build(deps): bump the npm_and_yarn group across 2 directories with 41 updates by dependabot[bot] · Pull Request #1 · lingnet/nodejs.dev

dependabot · 2024-07-15T20:52:35Z

Bumps the npm_and_yarn group with 13 updates in the / directory:

Package	From	To
gatsby	`2.0.91`	`4.25.7`
gatsby-plugin-sharp	`2.0.17`	`4.25.1`
gatsby-transformer-remark	`2.2.0`	`5.25.1`
chownr	`1.1.1`	`1.1.4`
decode-uri-component	`0.2.0`	`0.2.2`
es5-ext	`0.10.47`	`0.10.64`
follow-redirects	`1.6.1`	`1.15.6`
fsevents	`1.2.6`	`1.2.13`
handlebars	`4.1.0`	`4.7.8`
qs	`6.5.2`	`6.5.3`
simple-get	`2.8.1`	`2.8.2`
trim-off-newlines	`1.0.1`	`1.0.3`
ws	`5.2.2`	`5.2.4`

Bumps the npm_and_yarn group with 6 updates in the /.github/action/result-poster directory:

Package	From	To
braces	`2.3.2`	`3.0.3`
@semantic-release/github	`5.2.10`	`5.5.8`
chownr	`1.0.1`	`removed`
@semantic-release/npm	`5.1.4`	`5.3.5`
got	`6.7.1`	`removed`
semantic-release	`15.13.3`	`24.0.0`

Updates gatsby from 2.0.91 to 4.25.7

Release notes

Sourced from gatsby's releases.

v4.24

Welcome to [email protected] release (September 2022 #2)

Key highlights of this release:

Gatsby 5 Alpha

Updating File System Routes on data changes

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.23

Welcome to [email protected] release (September 2022 #1)

Key highlights of this release:

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.22

Welcome to [email protected] release (August 2022 #3)

Key highlights of this release:

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.21

Welcome to [email protected] release (August 2022 #2)

Key highlights of this release:

gatsby-plugin-mdx v4

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

... (truncated)

Commits

db5eb18 chore(release): Publish
fc22f4b fix(gatsby): don't serve codeframes for files outside of compilation (#38059)...
8889bfe chore(release): Publish
d3d5fd0 fix(gatsby-source-wordpress): prevent inconsistent schema customization (#377...
5bdef4a fix(gatsby): don't block event loop during inference (#37780) (#37801)
50e3f94 chore(release): Publish
3f8477d chore: Update get-unowned-packages script to use npm 9 syntax
dcf88ed fix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...
3be4a80 chore(release): Publish
98c4d27 feat(gatsby): add initial webhook body env var to bootstrap context (#37478) ...
Additional commits viewable in compare view

Updates gatsby-plugin-sharp from 2.0.17 to 4.25.1

Release notes

Sourced from gatsby-plugin-sharp's releases.

v4.24

Welcome to [email protected] release (September 2022 #2)

Key highlights of this release:

Gatsby 5 Alpha

Updating File System Routes on data changes

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.23

Welcome to [email protected] release (September 2022 #1)

Key highlights of this release:

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.22

Welcome to [email protected] release (August 2022 #3)

Key highlights of this release:

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.21

Welcome to [email protected] release (August 2022 #2)

Key highlights of this release:

gatsby-plugin-mdx v4

Open RFCs

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

... (truncated)

Changelog

Sourced from gatsby-plugin-sharp's changelog.

Changelog: gatsby-plugin-sharp

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.13.1 (2024-01-23)

Note: Version bump only for package gatsby-plugin-sharp

5.13.0 (2023-12-18)

🧾 Release notes

Chores

upgrade sharp to latest v0.32.6 #38374 (ca15ef3)

5.12.3 (2023-10-26)

Note: Version bump only for package gatsby-plugin-sharp

5.12.2 (2023-10-20)

Note: Version bump only for package gatsby-plugin-sharp

5.12.1 (2023-10-09)

Chores

upgrade sharp to latest v0.32.6 #38374 #38617 (f1a4107)

5.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

update dependency semver to ^7.5.3 #38296 (11e64e2)

5.11.0 (2023-06-15)

🧾 Release notes

Chores

update semver #38171 (208cdef)

5.10.0 (2023-05-16)

🧾 Release notes

... (truncated)

Commits

50e3f94 chore(release): Publish
dcf88ed fix(gatsby-plugin-sharp): don't serve static assets that are not result of cu...
5e72a5d chore(release): Publish
2dc715d chore: remove tracedSVG (#37093) (#37127)
9f4c0b9 chore(release): Publish
87f280a chore(release): Publish next
ea00e12 chore(release): Publish next
6815536 chore(release): Publish next
53a4e5a chore(changelogs): update changelogs (#36605)
ba43263 chore(release): Publish next pre-minor
Additional commits viewable in compare view

Updates gatsby-transformer-remark from 2.2.0 to 5.25.1

Release notes

Sourced from gatsby-transformer-remark's releases.

v5.13.0

Welcome to [email protected] release (December 2023 #1)

Key highlight of this release:

Custom Image and File CDN URL generators

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.12.0

Welcome to [email protected] release (August 2023 #1)

Key highlight of this release:

Adapters

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

v5.11.0

Welcome to [email protected] release (June 2023 #1)

Key highlights of this release:

RFC: Adapters

gatsby-source-wordpress: Support for multiple instances

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.10.0

Welcome to [email protected] release (May 2023 #1)

This release focused on bug fixes and perf improvements. Check out notable bugfixes and improvements.

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v5.9.0

Welcome to [email protected] release (April 2023 #1)

... (truncated)

Changelog

Sourced from gatsby-transformer-remark's changelog.

Changelog: gatsby-transformer-remark

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

6.13.1 (2024-01-23)

Note: Version bump only for package gatsby-transformer-remark

6.13.0 (2023-12-18)

🧾 Release notes

Note: Version bump only for package gatsby-transformer-remark

6.12.3 (2023-10-26)

Note: Version bump only for package gatsby-transformer-remark

6.12.2 (2023-10-20)

Note: Version bump only for package gatsby-transformer-remark

6.12.1 (2023-10-09)

Note: Version bump only for package gatsby-transformer-remark

6.12.0 (2023-08-24)

🧾 Release notes

Bug Fixes

update dependency sanitize-html to ^2.11.0 for gatsby-transformer-remark #38315 (87a3412)

6.11.0 (2023-06-15)

🧾 Release notes

Note: Version bump only for package gatsby-transformer-remark

6.10.0 (2023-05-16)

🧾 Release notes

Note: Version bump only for package gatsby-transformer-remark

6.9.0 (2023-04-18)

🧾 Release notes

... (truncated)

Commits

4dcca80 chore(release): Publish
59076c8 fix(gatsby-transformer-remark): Disallow JS frontmatter by default (#37244) (...
5e72a5d chore(release): Publish
9f4c0b9 chore(release): Publish
87f280a chore(release): Publish next
ea00e12 chore(release): Publish next
53a4e5a chore(changelogs): update changelogs (#36605)
ba43263 chore(release): Publish next pre-minor
3bc957b chore(changelogs): update changelogs (#36501)
232d3b6 chore(release): Publish next
Additional commits viewable in compare view

Updates @babel/traverse from 7.2.3 to 7.24.8

Release notes

Sourced from @babel/traverse's releases.

v7.24.8 (2024-07-11)

Thanks @H0onnn, @jkup and @SreeXD for your first pull requests!

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

Committers: 9

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jon Kuperman (@jkup)

Nagendran N (@SreeXD)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

@H0onnn

@liuxingbaoyu

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

... (truncated)

Commits

1f5af44 v7.24.8
c90bb0c [babel 8] Remove methods starting with _ in @babel/traverse (#16504)
e0368a8 Avoid checking Scope.globals multiple times (#16619)
683c654 Enable some lint rules (#16605)
cfe13c2 [babel 8] Update globals dependency (#16600)
c36fa6a Update typescript-eslint v8 (#16557)
12619ff improve getBindingIdentifiers.keys typing (#16570)
424fc90 Update to TypeScript 5.5 (#16536)
bf1e9a3 v7.24.7
4463aa5 fix: incorrect constantViolations with destructuring (#16522)
Additional commits viewable in compare view

Updates ansi-html from 0.0.7 to 0.0.9

Commits

See full diff in compare view

Updates chownr from 1.1.1 to 1.1.4

Commits

814f642 1.1.4
a0d7ae0 push to github before npm
1a3667a ignore stuff
147eac4 Full tests, handle errors properly in many cases
578fb9f update tap, fix rimraf version
5bbda8c feat: ignore ENOENT errors during chown
deaa058 1.1.3
190e311 Don't early-capture the fs.lchownSync method
df2826a push to git with 1 command, not 2
cf3b27b 1.1.2
Additional commits viewable in compare view

Updates cross-fetch from 2.2.2 to 3.1.8

Release notes

Sourced from cross-fetch's releases.

v3.1.8

What's Changed

Restored caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: lquixada/cross-fetch@v3.1.7...v3.1.8

v3.1.7

What's Changed

Updated node-fetch version to 2.6.12

Full Changelog: lquixada/cross-fetch@v3.1.6...v3.1.7

v3.1.6

What's Changed

Updated node-fetch version to 2.6.11

Added caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: lquixada/cross-fetch@v3.1.5...v3.1.6

v3.1.5

What's Changed

chore: updated node-fetch version to 2.6.7 by @dlafreniere in lquixada/cross-fetch#124

New Contributors

@dlafreniere made their first contribution in lquixada/cross-fetch#124

Full Changelog: lquixada/cross-fetch@v3.1.4...v3.1.5

v3.1.4

🐞 fixed typescript errors.

v3.1.3

🐞 fixed typescript compilation error causing #95, #101, #102.

v3.1.2

🐞 added missing Headers interface augmentation from lib.dom.iterable.d.ts (#97)

v3.1.1

🐞 fixed missing fetch api types from constructor signatures #96 (thanks @jstewmon)

v3.1.0

⚡️ improved TypeScript support with own fetch API type definitions (thanks @jstewmon) ⚡️ set fetch.ponyfill to true when custom ponyfill implementation is used. 💡 set the same fetch API test suite to run against node-fetch, whatwg-fetch and native fetch.

v3.0.6

⚡️ updated node-fetch to 2.6.1

... (truncated)

Changelog

Sourced from cross-fetch's changelog.

3.1.8 (2023-07-02)

Bug Fixes

restored caret on node-fetch version (6669927)

3.1.7 (2023-07-01)

3.1.6 (2023-05-14)

Features

allowed minor and patch update of node-fetch (#132) (425395b), closes #129

Bug Fixes

fixed ESTree.StaticBlock error (a66f21b)

Commits

0922089 chore(release): 3.1.8
6669927 fix: restored caret on node-fetch version
ff14bdd chore: improved release script
d625e0d chore: release workflow now uses .nvmrc
098ed1e chore: improved release workflow
cc2663b chore(release): 3.1.7
7c1fdde chore: updated node-fetch to 2.6.12
e298dbb chore: reordered if statement
81049e1 chore: removed github publish pipeline
a80be7c chore: removed console log from specs
Additional commits viewable in compare view

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

a0eea46 0.2.2
980e0bf Prevent overwriting previously decoded tokens
3c8a373 0.2.1
76abc93 Switch to GitHub workflows
746ca5d Fix issue where decode throws - fixes #6
486d7e2 Update license (#1)
a650457 Tidelift tasks
66e1c28 Meta tweaks
See full diff in compare view

Updates engine.io from 3.3.2 to 6.2.1

Release notes

Sourced from engine.io's releases.

6.2.1

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
Error: read ECONNRESET
    at TCP.onStreamRead (internal/stream_base_commons.js:209:20)
Emitted 'error' event on Socket instance at:
    at emitErrorNT (internal/streams/destroy.js:106:8)
    at emitErrorCloseNT (internal/streams/destroy.js:74:3)
    at processTicksAndRejections (internal/process/task_queues.js:80:21) {
  errno: -104,
  code: 'ECONNRESET',
  syscall: 'read'
}
Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

6.2.0

Features

add the "maxPayload" field in the handshake details (088dcb4)

So that clients in HTTP long-polling can decide how many packets they have to send to stay under the maxHttpBufferSize value.

This is a backward compatible change which should not mandate a new major revision of the protocol (we stay in v4), as we only add a field in the JSON-encoded handshake data:
0{"sid":"lv_VI97HAXpY6yYWAAAC","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":5000,"maxPayload":1000000}
Links

Diff: socketio/engine.io@6.1.3...6.2.0

Client release: 6.2.0

ws version: ~8.2.3

6.1.3

Bug Fixes

typings: allow CorsOptionsDelegate as cors options (#641) (a463d26)

uws: properly handle chunked content (#642) (3367440)

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.2.1 (2022-11-20)

⚠️ This release contains an important security fix ⚠️

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:
Error: read ECONNRESET
    at TCP.onStreamRead (internal/stream_base_commons.js:209:20)
Emitted 'error' event on Socket instance at:
    at emitErrorNT (internal/streams/destroy.js:106:8)
    at emitErrorCloseNT (internal/streams/destroy.js:74:3)
    at processTicksAndRejections (internal/process/task_queues.js:80:21) {
  errno: -104,
  code: 'ECONNRESET',
  syscall: 'read'
}
Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

3.6.0 (2022-06-06)

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469), closes socketio/socket.io-client-swift#1309

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

... (truncated)

Commits

24b847b chore(release): 6.2.1
425e833 fix: catch errors when destroying invalid upgrades (#658)
99adb00 chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...
d196f6a chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)
7c1270f chore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)
535a01d ci: add Node.js 18 in the test matrix
1b71a6f docs: remove "Vanilla JS" highlight from README (#656)
917d1d2 refactor: replace deprecated String.prototype.substr() (#646)
020801a chore: add changelog for version 3.6.0
ed1d6f9 test: make test script work on Windows (#643)
Additional commits viewable in compare view

Updates es5-ext from 0.10.47 to 0.10.64

Release notes

Sourced from es5-ext's releases.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

Comparison since last release

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

Comparison since last release

0.10.62 (2022-08-02)

Maintenance Improvements

Manifest improvements:

(#190) (b8dc53f)

(c51d552)

Comparison since last release

0.10.61 (2022-04-20)

Bug Fixes

Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Bump dependencies (d7e0a61)

Comparison since last release

0.10.60 (2022-04-07)

Maintenance Improvements

Improve postinstall script configuration (ab6b121)

... (truncated)

Changelog

Sourced from es5-ext's changelog.

0.10.64 (2024-02-27)

Bug Fixes

Revert update to postinstall script meant to fix Powershell issue, as it's a regression for some Linux terminals (c2e2bb9)

0.10.63 (2024-02-23)

Bug Fixes

Do not rely on problematic regex (3551cdd), addresses #201

Support ES2015+ function definitions in function#toStringTokens() (a52e957), addresses #021

Ensure postinstall script does not crash on Windows, fixes #181 (bf8ed79)

Maintenance Improvements

Simplify the manifest message (7855319)

0.10.62 (2022-08-02)

Maintenance Improvements

Manifest improvements:

(#190) (b8dc53f)

(c51d552)

0.10.61 (2022-04-20)

Bug Fixes

Ensure postinstall script does not error (a0be4fd)

Maintenance Improvements

Bump dependencies (d7e0a61)

0.10.60 (2022-04-07)

Maintenance Improvements

Improve postinstall script configuration (ab6b121)

0.10.59 (2022-03-17)

Maintenance Improvements

Improve manifest wording (#122) (eb7ae59)

Update data in manifest (3d2935a)

0.10.58 (2022-03-11)

... (truncated)

Commits

f76b03d chore: Release v0.10.64
2881acd chore: Bump dependencies
c2e2bb9 fix: Revert u...
Description has been truncated

… updates Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [gatsby](https://github.com/gatsbyjs/gatsby) | `2.0.91` | `4.25.7` | | [gatsby-plugin-sharp](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-sharp) | `2.0.17` | `4.25.1` | | [gatsby-transformer-remark](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-transformer-remark) | `2.2.0` | `5.25.1` | | [chownr](https://github.com/isaacs/chownr) | `1.1.1` | `1.1.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [es5-ext](https://github.com/medikoo/es5-ext) | `0.10.47` | `0.10.64` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.6.1` | `1.15.6` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.6` | `1.2.13` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.1.0` | `4.7.8` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [simple-get](https://github.com/feross/simple-get) | `2.8.1` | `2.8.2` | | [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) | `1.0.1` | `1.0.3` | | [ws](https://github.com/websockets/ws) | `5.2.2` | `5.2.4` | Bumps the npm_and_yarn group with 6 updates in the /.github/action/result-poster directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` | | [@semantic-release/github](https://github.com/semantic-release/github) | `5.2.10` | `5.5.8` | | [chownr](https://github.com/isaacs/chownr) | `1.0.1` | `removed` | | [@semantic-release/npm](https://github.com/semantic-release/npm) | `5.1.4` | `5.3.5` | | [got](https://github.com/sindresorhus/got) | `6.7.1` | `removed` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `15.13.3` | `24.0.0` | Updates `gatsby` from 2.0.91 to 4.25.7 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/compare/[email protected]@4.25.7) Updates `gatsby-plugin-sharp` from 2.0.17 to 4.25.1 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-plugin-sharp/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-plugin-sharp) Updates `gatsby-transformer-remark` from 2.2.0 to 5.25.1 - [Release notes](https://github.com/gatsbyjs/gatsby/releases) - [Changelog](https://github.com/gatsbyjs/gatsby/blob/master/packages/gatsby-transformer-remark/CHANGELOG.md) - [Commits](https://github.com/gatsbyjs/gatsby/commits/[email protected]/packages/gatsby-transformer-remark) Updates `@babel/traverse` from 7.2.3 to 7.24.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-traverse) Updates `ansi-html` from 0.0.7 to 0.0.9 - [Commits](https://github.com/Tjatse/ansi-html/commits) Updates `chownr` from 1.1.1 to 1.1.4 - [Commits](isaacs/chownr@v1.1.1...v1.1.4) Updates `cross-fetch` from 2.2.2 to 3.1.8 - [Release notes](https://github.com/lquixada/cross-fetch/releases) - [Changelog](https://github.com/lquixada/cross-fetch/blob/v3.1.8/CHANGELOG.md) - [Commits](lquixada/cross-fetch@v2.2.2...v3.1.8) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `engine.io` from 3.3.2 to 6.2.1 - [Release notes](https://github.com/socketio/engine.io/releases) - [Changelog](https://github.com/socketio/engine.io/blob/6.2.1/CHANGELOG.md) - [Commits](socketio/engine.io@3.3.2...6.2.1) Updates `es5-ext` from 0.10.47 to 0.10.64 - [Release notes](https://github.com/medikoo/es5-ext/releases) - [Changelog](https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md) - [Commits](medikoo/es5-ext@v0.10.47...v0.10.64) Updates `express` from 4.16.4 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.4...4.19.2) Updates `flat` from 4.1.0 to 5.0.2 - [Release notes](https://github.com/hughsk/flat/releases) - [Commits](hughsk/flat@4.1.0...5.0.2) Updates `follow-redirects` from 1.6.1 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.6.1...v1.15.6) Updates `fsevents` from 1.2.6 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.6...v1.2.13) Updates `handlebars` from 4.1.0 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.0...v4.7.8) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `loader-utils` from 1.2.3 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.4) Updates `mem` from 1.1.0 to 4.0.0 - [Release notes](https://github.com/sindresorhus/mem/releases) - [Commits](sindresorhus/memoize@v1.1.0...v4.0.0) Updates `node-fetch` from 1.7.3 to 2.7.0 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@1.7.3...v2.7.0) Updates `postcss` from 6.0.23 to 7.0.39 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/7.0.39/CHANGELOG.md) - [Commits](postcss/postcss@6.0.23...7.0.39) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `sanitize-html` from 1.20.0 to 1.27.5 - [Changelog](https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md) - [Commits](https://github.com/apostrophecms/sanitize-html/commits) Updates `simple-get` from 2.8.1 to 2.8.2 - [Commits](feross/simple-get@v2.8.1...v2.8.2) Updates `socket.io` from 2.2.0 to 4.5.4 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/4.5.4/CHANGELOG.md) - [Commits](socketio/socket.io@2.2.0...4.5.4) Updates `trim-off-newlines` from 1.0.1 to 1.0.3 - [Commits](stevemao/trim-off-newlines@v1.0.1...v1.0.3) Updates `ua-parser-js` from 0.7.19 to 1.0.38 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@0.7.19...1.0.38) Updates `webpack-dev-middleware` from 3.4.0 to 4.3.0 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.4.0...v4.3.0) Updates `ws` from 5.2.2 to 5.2.4 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@5.2.2...5.2.4) Updates `y18n` from 3.2.1 to 4.0.0 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...v4.0.0) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `@semantic-release/github` from 5.2.10 to 5.5.8 - [Release notes](https://github.com/semantic-release/github/releases) - [Commits](semantic-release/github@v5.2.10...v5.5.8) Removes `chownr` Updates `@semantic-release/npm` from 5.1.4 to 5.3.5 - [Release notes](https://github.com/semantic-release/npm/releases) - [Commits](semantic-release/npm@v5.1.4...v5.3.5) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Removes `got` Updates `semantic-release` from 15.13.3 to 24.0.0 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v15.13.3...v24.0.0) Updates `handlebars` from 4.0.12 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.0...v4.7.8) Updates `http-cache-semantics` from 3.8.1 to 4.1.1 - [Commits](kornelski/http-cache-semantics@v3.8.1...v4.1.1) Updates `qs` from 6.5.2 to 6.6.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `semver` from 5.3.0 to 5.6.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v5.6.0) Updates `ssri` from 5.3.0 to 10.0.6 - [Release notes](https://github.com/npm/ssri/releases) - [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md) - [Commits](npm/ssri@v5.3.0...v10.0.6) Updates `tar` from 2.2.1 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v2.2.1...v6.2.1) Updates `y18n` from 3.2.1 to 5.0.8 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...v4.0.0) Updates `bin-links` from 1.1.2 to 4.0.4 - [Release notes](https://github.com/npm/bin-links/releases) - [Changelog](https://github.com/npm/bin-links/blob/main/CHANGELOG.md) - [Commits](npm/bin-links@v1.1.2...v4.0.4) Updates `npm-registry-fetch` from 1.1.0 to 17.1.0 - [Release notes](https://github.com/npm/npm-registry-fetch/releases) - [Changelog](https://github.com/npm/npm-registry-fetch/blob/main/CHANGELOG.md) - [Commits](npm/npm-registry-fetch@v1.1.0...v17.1.0) Updates `npm-user-validate` from 1.0.0 to 2.0.1 - [Release notes](https://github.com/npm/npm-user-validate/releases) - [Changelog](https://github.com/npm/npm-user-validate/blob/main/CHANGELOG.md) - [Commits](npm/npm-user-validate@v1.0.0...v2.0.1) --- updated-dependencies: - dependency-name: gatsby dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: gatsby-plugin-sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: gatsby-transformer-remark dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-html dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: engine.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: es5-ext dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flat dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mem dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sanitize-html dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: simple-get dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: trim-off-newlines dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@semantic-release/github" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chownr dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@semantic-release/npm" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semantic-release dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ssri dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: bin-links dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm-registry-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: npm-user-validate dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-04-13T02:18:19Z

This pull request is stale because it has been open for 30 days with no activity.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 15, 2024

github-actions Bot added the stale label Apr 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 2 directories with 41 updates#1

build(deps): bump the npm_and_yarn group across 2 directories with 41 updates#1
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-26c2ecd2dd

dependabot Bot commented on behalf of github Jul 15, 2024

Uh oh!

github-actions Bot commented Apr 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 15, 2024

v4.24

v4.23

v4.22

v4.21

v4.24

v4.23

v4.22

v4.21

Changelog: gatsby-plugin-sharp

5.13.1 (2024-01-23)

5.13.0 (2023-12-18)

Chores

5.12.3 (2023-10-26)

5.12.2 (2023-10-20)

5.12.1 (2023-10-09)

Chores

5.12.0 (2023-08-24)

Bug Fixes

5.11.0 (2023-06-15)

Chores

5.10.0 (2023-05-16)

v5.13.0

v5.12.0

v5.11.0

v5.10.0

v5.9.0

Changelog: gatsby-transformer-remark

6.13.1 (2024-01-23)

6.13.0 (2023-12-18)

6.12.3 (2023-10-26)

6.12.2 (2023-10-20)

6.12.1 (2023-10-09)

6.12.0 (2023-08-24)

Bug Fixes

6.11.0 (2023-06-15)

6.10.0 (2023-05-16)

6.9.0 (2023-04-18)

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.6 (2024-05-24)

🐛 Bug Fix

v3.1.8

What's Changed

v3.1.7

What's Changed

v3.1.6

What's Changed

v3.1.5

What's Changed

New Contributors

v3.1.4

v3.1.3

v3.1.2

v3.1.1

v3.1.0

v3.0.6

3.1.8 (2023-07-02)

Bug Fixes

3.1.7 (2023-07-01)

3.1.6 (2023-05-14)

Features

Bug Fixes

v0.2.2

v0.2.1

6.2.1

Changelog: `gatsby-plugin-sharp`

Changelog: `gatsby-transformer-remark`