Bump the npm_and_yarn group with 17 updates #23

dependabot · 2024-06-28T00:59:44Z

Bumps the npm_and_yarn group with 18 updates:

Package	From	To
jsdom	`11.10.0`	`16.5.0`
semver	`5.7.1`	`5.7.2`
debug	`4.1.1`	`4.3.5`
glob-parent	`5.1.1`	`5.1.2`
handlebars	`4.7.6`	`4.7.8`
json-schema	`0.2.3`	`0.4.0`
lodash	`4.17.20`	`4.17.21`
minimist	`1.2.5`	`1.2.8`
mocha	`5.2.0`	`10.5.2`
node-fetch	`2.6.1`	`2.7.0`
qs	`6.5.2`	`6.5.3`
tough-cookie	`2.5.0`	`4.1.4`
jsdom	`16.5.0`	`16.7.0`
word-wrap	`1.2.3`	`1.2.5`
ws	`4.1.0`	`7.5.10`
y18n	`3.2.1`	`3.2.2`
yargs-parser	`5.0.0-security.0`	`5.0.1`
yargs	`7.1.1`	`7.1.2`

Updates jsdom from 11.10.0 to 16.5.0

Release notes

Sourced from jsdom's releases.

Version 16.5.0

Added window.queueMicrotask().

Added window.event.

Added inputEvent.inputType. (diegohaz)

Removed ondragexit from Window and friends, per a spec update.

Fixed the URL of about:blank iframes. Previously it was getting set to the parent's URL. (SimonMueller)

Fixed the loading of subresources from the filesystem when they had non-ASCII filenames.

Fixed the hidden="" attribute to cause display: none per the user-agent stylesheet. (ph-fritsche)

Fixed the new File() constructor to no longer convert / to :, per a pending spec update.

Fixed mutation observer callbacks to be called with the MutationObserver instance as their this value.

Fixed <input type=checkbox> and <input type=radio> to be mutable even when disabled, per a spec update.

Fixed XMLHttpRequest to not fire a redundant final progress event if a progress event was previously fired with the same loaded value. This would usually occur with small files.

Fixed XMLHttpRequest to expose the Content-Length header on cross-origin responses.

Fixed xhr.response to return null for failures that occur during the middle of the download.

Fixed edge cases around passing callback functions or event handlers. (ExE-Boss)

Fixed edge cases around the properties of proxy-like objects such as localStorage or dataset. (ExE-Boss)

Fixed a potential memory leak with custom elements (although we could not figure out how to trigger it). (soncodi)

Version 16.4.0

Added a not-implemented warning if you try to use the second pseudo-element argument to getComputedStyle(), unless you pass a ::part or ::slotted pseudo-element, in which case we throw an error per the spec. (ExE-Boss)

Improved the performance of repeated access to el.tagName, which also indirectly improves performance of selector matching and style computation. (eps1lon)

Fixed form.elements to respect the form="" attribute, so that it can contain non-descendant form controls. (ccwebdesign)

Fixed el.focus() to do nothing on disconnected elements. (eps1lon)

Fixed el.focus() to work on SVG elements. (zjffun)

Fixed removing the currently-focused element to move focus to the <body> element. (eps1lon)

Fixed imgEl.complete to return true for <img> elements with empty or unset src="" attributes. (strager)

Fixed imgEl.complete to return true if an error occurs loading the <img>, when canvas is enabled. (strager)

Fixed imgEl.complete to return false if the <img> element's src="" attribute is reset. (strager)

Fixed the valueMissing validation check for <input type="radio">. (zjffun)

Fixed translate="" and draggable="" attribute processing to use ASCII case-insensitivity, instead of Unicode case-insensitivity. (zjffun)

Version 16.3.0

Added firing of focusin and focusout when using el.focus() and el.blur(). (trueadm)

Fixed elements with the contenteditable="" attribute to be considered as focusable. (jamieliu386)

Fixed window.NodeFilter to be per-Window, instead of shared across all Windows. (ExE-Boss)

Fixed edge-case behavior involving use of objects with handleEvent properties as event listeners. (ExE-Boss)

Fixed a second failing image load sometimes firing a load event instead of an error event, when the canvas package is installed. (strager)

Fixed drawing an empty canvas into another canvas. (zjffun)

Version 16.2.2

Updated StyleSheetList for better spec compliance; notably it no longer inherits from Array.prototype. (ExE-Boss)

Fixed requestAnimationFrame() from preventing process exit. This likely regressed in v16.1.0.

Fixed setTimeout() to no longer leak the closures passed in to it. This likely regressed in v16.1.0. (AviVahl)

Fixed infinite recursion that could occur when calling click() on a <label> element, or one of its descendants.

Fixed getComputedStyle() to consider inline style="" attributes. (eps1lon)

Fixed several issues with <input type="number">'s stepUp() and stepDown() functions to be properly decimal-based, instead of floating point-based.

Fixed various issues where updating selectEl.value would not invalidate properties such as selectEl.selectedOptions. (ExE-Boss)

Fixed <input>'s src property, and <ins>/<del>'s cite property, to properly reflect as URLs.

Fixed window.addEventLister, window.removeEventListener, and window.dispatchEvent to properly be inherited from EventTarget, instead of being distinct functions. (ExE-Boss)

Fixed errors that would occur if attempting to use a DOM object, such as a custom element, as an argument to addEventListener.

... (truncated)

Changelog

Sourced from jsdom's changelog.

16.5.0

Added window.queueMicrotask().

Added window.event.

Added inputEvent.inputType. (diegohaz)

Removed ondragexit from Window and friends, per a spec update.

Fixed the URL of about:blank iframes. Previously it was getting set to the parent's URL. (SimonMueller)

Fixed the loading of subresources from the filesystem when they had non-ASCII filenames.

Fixed the hidden="" attribute to cause display: none per the user-agent stylesheet. (ph-fritsche)

Fixed the new File() constructor to no longer convert / to :, per a pending spec update.

Fixed mutation observer callbacks to be called with the MutationObserver instance as their this value.

Fixed <input type=checkbox> and <input type=radio> to be mutable even when disabled, per a spec update.

Fixed XMLHttpRequest to not fire a redundant final progress event if a progress event was previously fired with the same loaded value. This would usually occur with small files.

Fixed XMLHttpRequest to expose the Content-Length header on cross-origin responses.

Fixed xhr.response to return null for failures that occur during the middle of the download.

Fixed edge cases around passing callback functions or event handlers. (ExE-Boss)

Fixed edge cases around the properties of proxy-like objects such as localStorage or dataset. (ExE-Boss)

Fixed a potential memory leak with custom elements (although we could not figure out how to trigger it). (soncodi)

16.4.0

Added a not-implemented warning if you try to use the second pseudo-element argument to getComputedStyle(), unless you pass a ::part or ::slotted pseudo-element, in which case we throw an error per the spec. (ExE-Boss)

Improved the performance of repeated access to el.tagName, which also indirectly improves performance of selector matching and style computation. (eps1lon)

Fixed form.elements to respect the form="" attribute, so that it can contain non-descendant form controls. (ccwebdesign)

Fixed el.focus() to do nothing on disconnected elements. (eps1lon)

Fixed el.focus() to work on SVG elements. (zjffun)

Fixed removing the currently-focused element to move focus to the <body> element. (eps1lon)

Fixed imgEl.complete to return true for <img> elements with empty or unset src="" attributes. (strager)

Fixed imgEl.complete to return true if an error occurs loading the <img>, when canvas is enabled. (strager)

Fixed imgEl.complete to return false if the <img> element's src="" attribute is reset. (strager)

Fixed the valueMissing validation check for <input type="radio">. (zjffun)

Fixed translate="" and draggable="" attribute processing to use ASCII case-insensitivity, instead of Unicode case-insensitivity. (zjffun)

16.3.0

Added firing of focusin and focusout when using el.focus() and el.blur(). (trueadm)

Fixed elements with the contenteditable="" attribute to be considered as focusable. (jamieliu386)

Fixed window.NodeFilter to be per-Window, instead of shared across all Windows. (ExE-Boss)

Fixed edge-case behavior involving use of objects with handleEvent properties as event listeners. (ExE-Boss)

Fixed a second failing image load sometimes firing a load event instead of an error event, when the canvas package is installed. (strager)

Fixed drawing an empty canvas into another canvas. (zjffun)

16.2.2

Updated StyleSheetList for better spec compliance; notably it no longer inherits from Array.prototype. (ExE-Boss)

Fixed requestAnimationFrame() from preventing process exit. This likely regressed in v16.1.0.

Fixed setTimeout() to no longer leak the closures passed in to it. This likely regressed in v16.1.0. (AviVahl)

Fixed infinite recursion that could occur when calling click() on a <label> element, or one of its descendants.

Fixed getComputedStyle() to consider inline style="" attributes. (eps1lon)

Fixed several issues with <input type="number">'s stepUp() and stepDown() functions to be properly decimal-based, instead of floating point-based.

... (truncated)

Commits

2d82763 Version 16.5.0
9741311 Fix loading of subresources with Unicode filenames
5e46553 Use domenic's ESLint config as the base
19b35da Fix the URL of about:blank iframes
017568e Support inputType on InputEvent
29f4fdf Upgrade dependencies
e2f7639 Refactor create‑event‑accessor.js to remove code duplication
ff69a75 Convert JSDOM to use callback functions
19df6bc Update links in contributing guidelines
1e34ff5 Test triage
Additional commits viewable in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates debug from 4.1.1 to 4.3.5

Release notes

Sourced from debug's releases.

4.3.5

Patch

cac39b1c5b018b0fe93a53a05f084eee543d17f5 Fix/debug depth (#926)

Thank you @calvintwr for the fix.

4.3.4

What's Changed

Add section about configuring JS console to show debug messages by @gitname in debug-js/debug#866

Replace deprecated String.prototype.substr() by @CommanderRoot in debug-js/debug#876

New Contributors

@gitname made their first contribution in debug-js/debug#866

@CommanderRoot made their first contribution in debug-js/debug#876

Full Changelog: debug-js/debug@4.3.3...4.3.4

4.3.3

Patch Release 4.3.3

This is a documentation-only release. Further, the repository was transferred. Please see notes below.

Migrates repository from https://github.com/visionmedia/debug to https://github.com/debug-js/debug. Please see notes below as to why this change was made.

Updates repository maintainership information

Updates the copyright (no license terms change has been made)

Removes accidental epizeuxis (#828)

Adds README section regarding usage in child procs (#850)

Thank you to @taylor1791 and @kristofkalocsai for their contributions.

Repository Migration Information

I've formatted this as a FAQ, please feel free to open an issue for any additional question and I'll add the response here.

Q: What impact will this have on me?

In most cases, you shouldn't notice any change.

The only exception I can think of is if you pull code directly from https://github.com/visionmedia/debug, e.g. via a "debug": "visionmedia/debug"-type version entry in your package.json - in which case, you should still be fine due to the automatic redirection Github sets up, but you should also update any references as soon as possible.

Q: What are the security implications of this change?

If you pull code directly from the old URL, you should update the URL to https://github.com/debug-js/debug as soon as possible. The old organization has many approved owners and thus a new repository could (in theory) be created at the old URL, circumventing Github's automatic redirect that is in place now and serving malicious code. I (@qix-) also wouldn't have access to that repository, so while I don't think it would happen, it's still something to consider.

Even in such a case, however, the officially released package on npm (debug) would not be affected. That package is still very much under control (even more than it used to be).

Q: What should I do if I encounter an issue related to the migration?

Search the issues first to see if someone has already reported it, and then open a new issue if someone has not.

... (truncated)

Commits

5464bdd 4.3.5
f244ada update authorship contact info
cac39b1 Fix/debug depth (#926)
f66cb2d remove .github folder (and the outdated issue templates)
d161662 Update ISSUE_TEMPLATE.md
12c1ad0 Update ISSUE_TEMPLATE.md
da66c86 4.3.4
9b33412 replace deprecated String.prototype.substr() (#876)
c0805cc add section about configuring JS console to show debug messages (#866)
043d3cd 4.3.3
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates glob-parent from 5.1.1 to 5.1.2

Release notes

Sourced from glob-parent's releases.

v5.1.2

Bug Fixes

eliminate ReDoS (#36) (f923116)

Changelog

Sourced from glob-parent's changelog.

5.1.2 (2021-03-06)

Bug Fixes

eliminate ReDoS (#36) (f923116)

6.0.2 (2021-09-29)

Bug Fixes

Improve performance (#53) (843f8de)

6.0.1 (2021-07-20)

Bug Fixes

Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a)

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Correct mishandled escaped path separators (#34)

upgrade scaffold, dropping node <10 support

Bug Fixes

Correct mishandled escaped path separators (#34) (32f6d52), closes #32

Miscellaneous Chores

upgrade scaffold, dropping node <10 support (e83d0c5)

Commits

eb2c439 chore: update changelog
12bcb6c chore: release 5.1.2
f923116 fix: eliminate ReDoS (#36)
0b014a7 chore: add JSDoc returns information (#33)
2b24ebd chore: generate initial changelog
See full diff in compare view

Updates handlebars from 4.7.6 to 4.7.8

Release notes

Sourced from handlebars's releases.

v4.7.8

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.8 - July 27th, 2023

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

v4.7.7 - February 15th, 2021

fix weird error in integration tests - eb860c0

fix: check prototype property access in strict-mode (#1736) - b6d3de7

fix: escape property names in compat mode (#1736) - f058970

refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8

chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

Commits

8dc3d25 v4.7.8
668c4fb Fix browser tests in CI pipeline
c65c6cc Test on Node 18
3d3796c Make library compatible with workers
075b354 Fix sync issue with npm lock-file
30dbf04 Fix compiling of each block params in strict mode
e3a5448 Fix bundler issue with webpack 5
8e23642 Fix integration-tests issue with npm >= 7
88ac068 use https instead of git for mustache submodule
c68bc08 Fix typo
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.

Updates json-schema from 0.2.3 to 0.4.0

Commits

f6f6a3b Use a little more robust method of checking instances
ef60987 Update version
b62f1da Protect against constructor modification, #84
fb427cd Link to json-schema-org repository in addition to site, fixes #54
22f1461 Don't allow proto property to be used for schema default/coerce, fixes #84
c52a27c Get basic test to pass
b3f42b3 Add security policy
3b0cec3 Update version
c28470f Update readme to acknowledge the state of the package
7dff9cd Merge pull request #81 from hodovani/patch-1
Additional commits viewable in compare view

Updates lodash from 4.17.20 to 4.17.21

Commits

f299b52 Bump to v4.17.21
c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
3469357 Prevent command injection through _.template's variable option
See full diff in compare view

Updates minimist from 1.2.5 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates mocha from 5.2.0 to 10.5.2

Release notes

Sourced from mocha's releases.

v10.5.2

What's Changed

fix: better tracking of seen objects in error serialization by @sam-super in mochajs/mocha#5032

New Contributors

@sam-super made their first contribution in mochajs/mocha#5032

Full Changelog: mochajs/mocha@v10.5.1...v10.5.2

v10.5.1

What's Changed

fix: Add error handling for nonexistent file case with --file option by @khoaHyh in mochajs/mocha#5086

New Contributors

@khoaHyh made their first contribution in mochajs/mocha#5086

Full Changelog: mochajs/mocha@v10.5.0...v10.5.1

v10.5.0

🎉 Enhancements

#5015 feat: use <progress> and <svg> for browser progress indicator instead of <canvas> (@yourWaifu)

#5143 feat: allow using any 3.x chokidar dependencies (@simhnna)

#4835 feat: add MOCHA_OPTIONS env variable (@icholy)

🐛 Fixes

#5107 fix: include stack in browser uncaught error reporting (@JoshuaKGoldberg)

🔩 Other

#5110 chore: switch two-column list styles to be opt-in (@marjys)

#5135 chore: fix some typos in comments (@StevenMia)

#5130 chore: rename 'master' to 'main' in docs and tooling (@JoshuaKGoldberg)

v10.4.0

10.4.0 / 2024-03-26

🎉 Enhancements

#4829 feat: include .cause stacks in the error stack traces (@voxpelli)

#4985 feat: add file path to xunit reporter (@bmish)

🐛 Fixes

#5074 fix: harden error handling in lib/cli/run.js (@stalet)

🔩 Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.5.2 / 2024-05-25

🐛 Fixes

#5032 fix: better tracking of seen objects in error serialization (@sam-super)

10.5.1 / 2024-05-24

🐛 Fixes

#5086 fix: Add error handling for nonexistent file case with --file option (@khoaHyh)

10.5.0 / 2024-05-24

🎉 Enhancements

#5015 feat: use <progress> and <svg> for browser progress indicator instead of <canvas> (@yourWaifu)

#5143 feat: allow using any 3.x chokidar dependencies (@simhnna)

#4835 feat: add MOCHA_OPTIONS env variable (@icholy)

🐛 Fixes

#5107 fix: include stack in browser uncaught error reporting (@JoshuaKGoldberg)

🔩 Other

#5110 chore: switch two-column list styles to be opt-in (@marjys)

#5135 chore: fix some typos in comments (@StevenMia)

#5130 chore: rename 'master' to 'main' in docs and tooling (@JoshuaKGoldberg)

10.4.0 / 2024-03-26

🎉 Enhancements

#4829 feat: include .cause stacks in the error stack traces (@voxpelli)

#4985 feat: add file path to xunit reporter (@bmish)

🐛 Fixes

#5074 fix: harden error handling in lib/cli/run.js (@stalet)

🔩 Other

#5077 chore: add mtfoley/pr-compliance-action (@JoshuaKGoldberg)

#5060 chore: migrate ESLint config to flat config (@JoshuaKGoldberg)

#5095 chore: revert #5069 to restore Netlify builds (@voxpelli)

#5097 docs: add sponsored to sponsorship link rels (@JoshuaKGoldberg)

#5093 chore: add 'status: in triage' label to issue templates and docs (@JoshuaKGoldberg)

#5083 docs: fix CHANGELOG.md headings to start with a root-level h1 (@JoshuaKGoldberg)

#5100 chore: fix header generation and production build crashes (@JoshuaKGoldberg)

... (truncated)

Commits

b2a6358 Release 10.5.2
a3bb86d docs: add 10.5.2 to CHANGELOG.md
0 8000 2c04c4 fix: better tracking of seen objects in error serialization (#5032)
103c56b Release v10.5.1
545b66d docs: add 10.5.1 to CHANGELOG.md
dbe229d fix: Add error handling for nonexistent file case with --file option (#5086)
b9ce511 Release v10.5.0
12c88a7 Docs: add 10.5.0 to CHANGELOG.md
b6aa7e8 chore: rename 'master' to 'main' in docs and tooling (#5130)
67a8124 fix: include stack in browser uncaught error reporting (#5107)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by joshuakgoldberg, a new releaser for mocha since your current version.

Updates node-fetch from 2.6.1 to 2.7.0

Release notes

Sourced from node-fetch's releases.

v2.7.0

2.7.0 (2023-08-23)

Features

AbortError (#1744) (9b9d458)

v2.6.13

2.6.13 (2023-08-18)

Bug Fixes

Remove the default connection close header (#1765) (65ae25a), closes #1735 #1473 #1736

v2.6.12

2.6.12 (2023-06-29)

Bug Fixes

socket variable testing for undefined (#1726) (8bc3a7c)

v2.6.11

2.6.11 (2023-05-09)

Reverts

Revert "fix: handle bom in text and json (#1739)" (#1741) (afb36f6), closes #1739 #1741

v2.6.10

2.6.10 (2023-05-08)

Bug Fixes

handle bom in text and json (#1739) (29909d7)

v2.6.9

2.6.9 (2023-01-30)

Bug Fixes

"global is not defined" (#1704) (70f592d)

v2.6.8

2.6.8 (2023-01-13)

... (truncated)

Commits

9b9d458 feat: AbortError (#1744)
65ae25a fix: Remove the default connection close header (#1765)
8bc3a7c fix: socket variable testing for undefined (#1726)
afb36f6 Revert "fix: handle bom in text and json (#1739)" (#1741)
29909d7 fix: handle bom in text and json (#1739)
70f592d fix: "global is not defined" (#1704)
0f1ebb0 Prevent error when response is null (#1699)
6e9464d ci(release): install dependencies
dd2a0ba ci(release): install dependencies
49bef02 ci(release): use latest Node LTS
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.

Updates qs from 6.5.2 to 6.5.3

Changelog

Sourced from qs's chan...

Description has been truncated

Bumps the npm_and_yarn group with 18 updates: | Package | From | To | | --- | --- | --- | | [jsdom](https://github.com/jsdom/jsdom) | `11.10.0` | `16.5.0` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [debug](https://github.com/debug-js/debug) | `4.1.1` | `4.3.5` | | [glob-parent](https://github.com/gulpjs/glob-parent) | `5.1.1` | `5.1.2` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.6` | `4.7.8` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.20` | `4.17.21` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [mocha](https://github.com/mochajs/mocha) | `5.2.0` | `10.5.2` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.1` | `2.7.0` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `2.5.0` | `4.1.4` | | [jsdom](https://github.com/jsdom/jsdom) | `16.5.0` | `16.7.0` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | | [ws](https://github.com/websockets/ws) | `4.1.0` | `7.5.10` | | [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` | | [yargs-parser](https://github.com/yargs/yargs-parser) | `5.0.0-security.0` | `5.0.1` | | [yargs](https://github.com/yargs/yargs) | `7.1.1` | `7.1.2` | Updates `jsdom` from 11.10.0 to 16.5.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](jsdom/jsdom@11.10.0...16.5.0) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `debug` from 4.1.1 to 4.3.5 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@4.1.1...4.3.5) Updates `glob-parent` from 5.1.1 to 5.1.2 - [Release notes](https://github.com/gulpjs/glob-parent/releases) - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md) - [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2) Updates `handlebars` from 4.7.6 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.6...v4.7.8) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `lodash` from 4.17.20 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.20...4.17.21) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `mocha` from 5.2.0 to 10.5.2 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v5.2.0...v10.5.2) Updates `node-fetch` from 2.6.1 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.1...v2.7.0) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `tough-cookie` from 2.5.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v4.1.4) Updates `jsdom` from 16.5.0 to 16.7.0 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md) - [Commits](jsdom/jsdom@11.10.0...16.5.0) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `ws` from 4.1.0 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@4.1.0...7.5.10) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `yargs-parser` from 5.0.0-security.0 to 5.0.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/v5.0.1/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs-parser/commits/v5.0.1) Updates `yargs` from 7.1.1 to 7.1.2 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/yargs-v7.1.2/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs/commits/yargs-v7.1.2) --- updated-dependencies: - dependency-name: jsdom dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsdom dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 28, 2024

This was referenced Jun 28, 2024

Bump glob-parent from 5.1.1 to 5.1.2 #1

Closed

Bump handlebars from 4.7.6 to 4.7.7 #11

Closed

Bump jsdom from 11.10.0 to 16.5.0 #13

Closed

Bump node-fetch from 2.6.1 to 2.6.7 #14

Closed

Bump qs from 6.5.2 to 6.5.3 #16

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group with 17 updates #23

Bump the npm_and_yarn group with 17 updates #23

Uh oh!

Uh oh!

Uh oh!

Bump the npm_and_yarn group with 17 updates #23

Are you sure you want to change the base?

Bump the npm_and_yarn group with 17 updates #23

Uh oh!

Conversation

Version 16.5.0

Version 16.4.0

Version 16.3.0

Version 16.2.2

16.5.0

16.4.0

16.3.0

16.2.2

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

4.3.5

Patch

4.3.4

What's Changed

New Contributors

4.3.3

Patch Release 4.3.3

Repository Migration Information

Q: What impact will this have on me?

Q: What are the security implications of this change?

Q: What should I do if I encounter an issue related to the migration?

v5.1.2

Bug Fixes

5.1.2 (2021-03-06)

Bug Fixes

6.0.2 (2021-09-29)

Bug Fixes

6.0.1 (2021-07-20)

Bug Fixes

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Bug Fixes

Miscellaneous Chores

v4.7.8

v4.7.8 - July 27th, 2023

v4.7.7 - February 15th, 2021

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

v1.2.7 - 2022-10-10

Commits

v10.5.2

What's Changed

New Contributors

v10.5.1

What's Changed

New Contributors

v10.5.0

🎉 Enhancements

🐛 Fixes

🔩 Other

v10.4.0

10.4.0 / 2024-03-26

🎉 Enhancements

🐛 Fixes

🔩 Other

10.5.2 / 2024-05-25

🐛 Fixes

10.5.1 / 2024-05-24

🐛 Fixes

10.5.0 / 2024-05-24

🎉 Enhancements

🐛 Fixes