forked from dappuniversity/decentragram
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the npm_and_yarn group across 2 directories with 21 updates #6
Open
dependabot
wants to merge
1
commit into
master
Choose a base branch
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-9632b5d793
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Bump the npm_and_yarn group across 2 directories with 21 updates #6
dependabot
wants to merge
1
commit into
master
from
dependabot/npm_and_yarn/npm_and_yarn-security-group-9632b5d793
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@openzeppelin/contracts](https://github.com/OpenZeppelin/openzeppelin-contracts) | `3.4.1` | `4.9.6` | | [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` | | [@nomiclabs/hardhat-waffle](https://github.com/NomicFoundation/hardhat-waffle) | `2.0.1` | `2.0.6` | | [ethereum-waffle](https://github.com/EthWorks/Waffle) | `3.4.0` | `4.0.10` | | [flat](https://github.com/hughsk/flat) | `4.1.1` | `5.0.2` | | [hardhat](https://github.com/nomiclabs/hardhat) | `2.4.1` | `2.22.2` | | [mocha](https://github.com/mochajs/mocha) | `7.2.0` | `10.4.0` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.1` | `1.15.6` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | Bumps the npm_and_yarn group with 11 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.1` | `1.15.6` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.2.1` | `4.2.3` | | [express](https://github.com/expressjs/express) | `4.17.1` | `4.19.2` | | [got](https://github.com/sindresorhus/got) | `9.6.0` | `12.6.1` | | [ipfs](https://github.com/ipfs/js-ipfs) | `0.55.4` | `0.66.1` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `3.7.3` | `5.3.4` | | [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts) | `3.4.4` | `5.0.1` | Updates `@openzeppelin/contracts` from 3.4.1 to 4.9.6 - [Release notes](https://github.com/OpenZeppelin/openzeppelin-contracts/releases) - [Changelog](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CHANGELOG.md) - [Commits](OpenZeppelin/openzeppelin-contracts@v3.4.1...v4.9.6) Updates `async` from 2.6.3 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.3...v2.6.4) Updates `@nomiclabs/hardhat-waffle` from 2.0.1 to 2.0.6 - [Release notes](https://github.com/NomicFoundation/hardhat-waffle/releases) - [Changelog](https://github.com/NomicFoundation/hardhat-waffle/blob/main/CHANGELOG.md) - [Commits](https://github.com/NomicFoundation/hardhat-waffle/commits) Updates `ethereum-waffle` from 3.4.0 to 4.0.10 - [Release notes](https://github.com/EthWorks/Waffle/releases) - [Commits](https://github.com/EthWorks/Waffle/compare/[email protected]@4.0.10) Updates `flat` from 4.1.1 to 5.0.2 - [Release notes](https://github.com/hughsk/flat/releases) - [Commits](hughsk/flat@4.1.1...5.0.2) Updates `hardhat` from 2.4.1 to 2.22.2 - [Release notes](https://github.com/nomiclabs/hardhat/releases) - [Commits](https://github.com/nomiclabs/hardhat/compare/[email protected]) Updates `mocha` from 7.2.0 to 10.4.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v7.2.0...v10.4.0) Updates `follow-redirects` from 1.14.1 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.1...v1.15.6) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `simple-get` from 2.8.1 to 3.1.0 - [Commits](feross/simple-get@v2.8.1...v3.1.0) Updates `web3-utils` from 1.2.11 to 1.10.4 - [Release notes](https://github.com/ChainSafe/web3.js/releases) - [Changelog](https://github.com/web3/web3.js/blob/v1.10.4/CHANGELOG.md) - [Commits](web3/web3.js@v1.2.11...v1.10.4) Updates `async` from 2.6.3 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.3...v2.6.4) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `follow-redirects` from 1.14.1 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.1...v1.15.6) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `browserify-sign` from 4.2.1 to 4.2.3 - [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md) - [Commits](browserify/browserify-sign@v4.2.1...v4.2.3) Updates `express` from 4.17.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.17.1...4.19.2) Updates `got` from 9.6.0 to 12.6.1 - [Release notes](https://github.com/sindresorhus/got/releases) - [Commits](sindresorhus/got@v9.6.0...v12.6.1) Updates `ipfs` from 0.55.4 to 0.66.1 - [Release notes](https://github.com/ipfs/js-ipfs/releases) - [Changelog](https://github.com/ipfs/js-ipfs/blob/master/CHANGELOG.md) - [Commits](https://github.com/ipfs/js-ipfs/compare/[email protected]) Updates `minimist` from 0.0.8 to 1.2.5 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `tar` from 4.4.8 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.8...v6.2.1) Updates `webpack-dev-middleware` from 3.7.3 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.3...v5.3.4) Updates `react-scripts` from 3.4.4 to 5.0.1 - [Release notes](https://github.com/facebook/create-react-app/releases) - [Changelog](https://github.com/facebook/create-react-app/blob/main/CHANGELOG-3.x.md) - [Commits](https://github.com/facebook/create-react-app/commits/[email protected]/packages/react-scripts) --- updated-dependencies: - dependency-name: "@openzeppelin/contracts" dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: "@nomiclabs/hardhat-waffle" dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: ethereum-waffle dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: flat dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: hardhat dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: simple-get dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: web3-utils dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: browserify-sign dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ipfs dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: react-scripts dependency-type: direct:production dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Pull requests that update a dependency file
label
Mar 27, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 9 updates in the / directory:
3.4.1
4.9.6
2.6.3
2.6.4
2.0.1
2.0.6
3.4.0
4.0.10
4.1.1
5.0.2
2.4.1
2.22.2
7.2.0
10.4.0
1.14.1
1.15.6
1.2.5
1.2.8
2.6.3
2.6.4
0.2.0
0.2.2
1.14.1
1.15.6
1.0.1
1.0.2
6.5.2
6.5.3
4.2.1
4.2.3
4.17.1
4.19.2
9.6.0
12.6.1
0.55.4
0.66.1
3.7.3
5.3.4
3.4.4
5.0.1
Updates
@openzeppelin/contracts
from 3.4.1 to 4.9.6Release notes
Sourced from
@openzeppelin/contracts
's releases.... (truncated)
Changelog
Sourced from
@openzeppelin/contracts
's changelog.... (truncated)
Commits
dc44c9f
Release v4.9.6 (#4931)a6286d0
Port Base64 tests to truffle (#4926) (#4929)bd325d5
Release v4.9.5 (#4790)ad6a5b6
Add changeset88ac712
Replace doublefunctionDelegateCall
a83918d
Bump node CI version to 16.x0d5f54e
Release v4.9.4 (#4784)ccfffe1
Make Multicall context-aware9329cfa
Remove Wizard page from 4.xe1b3d8c
Remove Wizard from 4.x navigationUpdates
async
from 2.6.3 to 2.6.4Changelog
Sourced from async's changelog.
Commits
c6bdaca
Version 2.6.48870da9
Update built files4df6754
update changelog8f7f903
Fix prototype pollution vulnerability (#1828)Maintainer changes
This version was pushed to npm by hargasinski, a new releaser for async since your current version.
Updates
@nomiclabs/hardhat-waffle
from 2.0.1 to 2.0.6Release notes
Sourced from
@nomiclabs/hardhat-waffle
's releases.Changelog
Sourced from
@nomiclabs/hardhat-waffle
's changelog.Commits
Updates
ethereum-waffle
from 3.4.0 to 4.0.10Release notes
Sourced from ethereum-waffle's releases.
... (truncated)
Commits
0915e72
🎉 Release new version (#823)4d83cde
⭐️ Support events not defined in a contract (#822)a1d89d0
🎉 Release new version (#821)216f1d8
🌏 Switch hardhat errors priority (#820)13d1af0
🎉 Release new version (#796)5637cc5
🦉 Optimism tests use latest commit (#819)1fa1312
🥑 Add mock contract typing (#818)702c6ab
🗾 Extend matching of Hardhat revert reasons (#802)46b954e
🖼 Mock contract chaining behaviour (#816)fb6863d
🍶 Implement mocking receive function to revert (#807)Updates
flat
from 4.1.1 to 5.0.2Commits
e5ffd66
Release 5.0.2fdb79d5
Update dependencies, refresh lockfile, format with standard.e52185d
Test against node 14 in CI.0189cb1
Avoid arrow function syntax.f25d3a1
Release 5.0.154cc7ad
use standard formatting779816e
drop dependencies2eea6d3
Bump lodash from 4.17.15 to 4.17.19a61a554
Bump acorn from 7.1.0 to 7.4.020ef0ef
Fix prototype pollution on unflattenUpdates
hardhat
from 2.4.1 to 2.22.2Release notes
Sourced from hardhat's releases.
... (truncated)
Commits
0d14cc5
Version Packagesef932f4
Merge pull request #5014 from NomicFoundation/changeset-ignore3962e1b
Ignore EDR js benchmarks package in our changeset configccdc0bb
build: bump revm to 7.1 (#4968)ba129d3
ci: disable snapshot tests in benchmarks (#5008)7164c5d
ci: add performance benchmarks (#4998)fa1d2b1
Merge pull request #4951 from theethernaut/parse-before-extendenv7876104
Create dull-pigs-pay.md473d85a
Create env before args are parsed739553e
edr-0.3.2Updates
mocha
from 7.2.0 to 10.4.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
ffd9557
Release v10.4.07ac67f3
build(deps): bump the github-actions group with 2 updates (#5125)7a2781c
chore: activate dependabot for workflows (#5123)97dcbb2
fix: harden error handling inlib/cli/run.js
(#5074)6f3f45e
fix: xunit integration test (#5122)a5b5652
docs: fix documentation concerning glob expansion on UNIX (#4869)efbb147
feat: add file path to xunit reporter (#4985)a2e600d
fix: closes #5115 (#5116)3735873
feat: include.cause
stacks in the error stack traces (#4829)b88978d
chore: bump ESLint ecmaVersion to 2020 (#5104)Maintainer changes
This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.
Updates
follow-redirects
from 1.14.1 to 1.15.6Commits
35a517c
Release version 1.15.6 of the npm package.c4f847f
Drop Proxy-Authorization across hosts.8526b4a
Use GitHub for disclosure.b1677ce
Release version 1.15.5 of the npm package.d8914f7
Preserve fragment in responseUrl.6585820
Release version 1.15.4 of the npm package.7a6567e
Disallow bracketed hostnames.05629af
Prefer native URL instead of deprecated url.parse.1cba8e8
Prefer native URL instead of legacy url.resolve.72bc2a4
Simplify _processResponse error handling.Updates
qs
from 6.5.2 to 6.5.3Changelog
Sourced from qs's changelog.
Commits
298bfa5
v6.5.3ed0f5dc
[Fix]parse
: ignore__proto__
keys (#428)691e739
[Robustness]stringify
: avoid relying on a globalundefined
(#427)1072d57
[readme] remove travis badge; add github actions/codecov badges; update URLs12ac1c4
[meta] fix README.md (#399)0338716
[actions] backport actions from main5639c20
Clean up license text so it’s properly detected as BSD-3-Clause51b8a0b
add FUNDING.yml45f6759
[Fix] fix for an impossible situation: when the formatter is called with a no...f814a7f
[Dev Deps] backport from mainUpdates
minimist
from 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.