-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the npm_and_yarn group across 1 directory with 31 updates #313
Closed
dependabot
wants to merge
1
commit into
main
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-8f45487727
Closed
Bump the npm_and_yarn group across 1 directory with 31 updates #313
dependabot
wants to merge
1
commit into
main
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-8f45487727
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `8.4.4` | `9.0.5` | | [class-validator](https://github.com/typestack/class-validator) | `0.13.2` | `0.14.0` | | [got](https://github.com/sindresorhus/got) | `11.8.3` | `11.8.5` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `8.5.1` | `9.0.0` | | [mongoose](https://github.com/Automattic/mongoose) | `5.13.14` | `5.13.20` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.17.10` | `7.24.1` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [axios](https://github.com/axios/axios) | `0.26.0` | `1.6.8` | | [@nestjs/axios](https://github.com/nestjs/axios) | `0.0.7` | `3.0.2` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `8.4.4` | `10.3.6` | | [@nestjs/config](https://github.com/nestjs/config) | `2.0.0` | `2.3.4` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `8.4.4` | `10.3.6` | | [@nestjs/jwt](https://github.com/nestjs/jwt) | `8.0.0` | `10.2.0` | | [@nestjs/mongoose](https://github.com/nestjs/mongoose) | `8.0.1` | `10.0.4` | | [@nestjs/passport](https://github.com/nestjs/passport) | `8.2.1` | `10.0.3` | | [@nestjs/schedule](https://github.com/nestjs/schedule) | `1.1.0` | `4.0.1` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `5.2.1` | `7.3.0` | | [@nestjs/terminus](https://github.com/nestjs/terminus) | `8.0.6` | `10.2.3` | | [@nestjs/throttler](https://github.com/nestjs/throttler) | `2.0.1` | `5.1.2` | | [@ntegral/nestjs-sentry](https://github.com/ntegral/nestjs-sentry) | `3.0.7` | `4.0.1` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `8.4.5` | `10.3.6` | | [qs](https://github.com/ljharb/qs) | `6.9.3` | `6.11.0` | | [formidable](https://github.com/node-formidable/formidable) | `2.0.1` | `2.1.2` | | [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.0` | `4.1.1` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.6` | `2.7.0` | | [passport](https://github.com/jaredhanson/passport) | `0.4.1` | `0.7.0` | | [webpack](https://github.com/webpack/webpack) | `5.71.0` | `5.90.1` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `8.2.5` | `10.3.2` | Updates `@nestjs/core` from 8.4.4 to 9.0.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v9.0.5/packages/core) Updates `class-validator` from 0.13.2 to 0.14.0 - [Release notes](https://github.com/typestack/class-validator/releases) - [Changelog](https://github.com/typestack/class-validator/blob/develop/CHANGELOG.md) - [Commits](typestack/class-validator@v0.13.2...v0.14.0) Updates `got` from 11.8.3 to 11.8.5 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v11.8.3...v11.8.5) Updates `jsonwebtoken` from 8.5.1 to 9.0.0 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v8.5.1...v9.0.0) Updates `mongoose` from 5.13.14 to 5.13.20 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@5.13.14...5.13.20) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `@babel/traverse` from 7.17.10 to 7.24.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.1/packages/babel-traverse) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `axios` from 0.26.0 to 1.6.8 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.26.0...v1.6.8) Updates `@nestjs/axios` from 0.0.7 to 3.0.2 - [Release notes](https://github.com/nestjs/axios/releases) - [Changelog](https://github.com/nestjs/axios/blob/master/.release-it.json) - [Commits](nestjs/axios@0.0.7...3.0.2) Updates `@nestjs/common` from 8.4.4 to 10.3.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v10.3.6/packages/common) Updates `@nestjs/config` from 2.0.0 to 2.3.4 - [Release notes](https://github.com/nestjs/config/releases) - [Changelog](https://github.com/nestjs/config/blob/master/.release-it.json) - [Commits](nestjs/config@2.0.0...2.3.4) Updates `@nestjs/platform-express` from 8.4.4 to 10.3.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v10.3.6/packages/platform-express) Updates `@nestjs/jwt` from 8.0.0 to 10.2.0 - [Release notes](https://github.com/nestjs/jwt/releases) - [Changelog](https://github.com/nestjs/jwt/blob/master/.release-it.json) - [Commits](nestjs/jwt@8.0.0...10.2.0) Updates `@nestjs/mongoose` from 8.0.1 to 10.0.4 - [Release notes](https://github.com/nestjs/mongoose/releases) - [Changelog](https://github.com/nestjs/mongoose/blob/master/.release-it.json) - [Commits](nestjs/mongoose@8.0.1...10.0.4) Updates `@nestjs/passport` from 8.2.1 to 10.0.3 - [Release notes](https://github.com/nestjs/passport/releases) - [Changelog](https://github.com/nestjs/passport/blob/master/.release-it.json) - [Commits](nestjs/passport@8.2.1...10.0.3) Updates `@nestjs/schedule` from 1.1.0 to 4.0.1 - [Release notes](https://github.com/nestjs/schedule/releases) - [Changelog](https://github.com/nestjs/schedule/blob/master/.release-it.json) - [Commits](nestjs/schedule@1.1.0...4.0.1) Updates `@nestjs/swagger` from 5.2.1 to 7.3.0 - [Release notes](https://github.com/nestjs/swagger/releases) - [Changelog](https://github.com/nestjs/swagger/blob/master/.release-it.json) - [Commits](nestjs/swagger@5.2.1...7.3.0) Updates `@nestjs/terminus` from 8.0.6 to 10.2.3 - [Release notes](https://github.com/nestjs/terminus/releases) - [Changelog](https://github.com/nestjs/terminus/blob/master/CHANGELOG.md) - [Commits](nestjs/terminus@8.0.6...10.2.3) Updates `@nestjs/throttler` from 2.0.1 to 5.1.2 - [Release notes](https://github.com/nestjs/throttler/releases) - [Changelog](https://github.com/nestjs/throttler/blob/master/CHANGELOG.md) - [Commits](nestjs/throttler@v2.0.1...v5.1.2) Updates `@ntegral/nestjs-sentry` from 3.0.7 to 4.0.1 - [Commits](https://github.com/ntegral/nestjs-sentry/commits) Updates `@nestjs/testing` from 8.4.5 to 10.3.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v10.3.6/packages/testing) Updates `qs` from 6.9.3 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.9.3...v6.11.0) Updates `formidable` from 2.0.1 to 2.1.2 - [Release notes](https://github.com/node-formidable/formidable/releases) - [Changelog](https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md) - [Commits](https://github.com/node-formidable/formidable/commits) Updates `express` from 4.17.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.3...4.19.2) Updates `follow-redirects` from 1.15.0 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.0...v1.15.6) Updates `http-cache-semantics` from 4.1.0 to 4.1.1 - [Commits](kornelski/http-cache-semantics@v4.1.0...v4.1.1) Updates `node-fetch` from 2.6.6 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.6...v2.7.0) Updates `passport` from 0.4.1 to 0.7.0 - [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md) - [Commits](jaredhanson/passport@v0.4.1...v0.7.0) Updates `webpack` from 5.71.0 to 5.90.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.71.0...v5.90.1) Updates `@nestjs/cli` from 8.2.5 to 10.3.2 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Changelog](https://github.com/nestjs/nest-cli/blob/master/.release-it.json) - [Commits](nestjs/nest-cli@8.2.5...10.3.2) --- updated-dependencies: - dependency-name: "@nestjs/core" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: class-validator dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: got dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: jsonwebtoken dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: mongoose dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/axios" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/common" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/config" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/platform-express" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/jwt" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/mongoose" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/passport" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/schedule" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/swagger" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/terminus" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/throttler" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@ntegral/nestjs-sentry" dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/testing" dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: formidable dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: passport dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: webpack dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@nestjs/cli" dependency-type: direct:development dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
Pull requests that update a dependency file
label
Mar 28, 2024
Quality Gate passedIssues Measures |
Superseded by #319. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-security-group-8f45487727
branch
April 23, 2024 02:36
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 28 updates in the / directory:
8.4.4
9.0.5
0.13.2
0.14.0
11.8.3
11.8.5
8.5.1
9.0.0
5.13.14
5.13.20
7.17.10
7.24.1
1.0.1
1.0.2
0.26.0
1.6.8
0.0.7
3.0.2
8.4.4
10.3.6
2.0.0
2.3.4
8.4.4
10.3.6
8.0.0
10.2.0
8.0.1
10.0.4
8.2.1
10.0.3
1.1.0
4.0.1
5.2.1
7.3.0
8.0.6
10.2.3
2.0.1
5.1.2
3.0.7
4.0.1
8.4.5
10.3.6
6.9.3
6.11.0
2.0.1
2.1.2
4.1.0
4.1.1
2.6.6
2.7.0
0.4.1
0.7.0
5.71.0
5.90.1
8.2.5
10.3.2
Updates
@nestjs/core
from 8.4.4 to 9.0.5Release notes
Sourced from
@nestjs/core
's releases.... (truncated)
Commits
ad08626
chore(@nestjs
) publish v9.0.5 releasedf4d99d
chore(@nestjs
) publish v9.0.4 release8cd150d
Merge pull request #9915 from thiagomini/refactor/instance-wrapper4c16d20
refactor(core): remove providers type assertionsf4b3c7f
chore(@nestjs
) publish v9.0.3 release1ff1389
fix(core): scoped factories should not fail with optional depsa2f4b34
test(core): add instance wrapper testb0d735d
test(core): add instance wrapper test7696f43
test(core): add instance wrapper test2a7fc84
test(core): add instance wrapper testUpdates
class-validator
from 0.13.2 to 0.14.0Changelog
Sourced from class-validator's changelog.
... (truncated)
Commits
5f0d424
merge: release 0.14.0 (#1841)e3d0708
build: bump version to 0.14.0ad76890
docs: add changelog for 0.14.09a775c5
build(deps-dev): bump@types/node
from 18.11.11 to 18.11.12 (#1840)53bc9f6
build(deps-dev): bump@typescript-eslint/eslint-plugin
(#1837)d9b4072
build(deps-dev): bump@typescript-eslint/parser
from 5.45.1 to 5.46.0 (#1838)f993e9e
build(deps-dev): bump typescript from 4.9.3 to 4.9.4 (#1835)ad1a41d
build(deps-dev): bump@rollup/plugin-commonjs
from 23.0.3 to 23.0.4 (#1836)42b4f7f
build(deps-dev): bump prettier from 2.8.0 to 2.8.1 (#1834)0c986d4
build(deps-dev): bump@types/node
from 18.11.10 to 18.11.11 (#1833)Updates
got
from 11.8.3 to 11.8.5Release notes
Sourced from got's releases.
Commits
5e17bb7
11.8.5bce8ce7
Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc8ced192
Fix build670eb04
11.8.420f29fe
Backport #1543: Initialize globalResponse in case of ignored HTTPError (#2017)Updates
jsonwebtoken
from 8.5.1 to 9.0.0Changelog
Sourced from jsonwebtoken's changelog.
Commits
e1fa9dc
Merge pull request from GHSA-8cf7-32gw-wr335eaedbf
chore(ci): remove github test actions job (#861)cd4163e
chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)ecdf6cc
fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...8345030
fix(sign&verify)!: Remove defaultnone
support fromsign
andverify
met...7e6a86b
Upload OpsLevel YAML (#849)74d5719
docs: update references vercel/ms references (#770)d71e383
docs: document "invalid token" error3765003
docs: fix spelling in README.md: Peak -> Peek (#754)a46097e
docs: make decode impossible to discover before verifyMaintainer changes
This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.
Updates
mongoose
from 5.13.14 to 5.13.20Changelog
Sourced from mongoose's changelog.
... (truncated)
Commits
0f3997a
chore: release 5.13.20f1efabf
fix: avoid prototype pollution on init98e0762
chore: release 5.13.197e36d21
chore: release 5.13.186759c60
undo accidental changes and actually pin@types/json-schema
4ed4a89
chore: pin version of@types/json-schema
because of install issues on node v4...9a9536d
Merge pull request #13535 from lorand-horvath/patch-1226424d5
5.x - bump mongodb driver to 3.7.44b8b0a9
add versionNumber to 5.x1bc07ec
chore: release 5.13.17Updates
semver
from 5.7.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313
chore: release 5.7.22f8fd41
fix: better handling of whitespace (#585)deb5ad5
chore:@npmcli/template-oss
@4
.16.0Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
@babel/traverse
from 7.17.10 to 7.24.1Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
822b025
v7.24.1fc0d5ad
Update typescript and lint tools (#16351)69e7928
Consider well-known and registered symbols as literals (#16342)40110e9
Update source map deps (#16327)ce59160
v7.24.0bd5abd5
fix: avoidpopContext
on unvisited node paths (#16305)08a057c
UseObject.hasOwn
when available (#16248)a0dd614
v7.23.91200542
fix: Don't throw ingetTypeAnnotation
when using TS+inference (#15383)e428a6d
v7.23.7Updates
json5
from 1.0.1 to 1.0.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
... (truncated)