Bump the npm_and_yarn group across 1 directory with 49 updates

Open

Number: #4
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: None
Comments: 0

Created: June 06, 2025 at 02:10 PM UTC
(6 months ago)

Updated: June 06, 2025 at 02:10 PM UTC
(6 months ago)

Labels:
dependencies javascript

Description:

Bumps the npm_and_yarn group with 32 updates in the / directory:

Package	From	To
axios	`0.19.0`	`0.30.0`
npm	`6.13.1`	`11.4.1`
vue	`2.6.10`	`3.5.16`
@vue/cli-plugin-unit-jest	`4.1.0`	`5.0.8`
@vue/test-utils	`1.0.0-beta.29`	`2.4.6`
vue-template-compiler	`2.6.10`	`2.7.16`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`3.0.0`	`4.1.1`
@hapi/hoek	`8.2.5`	`8.5.1`
yargs-parser	`5.0.0`	`5.0.1`
async	`1.5.2`	`3.2.6`
@vue/cli-plugin-e2e-cypress	`3.11.0`	`5.0.8`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
dot-prop	`4.2.0`	`4.2.1`
ejs	`2.7.1`	`removed`
@vue/cli-service	`3.11.0`	`5.0.8`
elliptic	`6.5.1`	`6.6.1`
json5	`1.0.1`	`2.2.3`
find-babel-config	`1.2.0`	`1.2.2`
ini	`1.3.5`	`1.3.8`
minimatch	`3.0.4`	`3.0.8`
minimist	`1.2.0`	`1.2.8`
mkdirp	`0.5.1`	`0.5.6`
cypress	`3.4.1`	`14.4.1`
handlebars	`4.5.3`	`4.7.8`
tar	`2.2.2`	`6.2.1`
fsevents	`1.2.9`	`1.2.13`
node-sass	`4.12.0`	`9.0.0`
hosted-git-info	`2.8.4`	`2.8.9`
ws	`5.2.2`	`5.2.4`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`

Updates axios from 0.19.0 to 0.30.0

Release notes

Sourced from axios's releases.

Release v0.30.0

Release notes:

Bug Fixes

fix: modify log while request is aborted by @mori5321 in axios/axios#4917

fix: update CHANGELOG.md for v0.x by @TehZarathustra in axios/axios#6271

fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in axios/axios#6787

fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in axios/axios#6829

fix: add allowAbsoluteUrls type by @thatguyinabeanie in axios/axios#6849

Contributors to this release

@mori5321 made their first contribution in axios/axios#4917

@TehZarathustra made their first contribution in axios/axios#6271

@nafeger made their first contribution in axios/axios#6787

@thatguyinabeanie made their first contribution in axios/axios#6829

Full Changelog: https://github.com/axios/axios/compare/v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in axios/axios#6402

fix: omit nulls in params by @Willshaw in axios/axios#6394

fix(backport): fix paramsSerializer function validation by @solonzhu in axios/axios#6361

fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in axios/axios#6708

Contributors to this release

@Sean-Powell made their first contribution in axios/axios#6402

@Willshaw made their first contribution in axios/axios#6394

@solonzhu made their first contribution in axios/axios#6361

@qiongshusheng made their first contribution in axios/axios#6708

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

... (truncated)

Changelog

Sourced from axios's changelog.

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

fix: modify log while request is aborted (#4917)

fix: update CHANGELOG.md for v0.x (#6271)

fix: modify upgrade guide for 0.28.1's breaking change (#6787)

fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)

fix: add allowAbsoluteUrls type (#6849)

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 (#6402)

fix: omit nulls in params (#6394)

fix(backport): fix paramsSerializer function validation (#6361)

fix: regular expression denial of service (ReDoS) (#6708)

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated (#4745)

Fixed timeout error message for HTTP (#4738)

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 (#4728)

Adding types for progress event callbacks (#4675)

Fixed max body length defaults (#4731)

... (truncated)

Commits

6e922e4 chore: added build artifacts
a06ed1e chore: added pre-release artifacts
c010622 feat: add type for allowAbsoluteUrls (#6849)
02c3c69 fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)
8603e67 docs: modify upgrade guide for 0.28.1's breaking change (#6787)
f0642ee fix(docs): update CHANGELOG.md for v0.x (#6271)
0630c32 fix: modify log while request is aborted (#4917)
7750b8c chore(release): prep release v0.29.0
4840cb2 fix: regular expression denial of service issues (#6708)
2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.

Updates npm from 6.13.1 to 11.4.1

Release notes

Sourced from npm's releases.

v11.4.1

11.4.1 (2025-05-21)

Documentation

3ed764a #8308 Clarify script working directory behavior (fixes #8305) (#8308) (@tarekwfa0110, @owlstronaut)

Chores

2f30251 #8314 remove references to skimdb.npmjs.com (#8314) (@shmam)

9cb9d50 #8298 add contributor to changelog entry (#8298) (@wraithgar)

Dependencies

workspace: @npmcli/arborist@9.1.1

workspace: libnpmdiff@8.0.4

workspace: libnpmexec@10.1.3

workspace: libnpmfund@7.0.4

workspace: libnpmpack@9.0.4

v11.4.0

11.4.0 (2025-05-15)

Features

a0e60fb #8246 added init-private option (@owlstronaut)

57aa89f #8265 use run by default and run-script as the alias (#8265) (@owlstronaut)

0d4c023 #8234 install: add package info to json output (#8234) (@wraithgar)

Bug Fixes

8794fd9 #8297 powershell: support pipeline input with Invoke-Expression (#8297) (@alexsch01)

b5173d1 #8293 docs: corrected github_path (#8293) (@xaos7991)

2210d7a #8278 powershell: use Invoke-Expression to pass args (#8278) (@alexsch01, @mbtools)

8669d09 #8228 add otplease for enable-2fa, disable-2fa, access (#8228) (@reggi, @wraithgar)

78b5a6f #8269 correctly handle scenario where prefix is the cwd (#8269) (@owlstronaut, @ficocelliguy)

fdc3413 #8221 exec: Fails to Execute Binaries Named After Shell Keywords (#8221) (@13sfaith)

4b08e2e #8245 docs: prepare script runs for local package links (@milaninfy)

1622ac4 #8241 handle missing time in packument to prevent crash on npm view (@owlstronaut)

db8f5da #8110 outdated: add dependent location in long output (#8110) (@milaninfy, @wraithgar)

Documentation

d2498df #8295 Remove CHANGELOG from never-ignored list (#8295) (@mrazauskas)

4d5c3c1 #8283 fix overrides example in package-json.md (#8283) (@glasser)

96cc4f9 #8226 format publish as code to highlight it (@LiangYingC)

4990ea0 #8226 clarify legacy token creation in npm login and adduser commands (@LiangYingC)

Dependencies

c97ef8a #8246 init-package-json@8.2.1

f48613d #8292 @sigstore/verify@2.1.1

a4c5e74 #8292 tinyglobby@0.2.13

b9156d2 #8292 http-cache-semantics@4.2.0

472a685 #8292 binary-extensions@3.1.0

988696e #8292 @sigstore/tuf@3.1.1

569ac84 #8292 semver@7.7.2

2521c9b #8233 @sigstore/protobuf-specs@0.4.1

3274d68 #8233 @npmcli/query@4.0.1

c263626 #8233 abbrev@3.0.1

78df711 #8233 hosted-git-info@8.1.0

... (truncated)

Changelog

Sourced from npm's changelog.

11.4.1 (2025-05-21)

Documentation

3ed764a #8308 Clarify script working directory behavior (fixes #8305) (#8308) (@tarekwfa0110, @owlstronaut)

Chores

2f30251 #8314 remove references to skimdb.npmjs.com (#8314) (@shmam)

9cb9d50 #8298 add contributor to changelog entry (#8298) (@wraithgar)

Dependencies

workspace: @npmcli/arborist@9.1.1

workspace: libnpmdiff@8.0.4

workspace: libnpmexec@10.1.3

workspace: libnpmfund@7.0.4

workspace: libnpmpack@9.0.4

11.4.0 (2025-05-15)

Features

a0e60fb #8246 added init-private option (@owlstronaut)

57aa89f #8265 use run by default and run-script as the alias (#8265) (@owlstronaut)

0d4c023 #8234 install: add package info to json output (#8234) (@wraithgar)

Bug Fixes

8794fd9 #8297 powershell: support pipeline input with Invoke-Expression (#8297) (@alexsch01)

b5173d1 #8293 docs: corrected github_path (#8293) (@xaos7991)

2210d7a #8278 powershell: use Invoke-Expression to pass args (#8278) (@alexsch01, @mbtools)

8669d09 #8228 add otplease for enable-2fa, disable-2fa, access (#8228) (@reggi, @wraithgar)

78b5a6f #8269 correctly handle scenario where prefix is the cwd (#8269) (@owlstronaut, @ficocelliguy)

fdc3413 #8221 exec: Fails to Execute Binaries Named After Shell Keywords (#8221) (@13sfaith)

4b08e2e #8245 docs: prepare script runs for local package links (@milaninfy)

1622ac4 #8241 handle missing time in packument to prevent crash on npm view (@owlstronaut)

db8f5da #8110 outdated: add dependent location in long output (#8110) (@milaninfy, @wraithgar)

Documentation

d2498df #8295 Remove CHANGELOG from never-ignored list (#8295) (@mrazauskas)

4d5c3c1 #8283 fix overrides example in package-json.md (#8283) (@glasser)

96cc4f9 #8226 format publish as code to highlight it (@LiangYingC)

4990ea0 #8226 clarify legacy token creation in npm login and adduser commands (@LiangYingC)

Dependencies

c97ef8a #8246 init-package-json@8.2.1

f48613d #8292 @sigstore/verify@2.1.1

a4c5e74 #8292 tinyglobby@0.2.13

b9156d2 #8292 http-cache-semantics@4.2.0

472a685 #8292 binary-extensions@3.1.0

988696e #8292 @sigstore/tuf@3.1.1

569ac84 #8292 semver@7.7.2

2521c9b #8233 @sigstore/protobuf-specs@0.4.1

3274d68 #8233 @npmcli/query@4.0.1

c263626 #8233 abbrev@3.0.1

78df711 #8233 hosted-git-info@8.1.0

Chores

e80e38e #8292 dev dependency updates (@wraithgar)

... (truncated)

Commits

5d7a7a8 chore: release 11.4.1
3ed764a docs: Clarify script working directory behavior (fixes #8305) (#8308)
2f30251 chore: remove references to skimdb.npmjs.com (#8314)
8f6eb6b fix(arborist): fix file dep making wrong link (#8312)
9cb9d50 chore: add contributor to changelog entry (#8298)
3d90a49 chore: release 11.4.0
8794fd9 fix(powershell): support pipeline input with Invoke-Expression (#8297)
c97ef8a deps: init-package-json@8.2.1
a0e60fb feat: added init-private option
d2498df docs: Remove CHANGELOG from never-ignored list (#8295)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by owlstronaut, a new releaser for npm since your current version.

Updates vue from 2.6.10 to 3.5.16

Release notes

Sourced from vue's releases.

v3.5.16

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.15

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.14

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.10

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.9

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.8

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.7

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.6

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.5

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.4

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.16 (2025-05-29)

Reverts

Revert "fix(compiler-sfc): add scoping tag to trailing universal selector" (#13406) (19f23b1), closes #13406

Revert "fix(compiler-sfc): add error handling for defineModel() without variable" (#13390) (42f879f), closes #13390

3.5.15 (2025-05-26)

Bug Fixes

compat: ensure false value on input retains value attribute (#13216) (1a66474), closes #13205

compat: should not warn COMPILER_V_BIND_OBJECT_ORDER when using v-bind together with v-for (#12993) (93949e6), closes #12992

compile-sfc: handle inline template source map in prod build (#12701) (89edc6c), closes #12682 vitejs/vite-plugin-vue#500

compiler-core: ensure mapping is added only if node source is available (#13285) (d37a2ac), closes #13261 vitejs/vite-plugin-vue#368

compiler-dom: improve HTML nesting validation to allow any child element within template tag (#13320) (163b365), closes #13318

compiler-sfc: add error handling for defineModel() without variable assignment (#13352) (00734af), closes #13280

compiler-sfc: add scoping tag to trailing universal selector (#12918) (949df80), closes #12906

compiler-sfc: improve type inference for TSTypeAliasDeclaration with better runtime type detection (#13245) (cf5a5e0), closes #13240

compiler-sfc: simulate allowArbitraryExtensions on resolving type (#13301) (f7ce5ae), closes #13295

custom-element: allow injecting values from app context in nested elements (#13219) (b991075), closes #13212

custom-element: ensure proper remount and prevent redundant slot parsing with shadowRoot false (#13201) (1d41d4d), closes #13199

custom-element: preserve appContext during update (#12455) (013749e), closes #12453

custom-element: properly resolve props for sync component defs (#12855) (a683c80), closes #12854

hydration: handle transition appear hydration edge case (#13339) (35aeae7), closes #13335

hydration: skip lazy hydration for patched components (#13283) (80055fd), closes #13255

suspense: handle edge case in patching list nodes within Suspense (#13306) (772b008), closes #13305

teleport: handle deferred teleport updates before and after mount (#13350) (d15dce3), closes #13349

types: avoid merging component instance into $props in ComponentInstance (#12870) (f44feed), closes #12751

types: exclude undefined from inferred prop types with default values (#13007) (5179d32), closes #13006

watch: update oldValue before running cb to prevent stale value (#12296) (c69c4bb), closes #12294

3.5.14 (2025-05-15)

Bug Fixes

compat: correct deprecation message for v-bind.sync usage (#13137) (466b30f), closes #13133

compiler-core: remove slot cache from parent renderCache during unmounting (#13215) (5d166f3)

compiler-sfc: fix scope handling for props destructure in function parameters and catch clauses (8e34357), closes #12790

compiler-sfc: treat the return value of useTemplateRef as a definite ref (#13197) (8ae1122)

compiler: fix spelling error in domTagConfig (#13043) (388295b)

customFormatter: properly accessing ref value during debugger (#12948) (fdbd026)

hmr/teleport: adjust static children traversal for HMR in dev mode (#12819) (5e37dd0), closes #12816

... (truncated)

Commits

See full diff in compare view

Updates @vue/cli-plugin-unit-jest from 4.1.0 to 5.0.8

Release notes

Sourced from @vue/cli-plugin-unit-jest's releases.

v5.0.8

:bug: Bug Fix

@vue/cli-service

0260e4d fix: add devServer.server.type to useHttps judgement (vuejs/vue-cli#7222)

@vue/cli-ui

07052c4 fix: Vue CLI UI graphql subscription server error, fixes vuejs/vue-cli#7221

v5.0.7

@vue/cli-service

#7202, [558dea2] fix: support devServer.server option, avoid deprecation warnings (@backrunner, @sodatea)

[beffe8a] fix: allow disabling progress plugin via devServer.client.progress

@vue/cli-ui

#7210 chore: upgrade to apollo-server-express 3.x

Committers: 2

BackRunner (@backrunner)

Haoqun Jiang (@sodatea)

v5.0.6

Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).

In Vue 2.7, vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package as vue/compiler-sfc.

v5.0.5

:bug: Bug Fix

@vue/cli

#7167 fix(upgrade): prevent changing the structure of package.json file during upgrade (@blzsaa)

@vue/cli-service

#7023 fix: windows vue.config.mjs support (@xiaoxiangmoe)

@vue/cli-plugin-e2e-cypress

[697bb44] fix: should correctly resolve cypress bin path for Cypress 10 (Note that the project is still created with Cypress 9 by default, but you can upgrade to Cypress 10 on your own now)

Committers: 3

Martijn Jacobs (@maerteijn)

ZHAO Jinxiang (@xiaoxiangmoe)

@blzsaa

v5.0.4

:bug: Bug Fix

@vue/cli-service

#7005 Better handling of publicPath: 'auto' (@AndreiSoroka)

@vue/cli-shared-utils, @vue/cli-ui

75826d6 fix: replace node-ipc with @achrinza/node-ipc to further secure the dependency chain

Committers: 1

Andrei (@AndreiSoroka)

Haoqun Jiang (@sodatea)

v5.0.3

... (truncated)

Changelog

Sourced from @vue/cli-plugin-unit-jest's changelog.

5.0.7 (2022-07-05)

@vue/cli-service

#7202, [558dea2] fix: support devServer.server option, avoid deprecation warnings (@backrunner, @sodatea)

[beffe8a] fix: allow disabling progress plugin via devServer.client.progress

@vue/cli-ui

#7210 chore: upgrade to apollo-server-express 3.x

Committers: 2

BackRunner (@backrunner)

Haoqun Jiang (@sodatea)

5.0.6 (2022-06-16)

Fix compatibility with the upcoming Vue 2.7 (currently in alpha) and Vue Loader 15.10 (currently in beta).

In Vue 2.7, vue-template-compiler is no longer a required peer dependency. Rather, there's a new export under the main package as vue/compiler-sfc.

5.0.5 (2022-06-16)

:bug: Bug Fix

@vue/cli

#7167 feat(upgrade): prevent changing the structure of package.json file during upgrade (@blzsaa)

@vue/cli-service

#7023 fix: windows vue.config.mjs support (@xiaoxiangmoe)

Committers: 3

Martijn Jacobs (@maerteijn)

ZHAO Jinxiang (@xiaoxiangmoe)

@blzsaa

5.0.4 (2022-03-22)

:bug: Bug Fix

@vue/cli-service

#7005 Better handling of publicPath: 'auto' (@AndreiSoroka)

@vue/cli-shared-utils, @vue/cli-ui

75826d6 fix: replace node-ipc with @achrinza/node-ipc to further secure the dependency chain

Committers: 1

... (truncated)

Commits

b154dbd v5.0.8
4a0655f v5.0.7
ef08a08 v5.0.6
98c66c9 v5.0.5
ca97fc2 v5.0.4
dd53f26 v5.0.3
a859b1f v5.0.2
92d80a8 v5.0.1
c913cdc v5.0.0
9be19f0 test: fix tsx import
Additional commits viewable in compare view

Updates @vue/test-utils from 1.0.0-beta.29 to 2.4.6

Release notes

Sourced from @vue/test-utils's releases.

v2.4.6

What's Changed

fix: circular references in props cause maximum call stack size exceeded by @Evobaso-J in vuejs/test-utils#2371

fix: update attachTo type in MountingOptions interface by @taku-y-9308 in vuejs/test-utils#2375

fix: change vm to always provide global property by @taku-y-9308 in vuejs/test-utils#2386

fix: renderStubDefaultSlot with scoped slots by @cexbrayat in vuejs/test-utils#2397

feat: Added dynamic return for element getter by @nandi95 in vuejs/test-utils#2406

fix(stubs): avoid warning on normalized props with Vue v3.4.22 by @cexbrayat in vuejs/test-utils#2413

fix: set global provides before running vue plugins by @danielroe in vuejs/test-utils#2423

fix: issue 2319 throw first error thrown during mount by @taku-y-9308 in vuejs/test-utils#2428

New Contributors

@Jinjiang made their first contribution in vuejs/test-utils#2373

@taku-y-9308 made their first contribution in vuejs/test-utils#2375

@matusekma made their first contribution in vuejs/test-utils#2351

@w2xi made their first contribution in

Pull Request Statistics

Commits:
1

Files Changed:
2

Additions:
+27046

Deletions:
-14454

Package Dependencies

Package:
axios

Ecosystem:
npm

Version Change:
0.19.0 → 0.30.0

Update Type:
Minor

Package:
ws

Ecosystem:
npm

Version Change:
5.2.2 → 5.2.4

Update Type:
Patch

Package:
elliptic

Ecosystem:
npm

Version Change:
6.5.1 → 6.6.1

Update Type:
Minor

Package:
vue

Ecosystem:
npm

Version Change:
2.6.10 → 3.5.16

Update Type:
Major

Package:
decode-uri-component

Ecosystem:
npm

Version Change:
0.2.0 → 0.2.2

Update Type:
Patch

Package:
cypress

Ecosystem:
npm

Version Change:
3.4.1 → 14.4.1

Update Type:
Major

Package:
async

Ecosystem:
npm

Version Change:
1.5.2 → 3.2.6

Update Type:
Major

Package:
minimatch

Ecosystem:
npm

Version Change:
3.0.4 → 3.0.8

Update Type:
Patch

Package:
ini

Ecosystem:
npm

Version Change:
1.3.5 → 1.3.8

Update Type:
Patch

Package:
minimist

Ecosystem:
npm

Version Change:
1.2.0 → 1.2.8

Update Type:
Patch

Package:
ejs

Ecosystem:
npm

Version Change:
2.7.1 → removed

Package:
tar

Ecosystem:
npm

Version Change:
2.2.2 → 6.2.1

Update Type:
Major

Package:
dns-packet

Ecosystem:
npm

Version Change:
1.3.1 → 1.3.4

Update Type:
Patch

Package:
hosted-git-info

Ecosystem:
npm

Version Change:
2.8.4 → 2.8.9

Update Type:
Patch

Package:
json5

Ecosystem:
npm

Version Change:
1.0.1 → 2.2.3

Update Type:
Major

Package:
npm

Ecosystem:
npm

Version Change:
6.13.1 → 11.4.1

Update Type:
Major

Package:
ansi-regex

Ecosystem:
npm

Version Change:
3.0.0 → 4.1.1

Update Type:
Major

Package:
vue-template-compiler

Ecosystem:
npm

Version Change:
2.6.10 → 2.7.16

Update Type:
Minor

Package:
handlebars

Ecosystem:
npm

Version Change:
4.5.3 → 4.7.8

Update Type:
Minor

Package:
dot-prop

Ecosystem:
npm

Version Change:
4.2.0 → 4.2.1

Update Type:
Patch

Package:
fsevents

Ecosystem:
npm

Version Change:
1.2.9 → 1.2.13

Update Type:
Patch

Package:
@hapi/hoek

Ecosystem:
npm

Version Change:
8.2.5 → 8.5.1

Update Type:
Minor

Package:
node-sass

Ecosystem:
npm

Version Change:
4.12.0 → 9.0.0

Update Type:
Major

Package:
@vue/cli-service

Ecosystem:
npm

Version Change:
3.11.0 → 5.0.8

Update Type:
Major

Package:
mkdirp

Ecosystem:
npm

Version Change:
0.5.1 → 0.5.6

Update Type:
Patch

Package:
@vue/cli-plugin-unit-jest

Ecosystem:
npm

Version Change:
4.1.0 → 5.0.8

Update Type:
Major

Package:
json-schema

Ecosystem:
npm

Version Change:
0.2.3 → 0.4.0

Update Type:
Minor

Package:
jsprim

Ecosystem:
npm

Version Change:
1.4.1 → 1.4.2

Update Type:
Patch

Package:
find-babel-config

Ecosystem:
npm

Version Change:
1.2.0 → 1.2.2

Update Type:
Patch

Package:
yargs-parser

Ecosystem:
npm

Version Change:
5.0.0 → 5.0.1

Update Type:
Patch

Package:
@vue/cli-plugin-e2e-cypress

Ecosystem:
npm

Version Change:
3.11.0 → 5.0.8

Update Type:
Major

Package:
@vue/test-utils

Ecosystem:
npm

Version Change:
1.0.0-beta.29 → 2.4.6

Update Type:
Major

Security Advisories

Axios Cross-Site Request Forgery Vulnerability

GHSA-wf5p-g6vw-rhxx CVE-2023-45857 MODERATE

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any ho...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`73690`
UUID:	`2573597854`
Node ID:	`PR_kwDODMTTU86ZZfye`
Host:	GitHub
Repository:	n3tx-code/contact-manager-api-vue-js
Merge State:	Unknown