Bump the npm_and_yarn group across 4 directories with 19 updates #968
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 2 updates in the /contracts directory: [secp256k1](https://github.com/cryptocoinjs/secp256k1-node) and [braces](https://github.com/micromatch/braces). Bumps the npm_and_yarn group with 3 updates in the /contracts/examples/hello-world directory: [braces](https://github.com/micromatch/braces), [ws](https://github.com/websockets/ws) and [@solana/web3.js](https://github.com/solana-labs/solana-web3.js). Bumps the npm_and_yarn group with 13 updates in the /gauntlet directory: | Package | From | To | | --- | --- | --- | | [secp256k1](https://github.com/cryptocoinjs/secp256k1-node) | `4.0.2` | `4.0.4` | | [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` | | [node-fetch](https://github.com/node-fetch/node-fetch) | `2.6.6` | `2.6.7` | | [ws](https://github.com/websockets/ws) | `7.5.5` | `7.5.10` | | [@solana/web3.js](https://github.com/solana-labs/solana-web3.js) | `1.50.1` | `1.50.2` | | [pkg](https://github.com/vercel/pkg) | `5.4.1` | `5.8.1` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `6.11.2` | `6.11.4` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.16.3` | `7.26.4` | | [@sideway/formula](https://github.com/sideway/formula) | `3.0.0` | `3.0.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.9` | `1.15.9` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Bumps the npm_and_yarn group with 11 updates in the /ts directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [json5](https://github.com/json5/json5) | `2.2.1` | `2.2.3` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [ws](https://github.com/websockets/ws) | `7.5.7` | `7.5.10` | | [@solana/web3.js](https://github.com/solana-labs/solana-web3.js) | `1.91.1` | `1.91.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.17.3` | `7.26.4` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [semver](https://github.com/npm/node-semver) | `6.3.0` | `6.3.1` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` | | [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` | Updates `secp256k1` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/cryptocoinjs/secp256k1-node/releases) - [Commits](cryptocoinjs/secp256k1-node@v4.0.3...v4.0.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `elliptic` from 6.5.5 to 6.6.1 - [Commits](indutny/elliptic@v6.5.5...v6.6.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `@solana/web3.js` from 1.91.1 to 1.95.8 - [Release notes](https://github.com/solana-labs/solana-web3.js/releases) - [Commits](solana-labs/solana-web3.js@v1.91.1...v1.95.8) Updates `secp256k1` from 4.0.2 to 4.0.4 - [Release notes](https://github.com/cryptocoinjs/secp256k1-node/releases) - [Commits](cryptocoinjs/secp256k1-node@v4.0.3...v4.0.4) Updates `elliptic` from 6.5.4 to 6.6.1 - [Commits](indutny/elliptic@v6.5.5...v6.6.1) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `node-fetch` from 2.6.6 to 2.6.7 - [Release notes](https://github.com/node-fetch/node-fetch/releases) - [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7) Updates `ws` from 7.5.5 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `@solana/web3.js` from 1.50.1 to 1.50.2 - [Release notes](https://github.com/solana-labs/solana-web3.js/releases) - [Commits](solana-labs/solana-web3.js@v1.91.1...v1.95.8) Updates `pkg` from 5.4.1 to 5.8.1 - [Release notes](https://github.com/vercel/pkg/releases) - [Commits](vercel/pkg@5.4.1...5.8.1) Updates `protobufjs` from 6.11.2 to 6.11.4 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/protobufjs/protobuf.js/commits) Updates `@babel/traverse` from 7.16.3 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `@sideway/formula` from 3.0.0 to 3.0.1 - [Commits](hapijs/formula@v3.0.0...v3.0.1) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `follow-redirects` from 1.14.9 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.9...v1.15.9) Updates `tough-cookie` from 4.0.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `json5` from 2.2.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `ws` from 7.5.7 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `@solana/web3.js` from 1.91.1 to 1.91.3 - [Release notes](https://github.com/solana-labs/solana-web3.js/releases) - [Commits](solana-labs/solana-web3.js@v1.91.1...v1.95.8) Updates `@babel/traverse` from 7.17.3 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `semver` from 6.3.0 to 6.3.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v6.3.1) Updates `tough-cookie` from 4.0.0 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4) Updates `word-wrap` from 1.2.3 to 1.2.5 - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5) --- updated-dependencies: - dependency-name: secp256k1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@solana/web3.js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: secp256k1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: elliptic dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-fetch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@solana/web3.js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: pkg dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@sideway/formula" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@solana/web3.js" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: word-wrap dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the /contracts directory: secp256k1 and braces.
Bumps the npm_and_yarn group with 3 updates in the /contracts/examples/hello-world directory: braces, ws and @solana/web3.js.
Bumps the npm_and_yarn group with 13 updates in the /gauntlet directory:
4.0.24.0.42.2.02.2.32.6.62.6.77.5.57.5.101.50.11.50.25.4.15.8.16.11.26.11.47.16.37.26.43.0.03.0.10.2.00.2.21.14.91.15.94.0.04.1.41.2.31.2.5Bumps the npm_and_yarn group with 11 updates in the /ts directory:
3.0.23.0.32.2.12.2.33.0.43.1.27.5.77.5.101.91.11.91.37.17.37.26.47.0.37.0.64.0.44.0.86.3.06.3.14.0.04.1.41.2.31.2.5Updates
secp256k1from 4.0.3 to 4.0.4Commits
756fce14.0.48bd6446elliptic: fix key verification in loadCompressedPublicKey840834eUpdate elliptic to 6.5.7 (CVE-2024-42461) (#206)Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
ellipticfrom 6.5.5 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.034c8534fix: signature verification due to leading zeros3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from forkUpdates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
wsfrom 7.5.9 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
@solana/web3.jsfrom 1.91.1 to 1.95.8Release notes
Sourced from
@solana/web3.js's releases.... (truncated)
Commits
52e144achore: bump mocha from 10.8.2 to 11.0.1 (#3667)5b37988chore: bump typedoc from 0.27.1 to 0.27.2 (#3657)01d4664chore: bump rollup from 4.27.4 to 4.28.0 (#3656)6b14de8chore: bump typedoc from 0.27.0 to 0.27.1 (#3647)1799cb9chore: bump mockttp from 3.15.4 to 3.15.5 (#3646)6bbf467chore: bump prettier from 3.4.0 to 3.4.1 (#3635)ef27bf5chore: bump typedoc from 0.26.11 to 0.27.0 (#3634)d6e0aecchore: bump prettier from 3.3.3 to 3.4.0 (#3627)0d21830chore: bump jayson from 4.1.2 to 4.1.3 (#3626)4907d7echore: bump@noble/hashesfrom 1.5.0 to 1.6.1 (#3623)Updates
secp256k1from 4.0.2 to 4.0.4Commits
756fce14.0.48bd6446elliptic: fix key verification in loadCompressedPublicKey840834eUpdate elliptic to 6.5.7 (CVE-2024-42461) (#206)Updates
ellipticfrom 6.5.4 to 6.6.1Commits
9b774366.6.104cb6f5Merge commit from forkb8a7edd6.6.034c8534fix: signature verification due to leading zeros3e46a486.5.7accb61elib: DER signature decoding correction03e06e16.5.67ac5360Merge commit from forkUpdates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
node-fetchfrom 2.6.6 to 2.6.7Release notes
Sourced from node-fetch's releases.
Commits
1ef4b56backport of #1449 (#1453)8fe5c4e2.x: Specify encoding as an optional peer dependency in package.json (#1310)Updates
wsfrom 7.5.5 to 7.5.10Release notes
Sourced from ws's releases.
Commits
d962d70[dist] 7.5.1022c2876[security] Fix crash when the Upgrade header cannot be read (#2231)Updates
@solana/web3.jsfrom 1.50.1 to 1.50.2Release notes
Sourced from
@solana/web3.js's releases.... (truncated)
Commits
52e144achore: bump mocha from 10.8.2 to 11.0.1 (#3667)5b37988chore: bump typedoc from 0.27.1 to 0.27.2 (#3657)01d4664chore: bump rollup from 4.27.4 to 4.28.0 (#3656)6b14de8chore: bump typedoc from 0.27.0 to 0.27.1 (#3647)1799cb9chore: bump mockttp from 3.15.4 to 3.15.5 (#3646)6bbf467chore: bump prettier from 3.4.0 to 3.4.1 (#3635)ef27bf5chore: bump typedoc from 0.26.11 to 0.27.0 (#3634)d6e0aecchore: bump prettier from 3.3.3 to 3.4.0 (#3627)0d21830chore: bump jayson from 4.1.2 to 4.1.3 (#3626)4907d7echore: bump@noble/hashesfrom 1.5.0 to 1.6.1 (#3623)Updates
pkgfrom 5.4.1 to 5.8.1Release notes
Sourced from pkg's releases.
... (truncated)
Commits
5dc987b5.8.1f19285dfix: add force flag to codesign to avoid already signed error (#1756)e3ac490chore: bump [email protected] (#1788)be1123cstyle: fix typo in test-99-#1192/main.js (#1790)614c02achore: upgrade actions runners (#1767)39e9985chore: remove unused entry (#1766)b8deba4chore: use@types/babel__generatorpackage (#1755)332c7d9chore: separate individual test scripts (#1759)6efa7cfchore: add prettier check in linting step (#1764)56135b5chore: clean up obsolete eslint disable comments (#1760)Updates
protobufjsfrom 6.11.2 to 6.11.4Commits
Updates
@babel/traversefrom 7.16.3 to 7.26.4Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
cf7b9cdv7.26.4f33704aRevert "perf: Improve scope information collection performance" (#17005)36ca8fav7.26.3ded1571perf: Improve scope information collection performance (#16923)943bdfeperf: Avoid repeated traversal when creating scope (#16964)b07957ev7.25.9af91759fix: Accidentally publishing useless files (#16917)2533cfbv7.25.7611d958[babel 8] CreateTSClassImplements|TSInterfaceHeritagenodes (#16731)506bf91RemoveBABEL_TYPES_8_BREAKINGflag and enable it by default (#16817)Updates
@sideway/formulafrom 3.0.0 to 3.0.1Commits
5b44c1b3.0.19fbc20achore: better number regex41ae98eCleanupc59f35eMove to SidewayMaintainer changes
This version was pushed to npm by marsup, a new releaser for
@sideway/formulasince your current version.Updates
decode-uri-componentfrom 0.2.0 to 0.2.2Release notes
Sourced from decode-uri-component's releases.
Commits
a0eea460.2.2980e0bfPrevent overwriting previously decoded tokens3c8a3730.2.176abc93Switch to GitHub workflows746ca5dFix issue where decode throws - fixes #6486d7e2Update license (#1)a650457Tidelift tasks66e1c28Meta tweaksUpdates
follow-redirectsfrom 1.14.9 to 1.15.9Commits
e4e55c7Release version 1.15.9 of the npm package.31a1abfAttempt much more gentle detection.d2aaa97Fix url field.62558f0Release version 1.15.8 of the npm package.a8d1ceeReturn subtlety.458ca8eFix native URL test for Node 20.ca49e44Handle KeepAlive connections in tests.f3711d7Test on Node 20 and 22.fda0fafFix typo.760757fRelease version 1.15.7 of the npm package.Updates
tough-cookiefrom 4.0.0 to 4.1.4Release notes
Sourced from tough-cookie's releases.
... (truncated)
Commits
cacbc37Bump version to 4.1.4