Skip to content

Bump the npm_and_yarn group across 8 directories with 12 updates #148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the npm_and_yarn group across 8 directories with 12 updates #148

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 18, 2024 •
edited by IamGuiSantos
Loading

update

@dependabot
Bump the npm_and_yarn group across 8 directories with 12 updates
e354047 
Bumps the npm_and_yarn group with 2 updates in the /nodejs/axios/reactapp directory: [async](https://github.com/caolan/async) and [ws](https://github.com/websockets/ws).
Bumps the npm_and_yarn group with 3 updates in the /nodejs/socket-chat-app directory: [ws](https://github.com/websockets/ws), [engine.io](https://github.com/socketio/engine.io) and [socket.io-adapter](https://github.com/socketio/socket.io-adapter).
Bumps the npm_and_yarn group with 2 updates in the /nodejs/url-shortener/urlfrontend directory: [async](https://github.com/caolan/async) and [ws](https://github.com/websockets/ws).
Bumps the npm_and_yarn group with 11 updates in the /pact/pact-angular directory:

| Package | From | To |
| --- | --- | --- |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.7.0` | `3.14.1` |
| [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `8.12.0` |
| [request](https://github.com/request/request) | `2.87.0` | `2.88.2` |
| [async](https://github.com/caolan/async) | `2.6.0` | `2.6.4` |
| [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` |
| [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` |
| [ws](https://github.com/websockets/ws) | `8.11.0` | `8.17.1` |
| [engine.io](https://github.com/socketio/engine.io) | `6.5.4` | `6.5.5` |
| [socket.io-adapter](https://github.com/socketio/socket.io-adapter) | `2.5.4` | `2.5.5` |
| [yargs-parser](https://github.com/yargs/yargs-parser) | `11.1.1` | `21.1.1` |
| [protractor](https://github.com/angular/protractor) | `5.4.4` | `7.0.0` |

Bumps the npm_and_yarn group with 1 update in the /pact/pact-react-consumer directory: [ws](https://github.com/websockets/ws).
Bumps the npm_and_yarn group with 3 updates in the /spring-boot/cors/configuring-cors-with-spring/cors-app directory: [ws](https://github.com/websockets/ws), [engine.io](https://github.com/socketio/engine.io) and [socket.io-adapter](https://github.com/socketio/socket.io-adapter).
Bumps the npm_and_yarn group with 2 updates in the /spring-boot/spring-boot-and-reactjs/publisher_registerUI directory: [async](https://github.com/caolan/async) and [ws](https://github.com/websockets/ws).
Bumps the npm_and_yarn group with 2 updates in the /spring-boot/thymeleaf-vue/client directory: [js-yaml](https://github.com/nodeca/js-yaml) and [ws](https://github.com/websockets/ws).


Updates `async` from 3.2.3 to 3.2.5
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.5)

Updates `ws` from 7.5.7 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `ws` from 8.11.0 to 8.17.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `engine.io` from 6.5.3 to 6.5.5
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md)
- [Commits](socketio/engine.io@6.5.3...6.5.5)

Updates `socket.io-adapter` from 2.5.2 to 2.5.5
- [Release notes](https://github.com/socketio/socket.io-adapter/releases)
- [Changelog](https://github.com/socketio/socket.io-adapter/blob/main/CHANGELOG.md)
- [Commits](socketio/socket.io-adapter@2.5.2...2.5.5)

Updates `async` from 3.2.4 to 3.2.5
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.5)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `js-yaml` from 3.7.0 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.7.0...3.14.1)

Updates `ajv` from 5.5.2 to 8.12.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v5.5.2...v8.12.0)

Updates `request` from 2.87.0 to 2.88.2
- [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md)
- [Commits](https://github.com/request/request/commits)

Updates `async` from 2.6.0 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.5)

Updates `json-schema` from 0.2.3 to 0.4.0
- [Commits](kriszyp/json-schema@v0.2.3...v0.4.0)

Updates `jsprim` from 1.4.1 to 1.4.2
- [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md)
- [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2)

Updates `tough-cookie` from 2.3.3 to 2.5.0
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v2.3.3...v2.5.0)

Updates `ws` from 8.11.0 to 8.17.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `engine.io` from 6.5.4 to 6.5.5
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md)
- [Commits](socketio/engine.io@6.5.3...6.5.5)

Updates `socket.io-adapter` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/socketio/socket.io-adapter/releases)
- [Changelog](https://github.com/socketio/socket.io-adapter/blob/main/CHANGELOG.md)
- [Commits](socketio/socket.io-adapter@2.5.2...2.5.5)

Updates `yargs-parser` from 11.1.1 to 21.1.1
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v11.1.1...yargs-parser-v21.1.1)

Updates `protractor` from 5.4.4 to 7.0.0
- [Release notes](https://github.com/angular/protractor/releases)
- [Changelog](https://github.com/angular/protractor/blob/7.0.0/CHANGELOG.md)
- [Commits](angular/protractor@5.4.4...7.0.0)

Updates `request` from 2.87.0 to 2.88.2
- [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md)
- [Commits](https://github.com/request/request/commits)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `ws` from 8.17.0 to 8.17.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `engine.io` from 6.5.4 to 6.5.5
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md)
- [Commits](socketio/engine.io@6.5.3...6.5.5)

Updates `socket.io-adapter` from 2.5.4 to 2.5.5
- [Release notes](https://github.com/socketio/socket.io-adapter/releases)
- [Changelog](https://github.com/socketio/socket.io-adapter/blob/main/CHANGELOG.md)
- [Commits](socketio/socket.io-adapter@2.5.2...2.5.5)

Updates `async` from 3.2.4 to 3.2.5
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.3...v3.2.5)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

Updates `js-yaml` from 3.14.0 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.7.0...3.14.1)

Updates `ws` from 7.5.9 to 7.5.10
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.7...7.5.10)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: engine.io
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-adapter
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: request
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json-schema
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jsprim
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: engine.io
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-adapter
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yargs-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: protractor
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: request
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: engine.io
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io-adapter
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 18, 2024
@dependabot dependabot bot mentioned this pull request Jun 18, 2024
Closed
@IamGuiSantos
Copy link

This pull request includes several updates to the package dependencies across multiple projects to address security vulnerabilities and ensure compatibility with the latest versions. The updates primarily involve the async, ws, and engine.io packages.

Dependency Updates:

  • Updated async to version 3.2.5 in various package-lock.json files to ensure the latest security and performance improvements. [1] [2] [3] [4]
  • Updated ws to version 8.17.1 in multiple package-lock.json files to address potential vulnerabilities and improve stability. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15]
  • Updated engine.io to version 6.5.5 in several package-lock.json files to incorporate the latest fixes and enhancements. [1] [2] [3] [4]
  • Updated protractor to version 7.0.0 in pact-angular/package.json to ensure compatibility with the latest testing frameworks.

These updates are crucial for maintaining the security, performance, and compatibility of the projects.

@IamGuiSantos IamGuiSantos requested a review from Copilot April 15, 2025 13:39
Copilot
Copilot AI reviewed Apr 15, 2025
View reviewed changes
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 1 out of 9 changed files in this pull request and generated no comments.

Files not reviewed (8)
  • nodejs/axios/reactapp/package-lock.json: Language not supported
  • nodejs/socket-chat-app/package-lock.json: Language not supported
  • nodejs/url-shortener/urlfrontend/package-lock.json: Language not supported
  • pact/pact-angular/package.json: Language not supported
  • pact/pact-react-consumer/package-lock.json: Language not supported
  • spring-boot/cors/configuring-cors-with-spring/cors-app/package-lock.json: Language not supported
  • spring-boot/spring-boot-and-reactjs/publisher_registerUI/package-lock.json: Language not supported
  • spring-boot/thymeleaf-vue/client/package-lock.json: Language not supported

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

Copilot code review Copilot Copilot left review comments

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@IamGuiSantos