Bump the npm_and_yarn group across 2 directories with 11 updates#2
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the npm_and_yarn group across 2 directories with 11 updates#2dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `9.3.9` | `10.4.16` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `9.3.9` | `11.1.18` | | [multer](https://github.com/expressjs/multer) | `1.4.5-lts.1` | `2.1.1` | | [axios](https://github.com/axios/axios) | `1.3.4` | `1.18.0` | | [diff](https://github.com/kpdecker/jsdiff) | `4.0.2` | `4.0.4` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | Bumps the npm_and_yarn group with 3 updates in the /docs/site directory: [flatted](https://github.com/WebReflection/flatted), [js-yaml](https://github.com/nodeca/js-yaml) and [micromatch](https://github.com/micromatch/micromatch). Updates `@nestjs/common` from 9.3.9 to 10.4.16 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v10.4.16/packages/common) Updates `@nestjs/core` from 9.3.9 to 11.1.18 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.18/packages/core) Updates `multer` from 1.4.5-lts.1 to 2.1.1 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v1.4.5-lts.1...v2.1.1) Updates `axios` from 1.3.4 to 1.18.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.3.4...v1.18.0) Updates `diff` from 4.0.2 to 4.0.4 - [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md) - [Commits](kpdecker/jsdiff@v4.0.2...v4.0.4) Updates `follow-redirects` from 1.15.2 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.2...v1.16.0) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `flatted` from 3.2.6 to 3.4.2 - [Commits](WebReflection/flatted@v3.2.6...v3.4.2) Updates `js-yaml` from 4.1.0 to 4.2.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `markdown-it` from 12.3.2 to 14.1.1 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@12.3.2...14.1.1) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 10.4.16 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@nestjs/core" dependency-version: 11.1.18 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-version: 1.18.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: diff dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-version: 4.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-it dependency-version: 14.1.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 6 updates in the / directory:
9.3.910.4.169.3.911.1.181.4.5-lts.12.1.11.3.41.18.04.0.24.0.42.3.12.3.2Bumps the npm_and_yarn group with 3 updates in the /docs/site directory: flatted, js-yaml and micromatch.
Updates
@nestjs/commonfrom 9.3.9 to 10.4.16Release notes
Sourced from @nestjs/common's releases.
... (truncated)
Commits
6c8aec6chore(@nestjs) publish v10.4.16 release2b9e132chore: update outdated tests, make file-type optionalcb0d650chore: remove duplicate packages6196ab2Merge branch 'Chathula-fix-nestjs-common-mime-validator'0ac7959chore: minor tweaks312a54aUpdate packages/common/pipes/file/file-type.validator.tsa28fc03refactor(common): move back file type validator options type07b4b38refactor(common): move file-type package to peer dependencies0b7af8arefactor(common): refactor code to use simple eval6953b7afix(common): used eval importUpdates
@nestjs/corefrom 9.3.9 to 11.1.18Release notes
Sourced from @nestjs/core's releases.
... (truncated)
Commits
3c1cc5fchore(release): publish v11.1.18 release0f962c7fix(core): sanitize sse message94aa424Merge pull request #16679 from nestjs/renovate/path-to-regexp-8.x368691cfix(core): prevent injector hang when design:paramtypes is missing25d4fdefix(deps): update dependency path-to-regexp to v8.4.25c0b11efix(deps): update dependency path-to-regexp to v8.4.1f7d4460Merge pull request #16637 from JakobStaudinger/moduleref-create-transient-sco...d0a9dc9fix(deps): update dependency path-to-regexp to v8.4.04677434feat(core): exportIEntryNestModuletype7493b94fix(core): dependency injection edge case with moduleref.createUpdates
multerfrom 1.4.5-lts.1 to 2.1.1Release notes
Sourced from multer's releases.
... (truncated)
Changelog
Sourced from multer's changelog.
Commits
368c8a12.1.1 (#1380)7e66481🐛 fix recursion issue643571e✅ add explicit test for client able to send body without abrupt disconnecte86fa52fix error/abort handlingca37779chore(deps): bump actions/checkout from 4.1.1 to 6.0.2 (#1374)13088f4chore(deps): bump actions/upload-artifact from 4.5.0 to 7.0.0 (#1375)bc6a1d1chore(deps): bump github/codeql-action from 3.24.7 to 4.32.4 (#1376)c496e93chore(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#1377)fa173d3chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#1378)17d7f51chore: add node version to 25.x in CIMaintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for multer since your current version.
Updates
axiosfrom 1.3.4 to 1.18.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
2d06f96chore(release): prepare release 1.18.0 (#11003)32fc489fix: malformed http urls (#11000)b40ce49chore(deps-dev): bump the development_dependencies group with 10 updates (#10...fe964f9docs: mark proxy config as Node.js only (#10995)5f229d2chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions ...fae9d4edocs: clarify package update PR policy (#10992)28ab2cechore(deps-dev): bump the development_dependencies group with 2 updates (#10989)a8e4f13fix(core): keep default validateStatus when request passes undefined (#10899)614f455docs: publish v1.17.0 release notes (#10988)6bb12c1fix: custom auth headers not stripped on cross-origin redirects (#10892)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for axios since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
difffrom 4.0.2 to 4.0.4Changelog
Sourced from diff's changelog.
Commits
f06f3e4v4.0.40179a48v4.0.34568caeBackport kpdecker/jsdiff#6494de0ffaBackport kpdecker/jsdiff#647Maintainer changes
This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.
Updates
follow-redirectsfrom 1.15.2 to 1.16.0Commits
0c23a22Release version 1.16.0 of the npm package.844c4d3Add sensitiveHeaders option.5e8b8d0ci: add Node.js 24.x to the CI matrix7953e22ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v686dc1f8Sanitizing input.21ef28aRelease version 1.15.11 of the npm package.7c88135Roll back tree shaking.6e389baRelease version 1.15.10 of the npm package.5bc496eShake me up before you go-go.694d6b4Bump minimist from 1.2.5 to 1.2.8Updates
picomatchfrom 2.3.1 to 2.3.2Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
... (truncated)
Commits
81cba8dPublish 2.3.2fc1f6b6Merge commit from forkeec17aeMerge commit from fork78f8ca4Merge pull request #156 from micromatch/backport-1443f4f10eMerge pull request #144 from Jason3S/jdent-object-propertiesUpdates
flattedfrom 3.2.6 to 3.4.2Commits
3bf09093.4.2885ddccfix CWE-13210bdba70added flatted-view to the benchmark2a02dce3.4.1fba4e8fMerge pull request #89 from WebReflection/python-fix5fe8648added "when in Rome" also a test for PHP53517adsome minor improvementb3e2a0cFixing recursion issue in Python tooc4b46dbAdd SECURITY.md for security policy and reportingf86d071Create dependabot.yml for version updatesUpdates
js-yamlfrom 4.1.0 to 4.2.0Changelog
Sourced from js-yaml's changelog.
Commits
Updates
micromatchfrom 4.0.5 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
markdown-itfrom 12.3.2 to 14.1.1Changelog
Sourced from markdown-it's changelog.
... (truncated)
Commits
b4a9b6514.1.1 released4b4bbcaFixed perf regression in linkify-it wrapperd2782d8Add supplementary example-driven documentation (#1092)0fe7ccb14.1.0 releaseda367c44Fix typo in comments of text.mjs (#1015)7ad8179add changelog5e90063simplify logic in scanDelimsd7ce5ecMerge pull request #1009 from notriddle/spec-0.31.20bfc57dUpdate spec to 0.31.2cd24778Update to comply with spec 0.31.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependenc...Description has been truncated