Skip to content

Bump the npm_and_yarn group across 3 directories with 25 updates#35

Merged
tr4200812 merged 3 commits intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-6d5cca0971
May 14, 2025
Merged

Bump the npm_and_yarn group across 3 directories with 25 updates#35
tr4200812 merged 3 commits intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-6d5cca0971

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package From To
next-auth 4.24.7 4.24.11
braces 3.0.2 3.0.3
cross-spawn 7.0.3 7.0.6
micromatch 4.0.5 4.0.8
nanoid 3.3.7 3.3.9
next 14.2.3 15.2.1

Bumps the npm_and_yarn group with 6 updates in the /docs directory:

Package From To
cross-spawn 5.1.0 7.0.6
nanoid 3.3.7 3.3.9
next 14.2.3 14.2.21
pug 3.0.2 3.0.3
express 4.19.2 4.21.2
ws 8.16.0 8.18.1

Bumps the npm_and_yarn group with 10 updates in the /sweep_chat directory:

Package From To
next-auth 4.24.7 4.24.11
cross-spawn 7.0.3 7.0.6
micromatch 4.0.5 4.0.8
nanoid 3.3.7 3.3.9
next 14.2.3 14.2.24
@sentry/nextjs 8.2.1 9.5.0
@octokit/endpoint 10.1.1 10.1.3
@octokit/plugin-paginate-rest 11.3.0 11.4.3
@octokit/request 9.1.1 9.2.2
axios 1.7.2 1.8.2

Updates next-auth from 4.24.7 to 4.24.11

Release notes

Sourced from next-auth's releases.

[email protected]

What's Changed

Full Changelog: https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.10

[email protected]

What's Changed

New Contributors

Full Changelog: https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.9

Commits
  • 6bca388 chore(release): bump version [skip ci]
  • c46fd4f chore(deps): allow react v19 as peer deps (#12352)
  • 3dfe5d5 chore: Update docusaurus.config.js
  • 0447db0 chore(v4): add sent.dm sponsor (#12172)
  • 5a5859a docs: Update options.md
  • 5ad7fb4 docs: Update options.md
  • c7ea50d chore(release): bump version [skip ci]
  • 490a033 fix: support AUTH_SECRET for compat with npx auth secret
  • 1e6be72 fix: functions that return promises must be async (#12105)
  • ddab3cc chore(release): bump version [skip ci]
  • Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

Updates cookie from 0.5.0 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

  • Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.
Commits

Updates nanoid from 3.3.7 to 3.3.9

Release notes

Sourced from nanoid's releases.

3.3.9

  • Reduced npm package size.
Changelog

Sourced from nanoid's changelog.

3.3.9

  • Reduced npm package size.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates next from 14.2.3 to 15.2.1

Release notes

Sourced from next's releases.

v15.2.1

Core Changes

  • Unify Link and Form prefetching: #76184
  • Turbopack: Ensure server actions sourcemaps tests pass: #76157
  • [dev-overlay] control dark theme in one place: #76528
  • [dev-overlay] change css var for terminal: #76590
  • [dev-overlay] Discriminate stack frame settled typed: #76517
  • Remove obsolete sourcePackage references: #76550
  • refactor: remove unused variable in externals handling: #76599
  • fix: Add popular embedding libraries to serverExternalPackages: #76574
  • [Segment Cache] Implement hash-only navigations: #76179
  • Webpack: abstract away getting compilation spans: #76579
  • report compiler duration for webpack and improve numbers: #76665
  • [dev-overlay] fix dark theme missing close bracket: #76672
  • Remove revalidate property from incremental cache ctx for FETCH kind: #76500
  • [dev-overlay] fix: env name label style was out of sync with error type label: #76668
  • Turbopack: avoid celling source maps before minify: #76626
  • refactor(CI): Merge all four bundler test manifest scripts into one: #76652
  • [metadata] fix duplicate metadata for parallel routes: #76669
  • [Segment Cache] Omit from bundle if flag disabled: #76622
  • [Segment Cache] Support output: "export" mode: #75671
  • [Segment Cache] Refresh on same-page navigation: #76223
  • [metadata] re-enable streaming metadata with PPR: #76119
  • [Segment Cache] Search param fallback handling: #75990
  • [Segment Cache] Fix: canonicalURL omits origin: #76444
  • fix metadata basePath for manifest: #76681
  • Propagate expire time to cache-control header and prerender manifest: #76207
  • Show revalidate/expire columns in build output: #76343
  • Gate alternate bundler behind canary only: #76634
  • [dynamicIO] routes with dynamic segments should be able to be static in dev: #76691
  • [repo] upgrade ts 5.8.2: #76709
  • [metadata]: ensure metadata boundary is only rendered once on client nav: #76692
  • [metadata] clean up redudant options: #76712
  • Fix uniqueness detection for generateStaticParams: #76713
  • Upgrade React from 22e39ea7-20250225 to d55cc79b-20250228: #76680
  • [Turbopack] Compute module batches and use them for chunking: #76133
  • [Dev Tools] Improve keyboard interactions for menu & overlays: #76754
  • Keep server code out of browser chunks: #76660
  • Turbopack: inline minify into code generation and make it a plain function instead of a turbo tasks function: #76628
  • fix edge runtime asset fetch in pages api: #76750
  • Update use-cache-unknown-cache-kind.test.ts snapshot for alternate bundler: #76682

Example Changes

  • docs: fix reading params code blocks: #76705

Misc Changes

  • fix(rustdoc): Fix rustdoc warnings, block on rustdoc failures in CI: #76448

... (truncated)

Commits
  • 6338781 v15.2.1
  • 197b4bb v15.2.1-canary.6
  • f5e2dcc Update use-cache-unknown-cache-kind.test.ts snapshot for alternate bundler (#...
  • e45411e Fix flaky Bun test (#76763)
  • 0940320 chore(github): move top prs and feature requests to different Slack channel (...
  • 4369731 feat(CI): Revalidate vercel data cache on areweturboyet after uploading data ...
  • 58a22f7 Disable flaky Turbopack tests (#76760)
  • 6dc8579 fix edge runtime asset fetch in pages api (#76750)
  • ead6e95 Fix: missing close brace in demo code (#76549)
  • bd39335 toDisplayRedbox(): replace all occurrences of testDir (#76618)
  • Additional commits viewable in compare view

Updates cross-spawn from 5.1.0 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates nanoid from 3.3.7 to 3.3.9

Release notes

Sourced from nanoid's releases.

3.3.9

  • Reduced npm package size.
Changelog

Sourced from nanoid's changelog.

3.3.9

  • Reduced npm package size.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).
Commits

Updates next from 14.2.3 to 14.2.21

Release notes

Sourced from next's releases.

v15.2.1

Core Changes

  • Unify Link and Form prefetching: #76184
  • Turbopack: Ensure server actions sourcemaps tests pass: #76157
  • [dev-overlay] control dark theme in one place: #76528
  • [dev-overlay] change css var for terminal: #76590
  • [dev-overlay] Discriminate stack frame settled typed: #76517
  • Remove obsolete sourcePackage references: #76550
  • refactor: remove unused variable in externals handling: #76599
  • fix: Add popular embedding libraries to serverExternalPackages: #76574
  • [Segment Cache] Implement hash-only navigations: #76179
  • Webpack: abstract away getting compilation spans: #76579
  • report compiler duration for webpack and improve numbers: #76665
  • [dev-overlay] fix dark theme missing close bracket: #76672
  • Remove revalidate property from incremental cache ctx for FETCH kind: #76500
  • [dev-overlay] fix: env name label style was out of sync with error type label: #76668
  • Turbopack: avoid celling source maps before minify: #76626
  • refactor(CI): Merge all four bundler test manifest scripts into one: #76652
  • [metadata] fix duplicate metadata for parallel routes: #76669
  • [Segment Cache] Omit from bundle if flag disabled: #76622
  • [Segment Cache] Support output: "export" mode: #75671
  • [Segment Cache] Refresh on same-page navigation: #76223
  • [metadata] re-enable streaming metadata with PPR: #76119
  • [Segment Cache] Search param fallback handling: #75990
  • [Segment Cache] Fix: canonicalURL omits origin: #76444
  • fix metadata basePath for manifest: #76681
  • Propagate expire time to cache-control header and prerender manifest: #76207
  • Show revalidate/expire columns in build output: #76343
  • Gate alternate bundler behind canary only: #76634
  • [dynamicIO] routes with dynamic segments should be able to be static in dev: #76691
  • [repo] upgrade ts 5.8.2: #76709
  • [metadata]: ensure metadata boundary is only rendered once on client nav: #76692
  • [metadata] clean up redudant options: #76712
  • Fix uniqueness detection for generateStaticParams: #76713
  • Upgrade React from 22e39ea7-20250225 to d55cc79b-20250228: #76680
  • [Turbopack] Compute module batches and use them for chunking: #76133
  • [Dev Tools] Improve keyboard interactions for menu & overlays: #76754
  • Keep server code out of browser chunks: #76660
  • Turbopack: inline minify into code generation and make it a plain function instead of a turbo tasks function: #76628
  • fix edge runtime asset fetch in pages api: #76750
  • Update use-cache-unknown-cache-kind.test.ts snapshot for alternate bundler: #76682

Example Changes

  • docs: fix reading params code blocks: #76705

Misc Changes

  • fix(rustdoc): Fix rustdoc warnings, block on rustdoc failures in CI: #76448

... (truncated)

Commits
  • 6338781 v15.2.1
  • 197b4bb v15.2.1-canary.6
  • f5e2dcc Update use-cache-unknown-cache-kind.test.ts snapshot for alternate bundler (#...
  • e45411e Fix flaky Bun test (#76763)
  • 0940320 chore(github): move top prs and feature requests to different Slack channel (...
  • 4369731 feat(CI): Revalidate vercel data cache on areweturboyet after uploading data ...
  • 58a22f7 Disable flaky Turbopack tests (#76760)
  • 6dc8579 fix edge runtime asset fetch in pages api (#76750)
  • ead6e95 Fix: missing close brace in demo code (#76549)
  • bd39335 toDisplayRedbox(): replace all occurrences of testDir (#76618)
  • Additional commits viewable in compare view

Updates pug from 3.0.2 to 3.0.3

Release notes

Sourced from pug's releases.

[email protected]

Bug Fixes

  • Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options (#3438)

[email protected]

Bug Fixes

  • Update pug-code-gen with the following fix: (#3438)

    Validate templateName and globals are valid JavaScript identifiers to prevent possible remote code execution if un-trusted user input is passed to the compilation options

Commits

Updates dompurify from 3.0.8 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

  • Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
  • Added a new feature to allow specific hook removal, thanks @​davecardwell
  • Added purify.js and purify.min.js to exports, thanks @​Aetherinox
  • Added better logic in case no window object is president, thanks @​yehuya
  • Updated some dependencies called out by dependabot
  • Updated license files etc to show the correct year

DOMPurify 3.2.3

DOMPurify 3.2.2

  • Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
  • Fixed several minor issues with the type definitions, thanks again @​reduckted
  • Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
  • Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
  • Added better support for Angular compiler, thanks @​jeroen1602
  • Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
  • Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
  • Bumped several dependencies to be more up to date

DOMPurify 3.1.6

  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
  • Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @​realansgar
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Fixed several minor typos in docs, comments and comment blocks, thanks @​Rotzbua
  • Updated several development dependencies

DOMPurify 3.1.5

  • Fixed a minor issue with the dist paths in bower.js, thanks @​HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @​kakao-bishop-cho

DOMPurify 3.1.4

  • Fixed an issue with the recently implemented isNaN checks, thanks @​tulach
  • Added several new popover attributes to allow-list, thanks @​Gigabyte5671
  • Fixed the tests and adjusted the test runner to cover all branches

... (truncated)

Commits
  • ec29e65 Merge pull request #1062 from cure53/main
  • 1c1b183 chore: Preparing 3.2.4 release
  • d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
  • 0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
  • 9ad7933 tests: DOMPurify custom window tests improvements
  • 72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
  • bc72d44 Fix tests
  • 363a89d fix: handle undefined Element in DOMPurify initialization
  • f41b45d Update LICENSE
  • b25bf26 Update README.md
  • Additional commits viewable in compare view

Updates express from 4.19.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • Remove link renderization in html while redirecting
  • deps: [email protected]
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: [email protected]
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits
Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.


Updates katex from 0.16.10 to 0.16.21

Release notes

Sourced from katex's releases.

v0.16.21

0.16.21 (2025-01-17)

Bug Fixes

v0.16.20

0.16...

Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the npm_and_yarn group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.7` | `4.24.11` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.9` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `15.2.1` |

Bumps the npm_and_yarn group with 6 updates in the /docs directory:

| Package | From | To |
| --- | --- | --- |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `5.1.0` | `7.0.6` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.9` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `14.2.21` |
| [pug](https://github.com/pugjs/pug) | `3.0.2` | `3.0.3` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.2` |
| [ws](https://github.com/websockets/ws) | `8.16.0` | `8.18.1` |

Bumps the npm_and_yarn group with 10 updates in the /sweep_chat directory:

| Package | From | To |
| --- | --- | --- |
| [next-auth](https://github.com/nextauthjs/next-auth) | `4.24.7` | `4.24.11` |
| [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.9` |
| [next](https://github.com/vercel/next.js) | `14.2.3` | `14.2.24` |
| [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `8.2.1` | `9.5.0` |
| [@octokit/endpoint](https://github.com/octokit/endpoint.js) | `10.1.1` | `10.1.3` |
| [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) | `11.3.0` | `11.4.3` |
| [@octokit/request](https://github.com/octokit/request.js) | `9.1.1` | `9.2.2` |
| [axios](https://github.com/axios/axios) | `1.7.2` | `1.8.2` |



Updates `next-auth` from 4.24.7 to 4.24.11
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.11)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `nanoid` from 3.3.7 to 3.3.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.9)

Updates `next` from 14.2.3 to 15.2.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.1)

Updates `cross-spawn` from 5.1.0 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `nanoid` from 3.3.7 to 3.3.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.9)

Updates `next` from 14.2.3 to 14.2.21
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.1)

Updates `pug` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/[email protected]@3.0.3)

Updates `dompurify` from 3.0.8 to 3.2.4
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.0.8...3.2.4)

Updates `express` from 4.19.2 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.19.2...4.21.2)

Updates `katex` from 0.16.10 to 0.16.21
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.10...v0.16.21)

Updates `mermaid` from 10.7.0 to 11.4.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/mermaid-js/mermaid/compare/[email protected])

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `send` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.18.0...0.19.0)

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `ws` from 8.16.0 to 8.18.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.16.0...8.18.1)

Updates `next-auth` from 4.24.7 to 4.24.11
- [Release notes](https://github.com/nextauthjs/next-auth/releases)
- [Commits](https://github.com/nextauthjs/next-auth/compare/[email protected]@4.24.11)

Updates `cookie` from 0.5.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.5.0...v0.7.2)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `nanoid` from 3.3.7 to 3.3.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.7...3.3.9)

Updates `next` from 14.2.3 to 14.2.24
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.3...v15.2.1)

Updates `@sentry/nextjs` from 8.2.1 to 9.5.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.2.1...9.5.0)

Updates `@octokit/endpoint` from 10.1.1 to 10.1.3
- [Release notes](https://github.com/octokit/endpoint.js/releases)
- [Commits](octokit/endpoint.js@v10.1.1...v10.1.3)

Updates `@octokit/plugin-paginate-rest` from 11.3.0 to 11.4.3
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v11.3.0...v11.4.3)

Updates `@octokit/request` from 9.1.1 to 9.2.2
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v9.1.1...v9.2.2)

Updates `@octokit/request-error` from 6.1.1 to 6.1.7
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v6.1.1...v6.1.7)

Updates `@sentry/browser` from 8.2.1 to 9.5.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@8.2.1...9.5.0)

Updates `axios` from 1.7.2 to 1.8.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.2...v1.8.2)

Updates `rollup` from 3.29.4 to 4.34.9
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v3.29.4...v4.34.9)

Updates `webpack` from 5.91.0 to 5.98.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.91.0...v5.98.0)

---
updated-dependencies:
- dependency-name: next-auth
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: pug
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: dompurify
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mermaid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next-auth
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/nextjs"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/endpoint"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sentry/browser"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 10, 2025
Sarut Limpajeerawong| |github.tr4200812.github.com added 2 commits May 7, 2025 08:41
@tr4200812 tr4200812 merged commit 1a4c221 into main May 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants