chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates
Type: Pull Request
State: Open
![dependabot[bot]](https://github.com/dependabot.png)
Association: None
Comments: 0
(4 months ago)
(4 months ago)
dependencies javascript
Bumps the npm_and_yarn group with 4 updates in the / directory: mocha, @babel/traverse, json5 and qs.
Updates mocha
from 9.1.3 to 11.5.0
Release notes
Sourced from mocha's releases.
v11.5.0
11.5.0 (2025-05-22)
🌟 Features
v11.4.0
11.4.0 (2025-05-19)
🌟 Features
📚 Documentation
v11.3.0
11.3.0 (2025-05-16)
🌟 Features
📚 Documentation
- Deploy new site alongside old one (#5360) (6c96545)
- mention explicit browser support range (#5354) (c514c0b)
- update Node.js version requirements for 11.x (#5329) (abf3dd9)
🧹 Chores
v11.2.2
11.2.2 (2025-04-10)
🩹 Fixes
... (truncated)
Changelog
Sourced from mocha's changelog.
11.5.0 (2025-05-22)
🌟 Features
11.4.0 (2025-05-19)
🌟 Features
📚 Documentation
11.3.0 (2025-05-16)
🌟 Features
📚 Documentation
- Deploy new site alongside old one (#5360) (6c96545)
- mention explicit browser support range (#5354) (c514c0b)
- update Node.js version requirements for 11.x (#5329) (abf3dd9)
🧹 Chores
11.2.2 (2025-04-10)
🩹 Fixes
📚 Documentation
... (truncated)
Commits
a7ed005
chore(main): release 11.5.0 (#5370)a3dea85
feat: bump mimimatch from ^5.1.6 to ^9.0.5 (#5349)5730dfc
chore(main): release 11.4.0 (#5368)618415d
docs: added CHANGELOG.md note around 11.1 yargs-parser update (#5362)554d6bb
fix: bump diff from ^5.2.0 to ^7.0.0 (#5348)fffe569
chore(main): release 11.3.0 (#5338)91bbf85
feat: add option to use posix exit code upon fatal signal (#4989)6c96545
docs: Deploy new site alongside old one (#5360)8878f22
chore: remove prerelease setting in release-please config (#5363)c514c0b
docs: mention explicit browser support range (#5354)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates @babel/traverse
from 7.10.3 to 7.27.3
Release notes
Sourced from @​babel/traverse
's releases.
v7.27.3 (2025-05-27)
:bug: Bug Fix
babel-generator
- #17324 Improve multiline comments handling in yield/await expression (
@​JLHwung
)babel-helpers
,babel-plugin-transform-async-generator-functions
,babel-plugin-transform-regenerator
,babel-preset-env
,babel-runtime-corejs3
- #17328 Correctly set
.displayName
onGeneratorFunction
(@​nicolo-ribaudo
)babel-plugin-proposal-explicit-resource-management
- #17319 fix: handle shadowed binding in
for using of
body (@​JLHwung
)- #17317 fix: support named evaluation for using declaration (
@​JLHwung
)babel-plugin-proposal-decorators
,babel-types
- #17321 fix(converter): Remove
abstract
modifiers in class declaration to expression conversion (@​magic-akari
)babel-helper-module-transforms
,babel-plugin-proposal-explicit-resource-management
,babel-plugin-transform-modules-amd
,babel-plugin-transform-modules-commonjs
,babel-plugin-transform-modules-umd
- #17257 Preserve class id when transforming using declarations with exported class (
@​JLHwung
)babel-parser
- #17312 fix(parser): properly handle optional markers in generator class methods (
@​magic-akari
)- #17307 fix(parser): Terminate modifier parsing at newline (
@​magic-akari
)babel-generator
,babel-parser
- #17308 Improve import phase parsing (
@​JLHwung
)Committers: 7
- Babel Bot (
@​babel-bot
)- Huáng Jùnlià ng (
@​JLHwung
)- Nicolò Ribaudo (
@​nicolo-ribaudo
)- Vik R (
@​vikr01
)@​liuxingbaoyu
@​magic-akari
- fisker Cheung (
@​fisker
)v7.27.2 (2025-05-06)
:bug: Bug Fix
babel-parser
- #17289 fix:
@babel/parser/bin/index.js
containsnode:
protocol require (@​liuxingbaoyu
)- #17291 fix: Private class method not found when TS and estree (
@​liuxingbaoyu
)babel-plugin-transform-object-rest-spread
- #17281 Fix: improve object rest handling in array pattern (
@​JLHwung
)babel-plugin-transform-modules-commonjs
,babel-template
- #17284 fix(babel-template): Properly handle empty string replacements (
@​magic-akari
):running_woman: Performance
babel-cli
- #17285 Enable Node compile cache for
@babel/cli
(@​JLHwung
)Committers: 5
- Babel Bot (
@​babel-bot
)- Huáng Jùnlià ng (
@​JLHwung
)- Nicolò Ribaudo (
@​nicolo-ribaudo
)@​liuxingbaoyu
@​magic-akari
... (truncated)
Changelog
Sourced from @​babel/traverse
's changelog.
v7.27.3 (2025-05-27)
:bug: Bug Fix
babel-generator
- #17324 Improve multiline comments handling in yield/await expression (
@​JLHwung
)babel-helpers
,babel-plugin-transform-async-generator-functions
,babel-plugin-transform-regenerator
,babel-preset-env
,babel-runtime-corejs3
- #17328 Correctly set
.displayName
onGeneratorFunction
(@​nicolo-ribaudo
)babel-plugin-proposal-explicit-resource-management
- #17319 fix: handle shadowed binding in
for using of
body (@​JLHwung
)- #17317 fix: support named evaluation for using declaration (
@​JLHwung
)babel-plugin-proposal-decorators
,babel-types
- #17321 fix(converter): Remove
abstract
modifiers in class declaration to expression conversion (@​magic-akari
)babel-helper-module-transforms
,babel-plugin-proposal-explicit-resource-management
,babel-plugin-transform-modules-amd
,babel-plugin-transform-modules-commonjs
,babel-plugin-transform-modules-umd
- #17257 Preserve class id when transforming using declarations with exported class (
@​JLHwung
)babel-parser
- #17312 fix(parser): properly handle optional markers in generator class methods (
@​magic-akari
)- #17307 fix(parser): Terminate modifier parsing at newline (
@​magic-akari
)babel-generator
,babel-parser
- #17308 Improve import phase parsing (
@​JLHwung
)v7.27.2 (2025-05-06)
:bug: Bug Fix
babel-parser
- #17289 fix:
@babel/parser/bin/index.js
containsnode:
protocol require (@​liuxingbaoyu
)- #17291 fix: Private class method not found when TS and estree (
@​liuxingbaoyu
)babel-plugin-transform-object-rest-spread
- #17281 Fix: improve object rest handling in array pattern (
@​JLHwung
)babel-plugin-transform-modules-commonjs
,babel-template
- #17284 fix(babel-template): Properly handle empty string replacements (
@​magic-akari
):running_woman: Performance
babel-cli
- #17285 Enable Node compile cache for
@babel/cli
(@​JLHwung
)v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parser
- #17254 Allow
using of
as lexical declaration within for (@​JLHwung
)- #17230 Disallow get/set in TSPropertySignature (
@​JLHwung
)babel-parser
,babel-types
- #17193 Stricter TSImportType options parsing (
@​JLHwung
):bug: Bug Fix
babel-plugin-proposal-destructuring-private
,babel-plugin-proposal-do-expressions
,babel-traverse
- #17137 fix: do expressions should allow early exit (
@​kermanx
)babel-helper-wrap-function
,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@​magic-akari
)babel-helper-remap-async-to-generator
,babel-plugin-transform-async-to-generator
babel-helper-fixtures
,babel-parser
... (truncated)
Commits
da5e371
v7.27.32d0c76e
Improve integrations of using declaration with other transforms (#17330)eebd3a0
v7.27.162af1a6
fix: do expressions should allow early exit (#17137)8e23272
[Babel 8] perf: Improve traverse performance (#16965)9a40d85
[Babel 8]: Remove record and tuple syntax support (#17242)4d39e9d
Harden variable declarator validations (#17217)6cd1c60
Reduce generated names size for the 10th-11th (#17221)a5c8992
fix: Objects and arrays with multiple references should not be evaluated (#17...fdc0fb5
[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0
(#17204)- Additional commits viewable in compare view
Updates json5
from 2.1.3 to 2.2.3
Release notes
Sourced from json5's releases.
v2.2.3
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
- Fix: Properties with the name
__proto__
are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).v2.2.1
- Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0
Changelog
Sourced from json5's changelog.
v2.2.3 [code, diff]
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2 [code, diff]
- Fix: Properties with the name
__proto__
are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).v2.2.1 [code, diff]
- Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0 [code, diff]
Commits
c3a7524
2.2.394fd06d
docs: update CHANGELOG for v2.2.33b8cebf
docs(security): use GitHub security advisoriesf0fd9e1
docs: publish a security policy6a91a05
docs(template): bug -> bug report14f8cb1
2.2.210cc7ca
docs: update CHANGELOG for v2.2.27774c10
fix: add proto to objects and arraysedde30a
Readme: slight tweak to intro97286f8
Improve example in readme- Additional commits viewable in compare view
Updates qs
from 6.5.2 to 6.5.3
Changelog
Sourced from qs's changelog.
6.5.3
- [Fix]
parse
: ignore__proto__
keys (#428)- [Fix]
utils.merge
: avoid a crash with a null target and a truthy non-array source- [Fix] correctly parse nested arrays
- [Fix]
stringify
: fix a crash withstrictNullHandling
and a customfilter
/serializeDate
(#279)- [Fix]
utils
:merge
: fix crash whensource
is a truthy primitive & no options are provided- [Fix] when
parseArrays
is false, properly handle keys ending in[]
- [Fix] fix for an impossible situation: when the formatter is called with a non-string value
- [Fix]
utils.merge
: avoid a crash with a null target and an array source- [Refactor]
utils
: reduce observable [[Get]]s- [Refactor] use cached
Array.isArray
- [Refactor]
stringify
: Avoid arr = arr.concat(...), push to the existing instance (#269)- [Refactor]
parse
: only need to reassign the var once- [Robustness]
stringify
: avoid relying on a globalundefined
(#427)- [readme] remove travis badge; add github actions/codecov badges; update URLs
- [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
- [Docs] Clarify the need for "arrayLimit" option
- [meta] fix README.md (#399)
- [meta] add FUNDING.yml
- [actions] backport actions from main
- [Tests] always use
String(x)
overx.toString()
- [Tests] remove nonexistent tape option
- [Dev Deps] backport from main
Commits
298bfa5
v6.5.3ed0f5dc
[Fix]parse
: ignore__proto__
keys (#428)691e739
[Robustness]stringify
: avoid relying on a globalundefined
(#427)1072d57
[readme] remove travis badge; add github actions/codecov badges; update URLs12ac1c4
[meta] fix README.md (#399)0338716
[actions] backport actions from main5639c20
Clean up license text so it’s properly detected as BSD-3-Clause51b8a0b
add FUNDING.yml45f6759
[Fix] fix for an impossible situation: when the formatter is called with a no...f814a7f
[Dev Deps] backport from main- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
1
2
+6474
-4566
Package Dependencies
Technical Details
ID: | 688292 |
UUID: | 2546805302 |
Node ID: | PR_kwDOE8tM0M6XzSo2 |
Host: | GitHub |
Repository: | jeffsays/serverless-default-aws-resource-properties |
Merge State: | Unknown |