Bump the npm_and_yarn group across 4 directories with 15 updates

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps the npm_and_yarn group with 4 updates in the /contracts directory: cross-fetch, get-func-name, json5 and node-fetch. Bumps the npm_and_yarn group with 4 updates in the /contracts/examples/hello-world directory: cross-fetch, get-func-name, json5 and @solana/web3.js. Bumps the npm_and_yarn group with 13 updates in the /gauntlet directory:

Package	From	To
cross-fetch	`3.1.4`	`3.1.8`
json5	`2.2.0`	`2.2.3`
minimatch	`3.0.4`	`3.1.2`
@solana/web3.js	`1.50.1`	`1.50.2`
pkg	`5.4.1`	`5.8.1`
protobufjs	`6.11.2`	`6.11.4`
@babel/traverse	`7.16.3`	`7.24.1`
@sideway/formula	`3.0.0`	`3.0.1`
decode-uri-component	`0.2.0`	`0.2.2`
follow-redirects	`1.14.9`	`1.15.6`
semver	`5.7.1`	`5.7.2`
tough-cookie	`4.0.0`	`4.1.3`
word-wrap	`1.2.3`	`1.2.5`

Bumps the npm_and_yarn group with 8 updates in the /ts directory:

Package	From	To
cross-fetch	`3.1.4`	`3.1.8`
json5	`2.2.1`	`2.2.3`
minimatch	`3.0.4`	`3.1.2`
@solana/web3.js	`1.50.1`	`1.50.2`
@babel/traverse	`7.17.3`	`7.24.1`
semver	`6.3.0`	`6.3.1`
tough-cookie	`4.0.0`	`4.1.3`
word-wrap	`1.2.3`	`1.2.5`

Updates cross-fetch from 3.1.5 to 3.1.8

Release notes

Sourced from cross-fetch's releases.

v3.1.8

What's Changed

Restored caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.7...v3.1.8

v3.1.7

What's Changed

Updated node-fetch version to 2.6.12

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.6...v3.1.7

v3.1.6

What's Changed

Updated node-fetch version to 2.6.11

Added caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.5...v3.1.6

Changelog

Sourced from cross-fetch's changelog.

3.1.8 (2023-07-02)

Bug Fixes

restored caret on node-fetch version (6669927)

3.1.7 (2023-07-01)

3.1.6 (2023-05-14)

Features

allowed minor and patch update of node-fetch (#132) (425395b), closes #129

Bug Fixes

fixed ESTree.StaticBlock error (a66f21b)

Commits

0922089 chore(release): 3.1.8
6669927 fix: restored caret on node-fetch version
ff14bdd chore: improved release script
d625e0d chore: release workflow now uses .nvmrc
098ed1e chore: improved release workflow
cc2663b chore(release): 3.1.7
7c1fdde chore: updated node-fetch to 2.6.12
e298dbb chore: reordered if statement
81049e1 chore: removed github publish pipeline
a80be7c chore: removed console log from specs
Additional commits viewable in compare view

Updates get-func-name from 2.0.0 to 2.0.2

Release notes

Sourced from get-func-name's releases.

v2.0.2

What's Changed

Revert previous changes that shipped this as an ES module.

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.2

v2.0.1

What's Changed

Fix https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.1

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by keithamus, a new releaser for get-func-name since your current version.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates node-fetch from 2.6.7 to 2.7.0

Release notes

Sourced from node-fetch's releases.

v2.7.0

2.7.0 (2023-08-23)

Features

AbortError (#1744) (9b9d458)

v2.6.13

2.6.13 (2023-08-18)

Bug Fixes

Remove the default connection close header (#1765) (65ae25a), closes #1735 #1473 #1736

v2.6.12

2.6.12 (2023-06-29)

Bug Fixes

socket variable testing for undefined (#1726) (8bc3a7c)

v2.6.11

2.6.11 (2023-05-09)

Reverts

Revert "fix: handle bom in text and json (#1739)" (#1741) (afb36f6), closes #1739 #1741

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

handle bom in text and json (#1739) (29909d7)

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

"global is not defined" (#1704) (70f592d)

v2.6.8

2.6.8 (2023-01-13)

... (truncated)

Commits

9b9d458 feat: AbortError (#1744)
65ae25a fix: Remove the default connection close header (#1765)
8bc3a7c fix: socket variable testing for undefined (#1726)
afb36f6 Revert "fix: handle bom in text and json (#1739)" (#1741)
29909d7 fix: handle bom in text and json (#1739)
70f592d fix: "global is not defined" (#1704)
0f1ebb0 Prevent error when response is null (#1699)
6e9464d ci(release): install dependencies
dd2a0ba ci(release): install dependencies
49bef02 ci(release): use latest Node LTS
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.

Updates cross-fetch from 3.1.4 to 3.1.8

Release notes

Sourced from cross-fetch's releases.

v3.1.8

What's Changed

Restored caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.7...v3.1.8

v3.1.7

What's Changed

Updated node-fetch version to 2.6.12

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.6...v3.1.7

v3.1.6

What's Changed

Updated node-fetch version to 2.6.11

Added caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.5...v3.1.6

Changelog

Sourced from cross-fetch's changelog.

3.1.8 (2023-07-02)

Bug Fixes

restored caret on node-fetch version (6669927)

3.1.7 (2023-07-01)

3.1.6 (2023-05-14)

Features

allowed minor and patch update of node-fetch (#132) (425395b), closes #129

Bug Fixes

fixed ESTree.StaticBlock error (a66f21b)

Commits

0922089 chore(release): 3.1.8
6669927 fix: restored caret on node-fetch version
ff14bdd chore: improved release script
d625e0d chore: release workflow now uses .nvmrc
098ed1e chore: improved release workflow
cc2663b chore(release): 3.1.7
7c1fdde chore: updated node-fetch to 2.6.12
e298dbb chore: reordered if statement
81049e1 chore: removed github publish pipeline
a80be7c chore: removed console log from specs
Additional commits viewable in compare view

Updates get-func-name from 2.0.0 to 2.0.2

Release notes

Sourced from get-func-name's releases.

v2.0.2

What's Changed

Revert previous changes that shipped this as an ES module.

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.2

v2.0.1

What's Changed

Fix https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5

Full Changelog: https://github.com/chaijs/get-func-name/commits/v2.0.1

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by keithamus, a new releaser for get-func-name since your current version.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates node-fetch from 2.6.1 to 2.7.0

Release notes

Sourced from node-fetch's releases.

v2.7.0

2.7.0 (2023-08-23)

Features

AbortError (#1744) (9b9d458)

v2.6.13

2.6.13 (2023-08-18)

Bug Fixes

Remove the default connection close header (#1765) (65ae25a), closes #1735 #1473 #1736

v2.6.12

2.6.12 (2023-06-29)

Bug Fixes

socket variable testing for undefined (#1726) (8bc3a7c)

v2.6.11

2.6.11 (2023-05-09)

Reverts

Revert "fix: handle bom in text and json (#1739)" (#1741) (afb36f6), closes #1739 #1741

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

handle bom in text and json (#1739) (29909d7)

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

"global is not defined" (#1704) (70f592d)

v2.6.8

2.6.8 (2023-01-13)

... (truncated)

Commits

9b9d458 feat: AbortError (#1744)
65ae25a fix: Remove the default connection close header (#1765)
8bc3a7c fix: socket variable testing for undefined (#1726)
afb36f6 Revert "fix: handle bom in text and json (#1739)" (#1741)
29909d7 fix: handle bom in text and json (#1739)
70f592d fix: "global is not defined" (#1704)
0f1ebb0 Prevent error when response is null (#1699)
6e9464d ci(release): install dependencies
dd2a0ba ci(release): install dependencies
49bef02 ci(release): use latest Node LTS
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.

Updates @solana/web3.js from 1.36.0 to 1.91.6

Release notes

Sourced from @solana/web3.js's releases.

v1.91.6

1.91.6 (2024-04-17)

Bug Fixes

revert use of internal fast-stable-stringify in legacy library (#2509) (7d3adbb)

v1.91.5

1.91.5 (2024-04-17)

Bug Fixes

use our version of fast-stable-stringify everywhere (#2504) (18d6b56)

v1.91.4

1.91.4 (2024-04-03)

Bug Fixes

downshift preflightCommitment to processed when bypassing preflight checks (#2415) (c801637)

v1.91.3

1.91.3 (2024-04-01)

Bug Fixes

bounds check (77d9352)

v1.91.2

1.91.2 (2024-03-26)

Reverts

Revert "Show no Turbo logs except when there is an error (#2366)" (#2385) (50fe84e), closes #2366 #2385

v1.91.1

1.91.1 (2024-03-13)

Bug Fixes

splice bytes in-place when reading buffers (#2315) (650707b)

v1.91.0

1.91.0 (2024-03-07)

... (truncated)

Commits

7d3adbb fix: revert use of internal fast-stable-stringify in legacy library (#2509)
d4a93ce chore: bump @babel/plugin-transform-private-property-in-object (#2431)
18d6b56 fix: use our version of fast-stable-stringify everywhere (#2504)
e4475ef Format README of @solana/fast-stable-stringify (#2503)
5ed19c6 Add types to @solana/fast-stable-stringify (#2502)
f396267 Copy over fast-stable-stringify tests from source (#2501)
0bcc0ca chore: bump @babel/plugin-transform-runtime from 7.23.7 to 7.24.3 (#2432)
51216ee Restore original author to license file for @solana/fast-stable-stringify (...
96a4894 Actually run CI on the right versions of Node (#2499)
82c57c6 Use native WebSocket in server runtimes that support it (#2500)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lorisleiva, a new releaser for @solana/web3.js since your current version.

Updates cross-fetch from 3.1.4 to 3.1.8

Release notes

Sourced from cross-fetch's releases.

v3.1.8

What's Changed

Restored caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.7...v3.1.8

v3.1.7

What's Changed

Updated node-fetch version to 2.6.12

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.6...v3.1.7

v3.1.6

What's Changed

Updated node-fetch version to 2.6.11

Added caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: https://github.com/lquixada/cross-fetch/compare/v3.1.5...v3.1.6

Changelog

Sourced from cross-fetch's changelog.

3.1.8 (2023-07-02)

Bug Fixes

restored caret on node-fetch version (6669927)

3.1.7 (2023-07-01)

3.1.6 (2023-05-14)

Features

allowed minor and patch update of node-fetch (#132) (425395b), closes #129

Bug Fixes

fixed ESTree.StaticBlock error (a66f21b)

Commits

0922089 chore(release): 3.1.8
6669927 fix: restored caret on node-fetch version
ff14bdd chore: improved release script
d625e0d chore: release workflow now uses .nvmrc
098ed1e chore: improved release workflow
cc2663b chore(release): 3.1.7
7c1fdde chore: updated node-fetch to 2.6.12
e298dbb chore: reordered if statement
81049e1 chore: removed github publish pipeline
a80be7c chore: removed console log from specs
Additional commits viewable in compare view

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates minimatch from 3.0.4 to 3.1.2

Commits

699c459 3.1.2
2f2b5ff fix: trim pattern
25d7c0d 3.1.1
55dda29 fix: treat nocase:true as always having magic
5e1fb8d 3.1.0
f8145c5 Add 'allowWindowsEscape' option
570e8b1 add publishConfig for v3 publishes
5b7cd33 3.0.6
20b4b56 [fix] revert all breaking syntax changes
2ff0388 document, expose, and test 'partial:true' option
Additional commits viewable in compare view

Updates node-fetch from 2.6.1 to 2.6.6

Release notes

Sourced from node-fetch's releases.

v2.7.0

2.7.0 (2023-08-23)

Features

AbortError (#1744) (9b9d458)

v2.6.13

2.6.13 (2023-08-18)

Bug Fixes

Remove the default connection close header (#1765) (65ae25a), closes #1735 #1473 #1736

v2.6.12

2.6.12 (2023-06-29)

Bug Fixes

socket variable testing for undefined (#1726) (8bc3a7c)

v2.6.11

2.6.11 (2023-05-09)

Reverts

Revert "fix: handle bom in text and json (#1739)" (#1741) (afb36f6), closes #1739 #1741

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

handle bom in text and json (#1739) (29909d7)

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

"global is not defined" (#1704) (70f592d)

v2.6.8

2.6.8 (2023-01-13)

... (truncated)

Commits

9b9d458 feat: AbortError (#1744)
65ae25a fix: Remove the default connection close header (#1765)
8bc3a7c fix: socket variable testing for undefined (#1726)
afb36f6 Revert "fix: handle bom in text and json (#1739)" (#1741)
29909d7 fix: handle bom in text and json (#1739)
70f592d fix: "global is not defined" (#1704)
0f1ebb0 Prevent error when response is null (#1699)
6e9464d ci(release): install dependencies
dd2a0ba ci(release): install dependencies
49bef02 ci(release): use latest Node LTS
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.

Updates @solana/web3.js from 1.50.1 to 1.50.2

Release notes

Sourced from @solana/web3.js's releases.

v1.91.6

1.91.6 (2024-04-17)

Bug Fixes

revert use of internal fast-stable-stringify in legacy library (#2509) (7d3adbb)

v1.91.5

1.91.5 (2024-04-17)

Bug Fixes

use our version of fast-stable-stringify everywhere (#2504) (18d6b56)

v1.91.4

1.91.4 (2024-04-03)

Bug Fixes

downshift preflightCommitment to processed when bypassing preflight checks (#2415) (c801637)

v1.91.3

1.91.3 (2024-04-01)

Bug Fixes

bounds check (77d9352)

v1.91.2

1.91.2 (2024-03-26)

Reverts

Revert "Show no Turbo logs except when there is an error (#2366)" (#2385) (50fe84e), closes #2366 #2385

v1.91.1

1.91.1 (2024-03-13)

Bug Fixes

splice bytes in-place when reading buffers (#2315) (650707b)

v1.91.0

1.91.0 (2024-03-07)

... (truncated)

Commits

7d3adbb fix: revert use of internal fast-stable-stringify in legacy library (#2509)
d4a93ce chore: bump @babel/plugin-transform-private-property-in-object (#2431)
18d6b56 fix: use our version of fast-stable-stringify everywhere (#2504)
e4475ef Format README of @solana/fast-stable-stringify (#2503)
5ed19c6 Add types to @solana/fast-stable-stringify (#2502)
f396267 Copy over fast-stable-stringify tests from source (#2501)
0bcc0ca chore: bump @babel/plugin-transform-runtime from 7.23.7 to 7.24.3 (#2432)
51216ee Restore original author to license file for @solana/fast-stable-stringify (...
96a4894 Actually run CI on the right versions of Node (#2499)
82c57c6 Use native WebSocket in server runtimes that support it (#2500)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lorisleiva, a new releaser for @solana/web3.js since your current version.

Updates pkg from 5.4.1 to 5.8.1

Release notes

Sourced from pkg's releases.

5.8.1

Patches

Producer: properly call "prebuild-install" if N-API is used: dd9de59c9fca2751bf5d22b57bd9b03d43e85e80

Chore: clean up obsolete eslint disable comments: #1760

Chore: add prettier check in linting step: #1764

Chore: separate individual test scripts: #1759

Chore: use @types/babel__generator package: #1755

Chore: remove unused entry: #1766

Chore: upgrade actions runners: #1767

Style: fix typo in test-99-#1192/main.js: #1790

Chore: bump [email protected]: #1788

Fix: add force flag to codesign to avoid already signed error: #1756

Credits

Huge thanks to @ignatiusmb, @eltociear, @PraveenAnaparthi, and @brianunlam for helping!

5.8.0

Highlights

Support more language features, including but not limited to classPrivateMethods (#1248, #1249)

Note: pkg uses Babel to trace dependencies. It does NOT transform your sources. You should make sure that your code can run on the target Node.js version.

What's Changed

Bump to vercel/[email protected] by @jesec in vercel/pkg#1693

Add Node 14.20.0, 16.16.0 and 18.5.0 binaries

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases

detector: use Babel AST and default plugins by @jesec in Description%20has%20been%20truncated
%0A" rel="nofollow" target="_blank" >

Apr 17 '24 21:04 dependabot[bot]