Bump the npm_and_yarn group across 14 directories with 38 updates

[dependabot]

Bumps the npm_and_yarn group with 11 updates in the /developers/packages/one-client-angular directory:

Package	From	To
postcss	8.4.5	8.4.38
@angular-devkit/build-angular	13.3.11	18.2.10
@koa/cors	3.3.0	5.0.0
oidc-provider	7.11.4	8.5.2
decode-uri-component	0.2.0	0.2.2
ejs	3.1.8	3.1.10
follow-redirects	1.15.5	1.15.9
got	9.6.0	13.0.0
browserstack-cypress-cli	1.28.1	1.31.9
jose	4.15.4	4.15.9
rollup	2.77.0	2.79.2

Bumps the npm_and_yarn group with 17 updates in the /developers/packages/one-client-extension-browser directory:

Package	From	To
@babel/traverse	7.17.3	7.25.9
@koa/cors	3.1.0	5.0.0
oidc-provider	7.10.6	8.5.2
axios	0.25.0	1.7.7
wait-on	6.0.1	8.0.1
braces	3.0.2	3.0.3
decode-uri-component	0.2.0	0.2.2
json5	2.2.0	2.2.3
jsonwebtoken	8.5.1	9.0.0
lodash	4.17.15	4.17.21
@caporal/core	2.0.2	2.0.7
micromatch	4.0.4	4.0.8
requestretry	4.1.2	7.1.0
browserstack-cypress-cli	1.8.1	1.31.9
rollup	2.69.1	2.79.2
ws	7.5.7	7.5.10
crypto-js	4.1.1	4.2.0

Bumps the npm_and_yarn group with 9 updates in the /developers/packages/one-client-js directory:

Package	From	To
@babel/traverse	7.24.1	7.25.9
@koa/cors	3.4.3	5.0.0
oidc-provider	7.14.3	8.5.2
axios	1.6.8	1.7.7
follow-redirects	1.15.6	1.15.9
got	9.6.0	13.0.0
browserstack-cypress-cli	1.28.0	1.31.9
micromatch	4.0.5	4.0.8
rollup	2.79.1	2.79.2

Bumps the npm_and_yarn group with 10 updates in the /developers/packages/one-client-nextjs directory:

Package	From	To
@babel/traverse	7.24.8	7.25.9
axios	1.7.2	1.7.7
body-parser	1.20.2	1.20.3
cookie	0.6.0	0.7.0
follow-redirects	1.15.6	1.15.9
tough-cookie	4.1.4	5.0.0
jose	5.6.3	5.9.6
micromatch	4.0.5	4.0.8
path-to-regexp	6.2.2	6.3.0
next	14.2.5	14.2.10

Bumps the npm_and_yarn group with 7 updates in the /developers/packages/one-client-react directory:

Package	From	To
@babel/traverse	7.24.8	7.25.9
axios	1.7.2	1.7.7
follow-redirects	1.15.6	1.15.9
jose	5.6.3	5.9.6
micromatch	4.0.5	4.0.8
path-to-regexp	6.2.1	6.3.0
path-to-regexp	1.8.0	6.3.0
rollup	3.29.4	3.29.5

Bumps the npm_and_yarn group with 5 updates in the /developers/packages/one-client-react-native directory:

Package	From	To
@babel/traverse	7.24.8	7.25.9
micromatch	4.0.5	4.0.8
send	0.18.0	0.19.0
serve-static	1.15.0	1.16.2
fast-xml-parser	4.4.0	4.5.0

Bumps the npm_and_yarn group with 5 updates in the /developers/packages/one-client-react-native/example directory:

Package	From	To
@babel/traverse	7.24.8	7.25.9
micromatch	4.0.7	4.0.8
send	0.18.0	0.19.0
serve-static	1.15.0	1.16.2
fast-xml-parser	4.4.0	4.5.0

Bumps the npm_and_yarn group with 1 update in the /developers/packages/one-client-react/examples/nextjs-app-13-pages directory: next.
Bumps the npm_and_yarn group with 1 update in the /developers/packages/one-client-react/examples/nextjs-app-14-pages directory: next.
Bumps the npm_and_yarn group with 2 updates in the /developers/packages/one-client-react/examples/node-express-users-api directory: body-parser and express.
Bumps the npm_and_yarn group with 7 updates in the /developers/packages/one-client-vue directory:

Package	From	To
postcss	8.4.38	8.4.47
@babel/traverse	7.24.8	7.25.9
axios	1.7.2	1.7.7
follow-redirects	1.15.6	1.15.9
jose	5.6.3	5.9.6
micromatch	4.0.5	4.0.8
rollup	2.79.1	2.79.2

Bumps the npm_and_yarn group with 4 updates in the /developers/packages/one-client-vue/samples/01-Login directory: postcss, body-parser, express and vite.
Bumps the npm_and_yarn group with 5 updates in the /developers/packages/one-client-vue/samples/02-Calling-an-API directory:

Package	From	To
postcss	8.4.31	8.4.47
body-parser	1.20.2	1.20.3
express	4.19.2	4.21.1
vite	2.9.18	5.4.10
@vitejs/plugin-vue	1.10.2	1.10.2

Bumps the npm_and_yarn group with 7 updates in the /developers/packages/one-server-node directory:

Package	From	To
@babel/traverse	7.24.8	7.25.9
axios	1.7.2	1.7.7
ansi-regex	3.0.0	5.0.1
follow-redirects	1.15.6	1.15.9
jose	4.15.5	5.9.6
micromatch	4.0.4	4.0.8
rollup	2.69.1	2.79.2

Updates postcss from 8.4.5 to 8.4.38

Release notes

Sourced from postcss's releases.

8.4.38

• Fixed endIndex: 0 in errors and warnings (by @​romainmenke).

8.4.37

• Fixed original.column are not numbers error in another case.

8.4.36

• Fixed original.column are not numbers error on broken previous source map.

8.4.35

• Avoid ! in node.parent.nodes type.
• Allow to pass undefined to node adding method to simplify types.

8.4.34

• Fixed AtRule#nodes type (by @​tim-we).
• Cleaned up code (by @​DrKiraDmitry).

8.4.33

• Fixed NoWorkResult behavior difference with normal mode (by @​romainmenke).
• Fixed NoWorkResult usage conditions (by @​ahmdammarr).

8.4.32

• Fixed postcss().process() types (by @​ferreira-tb).

8.4.31

• Fixed \r parsing to fix CVE-2023-44270.

8.4.30

• Improved source map performance (by @​romainmenke).

8.4.29

• Fixed Node#source.offset (by @​idoros).
• Fixed docs (by @​coliff).

8.4.28

• Fixed Root.source.end for better source map (by @​romainmenke).
• Fixed Result.root types when process() has no parser.

8.4.27

• Fixed Container clone methods types.

8.4.26

• Fixed clone methods types.

8.4.25

• Improve stringify performance (by @​romainmenke).
• Fixed docs (by @​vikaskaliramna07).

8.4.24

• Fixed Plugin types.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.38

• Fixed endIndex: 0 in errors and warnings (by @​romainmenke).

8.4.37

• Fixed original.column are not numbers error in another case.

8.4.36

• Fixed original.column are not numbers error on broken previous source map.

8.4.35

• Avoid ! in node.parent.nodes type.
• Allow to pass undefined to node adding method to simplify types.

8.4.34

• Fixed AtRule#nodes type (by Tim Weißenfels).
• Cleaned up code (by Dmitry Kirillov).

8.4.33

• Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).
• Fixed NoWorkResult usage conditions (by @​ahmdammarr).

8.4.32

• Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

• Fixed \r parsing to fix CVE-2023-44270.

8.4.30

• Improved source map performance (by Romain Menke).

8.4.29

• Fixed Node#source.offset (by Ido Rosenthal).
• Fixed docs (by Christian Oliff).

8.4.28

• Fixed Root.source.end for better source map (by Romain Menke).
• Fixed Result.root types when process() has no parser.

8.4.27

• Fixed Container clone methods types.

8.4.26

• Fixed clone methods types.

8.4.25

• Improve stringify performance (by Romain Menke).
• Fixed docs (by @​vikaskaliramna07).

8.4.24

• Fixed Plugin types.

... (truncated)

Commits

• a69d45e Release 8.4.38 version
• 64e35d9 Update dependencies
• c1ad8fb Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...
• b45e7e9 fix endIndex
• 1bea246 failing test: for endIndex 0 in rangeBy
• 0fd1d86 Add changelog auto release on Github
• 49c906e Release 8.4.37 version
• b5bd92c Fix another broken prev source map issue
• 2882039 Update dependencies
• e5ad939 Release 8.4.36 version
• Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 13.3.11 to 18.2.10

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v18.2.10

18.2.10 (2024-10-23)

@​angular-devkit/build-angular

Commit	Description
	update http-proxy-middleware to 3.0.3

@​angular/build

Commit	Description
	Address build issue in Node.js LTS versions with prerendering or SSR

v18.2.9

18.2.9 (2024-10-16)

@​schematics/angular

Commit	Description
	update browserslist config to include last 2 Android major versions

@​angular/build

Commit	Description
	allow direct bundling of TSX files with application builder
	avoid race condition in sass importer

v18.2.8

18.2.8 (2024-10-09)

@​schematics/angular

Commit	Description
	add validation for component and directive class name
	include index.csr.html in resources asset group

@​angular/build

Commit	Description
	Ctrl + C not terminating dev-server with SSR
	always generate a new hash for optimized chunk

v18.2.7

18.2.7 (2024-10-02)

@​schematics/angular

Commit	Description
	support single quote setting in JetBrains IDEs

@​angular/build

Commit	Description
	add animate to valid self-closing elements

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

18.2.10 (2024-10-23)

@​angular-devkit/build-angular

Commit	Type	Description
7b775f4e0	fix	update http-proxy-middleware to 3.0.3

@​angular/build

Commit	Type	Description
b1e5f51f9	fix	Address build issue in Node.js LTS versions with prerendering or SSR

17.3.11 (2024-10-23)

@​angular-devkit/build-angular

Commit	Type	Description
8bad9cee0	fix	update http-proxy-middleware to 2.0.7

19.0.0-next.12 (2024-10-21)

Breaking Changes

@​angular-devkit/build-angular

• Protractor is no longer supported.

  Protractor was marked end-of-life in August 2023 (see https://protractortest.org/). Projects still relying on Protractor should consider migrating to another E2E testing framework, several support solid migration paths from Protractor.

  • https://angular.dev/tools/cli/end-to-end
  • https://blog.angular.dev/the-state-of-end-to-end-testing-with-angular-d175f751cb9c

@​angular-devkit/build-angular

Commit	Type	Description
62877bdf2	refactor	remove Protractor builder and schematics

@​angular/build

... (truncated)

Commits

• fee914e release: cut the v18.2.10 release
• 7b775f4 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.3
• b1e5f51 fix(@​angular/build): Address build issue in Node.js LTS versions with prerend...
• 302c4d1 release: cut the v18.2.9 release
• d749ba6 fix(@​angular/build): allow direct bundling of TSX files with application builder
• b91c82d fix(@​angular/build): avoid race condition in sass importer
• 237f7c5 fix(@​schematics/angular): update browserslist config to include last 2 Androi...
• 1e578df release: cut the v18.2.8 release
• 9445916 fix(@​angular/build): Ctrl + C not terminating dev-server with SSR
• 9b5cfaa fix(@​angular/build): always generate a new hash for optimized chunk
• Additional commits viewable in compare view

Updates webpack from 5.76.1 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

• Added runtime condition for harmony reexport checked
• Handle properly data/http/https protocols in source maps
• Make bigint optimistic when browserslist not found
• Move @​types/eslint-scope to dev deps
• Related in asset stats is now always an array when no related found
• Handle ASI for export declarations
• Mangle destruction incorrect with export named default properly
• Fixed unexpected asi generation with sequence expression
• Fixed a lot of types

New Features

• Added new external type "module-import"
• Support webpackIgnore for new URL() construction
• [CSS] @import pathinfo support

Security

• Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

• Generate correct relative path to runtime chunks
• Makes DefinePlugin quieter under default log level
• Fixed mangle destructuring default in namespace import
• Fixed consumption of eager shared modules for module federation
• Strip slash for pretty regexp
• Calculate correct contenthash for CSS generator options

New Features

• Added the binary generator option for asset modules to explicitly keep source maps produced by loaders
• Added the modern-module library value for tree shakable output
• Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

• Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

• Correct tidle range's comutation for module federation
• Consider runtime for pure expression dependency update hash
• Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits

• eabf85d chore(release): 5.94.0
• 955e057 security: fix DOM clobbering in auto public path
• 9822387 test: fix
• cbb86ed test: fix
• 5ac3d7f fix: unexpected asi generation with sequence expression
• 2411661 security: fix DOM clobbering in auto public path
• b8c03d4 fix: unexpected asi generation with sequence expression
• f46a03c revert: do not use heuristic fallback for "module-import"
• 60f1898 fix: do not use heuristic fallback for "module-import"
• 66306aa Revert "fix: module-import get fallback from externalsPresets"
• Additional commits viewable in compare view

Updates @babel/traverse from 7.24.8 to 7.25.9

Release notes

Sourced from @​babel/traverse's releases.

v7.25.9 (2024-10-22)

Thanks @​victorenator for your first PR!

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #16914 remove test options flaky (@​JLHwung)
• Every package
  • #16917 fix: Accidentally published tsconfig files (@​liuxingbaoyu)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Viktar Vaŭčkievič (@​victorenator)
• @​liuxingbaoyu

v7.25.8 (2024-10-10)

🐛 Bug Fix

• babel-core
  • #16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

Committers: 3

• Babel Bot (@​babel-bot)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v7.25.7 (2024-10-02)

Thanks @​DylanPiercey and @​YuHyeonWook for your first PRs!

🐛 Bug Fix

• babel-helper-validator-identifier
  • #16825 fix: update identifier to unicode 16 (@​JLHwung)

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.25.9 (2024-10-22)

🐛 Bug Fix

• babel-parser, babel-template, babel-types
  • #16905 fix: Keep type annotations in syntacticPlaceholders mode (@​liuxingbaoyu)
• babel-helper-compilation-targets, babel-preset-env
  • #16907 fix: support BROWSERSLIST{,_CONFIG} env (@​JLHwung)
• Other
  • #16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@​victorenator)

🏠 Internal

• babel-helper-transform-fixture-test-runner
  • #16914 remove test options flaky (@​JLHwung)

🏃‍♀️ Performance

• babel-parser, babel-types
  • #16918 perf: Make VISITOR_KEYS etc. faster to access (@​liuxingbaoyu)

v7.25.8 (2024-10-10)

🐛 Bug Fix

• babel-core
  • #16888 Restore public API of resolvePlugin/resolvePreset (@​nicolo-ribaudo)

🏠 Internal

• babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env
  • #16824 Inline one-line syntax plugins (@​nicolo-ribaudo)

v7.25.7 (2024-10-02)

🐛 Bug Fix

• babel-helper-validator-identifier
  • #16825 fix: update identifier to unicode 16 (@​JLHwung)
• babel-traverse
  • #16814 fix: issue with node path keys updated on unrelated paths (@​DylanPiercey)
• babel-plugin-transform-classes
  • #16797 Use an inclusion rather than exclusion list for super() check (@​nicolo-ribaudo)
• babel-generator
  • #16788 Fix printing of TS infer in compact mode (@​nicolo-ribaudo)
  • #16785 Print TS type annotations for destructuring in assignment pattern (@​nicolo-ribaudo)
  • #16778 Respect [no LineTerminator here] after nodes (@​nicolo-ribaudo)

💅 Polish

• babel-types
  • #16852 Add deprecated JSDOC for fields (@​liuxingbaoyu)

🏠 Internal

• babel-core
  • #16820 Allow sync loading of ESM when --experimental-require-module (@​nicolo-ribaudo)
• babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • #16858 Add browserslist config to external dependency (@​JLHwung)
• babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone

... (truncated)

Commits

• b07957e v7.25.9
• af91759 fix: Accidentally publishing useless files (#16917)
• 2533cfb v7.25.7
• 611d958 [babel 8] Create TSClassImplements|TSInterfaceHeritage nodes (#16731)
• 506bf91 Remove BABEL_TYPES_8_BREAKING flag and enable it by default (#16817)
• 9e14f7d chore: Enable more lint rules (#16827)
• e69a7e5 fix: issue with node path keys updated on unrelated paths (#16814)
• 7467c9d [Babel 8] Remove some Scope methods (#16705)
• 0a55713 [Babel 8] Remove DecimalLiteral AST (#16807)
• 69d65f1 [babel 8] Require Node.js ^18.20.0 || ^20.17.0 || >=22.8.0 (#16800)
• Additional commits viewable in compare view

Updates @koa/cors from 3.3.0 to 5.0.0

Changelog

Sourced from @​koa/cors's changelog.

5.0.0 / 2023-12-11

others

• [f31dac9] - Merge pull request from GHSA-qxrj-hx23-xp82 (fengmk2 )

4.0.0 / 2022-10-08

fixes

• [7358ab3] - fix: Calling all options even if origin header is not present (#87) (Cleber Rossi )

others

• [d19090f] - refactor: [BREAKING] drop node 8, 10, 12 support (#88) (fengmk2 )

3.4.3 / 2022-10-08

others

• [208b86c] - Revert "fix: Calling all options even if origin header is not present (#87)" (fengmk2 )

3.4.2 / 2022-10-06

fixes

• [2e8da5b] - fix: Calling all options even if origin header is not present (#87) (Cleber Rossi )

3.4.1 / 2022-08-19

fixes

• [1205356] - fix: must specify an origin value instead of "*" wildcard (#85) (Tyreal Hu )

3.4.0 / 2022-08-19

others

• [2cd4789] - 🤖 TEST: Run test on Node.js 18 (#86) (fengmk2 )
• [ae56e05] - Create codeql-analysis.yml (fengmk2 )
• [c4b5d21] - refactor: use friendlier promise checking (#84) (Swain Molster )
• [fbe33bc] - 📖 DOC: Add privateNetworkAccess js to README (fengmk2 )

Commits

• c33bd69 Release 5.0.0
• f31dac9 Merge pull request from GHSA-qxrj-hx23-xp82
• 0f3f948 Release 4.0.0
• d19090f refactor: [BREAKING] drop node 8, 10, 12 support (#88)
• 7358ab3 fix: Calling all options even if origin header is not present (#87)
• b49b085 Release 3.4.3
• 208b86c Revert "fix: Calling all options even if origin header is not present (#87)"
• d5456f7 Release 3.4.2
• 2e8da5b fix: Calling all options even if origin header is not present (#87)
• ea0ca7b Release 3.4.1
• Additional commits viewable in compare view

Updates oidc-provider from 7.11.4 to 8.5.2

Release notes

Sourced from oidc-provider's releases.

v8.5.2

Refactor

• remove use of node:url in favour of WHATWG URL (0dc59a1)

Documentation

• update docs/README.md (07f6333)

v8.5.1

Documentation

• update README.md (41a7a0b)

Refactor

• build: export Provider also as a named export (083c7c4)

v8.5.0

Features

• add a Client static validate() method (d1f7d73)
• add a helper allowing custom claims parameter validations (ec2a1f5)
• add experimental support for RFC9396 - Rich Authorization Requests (e9fb573)
• add response_modes client metadata allow list (76f9af0)
• allow extraParams to define validations for extra parameters (b7d3322)
• DPoP: add a setting to disable DPoP Proof Replay Detection (2744fc8)
• DPoP: send a dpop-nonce when the proof's iat check fails and nonces are configured but not required (1b073c0)
• FAPI: add FAPI 2.0 profile behaviours (5212609)
• JAR: add a helper allowing custom JWT claim and header validations (be9242a)
• PAR: add a setting to allow use of unregistered redirect_uri values (a7e73fa)
• update Web Message Response Mode and remove its Relay Mode (a91add8)

Fixes

• DPoP,mTLS: reject client configuration in which binding is required but response types include an implicit token response (cd7e0f4)

Refactor

• deprecate FAPI 1.0 ID2, lax request objects, plain PKCE (3e8a784)
• don't use overwrite cookie option by default (dfbcb94)
• DPoP: move the accepted timespan into a constant (a8e8006)
• DPoP: omit sending the dpop-nonce header if the existing one used is fresh (4d635e2)
• ensure param-assigned max_age from client.defaultMaxAge is a string (0c52469)
• FAPI: deprecate FAPI profile hardcoded PKCE checks (56641ec)
• JAR: authorization requests with JAR now require a client_id parameter (9131cd5)

... (truncated)

Changelog

Sourced from oidc-provider's changelog.

8.5.2 (2024-10-19)

Refactor

• remove use of node:url in favour of WHATWG URL (0dc59a1)

Documentation

• update docs/README.md (07f6333)

8.5.1 (2024-07-03)

Documentation

• update README.md (41a7a0b)

Refactor

• build: export Provider also as a named export (083c7c4)

8.5.0 (2024-06-28)

Features

• add a Client static validate() method (d1f7d73)
• add a helper allowing custom claims parameter validations (ec2a1f5)
• add experimental support for RFC9396 - Rich Authorization Requests (e9fb573)
• add response_modes client metadata allow list (76f9af0)
• allow extraParams to define validations for extra parameters (b7d3322)
• DPoP: add a setting to disable DPoP Proof Replay Detection (2744fc8)
• DPoP: send a dpop-nonce when the proof's iat check fails and nonces are configured but not required (1b073c0)
• FAPI: add FAPI 2.0 profile behaviours (5212609)
• JAR: add a helper allowing custom JWT claim and header validations (be9242a)
• PAR: add a setting to allow use of unregistered redirect_uri values (a7e73fa)
• update Web Message Response Mode and remove its Relay Mode (a91add8)

Fixes

• DPoP,mTLS: reject client configuration in which binding is required but response types include an implicit token response (cd7e0f4)

Refactor

• deprecate FAPI 1.0 ID2, lax request objects, plain PKCE (3e8a784)

... (truncated)

Commits

• e830654 chore(release): 8.5.2
• 97f3050 chore: bump package-lock.json
• 4ce4fd6 ci: use reusable worflow for node-versions
• 43f0976 ci: update node versions matrix
• 05266fb chore: bump dependencies
• 07f6333 docs: update docs/README.md
• 0fc3f35 chore: update README.md
• 0dc59a1 refactor: remove use of node:url in favour of WHATWG URL
• 47a77d9 chore: fixup light scheme link
• 596e04a chore: updated sponsor logo and placement
• Additional commits viewable in compare view

Updates body-parser from 1.20.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

• deps: [email protected]
• add depth option to customize the depth level in the parser
• IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

• chore: add support for OSSF scorecard reporting by @​inigomarquinez in expressjs/body-parser#522
• ci: fix errors in ci github action for node 8 and 9 by @​inigomarquinez in expressjs/body-parser#523
• fix: pin to [email protected] by @​wesleytodd in expressjs/body-parser#527
• deps: [email protected] by @​melikhov-dev in expressjs/body-parser#521
• Add OSSF Scorecard badge by @​bjohansebas in expressjs/body-parser#531
• Linter by @​UlisesGascon in expressjs/body-parser#534
• Release: 1.20.3 by @​UlisesGascon in expressjs/body-parser#535

New Contributors

• @​inigomarquinez made their first contribution in expressjs/body-parser#522
• @​melikhov-dev made their first contribution in expressjs/body-parser#521
• @​bjohansebas made their first contribution in expressjs/body-parser#531
• @​UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

• deps: [email protected]
• add depth option to customize the depth level in the parser
• IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Commits

• 1752951 1.20.3
• 39744cf chore: linter (#534)
Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.

[dependabot]

Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.