Skip to content

chore(deps): bump the security group across 1 directory with 10 updates #5263

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 8, 2025
Merged

chore(deps): bump the security group across 1 directory with 10 updates #5263

merged 1 commit into from
Apr 8, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 7, 2025

Bumps the security group with 10 updates in the /web directory:

Package From To
@storybook/addon-storysource 8.6.11 8.6.12
cronstrue 2.57.0 2.58.0
@pmmmwh/react-refresh-webpack-plugin 0.5.15 0.5.16
@storybook/addon-actions 8.6.11 8.6.12
@storybook/addon-links 8.6.11 8.6.12
@types/node 22.13.14 22.14.0
eslint-plugin-react 7.37.4 7.37.5
sass 1.86.0 1.86.3
typescript 5.8.2 5.8.3
webpack 5.98.0 5.99.0

Updates @storybook/addon-storysource from 8.6.11 to 8.6.12

Release notes

Sourced from @​storybook/addon-storysource's releases.

v8.6.12

8.6.12

Changelog

Sourced from @​storybook/addon-storysource's changelog.

8.6.12

Commits

Updates cronstrue from 2.57.0 to 2.58.0

Release notes

Sourced from cronstrue's releases.

v2.58.0

What's Changed

Full Changelog: bradymholt/cRonstrue@v2.57.0...v2.58.0

Commits

Updates @pmmmwh/react-refresh-webpack-plugin from 0.5.15 to 0.5.16

Release notes

Sourced from @​pmmmwh/react-refresh-webpack-plugin's releases.

v0.5.16

0.5.16 (31 Mar 2025)

Fixes

  • Fixed out of order cleanup when using top-level await (#898)
Changelog

Sourced from @​pmmmwh/react-refresh-webpack-plugin's changelog.

0.5.16 (31 Mar 2025)

Fixes

  • Fixed out of order cleanup when using top-level await (#898)
Commits
  • a106ec7 chore: release v0.5.16 (#903)
  • 92d7fd6 fix: out of order cleanup with top-level await (#898)
  • 781ef6b docs: update CI badge on README (#902)
  • a2e6c17 ci: fix GH actions trigger criteria
  • 3e21d36 ci: migrate to github actions (#901)
  • be959be chore(deps): bump nanoid from 3.3.7 to 3.3.8 in /examples/webpack-plugin-serv...
  • d93f7bb chore(deps): bump koa from 2.15.3 to 2.15.4 (#897)
  • 05c3bfb chore(deps): bump elliptic from 6.6.0 to 6.6.1 (#895)
  • 5f36f04 chore(deps): bump koa from 2.15.3 to 2.15.4 in /examples/webpack-plugin-serve...
  • 9f07d21 chore(deps-dev): bump nanoid from 3.3.7 to 3.3.8 (#892)
  • Additional commits viewable in compare view

Updates @storybook/addon-actions from 8.6.11 to 8.6.12

Release notes

Sourced from @​storybook/addon-actions's releases.

v8.6.12

8.6.12

Changelog

Sourced from @​storybook/addon-actions's changelog.

8.6.12

Commits

Updates @storybook/addon-links from 8.6.11 to 8.6.12

Release notes

Sourced from @​storybook/addon-links's releases.

v8.6.12

8.6.12

Changelog

Sourced from @​storybook/addon-links's changelog.

8.6.12

Commits

Updates @types/node from 22.13.14 to 22.14.0

Commits

Updates eslint-plugin-react from 7.37.4 to 7.37.5

Release notes

Sourced from eslint-plugin-react's releases.

v7.37.5

Fixed

  • [no-unknown-property]: allow shadow root attrs on \<template> (#3912[] @​ljharb)
  • [prop-types]: support ComponentPropsWithRef from a namespace import (#3651[] @​corydeppen)
  • [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#3910[] @​TildaDares)
  • [no-unknown-property]: allow transform-origin on rect (#3914[] @​ljharb)

Changed

#3651: jsx-eslint/eslint-plugin-react#3651 #3909: jsx-eslint/eslint-plugin-react#3909 #3910: jsx-eslint/eslint-plugin-react#3910 #3912: jsx-eslint/eslint-plugin-react#3912 #3914: jsx-eslint/eslint-plugin-react#3914 [button-has-type]: docs/rules/button-has-type.md [jsx-no-constructed-context-values]: docs/rules/jsx-no-constructed-context-values.md [no-unknown-property]: docs/rules/no-unknown-property.md [prop-types]: docs/rules/prop-types.md

Changelog

Sourced from eslint-plugin-react's changelog.

7.37.5 - 2025.04.03

Fixed

  • [no-unknown-property]: allow shadow root attrs on \<template> (#3912[] @​ljharb)
  • [prop-types]: support ComponentPropsWithRef from a namespace import (#3651[] @​corydeppen)
  • [jsx-no-constructed-context-values]: detect constructed context values in React 19 <Context> usage (#3910[] @​TildaDares)
  • [no-unknown-property]: allow transform-origin on rect (#3914[] @​ljharb)

Changed

#3914: jsx-eslint/eslint-plugin-react#3914 #3912: jsx-eslint/eslint-plugin-react#3912 #3910: jsx-eslint/eslint-plugin-react#3910 #3909: jsx-eslint/eslint-plugin-react#3909 #3651: jsx-eslint/eslint-plugin-react#3651

Commits
  • 2c98b83 Update CHANGELOG and bump version
  • 2f64dea [Fix] no-unknown-property: allow transform-origin on rect
  • 2428618 [Fix] jsx-no-constructed-context-values: detect constructed context values ...
  • 60b7316 [Tests] prop-types: use proper spacing/semis, button type
  • 90a00b9 [Fix] prop-types: support ComponentPropsWithRef from a namespace import
  • 3fd9b92 [Fix] no-unknown-property: allow shadow root attrs on \<template>
  • addad46 [Deps] update object.entries
  • 98a31f8 [Dev Deps] update @babel/core, @babel/eslint-parser
  • 7eb6ca9 [Docs] button-has-type: clean up phrasing
  • See full diff in compare view

Updates sass from 1.86.0 to 1.86.3

Release notes

Sourced from sass's releases.

Dart Sass 1.86.3

To install Sass 1.86.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug introduced in 1.86.1 where Sass fails to resolve paths starting with a .. segment.

See the full changelog for changes in earlier releases.

Dart Sass 1.86.2

To install Sass 1.86.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.86.1

To install Sass 1.86.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Improve the performance of file: URL case canonicalization on Windows and Mac OS.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.86.3

  • Fix a bug introduced in 1.86.1 where Sass fails to resolve paths starting with a .. segment.

1.86.2

  • No user-visible changes.

1.86.1

  • Improve the performance of file: URL case canonicalization on Windows and Mac OS.
Commits

Updates typescript from 5.8.2 to 5.8.3

Commits

Updates webpack from 5.98.0 to 5.99.0

Release notes

Sourced from webpack's releases.

v5.99.0

Fixes

  • Fixed a lot of types
  • Fixed runtime error when using asset module as entrypoint and runtimeChunk
  • JSON generator now preserves __proto__ property
  • Fixed when entry module isn't executed when targeting webworker with a runtime chunk
  • Do not duplicate modules with import attributes and reexport
  • The module and module ESM libraries have been union and code generation has been improved
  • Use a valid output path for errored asset modules
  • Remove BOM from JavaScript and CSS files when loader was not used
  • Create export for externals for module/modern-module library
  • Export unprovided variables for commonjs-static library
  • Forward semicolons from meta.webpackAST
  • Use xxhash64 for cache.hashAlgorithm when experiments.futureDefaults enabled
  • [CSS] Fixed profiling plugin for CSS
  • [CSS] Avoid extra module.export output for CSS module

Features

  • Add dead control flow check
  • Handle new Worker(import.meta.url) and new Worker(new URL(import.meta.url)) syntax
  • Added ability to generate custom error content for generators

Performance Improvements

  • Fixed excessive calls of getAllReferences
  • Optimize loc for monomorphic inline caching

Chores

  • Switch on strict types for typescript
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the security group across 1 directory with 10 updates
264b103 
Bumps the security group with 10 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@storybook/addon-storysource](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/storysource) | `8.6.11` | `8.6.12` |
| [cronstrue](https://github.com/bradymholt/cronstrue) | `2.57.0` | `2.58.0` |
| [@pmmmwh/react-refresh-webpack-plugin](https://github.com/pmmmwh/react-refresh-webpack-plugin) | `0.5.15` | `0.5.16` |
| [@storybook/addon-actions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/actions) | `8.6.11` | `8.6.12` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `8.6.11` | `8.6.12` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.13.14` | `22.14.0` |
| [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.4` | `7.37.5` |
| [sass](https://github.com/sass/dart-sass) | `1.86.0` | `1.86.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.2` | `5.8.3` |
| [webpack](https://github.com/webpack/webpack) | `5.98.0` | `5.99.0` |



Updates `@storybook/addon-storysource` from 8.6.11 to 8.6.12
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.12/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.12/code/addons/storysource)

Updates `cronstrue` from 2.57.0 to 2.58.0
- [Release notes](https://github.com/bradymholt/cronstrue/releases)
- [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md)
- [Commits](bradymholt/cRonstrue@v2.57.0...v2.58.0)

Updates `@pmmmwh/react-refresh-webpack-plugin` from 0.5.15 to 0.5.16
- [Release notes](https://github.com/pmmmwh/react-refresh-webpack-plugin/releases)
- [Changelog](https://github.com/pmmmwh/react-refresh-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](pmmmwh/react-refresh-webpack-plugin@v0.5.15...v0.5.16)

Updates `@storybook/addon-actions` from 8.6.11 to 8.6.12
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.12/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.12/code/addons/actions)

Updates `@storybook/addon-links` from 8.6.11 to 8.6.12
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.12/code/addons/links)

Updates `@types/node` from 22.13.14 to 22.14.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint-plugin-react` from 7.37.4 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.4...v7.37.5)

Updates `sass` from 1.86.0 to 1.86.3
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.86.0...1.86.3)

Updates `typescript` from 5.8.2 to 5.8.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `webpack` from 5.98.0 to 5.99.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.98.0...v5.99.0)

---
updated-dependencies:
- dependency-name: "@storybook/addon-storysource"
  dependency-version: 8.6.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: cronstrue
  dependency-version: 2.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@pmmmwh/react-refresh-webpack-plugin"
  dependency-version: 0.5.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-actions"
  dependency-version: 8.6.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-links"
  dependency-version: 8.6.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@types/node"
  dependency-version: 22.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: sass
  dependency-version: 1.86.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: typescript
  dependency-version: 5.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: webpack
  dependency-version: 5.99.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code labels Apr 7, 2025
replicated-ci
replicated-ci approved these changes Apr 8, 2025
View reviewed changes
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit 8dae839 into main Apr 8, 2025
94 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-8330305c90 branch April 8, 2025 06:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@replicated-ci replicated-ci replicated-ci approved these changes

Assignees
No one assigned
Labels
dependabot javascript Pull requests that update Javascript code type::chore type::security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@replicated-ci