build(deps): bump the npm_and_yarn group across 3 directories with 9 updates#14
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the npm_and_yarn group across 3 directories with 9 updates#14dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…updates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [multer](https://github.com/expressjs/multer) | `1.4.5-lts.2` | `2.1.1` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.1.0` | `8.1.1` | | [express-xss-sanitizer](https://github.com/AhmedAdelFahim/express-xss-sanitizer) | `2.0.1` | `2.0.2` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `7.0.9` | `8.0.5` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.0` | `3.3.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `6.4.2` | Bumps the npm_and_yarn group with 4 updates in the /backend directory: [multer](https://github.com/expressjs/multer), [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit), [express-xss-sanitizer](https://github.com/AhmedAdelFahim/express-xss-sanitizer) and [nodemailer](https://github.com/nodemailer/nodemailer). Bumps the npm_and_yarn group with 2 updates in the /frontend directory: [dompurify](https://github.com/cure53/DOMPurify) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `multer` from 1.4.5-lts.2 to 2.1.1 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v1.4.5-lts.2...v2.1.1) Updates `express-rate-limit` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.1.0...v8.1.1) Updates `express-xss-sanitizer` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/AhmedAdelFahim/express-xss-sanitizer/releases) - [Commits](AhmedAdelFahim/express-xss-sanitizer@v2.0.1...v2.0.2) Updates `nodemailer` from 7.0.9 to 8.0.5 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v7.0.9...v8.0.5) Updates `dompurify` from 3.3.0 to 3.3.2 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.0...3.3.2) Updates `vite` from 5.4.21 to 6.4.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite) Updates `esbuild` from 0.21.5 to 0.25.12 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.21.5...v0.25.12) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `rollup` from 4.52.5 to 4.60.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.52.5...v4.60.1) Updates `multer` from 1.4.5-lts.2 to 2.1.1 - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v1.4.5-lts.2...v2.1.1) Updates `express-rate-limit` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.1.0...v8.1.1) Updates `express-xss-sanitizer` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/AhmedAdelFahim/express-xss-sanitizer/releases) - [Commits](AhmedAdelFahim/express-xss-sanitizer@v2.0.1...v2.0.2) Updates `nodemailer` from 7.0.9 to 8.0.5 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v7.0.9...v8.0.5) Updates `dompurify` from 3.3.0 to 3.3.2 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.0...3.3.2) Updates `vite` from 5.4.21 to 6.4.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite) --- updated-dependencies: - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express-rate-limit dependency-version: 8.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express-xss-sanitizer dependency-version: 2.0.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nodemailer dependency-version: 8.0.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 3.3.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.4.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.25.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.60.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: multer dependency-version: 2.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express-rate-limit dependency-version: 8.1.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express-xss-sanitizer dependency-version: 2.0.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nodemailer dependency-version: 8.0.5 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: dompurify dependency-version: 3.3.2 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.4.2 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 6 updates in the / directory:
1.4.5-lts.22.1.18.1.08.1.12.0.12.0.27.0.98.0.53.3.03.3.25.4.216.4.2Bumps the npm_and_yarn group with 4 updates in the /backend directory: multer, express-rate-limit, express-xss-sanitizer and nodemailer.
Bumps the npm_and_yarn group with 2 updates in the /frontend directory: dompurify and vite.
Updates
multerfrom 1.4.5-lts.2 to 2.1.1Release notes
Sourced from multer's releases.
... (truncated)
Changelog
Sourced from multer's changelog.
Commits
368c8a12.1.1 (#1380)7e66481🐛 fix recursion issue643571e✅ add explicit test for client able to send body without abrupt disconnecte86fa52fix error/abort handlingca37779chore(deps): bump actions/checkout from 4.1.1 to 6.0.2 (#1374)13088f4chore(deps): bump actions/upload-artifact from 4.5.0 to 7.0.0 (#1375)bc6a1d1chore(deps): bump github/codeql-action from 3.24.7 to 4.32.4 (#1376)c496e93chore(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 (#1377)fa173d3chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#1378)17d7f51chore: add node version to 25.x in CIMaintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for multer since your current version.
Updates
express-rate-limitfrom 8.1.0 to 8.1.1Commits
1c572188.1.182288b3fix: handle ipv4 mapped to ipv6 (GHSA-46wh-pxpv-q5gq)Maintainer changes
This version was pushed to npm by gamemaker1, a new releaser for express-rate-limit since your current version.
Attestation changes
This version has no provenance attestation, while the previous version (8.1.0) was attested. Review the package versions before updating.
Updates
express-xss-sanitizerfrom 2.0.1 to 2.0.2Release notes
Sourced from express-xss-sanitizer's releases.
Commits
0c1f75dMerge pull request #24 from AhmedAdelFahim/fix-bypass-allowedAttributes-allow...5623009fix allowedTags / allowedAttributes bypass leads to permissive sanitization (...Updates
nodemailerfrom 7.0.9 to 8.0.5Release notes
Sourced from nodemailer's releases.
... (truncated)
Changelog
Sourced from nodemailer's changelog.
... (truncated)
Commits
202cfb3chore(master): release 8.0.5 (#1809)b634abfdocs: add CLAUDE.md with project conventions and release process95876b1fix: decode SMTP server responses as UTF-8 at line boundary0a43876fix: sanitize CRLF in transport name option to prevent SMTP command injection...08e59e6chore: update dev dependencies2d31975chore(master): release 8.0.4 (#1806)2d7b971fix: sanitize envelope size to prevent SMTP command injection4e702e9chore(master): release 8.0.3 (#1804)c803d90fix: remove familySupportCache that broke DNS resolution testse8c8b92fix: fix cookie bugs, remove dead code, and improve hot-path efficiencyUpdates
dompurifyfrom 3.3.0 to 3.3.2Release notes
Sourced from dompurify's releases.
Commits
5e56114Getting 3.x branch ready for 3.3.2 release (#1208)e8c95f4fix: Fixed the broken package-lock.json9636037Update package-lock.json5cad4ceGetting 3.x branch ready for 3.3.2 releas (#1205)6fc446aMerge pull request #1175 from cure53/main3b3bf91Merge branch 'main' of github.com:cure53/DOMPurify9863f41chore: Preparing 3.3.1 releaseb4e0295chore: Preparing 3.3.0 release077746bbuild(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1170)4de68bbbuild(deps): bump actions/checkout from 5 to 6 (#1171)Updates
vitefrom 5.4.21 to 6.4.2Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
6b3fad0release: v6.4.2ca4da5dfix: avoid path traversal with optimize deps sourcemap handler (#22161)fe28e47fix: apply server.fs check to env transport (#22159) (#22163)5487f4frelease: v6.4.11114b5dfix(dev): trim trailing slash beforeserver.fs.denycheck (#20968) (#20969)f12697crelease: v6.4.0ca6455efeat: allow passing down resolved config to vite's createServer (#20932)0e173d8release: v6.3.7c59a222fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20940)3f337c5release: v6.3.6Updates
esbuildfrom 0.21.5 to 0.25.12Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
208f539publish 0.25.12 to npm5f03afdupdate release notes6b2ee78minify: remove css rules containing empty:is()f361debadd some additional known static methods07aa646automatically mark "RegExp.escape()" calls as pure9039c46simplify some call expression checks188944dadd some additional known static methodsd3c67f9fix #4310: addIteratorand other known globals4a51f0bfix: escape dev server breadcrumb hrefs properly (#4316)26b29edfix #4315:@mediadeduplication bug edge caseUpdates
picomatchfrom 2.3.1 to 2.3.2Release notes
Sourced from picomatch's releases.
Changelog
Sourced from picomatch's changelog.
... (truncated)
Commits
81cba8dPublish 2.3.2fc1f6b6Merge commit from forkeec17aeMerge commit from fork78f8ca4Merge pull request #156 from micromatch/backport-1443f4f10eMerge pull request #144 from Jason3S/jdent-object-propertiesUpdates
rollupfrom 4.52.5 to 4.60.1Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
ae871d74.60.151f8f60fix: skip dropping side-effects on namespaceReexportsByName cache hit (#6274)...ca55406chore(deps): pin dependency typescript to v5 (#6320)fe50d86chore(deps): pin dependencies (#6317)42785ffchore(deps): update minor/patch updates (#6319)65e82a9chore(deps): update msys2/setup-msys2 digest to cafece8 (#6318)c336205chore(deps): update openharmony-rs/setup-ohos-sdk action to v1 (#6321)b25d25efix(deps): update swc monorepo (major) (#6322)119abdbchore(deps): lock file maintenance (#6324)5598a66chore(deps): lock file maintenance (#6323)Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
multerfrom 1.4.5-lts.2 to 2.1.1Release notes
Sourced from multer's releases.