Bump the npm_and_yarn group across 2 directories with 5 updates by dependabot[bot] · Pull Request #4 · Beautifulcrazy16/PoWFaucet

dependabot · 2024-07-28T00:07:45Z

Bumps the npm_and_yarn group with 4 updates in the / directory: ws, @babel/traverse, es5-ext and express.
Bumps the npm_and_yarn group with 2 updates in the /faucet-client directory: @babel/traverse and postcss.

Updates ws from 8.13.0 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
934c9d6 [ci] Test on node 22
1817bac [ci] Do not test on node 21
96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
Additional commits viewable in compare view

Updates @babel/traverse from 7.22.5 to 7.25.0

Release notes

Sourced from @babel/traverse's releases.

v7.25.0 (2024-07-26)

Thanks @davidtaylorhq and @slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16537 await using normative updates (@JLHwung)

babel-plugin-transform-typescript

#16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@liuxingbaoyu)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types

#16658 Move ensureFunctionName to NodePath.prototype (@nicolo-ribaudo)

babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse

#16644 Move hoistVariables to Scope.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types

#16645 Move splitExportDeclaration to NodePath.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse

#16649 Move environment-visitor helper into @babel/traverse (@nicolo-ribaudo)

babel-core, babel-parser

#16480 Expose wether a module has TLA or not as .extra.async (@nicolo-ribaudo)

babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env

#16569 Introduce bugfix-safari-class-field-initializer-scope (@davidtaylorhq)

babel-plugin-transform-block-scoping, babel-traverse, babel-types

#16551 Add NodePath#getAssignmentIdentifiers (@JLHwung)

babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules

#16579 Add uncheckedRequire option for JSON imports to CJS (@nicolo-ribaudo)

babel-helper-transform-fixture-test-runner, babel-node

#16642 Allow using custom config in babel-node --eval (@slatereax)

babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone

#16445 Add duplicate-named-capturing-groups-regex to preset-env (@JLHwung)

🐛 Bug Fix

babel-generator

#16678 Print parens around as expressions on the LHS (@nicolo-ribaudo)

babel-template, babel-types

#15286 fix: Props are lost when the template replaces the node (@liuxingbaoyu)

🏠 Internal

Other

#16674 bump gulp to 5 (@JLHwung)

babel-generator

#16651 Simplify the printing logic for ( before ambiguous tokens (@nicolo-ribaudo)

babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

#16652 Simplify helper-function-name logic (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-parser, babel-plugin-proposal-pipeline-operator

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.0 (2024-07-26)

👓 Spec Compliance

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16537 await using normative updates (@JLHwung)

babel-plugin-transform-typescript

#16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@liuxingbaoyu)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types

#16658 Move ensureFunctionName to NodePath.prototype (@nicolo-ribaudo)

babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse

#16644 Move hoistVariables to Scope.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types

#16645 Move splitExportDeclaration to NodePath.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse

#16649 Move environment-visitor helper into @babel/traverse (@nicolo-ribaudo)

babel-core, babel-parser

#16480 Expose wether a module has TLA or not as .extra.async (@nicolo-ribaudo)

babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env

#16569 Introduce bugfix-safari-class-field-initializer-scope (@davidtaylorhq)

babel-plugin-transform-block-scoping, babel-traverse, babel-types

#16551 Add NodePath#getAssignmentIdentifiers (@JLHwung)

babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules

#16579 Add uncheckedRequire option for JSON imports to CJS (@nicolo-ribaudo)

babel-helper-transform-fixture-test-runner, babel-node

#16642 Allow using custom config in babel-node --eval (@slatereax)

babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone

#16445 Add duplicate-named-capturing-groups-regex to preset-env (@JLHwung)

🐛 Bug Fix

babel-generator

#16678 Print parens around as expressions on the LHS (@nicolo-ribaudo)

babel-template, babel-types

#15286 fix: Props are lost when the template replaces the node (@liuxingbaoyu)

🏠 Internal

Other

#16674 bump gulp to 5 (@JLHwung)

babel-generator

#16651 Simplify the printing logic for ( before ambiguous tokens (@nicolo-ribaudo)

babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

#16652 Simplify helper-function-name logic (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-parser, babel-plugin-proposal-pipeline-operator

#16461 Some minor parser performance improvements for ts (@liuxingbaoyu)

🔬 Output optimization

babel-plugin-transform-classes

... (truncated)

Commits

d2e3ee2 v7.25.0
d364545 Move ensureFunctionName to NodePath.prototype (#16658)
7c31ad1 Move hoistVariables to Scope.prototype (#16644)
f3f4685 Move splitExportDeclaration to NodePath.prototype (#16645)
4579032 Move environment-visitor helper into @babel/traverse (#16649)
47d8259 Add NodePath#getAssignmentIdentifiers (#16551)
482008c Simplify helper-function-name logic (#16652)
ddfd86c Revert "Move environment-visitor helper into @babel/traverse" (#16647)
25d3561 Move environment-visitor helper into @babel/traverse (#16577)
1f5af44 v7.24.8
Additional commits viewable in compare view

Updates es5-ext from 0.10.62 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

Comparison since last release

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

Commits

f76b03d chore: Release v0.10.64
2881acd chore: Bump dependencies
c2e2bb9 fix: Revert update meant to fix Powershell issue, as it's a regression
16f2b72 docs: Fix date in the changelog
de4e03c chore: Release v0.10.63
3fd53b7 chore: Upgrade lint-staged to v13
bf8ed79 chore: Ensure postinstall script does not crash on Windows
2cbbb07 chore: Bump dependencies
22d0416 chore: Bump LICENSE year
a52e957 fix: Support ES2015+ function definitions in function#toStringTokens()
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates @babel/traverse from 7.22.5 to 7.25.0

Release notes

Sourced from @babel/traverse's releases.

v7.25.0 (2024-07-26)

Thanks @davidtaylorhq and @slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16537 await using normative updates (@JLHwung)

babel-plugin-transform-typescript

#16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@liuxingbaoyu)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types

#16658 Move ensureFunctionName to NodePath.prototype (@nicolo-ribaudo)

babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse

#16644 Move hoistVariables to Scope.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types

#16645 Move splitExportDeclaration to NodePath.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse

#16649 Move environment-visitor helper into @babel/traverse (@nicolo-ribaudo)

babel-core, babel-parser

#16480 Expose wether a module has TLA or not as .extra.async (@nicolo-ribaudo)

babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env

#16569 Introduce bugfix-safari-class-field-initializer-scope (@davidtaylorhq)

babel-plugin-transform-block-scoping, babel-traverse, babel-types

#16551 Add NodePath#getAssignmentIdentifiers (@JLHwung)

babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules

#16579 Add uncheckedRequire option for JSON imports to CJS (@nicolo-ribaudo)

babel-helper-transform-fixture-test-runner, babel-node

#16642 Allow using custom config in babel-node --eval (@slatereax)

babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone

#16445 Add duplicate-named-capturing-groups-regex to preset-env (@JLHwung)

🐛 Bug Fix

babel-generator

#16678 Print parens around as expressions on the LHS (@nicolo-ribaudo)

babel-template, babel-types

#15286 fix: Props are lost when the template replaces the node (@liuxingbaoyu)

🏠 Internal

Other

#16674 bump gulp to 5 (@JLHwung)

babel-generator

#16651 Simplify the printing logic for ( before ambiguous tokens (@nicolo-ribaudo)

babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

#16652 Simplify helper-function-name logic (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-parser, babel-plugin-proposal-pipeline-operator

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.25.0 (2024-07-26)

👓 Spec Compliance

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16537 await using normative updates (@JLHwung)

babel-plugin-transform-typescript

#16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@liuxingbaoyu)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types

#16658 Move ensureFunctionName to NodePath.prototype (@nicolo-ribaudo)

babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse

#16644 Move hoistVariables to Scope.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types

#16645 Move splitExportDeclaration to NodePath.prototype (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse

#16649 Move environment-visitor helper into @babel/traverse (@nicolo-ribaudo)

babel-core, babel-parser

#16480 Expose wether a module has TLA or not as .extra.async (@nicolo-ribaudo)

babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env

#16569 Introduce bugfix-safari-class-field-initializer-scope (@davidtaylorhq)

babel-plugin-transform-block-scoping, babel-traverse, babel-types

#16551 Add NodePath#getAssignmentIdentifiers (@JLHwung)

babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules

#16579 Add uncheckedRequire option for JSON imports to CJS (@nicolo-ribaudo)

babel-helper-transform-fixture-test-runner, babel-node

#16642 Allow using custom config in babel-node --eval (@slatereax)

babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone

#16445 Add duplicate-named-capturing-groups-regex to preset-env (@JLHwung)

🐛 Bug Fix

babel-generator

#16678 Print parens around as expressions on the LHS (@nicolo-ribaudo)

babel-template, babel-types

#15286 fix: Props are lost when the template replaces the node (@liuxingbaoyu)

🏠 Internal

Other

#16674 bump gulp to 5 (@JLHwung)

babel-generator

#16651 Simplify the printing logic for ( before ambiguous tokens (@nicolo-ribaudo)

babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

#16652 Simplify helper-function-name logic (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-parser, babel-plugin-proposal-pipeline-operator

#16461 Some minor parser performance improvements for ts (@liuxingbaoyu)

🔬 Output optimization

babel-plugin-transform-classes

... (truncated)

Commits

d2e3ee2 v7.25.0
d364545 Move ensureFunctionName to NodePath.prototype (#16658)
7c31ad1 Move hoistVariables to Scope.prototype (#16644)
f3f4685 Move splitExportDeclaration to NodePath.prototype (#16645)
4579032 Move environment-visitor helper into @babel/traverse (#16649)
47d8259 Add NodePath#getAssignmentIdentifiers (#16551)
482008c Simplify helper-function-name logic (#16652)
ddfd86c Revert "Move environment-visitor helper into @babel/traverse" (#16647)
25d3561 Move environment-visitor helper into @babel/traverse (#16577)
1f5af44 v7.24.8
Additional commits viewable in compare view

Updates postcss from 8.4.24 to 8.4.40

Release notes

Sourced from postcss's releases.

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by @tim-we).

Cleaned up code (by @DrKiraDmitry).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by @romainmenke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by @ferreira-tb).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by Romain Menke).

8.4.29

Fixed Node#source.offset (by Ido Rosenthal).

Fixed docs (by Christian Oliff).

8.4.28

Fixed Root.source.end for better source map (by Romain Menke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

... (truncated)

Commits

3f84b41 Release 8.4.40 version
293ce45 Merge pull request #1950 from nex3/node-getters
fd7ae73 Declare Node subclass attributes as getters
79a6396 Update dependencies
53968d7 Make name more clear
e0efb16 Release 8.4.39 version
48304c5 Update dependencies
155ac57 Merge pull request #1947 from romainmenke/fix-css-syntax-error-type--reliable...
1b9b466 fix CssSyntaxError type declaration
3f4d96e Update dependencies
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 4 updates in the / directory: [ws](https://github.com/websockets/ws), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse), [es5-ext](https://github.com/medikoo/es5-ext) and [express](https://github.com/expressjs/express). Bumps the npm_and_yarn group with 2 updates in the /faucet-client directory: [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [postcss](https://github.com/postcss/postcss). Updates `ws` from 8.13.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.13.0...8.17.1) Updates `@babel/traverse` from 7.22.5 to 7.25.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.0/packages/babel-traverse) Updates `es5-ext` from 0.10.62 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.62...v0.10.64) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `@babel/traverse` from 7.22.5 to 7.25.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.25.0/packages/babel-traverse) Updates `postcss` from 8.4.24 to 8.4.40 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.24...8.4.40) --- updated-dependencies: - dependency-name: ws dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 28, 2024

This was referenced Jul 28, 2024

Bump @babel/traverse from 7.22.5 to 7.23.2 #2

Closed

Bump @babel/traverse from 7.22.5 to 7.23.2 in /faucet-client #3

Closed

Bump postcss from 8.4.24 to 8.4.31 in /faucet-client #1

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 2 directories with 5 updates#4

Bump the npm_and_yarn group across 2 directories with 5 updates#4
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-a7aaa7bb15

dependabot bot commented on behalf of github Jul 28, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jul 28, 2024

8.17.1

Bug fixes

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

0.10.64 (2024-02-27)

Bug Fixes

0.10.63 (2024-02-23)

Bug Fixes

Maintenance Improvements

0.10.64 (2024-02-27)

Bug Fixes

0.10.63 (2024-02-23)

Bug Fixes

Maintenance Improvements

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30