Skip to content

Update Mend: high confidence minor and patch dependency updates #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jul 29, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@cyclonedx/cyclonedx-npm 1.19.3 -> 1.20.0 age adoption passing confidence
@types/chai (source) 4.3.16 -> 4.3.20 age adoption passing confidence
@types/compression (source) 1.7.5 -> 1.8.1 age adoption passing confidence
@types/config (source) 3.3.4 -> 3.3.5 age adoption passing confidence
@types/cookie-parser (source) 1.4.7 -> 1.4.9 age adoption passing confidence
@types/cors (source) 2.8.17 -> 2.8.19 age adoption passing confidence
@types/express (source) 4.17.21 -> 4.17.23 age adoption passing confidence
@types/i18n (source) ^0.12.0 -> ^0.13.0 age adoption passing confidence
@types/jasmine (source) ~3.9.1 -> ~3.10.0 age adoption passing confidence
@types/morgan (source) 1.9.9 -> 1.9.10 age adoption passing confidence
@types/multer (source) 1.4.11 -> 1.4.13 age adoption passing confidence
@types/on-finished (source) 2.3.4 -> 2.3.5 age adoption passing confidence
@types/pdfkit (source) ^0.10.6 -> ^0.17.0 age adoption passing confidence
@types/request (source) 2.48.12 -> 2.48.13 age adoption passing confidence
@types/semver (source) 7.5.8 -> 7.7.0 age adoption passing confidence
@types/swagger-ui-express (source) 4.1.6 -> 4.1.8 age adoption passing confidence
@types/unzipper (source) 0.10.9 -> 0.10.11 age adoption passing confidence
@types/validator (source) 13.12.0 -> 13.15.2 age adoption passing confidence
@typescript-eslint/eslint-plugin (source) 6.18.1 -> 6.21.0 age adoption passing confidence
@typescript-eslint/parser (source) 6.18.1 -> 6.21.0 age adoption passing confidence
body-parser 1.20.2 -> 1.20.3 age adoption passing confidence
chai (source) 4.4.1 -> 4.5.0 age adoption passing confidence
codemirror 5.65.17 -> 5.65.19 age adoption passing confidence
cookie-parser 1.4.6 -> 1.4.7 age adoption passing confidence
cross-spawn 7.0.3 -> 7.0.6 age adoption passing confidence
cypress (source) 13.13.1 -> 13.17.0 age adoption passing confidence
eslint (source) 8.57.0 -> 8.57.1 age adoption passing confidence
eslint-config-prettier 7.1.0 -> 7.2.0 age adoption passing confidence
eslint-plugin-import 2.29.1 -> 2.32.0 age adoption passing confidence
ethers (source) 6.13.1 -> 6.15.0 age adoption passing confidence
ethers (source) 5.7.2 -> 5.8.0 age adoption passing confidence
express (source) 4.19.2 -> 4.21.2 age adoption passing confidence
http-server ^0.12.3 -> ^0.13.0 age adoption passing confidence
i18n ^0.11.1 -> ^0.15.0 age adoption passing confidence
jasmine-core (source) ~3.9.0 -> ~3.99.0 age adoption passing confidence
karma (source) 6.4.3 -> 6.4.4 age adoption passing confidence
karma-chrome-launcher ~3.1.0 -> ~3.2.0 age adoption passing confidence
material-icons (source) ^0.3.1 -> ^0.7.0 age adoption passing confidence
morgan 1.10.0 -> 1.10.1 age adoption passing confidence
multer 1.4.5-lts.1 -> 1.4.5-lts.2 age adoption passing confidence
node-pre-gyp ^0.15.0 -> ^0.17.0 age adoption passing confidence
rxjs (source) 6.6.3 -> 6.6.7 age adoption passing confidence
sanitize-html 1.4.2 -> 1.27.5 age adoption passing confidence
semver 7.6.3 -> 7.7.2 age adoption passing confidence
sequelize (source) 6.37.3 -> 6.37.7 age adoption passing confidence
shelljs ^0.8.4 -> ^0.10.0 age adoption passing confidence
typescript (source) ~4.6.0 -> ~4.9.0 age adoption passing confidence
typescript (source) ~4.8.4 -> ~4.9.0 age adoption passing confidence
unzipper 0.9.15 -> 0.12.3 age adoption passing confidence
winston 3.13.1 -> 3.17.0 age adoption passing confidence
zustand 4.4.1 -> 4.5.7 age adoption passing confidence

Release Notes

CycloneDX/cyclonedx-node-npm (@​cyclonedx/cyclonedx-npm)

v1.20.0

Compare Source

  • Added
    • Official support for npm@11 (#​1245 via #​1249)
    • Capability to gather license text evidences (#​256 via #​1243)
      This feature can be controlled via CLI switch --gather-license-texts.
      This feature is experimental. This feature is disabled per default.
  • Dependencies
    • No longer directly depend on packageurl-js (via #​1237)
  • Build
typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v6.21.0

Compare Source

🚀 Features
  • export plugin metadata

  • allow parserOptions.project: false

  • eslint-plugin: add rule prefer-find

🩹 Fixes
  • eslint-plugin: [no-unused-vars] don't report on types referenced in export assignment expression

  • eslint-plugin: [switch-exhaustiveness-check] better support for intersections, infinite types, non-union values

  • eslint-plugin: [consistent-type-imports] dont report on types used in export assignment expressions

  • eslint-plugin: [no-unnecessary-condition] handle left-hand optional with exactOptionalPropertyTypes option

  • eslint-plugin: [class-literal-property-style] allow getter when same key setter exists

  • eslint-plugin: [no-unnecessary-type-assertion] provide valid fixes for assertions with extra tokens before as keyword

❤️ Thank You
  • auvred
  • Brad Zacher
  • Kirk Waiblinger
  • Pete Gonzalez
  • YeonJuan

You can read about our versioning strategy and releases on our website.

v6.20.0

Compare Source

🚀 Features
  • eslint-plugin: [member-ordering] allow easy reuse of the default ordering
🩹 Fixes
  • eslint-plugin: [no-useless-template-literals] incorrect bigint autofix result

  • eslint-plugin: [prefer-nullish-coalescing] treat any/unknown as non-nullable

  • eslint-plugin: [no-useless-template-literals] report Infinity & NaN

  • eslint-plugin: [prefer-readonly] disable checking accessors

❤️ Thank You
  • Alex Parloti
  • auvred
  • James Browning
  • StyleShit
  • YeonJuan

You can read about our versioning strategy and releases on our website.

v6.19.1

Compare Source

🩹 Fixes
  • type-utils: preventing isUnsafeAssignment infinite recursive calls

  • eslint-plugin: [no-unnecessary-condition] fix false positive for type variable

❤️ Thank You
  • YeonJuan

You can read about our versioning strategy and releases on our website.

v6.19.0

Compare Source

🚀 Features
  • eslint-plugin: [prefer-promise-reject-errors] add rule

  • eslint-plugin: [no-array-delete] add new rule

  • eslint-plugin: [no-useless-template-literals] add fix suggestions

🩹 Fixes
  • eslint-plugin: [no-unnecessary-type-assertion] detect unnecessary non-null-assertion on a call expression

  • eslint-plugin: [no-unnecesary-type-assertion] treat unknown/any as nullable

❤️ Thank You
  • auvred
  • Brad Zacher
  • Josh Goldberg ✨
  • Joshua Chen
  • LJX
  • Steven
  • StyleShit

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v6.21.0

Compare Source

🚀 Features
  • allow parserOptions.project: false
❤️ Thank You
  • auvred
  • Brad Zacher
  • Kirk Waiblinger
  • Pete Gonzalez
  • YeonJuan

You can read about our versioning strategy and releases on our website.

v6.20.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v6.19.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v6.19.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

expressjs/body-parser (body-parser)

v1.20.3

Compare Source

===================

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
chaijs/chai (chai)

v4.5.0

Compare Source

What's Changed

Full Changelog: chaijs/chai@v4.4.1...v4.5.0

codemirror/basic-setup (codemirror)

v5.65.19

Compare Source

v5.65.18

Compare Source

expressjs/cookie-parser (cookie-parser)

v1.4.7

Compare Source

==========

  • deps: cookie@0.7.2
    • Fix object assignment of hasOwnProperty
  • deps: cookie@0.7.1
    • Allow leading dot for domain
      • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
    • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
  • deps: cookie@0.7.0
    • perf: parse cookies ~10% faster
    • fix: narrow the validation of cookies to match RFC6265
    • fix: add main to package.json for rspack
  • deps: cookie@0.6.0
    • Add partitioned option
  • deps: cookie@0.5.0
    • Add priority option
    • Fix expires option to reject invalid dates
    • pref: improve default decode speed
    • pref: remove slow string split in parse
  • deps: cookie@0.4.2
    • pref: read value only when assigning in parse
    • pref: remove unnecessary regexp in parse
moxystudio/node-cross-spawn (cross-spawn)

v7.0.6

Compare Source

v7.0.5

Compare Source

v7.0.4

Compare Source

cypress-io/cypress (cypress)

v13.17.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#13-17-0

v13.16.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#13-16-1

v13.16.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-16-0

v13.15.2

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-15-2

v13.15.1

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-15-1

v13.15.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-15-0

v13.14.2

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-2

v13.14.1

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-1

v13.14.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-0

v13.13.3

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-3

v13.13.2

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-2

eslint/eslint (eslint)

v8.57.1

Compare Source

Bug Fixes

  • a19072f fix: add logic to handle fixTypes in the lintText() method (#​18900) (Francesco Trotta)
  • 04c7188 fix: Don't lint same file multiple times (#​18899) (Francesco Trotta)
  • 87ec3c4 fix: do not throw when defining a global named __defineSetter__ (#​18898) (Francesco Trotta)
  • 60a1267 fix: Provide helpful error message for nullish configs (#​18889) (Milos Djermanovic)
  • a0dea8e fix: allow name in global ignores, fix --no-ignore for non-global (#​18875) (Milos Djermanovic)
  • 3836bb4 fix: do not crash on error in fs.walk filter (#​18886) (Milos Djermanovic)
  • 2dec349 fix: skip processor code blocks that match only universal patterns (#​18880) (Milos Djermanovic)

Documentation


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 20 times, most recently from 5f92d0c to e69ba40 Compare August 5, 2024 12:05
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 10 times, most recently from 6c8d6df to edd8d7e Compare August 11, 2024 00:57
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from 62f32fb to 741dc5b Compare July 8, 2025 11:58
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from 8fd1803 to a09bc2e Compare July 16, 2025 14:50
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from 9d5326f to c64384a Compare July 24, 2025 14:37
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 5 times, most recently from bab1c82 to b25b05c Compare July 31, 2025 15:21
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from 7156843 to 8670157 Compare August 5, 2025 12:44
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 8670157 to 2440c40 Compare August 6, 2025 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy