Bump lodash, grunt-contrib-jshint, grunt-contrib-uglify and grunt-contrib-watch in /example

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps lodash to 4.17.21 and updates ancestor dependencies lodash, grunt-contrib-jshint, grunt-contrib-uglify and grunt-contrib-watch. These dependencies need to be updated together.

Updates lodash from 4.17.20 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
See full diff in compare view

Updates grunt-contrib-jshint from 0.11.3 to 3.2.0

Release notes

Sourced from grunt-contrib-jshint's releases.

v3.2.0

Merge pull request #307 from gruntjs/hotfix-main d9c3b35

Patch Update 3.1.1 f3eb299

https://github.com/gruntjs/grunt-contrib-jshint/compare/v3.1.0...v3.2.0

v3.1.1

Update to 3.1.1 ace956f

https://github.com/gruntjs/grunt-contrib-jshint/compare/v3.1.0...v3.1.1

v3.1.0

update jshint to ~2.13.0 b7edf02

Merge pull request #303 from gruntjs/dependabot/npm_and_yarn/path-parse-1.0.7 270d8dd

Bump path-parse from 1.0.6 to 1.0.7 77dca66

Merge pull request #301 from gruntjs/dependabot/npm_and_yarn/hosted-git-info-2.8.9 1028d82

Bump hosted-git-info from 2.8.8 to 2.8.9 eb0314f

Merge pull request #300 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.21 337623c

Bump lodash from 4.17.20 to 4.17.21 51e07d4

Merge pull request #299 from gruntjs/dependabot/npm_and_yarn/y18n-4.0.1 9c08ff1

Bump y18n from 4.0.0 to 4.0.1 7834701

Merge pull request #298 from gruntjs/dependabot/npm_and_yarn/ini-1.3.8 d4359aa

Bump ini from 1.3.5 to 1.3.8 52f5e31

Add changelog 8f597c2

Merge pull request #275 from raddevon/patch-1 fc210e7

Merge pull request #297 from gruntjs/peer-dep 03f4302

Remove Grunt peerDependency 01d13d2

Merge pull request #296 from gruntjs/chalk-upt c78f6ee

Update chalk 656f31b

Merge pull request #295 from gruntjs/uptdate-deps-oct 16ee83d

Update dependencies, switch to github actions df2b06d

Merge pull request #291 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.15 9bb54cd

Bump lodash from 4.17.10 to 4.17.15 d2e4063

Ensures errors in stdoutEqual callback are logged 7a6fec4

https://github.com/gruntjs/grunt-contrib-jshint/compare/v2.1.0...v3.1.0

v2.0.0

Bump devDependencies.

Drop Node.js < 6 support.

v1.1.0

No release notes provided.

v1.0.0

No release notes provided.

v0.12.0

No release notes provided.

Changelog

Sourced from grunt-contrib-jshint's changelog.

v3.2.0: date: 2022-02-17 changes: - Bump dependencies, including jshint. v3.0.0: date: 2020-10-20 changes: - Bump dependencies. - Switch to GitHub actions. - Ensures errors in stdoutEqual callback are logged. - Requires Node 10+. v2.1.0: date: 2019-03-18 changes: - Bump dependencies. - Update to latest JSHint v2.0.0: date: 2018-09-22 changes: - Bump devDependencies. - Drop Node.js < 6 support. v1.1.0: date: 2016-11-23 changes: - Fix relative output - Bump minor version v1.0.0: date: 2016-02-16 changes: - Replace String prototype colors with chalk. - Update Grunt peerDep to >=0.4.0. v0.12.0: date: 2016-01-17 changes: - Update to JSHint ~2.9.0.

Commits

d9c3b35 Merge pull request #307 from gruntjs/hotfix-main
f3eb299 Patch Update 3.1.1
1910674 3.1.0
b7edf02 update jshint to ~2.13.0
270d8dd Merge pull request #303 from gruntjs/dependabot/npm_and_yarn/path-parse-1.0.7
77dca66 Bump path-parse from 1.0.6 to 1.0.7
1028d82 Merge pull request #301 from gruntjs/dependabot/npm_and_yarn/hosted-git-info-...
eb0314f Bump hosted-git-info from 2.8.8 to 2.8.9
337623c Merge pull request #300 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.21
51e07d4 Bump lodash from 4.17.20 to 4.17.21
Additional commits viewable in compare view

Updates grunt-contrib-uglify from 0.9.2 to 5.2.2

Release notes

Sourced from grunt-contrib-uglify's releases.

v5.2.2

Set dev version for publish df82903

update dependencies (#572) 70b6eb7

Bump ejs from 3.1.6 to 3.1.8 (#570) a285b24

Bump grunt from 1.5.2 to 1.5.3 (#569) 4415d58

Update README.md efdabc7

https://github.com/gruntjs/grunt-contrib-uglify/compare/v5.2.1...v5.2.2

v5.2.1

Update Readme 3c8d904

update dependencies (#568) 0850dcd

Bump minimist from 1.2.5 to 1.2.6 (#567) c27ad5f

Fix documentation in relation to issue #565 (#566) 98b4c5f

Bump minimist from 1.2.5 to 1.2.6 (#563) 7228446

https://github.com/gruntjs/grunt-contrib-uglify/compare/v5.1.0...v5.2.1

v5.1.0

Update deps, v5.1.0 (#564) e410511

Update uglify-js to v3.15.2 (#562) 2cb31be

Fix wording in README.md (#560) 12ca0f2

Bump path-parse from 1.0.6 to 1.0.7 (#558) 1f6a012

Update uglify-js (#557) 0e4b1a0

Bump hosted-git-info from 2.8.8 to 2.8.9 (#556) 9ccf10d

https://github.com/gruntjs/grunt-contrib-uglify/compare/v5.0.1...v5.1.0

v5.0.1

Update uglify-js to v3.13.3.

v4.0.1

Update uglify-js to v3.5.0.

Update dependencies.

v4.0.0

Updated all dependencies.

Requires Node.js >= 6.

v3.4.0

No release notes provided.

v3.3.0

No release notes provided.

v3.2.1

No release notes provided.

v3.2.0

... (truncated)

Changelog

Sourced from grunt-contrib-uglify's changelog.

v5.1.0: date: 2022-03-27 changes: - Update dependencies. uglify-js ^3.15.2. - Requires node 12+. v5.0.0: date: 2020-07-16 changes: - Requires node 10+. - Update dependencies. v4.0.1: date: 2019-03-21 changes: - Update uglify-js to v3.5.0. - Update dependencies. v4.0.0: date: 2018-08-26 changes: - Update dependencies. - Requires Node.js >= 6. v3.4.0: date: 2018-07-29 changes: - Update uglify-js to v3.4.0. v3.3.0: date: 2017-12-24 changes: - Update uglify-js to v3.3.0. v3.2.1: date: 2017-11-26 changes: - Update uglify-js to v3.2.0. v3.1.0: date: 2017-09-11 changes: - Update uglify-js to v3.1.0. v3.0.1: date: 2017-05-20 changes: - Fix toplevel option. v3.0.0: date: 2017-05-12 changes: - Update uglify-js to v3.0.4. v2.3.0: date: 2017-04-05 changes: - Make CLI output less verbose. v2.2.1: date: 2017-03-31

... (truncated)

Commits

4a73c8a 5.2.2
df82903 Set dev version for publish
70b6eb7 update dependencies (#572)
a285b24 Bump ejs from 3.1.6 to 3.1.8 (#570)
4415d58 Bump grunt from 1.5.2 to 1.5.3 (#569)
efdabc7 Update README.md
a3f3f34 5.2.1
3c8d904 Update Readme
0850dcd update dependencies (#568)
c27ad5f Bump minimist from 1.2.5 to 1.2.6 (#567)
Additional commits viewable in compare view

Updates grunt-contrib-watch from 0.6.1 to 1.1.0

Changelog

Sourced from grunt-contrib-watch's changelog.

v1.1.0: date: 2018-05-12 changes: - Update to [email protected], [email protected], [email protected] v1.0.1: date: 2018-04-20 changes: - Update to [email protected], lodash@4 v1.0.0: date: 2016-03-12 changes: - Updated tiny-lr, gaze, async and lodash dependencies. - Fix endless loop issue with atBegin/nospawn. - Expose hostname parameter of tiny-lr. - Support cwd.event to emit events relative to path. - Removed peerDependencies setting.

Commits

3b7ddf4 v1.1.0
72b1214 Updating dependencies, async, lodash and tiny-lr
5adb27c Merge pull request #543 from digitalbazaar/master
6ec71e9 v1.0.1
7d20933 Update copyright year
e3d19df Update ci configs
d117574 Updating ci configs
99410a7 README.md: Fixed typos (#536)
f07311b Update tiny-lr dependency to 1.x
7f8cf80 Add local grunt-cli
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Oct 10 '22 17:10 dependabot[bot]