Bump the npm_and_yarn group across 1 directory with 21 updates by dependabot[bot] · Pull Request #322 · SquireAI/codeowners-api

dependabot · 2024-10-29T19:47:46Z

Bumps the npm_and_yarn group with 16 updates in the / directory:

Package	From	To
axios	`0.26.1`	`0.28.0`
express	`4.18.1`	`4.21.1`
langchain	`0.0.67`	`0.2.19`
octokit	`2.0.10`	`3.1.2`
passport	`0.4.1`	`0.6.0`
webpack	`5.89.0`	`5.95.0`
semver	`5.7.2`	`7.6.3`
nodemon	`2.0.22`	`2.0.22`
cookie	`0.4.1`	`0.7.2`
@sentry/node	`6.19.7`	`8.35.0`
cookie-parser	`1.4.6`	`1.4.7`
winston-transport-sentry-node	`2.3.0`	`2.8.0`
follow-redirects	`1.15.1`	`1.15.9`
micromatch	`4.0.5`	`4.0.8`
msgpackr	`1.8.1`	`1.11.0`
ws	`7.5.8`	`7.5.10`

Updates axios from 0.26.1 to 0.28.0

Release notes

Sourced from axios's releases.

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

Fixed timeout error message for HTTP 4738

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 #4728

Adding types for progress event callbacks #4675

Fixed max body length defaults #4731

Added data URL support for node.js (#4725)

Added isCancel type assert (#4293)

Added the ability for the url-encoded-form serializer to respect the formSerializer config (#4721)

Add string[] to AxiosRequestHeaders type (#4322)

Allow type definition for axios instance methods (#4224)

Fixed AxiosError stack capturing; (#4718)

Fixed AxiosError status code type; (#4717)

Adding Canceler parameters config and request (#4711)

fix(types): allow to specify partial default headers for instance creation (#4185)

Added blob to the list of protocols supported by the browser (#4678)

Fixing Z_BUF_ERROR when no content (#4701)

Fixed race condition on immediate requests cancellation (#4261)

Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance axios/axios#4248

Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)

Fix TS definition for AxiosRequestTransformer (#4201)

Use type alias instead of interface for AxiosPromise (#4505)

Include request and config when creating a CanceledError instance (#4659)

Added generic TS types for the exposed toFormData helper (#4668)

Optimized the code that checks cancellation (#4587)

Replaced webpack with rollup (#4596)

Added stack trace to AxiosError (#4624)

Updated AxiosError.config to be optional in the type definition (#4665)

Removed incorrect argument for NetworkError constructor (#4656)

v0.27.2

Fixes and Functionality:

Fixed FormData posting in browser environment by reverting #3785 (#4640)

Enhanced protocol parsing implementation (#4639)

Fixed bundle size

v0.27.1

Fixes and Functionality:

Removed import of url module in browser build due to huge size overhead and builds being broken (#4594)

Bumped follow-redirects to ^1.14.9 (#4615)

... (truncated)

Changelog

Sourced from axios's changelog.

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

Fixed timeout error message for HTTP 4738

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 #4728

Adding types for progress event callbacks #4675

Fixed max body length defaults #4731

Added data URL support for node.js (#4725)

Added isCancel type assert (#4293)

Added the ability for the url-encoded-form serializer to respect the formSerializer config (#4721)

Add string[] to AxiosRequestHeaders type (#4322)

Allow type definition for axios instance methods (#4224)

Fixed AxiosError stack capturing; (#4718)

Fixed AxiosError status code type; (#4717)

Adding Canceler parameters config and request (#4711)

fix(types): allow to specify partial default headers for instance creation (#4185)

Added blob to the list of protocols supported by the browser (#4678)

Fixing Z_BUF_ERROR when no content (#4701)

Fixed race condition on immediate requests cancellation (#4261)

Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance axios/axios#4248

Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)

Fix TS definition for AxiosRequestTransformer (#4201)

Use type alias instead of interface for AxiosPromise (#4505)

Include request and config when creating a CanceledError instance (#4659)

Added generic TS types for the exposed toFormData helper (#4668)

Optimized the code that checks cancellation (#4587)

Replaced webpack with rollup (#4596)

Added stack trace to AxiosError (#4624)

Updated AxiosError.config to be optional in the type definition (#4665)

Removed incorrect argument for NetworkError constructor (#4656)

0.27.2 (April 27, 2022)

Fixes and Functionality:

Fixed FormData posting in browser environment by reverting #3785 (#4640)

Enhanced protocol parsing implementation (#4639)

Fixed bundle size

0.27.1 (April 26, 2022)

... (truncated)

Commits

3b7635a [Release] v0.28.0 (#6211)
27c0076 feat(backport): added ability for paramsSerializer to handle function; (#6227)
80c3d74 chore(ci): backported publish action; (#6224)
2755df5 fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to ...
880b42e docs: Fix a typo in README
c4bf0a4 Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
1e2679f fix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...
80b546c fix: loosing request header (#4858) (#4871)
6acb5ef feat: brower platform add data protocol. (#4814)
bbb2264 fix(typing): axios response headers can be undefined (#4813)
Additional commits viewable in compare view

Updates express from 4.18.1 to 4.21.1

Release notes

Sourced from express's releases.

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

... (truncated)

Changelog

Sourced from express's changelog.

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

... (truncated)

Commits

8e229f9 4.21.1
a024c8a fix(deps): cookie@0.7.1
7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
77ada90 Deprecate "back" magic string in redirects (#5935)
21df421 4.20.0
4c9ddc1 feat: upgrade to serve-static@0.16.0
9ebe5d5 feat: upgrade to send@0.19.0 (#5928)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for express since your current version.

Updates langchain from 0.0.67 to 0.2.19

Release notes

Sourced from langchain's releases.

0.2.19

What's Changed

fix(mongodb): mongodb storage mget must return undefined when key not exist by @rtyshyk in langchain-ai/langchainjs#6445

chore(mongodb): Release 0.0.6 by @jacoblee93 in langchain-ai/langchainjs#6694

fix(openai): Fix type import issue by @jacoblee93 in langchain-ai/langchainjs#6695

feat(openai): baseUrl for DallEAPIWrapper by @wanoo21 in langchain-ai/langchainjs#6685

chore(openai): Release 0.2.10 by @jacoblee93 in langchain-ai/langchainjs#6697

community[patch]: Relax webllm peer dep by @bracesproul in langchain-ai/langchainjs#6696

langchain[patch]: Take all required fields into account for OpenAPI chain by @ikalachy in langchain-ai/langchainjs#6700

docs[minor]: Add state of agents survey to docs announcement bar by @bracesproul in langchain-ai/langchainjs#6710

anthropic[patch]: Fix passing cache control through in messages by @bracesproul in langchain-ai/langchainjs#6711

anthropic[minor]: Allow different tool types to be bound by @bracesproul in langchain-ai/langchainjs#6712

anthropic[patch]: Release 0.2.17 by @bracesproul in langchain-ai/langchainjs#6713

docs[patch]: fix chroma distance function reference link by @spielhoelle in langchain-ai/langchainjs#6714

fix(core): Pin TypeScript version for now for export test failures, add asyncDispose by @jacoblee93 in langchain-ai/langchainjs#6723

feat(core,openai): Adds streaming support for OpenAI withStructuredOutput by @jacoblee93 in langchain-ai/langchainjs#6721

baidu-qianfan[patch]: Fix streaming mode of Qianfan by @stanoswald in langchain-ai/langchainjs#6661

fix(anthropic): Do not check for apiKey existence when createClient parameters are present by @rxliuli in langchain-ai/langchainjs#6716

feat(community): Add arcjet integration by @jacoblee93 in langchain-ai/langchainjs#6725

feat(community): BM25 Keyword Search Retriever by @Mraj23 in langchain-ai/langchainjs#6719

chore(baidu-qianfan): Release 0.0.4 by @jacoblee93 in langchain-ai/langchainjs#6726

chore(anthropic): Release 0.2.18 by @jacoblee93 in langchain-ai/langchainjs#6727

chore(core): Release 0.2.32 by @jacoblee93 in langchain-ai/langchainjs#6728

chore(community): Release 0.2.33 by @jacoblee93 in langchain-ai/langchainjs#6729

cloudflare[minor]: use native Cloudflare Workers AI binding by @Cherry in langchain-ai/langchainjs#5287

docs: Fix typo in chatbot tutorial by @jacoblee93 in langchain-ai/langchainjs#6730

docs: Update wording in tool choice guide by @jacoblee93 in langchain-ai/langchainjs#6732

google-common[major]: Media manager by @afirstenberg in langchain-ai/langchainjs#5835

fix(langchain): Fix local file store traversal issue by @jacoblee93 in langchain-ai/langchainjs#6736

fix(ci): Fix cf exports test by @jacoblee93 in langchain-ai/langchainjs#6737

fix(ci): Fix cf-workers export test by @jacoblee93 in langchain-ai/langchainjs#6738

fix(ci): Fix esbuild tests by @jacoblee93 in langchain-ai/langchainjs#6739

fix(ci): Fix ci by @jacoblee93 in langchain-ai/langchainjs#6741

chore(langchain): Release 0.2.19 by @jacoblee93 in langchain-ai/langchainjs#6742

New Contributors

@rtyshyk made their first contribution in langchain-ai/langchainjs#6445

@wanoo21 made their first contribution in langchain-ai/langchainjs#6685

@ikalachy made their first contribution in langchain-ai/langchainjs#6700

@spielhoelle made their first contribution in langchain-ai/langchainjs#6714

@stanoswald made their first contribution in langchain-ai/langchainjs#6661

@Mraj23 made their first contribution in langchain-ai/langchainjs#6719

@Cherry made their first contribution in langchain-ai/langchainjs#5287

Full Changelog: langchain-ai/langchainjs@0.2.18...0.2.19

Release 0.2.18

What's Changed

Release 0.2.17 by @bracesproul in langchain-ai/langchainjs#6611

langchain[patch]: Bump vertex dep by @bracesproul in langchain-ai/langchainjs#6613

... (truncated)

Commits

d5ba68d chore(langchain): Release 0.2.19 (#6742)
26f75b6 chore(langchain): Release 0.2.19
7fbae88 fix(ci): Fix ci (#6741)
87ce560 fix(ci): Fix esbuild tests (#6739)
a8ff65d fix(ci): Fix cf-workers export test (#6738)
1010d1c fix(ci): Fix cf exports test (#6737)
a0fad77 fix(langchain): Fix local file store traversal issue (#6736)
08092cd google-common[major]: Media manager (#5835)
6a723fa docs: Update wording in tool choice guide (#6732)
630283b docs: Fix typo in chatbot tutorial (#6730)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jacoblee93, a new releaser for langchain since your current version.

Updates octokit from 2.0.10 to 3.1.2

Release notes

Sourced from octokit's releases.

v3.1.2

3.1.2 (2023-11-15)

Bug Fixes

updates app.js for the handling of an error being thrown by the verify method in webhooks.js (#2576) (b59da80)

v3.1.1

3.1.1 (2023-09-25)

Bug Fixes

deps: update octokit monorepo (major) (#2541) (f366919)

v3.1.0

3.1.0 (2023-07-26)

Features

add plugin-paginate-graphql (#2487) (74856f6)

v3.0.0

3.0.0 (2023-07-11)

Features

v3 (#2456) (84e6569)

BREAKING CHANGES

Drop support for NodeJS v14, v16

Remove previews support for the REST API

remove agent option from octokit.request()

Replace support for Node.js http(s) Agents with documentation on using fetch dispatchers instead (via @octokit/request)

Remove ability to pass custom request options, except for method, headers, body, signal (via @octokit/request)

v3.0.0-beta.5

3.0.0-beta.5 (2023-07-11)

Bug Fixes

deps: bump Octokit deps (#2493) (839e415)

v3.0.0-beta.4

... (truncated)

Commits

b59da80 fix: updates app.js for the handling of an error being thrown by the verify m...
f514e4b build(deps): lock file maintenance (#2574)
fdc9bba chore(deps): update dependency prettier to v3.1.0
d3a9984 build(deps): lock file maintenance
870d89d build(deps): lock file maintenance (#2565)
78735dd build(deps): lock file maintenance (#2562)
72ea679 chore(deps): update dependency @types/node to v20
692f7db ci(action): update actions/setup-node action to v4 (#2560)
5b47b84 build(deps): lock file maintenance (#2558)
941c584 docs: fixing typos in README (#2557)
Additional commits viewable in compare view

Updates passport from 0.4.1 to 0.6.0

Changelog

Sourced from passport's changelog.

[0.6.0] - 2022-05-20

Added

authenticate(), req#login, and req#logout accept a keepSessionInfo: true option to keep session information after regenerating the session.

Changed

req#login() and req#logout() regenerate the the session and clear session information by default.

req#logout() is now an asynchronous function and requires a callback function as the last argument.

Security

Improved robustness against session fixation attacks in cases where there is physical access to the same system or the application is susceptible to cross-site scripting (XSS).

[0.5.3] - 2022-05-16

Fixed

initialize() middleware extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions again, reverting change from 0.5.1.

[0.5.2] - 2021-12-16

Fixed

Introduced a compatibility layer for strategies that depend directly on passport@0.4.x or earlier (such as passport-azure-ad), which were broken by the removal of private variables in passport@0.5.1.

[0.5.1] - 2021-12-15

Added

Informative error message in session strategy if session support is not available.

Changed

authenticate() middleware, rather than initialize() middleware, extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions.

[0.5.0] - 2021-09-23

Changed

initialize() middleware extends request with login(), logIn(), logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions.

... (truncated)

Commits

c33067b 0.6.0
3052bb4 Update changelog.
42630cb Merge pull request #900 from jaredhanson/fix-fixation
8dd79fe Use utils-merge rather than Object.assign for compatibility.
4f6bd5b Change keepSessionData to keepSessionData.
46756e5 Silence verbose logging.
987b191 Add tests.
f8a175f Add tests.
29a90d6 No need to guard callback existence.
bfba8a1 Add tests.
Additional commits viewable in compare view

Updates webpack from 5.89.0 to 5.95.0

Release notes

Sourced from webpack's releases.

v5.95.0

Bug Fixes

Fixed hanging when attempting to read a symlink-like file that it can't read

Handle default for import context element dependency

Merge duplicate chunks call after split chunks

Generate correctly code for dynamically importing the same file twice and destructuring

Use content hash as [base] and [name] for extracted DataURI's

Distinguish module and import in module-import for externals import's

[Types] Make EnvironmentPlugin default values types less strict

[Types] Typescript 5.6 compatibility

New Features

Add new optimization.avoidEntryIife option (true by default for the production mode)

Pass output.hash* options to loader context

Performance

Avoid unneeded re-visit in build chunk graph

v5.94.0

Bug Fixes

Added runtime condition for harmony reexport checked

Handle properly data/http/https protocols in source maps

Make bigint optimistic when browserslist not found

Move @types/eslint-scope to dev deps

Related in asset stats is now always an array when no related found

Handle ASI for export declarations

Mangle destruction incorrect with export named default properly

Fixed unexpected asi generation with sequence expression

Fixed a lot of types

New Features

Added new external type "module-import"

Support webpackIgnore for new URL() construction

[CSS] @import pathinfo support

Security

Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

Generate correct relative path to runtime chunks

Makes DefinePlugin quieter under default log level

Fixed mangle destructuring default in namespace import

... (truncated)

Commits

e20fd63 chore(release): 5.95.0
4866b0d feat: added new optimization.entryIife option
d90f692 fix: merge duplicate chunks after split chunks
90dec30 fix(externals): distinguish “module” and “import” in “module-import”
c1a0a46 fix(externals): distinguish “module” and “import” in “module-import”
14d8fa8 fix: all tests cases
dae16ad feat: pass output.hash* options to loader context
75d185d feat: pass output.hash* options to loader context
46e0b9c test: update
8e62f9f test
Additional commits viewable in compare view

Updates semver from 5.7.2 to 7.6.3

Release notes

Sourced from semver's releases.

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

Dependencies

988a8de #709 uninstall lru-cache (#709)

3fabe4d #704 remove lru-cache

Chores

dd09b60 #705 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)

ec49cdc #701 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)

b236c3d #696 add benchmarks (#696) (@H4ad)

692451b #688 various improvements to README (#688) (@mbtools)

5feeb7f #705 postinstall for dependabot template-oss PR (@lukekarrys)

074156f #701 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

v7.6.0

7.6.0 (2024-01-31)

Features

a7ab13a #671 preserve pre-release and build parts of a version on coerce (#671) (@madtisa, madtisa, @wraithgar)

Chores

... (truncated)

Changelog

Sourced from semver's changelog.

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

7.6.2 (2024-05-09)

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

7.6.1 (2024-05-04)

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)

ad8ff11 #704 use internal cache implementation (@mbtools)

ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

Dependencies

988a8de #709 uninstall lru-cache (#709)

3fabe4d #704 remove lru-cache

Chores

dd09b60 #705 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)

ec49cdc #701 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)

b236c3d #696 add benchmarks (#696) (@H4ad)

692451b #688 various improvements to README (#688) (@mbtools)

5feeb7f #705 postinstall for dependabot template-oss PR (@lukekarrys)

074156f #701 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

7.6.0 (2024-01-31)

Features

a7ab13a

Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.26.1` | `0.28.0` | | [express](https://github.com/expressjs/express) | `4.18.1` | `4.21.1` | | [langchain](https://github.com/langchain-ai/langchainjs) | `0.0.67` | `0.2.19` | | [octokit](https://github.com/octokit/octokit.js) | `2.0.10` | `3.1.2` | | [passport](https://github.com/jaredhanson/passport) | `0.4.1` | `0.6.0` | | [webpack](https://github.com/webpack/webpack) | `5.89.0` | `5.95.0` | | [semver](https://github.com/npm/node-semver) | `5.7.2` | `7.6.3` | | [nodemon](https://github.com/remy/nodemon) | `2.0.22` | `2.0.22` | | [cookie](https://github.com/jshttp/cookie) | `0.4.1` | `0.7.2` | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `6.19.7` | `8.35.0` | | [cookie-parser](https://github.com/expressjs/cookie-parser) | `1.4.6` | `1.4.7` | | [winston-transport-sentry-node](https://github.com/aandrewww/winston-transport-sentry-node) | `2.3.0` | `2.8.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.1` | `1.15.9` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [msgpackr](https://github.com/kriszyp/msgpackr) | `1.8.1` | `1.11.0` | | [ws](https://github.com/websockets/ws) | `7.5.8` | `7.5.10` | Updates `axios` from 0.26.1 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.26.1...v0.28.0) Updates `express` from 4.18.1 to 4.21.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md) - [Commits](expressjs/express@4.18.1...4.21.1) Updates `langchain` from 0.0.67 to 0.2.19 - [Release notes](https://github.com/langchain-ai/langchainjs/releases) - [Changelog](https://github.com/langchain-ai/langchainjs/blob/main/release_workspace.js) - [Commits](langchain-ai/langchainjs@0.0.67...0.2.19) Updates `octokit` from 2.0.10 to 3.1.2 - [Release notes](https://github.com/octokit/octokit.js/releases) - [Commits](octokit/octokit.js@v2.0.10...v3.1.2) Updates `passport` from 0.4.1 to 0.6.0 - [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md) - [Commits](jaredhanson/passport@v0.4.1...v0.6.0) Updates `webpack` from 5.89.0 to 5.95.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.89.0...v5.95.0) Updates `semver` from 5.7.2 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.2...v7.6.3) Updates `nodemon` from 2.0.22 to 2.0.22 - [Release notes](https://github.com/remy/nodemon/releases) - [Commits](remy/nodemon@v2.0.22...v2.0.22) Updates `@octokit/webhooks` from 10.3.1 to 12.3.1 - [Release notes](https://github.com/octokit/webhooks.js/releases) - [Commits](octokit/webhooks.js@v10.3.1...v12.3.1) Updates `body-parser` from 1.20.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.0...1.20.3) Updates `cookie` from 0.4.1 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.1...v0.7.2) Updates `@sentry/node` from 6.19.7 to 8.35.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@6.19.7...8.35.0) Updates `cookie-parser` from 1.4.6 to 1.4.7 - [Release notes](https://github.com/expressjs/cookie-parser/releases) - [Changelog](https://github.com/expressjs/cookie-parser/blob/master/HISTORY.md) - [Commits](expressjs/cookie-parser@1.4.6...1.4.7) Updates `winston-transport-sentry-node` from 2.3.0 to 2.8.0 - [Commits](https://github.com/aandrewww/winston-transport-sentry-node/commits) Updates `follow-redirects` from 1.15.1 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.1...v1.15.9) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `msgpackr` from 1.8.1 to 1.11.0 - [Release notes](https://github.com/kriszyp/msgpackr/releases) - [Commits](https://github.com/kriszyp/msgpackr/commits) Updates `path-to-regexp` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `ws` from 7.5.8 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.8...7.5.10) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: langchain dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: octokit dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: passport dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nodemon dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@octokit/webhooks" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sentry/node" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: cookie-parser dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: winston-transport-sentry-node dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: msgpackr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

derricks-squire

Pull request summary created by Squire AI

Summary

This pull request updates various npm and yarn dependencies within one directory, totaling 21 updates. Key updates include packages such as axios, express, langchain, octokit, passport, webpack, and @sentry/node, among others. The intent of these updates is to ensure the project uses the most recent and secure versions of these libraries, addressing potential vulnerabilities and improving compatibility with other modules.

deacebf...9285ae2

File Summary

deacebf...9285ae2

dependabot bot requested a review from derrickpersson as a code owner October 29, 2024 19:47

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 29, 2024

derricks-squire bot reviewed Oct 29, 2024

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 21 updates#322

Bump the npm_and_yarn group across 1 directory with 21 updates#322
dependabot[bot] wants to merge 1 commit intodevelopmentfrom
dependabot/npm_and_yarn/npm_and_yarn-2ec3e0c60c

dependabot bot commented on behalf of github Oct 29, 2024

Uh oh!

derricks-squire bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Oct 29, 2024

Release v0.28.0

Release notes:

Bug Fixes

Backports from v1.x:

v0.27.2

v0.27.1

Fixes and Functionality:

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

Backports from v1.x:

0.27.2 (April 27, 2022)

0.27.1 (April 26, 2022)

4.21.1

What's Changed

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Important

Other Changes

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

0.2.19

What's Changed

New Contributors

Release 0.2.18

What's Changed

v3.1.2

3.1.2 (2023-11-15)

Bug Fixes

v3.1.1

3.1.1 (2023-09-25)

Bug Fixes

v3.1.0

3.1.0 (2023-07-26)

Features

v3.0.0

3.0.0 (2023-07-11)

Features

BREAKING CHANGES

v3.0.0-beta.5

3.0.0-beta.5 (2023-07-11)

Bug Fixes

v3.0.0-beta.4

[0.6.0] - 2022-05-20

Added

Changed

Security

[0.5.3] - 2022-05-16

Fixed

[0.5.2] - 2021-12-16

Fixed

[0.5.1] - 2021-12-15

Added

Changed

[0.5.0] - 2021-09-23

Changed

v5.95.0

Bug Fixes

New Features

Performance

v5.94.0

Bug Fixes

New Features

Security

v5.93.0

Bug Fixes

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

Documentation