engine
engine copied to clipboard
chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates
Bumps the npm_and_yarn group with 4 updates in the / directory: undici, vitest, @babel/runtime and vite. Bumps the npm_and_yarn group with 2 updates in the /sdk directory: @babel/runtime and @babel/helpers.
Updates undici from 6.20.1 to 6.21.1
Release notes
Sourced from undici's releases.
v6.21.1
⚠️ Security Release ⚠️
Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
What's Changed
- fix(#3736): back-port 183f8e9 to v6.x by
@ggoodmanin nodejs/undici#3855- fix(#3817): send servername for SNI on TLS (#3821) [backport] by
@metcoder95in nodejs/undici#3864- fix: sending formdata bodies with http2 (#3863) [backport] by
@metcoder95in nodejs/undici#3866- [Backport v6.x] fix: Fixed the issue that there is no running request when http2 goaway by
@github-actionsin nodejs/undici#3877- types: [backport] Update return type of RetryCallback (#3851) by
@metcoder95in nodejs/undici#3876Full Changelog: https://github.com/nodejs/undici/compare/v6.21.0...v6.21.1
v6.21.0
What's Changed
- [Backport v6.x] web: mark as uncloneable when possible (#3709) by
@jazellyin nodejs/undici#3744- [Backport v6.x] fetch: fix content-encoding order by
@github-actionsin nodejs/undici#3764- [Backport v6.x] fix: handle undefined deref() of WeakRef(socket) by
@github-actionsin nodejs/undici#3822- [Backport v6.x] fix: range end is zero-indexed by
@github-actionsin nodejs/undici#3827Full Changelog: https://github.com/nodejs/undici/compare/v6.20.1...v6.21.0
Commits
e260e7bBumped v6.21.1c3acc60Merge commit from fork2414bc9Update return type of RetryCallback (#3851) (#3876)be8cd0a[Backport v6.x] fix: Fixed the issue that there is no running request when ht...ee6176cfix: sending formdata bodies with http2 (#3863) [backport] (#3866)a0220f1fix(#3817): send servername for SNI on TLS (#3821) [backport] (#3864)353ab63fix(#3736): back-port 183f8e9 to v6.x (#3855)61ec353Bumped v6.21.011e31a4fix: range end is zero-indexed (#3826) (#3827)98d1b1bfix: handle undefined deref() of WeakRef(socket) (#3751) (#3822)- Additional commits viewable in compare view
Updates vitest from 2.1.8 to 2.1.9
Release notes
Sourced from vitest's releases.
v2.1.9
This release includes security patches for:
- Browser mode serves arbitrary files | CVE-2025-24963
- Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964
🐞 Bug Fixes
- backport vitest-dev/vitest#7317 to v2 - by
@hi-ogawain vitest-dev/vitest#7318- (backport #7340 to v2) restrict served files from
/__screenshot-error- by@hi-ogawain vitest-dev/vitest#7343View changes on GitHub
Commits
c9e59a0chore: release v2.1.9e0fe1d8fix: backport #7317 to v2 (#7318)- See full diff in compare view
Updates @babel/runtime from 7.26.0 to 7.27.1
Release notes
Sourced from @babel/runtime's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/runtime's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1296cdc5Remove unusedregenerator-runtimedep in@babel/runtime(#17263)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.92d95140v7.26.7- See full diff in compare view
Updates vite from 5.4.11 to 5.4.19
Release notes
Sourced from vite's releases.
v5.4.19
Please refer to CHANGELOG.md for details.
v5.4.18
Please refer to CHANGELOG.md for details.
v5.4.17
Please refer to CHANGELOG.md for details.
v5.4.16
Please refer to CHANGELOG.md for details.
v5.4.15
Please refer to CHANGELOG.md for details.
v5.4.14
Please refer to CHANGELOG.md for details.
v5.4.13
Please refer to CHANGELOG.md for details.
v5.4.12
This version contains a breaking change due to security fixes. See https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 for more details.
Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
5.4.19 (2025-04-30)
5.4.18 (2025-04-10)
- fix: backport #19830, reject requests with
#in request-target (#19831) (823675b), closes #19830 #198315.4.17 (2025-04-03)
5.4.16 (2025-03-31)
5.4.15 (2025-03-24)
5.4.14 (2025-01-21)
- fix:
preview.allowedHostswith specific values was not respected (#19246) (9df6e6b), closes #19246- fix: allow CORS from loopback addresses by default (#19249) (7d1699c), closes #19249
5.4.13 (2025-01-20)
5.4.12 (2025-01-20)
Commits
80a333arelease: v5.4.19766947efix: backport #19965, check static serve file inside sirv (#19966)731b77drelease: v5.4.18823675bfix: backport #19830, reject requests with#in request-target (#19831)0a2518arelease: v5.4.1784b2b46fix: backport #19782, fs check with svg and relative paths (#19784)712cb71release: v5.4.16b627c50fix: backport #19761, fs check in transform middleware (#19762)9b0f4c8release: v5.4.15807d7f0fix: backport #19702, fs raw query with query separators (#19703)- Additional commits viewable in compare view
Updates @babel/runtime from 7.26.0 to 7.27.1
Release notes
Sourced from @babel/runtime's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/runtime's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typescript,babel-preset-env,babel-register,babel-standalone,babel-typesbabel-plugin-transform-regenerator
... (truncated)
Commits
eebd3a0v7.27.1296cdc5Remove unusedregenerator-runtimedep in@babel/runtime(#17263)fdc0fb5[Babel 8] Bump nodejs requirements to^20.19.0 || >= 22.12.0(#17204)5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.92d95140v7.26.7- See full diff in compare view
Updates @babel/runtime from 7.23.2 to 7.27.1
Release notes
Sourced from @babel/runtime's releases.
v7.27.1 (2025-04-30)
Thanks
@kermanxand@woaitsAryanfor your first PRs!:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalonebabel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3
- #17205 Inline regenerator in the relevant packages (
@nicolo-ribaudo)- All packages
... (truncated)
Changelog
Sourced from @babel/runtime's changelog.
v7.27.1 (2025-04-30)
:eyeglasses: Spec Compliance
babel-parserbabel-parser,babel-types:bug: Bug Fix
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-traversebabel-helper-wrap-function,babel-plugin-transform-async-to-generator
- #17251 Fix: propagate argument evaluation errors through async promise chain (
@magic-akari)babel-helper-remap-async-to-generator,babel-plugin-transform-async-to-generatorbabel-helper-fixtures,babel-parserbabel-generator,babel-parserbabel-parserbabel-compat-data,babel-preset-envbabel-traverse
- #17156 fix: Objects and arrays with multiple references should not be evaluated (
@liuxingbaoyu)babel-generator:nail_care: Polish
babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining,babel-plugin-proposal-decorators,babel-plugin-transform-arrow-functions,babel-plugin-transform-class-properties,babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-chaining,babel-plugin-transform-parameters,babel-traverse
- #17221 Reduce generated names size for the 10th-11th (
@nicolo-ribaudo):house: Internal
babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime
- #17263 Remove unused
regenerator-runtimedep in@babel/runtime(@nicolo-ribaudo)babel-compat-data,babel-preset-envbabel-compat-data,babel-standalone- Other
babel-register
- #16844 Migrate
@babel/registerto cts (@liuxingbaoyu)babel-cli,babel-compat-data,babel-core,babel-generator,babel-helper-compilation-targets,babel-helper-fixtures,babel-helper-module-imports,babel-helper-module-transforms,babel-helper-plugin-test-runner,babel-helper-transform-fixture-test-runner,babel-helpers,babel-node,babel-parser,babel-plugin-transform-modules-amd,babel-plugin-transform-modules-commonjs,babel-plugin-transform-modules-systemjs,babel-plugin-transform-modules-umd,babel-plugin-transform-react-display-name,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-plugin-transform-typeof-symbol,babel-plugin-transform-typesc...Description has been truncated
PR-Codex overview
This PR focuses on updating dependencies in the
package.jsonandyarn.lockfiles, ensuring that various packages are upgraded to their latest versions for improved functionality and security.Detailed summary
- Updated
undicifrom^6.20.1to^6.21.1.- Updated
vitestfrom^2.0.3to^2.1.9.- Updated several Babel packages to version
^7.27.1.- Updated
vite-nodefrom2.1.8to2.1.9.- Updated multiple
@vitest/*packages to version2.1.9.✨ Ask PR-Codex anything about this PR by commenting with
/codex {your question}
We're building your pull request over on Zeet. Click me for more info about your build and deployment. Once built, this branch can be tested at: https://tw-unreal-demo-engine-vwn0-depend-36ef3b.engine-aws-usw2.zeet.app before merging :wink:
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
| Diff | Package | Supply Chain Security |
Vulnerability | Quality | Maintenance | License |
|---|---|---|---|---|---|---|
| @vitest/spy@2.1.8 ⏵ 2.1.9 | ||||||
| @vitest/pretty-format@2.1.8 ⏵ 2.1.9 | ||||||
| @vitest/utils@2.1.8 ⏵ 2.1.9 | ||||||
| @vitest/runner@2.1.8 ⏵ 2.1.9 | ||||||
| @vitest/mocker@2.1.8 ⏵ 2.1.9 | ||||||
| vitest@2.1.8 ⏵ 2.1.9 | ||||||
| @vitest/expect@2.1.8 ⏵ 2.1.9 | ||||||
| @babel/runtime@7.23.2 ⏵ 7.27.1 | ||||||
| @babel/helpers@7.23.2 ⏵ 7.27.1 | ||||||
| vite@5.4.11 ⏵ 5.4.19 | ||||||
| @vitest/snapshot@2.1.8 ⏵ 2.1.9 | ||||||
| undici@6.20.1 ⏵ 6.21.1 | ||||||
| vite-node@2.1.8 ⏵ 2.1.9 |
This PR is stale because it has been open for 7 days with no activity. Remove stale label or comment or this PR will be closed in 3 days.
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure ignore rules in dependabot.yml