react-aria-menubutton
react-aria-menubutton copied to clipboard
Bump qs and http-server
Bumps qs to 6.5.3 and updates ancestor dependencies qs, qs and http-server. These dependencies need to be updated together.
Updates qs from 6.4.0 to 6.5.3
Changelog
Sourced from qs's changelog.
6.5.3
- [Fix]
parse: ignore__proto__keys (#428)- [Fix]
utils.merge`: avoid a crash with a null target and a truthy non-array source- [Fix] correctly parse nested arrays
- [Fix]
stringify: fix a crash withstrictNullHandlingand a customfilter/serializeDate(#279)- [Fix]
utils:merge: fix crash whensourceis a truthy primitive & no options are provided- [Fix] when
parseArraysis false, properly handle keys ending in[]- [Fix] fix for an impossible situation: when the formatter is called with a non-string value
- [Fix]
utils.merge: avoid a crash with a null target and an array source- [Refactor]
utils: reduce observable [[Get]]s- [Refactor] use cached
Array.isArray- [Refactor]
stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)- [Refactor]
parse: only need to reassign the var once- [Robustness]
stringify: avoid relying on a globalundefined(#427)- [readme] remove travis badge; add github actions/codecov badges; update URLs
- [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
- [Docs] Clarify the need for "arrayLimit" option
- [meta] fix README.md (#399)
- [meta] add FUNDING.yml
- [actions] backport actions from main
- [Tests] always use
String(x)overx.toString()- [Tests] remove nonexistent tape option
- [Dev Deps] backport from main
6.5.2
- [Fix] use
safer-bufferinstead ofBufferconstructor- [Refactor] utils:
module.exportsone thing, instead of mutatingexports(#230)- [Dev Deps] update
browserify,eslint,iconv-lite,safer-buffer,tape,browserify6.5.1
- [Fix] Fix parsing & compacting very deep objects (#224)
- [Refactor] name utils functions
- [Dev Deps] update
eslint,@ljharb/eslint-config,tape- [Tests] up to
nodev8.4; usenvm install-latest-npmso newer npm doesn’t break older node- [Tests] Use precise dist for Node.js 0.6 runtime (#225)
- [Tests] make 0.6 required, now that it’s passing
- [Tests] on
nodev8.2; fix npm on node 0.66.5.0
- [New] add
utils.assign- [New] pass default encoder/decoder to custom encoder/decoder functions (#206)
- [New]
parse/stringify: addignoreQueryPrefix/addQueryPrefixoptions, respectively (#213)- [Fix] Handle stringifying empty objects with addQueryPrefix (#217)
- [Fix] do not mutate
optionsargument (#207)- [Refactor]
parse: cache index to reuse in else statement (#182)- [Docs] add various badges to readme (#208)
- [Dev Deps] update
eslint,browserify,iconv-lite,tape- [Tests] up to
nodev8.1,v7.10,v6.11; npm v4.6 breaks on node < v1; npm v5+ breaks on node < v4- [Tests] add
editorconfig-tools
... (truncated)
Commits
298bfa5v6.5.3ed0f5dc[Fix]parse: ignore__proto__keys (#428)691e739[Robustness]stringify: avoid relying on a globalundefined(#427)1072d57[readme] remove travis badge; add github actions/codecov badges; update URLs12ac1c4[meta] fix README.md (#399)0338716[actions] backport actions from main5639c20Clean up license text so it’s properly detected as BSD-3-Clause51b8a0badd FUNDING.yml45f6759[Fix] fix for an impossible situation: when the formatter is called with a no...f814a7f[Dev Deps] backport from main- Additional commits viewable in compare view
Updates qs from 6.5.1 to 6.5.3
Changelog
Sourced from qs's changelog.
6.5.3
- [Fix]
parse: ignore__proto__keys (#428)- [Fix]
utils.merge`: avoid a crash with a null target and a truthy non-array source- [Fix] correctly parse nested arrays
- [Fix]
stringify: fix a crash withstrictNullHandlingand a customfilter/serializeDate(#279)- [Fix]
utils:merge: fix crash whensourceis a truthy primitive & no options are provided- [Fix] when
parseArraysis false, properly handle keys ending in[]- [Fix] fix for an impossible situation: when the formatter is called with a non-string value
- [Fix]
utils.merge: avoid a crash with a null target and an array source- [Refactor]
utils: reduce observable [[Get]]s- [Refactor] use cached
Array.isArray- [Refactor]
stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)- [Refactor]
parse: only need to reassign the var once- [Robustness]
stringify: avoid relying on a globalundefined(#427)- [readme] remove travis badge; add github actions/codecov badges; update URLs
- [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
- [Docs] Clarify the need for "arrayLimit" option
- [meta] fix README.md (#399)
- [meta] add FUNDING.yml
- [actions] backport actions from main
- [Tests] always use
String(x)overx.toString()- [Tests] remove nonexistent tape option
- [Dev Deps] backport from main
6.5.2
- [Fix] use
safer-bufferinstead ofBufferconstructor- [Refactor] utils:
module.exportsone thing, instead of mutatingexports(#230)- [Dev Deps] update
browserify,eslint,iconv-lite,safer-buffer,tape,browserify6.5.1
- [Fix] Fix parsing & compacting very deep objects (#224)
- [Refactor] name utils functions
- [Dev Deps] update
eslint,@ljharb/eslint-config,tape- [Tests] up to
nodev8.4; usenvm install-latest-npmso newer npm doesn’t break older node- [Tests] Use precise dist for Node.js 0.6 runtime (#225)
- [Tests] make 0.6 required, now that it’s passing
- [Tests] on
nodev8.2; fix npm on node 0.66.5.0
- [New] add
utils.assign- [New] pass default encoder/decoder to custom encoder/decoder functions (#206)
- [New]
parse/stringify: addignoreQueryPrefix/addQueryPrefixoptions, respectively (#213)- [Fix] Handle stringifying empty objects with addQueryPrefix (#217)
- [Fix] do not mutate
optionsargument (#207)- [Refactor]
parse: cache index to reuse in else statement (#182)- [Docs] add various badges to readme (#208)
- [Dev Deps] update
eslint,browserify,iconv-lite,tape- [Tests] up to
nodev8.1,v7.10,v6.11; npm v4.6 breaks on node < v1; npm v5+ breaks on node < v4- [Tests] add
editorconfig-tools
... (truncated)
Commits
298bfa5v6.5.3ed0f5dc[Fix]parse: ignore__proto__keys (#428)691e739[Robustness]stringify: avoid relying on a globalundefined(#427)1072d57[readme] remove travis badge; add github actions/codecov badges; update URLs12ac1c4[meta] fix README.md (#399)0338716[actions] backport actions from main5639c20Clean up license text so it’s properly detected as BSD-3-Clause51b8a0badd FUNDING.yml45f6759[Fix] fix for an impossible situation: when the formatter is called with a no...f814a7f[Dev Deps] backport from main- Additional commits viewable in compare view
Updates http-server from 0.10.0 to 14.1.1
Release notes
Sourced from http-server's releases.
v14.1.1
Other changes
- Bump follow-redirects from 1.14.4 to 1.14.8
@dependabot(#794)v14.1.0
This release contains an emergency fix which replaces colors.js with chalk. See #781 for more info and discussion, and Marak/colors.js#285 for broader discussion about colors.js.
v14.0.0
Breaking changes
- Add encoding charset sniffing
@boarwell(#736)- Drop Node.js 10 support
@boarwell(#739)
- Required to support charset sniffing
Features and enhancements
- add passphrase option
@chris--jones (#746)- Make --ssl an alias for --tls
@thornjad(#747)- add ability to pass proxyOptions
@yannickglt(#688)- Replace mkdirp in tests with native JS
@thornjad(#743)- Implement displaying last modified date in index
@owenl131(#737)- Adds version number to server startup output
@Innoveramera(#734)Bug Fixes
- Don't crash when file path errors
@thornjad(#753)- Fix CORS option detection
@thornjad(#748)- fix crash on redirect with formfeed in URL
@thornjad(#749)- Fixes --proxy without a protocol throwing an uncaught error
@Ratcoder(#742)- Fix tests EACCESS by finding an open port every time
@thornjad(#741)- Use relative paths in directory listing #661
@boarwell(#732)Other changes
- Add Contributing guide
@thornjad(#752)- Eslint config - replace common-style with eslint-config-populist
@chris--jones (#744)- Update some dependencies
@thornjad(#740)Full Changelog: https://github.com/http-party/http-server/compare/v13.0.2...v14.0.0
v13.1.0
This release contains an emergency backport from v14.1.0 which replaces colors.js with chalk
... (truncated)
Commits
af0ac3e14.1.1e5301d3update license year318c55fMerge pull request #794 from http-party/dependabot/npm_and_yarn/follow-redire...284a0b0Merge pull request #803 from dpassen/patch-CVE-2021-4490617cc8d6Patch CVE-2021-44906dc2fcf0Bump follow-redirects from 1.14.4 to 1.14.833a6639Update SECURITY.md251d4a1Update support commitments for Jan 2022e16ed1d14.1.056bdf6eMerge pull request #785 from zbynek/use-chalk- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by thornjad, a new releaser for http-server since your current version.
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.