Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the security group across 1 directory with 18 updates #4947

Merged
merged 1 commit into from
Oct 12, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 12, 2024

Bumps the security group with 18 updates in the /web directory:

Package From To
apexcharts 3.53.0 3.54.0
react-router-dom 6.26.2 6.27.0
universal-cookie 7.2.0 7.2.1
@aws-sdk/types 3.654.0 3.664.0
@babel/cli 7.25.6 7.25.7
@babel/core 7.25.2 7.25.8
@babel/eslint-parser 7.25.1 7.25.8
@babel/plugin-proposal-decorators 7.24.7 7.25.7
@babel/preset-env 7.25.4 7.25.8
@babel/preset-react 7.24.7 7.25.7
@babel/preset-typescript 7.24.7 7.25.7
@storybook/addon-links 8.3.3 8.3.5
@types/lodash 4.17.9 4.17.10
@types/react 18.3.10 18.3.11
@types/react-dom 18.3.0 18.3.1
eslint-plugin-import 2.30.0 2.31.0
eslint-plugin-react 7.37.0 7.37.1
sass 1.79.3 1.79.5

Updates apexcharts from 3.53.0 to 3.54.0

Release notes

Sourced from apexcharts's releases.

💎 Version 3.54.0

What's Changed

New Contributors

Full Changelog: apexcharts/apexcharts.js@v3.53.0...v3.54.0

Commits

Updates react-router-dom from 6.26.2 to 6.27.0

Release notes

Sourced from react-router-dom's releases.

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

Patch Changes

[email protected]

... (truncated)

Changelog

Sourced from react-router-dom's changelog.

6.27.0

Minor Changes

  • Stabilize unstable_patchRoutesOnNavigation (#11973)
    • Add new PatchRoutesOnNavigationFunctionArgs type for convenience (#11967)
  • Stabilize unstable_dataStrategy (#11974)
  • Stabilize the unstable_flushSync option for navigations and fetchers (#11989)
  • Stabilize the unstable_viewTransition option for navigations and the corresponding unstable_useViewTransitionState hook (#11989)

Patch Changes

  • Fix bug when submitting to the current contextual route (parent route with an index child) when an ?index param already exists from a prior submission (#12003)

  • Fix useFormAction bug - when removing ?index param it would not keep other non-Remix index params (#12003)

  • Fix types for RouteObject within PatchRoutesOnNavigationFunction's patch method so it doesn't expect agnostic route objects passed to patch (#11967)

  • Updated dependencies:

Commits

Updates universal-cookie from 7.2.0 to 7.2.1

Release notes

Sourced from universal-cookie's releases.

v7.2.1

What's Changed

... (truncated)

Commits
  • 4b1ad19 Release v7.2.1 (#701)
  • bd60921 fix(deps): update dependency express to ^4.21.1 (#699)
  • ee3ca53 chore(deps): update dependency typescript to ^5.6.3 (#698)
  • 02c765b chore(deps): update dependency @​playwright/test to ^1.48.0 (#697)
  • 40f0ebc chore(deps): update dependency @​types/node to ^20.16.11 (#695)
  • 122fc1f chore(deps): update actions/checkout digest to eef6144 (#694)
  • 918e98f fix(deps): update dependency cookie to ^0.7.2 (#692)
  • 9bfdb70 chore(deps): lock file maintenance (#690)
  • 4a68dda fix(deps): update dependency cookie to ^0.7.1 (#689)
  • 0d565c6 fix(deps): update dependency cookie to ^0.7.0 (#688)
  • Additional commits viewable in compare view

Updates @aws-sdk/types from 3.654.0 to 3.664.0

Release notes

Sourced from @​aws-sdk/types's releases.

v3.664.0

3.664.0(2024-10-03)

Chores
  • middleware-user-agent: update to user agent 2.1 spec (#6536) (f783a426)
New Features
  • clients: update client endpoints as of 2024-10-03 (f9df4408)
  • client-codepipeline: AWS CodePipeline introduces Commands action that enables you to easily run shell commands as part of your pipeline execution. (4435e7f8)
  • client-ec2: This release includes a new API for modifying instance cpu-options after launch. (a29a5e44)
  • client-marketplace-reporting: The AWS Marketplace Reporting service introduces the GetBuyerDashboard API. This API returns a dashboard that provides visibility into your organization's AWS Marketplace agreements and associated spend across the AWS accounts in your organization. (a7f70bec)
  • client-mediapackagev2: Added support for ClipStartTime on the FilterConfiguration object on OriginEndpoint manifest settings objects. Added support for EXT-X-START tags on produced HLS child playlists. (efe97754)
  • client-quicksight: QuickSight: Add support for exporting and importing folders in AssetBundle APIs (9060d22e)
  • client-connect: Public GetMetricDataV2 Grouping increase from 3 to 4 (7f9f812b)
  • client-iot: This release adds support for Custom Authentication with X.509 Client Certificates, support for Custom Client Certificate validation, and support for selecting application protocol and authentication type without requiring TLS ALPN for customer's AWS IoT Domain Configurations. (795bda90)
  • middleware-user-agent: add client config for userAgentAppId (#6524) (2990ea8f)
  • scripts: add test:e2e:legacy:preview (#6538) (9196552b)
Bug Fixes
  • scripts: process commits since origin/main in test:e2e:legacy:preview (#6539) (56b76f47)
Tests

For list of updated packages, view updated-packages.md in assets-3.664.0.zip

v3.663.0

3.663.0(2024-10-02)

Documentation Changes
  • client-workspaces: WSP is being rebranded to become DCV. (525e37e4)
New Features
  • clients: update client endpoints as of 2024-10-02 (9a58dedd)
  • client-b2bi: Added and updated APIs to support outbound EDI transformations (5dd5cd26)
  • client-sagemaker: releasing builtinlcc to public (5951f8e6)
  • client-iotdeviceadvisor: Add clientToken attribute and implement idempotency for CreateSuiteDefinition. (3b3ce335)
  • client-bedrock-runtime: Added new fields to Amazon Bedrock Guardrails trace (cea05130)
  • client-s3: This release introduces a header representing the minimum object size limit for Lifecycle transitions. (a692f70c)
  • client-ivs-realtime: Adds new Stage Health EventErrorCodes applicable to RTMP(S) broadcasts. Bug Fix: Enforces that EncoderConfiguration Video height and width must be even-number values. (5d52b43a)
  • client-bedrock-agent-runtime: Added raw model response and usage metrics to PreProcessing and PostProcessing Trace (9326e191)

... (truncated)

Changelog

Sourced from @​aws-sdk/types's changelog.

3.664.0 (2024-10-03)

Note: Version bump only for package @​aws-sdk/types

3.662.0 (2024-10-01)

Bug Fixes

  • s3-request-presigner: enable overriding hoistable headers (#6535) (3c2e59c)
Commits

Updates @babel/cli from 7.25.6 to 7.25.7

Release notes

Sourced from @​babel/cli's releases.

v7.25.7 (2024-10-02)

Thanks @​DylanPiercey and @​YuHyeonWook for your first PRs!

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

Committers: 8

Changelog

Sourced from @​babel/cli's changelog.

v7.25.7 (2024-10-02)

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

Commits

Updates @babel/core from 7.25.2 to 7.25.8

Release notes

Sourced from @​babel/core's releases.

v7.25.8 (2024-10-10)

🐛 Bug Fix

🏠 Internal

  • babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

Committers: 3

v7.25.7 (2024-10-02)

Thanks @​DylanPiercey and @​YuHyeonWook for your first PRs!

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.25.8 (2024-10-10)

🐛 Bug Fix

🏠 Internal

  • babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

v7.25.7 (2024-10-02)

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

v7.25.6 (2024-08-29)

🐛 Bug Fix

... (truncated)

Commits

Updates @babel/eslint-parser from 7.25.1 to 7.25.8

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.25.8 (2024-10-10)

🐛 Bug Fix

🏠 Internal

  • babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

Committers: 3

Bumps the security group with 18 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [apexcharts](https:/apexcharts/apexcharts.js) | `3.53.0` | `3.54.0` |
| [react-router-dom](https:/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `6.26.2` | `6.27.0` |
| [universal-cookie](https:/bendotcodes/cookies) | `7.2.0` | `7.2.1` |
| [@aws-sdk/types](https:/aws/aws-sdk-js-v3/tree/HEAD/packages/types) | `3.654.0` | `3.664.0` |
| [@babel/cli](https:/babel/babel/tree/HEAD/packages/babel-cli) | `7.25.6` | `7.25.7` |
| [@babel/core](https:/babel/babel/tree/HEAD/packages/babel-core) | `7.25.2` | `7.25.8` |
| [@babel/eslint-parser](https:/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.25.1` | `7.25.8` |
| [@babel/plugin-proposal-decorators](https:/babel/babel/tree/HEAD/packages/babel-plugin-proposal-decorators) | `7.24.7` | `7.25.7` |
| [@babel/preset-env](https:/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.4` | `7.25.8` |
| [@babel/preset-react](https:/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.24.7` | `7.25.7` |
| [@babel/preset-typescript](https:/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.24.7` | `7.25.7` |
| [@storybook/addon-links](https:/storybookjs/storybook/tree/HEAD/code/addons/links) | `8.3.3` | `8.3.5` |
| [@types/lodash](https:/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.9` | `4.17.10` |
| [@types/react](https:/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.10` | `18.3.11` |
| [@types/react-dom](https:/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.0` | `18.3.1` |
| [eslint-plugin-import](https:/import-js/eslint-plugin-import) | `2.30.0` | `2.31.0` |
| [eslint-plugin-react](https:/jsx-eslint/eslint-plugin-react) | `7.37.0` | `7.37.1` |
| [sass](https:/sass/dart-sass) | `1.79.3` | `1.79.5` |



Updates `apexcharts` from 3.53.0 to 3.54.0
- [Release notes](https:/apexcharts/apexcharts.js/releases)
- [Commits](apexcharts/apexcharts.js@v3.53.0...v3.54.0)

Updates `react-router-dom` from 6.26.2 to 6.27.0
- [Release notes](https:/remix-run/react-router/releases)
- [Changelog](https:/remix-run/react-router/blob/[email protected]/packages/react-router-dom/CHANGELOG.md)
- [Commits](https:/remix-run/react-router/commits/[email protected]/packages/react-router-dom)

Updates `universal-cookie` from 7.2.0 to 7.2.1
- [Release notes](https:/bendotcodes/cookies/releases)
- [Changelog](https:/bendotcodes/cookies/blob/main/LEGACY-CHANGELOG.md)
- [Commits](bendotcodes/cookies@v7.2.0...v7.2.1)

Updates `@aws-sdk/types` from 3.654.0 to 3.664.0
- [Release notes](https:/aws/aws-sdk-js-v3/releases)
- [Changelog](https:/aws/aws-sdk-js-v3/blob/main/packages/types/CHANGELOG.md)
- [Commits](https:/aws/aws-sdk-js-v3/commits/v3.664.0/packages/types)

Updates `@babel/cli` from 7.25.6 to 7.25.7
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.7/packages/babel-cli)

Updates `@babel/core` from 7.25.2 to 7.25.8
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.8/packages/babel-core)

Updates `@babel/eslint-parser` from 7.25.1 to 7.25.8
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.8/eslint/babel-eslint-parser)

Updates `@babel/plugin-proposal-decorators` from 7.24.7 to 7.25.7
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.7/packages/babel-plugin-proposal-decorators)

Updates `@babel/preset-env` from 7.25.4 to 7.25.8
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.8/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.24.7 to 7.25.7
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.7/packages/babel-preset-react)

Updates `@babel/preset-typescript` from 7.24.7 to 7.25.7
- [Release notes](https:/babel/babel/releases)
- [Changelog](https:/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https:/babel/babel/commits/v7.25.7/packages/babel-preset-typescript)

Updates `@storybook/addon-links` from 8.3.3 to 8.3.5
- [Release notes](https:/storybookjs/storybook/releases)
- [Changelog](https:/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https:/storybookjs/storybook/commits/v8.3.5/code/addons/links)

Updates `@types/lodash` from 4.17.9 to 4.17.10
- [Release notes](https:/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https:/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `@types/react` from 18.3.10 to 18.3.11
- [Release notes](https:/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https:/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.0 to 18.3.1
- [Release notes](https:/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https:/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint-plugin-import` from 2.30.0 to 2.31.0
- [Release notes](https:/import-js/eslint-plugin-import/releases)
- [Changelog](https:/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.30.0...v2.31.0)

Updates `eslint-plugin-react` from 7.37.0 to 7.37.1
- [Release notes](https:/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https:/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.0...v7.37.1)

Updates `sass` from 1.79.3 to 1.79.5
- [Release notes](https:/sass/dart-sass/releases)
- [Changelog](https:/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.79.3...1.79.5)

---
updated-dependencies:
- dependency-name: apexcharts
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: react-router-dom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: universal-cookie
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@aws-sdk/types"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/eslint-parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/plugin-proposal-decorators"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/preset-react"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/preset-typescript"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@storybook/addon-links"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/lodash"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/react-dom"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: eslint-plugin-react
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code type::security labels Oct 12, 2024
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit f1e8464 into main Oct 12, 2024
122 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-6703e525fa branch October 12, 2024 06:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot javascript Pull requests that update Javascript code type::security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant