Bump the npm_and_yarn group across 1 directory with 7 updates #264

dependabot · 2024-07-18T17:53:02Z

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package	From	To
semver	`7.6.2`	`7.6.3`
systeminformation	`5.12.1`	`5.21.7`
ua-parser-js	`1.0.2`	`1.0.33`
@babel/traverse	`7.18.8`	`7.24.8`
braces	`3.0.2`	`3.0.3`
http-cache-semantics	`4.1.0`	`4.1.1`
ws	`8.8.0`	`8.18.0`

Updates semver from 7.6.2 to 7.6.3

Release notes

Sourced from semver's releases.

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

Changelog

Sourced from semver's changelog.

7.6.3 (2024-07-16)

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

Commits

0a12d6c chore: release 7.6.3 (#720)
73a3d79 fix: optimize Range parsing and formatting (#726)
2975ece docs: fix extra backtick typo (#719)
See full diff in compare view

Updates systeminformation from 5.12.1 to 5.21.7

Changelog

Sourced from systeminformation's changelog.

Changelog

Major Changes - Version 5

New Functions

audio() detailed audio information

bluetoothDevices() detailed information detected bluetooth devices

dockerImages() detailed information docker images

dockerVolumes() detailed information docker volumes

printers() detailed printer information

usb() detailed USB information

wifiInterfaces() detected Wi-Fi interfaces

wifiConnections() active Wi-Fi connections

Breaking Changes

Be aware, that the new version 5.x is NOT fully backward compatible to version 4.x ...

We had to make several interface changes to keep systeminformation as consistent as possible. We highly recommend to go through the complete list and adapt your own code to be again compatible to the new version 5.

Function Old New (V5) Comments

unsupported values -1 null values which are unknown orunsupported on platform

battery() hasbatterycyclecountischargingdesignedcapacitymaxcapacityacconnectedtimeremaining hasBatterycycleCountisChargingdesignedCapacitymaxCapacityacConnectedtimeRemaining pascalCase conformity

blockDevices() fstype fsType pascalCase conformity

cpu() speedminspeedmax speedMinspeedMax pascalCase conformity

cpu().speedcpu().speedMincpu().speedMax string values now returningnumerical values better value handling

cpuCurrentspeed() cpuCurrentSpeed() function name changedpascalCase conformity

currentLoad() avgloadcurrentloadcurrentload_usercurrentload_systemcurrentload_nicecurrentload_idlecurrentload_irqraw_currentload avgLoadcurrentLoadcurrentLoadUsercurrentLoadSystemcurrentLoadNicecurrentLoadIdlecurrentLoadIrqrawCurrentLoad pascalCase conformity

dockerContainerStats() mem_usagemem_limitmem_percentcpu_percentcpu_statsprecpu_statsmemory_stats memUsagememLimitmemPercentcpuPercentcpuStatsprecpuStatsmemoryStats pascalCase conformity

dockerContainerProcesses() pid_host pidHost pascalCase conformity

graphics().display pixeldepthresolutionxresolutionysizexsizey pixelDepthresolutionXresolutionYsizeXsizeY pascalCase conformity

networkConnections() localaddresslocalportpeeraddresspeerport localAddresslocalPortpeerAddresspeerPort pascalCase conformity

networkInterfaces() carrier_changes carrierChanges pascalCase conformity

processes() mem_vszmem_rsspcpupcpuupcpuspmem memVszmemRsscpucpuucpusmem pascalCase conformityrenamed attributes

processLoad() result as object result as array of objects function now allows to provide more thanone process (as a comma separated list)

services() pcpupmem cpumem renamed attributes

vbox() HPETPAEAPICX2APICACPIIOAPICbiosAPICmodeTRC hpetpaeapicx2ApicacpiioApicbiosApicModertc pascalCase conformity

Other Improvements and Changes

baseboard(): added memMax, memSlots

bios(): added language and features (linux)

blockDevices() added raid group member (linux)

cpu(): extended AMD processor list

cpu(): extended socket list (win)

cpu(): added virtualization if cpu supports virtualization

cpu(): now flags are part of this function

cpuTemperature() added socket and chipset temp (linux)

... (truncated)

Commits

f6a0bd3 5.21.7
cdfcbde updated docs
7972565 wifi sanitizing ssid names
d93a0ce wifi sanitizing iface names
3c11b22 wifi sanitizing iface names
c184c79 5.21.6
1b62892 baseboard() improved parsing (windows)
734b52e 5.21.5
369532f chassis(), baseboard() improved parsing (windows)
26f2b14 chassis(), baseboard() parsing improvements (windows)
Additional commits viewable in compare view

Updates ua-parser-js from 1.0.2 to 1.0.33

Changelog

Sourced from ua-parser-js's changelog.

Version 0.7.33 / 1.0.33

Add new browser : Cobalt

Identify Macintosh as an Apple device

Fix ReDoS vulnerability

Version 0.7.32 / 1.0.32

Add new browser : DuckDuckGo, Huawei Browser, LinkedIn

Add new OS : HarmonyOS

Add some Huawei models

Add Sharp Aquos TV

Improve detection Xiaomi Mi CC9

Fix Sony Xperia 1 III misidentified as Acer tablet

Fix Detect Sony BRAVIA as SmartTV

Fix Detect Xiaomi Mi TV as SmartTV

Fix Detect Galaxy Tab S8 as tablet

Fix WeGame mistakenly identified as WeChat

Fix included commas in Safari / Mobile Safari version

Increase UA_MAX_LENGTH to 350

Commits

67005e3 Update patch version to 1.0.33 as a mirror of 0.7.33
f2d0db0 Bump version 0.7.33
a6140a1 Remove unsafe regex in trim() function
a886604 Fix #605 - Identify Macintosh as Apple device
b814bcd Merge pull request #606 from rileyjshaw/patch-1
7f71024 Fix documentation
c239ac5 Merge pull request #604 from obecerra3/master
8d3c2d3 Add new browser: Cobalt
a2b2e80 Update patch version to 1.0.32 as a mirror of 0.7.32
d11fc47 Bump version 0.7.32
Additional commits viewable in compare view

Updates @babel/traverse from 7.18.8 to 7.24.8

Release notes

Sourced from @babel/traverse's releases.

v7.24.8 (2024-07-11)

Thanks @H0onnn, @jkup and @SreeXD for your first pull requests!

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

Committers: 9

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jon Kuperman (@jkup)

Nagendran N (@SreeXD)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

@H0onnn

@liuxingbaoyu

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

babel-parser

#16567 Do not use strict mode in TS declare (@liuxingbaoyu)

🐛 Bug Fix

babel-generator

#16630 Correctly print parens around in in for heads (@nicolo-ribaudo)

#16626 Fix printing of comments in await using (@nicolo-ribaudo)

#16591 fix typescript code generation for yield expression inside type expre… (@SreeXD)

babel-parser

#16613 Disallow destructuring assignment in using declarations (@H0onnn)

#16490 fix: do not add .value: undefined to regexp literals (@liuxingbaoyu)

babel-types

#16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@nicolo-ribaudo)

babel-plugin-transform-typescript

#16566 fix: Correctly handle export import x = (@liuxingbaoyu)

💅 Polish

babel-generator

#16625 Avoid unnecessary parens around async in for await (@nicolo-ribaudo)

babel-traverse

#16619 Avoid checking Scope.globals multiple times (@liuxingbaoyu)

v7.24.7 (2024-06-05)

🐛 Bug Fix

babel-node

#16554 Allow extra flags in babel-node (@nicolo-ribaudo)

babel-traverse

#16522 fix: incorrect constantViolations with destructuring (@liuxingbaoyu)

babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management

#16524 fix: Transform using in switch correctly (@liuxingbaoyu)

🏠 Internal

babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16525 Delete unused array helpers (@blakewilson)

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

... (truncated)

Commits

1f5af44 v7.24.8
c90bb0c [babel 8] Remove methods starting with _ in @babel/traverse (#16504)
e0368a8 Avoid checking Scope.globals multiple times (#16619)
683c654 Enable some lint rules (#16605)
cfe13c2 [babel 8] Update globals dependency (#16600)
c36fa6a Update typescript-eslint v8 (#16557)
12619ff improve getBindingIdentifiers.keys typing (#16570)
424fc90 Update to TypeScript 5.5 (#16536)
bf1e9a3 v7.24.7
4463aa5 fix: incorrect constantViolations with destructuring (#16522)
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates http-cache-semantics from 4.1.0 to 4.1.1

Commits

2449650 Update mocha
560b2d8 Don't use regex to trim whitespace
b1bdb92 Remove linting package zoo
c20dc7e Cache 308
See full diff in compare view

Updates ws from 8.8.0 to 8.18.0

Release notes

Sourced from ws's releases.

8.18.0

Features

Added support for Blob (#2229).

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

... (truncated)

Commits

976c53c [dist] 8.18.0
59b9629 [feature] Add support for Blob (#2229)
0d1b5e6 [security] Use more descriptive text for 2017 vulnerability link
15f11a0 [security] Add new DoS vulnerability to SECURITY.md
3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [semver](https://github.com/npm/node-semver) | `7.6.2` | `7.6.3` | | [systeminformation](https://github.com/sebhildebrandt/systeminformation) | `5.12.1` | `5.21.7` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `1.0.2` | `1.0.33` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.18.8` | `7.24.8` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) | `4.1.0` | `4.1.1` | | [ws](https://github.com/websockets/ws) | `8.8.0` | `8.18.0` | Updates `semver` from 7.6.2 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.2...v7.6.3) Updates `systeminformation` from 5.12.1 to 5.21.7 - [Changelog](https://github.com/sebhildebrandt/systeminformation/blob/master/CHANGELOG.md) - [Commits](sebhildebrandt/systeminformation@v5.12.1...v5.21.7) Updates `ua-parser-js` from 1.0.2 to 1.0.33 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md) - [Commits](faisalman/ua-parser-js@1.0.2...1.0.33) Updates `@babel/traverse` from 7.18.8 to 7.24.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-traverse) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `http-cache-semantics` from 4.1.0 to 4.1.1 - [Commits](kornelski/http-cache-semantics@v4.1.0...v4.1.1) Updates `ws` from 8.8.0 to 8.18.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.8.0...8.18.0) --- updated-dependencies: - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: systeminformation dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-cache-semantics dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 18, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 7 updates #264

Bump the npm_and_yarn group across 1 directory with 7 updates #264

Uh oh!

dependabot bot commented on behalf of github Jul 18, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Function	Old	New (V5)	Comments
unsupported values	-1	null	values which are unknown orunsupported on platform
`battery()`	hasbatterycyclecountischargingdesignedcapacitymaxcapacityacconnectedtimeremaining	hasBatterycycleCountisChargingdesignedCapacitymaxCapacityacConnectedtimeRemaining	pascalCase conformity
`blockDevices()`	fstype	fsType	pascalCase conformity
`cpu()`	speedminspeedmax	speedMinspeedMax	pascalCase conformity
`cpu().speedcpu().speedMincpu().speedMax`	string values	now returningnumerical values	better value handling
`cpuCurrentspeed()`		cpuCurrentSpeed()	function name changedpascalCase conformity
`currentLoad()`	avgloadcurrentloadcurrentload_usercurrentload_systemcurrentload_nicecurrentload_idlecurrentload_irqraw_currentload	avgLoadcurrentLoadcurrentLoadUsercurrentLoadSystemcurrentLoadNicecurrentLoadIdlecurrentLoadIrqrawCurrentLoad	pascalCase conformity
`dockerContainerStats()`	mem_usagemem_limitmem_percentcpu_percentcpu_statsprecpu_statsmemory_stats	memUsagememLimitmemPercentcpuPercentcpuStatsprecpuStatsmemoryStats	pascalCase conformity
`dockerContainerProcesses()`	pid_host	pidHost	pascalCase conformity
`graphics().display`	pixeldepthresolutionxresolutionysizexsizey	pixelDepthresolutionXresolutionYsizeXsizeY	pascalCase conformity
`networkConnections()`	localaddresslocalportpeeraddresspeerport	localAddresslocalPortpeerAddresspeerPort	pascalCase conformity
`networkInterfaces()`	carrier_changes	carrierChanges	pascalCase conformity
`processes()`	mem_vszmem_rsspcpupcpuupcpuspmem	memVszmemRsscpucpuucpusmem	pascalCase conformityrenamed attributes
`processLoad()`	result as object	result as array of objects	function now allows to provide more thanone process (as a comma separated list)
`services()`	pcpupmem	cpumem	renamed attributes
`vbox()`	HPETPAEAPICX2APICACPIIOAPICbiosAPICmodeTRC	hpetpaeapicx2ApicacpiioApicbiosApicModertc	pascalCase conformity

Bump the npm_and_yarn group across 1 directory with 7 updates #264

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 7 updates #264

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 18, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.6.3

7.6.3 (2024-07-16)

Bug Fixes

Documentation

7.6.3 (2024-07-16)

Bug Fixes

Documentation

Changelog

Major Changes - Version 5

New Functions

Breaking Changes

Other Improvements and Changes

Version 0.7.33 / 1.0.33

Version 0.7.32 / 1.0.32

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

v7.24.6 (2024-05-24)

🐛 Bug Fix

8.18.0

Features

8.17.1

Bug fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jul 18, 2024 •

edited

Loading