-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Security] update outdated dependencies #347
Commits on Sep 27, 2024
-
Bump the npm_and_yarn group with 6 updates (#67)
Bumps the npm_and_yarn group with 6 updates: | Package | From | To | | --- | --- | --- | | [express](https://github.com/expressjs/express) | `4.18.3` | `4.19.2` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.9.8` | `1.10.9` | | [ws](https://github.com/websockets/ws) | `8.16.0` | `8.17.1` | | [engine.io](https://github.com/socketio/engine.io) | `6.5.4` | `6.5.5` | | [engine.io-client](https://github.com/socketio/engine.io-client) | `6.5.3` | `6.5.4` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | Updates `express` from 4.18.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.3...4.19.2) Updates `@grpc/grpc-js` from 1.9.8 to 1.10.9 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `ws` from 8.16.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.16.0...8.17.1) Updates `engine.io` from 6.5.4 to 6.5.5 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io@6.5.4...6.5.5) Updates `engine.io-client` from 6.5.3 to 6.5.4 - [Release notes](https://github.com/socketio/engine.io-client/releases) - [Changelog](https://github.com/socketio/engine.io-client/blob/main/CHANGELOG.md) - [Commits](socketio/engine.io-client@6.5.3...6.5.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: engine.io-client dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 74a8933 - Browse repository at this point
Copy the full SHA 74a8933View commit details -
Bump the npm_and_yarn group with 6 updates (#68)
Bumps the npm_and_yarn group with 6 updates: | Package | From | To | | --- | --- | --- | | [body-parser](https://github.com/expressjs/body-parser) | `1.20.2` | `1.20.3` | | [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.0` | | [axios](https://github.com/axios/axios) | `1.6.8` | `1.7.7` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.10` | | [send](https://github.com/pillarjs/send) | `0.18.0` | `0.19.0` | | [serve-static](https://github.com/expressjs/serve-static) | `1.15.0` | `1.16.2` | Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `express` from 4.19.2 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.19.2...4.21.0) Updates `express` from 4.19.2 to 4.21.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md) - [Commits](expressjs/express@4.19.2...4.21.0) Updates `axios` from 1.6.8 to 1.7.7 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.6.8...v1.7.7) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) --- updated-dependencies: - dependency-name: body-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 70848ce - Browse repository at this point
Copy the full SHA 70848ceView commit details -
Bump express-rate-limit from 7.2.0 to 7.3.1 (#64)
Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.2.0 to 7.3.1. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.2.0...v7.3.1) --- updated-dependencies: - dependency-name: express-rate-limit dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 1247c24 - Browse repository at this point
Copy the full SHA 1247c24View commit details -
Bump uglify-js from 3.17.4 to 3.18.0 (#62)
Bumps [uglify-js](https://github.com/mishoo/UglifyJS) from 3.17.4 to 3.18.0. - [Release notes](https://github.com/mishoo/UglifyJS/releases) - [Commits](mishoo/UglifyJS@v3.17.4...v3.18.0) --- updated-dependencies: - dependency-name: uglify-js dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for c5501c7 - Browse repository at this point
Copy the full SHA c5501c7View commit details -
Bump redis from 4.6.13 to 4.6.14 (#54)
Bumps [redis](https://github.com/redis/node-redis) from 4.6.13 to 4.6.14. - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/[email protected]@4.6.14) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 41f0563 - Browse repository at this point
Copy the full SHA 41f0563View commit details -
Bump mocha from 10.3.0 to 10.4.0 (#41)
Bumps [mocha](https://github.com/mochajs/mocha) from 10.3.0 to 10.4.0. - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v10.3.0...v10.4.0) --- updated-dependencies: - dependency-name: mocha dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 8a5e0de - Browse repository at this point
Copy the full SHA 8a5e0deView commit details -
Bump docker/build-push-action from 5 to 6 (#70)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v5...v6) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 7f4b311 - Browse repository at this point
Copy the full SHA 7f4b311View commit details -
Bump newrelic from 11.14.0 to 12.5.1 (#69)
Bumps [newrelic](https://github.com/newrelic/node-newrelic) from 11.14.0 to 12.5.1. - [Release notes](https://github.com/newrelic/node-newrelic/releases) - [Changelog](https://github.com/newrelic/node-newrelic/blob/main/changelog.json) - [Commits](newrelic/node-newrelic@v11.14.0...v12.5.1) --- updated-dependencies: - dependency-name: newrelic dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 054229b - Browse repository at this point
Copy the full SHA 054229bView commit details -
Bump engine.io-client from 6.5.4 to 6.6.1 (#71)
Bumps [engine.io-client](https://github.com/socketio/socket.io) from 6.5.4 to 6.6.1. - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/commits/[email protected]) --- updated-dependencies: - dependency-name: engine.io-client dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for f9a67ae - Browse repository at this point
Copy the full SHA f9a67aeView commit details -
Bump express-rate-limit from 7.3.1 to 7.4.0 (#77)
Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.3.1 to 7.4.0. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.3.1...v7.4.0) --- updated-dependencies: - dependency-name: express-rate-limit dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 00885f7 - Browse repository at this point
Copy the full SHA 00885f7View commit details -
Bump mocha from 10.4.0 to 10.7.3 (#76)
Bumps [mocha](https://github.com/mochajs/mocha) from 10.4.0 to 10.7.3. - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v10.4.0...v10.7.3) --- updated-dependencies: - dependency-name: mocha dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for c1a22f1 - Browse repository at this point
Copy the full SHA c1a22f1View commit details -
Bump engine.io from 6.5.5 to 6.6.1 (#72)
Bumps [engine.io](https://github.com/socketio/socket.io) from 6.5.5 to 6.6.1. - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/commits/[email protected]) --- updated-dependencies: - dependency-name: engine.io dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for a2c310c - Browse repository at this point
Copy the full SHA a2c310cView commit details -
Bump uglify-js from 3.18.0 to 3.19.3 (#73)
Bumps [uglify-js](https://github.com/mishoo/UglifyJS) from 3.18.0 to 3.19.3. - [Release notes](https://github.com/mishoo/UglifyJS/releases) - [Commits](mishoo/UglifyJS@v3.18.0...v3.19.3) --- updated-dependencies: - dependency-name: uglify-js dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 30ad3eb - Browse repository at this point
Copy the full SHA 30ad3ebView commit details -
Bump redis from 4.6.14 to 4.7.0 (#74)
Bumps [redis](https://github.com/redis/node-redis) from 4.6.14 to 4.7.0. - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/[email protected]@4.7.0) --- updated-dependencies: - dependency-name: redis dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for bdc4298 - Browse repository at this point
Copy the full SHA bdc4298View commit details -
Configuration menu - View commit details
-
Copy full SHA for 22d2a02 - Browse repository at this point
Copy the full SHA 22d2a02View commit details -
Convert all the tests to ESM (`.mjs`) in preparation for Chai 5, which drops support for CommonJS. - replace `require` with `import` throughout. - create a global `chai` object to replace the old `chai = require('chai')`. - rename tests from '.js' to '.mjs'.
Configuration menu - View commit details
-
Copy full SHA for 43fe297 - Browse repository at this point
Copy the full SHA 43fe297View commit details -
Configuration menu - View commit details
-
Copy full SHA for 148b6d0 - Browse repository at this point
Copy the full SHA 148b6d0View commit details -
Configuration menu - View commit details
-
Copy full SHA for ae1bd45 - Browse repository at this point
Copy the full SHA ae1bd45View commit details -
Configuration menu - View commit details
-
Copy full SHA for c859ac9 - Browse repository at this point
Copy the full SHA c859ac9View commit details -
Configuration menu - View commit details
-
Copy full SHA for ed40f16 - Browse repository at this point
Copy the full SHA ed40f16View commit details -
Configuration menu - View commit details
-
Copy full SHA for 44b6915 - Browse repository at this point
Copy the full SHA 44b6915View commit details -
Configuration menu - View commit details
-
Copy full SHA for a50ee75 - Browse repository at this point
Copy the full SHA a50ee75View commit details
Commits on Oct 14, 2024
-
Bump express-rate-limit from 7.4.0 to 7.4.1 (#80)
Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 7.4.0 to 7.4.1. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.4.0...v7.4.1) --- updated-dependencies: - dependency-name: express-rate-limit dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 8d3fdfa - Browse repository at this point
Copy the full SHA 8d3fdfaView commit details -
Bump the npm_and_yarn group across 1 directory with 3 updates (#86)
Bumps the npm_and_yarn group with 2 updates in the / directory: [engine.io](https://github.com/socketio/socket.io) and [express](https://github.com/expressjs/express). Updates `engine.io` from 6.6.1 to 6.6.2 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]@6.6.2) Updates `express` from 4.21.0 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md) - [Commits](expressjs/express@4.21.0...4.21.1) Updates `cookie` from 0.4.2 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.2...v0.7.1) --- updated-dependencies: - dependency-name: engine.io dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 9de9e14 - Browse repository at this point
Copy the full SHA 9de9e14View commit details
Commits on Oct 17, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 421459f - Browse repository at this point
Copy the full SHA 421459fView commit details