Bump the npm_and_yarn group across 7 directories with 21 updates by dependabot[bot] · Pull Request #1 · ericdimon86/client

dependabot · 2025-02-01T23:59:49Z

Bumps the npm_and_yarn group with 1 update in the /browser directory: webpack.
Bumps the npm_and_yarn group with 1 update in the /go/kbfs/libmime/builder directory: debug.
Bumps the npm_and_yarn group with 1 update in the /packaging/desktop directory: cross-spawn.
Bumps the npm_and_yarn group with 1 update in the /protocol directory: json5.
Bumps the npm_and_yarn group with 9 updates in the /rnmodules/react-native-drop-view directory:

Package	From	To
acorn	`8.10.0`	`8.14.0`
async	`3.2.4`	`3.2.6`
braces	`3.0.2`	`3.0.3`
fsevents	`2.3.2`	`2.3.3`
micromatch	`4.0.5`	`4.0.8`
cross-spawn	`7.0.3`	`7.0.6`
@babel/traverse	`7.22.10`	`7.26.7`
react-devtools-core	`4.28.0`	`4.28.5`
serve-static	`1.15.0`	`1.16.2`

Bumps the npm_and_yarn group with 9 updates in the /rnmodules/react-native-kb directory:

Package	From	To
acorn	`8.10.0`	`8.14.0`
async	`3.2.4`	`3.2.6`
braces	`3.0.2`	`3.0.3`
fsevents	`2.3.2`	`2.3.3`
micromatch	`4.0.5`	`4.0.8`
cross-spawn	`7.0.3`	`7.0.6`
@babel/traverse	`7.22.10`	`7.26.7`
react-devtools-core	`4.28.0`	`4.28.5`
serve-static	`1.15.0`	`1.16.2`

Bumps the npm_and_yarn group with 13 updates in the /shared directory:

Package	From	To
webpack	`5.89.0`	`5.94.0`
acorn	`8.11.2`	`8.14.0`
async	`3.2.5`	`3.2.6`
braces	`3.0.2`	`3.0.3`
micromatch	`4.0.5`	`4.0.8`
tar	`6.2.0`	`6.2.1`
@babel/traverse	`7.23.3`	`7.26.7`
express	`4.18.2`	`4.21.2`
fast-loops	`1.1.3`	`1.1.4`
follow-redirects	`1.15.3`	`1.15.9`
http-proxy-middleware	`2.0.6`	`2.0.7`
nanoid	`3.3.7`	`3.3.8`
webpack-dev-middleware	`5.3.3`	`5.3.4`

Updates webpack from 2.7.0 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

Performance regression

Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

Don't crash with filesystem cache and unknown scheme

Generate a valid code when output.iife is true and output.library.type is umd

Fixed conflict variable name with concatenate modules and runtime code

Merge duplicate chunks before

Collisions in ESM library

Use recursive search for versions of shared dependencies

[WASM] Don't crash WebAssembly with Reference Types (sync and async)

[WASM] Fixed wasm loading for sync and async webassembly

[CSS] Don't add [uniqueName] to localIdentName when it is empty

[CSS] Parsing strings on Windows

[CSS] Fixed CSS local escaping

New Features

Added support for injecting debug IDs

Export the MergeDuplicateChunks plugin

Added universal loading for JS chunks and JS worker chunks (only ES modules)

[WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)

[CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted

[CSS] Added universal loading for CSS chunks

[CSS] Parse ICSS @value at-rules in CSS modules

[CSS] Parse ICSS :import rules in CSS modules

[CSS] Added the url and import options for CSS

[CSS] Allow to import custom properties in CSS modules

Performance

Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

3612d36 chore(release): 5.97.1
eb7ac6f fix: perf regression
554be24 fix: sub define key should't be renamed when it's a defined variable
5e0e780 refactor: issue #19030
58fb035 fix: sub define key should't be renamed when it's a defined variable
af1fd12 perf: regression
34f19cb fix: package.json
0ec7f5d refactor: issue #19030
5e7b8a2 fix: package.json
644f1d1 refactor: no extra work for CSS unescaping
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.

Updates acorn from 4.0.13 to 8.14.0

Commits

3c6a5a9 Mark version 8.14.0
e943275 Add missing unicode properties
ac3bd47 Add support for ES2025 RegExp Modifiers
f55d97c Add support for ES2025 Import Attributes
cc5ec01 Mark version 8.13.0
fdf144b Remove unused eslint-plugin-promise package
42b8796 Add Unicode v16 support
82de245 Fix whitelist, unsupported features
1fcd451 Bump test262
dfebfd5 Mark acorn-walk version 8.3.4
Additional commits viewable in compare view

Updates ajv from 4.11.8 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates debug from 3.1.0 to 4.4.0

Release notes

Sourced from debug's releases.

4.4.0

Fixes (hopefully) the inefficient regex warnings in .enable().

Minor version as this is invariably going to break certain users who misuse the .enable() API and expected it to work with regexes, which was never supported nor documented. That's on you, sorry - that functionality won't be added back.

Full Changelog: debug-js/debug@4.3.7...4.4.0

4.3.7

What's Changed

Upgrade ms to version 2.1.3 by @realityking in debug-js/debug#819

Full Changelog: debug-js/debug@4.3.6...4.3.7

4.3.6

What's Changed

Avoid using deprecated RegExp.$1 by @bluwy in debug-js/debug#969

New Contributors

@bluwy made their first contribution in debug-js/debug#969

Full Changelog: debug-js/debug@4.3.5...4.3.6

4.3.5

Patch

cac39b1c5b018b0fe93a53a05f084eee543d17f5 Fix/debug depth (#926)

Thank you @calvintwr for the fix.

4.3.4

What's Changed

Add section about configuring JS console to show debug messages by @gitname in debug-js/debug#866

Replace deprecated String.prototype.substr() by @CommanderRoot in debug-js/debug#876

New Contributors

@gitname made their first contribution in debug-js/debug#866

@CommanderRoot made their first contribution in debug-js/debug#876

Full Changelog: debug-js/debug@4.3.3...4.3.4

4.3.3

Patch Release 4.3.3

This is a documentation-only release. Further, the repository was transferred. Please see notes below.

Migrates repository from https://github.com/visionmedia/debug to https://github.com/debug-js/debug. Please see notes below as to why this change was made.

Updates repository maintainership information

Updates the copyright (no license terms change has been made)

Removes accidental epizeuxis (#828)

Adds README section regarding usage in child procs (#850)

... (truncated)

Commits

7e3814c 4.4.0
d2d6bf0 fix inefficient .enable() regex and .enabled() test
bc60914 4.3.7
c63e96e Upgrade ms to version 2.1.3 (#819)
382864a remove archaic badges from readme
c33b464 4.3.6
7956a45 Avoid using deprecated RegExp.$1
5464bdd 4.3.5
f244ada update authorship contact info
cac39b1 Fix/debug depth (#926)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by qix, a new releaser for debug since your current version.

Updates cross-spawn from 6.0.5 to 6.0.6

Changelog

Sourced from cross-spawn's changelog.

6.0.6 (2024-11-18)

Bug Fixes

disable regexp backtracking (#160) (ba5aaef)

core: support worker threads (#127) (f4af31c)

Commits

d35c865 chore(release): 6.0.6
5a37e19 chore: update package.json and package.lock
ba5aaef fix: disable regexp backtracking (#160)
f4af31c fix(core): support worker threads (#127)
See full diff in compare view

Updates json5 from 2.2.1 to 2.2.2

Release notes

Sourced from json5's releases.

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Changelog

Sourced from json5's changelog.

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Commits

14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
d720b4f Improve readme (e.g. explain JSON5 better!) (#291)
910ce25 docs: fix spelling of Aseem
2aab4dd test: require tap as t in cli tests
6d42686 test: remove mocha syntax from tests
4798b9d docs: update installation and usage for modules
Additional commits viewable in compare view

Updates acorn from 8.10.0 to 8.14.0

Commits

3c6a5a9 Mark version 8.14.0
e943275 Add missing unicode properties
ac3bd47 Add support for ES2025 RegExp Modifiers
f55d97c Add support for ES2025 Import Attributes
cc5ec01 Mark version 8.13.0
fdf144b Remove unused eslint-plugin-promise package
42b8796 Add Unicode v16 support
82de245 Fix whitelist, unsupported features
1fcd451 Bump test262
dfebfd5 Mark acorn-walk version 8.3.4
Additional commits viewable in compare view

Updates async from 3.2.4 to 3.2.6

Changelog

Sourced from async's changelog.

v3.2.5

Ensure Error objects such as AggregateError are propagated without modification (#1920)

Commits

85fb18f Version 3.2.6
8c0c941 Update built files
5f756b4 Fix ReDoS (#1980)
39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
7b8ddeb build(deps-dev): bump @babel/core from 7.24.7 to 7.25.2 (#1981)
4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
3568a74 build(deps-dev): bump @babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates fsevents from 2.3.2 to 2.3.3

Release notes

Sourced from fsevents's releases.

Release v2.3.3

Released to npm as v2.3.3

Commits

2db891e Release v2.3.3
8ec87bf Update nodejs.yml (#392)
c20c3af readme
63709df Merge pull request #384 from aleksanb/subdirs
a77340f Handle MustScanSubDirs for large projects
66be519 Update README.md (#371)
2f2a858 Update README.md (#364)
See full diff in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

6.0.6 (2024-11-18)

Bug Fixes

disable regexp backtracking (#160) (ba5aaef)

core: support worker threads (#127) (f4af31c)

Commits

d35c865 chore(release): 6.0.6
5a37e19 chore: update package.json and package.lock
ba5aaef fix: disable regexp backtracking (#160)
f4af31c fix(core): support worker threads (#127)
See full diff in compare view

Updates @babel/traverse from 7.22.10 to 7.26.7

Release notes

Sourced from @babel/traverse's releases.

v7.26.7 (2025-01-24)

Thanks @branchseer and @tquetano-netflix for your first PRs!

🐛 Bug Fix

babel-helpers, babel-preset-env, babel-runtime-corejs3

#17086 Make "object without properties" helpers ES6-compatible (@tquetano-netflix)

babel-plugin-transform-typeof-symbol

#17085 fix: Correctly handle typeof in arrow functions (@liuxingbaoyu)

babel-parser

#17079 Respect ranges option in estree method value (@JLHwung)

babel-core

#17052 Do not try to parse .ts configs as JSON if natively supported (@nicolo-ribaudo)

babel-plugin-transform-typescript

#17050 fix: correctly resolve references to non-constant enum members (@branchseer)

babel-plugin-transform-typescript, babel-traverse, babel-types

#17025 fix: Remove type-only import x = y.z (@liuxingbaoyu)

Committers: 6

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

Tony Quetano (@tquetano-netflix)

@branchseer

@liuxingbaoyu

v7.26.6 (2025-01-13)

🐛 Bug Fix

babel-plugin-transform-nullish-coalescing-operator

#17061 fix: Chaining nullish coalescing operators output size regression (@liuxingbaoyu)

Committers: 1

@liuxingbaoyu

v7.26.5 (2025-01-10)

👓 Spec Compliance

babel-parser

#17011 Allow the dynamic import.defer() form of import defer (@babel-bot)

🐛 Bug Fix

babel-plugin-transform-block-scoped-functions

#17024 chore: Avoid calling isInStrictMode in Babel 7 (@liuxingbaoyu)

babel-plugin-transform-typescript

#17026 fix: Correctly generate exported const enums in namespace (@liuxingbaoyu)

babel-parser

#17045 [estree] Unify method type parameters handling (@JLHwung)

#17013 fix: Correctly set position for @(a.b)() (@liuxingbaoyu)

#16996 [estree] Adjust the start loc of class methods with type params (@nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.26.7 (2025-01-24)

🐛 Bug Fix

babel-helpers, babel-preset-env, babel-runtime-corejs3

#17086 Make "object without properties" helpers ES6-compatible (@tquetano-netflix)

babel-plugin-transform-typeof-symbol

#17085 fix: Correctly handle typeof in arrow functions (@liuxingbaoyu)

babel-parser

#17079 Respect ranges option in estree method value (@JLHwung)

babel-core

#17052 Do not try to parse .ts configs as JSON if natively supported (@nicolo-ribaudo)

babel-plugin-transform-typescript

#17050 fix: correctly resolve references to non-constant enum members (@branchseer)

babel-plugin-transform-typescript, babel-traverse, babel-types

#17025 fix: Remove type-only import x = y.z (@liuxingbaoyu)

v7.26.6 (2025-01-13)

🐛 Bug Fix

babel-plugin-transform-nullish-coalescing-operator

#17061 fix: Chaining nullish coalescing operators output size regression (@liuxingbaoyu)

v7.26.5 (2025-01-10)

👓 Spec Compliance

babel-parser

#17011 Allow the dynamic import.defer() form of import defer (@babel-bot)

🐛 Bug Fix

babel-plugin-transform-block-scoped-functions

#17024 chore: Avoid calling isInStrictMode in Babel 7 (@liuxingbaoyu)

babel-plugin-transform-typescript

#17026 fix: Correctly generate exported const enums in namespace (@liuxingbaoyu)

babel-parser

#17045 [estree] Unify method type parameters handling (@JLHwung)

#17013 fix: Correctly set position for @(a.b)() (@liuxingbaoyu)

#16996 [estree] Adjust the start loc of class methods with type params (@nicolo-ribaudo)

babel-generator, babel-parser, babel-plugin-transform-flow-strip-types, babel-types

#17028 Support flow jsx opening element type arguments (@JLHwung)

babel-compat-data, babel-preset-env

#17031 fix: More accurate transform-typeof-symbol compat data (@liuxingbaoyu)

babel-generator, babel-parser, babel-types

#17019 Fix incomplete visitor keys (@JLHwung)

🔬 Output optimization

babel-plugin-transform-nullish-coalescing-operator

#16612 Improve nullish coalescing operator output (@liuxingbaoyu)

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

... (truncated)

Commits

2d95140 v7.26.7
ad572fd fix: Remove type-only import x = y.z (#17025)
74181cf v7.26.5
d35794e [Babel 8] Create TSEnumBody for TSEnumDeclaration (#16979)
cd24cc0 chore: Update TS 5.7 (#17053)
cf7b9cd v7.26.4
f33704a Revert "perf: Improve scope information collection performance" (#17005)
36ca8fa v7.26.3
ded1571 perf: Improve scope information collection performance (#16923)
943bdfe perf: Avoid repeated traversal when creating scope (#16964)
Additional commits viewable in compare view

Updates react-devtools-core from 4.28.0 to 4.28.5

Commits

See full diff in compare view

Updates serve-static from 1.15.0 to 1.16.2

Release notes

Sourced from serve-static's releases.

v1.16.2

What's Changed

encodeurl@~2.0.0 by @wesleytodd in expressjs/serve-static#180

Full Changelog: expressjs/serve-static@v1.16.1...v1.16.2

v1.16.1

What's Changed

bump send to 0.19 by @tommasini in expressjs/serve-static#176

New Contributors

@tommasini made their first contribution in expressjs/serve-static#176

Full Changelog: expressjs/serve-static@1.16.0...v1.16.1

1.16.0

What's Changed

Remove link renderization in html while redirecting (expressjs/serve-static#173)

New Contributors

@UlisesGascon made their first contribution in expressjs/serve-static#173

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

deps: send@0.19.0

1.16.0 / 2024-09-10

Remove link renderization in html while redirecting

Commits

ec9c5ec 1.16.2
f454d37 fix(deps): encodeurl@~2.0.0
77a8255 1.16.1
4263f49 fix(deps): send@0.19.0
48c7397 1.16.0
0c11fad Merge commit from fork
See full diff in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.

Updates acorn from 8.10.0 to 8.14.0

Commits

3c6a5a9 Mark version 8.14.0
e943275 Add missing unicode properties
ac3bd47 Add support for ES2025 RegExp Modifiers
f55d97c Add support for ES2025 Import Attributes
cc5ec01 Mark version 8.13.0
fdf144b Remove unused eslint-plugin-promise package
42b8796 Add Unicode v16 support
82de245 Fix whitelist, unsupported features
1fcd451 Bump test262
dfebfd5 Mark acorn-walk version 8.3.4
Additional commits viewable in compare view

Updates async from 3.2.4 to 3.2.6

Changelog

Sourced from async's changelog.

v3.2.5

Ensure Error objects such as AggregateError are propagated without modification (#1920)

Commits

85fb18f Version 3.2.6
8c0c941 Update built files
5f756b4 Fix ReDoS (#1980)
39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
7b8ddeb build(deps-dev): bump @babel/core from 7.24.7 to 7.25.2 (#1981)
4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
3568a74 build(deps-dev): bump @babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates fsevents from 2.3.2 to 2.3.3

Release notes

Sourced from fsevents's releases.

Release v2.3.3

Released to npm as v2.3.3

Commits

2db891e Re...
Description has been truncated

Bumps the npm_and_yarn group with 1 update in the /browser directory: [webpack](https://github.com/webpack/webpack). Bumps the npm_and_yarn group with 1 update in the /go/kbfs/libmime/builder directory: [debug](https://github.com/debug-js/debug). Bumps the npm_and_yarn group with 1 update in the /packaging/desktop directory: [cross-spawn](https://github.com/moxystudio/node-cross-spawn). Bumps the npm_and_yarn group with 1 update in the /protocol directory: [json5](https://github.com/json5/json5). Bumps the npm_and_yarn group with 9 updates in the /rnmodules/react-native-drop-view directory: | Package | From | To | | --- | --- | --- | | [acorn](https://github.com/acornjs/acorn) | `8.10.0` | `8.14.0` | | [async](https://github.com/caolan/async) | `3.2.4` | `3.2.6` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [fsevents](https://github.com/fsevents/fsevents) | `2.3.2` | `2.3.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.10` | `7.26.7` | | [react-devtools-core](https://github.com/facebook/react/tree/HEAD/packages/react-devtools-core) | `4.28.0` | `4.28.5` | | [serve-static](https://github.com/expressjs/serve-static) | `1.15.0` | `1.16.2` | Bumps the npm_and_yarn group with 9 updates in the /rnmodules/react-native-kb directory: | Package | From | To | | --- | --- | --- | | [acorn](https://github.com/acornjs/acorn) | `8.10.0` | `8.14.0` | | [async](https://github.com/caolan/async) | `3.2.4` | `3.2.6` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [fsevents](https://github.com/fsevents/fsevents) | `2.3.2` | `2.3.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.10` | `7.26.7` | | [react-devtools-core](https://github.com/facebook/react/tree/HEAD/packages/react-devtools-core) | `4.28.0` | `4.28.5` | | [serve-static](https://github.com/expressjs/serve-static) | `1.15.0` | `1.16.2` | Bumps the npm_and_yarn group with 13 updates in the /shared directory: | Package | From | To | | --- | --- | --- | | [webpack](https://github.com/webpack/webpack) | `5.89.0` | `5.94.0` | | [acorn](https://github.com/acornjs/acorn) | `8.11.2` | `8.14.0` | | [async](https://github.com/caolan/async) | `3.2.5` | `3.2.6` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [tar](https://github.com/isaacs/node-tar) | `6.2.0` | `6.2.1` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.23.3` | `7.26.7` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.21.2` | | [fast-loops](https://github.com/robinweser/fast-loops) | `1.1.3` | `1.1.4` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.3` | `1.15.9` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.6` | `2.0.7` | | [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `5.3.4` | Updates `webpack` from 2.7.0 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v2.7.0...v5.97.1) Updates `acorn` from 4.0.13 to 8.14.0 - [Commits](acornjs/acorn@8.10.0...8.14.0) Updates `ajv` from 4.11.8 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@4.11.8...v6.12.6) Updates `debug` from 3.1.0 to 4.4.0 - [Release notes](https://github.com/debug-js/debug/releases) - [Commits](debug-js/debug@3.1.0...4.4.0) Updates `cross-spawn` from 6.0.5 to 6.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `json5` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.1...v2.2.2) Updates `acorn` from 8.10.0 to 8.14.0 - [Commits](acornjs/acorn@8.10.0...8.14.0) Updates `async` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.4...v3.2.6) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `fsevents` from 2.3.2 to 2.3.3 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v2.3.2...v2.3.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `@babel/traverse` from 7.22.10 to 7.26.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.7/packages/babel-traverse) Updates `react-devtools-core` from 4.28.0 to 4.28.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/react-devtools-core) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `acorn` from 8.10.0 to 8.14.0 - [Commits](acornjs/acorn@8.10.0...8.14.0) Updates `async` from 3.2.4 to 3.2.6 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.4...v3.2.6) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `fsevents` from 2.3.2 to 2.3.3 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v2.3.2...v2.3.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/v6.0.6/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v6.0.5...v6.0.6) Updates `@babel/traverse` from 7.22.10 to 7.26.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.7/packages/babel-traverse) Updates `react-devtools-core` from 4.28.0 to 4.28.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/react-devtools-core) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `webpack` from 5.89.0 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v2.7.0...v5.97.1) Updates `acorn` from 8.11.2 to 8.14.0 - [Commits](acornjs/acorn@8.10.0...8.14.0) Updates `async` from 3.2.5 to 3.2.6 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md) - [Commits](caolan/async@v3.2.4...v3.2.6) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `tar` from 6.2.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.0...v6.2.1) Updates `@babel/traverse` from 7.23.3 to 7.26.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.7/packages/babel-traverse) Updates `express` from 4.18.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.2...4.21.2) Updates `fast-loops` from 1.1.3 to 1.1.4 - [Commits](https://github.com/robinweser/fast-loops/commits) Updates `follow-redirects` from 1.15.3 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.3...v1.15.9) Updates `http-proxy-middleware` from 2.0.6 to 2.0.7 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.7/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.7) Updates `nanoid` from 3.3.7 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.3.7...3.3.8) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4) --- updated-dependencies: - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: debug dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: react-devtools-core dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: react-devtools-core dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: acorn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-loops dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 7 directories with 21 updates#1

Bump the npm_and_yarn group across 7 directories with 21 updates#1
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/browser/npm_and_yarn-b9db2462fd

dependabot bot commented on behalf of github Feb 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 1, 2025

v5.97.1

Bug Fixes

v5.97.0

Bug Fixes

New Features

Performance

v5.96.1

Bug Fixes

v5.96.0

Bug Fixes

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v6.12.0

v6.11.0

v6.10.2

v6.10.1

v6.10.0

v6.9.0

4.4.0

4.3.7

What's Changed

4.3.6

What's Changed

New Contributors

4.3.5

Patch

4.3.4

What's Changed

New Contributors

4.3.3

Patch Release 4.3.3

6.0.6 (2024-11-18)

Bug Fixes

v2.2.2

v2.2.2 [code, diff]

v3.2.5

Release v2.3.3

4.0.8

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

[4.0.6] - 2024-05-21

6.0.6 (2024-11-18)

Bug Fixes

v7.26.7 (2025-01-24)

🐛 Bug Fix

Committers: 6

v7.26.6 (2025-01-13)

🐛 Bug Fix

Committers: 1

v7.26.5 (2025-01-10)

👓 Spec Compliance

🐛 Bug Fix

v7.26.7 (2025-01-24)

🐛 Bug Fix

v7.26.6 (2025-01-13)

🐛 Bug Fix

v7.26.5 (2025-01-10)

👓 Spec Compliance

🐛 Bug Fix

🔬 Output optimization

v7.26.4 (2024-12-05)

↩️ Revert

v1.16.2

What's Changed

v1.16.1

What's Changed

New Contributors

1.16.0

What's Changed

New Contributors

1.16.2 / 2024-09-11

1.16.1 / 2024-09-11

1.16.0 / 2024-09-10

v3.2.5