chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates #605

dependabot · 2024-07-12T11:17:44Z

Bumps the npm_and_yarn group with 2 updates in the /canisters/node_status_canister directory: braces and ws.
Bumps the npm_and_yarn group with 6 updates in the /dashboard directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
ws	`7.5.9`	`7.5.10`
@backstage/backend-common	`0.19.10`	`0.20.2`
@babel/traverse	`7.23.3`	`7.24.8`
browserify-sign	`4.2.2`	`4.2.3`
fast-loops	`1.1.3`	`1.1.4`

Bumps the npm_and_yarn group with 1 update in the /linear-jira directory: @babel/traverse.

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates ws from 8.13.0 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates ws from 7.5.9 to 7.5.10

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

Updates @backstage/backend-common from 0.19.10 to 0.20.2

Changelog

Sourced from @backstage/backend-common's changelog.

@backstage/backend-common

0.23.3-next.1

Patch Changes

b9ed1bb: bumped better-sqlite3 from ^9.0.0 to ^11.0.0

Updated dependencies

@backstage/backend-dev-utils@0.1.4

@backstage/backend-plugin-api@0.6.22-next.1

@backstage/cli-common@0.1.14

@backstage/config@1.2.0

@backstage/config-loader@1.8.1

@backstage/errors@1.2.4

@backstage/integration@1.13.0-next.0

@backstage/integration-aws-node@0.1.12

@backstage/types@1.1.1

@backstage/plugin-auth-node@0.4.17-next.1

0.23.2-next.0

Patch Changes

8c09c97: Deprecate legacy status check factory, handler and types.

d228862: Update default backend plugin created by the cli to use non-deprecated error handling middleware

c964a3d: Add dependencies that are needed by cross-imports from backend-defaults

b60db08: Fixing exporting of classes properly from new packages

Updated dependencies

@backstage/backend-plugin-api@0.6.21-next.0

@backstage/integration@1.13.0-next.0

@backstage/plugin-auth-node@0.4.16-next.0

@backstage/backend-dev-utils@0.1.4

@backstage/cli-common@0.1.14

@backstage/config@1.2.0

@backstage/config-loader@1.8.1

@backstage/errors@1.2.4

@backstage/integration-aws-node@0.1.12

@backstage/types@1.1.1

0.23.0

Minor Changes

395b973: Implemented readTree for Harness provider to support TechDocs functionality

02103be: Deprecated and moved over core services to @backstage/backend-defaults

Patch Changes

9539a0b: Import utility functions from backend-defaults instead of backend-app-api

b2c4607: Removed accents on deprecation note

... (truncated)

Commits

See full diff in compare view

Updates @babel/traverse from 7.23.3 to 7.24.8

Release notes

Sourced from @babel/traverse's releases.

v7.24.8 (2024-07-11)

Thanks @H0onnn, @jkup and @SreeXD for your first pull requests!

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

Committers: 9

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jon Kuperman (@jkup)

Nagendran N (@SreeXD)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

@H0onnn

@liuxingbaoyu

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

... (truncated)

Commits

1f5af44 v7.24.8
c90bb0c [babel 8] Remove methods starting with _ in @babel/traverse (#16504)
e0368a8 Avoid checking Scope.globals multiple times (#16619)
683c654 Enable some lint rules (#16605)
cfe13c2 [babel 8] Update globals dependency (#16600)
c36fa6a Update typescript-eslint v8 (#16557)
12619ff improve getBindingIdentifiers.keys typing (#16570)
424fc90 Update to TypeScript 5.5 (#16536)
bf1e9a3 v7.24.7
4463aa5 fix: incorrect constantViolations with destructuring (#16522)
Additional commits viewable in compare view

Updates browserify-sign from 4.2.2 to 4.2.3

Changelog

Sourced from browserify-sign's changelog.

v4.2.3 - 2024-03-05

Commits

[patch] widen support to 0.12 9247adf

[patch] drop minimum node support to v1 4d0ee49

[Dev Deps] update aud, npmignore, tape 87f3a35

[actions] remove redundant finisher 37a4758

[Deps] pin hash-base to ~3.0, due to a breaking change 9e2bf12

[Deps] update parse-asn1 [f427270`](browserify/browserify-sign@f427270)

[Deps] update elliptic fb261ce

[Deps] pin elliptic due to a breaking change 168e16f

Commits

bf2c3ec v4.2.3
9247adf [patch] widen support to 0.12
f427270 [Deps] update `parse-asn1
87f3a35 [Dev Deps] update aud, npmignore, tape
fb261ce [Deps] update elliptic
4d0ee49 [patch] drop minimum node support to v1
9e2bf12 [Deps] pin hash-base to ~3.0, due to a breaking change
168e16f [Deps] pin elliptic due to a breaking change
37a4758 [actions] remove redundant finisher
See full diff in compare view

Updates fast-loops from 1.1.3 to 1.1.4

Commits

See full diff in compare view

Updates @babel/traverse from 7.20.13 to 7.24.8

Release notes

Sourced from @babel/traverse's releases.

v7.24.8 (2024-07-11)

Thanks @H0onnn, @jkup and @SreeXD for your first pull requests!

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

Committers: 9

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jon Kuperman (@jkup)

Nagendran N (@SreeXD)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

@H0onnn

@liuxingbaoyu

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

... (truncated)

Commits

1f5af44 v7.24.8
c90bb0c [babel 8] Remove methods starting with _ in @babel/traverse (#16504)
e0368a8 Avoid checking Scope.globals multiple times (#16619)
683c654 Enable some lint rules (#16605)
cfe13c2 [babel 8] Update globals dependency (#16600)
c36fa6a Update typescript-eslint v8 (#16557)
12619ff improve getBindingIdentifiers.keys typing (#16570)
424fc90 Update to TypeScript 5.5 (#16536)
bf1e9a3 v7.24.7
4463aa5 fix: incorrect constantViolations with destructuring (#16522)
Additional commits viewable in compare view

Updates browserify-sign from 4.2.1 to 4.2.3

Changelog

Sourced from browserify-sign's changelog.

v4.2.3 - 2024-03-05

Commits

[patch] widen support to 0.12 9247adf

[patch] drop minimum node support to v1 4d0ee49

[Dev Deps] update aud, npmignore, tape 87f3a35

[actions] remove redundant finisher 37a4758

[Deps] pin hash-base to ~3.0, due to a breaking change 9e2bf12

[Deps] update parse-asn1 [f427270`](browserify/browserify-sign@f427270)

[Deps] update elliptic fb261ce

[Deps] pin elliptic due to a breaking change 168e16f

Commits

bf2c3ec v4.2.3
9247adf [patch] widen support to 0.12
f427270 [Deps] update `parse-asn1
87f3a35 [Dev Deps] update aud, npmignore, tape
fb261ce [Deps] update elliptic
4d0ee49 [patch] drop minimum node support to v1
9e2bf12 [Deps] pin hash-base to ~3.0, due to a breaking change
168e16f [Deps] pin elliptic due to a breaking change
37a4758 [actions] remove redundant finisher
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…updates Bumps the npm_and_yarn group with 2 updates in the /canisters/node_status_canister directory: [braces](https://github.com/micromatch/braces) and [ws](https://github.com/websockets/ws). Bumps the npm_and_yarn group with 6 updates in the /dashboard directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | | [@backstage/backend-common](https://github.com/backstage/backstage/tree/HEAD/packages/backend-common) | `0.19.10` | `0.20.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.23.3` | `7.24.8` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.2` | `4.2.3` | | [fast-loops](https://github.com/robinweser/fast-loops) | `1.1.3` | `1.1.4` | Bumps the npm_and_yarn group with 1 update in the /linear-jira directory: [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse). Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `ws` from 8.13.0 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.18.0) Updates `@backstage/backend-common` from 0.19.10 to 0.20.2 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/backend-common/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/backend-common) Updates `@babel/traverse` from 7.23.3 to 7.24.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-traverse) Updates `browserify-sign` from 4.2.2 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.2...v4.2.3) Updates `fast-loops` from 1.1.3 to 1.1.4 - [Commits](https://github.com/robinweser/fast-loops/commits) Updates `@babel/traverse` from 7.20.13 to 7.24.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-traverse) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.2...v4.2.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@backstage/backend-common" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-loops dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-07-15T15:37:41Z

Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.

dependabot · 2024-07-17T09:18:29Z

Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.

sasa-tomic · 2024-07-17T09:45:55Z

@dependabot rebuild

sasa-tomic · 2024-07-17T09:52:25Z

@dependabot rebase

dependabot · 2024-07-17T10:03:10Z

Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.

dependabot · 2024-07-17T12:24:41Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot requested a review from a team as a code owner July 12, 2024 11:17

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 12, 2024

LittleChimera closed this Jul 17, 2024

dependabot bot deleted the dependabot/npm_and_yarn/canisters/node_status_canister/npm_and_yarn-3eaa8c22cc branch July 17, 2024 12:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates #605

chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates #605

dependabot bot commented on behalf of github Jul 12, 2024 •

edited

Loading

dependabot bot commented on behalf of github Jul 15, 2024

dependabot bot commented on behalf of github Jul 17, 2024

sasa-tomic commented Jul 17, 2024

sasa-tomic commented Jul 17, 2024

dependabot bot commented on behalf of github Jul 17, 2024

dependabot bot commented on behalf of github Jul 17, 2024

chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates #605

chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates #605

Conversation

dependabot bot commented on behalf of github Jul 12, 2024 • edited Loading

8.18.0

Features

8.17.1

Bug fixes

8.18.0

Features

8.17.1

Bug fixes

@​backstage/backend-common

0.23.3-next.1

Patch Changes

0.23.2-next.0

Patch Changes

0.23.0

Minor Changes

Patch Changes

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.6 (2024-05-24)

🐛 Bug Fix

v4.2.3 - 2024-03-05

Commits

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.6 (2024-05-24)

🐛 Bug Fix

v4.2.3 - 2024-03-05

Commits

dependabot bot commented on behalf of github Jul 15, 2024

dependabot bot commented on behalf of github Jul 17, 2024

sasa-tomic commented Jul 17, 2024

sasa-tomic commented Jul 17, 2024

dependabot bot commented on behalf of github Jul 17, 2024

dependabot bot commented on behalf of github Jul 17, 2024

dependabot bot commented on behalf of github Jul 12, 2024 •

edited

Loading

`@backstage/backend-common`