An open index of dependabot pull requests across open source projects.

Bump the npm-security-updates group across 5 directories with 6 updates

Open
Number: #3053
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 28, 2025 at 04:04 PM UTC
(10 months ago)
Updated: May 28, 2025 at 04:05 PM UTC
(10 months ago)
Labels:
dependencies javascript
Description:

Bumps the npm-security-updates group with 5 updates in the /parser-sdk/nodejs directory:

Package From To
axios 1.7.9 1.8.2
ws 8.18.0 8.18.2
jsonpath-plus 10.2.0 10.3.0
tough-cookie 2.5.0 removed
@kubernetes/client-node 0.22.3 1.2.0

Bumps the npm-security-updates group with 4 updates in the /hook-sdk/nodejs directory: ws, jsonpath-plus, tough-cookie and @kubernetes/client-node.
Bumps the npm-security-updates group with 1 update in the /tests/integration directory: @babel/helpers.
Bumps the npm-security-updates group with 5 updates in the /auto-discovery/kubernetes/pull-secret-extractor/integration-test directory:

Package From To
ws 8.18.0 8.18.2
jsonpath-plus 10.2.0 10.3.0
tough-cookie 2.5.0 removed
@kubernetes/client-node 0.22.3 1.2.0
@babel/helpers 7.26.0 7.27.3

Bumps the npm-security-updates group with 5 updates in the / directory:

Package From To
ws 8.18.0 8.18.2
jsonpath-plus 10.2.0 10.3.0
tough-cookie 2.5.0 removed
@kubernetes/client-node 0.22.3 1.2.0
@babel/helpers 7.24.4 7.27.3

Updates axios from 1.7.9 to 1.8.2

Release notes

Sourced from axios's releases.

Release v1.8.2

Release notes:

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

Release v1.8.1

Release notes:

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

Release v1.8.0

Release notes:

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Reverts

BREAKING CHANGES

  • code relying on the above will now combine the URLs instead of prefer request URL

  • feat: add config option for allowing absolute URLs

  • fix: add default value for allowAbsoluteUrls in buildFullPath

  • fix: typo in flow control when setting allowAbsoluteUrls

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.8.2 (2025-03-07)

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

1.8.0 (2025-02-25)

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Reverts

BREAKING CHANGES

  • code relying on the above will now combine the URLs instead of prefer request URL

  • feat: add config option for allowing absolute URLs

  • fix: add default value for allowAbsoluteUrls in buildFullPath

... (truncated)

Commits
  • a9f7689 chore(release): v1.8.2 (#6812)
  • fb8eec2 fix(http-adapter): add allowAbsoluteUrls to path building (#6810)
  • 9812045 chore(sponsor): update sponsor block (#6804)
  • 72acf75 chore(sponsor): update sponsor block (#6794)
  • 2e64afd chore(release): v1.8.1 (#6800)
  • 36a5a62 fix(utils): move generateString to platform utils to avoid importing crypto...
  • cceb7b1 chore(release): v1.8.0 (#6795)
  • 23a25af fix(utils): replace getRandomValues with crypto module (#6788)
  • 32c7bcc feat: Add config for ignoring absolute URLs (#5902) (#6192)
  • 4a3e26c chore(config): adjust rollup config to preserve license header to minified Ja...
  • Additional commits viewable in compare view

Updates ws from 8.18.0 to 8.18.2

Release notes

Sourced from ws's releases.

8.18.2

Bug fixes

Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).

8.18.1

Bug fixes

  • The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits

Updates jsonpath-plus from 10.2.0 to 10.3.0

Release notes

Sourced from jsonpath-plus's releases.

v10.3.0

What's Changed

Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0

Changelog

Sourced from jsonpath-plus's changelog.

10.3.0

  • fix(eval): rce using non-string prop names (#237)
  • feat(demo): make demo link shareable (#238)
  • chore: update deps. and devDeps.
Commits
  • 9754e4b chore: bump version
  • f690da1 chore: update deps and devDeps
  • 313a9b4 Merge pull request #238 from 80avin/shareable-demo
  • 39a0d03 Merge pull request #237 from 80avin/fix-10.2.0-rce
  • 1c532fc feat(demo): make demo link shareable
  • 3094289 fix(eval): rce using non-string prop names
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.


Removes tough-cookie

Updates @kubernetes/client-node from 0.22.3 to 1.2.0

Release notes

Sourced from @​kubernetes/client-node's releases.

1.2.0

What's Changed

New Contributors

Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.1.2...1.2.0

1.1.2

What's Changed between 1.0.0 and 1.1.2

New Contributors

Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.0.0...1.1.2

Release 1.0.0 with node-fetch instead of the long deprecated request-library.

There is no migration guide (yet?). Have a look at the examples to see how to use it.

This module is now ESM only.

Commits
  • b88e894 Merge pull request #2417 from brendandburns/revit
  • 51f968f Merge pull request #2416 from brendandburns/main
  • 26635db Rev package versions in preparation for release.
  • 09f2bbd Automated openapi generation from release-1.33
  • 9d64626 Update settings
  • 0f9d1b9 Merge pull request #2415 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • a77d6df build(deps): bump @​types/node from 22.15.3 to 22.15.11 (#2414)
  • 3383bc6 build(deps-dev): bump typescript-eslint from 8.31.1 to 8.32.0
  • b7caabe Merge pull request #2411 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • 232e56c Merge pull request #2410 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • Additional commits viewable in compare view

Updates ws from 8.18.0 to 8.18.2

Release notes

Sourced from ws's releases.

8.18.2

Bug fixes

Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).

8.18.1

Bug fixes

  • The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits

Updates jsonpath-plus from 10.2.0 to 10.3.0

Release notes

Sourced from jsonpath-plus's releases.

v10.3.0

What's Changed

Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0

Changelog

Sourced from jsonpath-plus's changelog.

10.3.0

  • fix(eval): rce using non-string prop names (#237)
  • feat(demo): make demo link shareable (#238)
  • chore: update deps. and devDeps.
Commits
  • 9754e4b chore: bump version
  • f690da1 chore: update deps and devDeps
  • 313a9b4 Merge pull request #238 from 80avin/shareable-demo
  • 39a0d03 Merge pull request #237 from 80avin/fix-10.2.0-rce
  • 1c532fc feat(demo): make demo link shareable
  • 3094289 fix(eval): rce using non-string prop names
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.


Removes tough-cookie

Updates @kubernetes/client-node from 0.22.3 to 1.2.0

Release notes

Sourced from @​kubernetes/client-node's releases.

1.2.0

What's Changed

New Contributors

Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.1.2...1.2.0

1.1.2

What's Changed between 1.0.0 and 1.1.2

New Contributors

Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.0.0...1.1.2

Release 1.0.0 with node-fetch instead of the long deprecated request-library.

There is no migration guide (yet?). Have a look at the examples to see how to use it.

This module is now ESM only.

Commits
  • b88e894 Merge pull request #2417 from brendandburns/revit
  • 51f968f Merge pull request #2416 from brendandburns/main
  • 26635db Rev package versions in preparation for release.
  • 09f2bbd Automated openapi generation from release-1.33
  • 9d64626 Update settings
  • 0f9d1b9 Merge pull request #2415 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • a77d6df build(deps): bump @​types/node from 22.15.3 to 22.15.11 (#2414)
  • 3383bc6 build(deps-dev): bump typescript-eslint from 8.31.1 to 8.32.0
  • b7caabe Merge pull request #2411 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • 232e56c Merge pull request #2410 from kubernetes-client/dependabot/npm_and_yarn/main/...
  • Additional commits viewable in compare view

Updates @babel/helpers from 7.26.0 to 7.27.3

Release notes

Sourced from @​babel/helpers's releases.

v7.27.3 (2025-05-27)

:bug: Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

Committers: 7

v7.27.2 (2025-05-06)

:bug: Bug Fix

  • babel-parser
  • babel-plugin-transform-object-rest-spread
  • babel-plugin-transform-modules-commonjs, babel-template

:running_woman: Performance

Committers: 5

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

v7.27.3 (2025-05-27)

:bug: Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

v7.27.2 (2025-05-06)

:bug: Bug Fix

  • babel-parser
  • babel-plugin-transform-object-rest-spread
  • babel-plugin-transform-modules-commonjs, babel-template

:running_woman: Performance

v7.27.1 (2025-04-30)

:eyeglasses: Spec Compliance

:bug: Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser

... (truncated)

Commits

Updates ws from 8.18.0 to 8.18.2

Release notes

Sourced from ws's releases.

8.18.2

Bug fixes

Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).

8.18.1

Bug fixes

  • The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits

Updates jsonpath-plus from 10.2.0 to 10.3.0

Release notes

Sourced from jsonpath-plus's releases.

v10.3.0

What's Changed

Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0

Changelog

Sourced from jsonpath-plus's changelog.

10.3.0

  • fix(eval): rce using non-string prop names (#237)
  • feat(demo): make demo link shareable (#238)
  • chore: update deps. and devDeps.
Commits
  • 9754e4b chore: bump version
  • f690da1 chore: update deps and devDeps
  • 313a9b4 Merge pull request #238 from 80avin/shareable-demo
  • 39a0d03 Merge pull request #237 from 80avin/fix-10.2.0-rce
  • 1c532fc feat(demo): make demo link shareable
  • 3094289 fix(eval): rce using non-string prop names
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.


Removes tough-cookie

Updates @kubernetes/client-node from 0.22.3 to 1.2.0

Release notes

Sourced from @​kubernetes/client-node's releases.

1.2.0

What's Changed

New Contributors

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
npm
Version Change:
1.7.9 → 1.8.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
2.5.0 → removed
Package:
ws
Ecosystem:
npm
Version Change:
8.18.0 → 8.18.2
Update Type:
Patch
Ecosystem:
npm
Version Change:
10.2.0 → 10.3.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
0.22.3 → 1.2.0
Update Type:
Major
Technical Details
ID: 717982
UUID: 3097867041
Node ID: PR_kwDOBM-Q_c6X_dGJ
Host: GitHub
Repository: secureCodeBox/secureCodeBox