Bump the npm_and_yarn group across 1 directory with 28 updates
Type: Pull Request
State: Merged
Association: None
Comments: 0
(about 1 year ago)
(about 1 year ago)
(about 1 year ago)
by lisagorewitdecker
dependencies javascript
Bumps the npm_and_yarn group with 24 updates in the / directory:
| Package | From | To |
|---|---|---|
| @adobe/css-tools | 4.0.1 |
4.4.3 |
| semver | 5.7.1 |
5.7.2 |
| @babel/helpers | 7.19.4 |
7.27.1 |
| @babel/runtime | 7.19.4 |
7.27.1 |
| @babel/runtime-corejs3 | 7.19.4 |
7.27.1 |
| @babel/traverse | 7.19.4 |
7.27.1 |
| body-parser | 1.20.1 |
1.20.3 |
| express | 4.18.2 |
4.21.2 |
| braces | 3.0.2 |
3.0.3 |
| cross-spawn | 7.0.3 |
7.0.6 |
| ejs | 3.1.8 |
3.1.10 |
| minimatch | 3.0.4 |
3.1.2 |
| recursive-readdir | 2.2.2 |
2.2.3 |
| follow-redirects | 1.15.2 |
1.15.9 |
| http-proxy-middleware | 2.0.6 |
2.0.9 |
| json5 | 1.0.1 |
1.0.2 |
| micromatch | 4.0.5 |
4.0.8 |
| nanoid | 3.3.4 |
3.3.11 |
| rollup | 2.79.1 |
2.79.2 |
| serialize-javascript | 6.0.0 |
6.0.2 |
| tough-cookie | 4.1.2 |
4.1.4 |
| webpack | 5.74.0 |
5.99.9 |
| webpack-dev-middleware | 5.3.3 |
5.3.4 |
| word-wrap | 1.2.3 |
1.2.5 |
Updates @adobe/css-tools from 4.0.1 to 4.4.3
Changelog
Sourced from @adobe/css-tools's changelog.
4.4.3 / 2025-05-15
- Refactoring of the code to allow security static analysis from GitHub
- Fix Polynomial regular expression used on uncontrolled data
- Improve performance (very low improvement)
- Switch some regex to string search (indexOf based)
- Add new utils function with their corresponding unit-tests
- Add nicer format of template areas #283 by
@jogibear9988- Fix typescript error on ConstructorParameters (parcel) #444
4.4.2 / 2025-02-12
- Fix regular expression for quoted values in parentheses
4.4.0 / 2024-06-05
- add support for
@starting-style#3194.3.3 / 2024-01-24
- Update export property #271
4.3.2 / 2023-11-28
- Fix redos vulnerability with specific crafted css string - CVE-2023-48631
- Fix Problem parsing with :is() and nested :nth-child() #211
4.3.1 / 2023-03-14
- Fix redos vulnerability with specific crafted css string - CVE-2023-26364
4.3.0 / 2023-03-07
- Update build tools
- Update exports path and files
4.2.0 / 2023-02-21
- Add
@containersupport- Add
@layersupport
... (truncated)
Commits
- See full diff in compare view
Updates semver from 5.7.1 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
2f8fd41#585 better handling of whitespace (#585) (@joaomoreno,@lukekarrys)
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
2f8fd41#585 better handling of whitespace (#585) (@joaomoreno,@lukekarrys)5.7
- Add
minVersionmethod5.6
- Move boolean
looseparam to an options object, with backwards-compatibility protection.- Add ability to opt out of special prerelease version handling with the
includePrereleaseoption flag.5.5
- Add version coercion capabilities
5.4
- Add intersection checking
5.3
- Add
minSatisfyingmethod5.2
- Add
prerelease(v)that returns prerelease components5.1
- Add Backus-Naur for ranges
- Remove excessively cute inspection methods
5.0
- Remove AMD/Browserified build artifacts
- Fix ltr and gtr when using the
*range- Fix for range
*with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates @babel/helpers from 7.19.4 to 7.27.1
Release notes
Sourced from @babel/helpers's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/helpers's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1b1f9184ReduceinteropRequireWildcardsize (#16538)9c351e5Useclassand add type definitions forregenerator(#17220)0f95b74ReduceregeneratorRuntimesize (#17213)317e332Enforce node protocol import (#17207)14ef1e9Babel 8 cleanup (#17211)97105cbRe-convert regeneratorRuntime to helper format (#17205)1b93b0cMove regenerator files to the relevant packages (#17205)b953a8fRemove bundled regeneratorRuntime helper (#17205)6874c25Prepare LICENSE files for incorporating regenerator (#17205)- Additional commits viewable in compare view
Updates @babel/runtime from 7.19.4 to 7.27.1
Release notes
Sourced from @babel/runtime's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/runtime's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1296cdc5Remove unusedregenerator-runtimedep in@babel/runtime(#17263)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.92d95140v7.26.763d3038v7.26.0- Additional commits viewable in compare view
Updates @babel/runtime-corejs3 from 7.19.4 to 7.27.1
Release notes
Sourced from @babel/runtime-corejs3's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/runtime-corejs3's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1296cdc5Remove unusedregenerator-runtimedep in@babel/runtime(#17263)b1f9184ReduceinteropRequireWildcardsize (#16538)0f95b74ReduceregeneratorRuntimesize (#17213)97105cbRe-convert regeneratorRuntime to helper format (#17205)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)- Additional commits viewable in compare view
Updates @babel/traverse from 7.19.4 to 7.27.1
Release notes
Sourced from @babel/traverse's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages ...
Description has been truncated
Pull Request Statistics
1
1
+1817
-1449
Package Dependencies
Security Advisories
libwebp: OOB write in BuildHuffmanTable
@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity
@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS
Technical Details
| ID: | 577818 |
| UUID: | 2537490405 |
| Node ID: | PR_kwDOOtqaVM6XPwfl |
| Host: | GitHub |
| Repository: | lisagorewitdecker/https-github.com-react_portfolio |
| Merge State: | Unknown |