Bump the npm-security-updates group across 5 directories with 6 updates
Type: Pull Request
State: Open
Association: Contributor
Comments: 1
(10 months ago)
(10 months ago)
dependencies javascript
Bumps the npm-security-updates group with 5 updates in the /parser-sdk/nodejs directory:
| Package | From | To |
|---|---|---|
| axios | 1.7.9 |
1.8.2 |
| ws | 8.18.0 |
8.18.2 |
| jsonpath-plus | 10.2.0 |
10.3.0 |
| tough-cookie | 2.5.0 |
removed |
| @kubernetes/client-node | 0.22.3 |
1.2.0 |
Bumps the npm-security-updates group with 4 updates in the /hook-sdk/nodejs directory: ws, jsonpath-plus, tough-cookie and @kubernetes/client-node.
Bumps the npm-security-updates group with 1 update in the /tests/integration directory: @babel/helpers.
Bumps the npm-security-updates group with 5 updates in the /auto-discovery/kubernetes/pull-secret-extractor/integration-test directory:
| Package | From | To |
|---|---|---|
| ws | 8.18.0 |
8.18.2 |
| jsonpath-plus | 10.2.0 |
10.3.0 |
| tough-cookie | 2.5.0 |
removed |
| @kubernetes/client-node | 0.22.3 |
1.2.0 |
| @babel/helpers | 7.26.0 |
7.27.3 |
Bumps the npm-security-updates group with 5 updates in the / directory:
| Package | From | To |
|---|---|---|
| ws | 8.18.0 |
8.18.2 |
| jsonpath-plus | 10.2.0 |
10.3.0 |
| tough-cookie | 2.5.0 |
removed |
| @kubernetes/client-node | 0.22.3 |
1.2.0 |
| @babel/helpers | 7.24.4 |
7.27.3 |
Updates axios from 1.7.9 to 1.8.2
Release notes
Sourced from axios's releases.
Release v1.8.2
Release notes:
Bug Fixes
Contributors to this release
Release v1.8.1
Release notes:
Bug Fixes
- utils: move
generateStringto platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)Contributors to this release
Release v1.8.0
Release notes:
Bug Fixes
- examples: application crashed when navigating examples in browser (#5938) (1260ded)
- missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
- utils: replace getRandomValues with crypto module (#6788) (23a25af)
Features
Reverts
- Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732) (1317261), closes #6731 #6732
BREAKING CHANGES
code relying on the above will now combine the URLs instead of prefer request URL
feat: add config option for allowing absolute URLs
fix: add default value for allowAbsoluteUrls in buildFullPath
fix: typo in flow control when setting allowAbsoluteUrls
Contributors to this release
... (truncated)
Changelog
Sourced from axios's changelog.
1.8.2 (2025-03-07)
Bug Fixes
Contributors to this release
1.8.1 (2025-02-26)
Bug Fixes
- utils: move
generateStringto platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)Contributors to this release
1.8.0 (2025-02-25)
Bug Fixes
- examples: application crashed when navigating examples in browser (#5938) (1260ded)
- missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
- utils: replace getRandomValues with crypto module (#6788) (23a25af)
Features
Reverts
- Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732) (1317261), closes #6731 #6732
BREAKING CHANGES
code relying on the above will now combine the URLs instead of prefer request URL
feat: add config option for allowing absolute URLs
fix: add default value for allowAbsoluteUrls in buildFullPath
... (truncated)
Commits
a9f7689chore(release): v1.8.2 (#6812)fb8eec2fix(http-adapter): add allowAbsoluteUrls to path building (#6810)9812045chore(sponsor): update sponsor block (#6804)72acf75chore(sponsor): update sponsor block (#6794)2e64afdchore(release): v1.8.1 (#6800)36a5a62fix(utils): movegenerateStringto platform utils to avoid importing crypto...cceb7b1chore(release): v1.8.0 (#6795)23a25affix(utils): replace getRandomValues with crypto module (#6788)32c7bccfeat: Add config for ignoring absolute URLs (#5902) (#6192)4a3e26cchore(config): adjust rollup config to preserve license header to minified Ja...- Additional commits viewable in compare view
Updates ws from 8.18.0 to 8.18.2
Release notes
Sourced from ws's releases.
8.18.2
Bug fixes
Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).
8.18.1
Bug fixes
- The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits
0eb8535[dist] 8.18.24f20aed[fix] Handle oversized messages with designated error (#2285)aa998e3[pkg] Update globals to version 16.0.0cf25954[minor] Fix nit in error messageb92745a[dist] 8.18.1b3d9747[doc] Fix nit021f7b8[test] Shorten the path lengthsb9ca55b[pkg] Update eslint-config-prettier to version 10.0.1c798dd4[doc] Fix typo (#2271)6861472[ci] Test on node 23- Additional commits viewable in compare view
Updates jsonpath-plus from 10.2.0 to 10.3.0
Release notes
Sourced from jsonpath-plus's releases.
v10.3.0
What's Changed
- fix(eval): rce using non-string prop names by
@80avinin JSONPath-Plus/JSONPath#237- feat(demo): make demo link shareable by
@80avinin JSONPath-Plus/JSONPath#238Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0
Commits
9754e4bchore: bump versionf690da1chore: update deps and devDeps313a9b4Merge pull request #238 from 80avin/shareable-demo39a0d03Merge pull request #237 from 80avin/fix-10.2.0-rce1c532fcfeat(demo): make demo link shareable3094289fix(eval): rce using non-string prop names- See full diff in compare view
Maintainer changes
This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.
Removes tough-cookie
Updates @kubernetes/client-node from 0.22.3 to 1.2.0
Release notes
Sourced from @kubernetes/client-node's releases.
1.2.0
What's Changed
- Reintroduce timeout and keep-alive for watch requests to match client-go by
@rossanthonyin kubernetes-client/javascript#2367- watch: prevent done callback from being called twice on connection loss by
@bverhoevenin kubernetes-client/javascript#2389- config: support username impersonation by
@cjihrigin kubernetes-client/javascript#2373- fix(object): properly serialize objects on create/replace/patch by
@schroditin kubernetes-client/javascript#2400- Regenerate for Kubernetes 1.33 by
@brendandburnsin kubernetes-client/javascript#2416New Contributors
@rossanthonymade their first contribution in kubernetes-client/javascript#2367@juldrixxmade their first contribution in kubernetes-client/javascript#2388@bverhoevenmade their first contribution in kubernetes-client/javascript#2389Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.1.2...1.2.0
1.1.2
What's Changed between 1.0.0 and 1.1.2
- test: support testing transpiled code by
@cjihrigin kubernetes-client/javascript#2122- Add proxy support by
@krmodelskiin kubernetes-client/javascript#2111- Fix type definition for KubernetesObjectApi.read() by
@jportnerin kubernetes-client/javascript#2129- export
ApiConstructor-type by@mstruebingin kubernetes-client/javascript#2139- websocket: do not close when protocol supports it by
@cjihrigin kubernetes-client/javascript#2144- Improve loadFromCluster testing by
@brendandburnsin kubernetes-client/javascript#2191- src: update for node-fetch v3 compatibility by
@cjihrigin kubernetes-client/javascript#2195- Fix a bug where an error on request wouldn't propogate. by
@brendandburnsin kubernetes-client/javascript#2224- include source maps in npm pack by
@cjihrigin kubernetes-client/javascript#2260- call time middleware support by
@davidgameroin kubernetes-client/javascript#2275- Fixes by
@brendandburnsin kubernetes-client/javascript#2284- Revisions needed for no non-erasable types by
@brendandburnsin kubernetes-client/javascript#2302- Add the ability to inject authenticators. by
@brendandburnsin kubernetes-client/javascript#2311- update HeaderMiddleware types, export PatchStrategy with Integration Tests by
@davidgameroin kubernetes-client/javascript#2316New Contributors
@jportnermade their first contribution in kubernetes-client/javascript#2129@BassTmade their first contribution in kubernetes-client/javascript#2140@isurindumade their first contribution in kubernetes-client/javascript#2232@kevinthenetmade their first contribution in kubernetes-client/javascript#2265Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.0.0...1.1.2
Release 1.0.0 with
node-fetchinstead of the long deprecatedrequest-library.There is no migration guide (yet?). Have a look at the examples to see how to use it.
This module is now ESM only.
Commits
b88e894Merge pull request #2417 from brendandburns/revit51f968fMerge pull request #2416 from brendandburns/main26635dbRev package versions in preparation for release.09f2bbdAutomated openapi generation from release-1.339d64626Update settings0f9d1b9Merge pull request #2415 from kubernetes-client/dependabot/npm_and_yarn/main/...a77d6dfbuild(deps): bump@types/nodefrom 22.15.3 to 22.15.11 (#2414)3383bc6build(deps-dev): bump typescript-eslint from 8.31.1 to 8.32.0b7caabeMerge pull request #2411 from kubernetes-client/dependabot/npm_and_yarn/main/...232e56cMerge pull request #2410 from kubernetes-client/dependabot/npm_and_yarn/main/...- Additional commits viewable in compare view
Updates ws from 8.18.0 to 8.18.2
Release notes
Sourced from ws's releases.
8.18.2
Bug fixes
Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).
8.18.1
Bug fixes
- The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits
0eb8535[dist] 8.18.24f20aed[fix] Handle oversized messages with designated error (#2285)aa998e3[pkg] Update globals to version 16.0.0cf25954[minor] Fix nit in error messageb92745a[dist] 8.18.1b3d9747[doc] Fix nit021f7b8[test] Shorten the path lengthsb9ca55b[pkg] Update eslint-config-prettier to version 10.0.1c798dd4[doc] Fix typo (#2271)6861472[ci] Test on node 23- Additional commits viewable in compare view
Updates jsonpath-plus from 10.2.0 to 10.3.0
Release notes
Sourced from jsonpath-plus's releases.
v10.3.0
What's Changed
- fix(eval): rce using non-string prop names by
@80avinin JSONPath-Plus/JSONPath#237- feat(demo): make demo link shareable by
@80avinin JSONPath-Plus/JSONPath#238Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0
Commits
9754e4bchore: bump versionf690da1chore: update deps and devDeps313a9b4Merge pull request #238 from 80avin/shareable-demo39a0d03Merge pull request #237 from 80avin/fix-10.2.0-rce1c532fcfeat(demo): make demo link shareable3094289fix(eval): rce using non-string prop names- See full diff in compare view
Maintainer changes
This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.
Removes tough-cookie
Updates @kubernetes/client-node from 0.22.3 to 1.2.0
Release notes
Sourced from @kubernetes/client-node's releases.
1.2.0
What's Changed
- Reintroduce timeout and keep-alive for watch requests to match client-go by
@rossanthonyin kubernetes-client/javascript#2367- watch: prevent done callback from being called twice on connection loss by
@bverhoevenin kubernetes-client/javascript#2389- config: support username impersonation by
@cjihrigin kubernetes-client/javascript#2373- fix(object): properly serialize objects on create/replace/patch by
@schroditin kubernetes-client/javascript#2400- Regenerate for Kubernetes 1.33 by
@brendandburnsin kubernetes-client/javascript#2416New Contributors
@rossanthonymade their first contribution in kubernetes-client/javascript#2367@juldrixxmade their first contribution in kubernetes-client/javascript#2388@bverhoevenmade their first contribution in kubernetes-client/javascript#2389Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.1.2...1.2.0
1.1.2
What's Changed between 1.0.0 and 1.1.2
- test: support testing transpiled code by
@cjihrigin kubernetes-client/javascript#2122- Add proxy support by
@krmodelskiin kubernetes-client/javascript#2111- Fix type definition for KubernetesObjectApi.read() by
@jportnerin kubernetes-client/javascript#2129- export
ApiConstructor-type by@mstruebingin kubernetes-client/javascript#2139- websocket: do not close when protocol supports it by
@cjihrigin kubernetes-client/javascript#2144- Improve loadFromCluster testing by
@brendandburnsin kubernetes-client/javascript#2191- src: update for node-fetch v3 compatibility by
@cjihrigin kubernetes-client/javascript#2195- Fix a bug where an error on request wouldn't propogate. by
@brendandburnsin kubernetes-client/javascript#2224- include source maps in npm pack by
@cjihrigin kubernetes-client/javascript#2260- call time middleware support by
@davidgameroin kubernetes-client/javascript#2275- Fixes by
@brendandburnsin kubernetes-client/javascript#2284- Revisions needed for no non-erasable types by
@brendandburnsin kubernetes-client/javascript#2302- Add the ability to inject authenticators. by
@brendandburnsin kubernetes-client/javascript#2311- update HeaderMiddleware types, export PatchStrategy with Integration Tests by
@davidgameroin kubernetes-client/javascript#2316New Contributors
@jportnermade their first contribution in kubernetes-client/javascript#2129@BassTmade their first contribution in kubernetes-client/javascript#2140@isurindumade their first contribution in kubernetes-client/javascript#2232@kevinthenetmade their first contribution in kubernetes-client/javascript#2265Full Changelog: https://github.com/kubernetes-client/javascript/compare/1.0.0...1.1.2
Release 1.0.0 with
node-fetchinstead of the long deprecatedrequest-library.There is no migration guide (yet?). Have a look at the examples to see how to use it.
This module is now ESM only.
Commits
b88e894Merge pull request #2417 from brendandburns/revit51f968fMerge pull request #2416 from brendandburns/main26635dbRev package versions in preparation for release.09f2bbdAutomated openapi generation from release-1.339d64626Update settings0f9d1b9Merge pull request #2415 from kubernetes-client/dependabot/npm_and_yarn/main/...a77d6dfbuild(deps): bump@types/nodefrom 22.15.3 to 22.15.11 (#2414)3383bc6build(deps-dev): bump typescript-eslint from 8.31.1 to 8.32.0b7caabeMerge pull request #2411 from kubernetes-client/dependabot/npm_and_yarn/main/...232e56cMerge pull request #2410 from kubernetes-client/dependabot/npm_and_yarn/main/...- Additional commits viewable in compare view
Updates @babel/helpers from 7.26.0 to 7.27.3
Release notes
Sourced from @babel/helpers's releases.
v7.27.3 (2025-05-27)
:bug: Bug Fix
babel-generatorbabel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17328 Correctly set
.displayNameonGeneratorFunction(@nicolo-ribaudo)babel-plugin-proposal-explicit-resource-managementbabel-plugin-proposal-decorators,babel-types
- #17321 fix(converter): Remove
abstractmodifiers in class declaration to expression conversion (@magic-akari)babel-helper-module-transforms,babel-plugin-proposal-explicit-resource-management,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-umdbabel-parser
- #17312 fix(parser): properly handle optional markers in generator class methods (
@magic-akari)- #17307 fix(parser): Terminate modifier parsing at newline (
@magic-akari)babel-generator,babel-parserCommitters: 7
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Nicolò Ribaudo (
@nicolo-ribaudo)- Vik R (
@vikr01)@liuxingbaoyu@magic-akari- fisker Cheung (
@fisker)v7.27.2 (2025-05-06)
:bug: Bug Fix
babel-parser
- #17289 fix:
@babel/parser/bin/index.jscontainsnode:protocol require (@liuxingbaoyu)- #17291 fix: Private class method not found when TS and estree (
@liuxingbaoyu)babel-plugin-transform-object-rest-spreadbabel-plugin-transform-modules-commonjs,babel-template
- #17284 fix(babel-template): Properly handle empty string replacements (
@magic-akari):running_woman: Performance
Committers: 5
- Babel Bot (
@babel-bot)- Huáng Jùnliàng (
@JLHwung)- Nicolò Ribaudo (
@nicolo-ribaudo)@liuxingbaoyu@magic-akari
... (truncated)
Changelog
Sourced from @babel/helpers's changelog.
v7.27.3 (2025-05-27)
:bug: Bug Fix
babel-generatorbabel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17328 Correctly set
.displayNameonGeneratorFunction(@nicolo-ribaudo)babel-plugin-proposal-explicit-resource-managementbabel-plugin-proposal-decorators,babel-types
- #17321 fix(converter): Remove
abstractmodifiers in class declaration to expression conversion (@magic-akari)babel-helper-module-transforms,babel-plugin-proposal-explicit-resource-management,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-umdbabel-parser
- #17312 fix(parser): properly handle optional markers in generator class methods (
@magic-akari)- #17307 fix(parser): Terminate modifier parsing at newline (
@magic-akari)babel-generator,babel-parserv7.27.2 (2025-05-06)
:bug: Bug Fix
babel-parser
- #17289 fix:
@babel/parser/bin/index.jscontainsnode:protocol require (@liuxingbaoyu)- #17291 fix: Private class method not found when TS and estree (
@liuxingbaoyu)babel-plugin-transform-object-rest-spreadbabel-plugin-transform-modules-commonjs,babel-template
- #17284 fix(babel-template): Properly handle empty string replacements (
@magic-akari):running_woman: Performance
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parser
... (truncated)
Commits
da5e371v7.27.335152d8Correctly set.displayNameonGeneratorFunction(#17328)4b76a5fEnabledot-notationrule (#17301)eebd3a0v7.27.1b1f9184ReduceinteropRequireWildcardsize (#16538)9c351e5Useclassand add type definitions forregenerator(#17220)0f95b74ReduceregeneratorRuntimesize (#17213)317e332Enforce node protocol import (#17207)14ef1e9Babel 8 cleanup (#17211)97105cbRe-convert regeneratorRuntime to helper format (#17205)- Additional commits viewable in compare view
Updates ws from 8.18.0 to 8.18.2
Release notes
Sourced from ws's releases.
8.18.2
Bug fixes
Fixed an issue that, during message decompression when the maximum size was exceeded, led to the emission of an inaccurate error and closure of the connection with an improper close code (#2285).
8.18.1
Bug fixes
- The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).
Commits
0eb8535[dist] 8.18.24f20aed[fix] Handle oversized messages with designated error (#2285)aa998e3[pkg] Update globals to version 16.0.0cf25954[minor] Fix nit in error messageb92745a[dist] 8.18.1b3d9747[doc] Fix nit021f7b8[test] Shorten the path lengthsb9ca55b[pkg] Update eslint-config-prettier to version 10.0.1c798dd4[doc] Fix typo (#2271)6861472[ci] Test on node 23- Additional commits viewable in compare view
Updates jsonpath-plus from 10.2.0 to 10.3.0
Release notes
Sourced from jsonpath-plus's releases.
v10.3.0
What's Changed
- fix(eval): rce using non-string prop names by
@80avinin JSONPath-Plus/JSONPath#237- feat(demo): make demo link shareable by
@80avinin JSONPath-Plus/JSONPath#238Full Changelog: https://github.com/JSONPath-Plus/JSONPath/compare/v10.2.0...v10.3.0
Commits
9754e4bchore: bump versionf690da1chore: update deps and devDeps313a9b4Merge pull request #238 from 80avin/shareable-demo39a0d03Merge pull request #237 from 80avin/fix-10.2.0-rce1c532fcfeat(demo): make demo link shareable3094289fix(eval): rce using non-string prop names- See full diff in compare view
Maintainer changes
This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.
Removes tough-cookie
Updates @kubernetes/client-node from 0.22.3 to 1.2.0
Release notes
Sourced from @kubernetes/client-node's releases.
1.2.0
What's Changed
- Reintroduce timeout and keep-alive for watch requests to match client-go by
@rossanthonyin kubernetes-client/javascript#2367- watch: prevent done callback from being called twice on connection loss by
@bverhoevenin kubernetes-client/javascript#2389- config: support username impersonation by
@cjihrigin kubernetes-client/javascript#2373- fix(object): properly serialize objects on create/replace/patch by
@schroditin kubernetes-client/javascript#2400- Regenerate for Kubernetes 1.33 by
@brendandburnsin kubernetes-client/javascript#2416New Contributors
@rossanthonymade their first contribution in kubernetes-client/javascript#2367@...Description has been truncated
Pull Request Statistics
0
0
+0
-0
Package Dependencies
Technical Details
| ID: | 717982 |
| UUID: | 3097867041 |
| Node ID: | PR_kwDOBM-Q_c6X_dGJ |
| Host: | GitHub |
| Repository: | secureCodeBox/secureCodeBox |