Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: bump the npm-low-risk group across 1 directory with 17 updates #4669

Merged
merged 2 commits into from
Jan 9, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 9, 2025

Bumps the npm-low-risk group with 17 updates in the / directory:

Package From To
@axe-core/webdriverjs 4.10.0 4.10.1
@babel/core 7.25.2 7.26.0
@babel/preset-env 7.25.4 7.26.0
@babel/runtime-corejs3 7.25.6 7.26.0
aria-query 5.3.0 5.3.2
core-js 3.38.1 3.40.0
eslint 9.9.1 9.17.0
glob 10.4.2 10.4.5
globals 15.9.0 15.14.0
husky 9.1.5 9.1.7
jsdoc 4.0.3 4.0.4
lint-staged 15.2.9 15.3.0
prettier 3.3.3 3.4.2
selenium-webdriver 4.24.0 4.27.0
serve-handler 6.1.5 6.1.6
start-server-and-test 2.0.5 2.0.9
typescript 5.5.4 5.7.3

Updates @axe-core/webdriverjs from 4.10.0 to 4.10.1

Release notes

Sourced from @​axe-core/webdriverjs's releases.

Release 4.10.1

What's Changed

New Contributors

Full Changelog: dequelabs/axe-core-npm@v4.10.0...v4.10.1

Changelog

Sourced from @​axe-core/webdriverjs's changelog.

4.10.1 (2024-10-29)

Bug Fixes

Commits

Updates @babel/core from 7.25.2 to 7.26.0

Release notes

Sourced from @​babel/core's releases.

v7.26.0 (2024-10-25)

Thanks @​timofei-iatsenko for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/10/25/7.26.0.

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

Committers: 5

v7.25.9 (2024-10-22)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9 (2024-10-22)

🐛 Bug Fix

  • babel-parser, babel-template, babel-types
  • babel-helper-compilation-targets, babel-preset-env
  • Other

🏠 Internal

  • babel-helper-transform-fixture-test-runner

... (truncated)

Commits

Updates @babel/preset-env from 7.25.4 to 7.26.0

Release notes

Sourced from @​babel/preset-env's releases.

v7.26.0 (2024-10-25)

Thanks @​timofei-iatsenko for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/10/25/7.26.0.

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

Committers: 5

v7.25.9 (2024-10-22)

... (truncated)

Changelog

Sourced from @​babel/preset-env's changelog.

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9 (2024-10-22)

🐛 Bug Fix

  • babel-parser, babel-template, babel-types
  • babel-helper-compilation-targets, babel-preset-env
  • Other

🏠 Internal

  • babel-helper-transform-fixture-test-runner

... (truncated)

Commits

Updates @babel/runtime-corejs3 from 7.25.6 to 7.26.0

Release notes

Sourced from @​babel/runtime-corejs3's releases.

v7.26.0 (2024-10-25)

Thanks @​timofei-iatsenko for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/10/25/7.26.0.

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

Committers: 5

v7.25.9 (2024-10-22)

... (truncated)

Changelog

Sourced from @​babel/runtime-corejs3's changelog.

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9 (2024-10-22)

🐛 Bug Fix

  • babel-parser, babel-template, babel-types
  • babel-helper-compilation-targets, babel-preset-env
  • Other

🏠 Internal

  • babel-helper-transform-fixture-test-runner

... (truncated)

Commits

Updates aria-query from 5.3.0 to 5.3.2

Changelog

Sourced from aria-query's changelog.

5.3.0

Reverts some API data shape changes from 5.2.x. Also reverts some changes to the representation of the ARIA spec.

  • fda2c97 fix: amend breaking changes and reinstate constraints (#515)
  • f9f9ea6 Add prepublishOnly step to package.json (#506)

5.3.1

Removes the only runtime dependency from the project, and restores/broadens engines compatibility, plus a few bug fixes.

  • Remove dequal from the project (#554)
  • fix: add missing doc-pagefooter and doc-pageheader roles (#549)
  • Fix defect in calling code when building the ElementRoleMap (#555)
  • fix: add missing constraints for aside element to have implicit complementary role (#558)

5.3.2

A bug fix, and a bunch of testing cleanups.

  • [Fix] node < 4 lacks .find and Object.assign
  • [meta] create SECURITY.yml and FUNDING.yml
Commits
  • f347e71 v5.3.2
  • 1f4e602 [Dev Deps] update babel deps, mock-property, tape
  • 0237db8 [Tests] DRY up tests with some helpers
  • 28791c4 [Tests] handle things missing in older envs
  • 2106d5e [Fix] node < 4 lacks .find and Object.assign
  • 4f50008 [Tests] fix build path
  • 9c90890 [flow] remove unused flow types
  • fab2d4a [meta] create SECURITY.yml and FUNDING.yml
  • 8009738 [meta] reduce dependabot noise
  • d6b18ef Only apps should have lockfiles
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for aria-query since your current version.


Updates core-js from 3.38.1 to 3.40.0

Changelog

Sourced from core-js's changelog.

3.40.0 - 2025.01.08
3.39.0 - 2024.10.31
  • Changes v3.38.1...v3.39.0
  • Iterator helpers proposal:
    • Built-ins:
      • Iterator
        • Iterator.from
        • Iterator.prototype.drop
        • Iterator.prototype.every
        • Iterator.prototype.filter
        • Iterator.prototype.find
        • Iterator.prototype.flatMap
        • Iterator.prototype.forEach
        • Iterator.prototype.map
        • Iterator.prototype.reduce
        • Iterator.prototype.some
        • Iterator.prototype.take
        • Iterator.prototype.toArray
        • Iterator.prototype[@@toStringTag]

... (truncated)

Commits
  • 6e49392 v3.40.0
  • 34e4086 update the way async disposing of only sync disposable resources
  • e21bdbf bump the year
  • dd21b36 add a fix of V8 < 12.8 / NodeJS < 22.10 bug with handling infinite length of ...
  • 8de4f9a re-use IteratorResult objects when possible in Iterator.concat
  • 696feb8 add Error.isError
  • 19d4688 enable eslint-plugin-es-x no-nonstandard-*-properties rules
  • ebf97cc drop unneeded non-standard %TypedArray%.prototype.toSpliced feature detection
  • f37b548 don't use globally available non-standard Math.scale
  • 5c7cc53 inline internals/math-f16round
  • Additional commits viewable in compare view

Updates eslint from 9.9.1 to 9.17.0

Release notes

Sourced from eslint's releases.

v9.17.0

Features

  • eed91d1 feat: add suggestions to no-unused-vars (#18352) (Tanuj Kanti)

Bug Fixes

  • 67d683d fix: fix crash when message.fix is nullish (#19168) (ntnyq)
  • c618707 fix: ignore vars with non-identifier references in no-useless-assignment (#19200) (YeonJuan)

Documentation

  • 3c22d2a docs: update yoda to Yoda in yoda.md for consistency (#19230) (루밀LuMir)
  • e0a2203 docs: add missing backticks to no-sequences (#19233) (루밀LuMir)
  • 4cc4881 docs: Update README (GitHub Actions Bot)
  • 3db6fdf docs: [no-await-in-loop] expand on benefits and inapplicability (#19211) (Kirk Waiblinger)
  • bf2a4f6 docs: add missing backticks to func-style (#19227) (루밀LuMir)
  • ba098bd docs: add missing header to prefer-spread (#19224) (루밀LuMir)
  • b607ae6 docs: update description of no-param-reassign (#19220) (루밀LuMir)
  • 1eb424d docs: add missing backticks to prefer-destructuring (#19223) (루밀LuMir)
  • 85998d1 docs: add missing backticks to no-unneeded-ternary (#19222) (루밀LuMir)
  • b75b32c docs: add missing backticks to no-new-func (#19219) (루밀LuMir)
  • a7700bc docs: add missing backticks to id-length (

Bumps the npm-low-risk group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@axe-core/webdriverjs](https://github.com/dequelabs/axe-core-npm) | `4.10.0` | `4.10.1` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.25.2` | `7.26.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.4` | `7.26.0` |
| [@babel/runtime-corejs3](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime-corejs3) | `7.25.6` | `7.26.0` |
| [aria-query](https://github.com/A11yance/aria-query) | `5.3.0` | `5.3.2` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.38.1` | `3.40.0` |
| [eslint](https://github.com/eslint/eslint) | `9.9.1` | `9.17.0` |
| [glob](https://github.com/isaacs/node-glob) | `10.4.2` | `10.4.5` |
| [globals](https://github.com/sindresorhus/globals) | `15.9.0` | `15.14.0` |
| [husky](https://github.com/typicode/husky) | `9.1.5` | `9.1.7` |
| [jsdoc](https://github.com/jsdoc/jsdoc) | `4.0.3` | `4.0.4` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `15.2.9` | `15.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.2` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.24.0` | `4.27.0` |
| [serve-handler](https://github.com/vercel/serve-handler) | `6.1.5` | `6.1.6` |
| [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | `2.0.5` | `2.0.9` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `5.7.3` |



Updates `@axe-core/webdriverjs` from 4.10.0 to 4.10.1
- [Release notes](https://github.com/dequelabs/axe-core-npm/releases)
- [Changelog](https://github.com/dequelabs/axe-core-npm/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core-npm@v4.10.0...v4.10.1)

Updates `@babel/core` from 7.25.2 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-core)

Updates `@babel/preset-env` from 7.25.4 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-env)

Updates `@babel/runtime-corejs3` from 7.25.6 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-runtime-corejs3)

Updates `aria-query` from 5.3.0 to 5.3.2
- [Changelog](https://github.com/A11yance/aria-query/blob/main/CHANGELOG.md)
- [Commits](A11yance/aria-query@v5.3.0...v5.3.2)

Updates `core-js` from 3.38.1 to 3.40.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.40.0/packages/core-js)

Updates `eslint` from 9.9.1 to 9.17.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v9.9.1...v9.17.0)

Updates `glob` from 10.4.2 to 10.4.5
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.2...v10.4.5)

Updates `globals` from 15.9.0 to 15.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.9.0...v15.14.0)

Updates `husky` from 9.1.5 to 9.1.7
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](typicode/husky@v9.1.5...v9.1.7)

Updates `jsdoc` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/jsdoc/jsdoc/releases)
- [Changelog](https://github.com/jsdoc/jsdoc/blob/4.0.4/CHANGES.md)
- [Commits](jsdoc/jsdoc@4.0.3...4.0.4)

Updates `lint-staged` from 15.2.9 to 15.3.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/master/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v15.2.9...v15.3.0)

Updates `prettier` from 3.3.3 to 3.4.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.4.2)

Updates `selenium-webdriver` from 4.24.0 to 4.27.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.24.0...selenium-4.27.0)

Updates `serve-handler` from 6.1.5 to 6.1.6
- [Release notes](https://github.com/vercel/serve-handler/releases)
- [Commits](vercel/serve-handler@6.1.5...6.1.6)

Updates `start-server-and-test` from 2.0.5 to 2.0.9
- [Release notes](https://github.com/bahmutov/start-server-and-test/releases)
- [Commits](bahmutov/start-server-and-test@v2.0.5...v2.0.9)

Updates `typescript` from 5.5.4 to 5.7.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.5.4...v5.7.3)

---
updated-dependencies:
- dependency-name: "@axe-core/webdriverjs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: "@babel/runtime-corejs3"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: aria-query
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: core-js
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: glob
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: globals
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: jsdoc
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: selenium-webdriver
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
- dependency-name: serve-handler
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: start-server-and-test
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-low-risk
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-low-risk
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner January 9, 2025 17:35
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 9, 2025
@straker
Copy link
Contributor

straker commented Jan 9, 2025

I have gone through the changes for each of the dep updates and reviewed them for security.

Copy link
Contributor

@dbjorge dbjorge left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Double checked that nothing in LICENSE-3RD-PARTY.txt needs updating

@straker straker merged commit 62388de into develop Jan 9, 2025
22 checks passed
@straker straker deleted the dependabot/npm_and_yarn/npm-low-risk-ca91ad3715 branch January 9, 2025 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants