Skip to content

Bump the npm_and_yarn group across 3 directories with 25 updates#33

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-6b631efaf8
Closed

Bump the npm_and_yarn group across 3 directories with 25 updates#33
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-6b631efaf8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 3, 2025 •
edited
Loading

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package From To
braces 3.0.2 3.0.3
cookie 0.5.0 0.7.2
next-auth 4.24.7 4.24.11
cross-spawn 7.0.3 7.0.6
micromatch 4.0.5 4.0.8
nanoid 3.3.7 3.3.8
next 14.2.3 15.2.0

Bumps the npm_and_yarn group with 6 updates in the /docs directory:

Package From To
cross-spawn 5.1.0 7.0.6
nanoid 3.3.7 3.3.8
next 14.2.3 14.2.21
pug 3.0.2 3.0.3
express 4.19.2 4.21.2
ws 8.16.0 8.18.1

Bumps the npm_and_yarn group with 12 updates in the /sweep_chat directory:

Package From To
cookie 0.5.0 0.7.2
next-auth 4.24.7 4.24.11
cross-spawn 7.0.3 7.0.6
micromatch 4.0.5 4.0.8
nanoid 3.3.7 3.3.8
next 14.2.3 14.2.24
@octokit/endpoint 10.1.1 10.1.3
@octokit/plugin-paginate-rest 11.3.0 11.4.3
@octokit/request 9.1.1 9.2.2
@sentry/browser 8.2.1 8.55.0
@sentry/nextjs 8.2.1 8.55.0
axios 1.7.2 1.8.1

Updates braces from 3.0.2 to 3.0.3

Commits

Updates cookie from 0.5.0 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates next-auth from 4.24.7 to 4.24.11

Release notes

Sourced from next-auth's releases.

[email protected]

What's Changed

Full Changelog: https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.10

[email protected]

What's Changed

New Contributors

Full Changelog: https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.9

Commits
  • 6bca388 chore(release): bump version [skip ci]
  • c46fd4f chore(deps): allow react v19 as peer deps (#12352)
  • 3dfe5d5 chore: Update docusaurus.config.js
  • 0447db0 chore(v4): add sent.dm sponsor (#12172)
  • 5a5859a docs: Update options.md
  • 5ad7fb4 docs: Update options.md
  • c7ea50d chore(release): bump version [skip ci]
  • 490a033 fix: support AUTH_SECRET for compat with npx auth secret
  • 1e6be72 fix: functions that return promises must be async (#12105)
  • ddab3cc chore(release): bump version [skip ci]
  • Additional commits viewable in compare view

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.
Commits

Updates nanoid from 3.3.7 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates next from 14.2.3 to 15.2.0

Release notes

Sourced from next's releases.

v15.2.0

Core Changes

  • Fix unstable_allowDynamic when used with pnpm: #73732
  • [dynamicIO] use new heuristic to track whether server render is dynamic: #73751
  • Fix receiveExpiredTags not always called: #73759
  • error-overlay: Rename "Error" to "Issue": #72817
  • remove redundant segment collection call: #73773
  • Metadata resolvers can be fetched synchronously: #73771
  • Turbopack: migrate client references to single-graph-traversal: #73322
  • next-codemod: update gitignore file for parity for yarn recommendations: #71963
  • feat: error code: #73332
  • Detach next-error-code-swc-plugin from workspace: #73806
  • [CI] Prominent error message for check_error_codes: #73807
  • [Segment Cache] Add PPR header to segment prefetch: #73756
  • fix: path escaping issue on windows: #73843
  • Rename variables in LayoutRouter for clarity: #73826
  • [Segment Cache] Skip prefetched segments on server: #73626
  • [Segment Cache] No data on tree prefetch if no PPR: #73767
  • Remove segmentPath from RSC payload: #73827
  • build: better error if fetching AMP validator fails: #73851
  • Escape the '.' in '.json' when making static data routes.: #73850
  • fix(next@15): use the asset prefix when loading a CSS in App Router: #72095
  • Exclude .test. files from using error code plugin: #73868
  • Refactor telemetry API: #73865
  • Add additional error classes and error codes: #73862
  • refactor: collectAppPageSegments: #73908
  • cleanup unnecessary map in dev server: #73745
  • Retry manifest file loading only in dev mode: #73900
  • Turbopack: ignore empty NEXT_TURBOPACK_TRACING var: #73903
  • Ignore RSC fetch errors after hard navigation: #73975
  • Fix error code check in windows: #73981
  • Separate viewport and metadata in rsc and cache: #73867
  • Add feature flag for new dev overlay: #73977
  • Restore RSC fetch error handling after navigating back: #73985
  • refactor: make locales array immutable: #74037
  • fix: skip rendering dynamic root segment routes: #74039
  • refactor: cache lowercasing all the locales: #74038
  • Add SRI support for Node.js Runtime : #73891
  • Separate bots detection utils: #74000
  • docs: remove a duplicated word in redirect code comment: #74043
  • examples: update gitignore files for parity for yarn recommendations: #71956
  • chore: update turbopack document path in the warning message: #72597
  • Clean up react-dev-overlay before fork: #74016
  • chore(next/image): improve imgopt api bypass detection for unsupported images: #73909
  • [Segment Cache] Add CacheStatus.Empty: #73667
  • chore: move static paths utils into own folder: #73928
  • Delete unused GroupedStackFrames.tsx: #74028
  • [Segment Cache] Move cache key creation to client : #73853
  • feat: added partial shell generation using root params: #73816

... (truncated)

Commits
  • b0416fb v15.2.0
  • 166369d v15.2.0-canary.77
  • 2c57888 [dev-overlay]: allow disabled state to be dismissable (#76572)
  • c919f09 examples: fix supabase example for v15 (#76567)
  • 991c32a [dev-overlay] rephrase docs button title as link to related docs (#76571)
  • aaebca9 Updated remove-console example to utilize the app router. (#76543)
  • 8dd0b56 docs(errors): update suppressHydrationWarning section (#76521)
  • c505a4c exclude AppDevOverlayErrorBoundary from prod build (#76568)
  • 91684ee Remove rewrite query params from request URL when deployed to Vercel (#76548)
  • dbeeb02 [dev-overlay] change button to lowercase except leading letter (#76565)
  • Additional commits viewable in compare view

Updates cross-spawn from 5.1.0 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates nanoid from 3.3.7 to 3.3.8

Changelog

Sourced from nanoid's changelog.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates next from 14.2.3 to 14.2.21

Release notes

Sourced from next's releases.

v15.2.0

Core Changes

  • Fix unstable_allowDynamic when used with pnpm: #73732
  • [dynamicIO] use new heuristic to track whether server render is dynamic: #73751
  • Fix receiveExpiredTags not always called: #73759
  • error-overlay: Rename "Error" to "Issue": #72817
  • remove redundant segment collection call: #73773
  • Metadata resolvers can be fetched synchronously: #73771
  • Turbopack: migrate client references to single-graph-traversal: #73322
  • next-codemod: update gitignore file for parity for yarn recommendations: #71963
  • feat: error code: #73332
  • Detach next-error-code-swc-plugin from workspace: #73806
  • [CI] Prominent error message for check_error_codes: #73807
  • [Segment Cache] Add PPR header to segment prefetch: #73756
  • fix: path escaping issue on windows: #73843
  • Rename variables in LayoutRouter for clarity: #73826
  • [Segment Cache] Skip prefetched segments on server: #73626
  • [Segment Cache] No data on tree prefetch if no PPR: #73767
  • Remove segmentPath from RSC payload: #73827
  • build: better error if fetching AMP validator fails: #73851
  • Escape the '.' in '.json' when making static data routes.: #73850
  • fix(next@15): use the asset prefix when loading a CSS in App Router: #72095
  • Exclude .test. files from using error code plugin: #73868
  • Refactor telemetry API: #73865
  • Add additional error classes and error codes: #73862
  • refactor: collectAppPageSegments: #73908
  • cleanup unnecessary map in dev server: #73745
  • Retry manifest file loading only in dev mode: #73900
  • Turbopack: ignore empty NEXT_TURBOPACK_TRACING var: #73903
  • Ignore RSC fetch errors after hard navigation: #73975
  • Fix error code check in windows: #73981
  • Separate viewport and metadata in rsc and cache: #73867
  • Add feature flag for new dev overlay: #73977
  • Restore RSC fetch error handling after navigating back: #73985
  • refactor: make locales array immutable: #74037
  • fix: skip rendering dynamic root segment routes: #74039
  • refactor: cache lowercasing all the locales: #74038
  • Add SRI support for Node.js Runtime : #73891
  • Separate bots detection utils: #74000
  • docs: remove a duplicated word in redirect code comment: #74043
  • examples: update gitignore files for parity for yarn recommendations: #71956
  • chore: update turbopack document path in the warning message: #72597
  • Clean up react-dev-overlay before fork: #74016
  • chore(next/image): improve imgopt api bypass detection for unsupported images: #73909
  • [Segment Cache] Add CacheStatus.Empty: #73667
  • chore: move static paths utils into own folder: #73928
  • Delete unused GroupedStackFrames.tsx: #74028
  • [Segment Cache] Move cache key creation to client : #73853
  • feat: added partial shell generation using root params: #73816

... (truncated)

Commits
  • b0416fb v15.2.0
  • 166369d v15.2.0-canary.77
  • 2c57888 [dev-overlay]: allow disabled state to be dismissable (#76572)
  • c919f09 examples: fix supabase example for v15 (#76567)
  • 991c32a [dev-overlay] rephrase docs button title as link to related docs (#76571)
  • aaebca9 Updated remove-console example to utilize the app router. (#76543)
  • 8dd0b56 docs(errors): update suppressHydrationWarning section (#76521)
  • c505a4c exclude AppDevOverlayErrorBoundary from prod build (#76568)
  • 91684ee Remove rewrite query params from request URL when deployed to Vercel (#76548)
  • dbeeb02 [dev-overlay] change button to lowercase except leading letter (#76565)
  • Additional commits viewable in compare view

Updates pug from 3.0.2 to 3.0.3

Release notes

Sourced from pug's releases.

[email protected]

Bug Fixes

  • Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options (#3438)

[email protected]

Bug Fixes

  • Update pug-code-gen with the following fix: (#3438)

    Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options

Commits

Updates dompurify from 3.0.8 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

  • Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
  • Added a new feature to allow specific hook removal, thanks @​davecardwell
  • Added purify.js and purify.min.js to exports, thanks @​Aetherinox
  • Added better logic in case no window object is president, thanks @​yehuya
  • Updated some dependencies called out by dependabot
  • Updated license files etc to show the correct year

DOMPurify 3.2.3

DOMPurify 3.2.2

  • Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
  • Fixed several minor issues with the type definitions, thanks again @​reduckted
  • Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
  • Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
  • Added better support for Angular compiler, thanks @​jeroen1602
  • Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
  • Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
  • Bumped several dependencies to be more up to date

DOMPurify 3.1.6

  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
  • Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @​realansgar
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Fixed several minor typos in docs, comments and comment blocks, thanks @​Rotzbua
  • Updated several development dependencies

DOMPurify 3.1.5

  • Fixed a minor issue with the dist paths in bower.js, thanks @​HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @​kakao-bishop-cho

DOMPurify 3.1.4

  • Fixed an issue with the recently implemented isNaN checks, thanks @​tulach
  • Added several new popover attributes to allow-list, thanks @​Gigabyte5671
  • Fixed the tests and adjusted the test runner to cover all branches

... (truncated)

Commits
  • ec29e65 Merge pull request #1062 from cure53/main
  • 1c1b183 chore: Preparing 3.2.4 release
  • d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
  • 0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
  • 9ad7933 tests: DOMPurify custom window tests improvements
  • 72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
  • bc72d44 Fix tests
  • 363a89d fix: handle undefined Element in DOMPurify initialization
  • f41b45d Update LICENSE
  • b25bf26 Update README.md
  • Additional commits viewable in compare view

Updates express from 4.19.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates katex from 0.16.10 to 0.16.21

Release notes

Sourced from katex's releases.

v0.16.21

0.16.21 (2025-01-17)

Bug Fixes

  • escape \htmlData attribute name (

@dependabot
Bump the npm_and_yarn group across 3 directories with 25 updates
6baccdb 
Bumps the npm_and_yarn group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cookie](https://github.com/jshttp/cookie) | `0.5.0` | `0.7.2` |
| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.7` | `4.24.11` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `15.2.0` |

Bumps the npm_and_yarn group with 6 updates in the /docs directory:

| Package | From | To |
| --- | --- | --- |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `5.1.0` | `7.0.6` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `14.2.21` |
| [pug](https://github.com/pugjs/pug) | `3.0.2` | `3.0.3` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.2` |
| [ws](https://github.com/websockets/ws) | `8.16.0` | `8.18.1` |

Bumps the npm_and_yarn group with 12 updates in the /sweep_chat directory:

| Package | From | To |
| --- | --- | --- |
| [cookie](https://github.com/jshttp/cookie) | `0.5.0` | `0.7.2` |
| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.7` | `4.24.11` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `14.2.24` |
| [@octokit/endpoint](https://github.com/octokit/endpoint.js) | `10.1.1` | `10.1.3` |
| [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) | `11.3.0` | `11.4.3` |
| [@octokit/request](https://github.com/octokit/request.js) | `9.1.1` | `9.2.2` |
| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `8.2.1` | `8.55.0` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `8.2.1` | `8.55.0` |
| [axios](https://github.com/axios/axios) | `1.7.2` | `1.8.1` |



Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `next-auth` from 4.24.7 to 4.24.11
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.11)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

Updates `next` from 14.2.3 to 15.2.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.0)

Updates `cross-spawn` from 5.1.0 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

Updates `next` from 14.2.3 to 14.2.21
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.0)

Updates `pug` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/[email protected]@3.0.3)

Updates `dompurify` from 3.0.8 to 3.2.4
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.0.8...3.2.4)

Updates `express` from 4.19.2 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.19.2...4.21.2)

Updates `katex` from 0.16.10 to 0.16.21
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.10...v0.16.21)

Updates `mermaid` from 10.7.0 to 11.4.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/mermaid-js/mermaid/compare/[email protected])

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `send` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.18.0...0.19.0)

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `ws` from 8.16.0 to 8.18.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.16.0...8.18.1)

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `next-auth` from 4.24.7 to 4.24.11
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.11)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `nanoid` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.8)

Updates `next` from 14.2.3 to 14.2.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.0)

Updates `@octokit/endpoint` from 10.1.1 to 10.1.3
- [Release notes](https://github.com/octokit/endpoint.js/releases)
- [Commits](octokit/endpoint.js@v10.1.1...v10.1.3)

Updates `@octokit/plugin-paginate-rest` from 11.3.0 to 11.4.3
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v11.3.0...v11.4.3)

Updates `@octokit/request` from 9.1.1 to 9.2.2
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v9.1.1...v9.2.2)

Updates `@octokit/request-error` from 6.1.1 to 6.1.7
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v6.1.1...v6.1.7)

Updates `@sentry/browser` from 8.2.1 to 8.55.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.55.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.2.1...8.55.0)

Updates `@sentry/nextjs` from 8.2.1 to 8.55.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/8.55.0/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.2.1...8.55.0)

Updates `axios` from 1.7.2 to 1.8.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.2...v1.8.1)

Updates `rollup` from 3.29.4 to 3.29.5
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v3.29.4...v3.29.5)

Updates `webpack` from 5.91.0 to 5.98.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.91.0...v5.98.0)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next-auth
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: pug
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: dompurify
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mermaid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next-auth
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/endpoint"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/browser"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/nextjs"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 3, 2025
This was referenced Mar 3, 2025
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Mar 10, 2025

Superseded by #35.

@dependabot dependabot bot closed this Mar 10, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-6b631efaf8 branch March 10, 2025 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants