Bump the npm_and_yarn group across 1 directory with 36 updates#15
Open
dependabot[bot] wants to merge 1 commit intomasterfrom
Open
Bump the npm_and_yarn group across 1 directory with 36 updates#15dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps the npm_and_yarn group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [crypto-js](https://github.com/brix/crypto-js) | `3.1.9-1` | `4.2.0` | | [vue](https://github.com/vuejs/core) | `2.5.13` | `3.0.0` | | [vue-template-compiler](https://github.com/vuejs/vue) | `2.5.13` | `2.7.16` | | [async](https://github.com/caolan/async) | `2.6.0` | `2.6.4` | | [base-x](https://github.com/cryptocoinjs/base-x) | `3.0.3` | `3.0.11` | | [braces](https://github.com/micromatch/braces) | `1.8.5` | `3.0.3` | | [watchpack](https://github.com/webpack/watchpack) | `1.4.0` | `1.7.5` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [clean-css](https://github.com/clean-css/clean-css) | `4.1.9` | `4.1.11` | | [color-string](https://github.com/Qix-/color-string) | `0.3.0` | `removed` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `0.28.8` | `7.1.2` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.8` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.5.0` | `2.8.9` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.7.0` | `3.14.1` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.1.0` | `1.4.2` | | [mem](https://github.com/sindresorhus/mem) | `1.1.0` | `removed` | | [webpack](https://github.com/webpack/webpack) | `3.10.0` | `5.99.8` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.5` | `1.0.7` | | [tree-kill](https://github.com/pkrumins/node-tree-kill) | `1.2.0` | `1.2.2` | Updates `crypto-js` from 3.1.9-1 to 4.2.0 - [Commits](brix/crypto-js@3.1.9-1...4.2.0) Updates `vue` from 2.5.13 to 3.0.0 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/v3.0.0/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.0.0) Updates `vue-template-compiler` from 2.5.13 to 2.7.16 - [Release notes](https://github.com/vuejs/vue/releases) - [Changelog](https://github.com/vuejs/vue/blob/main/CHANGELOG.md) - [Commits](vuejs/vue@v2.5.13...v2.7.16) Updates `async` from 2.6.0 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.0...v2.6.4) Updates `base-x` from 3.0.3 to 3.0.11 - [Commits](cryptocoinjs/base-x@v3.0.3...v3.0.11) Updates `braces` from 1.8.5 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@1.8.5...3.0.3) Updates `watchpack` from 1.4.0 to 1.7.5 - [Release notes](https://github.com/webpack/watchpack/releases) - [Commits](webpack/watchpack@v1.4.0...v1.7.5) Updates `browserify-sign` from 4.0.4 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.0.4...v4.2.3) Updates `clean-css` from 4.1.9 to 4.1.11 - [Changelog](https://github.com/clean-css/clean-css/blob/master/History.md) - [Commits](clean-css/clean-css@v4.1.9...v4.1.11) Removes `color-string` Updates `css-loader` from 0.28.8 to 7.1.2 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack/css-loader@v0.28.8...v7.1.2) Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `debug` from 2.6.8 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@2.6.8...2.6.9) Updates `elliptic` from 6.4.0 to 6.6.1 - [Commits](indutny/elliptic@v6.4.0...v6.6.1) Updates `extend` from 3.0.1 to 3.0.2 - [Changelog](https://github.com/justmoon/node-extend/blob/main/CHANGELOG.md) - [Commits](justmoon/node-extend@v3.0.1...v3.0.2) Updates `fsevents` from 1.1.3 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.3...v1.2.13) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `minimatch` from 3.0.4 to 3.0.8 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.8) Updates `qs` from 6.4.0 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.4.0...v6.5.3) Updates `request` from 2.81.0 to 2.88.2 - [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md) - [Commits](https://github.com/request/request/commits) Updates `semver` from 5.3.0 to 5.4.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v5.4.1) Updates `sshpk` from 1.13.0 to 1.17.0 - [Release notes](https://github.com/joyent/node-sshpk/releases) - [Commits](TritonDataCenter/node-sshpk@v1.13.0...v1.17.0) Updates `tar` from 2.2.1 to 6.1.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v2.2.1...v6.1.11) Updates `tough-cookie` from 2.3.2 to 2.5.0 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.3.2...v2.5.0) Updates `lodash` from 4.17.4 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.4...4.17.21) Updates `hosted-git-info` from 2.5.0 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.5.0...v2.8.9) Updates `postcss` from 5.2.18 to 6.0.16 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/commits/6.0.16) Updates `js-yaml` from 3.7.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.7.0...3.14.1) Updates `loader-utils` from 1.1.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.1.0...v1.4.2) Removes `mem` Updates `webpack` from 3.10.0 to 5.99.8 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v3.10.0...v5.99.8) Updates `path-parse` from 1.0.5 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `tree-kill` from 1.2.0 to 1.2.2 - [Release notes](https://github.com/pkrumins/node-tree-kill/releases) - [Commits](pkrumins/node-tree-kill@v1.2.0...v1.2.2) Updates `yargs-parser` from 7.0.0 to 13.1.2 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](https://github.com/yargs/yargs-parser/commits) Updates `y18n` from 3.2.1 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...y18n-v4.0.3) --- updated-dependencies: - dependency-name: crypto-js dependency-version: 4.2.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vue dependency-version: 3.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vue-template-compiler dependency-version: 2.7.16 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: async dependency-version: 2.6.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: base-x dependency-version: 3.0.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: watchpack dependency-version: 1.7.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserify-sign dependency-version: 4.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: clean-css dependency-version: 4.1.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: color-string dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: css-loader dependency-version: 7.1.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: minimist dependency-version: 1.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-version: 0.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-version: 2.6.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-version: 6.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: extend dependency-version: 3.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-version: 1.2.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-version: 0.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.0.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.5.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: request dependency-version: 2.88.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 5.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sshpk dependency-version: 1.17.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 6.1.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-version: 2.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-version: 2.8.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 6.0.16 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-version: 1.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mem dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.99.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: path-parse dependency-version: 1.0.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tree-kill dependency-version: 1.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-version: 13.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-version: 4.0.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This was referenced May 18, 2025
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 21 updates in the / directory:
3.1.9-14.2.02.5.133.0.02.5.132.7.162.6.02.6.43.0.33.0.111.8.53.0.31.4.01.7.54.0.44.2.34.1.94.1.110.3.0removed0.28.87.1.21.2.01.2.80.5.10.5.63.0.43.0.82.5.02.8.93.7.03.14.11.1.01.4.21.1.0removed3.10.05.99.81.0.51.0.71.2.01.2.2Updates
crypto-jsfrom 3.1.9-1 to 4.2.0Commits
808f499Merge branch 'release/4.2.0'd5af3aeUpdate release notes.9496e07Bump version.421dd53Change default hash algorithm and iteration's for PBKDF2 to prevent weak secu...d1f4f4dUpdate grunt.c755289Discontinued1da3dabDiscontinued4dcaa7aMerge pull request #380 from Alanscut/dev762feb2chore: rename BF to Blowfishfb81418feat: blowfish supportUpdates
vuefrom 2.5.13 to 3.0.0Changelog
Sourced from vue's changelog.
... (truncated)
Commits
Updates
vue-template-compilerfrom 2.5.13 to 2.7.16Release notes
Sourced from vue-template-compiler's releases.
... (truncated)
Changelog
Sourced from vue-template-compiler's changelog.
... (truncated)
Commits
13f4e7drelease: v2.7.1656ce7f8fix(lifecycle): esnure component effect scopes are disconnected305e4aerelease: v2.7.16-beta.23e1037echore: bump vitest to 1.0.4db9c566fix: account for nested render calls895669ffix(types): export more types for v3 alignment (jsx / component options)73bdf14release: v2.7.16-beta.1e0747f4fix(keep-alive): fix memory leak without breaking transition tests2632249fix(keep-alive): fix keep-alive memory leak3650c12fix(types): provide types for built-in componentsUpdates
asyncfrom 2.6.0 to 2.6.4Changelog
Sourced from async's changelog.
Commits
c6bdacaVersion 2.6.48870da9Update built files4df6754update changelog8f7f903Fix prototype pollution vulnerability (#1828)f1d8383Version 2.6.32b674c1update changelogeab740ffix: udpate lodash. closes #1675eaf32beVersion 2.6.2684b42eUpdate built filese1bd3daupdate changelogMaintainer changes
This version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates
base-xfrom 3.0.3 to 3.0.11Commits
043a8883.0.112705ddd[backport 3.x] Prohibit char codes that would overflow theBASE_MAP3d43c0e3.0.100a35446Improve decoding performance4c10d333.0.9c9dcdddMerge pull request #78 from cryptocoinjs/fix/space-alphabets6c54632Fix alphabets with space in them69c09edMerge pull request #73 from terrierscript/patch-11dd3795Update README.md806ef3f3.0.8Maintainer changes
This version was pushed to npm by fanatid, a new releaser for base-x since your current version.
Updates
bracesfrom 1.8.5 to 3.0.3Changelog
Sourced from braces's changelog.
... (truncated)
Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
watchpackfrom 1.4.0 to 1.7.5Release notes
Sourced from watchpack's releases.
Commits
a31d9eb1.7.5269291eMerge pull request #180 from webpack/bugfix/engine-check2fb7652remove node engine check for chokidar 2f7ef8e01.7.49ce9da6remove subpackage from this package02762111.7.3333a112Merge pull request #166 from webpack/deps/upgrade-v1e86fd3cMerge pull request #168 from timneutkens/fix/use-latest-chokidar7ee98e2Use latest Chokidar version8edfd9aregenerate lockfileUpdates
browserify-signfrom 4.0.4 to 4.2.3Changelog
Sourced from browserify-sign's changelog.
... (truncated)
Commits
bf2c3ecv4.2.39247adf[patch] widen support to 0.12f427270[Deps] update `parse-asn187f3a35[Dev Deps] updateaud,npmignore,tapefb261ce[Deps] updateelliptic4d0ee49[patch] drop minimum node support to v19e2bf12[Deps] pinhash-baseto ~3.0, due to a breaking change168e16f[Deps] pinellipticdue to a breaking change37a4758[actions] remove redundant finisher4af5a90v4.2.2Maintainer changes
This version was pushed to npm by ljharb, a new releaser for browserify-sign since your current version.
Updates
clean-cssfrom 4.1.9 to 4.1.11Changelog
Sourced from clean-css's changelog.
Commits
7812d59Version 4.1.11.0440b4aFixes ReDOS vulnerabilities.c601ebdVersion 4.1.10.9e0a38eFixes #1006 - handling invalid input source maps.913d72cFixes #1008 - edge case in breaking upfont.bedd8a9Adds@abarrefix to #1001 to release notes.e944a2b#1001 Fix corrupted state of tokenizer (#1010)8be4084Fixes #989 - edge case in removing unused at-rules.21a5df0Fixes #988 - edge case in droppinganimation-duration.Removes
color-stringUpdates
css-loaderfrom 0.28.8 to 7.1.2Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
d5ba44achore(release): 7.1.276757effix: keep order of@imports with thewebpackIgnorecomment (#1600)4b41689ci: use node v22 (#1596)2068222chore: update dependencies to latest version (#1595)e006f66refactor: useenvironmentto gettemplateLiteralvalue (#1591)5c717c9chore(release): 7.1.1d6c31a1fix: automatically rename classdefaultto_defaultwhen named export is ...b162e25chore(release): 7.1.015f793ddocs: update logic (#1587)9c165a4docs: update migration guide (#1586)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.
Updates
minimistfrom 1.2.0 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
mkdirpfrom 0.5.1 to 0.5.6Commits
92f086d0.5.62a28125clean up testsc905d65update minimist049cf180.5.5bea6382Remove unnecessary umask calls42a012c0.5.42867920fix infinite loop on windows machinesd784e700.5.3d612c5dadd files list so this package isn't a monsterb2e7ba00.5.2Maintainer changes
This version was pushed to npm by isaacs, a new releaser for mkdirp since your current version.
Updates
debugfrom 2.6.8 to 2.6.9Release notes
Sourced from debug's releases.
Changelog
Sourced from debug's changelog.
Commits
13abeaeRelease 2.6.9f53962eremove ReDoS regexp in %o formatter (#504)Updates
ellipticfrom 6.4.0 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.0