Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the npm_and_yarn group in /example with 8 updates #445

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 10, 2024

Bumps the npm_and_yarn group in /example with 9 updates:

Package From To
express 4.18.2 4.19.2
@cypress/request 2.88.11 3.0.5
cypress 12.17.2 13.14.2
axios 0.25.0 1.7.7
start-server-and-test 1.15.2 2.0.7
follow-redirects 1.15.2 1.15.9
path-to-regexp 0.1.7 0.1.10
express 4.19.2 4.20.0
tough-cookie 2.5.0 4.1.4

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: [email protected]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates @cypress/request from 2.88.11 to 3.0.5

Release notes

Sourced from @​cypress/request's releases.

v3.0.5

3.0.5 (2024-09-09)

Bug Fixes

  • deps: update dependency form-data to v4 (6b90580)

v3.0.4

3.0.4 (2024-09-05)

Bug Fixes

  • deps: update dependency form-data to ~2.5.0 (87b5e92)

v3.0.3

3.0.3 (2024-09-05)

Bug Fixes

  • deps: update dependency qs to v6.13.0 (15e0900)

v3.0.2

3.0.2 (2024-09-05)

Bug Fixes

  • deps: update dependency http-signature to ~1.4.0 (675d849)

v3.0.1

3.0.1 (2023-09-06)

Bug Fixes

v3.0.0

3.0.0 (2023-08-08)

Features

  • Add allowInsecureRedirect option (c5bcf21)

BREAKING CHANGES

... (truncated)

Commits
  • 6acc813 Merge pull request #69 from cypress-io/renovate/form-data-4.x
  • 6b90580 fix(deps): update dependency form-data to v4
  • 411a5f4 Merge pull request #67 from cypress-io/renovate/circleci-node-17.x
  • 4cafea9 chore(deps): update node.js to v17
  • d348a03 Merge pull request #53 from cypress-io/renovate/form-data-2.x
  • 0d77178 Merge pull request #56 from cypress-io/renovate/qs-6.x
  • e54f9e3 Merge pull request #58 from cypress-io/renovate/cimg-node-22.x
  • cdcc481 chore(deps): update node.js to v22
  • 15e0900 fix(deps): update dependency qs to v6.13.0
  • fe3d630 Merge pull request #52 from cypress-io/renovate/cimg-node-18.x
  • Additional commits viewable in compare view

Updates cypress from 12.17.2 to 13.14.2

Release notes

Sourced from cypress's releases.

v13.14.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-2

v13.14.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-1

v13.14.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-14-0

v13.13.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-3

v13.13.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-2

v13.13.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-1

v13.13.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-13-0

v13.12.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-12-0

v13.11.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-11-0

v13.10.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-10-0

v13.9.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-9-0

v13.8.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-8-1

v13.8.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-8-0

v13.7.3

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-3

v13.7.2

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2

v13.7.1

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1

v13.7.0

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-0

... (truncated)

Commits
  • 12d8e0b chore: release 13.14.2 (#30182)
  • 770a502 fix: revert HiDPI for Wayland users to resolve unknown issues with GLib-GIO-E...
  • c1b95b5 chore(deps): update dependency mini-css-extract-plugin to v2.9.1 (#30151)
  • bbe5328 fix: WebSocket Connection Closed crashing from BrowserCriClient (#30174)
  • 57d7b63 chore: Update Chrome (stable) to 128.0.6613.119 (#30171)
  • b83548a chore(deps): update dependency eslint-plugin-cypress to v3 (#30136)
  • 1f5fcf6 chore: fix local node version mismatch issue with better sqlite3 (#30158)
  • 195cdb1 chore(deps): remove deprecated @​types/strip-ansi (#30139)
  • 6903db8 chore: Update Chrome (beta) to 129.0.6668.22 (#30149)
  • b2a694f chore: sync changelog with what is on docs.cypress.io and fix broken relative...
  • Additional commits viewable in compare view

Updates axios from 0.25.0 to 1.7.7

Release notes

Sourced from axios's releases.

Release v1.7.7

Release notes:

Bug Fixes

  • fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
  • http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

Release v1.7.6

Release notes:

Bug Fixes

  • fetch: fix content length calculation for FormData payload; (#6524) (085f568)
  • fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

Release v1.7.5

Release notes:

Bug Fixes

  • adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
  • core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
  • core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
  • fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

Release v1.7.4

Release notes:

Bug Fixes

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.7.7 (2024-08-31)

Bug Fixes

  • fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
  • http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

1.7.6 (2024-08-30)

Bug Fixes

  • fetch: fix content length calculation for FormData payload; (#6524) (085f568)
  • fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

1.7.5 (2024-08-23)

Bug Fixes

  • adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
  • core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
  • core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
  • fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

1.7.4 (2024-08-13)

Bug Fixes

... (truncated)

Commits
  • 5b8a826 chore(release): v1.7.7 (#6585)
  • 364993f fix(http): fixed support for IPv6 literal strings in url (#5731)
  • d198085 fix(fetch): fix stream handling in Safari by fallback to using a stream reade...
  • d584fcf chore(release): v1.7.6 (#6583)
  • bc03c6c chore(examples): fix module import (#6575)
  • df9889b fix(fetch): optimize signals composing logic; (#6582)
  • ee208cf chore(sponsor): update sponsor block (#6576)
  • 085f568 fix(fetch): fix content length calculation for FormData payload; (#6524)
  • 59cd6b0 chore(release): v1.7.5 (#6574)
  • 6700a8a fix(core): add the missed implementation of AxiosError#status property; (#6573)
  • Additional commits viewable in compare view

Updates start-server-and-test from 1.15.2 to 2.0.7

Release notes

Sourced from start-server-and-test's releases.

v2.0.7

2.0.7 (2024-09-09)

Bug Fixes

  • deps: update dependency wait-on to v8 (#386) (d814a72)

v2.0.6

2.0.6 (2024-09-08)

Bug Fixes

  • deps: update dependency debug to v4.3.7 (78c6f53)

v2.0.5

2.0.5 (2024-07-29)

Bug Fixes

  • deps: update dependency debug to v4.3.6 (8ebb70b)

v2.0.4

2.0.4 (2024-06-05)

Bug Fixes

  • deps: update dependency debug to v4.3.5 (dd8a2d7)

v2.0.3

2.0.3 (2023-11-16)

Bug Fixes

  • deps: update dependency wait-on to v7.2.0 (#374) (ad35c2e)

v2.0.2

2.0.2 (2023-11-05)

Bug Fixes

  • deps: update dependency wait-on to v7.1.0 (efe7384)

v2.0.1

2.0.1 (2023-09-21)

... (truncated)

Commits
  • d814a72 fix(deps): update dependency wait-on to v8 (#386)
  • 78c6f53 fix(deps): update dependency debug to v4.3.7
  • 8ebb70b fix(deps): update dependency debug to v4.3.6
  • dd8a2d7 fix(deps): update dependency debug to v4.3.5
  • ad35c2e fix(deps): update dependency wait-on to v7.2.0 (#374)
  • efe7384 fix(deps): update dependency wait-on to v7.1.0
  • 2fc1f98 fix: bump minimum Node to v16, closes #351
  • 2d1decf add note about localhost http (#372)
  • 04b33b3 Fix: fix the interactive shell in the test process (#369)
  • a9e395c feat: making the default host 127.0.0.1 (#359)
  • Additional commits viewable in compare view

Updates follow-redirects from 1.15.2 to 1.15.9

Commits
  • e4e55c7 Release version 1.15.9 of the npm package.
  • 31a1abf Attempt much more gentle detection.
  • d2aaa97 Fix url field.
  • 62558f0 Release version 1.15.8 of the npm package.
  • a8d1cee Return subtlety.
  • 458ca8e Fix native URL test for Node 20.
  • ca49e44 Handle KeepAlive connections in tests.
  • f3711d7 Test on Node 20 and 22.
  • fda0faf Fix typo.
  • 760757f Release version 1.15.7 of the npm package.
  • Additional commits viewable in compare view

Updates path-to-regexp from 0.1.7 to 0.1.10

Release notes

Sourced from path-to-regexp's releases.

Backtrack protection

Fixed

  • Add backtrack protection to parameters 29b96b4
    • This will break some edge cases but should improve performance

pillarjs/path-to-regexp@v0.1.9...v0.1.10

Support non-lookahead regex output

Added

  • Allow a non-lookahead regex (#312) c4272e4

component/path-to-regexp@v0.1.8...v0.1.9

Support named matching groups in RegExp

Added

  • Add support for named matching groups (#301) 114f62d

pillarjs/path-to-regexp@v0.1.7...v0.1.8

Commits

Updates express from 4.19.2 to 4.20.0

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: [email protected]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates tough-cookie from 2.5.0 to 4.1.4

Release notes

Sourced from tough-cookie's releases.

v4.1.4

https://www.npmjs.com/package/tough-cookie/v/4.1.4

What's Changed

New Contributors

Full Changelog: salesforce/tough-cookie@v4.1.3...v4.1.4

4.1.3

Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the inspect utility is affected by this change, we felt this change was important enough to be pushed into the next patch.

4.1.2 -- Patch and Bugfix Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.1...v4.1.2

4.1.1

Patch Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.0...v4.1.1

4.1.0

v4.1.0

Minor release, focused mainly on resolving reported issues and some minor feature work.

What's Changed

... (truncated)

Commits
  • cacbc37 Bump version to 4.1.4
  • a48fb3a Add tests for url validation
  • 50e69bf Merge pull request #261 from postmanlabs/fix/url-string-validation
  • 1253d58 Merge pull request #409 from corvidism/validators-to-string
  • 238367e Add local alias for toString
  • 4ff4d29 4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)
  • 12d4747 Prevent prototype pollution in cookie memstore (#283)
  • f06b72d Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...
  • cf6debd Fix incorrect string validation for URL
  • b1a8898 fix: allow set cookies with localhost (#253)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ccasey, a new releaser for tough-cookie since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group in /example with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` |
| [@cypress/request](https://github.com/cypress-io/request) | `2.88.11` | `3.0.5` |
| [cypress](https://github.com/cypress-io/cypress) | `12.17.2` | `13.14.2` |
| [axios](https://github.com/axios/axios) | `0.25.0` | `1.7.7` |
| [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | `1.15.2` | `2.0.7` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.2` | `1.15.9` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.10` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.20.0` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `2.5.0` | `4.1.4` |


Updates `express` from 4.18.2 to 4.19.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.19.2)

Updates `@cypress/request` from 2.88.11 to 3.0.5
- [Release notes](https://github.com/cypress-io/request/releases)
- [Changelog](https://github.com/cypress-io/request/blob/master/CHANGELOG.md)
- [Commits](cypress-io/request@v2.88.11...v3.0.5)

Updates `cypress` from 12.17.2 to 13.14.2
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v12.17.2...v13.14.2)

Updates `axios` from 0.25.0 to 1.7.7
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.25.0...v1.7.7)

Updates `start-server-and-test` from 1.15.2 to 2.0.7
- [Release notes](https://github.com/bahmutov/start-server-and-test/releases)
- [Commits](bahmutov/start-server-and-test@v1.15.2...v2.0.7)

Updates `follow-redirects` from 1.15.2 to 1.15.9
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.9)

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10)

Updates `express` from 4.19.2 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.19.2)

Updates `tough-cookie` from 2.5.0 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v2.5.0...v4.1.4)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@cypress/request"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cypress
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: start-server-and-test
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the Type: dependencies Pull requests that update a dependency file label Sep 10, 2024
Copy link

cypress bot commented Sep 10, 2024

cypress-har-generator    Run #24

Run Properties:  status check passed Passed #24  •  git commit a2a447817a ℹ️: Merge 7b38ecd14e47d151cb89bf7d9db0bcdc44fe3b1a into 6c5fc26b105a8f68bf657ce14152...
Project cypress-har-generator
Branch Review refs/pull/445/merge
Run status status check passed Passed #24
Run duration 01m 23s
Commit git commit a2a447817a ℹ️: Merge 7b38ecd14e47d151cb89bf7d9db0bcdc44fe3b1a into 6c5fc26b105a8f68bf657ce14152...
Committer dependabot[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 6
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 31
View all changes introduced in this branch ↗︎

@derevnjuk derevnjuk merged commit 9eafe80 into master Sep 10, 2024
9 checks passed
@derevnjuk derevnjuk deleted the dependabot/npm_and_yarn/example/npm_and_yarn-fbedf0fa36 branch September 10, 2024 08:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant