Skip to content

Bump the npm_and_yarn group across 1 directory with 17 updates#1

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-68022fb30e
Open

Bump the npm_and_yarn group across 1 directory with 17 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-68022fb30e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 4, 2025

Bumps the npm_and_yarn group with 14 updates in the / directory:

Package From To
zod 3.21.4 3.22.3
tsup 6.7.0 8.3.5
braces 3.0.2 3.0.3
cookie 0.5.0 0.7.2
@fastify/cookie 8.3.0 11.0.2
light-my-request 5.9.1 5.14.0
esbuild 0.17.19 0.25.2
tsup 8.3.5 8.4.0
tsx 3.12.7 3.14.0
vitest 0.28.5 3.1.1
find-my-way 7.6.2 8.2.2
fastify 4.17.0 4.29.0
ip 2.0.0 removed
socks 2.7.1 2.8.4
semver 6.3.0 7.7.1

Updates zod from 3.21.4 to 3.22.3

Release notes

Sourced from zod's releases.

v3.22.3

Commits:

  • 1e23990bcdd33d1e81b31e40e77a031fcfd87ce1 Commit
  • 9bd3879b482f139fd03d5025813ee66a04195cdd docs: remove obsolete text about readonly types (#2676)
  • f59be093ec21430d9f32bbcb628d7e39116adf34 clarify datetime ISO 8601 (#2673)
  • 64dcc8e2b16febe48fa8e3c82c47c92643e6c9e3 Update sponsors
  • 18115a8f128680b4526df58ce96deab7dce93b93 Formatting
  • 28c19273658b164c53c149785fa7a8187c428ad4 Update sponsors
  • ad2ee9ccf723c4388158ff6b8669c2a6cdc85643 2718 Updated Custom Schemas documentation example to use type narrowing (#2778)
  • ae0f7a2c15e7741ee1b23c03a3bfb9acebd86551 docs: update ref to discriminated-unions docs (#2485)
  • 2ba00fe2377f4d53947a84b8cdb314a63bbd6dd4 [2609] fix ReDoS vulnerability in email regex (#2824)
  • 1e61d76cdec05de9271fc0df58798ddf9ce94923 3.22.3

v3.22.2

Commits:

  • 13d9e6bda286cbd4c1b177171273695d8309e5de Fix lint
  • 0d49f10b3c25a8e4cbb6534cc0773b195c56d06d docs: add typeschema to ecosystem (#2626)
  • 8e4af7b56df6f2e3daf0dd825b986f1d963025ce X to Zod: add app.quicktype.io (#2668)
  • 792b3ef0d41c144cd10641c6966b98dae1222d82 Fix superrefine types

v3.22.1

Commits:

Fix handing of this in ZodFunction schemas. The parse logic for function schemas now requires the Reflect API.

const methodObject = z.object({
  property: z.number(),
  method: z.function().args(z.string()).returns(z.number()),
});
const methodInstance = {
  property: 3,
  method: function (s: string) {
    return s.length + this.property;
  },
};
const parsed = methodObject.parse(methodInstance);
parsed.method("length=8"); // => 11 (8 length + 3 property)
  • 932cc472d2e66430d368a409b8d251909d7d8d21 Initial prototype fix for issue #2651 (#2652)
  • 0a055e726ac210ef6efc69aa70cd2491767f6060 3.22.1

v3.22.0

ZodReadonly

This release introduces ZodReadonly and the .readonly() method on ZodType.

... (truncated)

Commits

Updates tsup from 6.7.0 to 8.3.5

Release notes

Sourced from tsup's releases.

v8.3.5

   🐞 Bug Fixes

    View changes on GitHub

v8.3.4

No significant changes

    View changes on GitHub

v8.3.3

No significant changes

    View changes on GitHub

v8.3.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

  • fix experimentalDts file cleaning and watching (#1199) (76dc18b)

Features

v8.2.4

8.2.4 (2024-08-02)

... (truncated)

Commits

Updates braces from 3.0.2 to 3.0.3

Commits

Updates cookie from 0.5.0 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates @fastify/cookie from 8.3.0 to 11.0.2

Release notes

Sourced from @​fastify/cookie's releases.

v11.0.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.0.1...v11.0.2

v11.0.1

What's Changed

Full Changelog: fastify/fastify-cookie@v11.0.0...v11.0.1

v11.0.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v10.0.1...v11.0.0

v10.0.1

What's Changed

Full Changelog: fastify/fastify-cookie@v10.0.0...v10.0.1

v10.0.0

What's Changed

... (truncated)

Commits
  • 3ff06ef 11.0.2
  • 24a5844 types: merge duplicate FastifyCookieOptions interface exports (#318)
  • b9fcf13 docs(readme): grammar fixes (#317)
  • a8023cd refactor(signer): remove unused catch binding (#315)
  • 639f778 refactor: prefix unused params with underscores (#316)
  • 0f1acb1 docs(readme): add compatibility table (#314)
  • 645e80b chore(package): add contribs and funding (#313)
  • 5e4c22e build(deps-dev): add eslint, peer dep of neostandard (#312)
  • 1f2af60 chore(deps-dev): bump neostandard from 0.11.9 to 0.12.0 (#311)
  • 38913b7 chore: move from tap to node:test (#306)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by fdawgs, a new releaser for @​fastify/cookie since your current version.


Updates light-my-request from 5.9.1 to 5.14.0

Release notes

Sourced from light-my-request's releases.

v5.14.0

What's Changed

Full Changelog: fastify/light-my-request@v5.13.0...v5.14

v5.13.0

What's Changed

Full Changelog: fastify/light-my-request@v5.12.0...v5.13.0

v5.12.0

What's Changed

Full Changelog: fastify/light-my-request@v5.11.1...v5.12.0

v5.11.1

What's Changed

New Contributors

Full Changelog: fastify/light-my-request@v5.11.0...v5.11.1

v5.11.0

What's Changed

... (truncated)

Commits

Updates esbuild from 0.17.19 to 0.25.2

Release notes

Sourced from esbuild's releases.

v0.25.2

  • Support flags in regular expressions for the API (#4121)

    The JavaScript plugin API for esbuild takes JavaScript regular expression objects for the filter option. Internally these are translated into Go regular expressions. However, this translation previously ignored the flags property of the regular expression. With this release, esbuild will now translate JavaScript regular expression flags into Go regular expression flags. Specifically the JavaScript regular expression /\.[jt]sx?$/i is turned into the Go regular expression `(?i)\.[jt]sx?$` internally inside of esbuild's API. This should make it possible to use JavaScript regular expressions with the i flag. Note that JavaScript and Go don't support all of the same regular expression features, so this mapping is only approximate.

  • Fix node-specific annotations for string literal export names (#4100)

    When node instantiates a CommonJS module, it scans the AST to look for names to expose via ESM named exports. This is a heuristic that looks for certain patterns such as exports.NAME = ... or module.exports = { ... }. This behavior is used by esbuild to "annotate" CommonJS code that was converted from ESM with the original ESM export names. For example, when converting the file export let foo, bar from ESM to CommonJS, esbuild appends this to the end of the file:

    // Annotate the CommonJS export names for ESM import in node:
0 && (module.exports = {
  bar,
  foo
});

    However, this feature previously didn't work correctly for export names that are not valid identifiers, which can be constructed using string literal export names. The generated code contained a syntax error. That problem is fixed in this release:

    // Original code
let foo
export { foo as "foo!" }
// Old output (with --format=cjs --platform=node)
...
0 && (module.exports = {
"foo!"
});
// New output (with --format=cjs --platform=node)
...
0 && (module.exports = {
"foo!": null
});

  • Basic support for index source maps (#3439, #4109)

    The source map specification has an optional mode called index source maps that makes it easier for tools to create an aggregate JavaScript file by concatenating many smaller JavaScript files with source maps, and then generate an aggregate source map by simply providing the original source maps along with some offset information. My understanding is that this is rarely used in practice. I'm only aware of two uses of it in the wild: ClojureScript and Turbopack.

    This release provides basic support for indexed source maps. However, the implementation has not been tested on a real app (just on very simple test input). If you are using index source maps in a real app, please try this out and report back if anything isn't working for you.

    Note that this is also not a complete implementation. For example, index source maps technically allows nesting source maps to an arbitrary depth, while esbuild's implementation in this release only supports a single level of nesting. It's unclear whether supporting more than one level of nesting is important or not given the lack of available test cases.

    This feature was contributed by @​clyfish.

v0.25.1

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11

  • Fix TypeScript-specific class transform edge case (#3559)

    The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:

    // Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}

  • Minifier: allow reording a primitive past a side-effect (#3568)

    The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

Updates tsup from 8.3.5 to 8.4.0

Release notes

Sourced from tsup's releases.

v8.3.5

   🐞 Bug Fixes

    View changes on GitHub

v8.3.4

No significant changes

    View changes on GitHub

v8.3.3

No significant changes

    View changes on GitHub

v8.3.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v8.3.0

8.3.0 (2024-09-17)

Bug Fixes

  • fix experimentalDts file cleaning and watching (#1199) (76dc18b)

Features

v8.2.4

8.2.4 (2024-08-02)

... (truncated)

Commits

Updates tsx from 3.12.7 to 3.14.0

Release notes

Sourced from tsx's releases.

v3.14.0

3.14.0 (2023-10-17)

Bug Fixes

  • cache: scope cache directory to user (#332) (7e916f5)

Features

  • support Node v20.6.0 module.register() & --import flag (#337) (23e4694)

This release is also available on:

v3.13.0

3.13.0 (2023-09-24)

Features

This release is also available on:

v3.12.10

3.12.10 (2023-09-13)

Bug Fixes

This release is also available on:

... (truncated)

Commits

Updates vitest from 0.28.5 to 3.1.1

Release notes

Sourced from vitest's releases.

v3.1.1

   🐞 Bug Fixes

    View changes on GitHub

v3.1.0

🚀 Features

🐞 Bug Fixes

  • Update test stats regularly - by @​hi-ogawa in...

    Description has been truncated

@dependabot
Bump the npm_and_yarn group across 1 directory with 17 updates
815ff58 
Bumps the npm_and_yarn group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [zod](https://github.com/colinhacks/zod) | `3.21.4` | `3.22.3` |
| [tsup](https://github.com/egoist/tsup) | `6.7.0` | `8.3.5` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cookie](https://github.com/jshttp/cookie) | `0.5.0` | `0.7.2` |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `8.3.0` | `11.0.2` |
| [light-my-request](https://github.com/fastify/light-my-request) | `5.9.1` | `5.14.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.17.19` | `0.25.2` |
| [tsup](https://github.com/egoist/tsup) | `8.3.5` | `8.4.0` |
| [tsx](https://github.com/privatenumber/tsx) | `3.12.7` | `3.14.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `0.28.5` | `3.1.1` |
| [find-my-way](https://github.com/delvedor/find-my-way) | `7.6.2` | `8.2.2` |
| [fastify](https://github.com/fastify/fastify) | `4.17.0` | `4.29.0` |
| [ip](https://github.com/indutny/node-ip) | `2.0.0` | `removed` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.4` |
| [semver](https://github.com/npm/node-semver) | `6.3.0` | `7.7.1` |



Updates `zod` from 3.21.4 to 3.22.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/main/CHANGELOG.md)
- [Commits](colinhacks/zod@v3.21.4...v3.22.3)

Updates `tsup` from 6.7.0 to 8.3.5
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v6.7.0...v8.3.5)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `@fastify/cookie` from 8.3.0 to 11.0.2
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v8.3.0...v11.0.2)

Updates `light-my-request` from 5.9.1 to 5.14.0
- [Release notes](https://github.com/fastify/light-my-request/releases)
- [Commits](fastify/light-my-request@v5.9.1...v5.14.0)

Updates `esbuild` from 0.17.19 to 0.25.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.17.19...v0.25.2)

Updates `tsup` from 8.3.5 to 8.4.0
- [Release notes](https://github.com/egoist/tsup/releases)
- [Commits](egoist/tsup@v6.7.0...v8.3.5)

Updates `tsx` from 3.12.7 to 3.14.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v3.12.7...v3.14.0)

Updates `vitest` from 0.28.5 to 3.1.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.1.1/packages/vitest)

Updates `find-my-way` from 7.6.2 to 8.2.2
- [Release notes](https://github.com/delvedor/find-my-way/releases)
- [Commits](delvedor/find-my-way@v7.6.2...v8.2.2)

Updates `fastify` from 4.17.0 to 4.29.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@4.17.0...v4.29.0)

Removes `ip`

Updates `socks` from 2.7.1 to 2.8.4
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.7.1...2.8.4)

Updates `semver` from 6.3.0 to 7.7.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v6.3.0...v7.7.1)

Updates `postcss` from 8.4.23 to 8.5.3
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.23...8.5.3)

Updates `rollup` from 3.21.8 to 4.39.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v3.21.8...v4.39.0)

Updates `vite` from 4.3.9 to 6.2.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.2.5/packages/vite)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 3.22.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: tsup
  dependency-version: 8.3.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@fastify/cookie"
  dependency-version: 11.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: light-my-request
  dependency-version: 5.14.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.25.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tsup
  dependency-version: 8.4.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: tsx
  dependency-version: 3.14.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 3.1.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: find-my-way
  dependency-version: 8.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fastify
  dependency-version: 4.29.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ip
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socks
  dependency-version: 2.8.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-version: 7.7.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 4.39.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 6.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants