Skip to content

chore(deps): bump the security group in /web with 11 updates #5248

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 29, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2025

Bumps the security group in /web with 11 updates:

Package From To
@grafana/data 11.5.2 11.6.0
@storybook/addon-storysource 8.6.7 8.6.11
cronstrue 2.56.0 2.57.0
react-refresh 0.16.0 0.17.0
@aws-sdk/types 3.734.0 3.775.0
@babel/cli 7.26.4 7.27.0
@babel/eslint-parser 7.26.10 7.27.0
@babel/preset-typescript 7.26.0 7.27.0
@storybook/addon-actions 8.6.7 8.6.11
@storybook/addon-links 8.6.7 8.6.11
@types/node 22.13.11 22.13.14

Updates @grafana/data from 11.5.2 to 11.6.0

Release notes

Sourced from @​grafana/data's releases.

11.6.0

Download page What's new highlights

Features and enhancements

... (truncated)

Changelog

Sourced from @​grafana/data's changelog.

11.6.0 (2025-03-25)

Features and enhancements

... (truncated)

Commits
  • 08d88ba [release-11.6.0] Dashboards: Fix time range bug when use_browser_locale is en...
  • 9f280bd [release-11.6.0] Transformations: Fix field naming in Add field from calc (Bi...
  • 1444e9d Transformations: Improve groupBy field selection and aggregated field types (...
  • 5e21b9e Invite User: Add invite user button in top bar (#101809)
  • 14ebec5 Alerting: Allow selection of recording rule write target on per-rule basis. (...
  • 31e92ba Trace View: Add link from the Trace View to the Profiles Drilldown (#101422)
  • 374380d Alerting: Keep the latest version of deleted rule in version table (#101481)
  • e7baf98 Transformations: Avoid mutation during variable interpolation (#101594)
  • 6d4a271 Frontend: Expose unstable entrypoints for data and runtime (#101547)
  • bbfeb8d Feature: Introduce subresource integrity checks (SRI) for frontend assets (#1...
  • Additional commits viewable in compare view

Updates @storybook/addon-storysource from 8.6.7 to 8.6.11

Release notes

Sourced from @​storybook/addon-storysource's releases.

v8.6.11

8.6.11

v8.6.10

8.6.10

v8.6.9

8.6.9

v8.6.8

8.6.8

Changelog

Sourced from @​storybook/addon-storysource's changelog.

8.6.11

8.6.10

8.6.9

8.6.8

Commits
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • See full diff in compare view

Updates cronstrue from 2.56.0 to 2.57.0

Release notes

Sourced from cronstrue's releases.

v2.57.0

What's Changed

New Contributors

Full Changelog: bradymholt/cRonstrue@v2.56.0...v2.57.0

Commits

Updates react-refresh from 0.16.0 to 0.17.0

Commits

Updates @aws-sdk/types from 3.734.0 to 3.775.0

Release notes

Sourced from @​aws-sdk/types's releases.

v3.775.0

3.775.0(2025-03-25)

Chores
  • core/httpAuthSchemes: fix type declaration of resolved credentials (#6966) (e4d791d8)
  • codegen: sync for client config object custody (#6969) (df877b2c)
New Features
  • clients: update client endpoints as of 2025-03-25 (5fd070ad)
  • client-marketplace-entitlement-service: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. (17b10418)
  • client-marketplace-metering: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. (540d2d0b)
  • client-gameliftstreams: Minor updates to improve developer experience. (b6b01de0)
  • client-workspaces-thin-client: Deprecate tags field in Get API responses (026ba533)
  • client-eks: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. (55f5a70c)
  • client-bedrock-agent: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock (100062a6)
  • client-keyspaces: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. (254cb39a)
  • client-sagemaker: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps (03a1150b)
Bug Fixes
  • core/httpAuthSchemes: allow extensions to set signer credentials (#6971) (8b6fe4c3)
  • packages: maintain singleton config object (#6959) (6034850a)
Tests
  • aws-client-api-test: assert client config custody in integ test (#6970) (052971b5)
  • lib-storage: increase timeout for hooks calling integTestResources (#6968) (78e3f141)

For list of updated packages, view updated-packages.md in assets-3.775.0.zip

v3.774.0

3.774.0(2025-03-24)

Chores
Documentation Changes
  • client-qconnect: Provides the correct value for supported model ID. (d8f8afdb)
  • middleware-flexible-checksums: add api annotations (#6964) (1dc0d6ce)
  • fix api-extractor configuration and add missing annotations (#6963) (dbfc8ede)
  • add missing extract:docs commands (#6965) (8be4f2a9)
New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/types's changelog.

3.775.0 (2025-03-25)

Note: Version bump only for package @​aws-sdk/types

Commits
  • bc30dfa Publish v3.775.0
  • e4d791d chore(core/httpAuthSchemes): fix type declaration of resolved credentials (#6...
  • df877b2 chore(codegen): sync for client config object custody (#6969)
  • See full diff in compare view

Updates @babel/cli from 7.26.4 to 7.27.0

Release notes

Sourced from @​babel/cli's releases.

v7.27.0 (2025-03-24)

Thanks @​ishchhabra and @​vovkasm for your first PRs!

👓 Spec Compliance

  • babel-generator, babel-parser

🚀 New Feature

  • babel-helper-create-class-features-plugin, babel-traverse, babel-types
  • babel-parser, babel-types
    • #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@​JLHwung)
  • babel-generator
  • babel-parser, babel-template
  • babel-plugin-transform-typescript, babel-traverse
  • babel-parser
  • babel-types
    • #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@​ishchhabra)

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-traverse
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-cli
  • babel-plugin-transform-named-capturing-groups-regex, babel-types

🏃‍♀️ Performance

Committers: 5

v7.26.10 (2025-03-11)

... (truncated)

Changelog

Sourced from @​babel/cli's changelog.

v7.27.0 (2025-03-24)

👓 Spec Compliance

  • babel-generator, babel-parser

🚀 New Feature

  • babel-helper-create-class-features-plugin, babel-traverse, babel-types
  • babel-parser, babel-types
    • #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@​JLHwung)
  • babel-generator
  • babel-parser, babel-template
  • babel-plugin-transform-typescript, babel-traverse
  • babel-parser
  • babel-types
    • #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@​ishchhabra)

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-traverse
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-cli
  • babel-plugin-transform-named-capturing-groups-regex, babel-types

🏃‍♀️ Performance

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

... (truncated)

Commits

Updates @babel/eslint-parser from 7.26.10 to 7.27.0

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.27.0 (2025-03-24)

Thanks @​ishchhabra and @​vovkasm for your first PRs!

👓 Spec Compliance

  • babel-generator, babel-parser

🚀 New Feature

  • babel-helper-create-class-features-plugin, babel-traverse, babel-types
  • babel-parser, babel-types
    • #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@​JLHwung)
  • babel-generator
  • babel-parser, babel-template
  • babel-plugin-transform-typescript, babel-traverse
  • babel-parser
  • babel-types
    • #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@​ishchhabra)

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-traverse
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-cli
  • babel-plugin-transform-named-capturing-groups-regex, babel-types

🏃‍♀️ Performance

Committers: 5

Changelog

Sourced from @​babel/eslint-parser's changelog.

v7.27.0 (2025-03-24)

👓 Spec Compliance

  • babel-generator, babel-parser

🚀 New Feature

  • babel-helper-create-class-features-plugin, babel-traverse, babel-types
  • babel-parser, babel-types
    • #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@​JLHwung)
  • babel-generator
  • babel-parser, babel-template
  • babel-plugin-transform-typescript, babel-traverse
  • babel-parser
  • babel-types
    • #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@​ishchhabra)

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-traverse
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-cli
  • babel-plugin-transform-named-capturing-groups-regex, babel-types

🏃‍♀️ Performance

Commits

Bumps the security group in /web with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@grafana/data](https://github.com/grafana/grafana/tree/HEAD/packages/grafana-data) | `11.5.2` | `11.6.0` |
| [@storybook/addon-storysource](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/storysource) | `8.6.7` | `8.6.11` |
| [cronstrue](https://github.com/bradymholt/cronstrue) | `2.56.0` | `2.57.0` |
| [react-refresh](https://github.com/facebook/react/tree/HEAD/packages/react) | `0.16.0` | `0.17.0` |
| [@aws-sdk/types](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/types) | `3.734.0` | `3.775.0` |
| [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.26.4` | `7.27.0` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.26.10` | `7.27.0` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.26.0` | `7.27.0` |
| [@storybook/addon-actions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/actions) | `8.6.7` | `8.6.11` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `8.6.7` | `8.6.11` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.13.11` | `22.13.14` |


Updates `@grafana/data` from 11.5.2 to 11.6.0
- [Release notes](https://github.com/grafana/grafana/releases)
- [Changelog](https://github.com/grafana/grafana/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/grafana/commits/v11.6.0/packages/grafana-data)

Updates `@storybook/addon-storysource` from 8.6.7 to 8.6.11
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.11/code/addons/storysource)

Updates `cronstrue` from 2.56.0 to 2.57.0
- [Release notes](https://github.com/bradymholt/cronstrue/releases)
- [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md)
- [Commits](bradymholt/cRonstrue@v2.56.0...v2.57.0)

Updates `react-refresh` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/react)

Updates `@aws-sdk/types` from 3.734.0 to 3.775.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/types/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.775.0/packages/types)

Updates `@babel/cli` from 7.26.4 to 7.27.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-cli)

Updates `@babel/eslint-parser` from 7.26.10 to 7.27.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.0/eslint/babel-eslint-parser)

Updates `@babel/preset-typescript` from 7.26.0 to 7.27.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-preset-typescript)

Updates `@storybook/addon-actions` from 8.6.7 to 8.6.11
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.11/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.11/code/addons/actions)

Updates `@storybook/addon-links` from 8.6.7 to 8.6.11
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.11/code/addons/links)

Updates `@types/node` from 22.13.11 to 22.13.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@grafana/data"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@storybook/addon-storysource"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: cronstrue
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: react-refresh
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@aws-sdk/types"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/eslint-parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@babel/preset-typescript"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@storybook/addon-actions"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-links"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code labels Mar 29, 2025
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit 9294032 into main Mar 29, 2025
94 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-c53d7c1aa6 branch March 29, 2025 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot javascript Pull requests that update Javascript code type::chore type::security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant