Bump minimist, npm, mkdirp, handlebars, @compodoc/compodoc, karma, protractor, surge and extract-zip

[dependabot]

Bumps minimist to 1.2.8 and updates ancestor dependencies minimist, npm, mkdirp, handlebars, @compodoc/compodoc, karma, protractor, surge and extract-zip. These dependencies need to be updated together.

Updates minimist from 1.2.0 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

• [Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)
• [Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)
• [Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

• [Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)
• [Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)
• [Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)
• [Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)
• [Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)
• [Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)
• [Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

• Merge tag 'v0.2.3' a026794
• [eslint] fix indentation and whitespace 5368ca4
• [eslint] fix indentation and whitespace e5f5067
• [eslint] more cleanup 62fde7d
• [eslint] more cleanup 36ac5d0
• [meta] add auto-changelog 73923d2
• [actions] add reusable workflows d80727d
• [eslint] add eslint; rules to enable later are warnings 48bc06a
• [eslint] fix indentation 34b0f1c
• [readme] rename and add badges 5df0fe4
• [Dev Deps] switch from covert to nyc a48b128
• [Dev Deps] update covert, tape; remove unnecessary tap f0fb958
• [meta] create FUNDING.yml; add funding in package.json 3639e0c
• [meta] use npmignore to autogenerate an npmignore file be2e038
• Only apps should have lockfiles 282b570
• isConstructorOrProto adapted from PR ef9153f
• [Dev Deps] update @ljharb/eslint-config, aud 098873c
• [Dev Deps] update @ljharb/eslint-config, aud 3124ed3
• [meta] add safe-publish-latest 4b927de
• [Tests] add aud in posttest b32d9bd
• [meta] update repo URLs f9fdfc0
• [actions] Avoid 0.6 tests due to build failures ba92fe6
• [Dev Deps] update tape 950eaa7
• [Dev Deps] add missing npmignore dev dep 3226afa
• Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

• 6901ee2 v1.2.8
• a026794 Merge tag 'v0.2.3'
• c0b2661 v0.2.3
• 63b8fee [Fix] Fix long option followed by single dash (#17)
• 72239e6 [Tests] Remove duplicate test (#12)
• 34b0f1c [eslint] fix indentation
• 3226afa [Dev Deps] add missing npmignore dev dep
• 098873c [Dev Deps] update @ljharb/eslint-config, aud
• 9ec4d27 [Fix] Fix long option followed by single dash
• ba92fe6 [actions] Avoid 0.6 tests due to build failures
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates npm from 6.4.1 to 6.14.18

Changelog

Sourced from npm's changelog.

6.14.18 (2022-12-21)

DEPENDENCIES

• f55bd65da rimraf@2.7.1
• cd4894696 bluebird@3.7.2
• 023d7e96b cacache@12.0.4
• dd2811c0b config-chain@1.1.1:3
• e21b6ebd9 deep-equal@1.1.1
• 2bec581c6 dezalgo@1.0.4
• 273485157 figgy-pudding@3.5.2
• 720f8ae5e glob@7.2.3
• 5f1200e33 graceful-fs@4.2.1:0
• 58b74a38b is-cidr@3.1.1
• 4b609655f jsdom@16.7.0
• 14c7a1a85 meant@1.0.3
• 06d9cefc4 minimatch@3.1.2
• 1d2da355c mkdirp@0.5.6
• 22eda3a26 node-gyp@5.1.1
• b77a7f1b0 npm-registry-mock@1.3.2
• de37398af query-string@6.14.1
• 196650baa qw@1.0.2
• 3218c16b5 read-package-json@2.1.2
• 0f5d57919 request@2.88.2
• 43ed5c23b safe-buffer@5.2.1
• 31b51c564 tar-stream@2.2.0
• 209a79d1f uuid@3.4.0

... (truncated)

Commits

• 1314dc0 6.14.18
• 04cb2c7 update AUTHORS
• 771245f docs: changelog for v6.14.18
• ade941c chore: remove gh legacy url test
• 0a5f8d9 chore: remove verify no scoped test
• d3e7eed lock-verify@2.2.2
• 8b357e5 decode-uri-component@0.2.2
• db32f16 chore: minimatch is not a dep
• f521320 chore: cleanup lockfile
• 0437207 chore: should only lint source
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for npm since your current version.

Updates mkdirp from 0.5.1 to 0.5.6

Commits

• 92f086d 0.5.6
• 2a28125 clean up tests
• c905d65 update minimist
• 049cf18 0.5.5
• bea6382 Remove unnecessary umask calls
• 42a012c 0.5.4
• 2867920 fix infinite loop on windows machines
• d784e70 0.5.3
• d612c5d add files list so this package isn't a monster
• b2e7ba0 0.5.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for mkdirp since your current version.

Updates handlebars from 4.0.12 to 4.7.7

Changelog

Sourced from handlebars's changelog.

v4.7.7 - February 15th, 2021

• fix weird error in integration tests - eb860c0
• fix: check prototype property access in strict-mode (#1736) - b6d3de7
• fix: escape property names in compat mode (#1736) - f058970
• refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8
• chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

• the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

v4.7.6 - April 3rd, 2020

Chore/Housekeeping:

• #1672 - Switch cmd parser to latest minimist (@​dougwilson

Compatibility notes:

• Restored Node.js compatibility

Commits

v4.7.5 - April 2nd, 2020

Chore/Housekeeping:

• Node.js version support has been changed to v6+ Reverted in 4.7.6

Compatibility notes:

• Node.js < v6 is no longer supported Reverted in 4.7.6

Commits

v4.7.4 - April 1st, 2020

Chore/Housekeeping:

• #1666 - Replaced minimist with yargs for handlebars CLI (@​aorinevo, @​AviVahl & @​fabb)

Compatibility notes:

... (truncated)

Commits

• a9a8e40 v4.7.7
• e66aed5 Update release notes
• 7d4d170 disable IE in Saucelabs tests
• eb860c0 fix weird error in integration tests
• b6d3de7 fix: check prototype property access in strict-mode (#1736)
• f058970 fix: escape property names in compat mode (#1736)
• 77825f8 refator: In spec tests, use expectTemplate over equals and shouldThrow (#1683)
• 3789a30 chore: start testing on Node.js 12 and 13
• e6ad93e v4.7.6
• 2bf4fc6 Update release notes
• Additional commits viewable in compare view

Updates @compodoc/compodoc from 1.1.5 to 1.1.19

Release notes

Sourced from @​compodoc/compodoc's releases.

1.1.19

Merged

• feat: fully parse set accessor type #1194, thanks @​Killusions

Bug fixes

• fix(menu): custom-logo links are broken for doc deployments with a path (bd28dd0), closes #1203
• feat(app): display project properties from package.json file (b091e19), closes #1198
• fix(app): Nestjs controllers class inheritance (06dad8c), closes #1140
• fix(app): Directive class inheritance (765f496), closes #1140
• feat(app): JSDoc tag @internal correct support (18da1fe), closes #1101
• fix(app): @example correct support (9a1a7e1), closes #1099
• fix(app): double layer spread support for modules (e25a4ee), closes #979

1.1.18

Fix for colors dependency.

1.1.17

Features

• feat(app): Nest entity support (2dfe88a), closes #1131
• feat(app): ng-add schematics (7a414d4), closes #1155

Merged

• fix(app): Fix enum member types parsing #1159
• fix(app): Fix reading class decorators #1158

Bug fixes

• fix(UI): Dark mode toggle doesn't persist when switching pages (1013cda), closes #1167
• fix(app): custom-logo links are broken for child content (db47436), closes #1147
• fix(app): support for backtick in Routing lazy-loading syntax (cff2ca5), closes #1164
• fix(app): wrong additional folder provided, exit with code 0 (15fd3de), closes #1146
• fix(app): link in description to class (2b6af73), closes #1157

1.1.16

Features

• feat(app): dark mode toggle button (97d2763), closes #1127

Merged

• fix: Routing aliases #1148, Thanks @​Bengejd
• feat(i18n): Traditional Chinese language #1151, Thanks @​doggy8088
• fix(link-parser): avoid crashing with invalid links #1136, Thanks @​sandrafreihofer
• feat: add decorators to class inputs #1135, Thanks @​sandrafreihofer
• fix(app): change layout in modules template #1132, Thanks @​ddubrava

... (truncated)

Changelog

Sourced from @​compodoc/compodoc's changelog.

1.1.19 (2022-01-10)

Merged

• feat: fully parse set accessor type #1194, thanks Killusions

Bug fixes

• fix(menu): custom-logo links are broken for doc deployments with a path (bd28dd0), closes #1203
• feat(app): display project properties from package.json file (b091e19), closes #1198
• fix(app): Nestjs controllers class inheritance (06dad8c), closes #1140
• fix(app): Directive class inheritance (765f496), closes #1140
• feat(app): JSDoc tag @​internal correct support (18da1fe), closes #1101
• fix(app): @​example correct support (9a1a7e1), closes #1099
• fix(app): double layer spread support for modules (e25a4ee), closes #979

1.1.18 (2022-01-10)

Fix for colors dependency.

1.1.17 (2022-01-09)

Features

• feat(app): Nest @​entity support (2dfe88a), closes #1131
• feat(app): ng-add schematics (7a414d4), closes #1155

Merged

• fix(app): Fix enum member types parsing #1159
• fix(app): Fix reading class decorators #1158

Bug fixes

• fix(UI): Dark mode toggle doesn't persist when switching pages (1013cda), closes #1167
• fix(app): custom-logo links are broken for child content (db47436), closes #1147
• fix(app): support for backtick in Routing lazy-loading syntax (cff2ca5), closes #1164
• fix(app): wrong additional folder provided, exit with code 0 (15fd3de), closes #1146
• fix(app): link in description to class (2b6af73), closes #1157

1.1.16 (2021-11-23)

Features

... (truncated)

Commits

• d199d31 1.1.19
• ac371a9 1.1.19
• 145fc47 feat(app): bump dev/dependencies
• 9878c66 Merge pull request #1223 from compodoc/renovate/all
• a80e9eb chore(deps): update dependency @​rollup/plugin-typescript to v8.3.1
• 2ba93a2 Merge pull request #1220 from compodoc/renovate/all
• 384cf47 chore(deps): update all dependencies to v7.16.16
• 7a48566 Merge pull request #1219 from compodoc/renovate/all
• 87fbee4 chore(deps): update dependency rollup to v2.68.0
• 548314d Merge pull request #1217 from compodoc/renovate/all
• Additional commits viewable in compare view

Updates karma from 1.7.1 to 6.4.1

Release notes

Sourced from karma's releases.

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

• pass integrity value (63d86be)

v6.4.0

6.4.0 (2022-06-14)

Features

• support SRI verification of link tags (dc51a2e)
• support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

• prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

• client: error out when opening a new tab fails (099b85e)

v6.3.18

6.3.18 (2022-04-13)

Bug Fixes

• deps: upgrade socket.io to v4.4.1 (52a30bb)

v6.3.17

6.3.17 (2022-02-28)

Bug Fixes

• deps: update colors to maintained version (#3763) (fca1884)

v6.3.16

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.1 (2022-09-19)

Bug Fixes

• pass integrity value (63d86be)

6.4.0 (2022-06-14)

Features

• support SRI verification of link tags (dc51a2e)
• support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

• prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

• client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

• deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

• deps: update colors to maintained version (#3763) (fca1884)

6.3.16 (2022-02-10)

Bug Fixes

• security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

... (truncated)

Commits

• 0013121 chore(release): 6.4.1 [skip ci]
• 63d86be fix: pass integrity value
• 84f7cc3 chore(release): 6.4.0 [skip ci]
• f2d0663 docs: add integrity parameter
• dc51a2e feat: support SRI verification of link tags
• 6a54b1c feat: support SRI verification of script tags
• 5e71cf5 chore(release): 6.3.20 [skip ci]
• e17698f fix: prefer IPv4 addresses when resolving domains
• 60f4f79 build: add Node 16 and 18 to the CI matrix
• 6ff5aaf chore(release): 6.3.19 [skip ci]
• Additional commits viewable in compare view

Updates protractor from 5.3.2 to 5.4.4

Release notes

Sourced from protractor's releases.

5.4.3

typescript 3.7 compatibility

Resolves #5348 which was causing incompatibility with TypeScript 3.7

Changelog

Sourced from protractor's changelog.

5.4.4

Fixes

• fix: security prototype pollution

5.4.3

Fixes

fix(index.ts): Fix exports to unbreak TypeScript 3.7 build

5.4.2

Features

• (db1b638) feat(saucelabs): add sauceRegion support for eu datacenters (#5083)

  This change allows user to define the backend region from sauce via the sauceRegion property, e.g.

     sauceUser: process.env.SAUCE_USERNAME,
     sauceKey: process.env.SAUCE_ACCESS_KEY,
     sauceRegion: 'eu',

  Will run the test against https://ondemand.eu-central-1.saucelabs.com:443/wd/hub/.

     sauceUser: process.env.SAUCE_USERNAME,
     sauceKey: process.env.SAUCE_ACCESS_KEY,
     sauceRegion: 'us',
  // the default
  sauceUser: process.env.SAUCE_USERNAME,
  sauceKey: process.env.SAUCE_ACCESS_KEY,

  Will run the test against https://ondemand.saucelabs.com:443/wd/hub/

Fixes

• (f5dbe13) fix(deps): @​types/node is now a dev dependency

5.4.1

Features

• (7b08083)

... (truncated)

Commits

• a0ffa9b release: 5.4.4
• 8b3ebf8 fix: security prototype pollution
• 162f9e5 ci: Log sauce connect proxy to stdout, remove travis_wait, upgrade proxy to 4...
• eb1d0fc docs(release): Update release docs for 5.4 series.
• 6c46098 chore(release): Update changelog
• faf0895 fix(ci): Don't update webdriver in pretest
• d77731c fix(release): Pin CircleCI to Chrome v74
• efe7fdd chore(dependencies): Update natives, so we can continue to run Gulp on
• 0442e51 chore(release): Bugfix release 5.4.3
• 7999a08 fix(index.ts): Fix exports to unbreak TypeScript 3.7 build
• Additional commits viewable in compare view

Updates surge from 0.20.1 to 0.23.1

Commits

• 32eaaa2 pins colors to v1.4.0
• 878d9ca fixes conflict
• 6d62288 verison bump 0.23.0. fixes dependencies
• 16b5dc6 version bump 0.22.0
• 4007cda updates mocha
• 71a3336 version bump v0.21.7. remove prompt. replace with add colors.
• c8b820d version bump in lock file
• ebccb8a version bump v0.21.6. more security patches
• 03ff37a updates package lock. bump v0.21.5
• a2f03eb bump v0.21.4. upgrades minimist 1.2.3
• Additional commits viewable in compare view

Updates extract-zip from 1.6.7 to 1.7.0

Release notes

Sourced from extract-zip's releases.

1.7.0

Added

• Error handler for zipfile object (#67)

Changed

• Don't pin dependency requirements to specific versions (#88)

1.6.8

Dependencies

• Update mkdirp to 0.5.4.

Commits

• c2b1c17 1.7.0
• 990fc64 Add error handler to zipfile object (#67)
• 8285111 feat: don't pin dependency requirements (#88)
• 2a8df24 1.6.8
• 30ab06c build(deps): upgrade mkdirp to 0.5.4 for security
• 2b2a84e build: ignore lock files
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.