Bump ua-parser-js from 0.7.28 to 0.7.34 in /components/studio

[dependabot]

Bumps ua-parser-js from 0.7.28 to 0.7.34.

Changelog

Sourced from ua-parser-js's changelog.

Version 0.7.34 / 1.0.34

• Fix Sharp Mobile detected as Huawei Tablet
• Fix IE8 bug
• Add new devices : Kobo e-Reader, Apple Watch, and some new SmartTV devices
• Add new OS : watchOS
• Improve browser detection : Kakao, Naver, Brave
• Improve device detection : Oculus, iPad
• Improve OS detection : Chrome OS
• Using navigator.userAgentData as fallback for device.type & os.name

Version 0.7.33 / 1.0.33

• Add new browser : Cobalt
• Identify Macintosh as an Apple device
• Fix ReDoS vulnerability

Version 0.7.32 / 1.0.32

• Add new browser : DuckDuckGo, Huawei Browser, LinkedIn
• Add new OS : HarmonyOS
• Add some Huawei models
• Add Sharp Aquos TV
• Improve detection Xiaomi Mi CC9
• Fix Sony Xperia 1 III misidentified as Acer tablet
• Fix Detect Sony BRAVIA as SmartTV
• Fix Detect Xiaomi Mi TV as SmartTV
• Fix Detect Galaxy Tab S8 as tablet
• Fix WeGame mistakenly identified as WeChat
• Fix included commas in Safari / Mobile Safari version
• Increase UA_MAX_LENGTH to 350

Version 0.7.31 / 1.0.2

• Fix OPPO Reno A5 incorrect detection
• Fix TypeError Bug
• Use AST to extract regexes and verify them with safe-regex

Version 0.7.30 / 1.0.1

• Add new browser : Obigo, UP.Browser, Klar
• Add new device : Oculus, Roku
• Add new OS: Maemo, HP-UX, Android-x86, Deepin, elementary OS, GhostBSD, Linspire, Manjaro, Sabayon
• Improve detection for Sony Xperia 1ii, LG Android TV, and some more devices
• Improve detection for ARM64 CPU
• Improve detection for Windows Mobile, Netscape, Mac on PowerPC
• Categorize PDA as mobile
• Fix Sharp devices misjudged as Huawei
• Fix trailing comma for ES3 compatibility
• Some code refactor

... (truncated)

Commits

• 3218051 Bump version 0.7.34
• 551ad88 Add new device: Apple Watch, new os: watchOS
• 097f736 Fix #387 #554 - Detect iPadOS 13
• 73c2577 Fix #498 - Detect Brave Browser by checking navigator.brave
• f8e5a1f Fix #601 - Detect Chrome OS without version
• c9d1ab9 Merge branch 'develop'
• f815ca6 Fix #620 - Add new Device: Kobo
• 0cbeb7a Rearrange the recently added smarttv detection
• bf4fb91 Merge pull request #618 from garritfra/smarttv
• 68447d8 Merge branch 'develop' of github.com:faisalman/ua-parser-js into develop
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changelogg]

Hey! Changelogs info seems to be missing or might be in incorrect format.
Please use the below template in PR description to ensure Changelogg can detect your changes:
- (tag) changelog_text
or
- tag: changelog_text
OR
You can add tag in PR header or while doing a commit too
(tag) PR header
or
tag: PR header
Valid tags: added / feat, changed, deprecated, fixed / fix, removed, security, build, ci, chore, docs, perf, refactor, revert, style, test
Thanks!
For more info, check out changelogg docs

[guardrails]

⚠️ We detected 77 security issues in this pull request:

Vulnerable Libraries (77)

Severity	Details
High	pkg:npm/immer@8.0.1@8.0.1 (t) upgrade to: 9.0.6
Medium	pkg:npm/nwsapi@2.2.0@2.2.0 (t) - no patch available
High	pkg:npm/glob-parent@3.1.0@3.1.0 (t) upgrade to: 5.1.2
Medium	pkg:npm/nanoid@3.1.24@3.1.24 (t) upgrade to: 3.1.31
Critical	pkg:npm/loader-utils@1.4.0@1.4.0 (t) upgrade to: 2.0.3
High	pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
Critical	pkg:npm/eventsource@1.1.0@1.1.0 (t) upgrade to: 1.1.1,2.0.2
Medium	pkg:npm/got@11.8.2@11.8.2 (t) - no patch available
High	pkg:npm/semver-regex@2.0.0@2.0.0 (t) upgrade to: 3.1.3,4.0.1
N/A	pkg:npm/file-type@14.7.1@14.7.1 (t) upgrade to: 16.5.4,17.1.3
High	pkg:npm/http-cache-semantics@4.1.0@4.1.0 (t) upgrade to: 4.1.1,4.1.1
Medium	pkg:npm/sharp@0.28.3@0.28.3 (t) upgrade to: 0.30.5
High	pkg:npm/file-type@4.4.0@4.4.0 (t) - no patch available
High	pkg:npm/ansi-regex@5.0.0@5.0.0 (t) upgrade to: 6.0.1,5.0.1,4.1.1,3.0.1
High	pkg:npm/css-what@3.4.2@3.4.2 (t) - no patch available
N/A	pkg:npm/immer@9.0.5@9.0.5 (t) - no patch available
N/A	pkg:npm/nth-check@2.0.0@2.0.0 (t) - no patch available
High	pkg:npm/json5@2.2.0@2.2.0 (t) upgrade to: 2.2.2
Critical	pkg:npm/loader-utils@2.0.0@2.0.0 (t) upgrade to: 2.0.3
High	pkg:npm/ansi-regex@4.1.0@4.1.0 (t) upgrade to: 6.0.1,5.0.1,4.1.1,3.0.1
N/A	pkg:npm/ansi-html@0.0.7@0.0.7 (t) - no patch available
N/A	pkg:npm/node-forge@0.10.0@0.10.0 (t) upgrade to: 1.0.0
Critical	pkg:npm/loader-utils@1.2.3@1.2.3 (t) upgrade to: 2.0.3
High	pkg:npm/lodash.template@4.5.0@4.5.0 (t) - no patch available
High	pkg:npm/clean-css@4.2.3@4.2.3 (t) - no patch available
Medium	pkg:npm/got@8.3.2@8.3.2 (t) - no patch available
High	pkg:npm/file-type@6.2.0@6.2.0 (t) - no patch available
Medium	pkg:npm/cross-fetch@3.1.4@3.1.4 (t) upgrade to: 3.1.5,2.2.6
High	pkg:npm/protobufjs@6.11.2@6.11.2 (t) upgrade to: 6.11.3
Medium	pkg:npm/core-js@3.6.5@3.6.5 (t) - no patch available
High	pkg:npm/terser@4.8.0@4.8.0 (t) - no patch available
High	pkg:npm/cacheable-request@6.1.0@6.1.0 (t) upgrade to: 10.2.7
Critical	pkg:npm/set-value@2.0.1@2.0.1 (t) - no patch available
Medium	pkg:npm/postcss@7.0.36@7.0.36 (t) - no patch available
Critical	pkg:npm/execa@1.0.0@1.0.0 (t) - no patch available
High	pkg:npm/minimatch@3.0.4@3.0.4 (t) upgrade to: 3.0.5
High	pkg:npm/decode-uri-component@0.2.0@0.2.0 (t) - no patch available
Medium	pkg:npm/react@17.0.2@17.0.2 (t) - no patch available
Medium	pkg:npm/ejs@2.7.4@2.7.4 (t) - no patch available
N/A	pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
High	pkg:npm/moment@2.29.1@2.29.1 (t) upgrade to: 2.29.2,2.29.2
High	pkg:npm/prompts@2.4.1@2.4.1 (t) - no patch available
Medium	pkg:npm/ua-parser-js@0.7.34@0.7.34 (t) - no patch available
Medium	pkg:npm/istanbul-reports@3.0.2@3.0.2 (t) - no patch available
Medium	pkg:npm/browserslist@4.14.2@4.14.2 (t) upgrade to: 4.16.5
Critical	pkg:npm/execa@0.7.0@0.7.0 (t) - no patch available
Critical	pkg:npm/qs@6.7.0@6.7.0 (t) - no patch available
N/A	pkg:npm/url-parse@1.5.3@1.5.3 (t) - no patch available
High	pkg:npm/file-type@3.9.0@3.9.0 (t) - no patch available
N/A	pkg:npm/axios@0.21.1@0.21.1 (t) - no patch available
High	pkg:npm/ansi-regex@3.0.0@3.0.0 (t) upgrade to: 6.0.1,5.0.1,4.1.1,3.0.1
High	pkg:npm/async@2.6.3@2.6.3 (t) upgrade to: 3.2.2,2.6.4
Critical	pkg:npm/minimist@1.2.5@1.2.5 (t) upgrade to: 1.2.6
High	pkg:npm/nth-check@1.0.2@1.0.2 (t) upgrade to: 2.0.1
High	pkg:npm/core-js@3.16.1@3.16.1 (t) - no patch available
High	pkg:npm/cacheable-request@7.0.2@7.0.2 (t) upgrade to: 10.2.7
Critical	pkg:npm/shell-quote@1.7.2@1.7.2 (t) upgrade to: 1.7.3
High	pkg:npm/terser@5.7.1@5.7.1 (t) - no patch available
Medium	pkg:npm/got@9.6.0@9.6.0 (t) - no patch available
High	pkg:npm/fb-watchman@2.0.1@2.0.1 (t) - no patch available
High	pkg:npm/tar@6.1.8@6.1.8 (t) upgrade to: 4.4.18,5.0.10,6.1.9
Medium	pkg:npm/got@7.1.0@7.1.0 (t) - no patch available
High	pkg:npm/follow-redirects@1.14.1@1.14.1 (t) upgrade to: 1.14.7
High	pkg:npm/file-type@5.2.0@5.2.0 (t) - no patch available
High	pkg:npm/simple-get@3.1.0@3.1.0 (t) upgrade to: 4.0.1,3.1.1,2.8.2
Critical	pkg:npm/express@4.17.1@4.17.1 (t) - no patch available
Critical	pkg:npm/unset-value@1.0.0@1.0.0 (t) - no patch available
Medium	pkg:npm/node-fetch@2.6.1@2.6.1 (t) - no patch available
High	pkg:npm/http-cache-semantics@3.8.1@3.8.1 (t) - no patch available
Medium	pkg:npm/ws@6.2.2@6.2.2 (t) - no patch available
High	pkg:npm/trim-newlines@1.0.0@1.0.0 (t) upgrade to: 3.0.1,4.0.1
High	pkg:npm/cacheable-request@2.1.4@2.1.4 (t) upgrade to: 10.2.7
High	pkg:npm/file-type@8.1.0@8.1.0 (t) - no patch available
Medium	pkg:npm/core-js@2.6.12@2.6.12 (t) - no patch available
High	pkg:npm/prompts@2.4.0@2.4.0 (t) - no patch available
Medium	pkg:npm/postcss@6.0.23@6.0.23 (t) upgrade to: 8.2.13,7.0.36
High	pkg:npm/tmpl@1.0.4@1.0.4 (t) upgrade to: 1.0.5

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.