chore(deps): bump json5 and umi

[dependabot[bot]]

trafficstars

Bumps json5 to 1.0.2 and updates ancestor dependency umi. These dependencies need to be updated together.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

• a62db1e 1.0.2
• e0c23fe docs: update CHANGELOG for v1.0.2
• 62a6540 fix: add proto to objects and arrays
• See full diff in compare view

Updates umi from 2.12.8 to 4.0.41

Release notes

Sourced from umi's releases.

v4.0.41

What's Changed

• 新增 无网络连接启动 devServer 时提示无网络 by @​AkaraChen in umijs/umi#10153
• 修复 mfsu 依赖配置中有函数时导致缓存一直失效的问题 function by @​xierenyuan in umijs/umi#10166
• 修复 乾坤应用本地研发时热更新报错 by @​HiLanXiao in umijs/umi#10165
• 修复 移除 globalThis 以支持低版本浏览器 by @​sorrycc in umijs/umi#10179
• 修复 import.meta.x 导致的模块导出解析失败 by @​fz6m in umijs/umi#10149
• 修复 jest generator 生成的script 在 windows 可用 by @​zhoudailin in umijs/umi#10133
• 文档 增加使用 bunx 创建项目示例 by @​fz6m in umijs/umi#10143
• 文档 增加 overrides.less 功能介绍 by @​PeachScript in umijs/umi#10119
• 文档 增加 history.push state 参数的说明 by @​stormslowly in umijs/umi#10160

New Contributors

• @​conorzhong made their first contribution in umijs/umi#10139
• @​AkaraChen made their first contribution in umijs/umi#10153

Full Changelog: https://github.com/umijs/umi/compare/v4.0.40...v4.0.41

v4.0.40

What's Changed

• 回滚 支持调用 history.push 时使用相对路径 umijs/umi#10122 by @​stormslowly in umijs/umi#10134

Full Changelog: https://github.com/umijs/umi/compare/v4.0.39...v4.0.40

v4.0.39

What's Changed

• 新增 antd 插件运行时配置钩子 by @​hanzebang in umijs/umi#10051
• 支持调用 history.push 时使用相对路径 by @​stormslowly in umijs/umi#10122
• 修复子路由 path 为空时 exportStatic 产物缺失的问题 by @​fz6m in umijs/umi#10091
• 修复 MFSU 缓存在 define 配置项修改时不会刷新的问题 by @​fz6m in umijs/umi#10096
• 修复 bundler-esbuild 无法处理 dataurl 资源导致 MFSU 编译失败的问题 by @​fz6m in umijs/umi#10098
• 修复 srcTranspiler 配置项的类型错误 by @​zhoudailin in umijs/umi#10118
• 优化 Umi Max 脚手架内的文档链接 by @​BoyYangzai in umijs/umi#10099
• 优化 layout 插件以兼容旧的 noFound 和 unAccessible 配置 by @​hanzebang in umijs/umi#10110
• 优化 antd 插件允许对 antd v5 启用 import，同时不允许对 antd v5 设置 style by @​PeachScript in umijs/umi#10129
• 文档完善 patchClientRoutes 示例 by @​hanzebang in umijs/umi#10094
• 文档完善 define 配置项添加全局类型声明的示例 by @​hanzebang in umijs/umi#10093

New Contributors

• @​zhoudailin made their first contribution in umijs/umi#10118

Full Changelog: https://github.com/umijs/umi/compare/v4.0.38...v4.0.39

v4.0.38

What's Changed

• Revert "fix(route): absPath missing slash" by @​sorrycc in umijs/umi#10086
• Revert "feat: terminal shortcuts" by @​sorrycc in umijs/umi#10089

... (truncated)

Commits

• 2c360ad release: 4.0.41
• bcba2d1 fix(preset-umi): remove globalThis in terminal api for old browser compatibil...
• 6018165 fix(qiankun-plugin): 修复本地研发时热更新报错 (#10165)
• 1d8c3c0 fix(mfsu): fix a cache failure caused by the getCacheDependency content conta...
• 4d28388 docs: 📝 update history.push state docs (#10160)
• 7ca6a37 fix(jest generator): accurate test script in windows platform (#10133)
• 00688f8 docs: describe conventional overrides.less (#10119)
• b147483 docs: use bunx create command (#10143)
• 8b73a15 fix(esbuild): import.meta.x parsed name undefined (#10149)
• 45ccef2 feat: show message when have no network connection (#10153)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by stormslowly, a new releaser for umi since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.