28, 2024 at 10:57 AM UTC
(about 1 year ago)
Updated: June 03, 2025 at 02:25 PM UTC
(3 months ago)
Closed: June 03, 2025 at 02:25 PM UTC
(3 months ago)
Time to Close: 9 months
Labels:
dependencies
Description:

Bumps the npm_and_yarn group with 33 updates:

Package From To
gatsby 2.18.21 4.25.7
gatsby-plugin-sharp 2.3.13 4.25.1
gh-pages 2.2.0 5.0.0
webpack 4.41.5 5.94.0
@babel/traverse 7.7.4 7.25.4
ansi-html 0.0.7 0.0.9
axios 0.19.0 0.21.4
bl 1.2.2 3.0.0
braces 2.3.2 3.0.2
cross-fetch 2.2.2 3.1.8
decode-uri-component 0.2.0 0.2.2
dot-prop 4.2.0 5.3.0
engine.io 3.4.0 6.2.1
express 4.17.1 4.19.2
flat 4.1.0 5.0.2
follow-redirects 1.5.10 1.15.6
glob-parent 3.1.0 5.1.0
hosted-git-info 2.8.5 3.0.8
http-cache-semantics 3.8.1 4.0.3
lodash 4.17.15 4.17.21
minimatch 3.0.3 3.0.4
moment 2.24.0 2.30.1
node-fetch 1.7.3 2.7.0
parse-path 4.0.1 7.0.0
parse-url 5.0.1 8.1.0
postcss 6.0.23 8.4.41
shell-quote 1.6.1 1.8.1
socket.io-parser 3.3.0 4.2.4
socket.io 2.3.0 4.5.4
terser 4.4.2 5.31.6
ua-parser-js 0.7.20 1.0.38
webpack-dev-middleware 3.7.2 4.3.0
ws 6.1.4 8.2.3

Updates gatsby from 2.18.21 to 4.25.7

Release notes

Sourced from gatsby's releases.

v4.24

Welcome to gatsby@4.24.0 release (September 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.23

Welcome to gatsby@4.23.0 release (September 2022 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.22

Welcome to gatsby@4.22.0 release (August 2022 #3)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.21

Welcome to gatsby@4.21.0 release (August 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

... (truncated)

Commits
  • db5eb18 chore(release): Publish
  • fc22f4b fix(gatsby): don't serve codeframes for files outside of compilation (#38059)...
  • 8889bfe chore(release): Publish
  • d3d5fd0 fix(gatsby-source-wordpress): prevent inconsistent schema customization (#377...
  • 5bdef4a fix(gatsby): don't block event loop during inference (#37780) (#37801)
  • 50e3f94 chore(release): Publish
  • 3f8477d chore: Update get-unowned-packages script to use npm 9 syntax
  • dcf88ed fix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...
  • 3be4a80 chore(release): Publish
  • 98c4d27 feat(gatsby): add initial webhook body env var to bootstrap context (#37478) ...
  • Additional commits viewable in compare view

Updates gatsby-plugin-sharp from 2.3.13 to 4.25.1

Release notes

Sourced from gatsby-plugin-sharp's releases.

v4.24

Welcome to gatsby@4.24.0 release (September 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.23

Welcome to gatsby@4.23.0 release (September 2022 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.22

Welcome to gatsby@4.22.0 release (August 2022 #3)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.21

Welcome to gatsby@4.21.0 release (August 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

... (truncated)

Changelog

Sourced from gatsby-plugin-sharp's changelog.

Changelog: gatsby-plugin-sharp

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-sharp

5.13.0 (2023-12-18)

🧾 Release notes

Chores

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-sharp

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-sharp

5.12.1 (2023-10-09)

Chores

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

5.11.0 (2023-06-15)

🧾 Release notes

Chores

5.10.0 (2023-05-16)

🧾 Release notes

... (truncated)

Commits

Updates gh-pages from 2.2.0 to 5.0.0

Release notes

Sourced from gh-pages's releases.

v5.0.0

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

What's Changed

New Contributors

Full Changelog: https://github.com/tschaub/gh-pages/compare/v4.0.0...v5.0.0

v4.0.0

This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10.

What's Changed

Full Changelog: https://github.com/tschaub/gh-pages/compare/v3.2.3...v4.0.0

v3.2.3

v3.0.0

Breaking changes:

None really. But tests are no longer run on Node < 10. Development dependencies were updated to address security warnings, and this meant tests could no longer be run on Node 6 or 8. If you still use these Node versions, you may still be able to use this library, but be warned that tests are no longer run on these versions.

All changes:

... (truncated)

Changelog

Sourced from gh-pages's changelog.

v5.0.0

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

v4.0.0

This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10.

v3.2.3

v3.2.2

v3.2.1

v3.2.0

This release updates a few development dependencies and adds a bit of documentation.

... (truncated)

Commits
  • f729b97 5.0.0
  • 51534c7 Log changes
  • ace063b Merge pull request #438 from Vicropht/patch-1
  • 58e54be Merge pull request #459 from tschaub/dependabot/npm_and_yarn/async-3.2.4
  • 2189df3 Bump async from 2.6.4 to 3.2.4
  • 051846e Merge pull request #454 from tschaub/dependabot/npm_and_yarn/email-addresses-...
  • 5c91c67 Merge pull request #455 from tschaub/dependabot/github_actions/actions/setup-...
  • fe0ad83 Merge pull request #453 from tschaub/dependabot/github_actions/actions/checko...
  • b89287d Merge pull request #445 from Nezteb/patch-1
  • e890bd1 Bump email-addresses from 3.0.1 to 5.0.0
  • Additional commits viewable in compare view

Updates webpack from 4.41.5 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

  • Added runtime condition for harmony reexport checked
  • Handle properly data/http/https protocols in source maps
  • Make bigint optimistic when browserslist not found
  • Move @​types/eslint-scope to dev deps
  • Related in asset stats is now always an array when no related found
  • Handle ASI for export declarations
  • Mangle destruction incorrect with export named default properly
  • Fixed unexpected asi generation with sequence expression
  • Fixed a lot of types

New Features

  • Added new external type "module-import"
  • Support webpackIgnore for new URL() construction
  • [CSS] @import pathinfo support

Security

  • Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

  • Generate correct relative path to runtime chunks
  • Makes DefinePlugin quieter under default log level
  • Fixed mangle destructuring default in namespace import
  • Fixed consumption of eager shared modules for module federation
  • Strip slash for pretty regexp
  • Calculate correct contenthash for CSS generator options

New Features

  • Added the binary generator option for asset modules to explicitly keep source maps produced by loaders
  • Added the modern-module library value for tree shakable output
  • Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

  • Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

  • Correct tidle range's comutation for module federation
  • Consider runtime for pure expression dependency update hash
  • Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits
  • eabf85d chore(release): 5.94.0
  • 955e057 security: fix DOM clobbering in auto public path
  • 9822387 test: fix
  • cbb86ed test: fix
  • 5ac3d7f fix: unexpected asi generation with sequence expression
  • 2411661 security: fix DOM clobbering in auto public path
  • b8c03d4 fix: unexpected asi generation with sequence expression
  • f46a03c revert: do not use heuristic fallback for "module-import"
  • 60f1898 fix: do not use heuristic fallback for "module-import"
  • 66306aa Revert "fix: module-import get fallback from externalsPresets"
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.


Updates @babel/traverse from 7.7.4 to 7.25.4

Release notes

Sourced from @​babel/traverse's releases.

v7.25.4 (2024-08-22)

:bug: Bug Fix

:nail_care: Polish

  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  • babel-generator, babel-plugin-transform-class-properties
  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

:microscope: Output optimization

Committers: 4

v7.25.3 (2024-07-31)

:bug: Bug Fix

  • babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

:house: Internal

Committers: 2

v7.25.2 (2024-07-30)

:bug: Bug Fix

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.25.4 (2024-08-22)

:bug: Bug Fix

:nail_care: Polish

  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  • babel-generator, babel-plugin-transform-class-properties
  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

:microscope: Output optimization

v7.25.3 (2024-07-31)

:bug: Bug Fix

  • babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

:house: Internal

v7.25.2 (2024-07-30)

:bug: Bug Fix

v7.25.1 (2024-07-28)

:bug: Bug Fix

:house: Internal

v7.25.0 (2024-07-26)

... (truncated)

Commits

Updates ansi-html from 0.0.7 to 0.0.9

Commits

Updates axios from 0.19.0 to 0.21.4

Release notes

Sourced from axios's releases.

v0.21.4

Fixes and Functionality:

  • Fixing JSON transform when data is stringified. Providing backward compatibility and complying to the JSON RFC standard (#4020)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

v0.21.3

Fixes and Functionality:

  • Fixing response interceptor not being called when request interceptor is attached (#4013)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

v0.21.2

Fixes and Functionality:

  • Updating axios requests to be delayed by pre-emptive promise creation (#2702)
  • Adding "synchronous" and "runWhen" options to interceptors api (#2702)
  • Updating of transformResponse (#3377)
  • Adding ability to omit User-Agent header (#3703)
  • Adding multiple JSON improvements (#3688, #3763)
  • Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)
  • Adding parseInt to config.timeout (#3781)
  • Adding custom return type support to interceptor (#3783)
  • Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

  • Updating build dev dependancies (#3401)
  • Fixing builds running on Travis CI (#3538)
  • Updating follow rediect version (#3694, #3771)
  • Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)
  • Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)
  • Fixing tests by bumping karma-sauce-launcher version (#3813)
  • Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

  • Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)
  • Remove duplication of item in changelog (#3523)
  • Fixing gramatical errors (#2642)
  • Fixing spelling error (#3567)
  • Moving gitpod metion (#2637)
  • Adding new axios documentation website link (#3681, #3707)
  • Updating documentation around dispatching requests (#3772)

... (truncated)

Changelog

Sourced from axios's changelog.

0.21.4 (September 6, 2021)

Fixes and Functionality:

  • Fixing JSON transform when data is stringified. Providing backward compatability and complying to the JSON RFC standard (#4020)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

0.21.3 (September 4, 2021)

Fixes and Functionality:

  • Fixing response interceptor not being called when request interceptor is attached (#4013)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

0.21.2 (September 4, 2021)

Fixes and Functionality:

  • Updating axios requests to be delayed by pre-emptive promise creation (#2702)
  • Adding "synchronous" and "runWhen" options to interceptors api (#2702)
  • Updating of transformResponse (#3377)
  • Adding ability to omit User-Agent header (#3703)
  • Adding multiple JSON improvements (#3688, #3763)
  • Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)
  • Adding parseInt to config.timeout (#3781)
  • Adding custom return type support to interceptor (#3783)
  • Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

  • Updating build dev dependancies (#3401)
  • Fixing builds running on Travis CI (#3538)
  • Updating follow rediect version (#3694, #3771)
  • Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)
  • Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)
  • Fixing tests by bumping karma-sauce-launcher version (#3813)
  • Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

  • Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)
  • Remove duplication of item in changelog (#3523)

... (truncated)

Commits
  • 66c4602 Merge branch 'master' into release/0.21.4
  • fc15665 [Releasing] v0.21.4
  • c2714f0 [Updating] incorrect JSON syntax in README.md
  • 0fc7248 fix json transform when data is pre-stringified (#4020)
  • 90205f8 Change headers type to string record (#3021)
  • 92b29d2 Make the default type of response data never (#3002)
  • 4eeb3b1 Improved type-safety for AxiosRequestConfig (#2995)
  • cd7ff04 Adding HTTP status code to error.toJSON (#2956)
  • b5a1a67 Adding nodejs http.request option: insecureHTTPParser (#2930)
  • 4f25380 Exposing the Axios constructor in index.d.ts (#2872)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.


Updates bl from 1.2.2 to 3.0.0

Release notes

Sourced from bl's releases.

v3.0.0

  • readable-stream@3 #57

v2.2.1

Fix unintialized memory access

v2.2.0

  • Add indexOf docs #60
  • fix empty shallowSlice return #65

v2.1.2

  • use ES3 only #62

v2.1.1

  • Use native indexOf whenever possible #61

v2.1.0

  • Added indexOf #59

v2.0.1

  • Use require('readable-stream').Duplex #56

v2.0.0

  • Added support for readUIntLE and companions #55
Commits
  • ecc0cc5 Bumped v3.0.0.
  • 808731b Merge pull request #57 from rvagg/rvagg/update
  • fe0d2bc Fix destroy(err) support
  • 07034ec Removed Node 4 as it is not supported anymore
  • e0a867a Merge pull request #66 from hugomrdias/feat/readable-stream3
  • c19a6b0 feat: upgrade to stream 3
  • b6284a8 Bumped v2.2.0.
  • 538a988 Merge pull request #60 from reconbot/reconbot/indexof-readme
  • 635b6ce Merge pull request #65 from reconbot/reconbot/empty-slice
  • 9b80b00 fix: empty shallowSlice return
  • Additional commits viewable in compare view

Updates braces from 2.3.2 to 3.0.2

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • ChangedDescription has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+7240
Deletions:
-7204
Package Dependencies
Package:
@babel/traverse
Ecosystem:
npm
Version Change:
7.7.4 → 7.25.4
Update Type:
Minor
Package:
axios
Ecosystem:
npm
Version Change:
0.19.0 → 0.21.4
Update Type:
Minor
Package:
ws
Ecosystem:
npm
Version Change:
6.1.4 → 8.2.3
Update Type:
Major
Package:
webpack
Ecosystem:
npm
Version Change:
4.41.5 → 5.94.0
Update Type:
Major
Package:
braces
Ecosystem:
npm
Version Change:
2.3.2 → 3.0.2
Update Type:
Major
Package:
express
Ecosystem:
npm
Version Change:
4.17.1 → 4.19.2
Update Type:
Minor
Package:
terser
Ecosystem:
npm
Version Change:
4.4.2 → 5.31.6
Update Type:
Major
Package:
decode-uri-component
Ecosystem:
npm
Version Change:
0.2.0 → 0.2.2
Update Type:
Patch
Package:
postcss
Ecosystem:
npm
Version Change:
6.0.23 → 8.4.41
Update Type:
Major
Package:
follow-redirects
Ecosystem:
npm
Version Change:
1.5.10 → 1.15.6
Update Type:
Minor
Package:
minimatch
Ecosystem:
npm
Version Change:
3.0.3 → 3.0.4
Update Type:
Patch
Package:
lodash
Ecosystem:
npm
Version Change:
4.17.15 → 4.17.21
Update Type:
Patch
Package:
hosted-git-info
Ecosystem:
npm
Version Change:
2.8.5 → 3.0.8
Update Type:
Major
Package:
http-cache-semantics
Ecosystem:
npm
Version Change:
3.8.1 → 4.0.3
Update Type:
Major
Package:
node-fetch
Ecosystem:
npm
Version Change:
1.7.3 → 2.7.0
Update Type:
Major
Package:
ua-parser-js
Ecosystem:
npm
Version Change:
0.7.20 → 1.0.38
Update Type:
Major
Package:
gh-pages
Ecosystem:
npm
Version Change:
2.2.0 → 5.0.0
Update Type:
Major
Package:
bl
Ecosystem:
npm
Version Change:
1.2.2 → 3.0.0
Update Type:
Major
Package:
webpack-dev-middleware
Ecosystem:
npm
Version Change:
3.7.2 → 4.3.0
Update Type:
Major
Package:
shell-quote
Ecosystem:
npm
Version Change:
1.6.1 → 1.8.1
Update Type:
Minor
Package:
dot-prop
Ecosystem:
npm
Version Change:
4.2.0 → 5.3.0
Update Type:
Major
Package:
gatsby
Ecosystem:
npm
Version Change:
2.18.21 → 4.25.7
Update Type:
Major
Package:
socket.io
Ecosystem:
npm
Version Change:
2.3.0 → 4.5.4
Update Type:
Major
Package:
glob-parent
Ecosystem:
npm
Version Change:
3.1.0 → 5.1.0
Update Type:
Major
Package:
ansi-html
Ecosystem:
npm
Version Change:
0.0.7 → 0.0.9
Update Type:
Patch
Package:
cross-fetch
Ecosystem:
npm
Version Change:
2.2.2 → 3.1.8
Update Type:
Major
Package:
moment
Ecosystem:
npm
Version Change:
2.24.0 → 2.30.1
Update Type:
Minor
Package:
flat
Ecosystem:
npm
Version Change:
4.1.0 → 5.0.2
Update Type:
Major
Package:
socket.io-parser
Ecosystem:
npm
Version Change:
3.3.0 → 4.2.4
Update Type:
Major
Package:
engine.io
Ecosystem:
npm
Version Change:
3.4.0 → 6.2.1
Update Type:
Major
Package:
gatsby-plugin-sharp
Ecosystem:
npm
Version Change:
2.3.13 → 4.25.1
Update Type:
Major
Package:
parse-url
Ecosystem:
npm
Version Change:
5.0.1 → 8.1.0
Update Type:
Major
Package:
parse-path
Ecosystem:
npm
Version Change:
4.0.1 → 7.0.0
Update Type:
Major
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1280818
UUID: 2041665295
Node ID: PR_kwDOAI7GUs55sVcP
Host: GitHub
Repository: jakemhiller/jakemhiller.github.io
Mergeable: Yes
Merge State: Clean