android-uiconductor icon indicating copy to clipboard operation
android-uiconductor copied to clipboard

Published 20 hours ago • verified publisher icon google

Bump the npm_and_yarn group across 1 directory with 28 updates

Open dependabot[bot] opened this issue 8 months ago • 0 comments

Bumps the npm_and_yarn group with 16 updates in the /frontend directory:

Package From To
karma 4.2.0 6.3.16
yargs-parser 11.1.1 13.1.2
protractor 5.4.4 5.4.4
@babel/traverse 7.13.0 7.24.7
@npmcli/git 2.0.6 2.1.0
ansi-regex 5.0.0 5.0.1
ansi-regex 4.1.0 5.0.1
ansi-regex 3.0.0 5.0.1
async 2.6.3 2.6.4
json5 1.0.1 1.0.2
loader-utils 1.2.3 3.2.1
@angular-devkit/build-angular 0.1102.5 18.0.4
follow-redirects 1.13.3 1.15.6
json-schema 0.2.3 0.4.0
jsprim 1.4.1 1.4.2
jszip 3.6.0 3.10.1
qs 6.5.2 6.5.3
tar 6.1.0 6.2.1

Updates karma from 4.2.0 to 6.3.16

Release notes

Sourced from karma's releases.

v6.3.16

6.3.16 (2022-02-10)

Bug Fixes

  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

v6.3.15

6.3.15 (2022-02-05)

Bug Fixes

v6.3.14

6.3.14 (2022-02-05)

Bug Fixes

  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

v6.3.13

6.3.13 (2022-01-31)

Bug Fixes

  • deps: bump log4js to resolve security issue (5bf2df3), closes #3751

v6.3.12

6.3.12 (2022-01-24)

Bug Fixes

  • remove depreciation warning from log4js (41bed33)

v6.3.11

6.3.11 (2022-01-13)

Bug Fixes

  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

... (truncated)

Changelog

Sourced from karma's changelog.

6.3.16 (2022-02-10)

Bug Fixes

  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes

  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

  • deps: bump log4js to resolve security issue (5bf2df3), closes #3751

6.3.12 (2022-01-24)

Bug Fixes

  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes

  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes

  • logger: create parent folders if they are missing (0d24bd9), closes #3734

... (truncated)

Commits
  • ab4b328 chore(release): 6.3.16 [skip ci]
  • ff7edbb fix(security): mitigate the "Open Redirect Vulnerability"
  • c1befa0 chore(release): 6.3.15 [skip ci]
  • d9dade2 fix(helper): make mkdirIfNotExists helper resilient to concurrent calls
  • 653c762 ci: prevent duplicate CI tasks on creating a PR
  • c97e562 chore(release): 6.3.14 [skip ci]
  • 91d5acd fix: remove string template from client code
  • 69cfc76 fix: warn when singleRun and autoWatch are false
  • 839578c fix(security): remove XSS vulnerability in returnUrl query param
  • db53785 chore(release): 6.3.13 [skip ci]
  • Additional commits viewable in compare view

Updates yargs-parser from 11.1.1 to 13.1.2

Changelog

Sourced from yargs-parser's changelog.

15.0.0 (2019-10-07)

Features

  • rework collect-unknown-options into unknown-options-as-args, providing more comprehensive functionality (ef771ca)

BREAKING CHANGES

  • rework collect-unknown-options into unknown-options-as-args, providing more comprehensive functionality

14.0.0 (2019-09-06)

Bug Fixes

  • boolean arrays with default values (#185) (7d42572)
  • boolean now behaves the same as other array types (#184) (17ca3bd)
  • eatNargs() for 'opt.narg === 0' and boolean typed options (#188) (c5a1db0)
  • maybeCoerceNumber now takes precedence over coerce return value (#182) (2f26436)
  • take into account aliases when appending arrays from config object (#199) (f8a2d3f)

Features

  • add configuration option to "collect-unknown-options" (#181) (7909cc4)
  • maybeCoerceNumber() now takes into account arrays (#187) (31c204b)

BREAKING CHANGES

  • unless "parse-numbers" is set to "false", arrays of numeric strings are now parsed as numbers, rather than strings.
  • we have dropped the broken "defaulted" functionality; we would like to revisit adding this in the future.
  • maybeCoerceNumber now takes precedence over coerce return value (#182)

13.1.1 (2019-06-10)

Bug Fixes

  • convert values to strings when tokenizing (#167) (57b7883)
  • nargs should allow duplicates when duplicate-arguments-array=false (#164) (47ccb0b)
  • should populate "_" when given config with "short-option-groups" false (#179) (6055974)

13.1.0 (2019-05-05)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.


Updates protractor from 5.4.4 to 5.4.4

Changelog

Sourced from protractor's changelog.

5.4.4

Fixes

  • fix: security prototype pollution

5.4.3

Fixes

fix(index.ts): Fix exports to unbreak TypeScript 3.7 build

5.4.2

Features

  • (db1b638) feat(saucelabs): add sauceRegion support for eu datacenters (#5083)

    This change allows user to define the backend region from sauce via the sauceRegion property, e.g.

       sauceUser: process.env.SAUCE_USERNAME,
   sauceKey: process.env.SAUCE_ACCESS_KEY,
   sauceRegion: 'eu',

    Will run the test against https://ondemand.eu-central-1.saucelabs.com:443/wd/hub/.

       sauceUser: process.env.SAUCE_USERNAME,
   sauceKey: process.env.SAUCE_ACCESS_KEY,
   sauceRegion: 'us',

    // the default
sauceUser: process.env.SAUCE_USERNAME,
sauceKey: process.env.SAUCE_ACCESS_KEY,

    Will run the test against https://ondemand.saucelabs.com:443/wd/hub/

Fixes

  • (f5dbe13) fix(deps): @​types/node is now a dev dependency

5.4.1

Features

... (truncated)

Commits

Updates @babel/traverse from 7.13.0 to 7.24.7

Release notes

Sourced from @​babel/traverse's releases.

v7.24.7 (2024-06-05)

:bug: Bug Fix

:house: Internal

  • babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

Committers: 7

v7.24.6 (2024-05-24)

Thanks @​amjed-98, @​blakewilson, @​coelhucas, and @​SukkaW for your first PRs!

:bug: Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
    • #16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
  • babel-parser, babel-plugin-transform-typescript

:house: Internal

  • babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers
  • babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-parser, babel-traverse
  • Other

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.24.7 (2024-06-05)

:bug: Bug Fix

:house: Internal

  • babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

v7.24.6 (2024-05-24)

:bug: Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
    • #16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
  • babel-parser, babel-plugin-transform-typescript

:house: Internal

  • babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers
  • babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-parser, babel-traverse
  • Other

v7.24.5 (2024-04-29)

:bug: Bug Fix

  • babel-plugin-transform-classes, babel-traverse
  • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

:nail_care: Polish

  • babel-parser

... (truncated)

Commits

Updates @npmcli/git from 2.0.6 to 2.1.0

Changelog

Sourced from @​npmcli/git's changelog.

Changelog

5.0.7 (2024-05-04)

Bug Fixes

Chores

5.0.6 (2024-04-12)

Dependencies

5.0.5 (2024-04-08)

Bug Fixes

5.0.4 (2023-12-19)

Bug Fixes

Chores

5.0.3 (2023-08-30)

Dependencies

  • 5d5a6ed #150 bump @​npmcli/promise-spawn from 6.0.2 to 7.0.0

5.0.2 (2023-08-30)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for @​npmcli/git since your current version.


Updates ansi-regex from 5.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Updates ansi-regex from 4.1.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Updates ansi-regex from 3.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)
Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

Updates loader-utils from 1.2.3 to 3.2.1

Release notes

Sourced from loader-utils's releases.

v3.2.1

3.2.1 (2022-11-11)

Bug Fixes

v3.2.0

3.2.0 (2021-11-11)

Features

  • hash uniformity for base digests (451858b)

v3.1.3

3.1.3 (2021-11-04)

Bug Fixes

v3.1.2

3.1.2 (2021-11-04)

Bug Fixes

v3.1.1

3.1.1 (2021-11-04)

Bug Fixes

  • base64 and unicode characters (02b1f3f)

v3.1.0

3.1.0 (2021-10-29)

Features

  • added md4 (wasm version) and md4-native (crypto module version) algorithms (cbf9d1d)

v3.0.0

3.0.0 (2021-10-20)

... (truncated)

Changelog

Sourced from loader-utils's changelog.

3.2.1 (2022-11-11)

Bug Fixes

3.2.0 (2021-11-11)

Features

  • hash uniformity for base digests (451858b)

3.1.3 (2021-11-04)

Bug Fixes

3.1.2 (2021-11-04)

Bug Fixes

3.1.1 (2021-11-04)

Bug Fixes

  • base64 and unicode characters (02b1f3f)

3.1.0 (2021-10-29)

Features

  • added md4 (wasm version) and md4-native (crypto module version) algorithms (cbf9d1d)

3.0.0 (2021-10-20)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0 (93a87ce)
  • use xxhash64 by default for [hash]/[contenthash] and getHashDigest API
  • [emoji] was removed without replacements, please use custom function if you need this

... (truncated)

Commits

Updates @angular-devkit/build-angular from 0.1102.5 to 18.0.4

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v18.0.4

18.0.4 (2024-06-13)

@​angular/build

Commit Description
fix - 791ef809d do not reference sourcemaps in web workers and global stylesheet bundles when hidden setting is enabled
fix - 20fc6ca05 generate module preloads next to script elements in index HTML
fix - 3a1bf5c8a Initiate PostCSS only once
fix - 78c611754 issue warning when auto adding @angular/localize/init

v18.0.3

18.0.3 (2024-06-05)

@​angular/cli

Commit Description
fix - b709d2a24 add schema.json options to parsed command, also when a version is passed to ng add <package>@<version>

@​angular/build

Commit Description
fix - 43a2a7d13 avoid escaping rebased Sass URL values
fix - 9acb5c7ca disable JS transformer persistent cache on web containers
fix - 346df4909 improve Sass rebaser ident token detection
fix - 6526a5f59 watch all related files during a Sass error

v18.0.2

18.0.2 (2024-05-29)

@​schematics/angular

Commit Description
fix - 9967c04b8 check both application builder packages in SSR schematic
fix - 92b48ab14 set builders assets option correctly for new applications

@​angular/build

Commit Description
fix - 3bb06c37d disable Worker wait loop for Sass compilations in web containers
fix - c4cf35923 print Sass @warn location
fix - 352879804 support valid self-closing MathML tags in HTML index file
fix - 476f3084a support valid self-closing SVG tags in HTML index file

@​angular/pwa

Commit Description
fix - acbffd236 set manifest icons location to match assets builder option

v18.0.1

18.0.1 (2024-05-23)

@​sche...

Description has been truncated

dependabot[bot] avatar Jun 16 '24 10:06 dependabot[bot]