Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 6, 2024

Bumps the npm_and_yarn group with 3 updates in the / directory: moment, serve and webpack-dev-server.

Updates moment from 2.19.2 to 2.29.4

Changelog

Sourced from moment's changelog.

2.29.4

  • Release Jul 6, 2022
    • #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

  • Release Apr 17, 2022
    • #5995 [bugfix] Remove const usage
    • #5990 misc: fix advisory link

2.29.2 See full changelog

  • Release Apr 3 2022

Address GHSA-8hfj-j24r-96c4

2.29.1 See full changelog

  • Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

2.29.0 See full changelog

  • Release Sept 22, 2020

New locales (es-mx, bn-bd). Minor bugfixes and locale improvements. More tests. Moment is in maintenance mode. Read more at this link: https://momentjs.com/docs/#/-project-status/

2.28.0 See full changelog

  • Release Sept 13, 2020

Fix bug where .format() modifies original instance, and locale updates

2.27.0 See full changelog

  • Release June 18, 2020

Added Turkmen locale, other locale improvements, slight TypeScript fixes

2.26.0 See full changelog

  • Release May 19, 2020

... (truncated)

Commits

Updates serve from 6.4.1 to 10.1.2

Release notes

Sourced from serve's releases.

10.1.2

Patches

  • Use os.networkInterfaces() to detect network address: #492
  • Bumped serve-handler to latest version: #505

Credits

Huge thanks to @​saintwinkle for helping!

10.1.1

Patches

  • Properly encode redirect responses: #491

10.1.0

Minor Changes

  • Added support for compression: #487
  • Added NO_UPDATE_CHECK environment flag: #457
  • Brought back support for ephemeral port switching: #490

Patches

  • Bumped serve-handler to the latest version: #488
  • Deprecate support for now.json and package.json: #489

Credits

Huge thanks to @​leeyeh for helping!

10.0.2

Patches

  • Bumped serve-handler to the latest version: #480

10.0.1

Patches

  • Bumped @zeit/schemas to the latest version: #475

10.0.0

Major Changes

  • Bumped dependencies to the latest version: #468

9.6.0

Minor Changes

  • Added support for range requests: #465

... (truncated)

Commits

Updates webpack-dev-server from 1.16.5 to 5.1.0

Release notes

Sourced from webpack-dev-server's releases.

v5.1.0

5.1.0 (2024-09-03)

Features

  • add visual progress indicators (a8f40b7)
  • added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
  • allow the server option to be Function (#5275) (02a1c6d)
  • http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

v5.0.4

5.0.4 (2024-03-19)

Bug Fixes

v5.0.3

5.0.3 (2024-03-12)

Bug Fixes

v5.0.2

5.0.2 (2024-02-16)

Bug Fixes

v5.0.1

5.0.1 (2024-02-13)

Bug Fixes

... (truncated)

Changelog

Sourced from webpack-dev-server's changelog.

5.1.0 (2024-09-03)

Features

  • add visual progress indicators (a8f40b7)
  • added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
  • allow the server option to be Function (#5275) (02a1c6d)
  • http2 support for connect and connect compatibility frameworks which support HTTP2 (#5267) (6509a3f)

Bug Fixes

5.0.4 (2024-03-19)

Bug Fixes

5.0.3 (2024-03-12)

Bug Fixes

5.0.2 (2024-02-16)

Bug Fixes

5.0.1 (2024-02-13)

Bug Fixes

5.0.0 (2024-02-12)

... (truncated)

Commits
  • 5ee0d40 chore(release): v5.1.0
  • 02a1c6d feat: allow the server option to be Function (#5275)
  • 530db07 chore(deps): bump the dependencies group across 1 directory with 10 updates (...
  • 8b341cb fix: support devServer: false (#5272)
  • 06005e7 fix: ipv6 output (#5270)
  • 748d420 chore(deps-dev): bump the dependencies group with 2 updates (#5271)
  • c3b532c fix: check the platform property to determinate the target (#5269)
  • 6509a3f feat: http2 support for connect and connect compatibility frameworks whic...
  • 1b3d124 chore(deps): update (#5268)
  • f5f0902 fix: replace default gateway (#5255)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-dev-server since your current version.


Updates body-parser from 1.18.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

  • deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

New Contributors

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: [email protected]

1.20.1

1.20.0

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

  • deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: [email protected]

1.20.1 / 2022-10-06

1.20.0 / 2022-04-02

1.19.2 / 2022-02-15

1.19.1 / 2021-12-10

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates cookie from 0.3.1 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse

0.4.2

  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

0.4.1

  • Fix maxAge option to reject invalid values

0.4.0

  • Add SameSite=None support
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates express from 4.16.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates http-proxy-middleware from 0.17.4 to 2.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.7

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7

v2.0.7-beta.1

Full Changelog: chimurai/http-proxy-middleware@v2.0.7-beta.0...v2.0.7-beta.1

v2.0.7-beta.0

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7-beta.0

v2.0.6

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.5...v2.0.6

v2.0.5

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.4...v2.0.5

v2.0.4

What's Changed

New Contributors

Full Changelog: chimurai/http-proxy-middleware@v2.0.3...v2.0.4

v2.0.3

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.2...v2.0.3

v2.0.2

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.7

  • ci(github actions): add publish.yml
  • fix(filter): handle errors

v2.0.6

  • fix(proxyReqWs): catch socket errors (#763)

v2.0.5

  • fix(error handler): add default handler to econnreset (#759)

v2.0.4

  • fix(fix-request-body): improve content type check (#725) (kevinxh)

v2.0.3

  • feat(package): optional @​types/express peer dependency (#707)

v2.0.2

  • chore(deps): update @​types/http-proxy to 1.17.8 (#701)
  • fix(fixRequestBody): fix request body for empty JSON object requests (#640) (mhassan1)
  • fix(types): fix type regression (#700)

v2.0.1

v2.0.0

  • chore(package): drop node 10 [BREAKING CHANGE] (#577)

v1.3.1

  • fix(fix-request-body): make sure the content-type exists (#578) (oufeng)

v1.3.0

  • docs(response interceptor): align with nodejs default utf8 (#567)
  • feat: try to proxy body even after body-parser middleware (#492) (midgleyc)

v1.2.1

  • fix(response interceptor): proxy original response headers (#563)

... (truncated)

Commits
  • 1e92339 ci(github-actions): fix npm tag
  • 90afb7c chore(package): v2.0.7
  • 0b4274e fix(filter): handle errors
  • 1bd6dd5 ci(github actions): add publish.yml
  • c08cb1e chore(package): v2.0.6 (#764)
  • 3f48d50 fix(proxyReqWs): catch socket errors
  • f64c994 chore(package): v2.0.5
  • bd15913 fix(error handler): add default handler to econnreset
  • 4baae76 chore(package): v2.0.4 (#729)
  • 68bc6d7 fix(fix-request-body): improve content type check (#725)
  • Additional commits viewable in compare view

Updates http-proxy from 1.16.2 to 1.18.1

Release notes

Sourced from http-proxy's releases.

Long overdue maintenance

Due to some great contributions I'm happy to announce a new release of http-proxy containing numerous bug fixes, feature additions and documentation improvements. Thanks to all who contributed for their patience and willingness to contribute despite perceived stagnation in activity in the project. I welcome all contributions and those who are interested in getting more involved with the project. Below I will highlight the changes that landed in the latest version but you can find the full diff of the changes in nodejitsu/node-http-proxy#1251

  • Add option to rewrite path of set-cookie headers. @​swillis12
  • Add option for overriding http METHOD when proxying request @​AydinChavez
  • Feature: selfHandleResponse for taking responsibility in returning your own response when listening on the proxyRes event. @​cpd0101 @​guoxiangyang
  • Add followRedirects option @​n30n0v
  • Document timeout option @​jlaamanen
  • Fix documentation typos @​carpsareokiguess
  • Document buffer option @​jonhunter1977
  • Include websocket non-upgrade response instead of just closing the socket. Allows auth schemes to be possible with websocket proxying. @​Tigge
  • Stop using the writeHead method explicitly and let node handle it internally to prevent thrown errors @​jakefurler
  • Be more defensive in handling of detecting response state when proxying @​thiagobustamante
Changelog

Sourced from http-proxy's changelog.

v1.18.1 - 2020-05-17

Merged

1.18.0 - 2019-09-18

Merged

Commits

  • [dist] New test fixtures. 7e4a0e5
  • [dist] End of an era.

Bumps the npm_and_yarn group with 3 updates in the / directory: [moment](https://github.com/moment/moment), [serve](https://github.com/vercel/serve) and [webpack-dev-server](https://github.com/webpack/webpack-dev-server).


Updates `moment` from 2.19.2 to 2.29.4
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.19.2...2.29.4)

Updates `serve` from 6.4.1 to 10.1.2
- [Release notes](https://github.com/vercel/serve/releases)
- [Commits](vercel/serve@6.4.1...10.1.2)

Updates `webpack-dev-server` from 1.16.5 to 5.1.0
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v1.16.5...v5.1.0)

Updates `body-parser` from 1.18.2 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.18.2...1.20.3)

Updates `cookie` from 0.3.1 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.3.1...v0.7.1)

Updates `express` from 4.16.2 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.16.2...4.21.2)

Updates `http-proxy-middleware` from 0.17.4 to 2.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v0.17.4...v2.0.7)

Updates `http-proxy` from 1.16.2 to 1.18.1
- [Release notes](https://github.com/http-party/node-http-proxy/releases)
- [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md)
- [Commits](http-party/node-http-proxy@1.16.2...1.18.1)

Updates `open` from 0.0.5 to 10.1.0
- [Release notes](https://github.com/sindresorhus/open/releases)
- [Commits](https://github.com/sindresorhus/open/commits/v10.1.0)

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `send` from 0.16.1 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.16.1...0.19.0)

Updates `serve-static` from 1.13.1 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.13.1...v1.16.2)

Updates `sockjs` from 0.3.19 to 0.3.24
- [Release notes](https://github.com/sockjs/sockjs-node/releases)
- [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog)
- [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24)

Updates `webpack-dev-middleware` from 1.12.0 to 7.4.2
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v1.12.0...v7.4.2)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: serve
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-server
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: open
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sockjs
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants