chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates #12
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rollup](https://github.com/rollup/rollup) | `2.79.1` | `2.79.2` | | [semver](https://github.com/npm/node-semver) | `6.3.1` | `7.7.1` | | [webpack](https://github.com/webpack/webpack) | `3.12.0` | `4.0.0` | | [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.24.4` | `7.27.0` | | [@babel/runtime-corejs2](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime-corejs2) | `7.24.0` | `7.27.0` | | [elliptic](https://github.com/indutny/elliptic) | `6.5.5` | `6.6.1` | | [tar](https://github.com/isaacs/node-tar) | `6.1.11` | `6.2.1` | Bumps the npm_and_yarn group with 1 update in the /scripts/integration-tests/fixtures/nextjs-10 directory: [next](https://github.com/vercel/next.js). Updates `rollup` from 2.79.1 to 2.79.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v2.79.1...v2.79.2) Updates `semver` from 6.3.1 to 7.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.1...v7.7.1) Updates `webpack` from 3.12.0 to 4.0.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v3.12.0...v4.0.0) Updates `@babel/helpers` from 7.24.4 to 7.27.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-helpers) Updates `@babel/runtime-corejs2` from 7.24.0 to 7.27.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-runtime-corejs2) Updates `cross-spawn` from 5.1.0 to 7.0.3 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@5.1.0...v7.0.3) Updates `elliptic` from 6.5.5 to 6.6.1 - [Commits](indutny/elliptic@v6.5.5...v6.6.1) Updates `tar` from 6.1.11 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v6.2.1) Updates `yargs-parser` from 7.0.0 to 20.2.9 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v7.0.0...yargs-parser-v20.2.9) Updates `next` from 10.2.3 to 15.2.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v10.2.3...v15.2.4) --- updated-dependencies: - dependency-name: rollup dependency-version: 2.79.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 7.7.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 4.0.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.27.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/runtime-corejs2" dependency-version: 7.27.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-version: 7.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-version: 6.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 6.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-version: 20.2.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.2.4 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This was referenced Apr 3, 2025
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-7bc168a454
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the / directory:
2.79.12.79.26.3.17.7.13.12.04.0.07.24.47.27.07.24.07.27.06.5.56.6.16.1.116.2.1Bumps the npm_and_yarn group with 1 update in the /scripts/integration-tests/fixtures/nextjs-10 directory: next.
Updates
rollupfrom 2.79.1 to 2.79.2Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
c9bd03d2.79.248aef33fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)Updates
semverfrom 6.3.1 to 7.7.1Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
30c438bchore: release 7.7.1 (#765)af761c0fix(inc): fully capture prerelease identifier (#764)2cfcbb5chore: release 7.7.0 (#750)d588e37fix(diff): fix prerelease to stable version diff logic (#755)753e02bchore: bump@npmcli/template-ossfrom 4.23.3 to 4.23.4 (#747)8a34bdefix: add identifier validation toinc()(#754)0864b3cfeat: add "release" inc type (#753)67e5478docs(readme): added missing period for consistency (#756)868d4bbdocs: clarify comment about obsolete prefixes (#749)145c554chore: bump@npmcli/eslint-configfrom 4.0.5 to 5.0.0Updates
webpackfrom 3.12.0 to 4.0.0Commits
213226e4.0.0fde0183Merge pull request #6081 from webpack/formating/prettierb6396e7update statsf32bd41fix linting5238159run prettier on existing code518d1e0replace js-beautify with prettier4c25bfb4.0.0-beta.3dd93716Merge pull request #6296 from shellscape/fix/hmr-before-node-stuff7a07901Merge pull request #6563 from webpack/performance/assign-depthc7eb895Merge pull request #6452 from webpack/update_acornUpdates
@babel/helpersfrom 7.24.4 to 7.27.0Release notes
Sourced from
@babel/helpers's releases.... (truncated)
Changelog
Sourced from
@babel/helpers's changelog.... (truncated)
Commits
5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.10d5952e8Fix processing of replacement pattern with named capture groups (#17173)64bca7bv7.26.94cf5c9e[babel 8] Use@babel/typesfor parser's return type (#17117)2d95140v7.26.70e6199bMake "object without properties" helpers ES6-compatible (#17086)cd24cc0chore: Update TS 5.7 (#17053)63d3038v7.26.0Updates
@babel/runtime-corejs2from 7.24.0 to 7.27.0Release notes
Sourced from
@babel/runtime-corejs2's releases.... (truncated)
Changelog
Sourced from
@babel/runtime-corejs2's changelog.... (truncated)
Commits
5c350eav7.27.0ca4865aFix: align behaviour to tscrewriteRelativeImportExtensions(#17118)e1ce99dv7.26.1064bca7bv7.26.92d95140v7.26.763d3038v7.26.0b07957ev7.25.9af91759fix: Accidentally publishing useless files (#16917)2533cfbv7.25.72f72b97v7.25.6Updates
cross-spawnfrom 5.1.0 to 7.0.3Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
7bc42bcchore(release): 7.0.3159e7e9fix: detect path key based on correct environment (#133)7501971chore(release): 7.0.26c5b4f0fix: fix worker threads in Node >=11.10.0 (#132)c76e7bbchore: change postrelease script to push to current branchcfcc6f2chore: change postrelease script to push to current brancheb565bechore: commit package-lockc86fe67chore: use https in some links5d0c852chore: standardize postrelease script (screpto)aa7f227chore(release): 7.0.1Updates
ellipticfrom 6.5.5 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.034c8534fix: signature verification due to leading zeros3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from forkUpdates
tarfrom 6.1.11 to 6.2.1Release notes
Sourced from tar's releases.
Changelog
Sourced from tar's changelog.
... (truncated)
Commits
bef7b1e6.2.1fe8cd57prevent extraction in excessively deep subfoldersfe7ebfdremove security.md5bc9d406.2.0fe1ef5echangelog 6.2e483220get rid of npm lint stuff689928aci that works outside of npm orgdb6f539file inference improvements for .tbr and .tgz336fa8frefactor: dry and other pr commentseeba222chore: lint fixesUpdates
yargs-parserfrom 7.0.0 to 20.2.9Release notes
Sourced from yargs-parser's releases.