Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the npm_and_yarn group across 2 directories with 24 updates #134

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Oct 6, 2024

Bumps the npm_and_yarn group with 10 updates in the / directory:

Package From To
moment-timezone 0.5.43 0.5.45
log4js 3.0.6 6.4.0
@babel/traverse 7.22.20 7.25.7
braces 3.0.2 3.0.3
semver 5.3.0 6.3.1
eslint-plugin-node 4.2.3 11.1.0
got 9.6.0 removed
ava 2.4.0 6.1.3
moment 2.29.4 2.30.1
path-to-regexp 0.1.7 0.1.11

Bumps the npm_and_yarn group with 12 updates in the /examples/log-generator directory:

Package From To
moment-timezone 0.5.13 0.5.45
log4js 0.6.38 6.4.0
semver 4.3.6 5.7.2
hosted-git-info 2.8.5 2.8.9
minimist 0.0.8 1.2.8
mkdirp 0.5.1 0.5.6
path-parse 1.0.6 1.0.7
path-to-regexp 0.1.7 0.1.10
express 4.16.3 4.21.0
axios 0.16.2 0.28.0
body-parser 1.18.3 1.20.3
url-parse 1.4.7 1.5.10

Updates moment-timezone from 0.5.43 to 0.5.45

Release notes

Sourced from moment-timezone's releases.

Release 0.5.45

  • Updated data to IANA TZDB 2024a.

Release 0.5.44

  • Updated data to IANA TZDB 2023d.
  • Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.
  • Performance improvements:
    • Use binary search when looking up zone information #720.
    • Avoid redundant checks in tz.guess().
    • Avoid redundant getZone() calls in .tz().
Changelog

Sourced from moment-timezone's changelog.

0.5.45 2024-02-04

  • Updated data to IANA TZDB 2024a.

0.5.44 2023-12-29

  • Updated data to IANA TZDB 2023d.
  • Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.
  • Performance improvements:
    • Use binary search when looking up zone information #720.
    • Avoid redundant checks in tz.guess().
    • Avoid redundant getZone() calls in .tz().
Commits
  • 16157c7 Build moment-timezone 0.5.45
  • 2d2b9a3 Bump version to 0.5.45
  • 0a32e82 ci: Update to latest version of all actions
  • 253bb00 Add editorconfig file for consistent indentation
  • 526030f docs: Clarify data update PRs in contributing guide
  • 6c31d29 Merge pull request #1095 from moment/automated/data-update
  • 4d6bced ci: Force running tests after updating data files
  • a276881 data: Add 2024a
  • ba275d2 ci: Allow downloading tzcode archive as well as tzdata
  • 6bf33a2 build(deps): bump @​babel/traverse from 7.17.3 to 7.23.2 (#1094)
  • Additional commits viewable in compare view

Updates log4js from 3.0.6 to 6.4.0

Changelog

Sourced from log4js's changelog.

6.4.0 - BREAKING CHANGE 💥

New default file permissions may cause external applications unable to read logs. A manual code/configuration change is required.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by csausdev, a new releaser for log4js since your current version.


Updates @babel/traverse from 7.22.20 to 7.25.7

Release notes

Sourced from @​babel/traverse's releases.

v7.25.7 (2024-10-02)

Thanks @​DylanPiercey and @​YuHyeonWook for your first PRs!

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

Committers: 8

v7.25.6 (2024-08-29)

Thanks @​j4k0xb for your first PR!

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.25.7 (2024-10-02)

🐛 Bug Fix

💅 Polish

🏠 Internal

  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator

🏃‍♀️ Performance

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

  • babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env

... (truncated)

Commits

Updates braces from 3.0.2 to 3.0.3

Commits

Updates semver from 5.3.0 to 6.3.1

Release notes

Sourced from semver's releases.

v6.3.1

6.3.1 (2023-07-10)

Bug Fixes

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

6.3.1 (2023-07-10)

Bug Fixes

6.2.0

  • Coerce numbers to strings when passed to semver.coerce()
  • Add rtl option to coerce from right to left

6.1.3

  • Handle X-ranges properly in includePrerelease mode

6.1.2

  • Do not throw when testing invalid version strings

6.1.1

  • Add options support for semver.coerce()
  • Handle undefined version passed to Range.test

6.1.0

  • Add semver.compareBuild function
  • Support * in semver.intersects

6.0

  • Fix intersects logic.

    This is technically a bug fix, but since it is also a change to behavior that may require users updating their code, it is marked as a major version increment.

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates eslint-plugin-node from 4.2.3 to 11.1.0

Release notes

Sourced from eslint-plugin-node's releases.

v11.1.0

The many rules for Node.js in the ESLint core will be deprecated in ESLint 7.0.0. This release includes the clone of those core rules.

✨ Enhancements

v11.0.0

💥 Breaking changes

  • b6cb9a071a7177ad625cde07541b9d2f31aab35b updated node/no-unsupported-features/node-builtins rule based on Node.js 13.2.0.
  • fb9ce15fb6d465f2cead242a5daae2599ce90142 updated node/no-unsupported-features/es-syntax rule to recognize BigInt literal property names.
  • 4295f6a45635ab61c53a8d51c19e1858a208492d updated the rules that check global variables to recognize globalThis.*.
  • 04051edfe3aa8cdb9f1aa87bbd4130021f767174 updated node/no-unsupported-features/es-builtins rule to recognize globalThis.

✨ Enhancements

... (truncated)

Commits
  • 4a348e7 🔖 11.1.0
  • 7dc8f80 📝 fix rule names in documentation
  • e2da592 ⚒ improve no-path-concat
  • ade0b59 ✨ add no-restricted-import
  • 578110e ⚒ simplify the options of no-restricted-require
  • 8788a11 Update: add ESLint core Node.js and CommonJS rules (#206)
  • b8f9945 🔖 11.0.0
  • 04051ed 💥 update node/no-unsupported-features/es-builtins to recognize globalThis
  • 4295f6a 💥 update rules to check globalThis.*
  • a5f3ab2 revert ESM support versions
  • Additional commits viewable in compare view

Removes got

Updates ava from 2.4.0 to 6.1.3

Release notes

Sourced from ava's releases.

v6.1.3

What's Changed

New Contributors

Full Changelog: avajs/ava@v6.1.2...v6.1.3

v6.1.2

What's Changed

Full Changelog: avajs/ava@v6.1.1...v6.1.2

v6.1.1

What's Changed

Full Changelog: avajs/ava@v6.1.0...v6.1.1

v6.1.0

What's Changed

  • Implement registerCompletionHandler() by @​novemberborn in avajs/ava#3283

    AVA 6 expects test code to clean up gracefully when the tests are complete, allowing the test environment (worker thread or child process) to exit. If this does not happen, AVA will report a timeout. You can use registerCompletionHandler() to perform any other clean up (or indeed exit the process) after AVA has completed the test execution. See the description here.

  • Fix potential bug with watch mode when no failed test files are written by @​novemberborn in avajs/ava#3287

  • Fix ava/internal ESM type module by @​codetheweb in avajs/ava#3292

Full Changelog: avajs/ava@v6.0.1...v6.1.0

v6.0.1

What's Changed

Full Changelog: avajs/ava@v6.0.0...v6.0.1

v6.0.0

Breaking Changes

  • AVA now requires Node.js versions 18.18, 20.8 or 21. Versions 14 and 16 are no longer supported. #3251 #3216

... (truncated)

Commits
  • f8bf00c 6.1.3
  • 002b3a0 Include Node.js 22 in supported engines and test matrix
  • ec1a8d2 Document serial configuration option
  • 01ec280 Add VS Code debugging instructions for Yarn PnP projects
  • 5d48c95 6.1.2
  • be5000a Fix throws assertions rejecting falsy values when any: true
  • 1d62caf Upgrade xo to v0.57.0
  • 2e0c2b1 6.1.1
  • 5161bf7 Update dependencies
  • 15dddf3 Fix external-assertions snapshot for Node.js 20.11
  • Additional commits viewable in compare view

Updates moment from 2.29.4 to 2.30.1

Changelog

Sourced from moment's changelog.

2.30.1

2.30.0 Full changelog

  • Release Dec 26, 2023
Commits

Updates path-to-regexp from 0.1.7 to 0.1.11

Release notes

Sourced from path-to-regexp's releases.

Error on bad input

Changed

  • Add error on bad input values 8f09549

pillarjs/path-to-regexp@v0.1.10...v0.1.11

Backtrack protection

Fixed

  • Add backtrack protection to parameters 29b96b4
    • This will break some edge cases but should improve performance

pillarjs/path-to-regexp@v0.1.9...v0.1.10

Support non-lookahead regex output

Added

  • Allow a non-lookahead regex (#312) c4272e4

component/path-to-regexp@v0.1.8...v0.1.9

Support named matching groups in RegExp

Added

  • Add support for named matching groups (#301) 114f62d

pillarjs/path-to-regexp@v0.1.7...v0.1.8

Commits

Updates yargs-parser from 10.1.0 to 18.1.3

Release notes

Sourced from yargs-parser's releases.

yargs-parser yargs-parser-v15.0.3

Bug Fixes

  • build: should use releases_created when using manifest (49ea4ef)

yargs-parser yargs-parser-v15.0.2

Bug Fixes

  • perf: address slow parse when using unknown-options-as-args (#400) (bc387ec)
Changelog

Sourced from yargs-parser's changelog.

18.1.3 (2020-04-16)

Bug Fixes

  • setArg: options using camel-case and dot-notation populated twice (#268) (f7e15b9)

18.1.2 (2020-03-26)

Bug Fixes

  • array, nargs: support -o=--value and --option=--value format (#262) (41d3f81)

18.1.1 (2020-03-16)

Bug Fixes

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.(63810ca)

18.1.0 (2020-03-07)

Features

  • introduce single-digit boolean aliases (#255) (9c60265)

18.0.0 (2020-03-02)

⚠ BREAKING CHANGES

  • the narg count is now enforced when parsing arrays.

Features

  • NaN can now be provided as a value for nargs, indicating "at least" one value is expected for array (#251) (9db4be8)

17.1.0 (2020-03-01)

Features

  • introduce greedy-arrays config, for specifying whether arrays consume multiple positionals (#249) (60e880a)

17.0.1 (2020-02-29)

... (truncated)

Commits
  • d301a56 chore: release 18.1.3 (#269)
  • f7e15b9 fix(setArg): options using camel-case and dot-notation populated twice (#268)
  • 78014fc chore: release 18.1.2 (#263)
  • 41d3f81 fix(array, nargs): support -o=--value and --option=--value format (#262)
  • b96b989 chore: release 18.1.1 (#259)
  • 63810ca fix: proto will now be replaced with proto in parse (#258)
  • 48b6d9c chore: release 18.1.0 (

… updates

Bumps the npm_and_yarn group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.43` | `0.5.45` |
| [log4js](https://github.com/log4js-node/log4js-node) | `3.0.6` | `6.4.0` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.22.20` | `7.25.7` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [semver](https://github.com/npm/node-semver) | `5.3.0` | `6.3.1` |
| [eslint-plugin-node](https://github.com/mysticatea/eslint-plugin-node) | `4.2.3` | `11.1.0` |
| [got](https://github.com/sindresorhus/got) | `9.6.0` | `removed` |
| [ava](https://github.com/avajs/ava) | `2.4.0` | `6.1.3` |
| [moment](https://github.com/moment/moment) | `2.29.4` | `2.30.1` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.11` |

Bumps the npm_and_yarn group with 12 updates in the /examples/log-generator directory:

| Package | From | To |
| --- | --- | --- |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.13` | `0.5.45` |
| [log4js](https://github.com/log4js-node/log4js-node) | `0.6.38` | `6.4.0` |
| [semver](https://github.com/npm/node-semver) | `4.3.6` | `5.7.2` |
| [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.8.5` | `2.8.9` |
| [minimist](https://github.com/minimistjs/minimist) | `0.0.8` | `1.2.8` |
| [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` |
| [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.10` |
| [express](https://github.com/expressjs/express) | `4.16.3` | `4.21.0` |
| [axios](https://github.com/axios/axios) | `0.16.2` | `0.28.0` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.18.3` | `1.20.3` |
| [url-parse](https://github.com/unshiftio/url-parse) | `1.4.7` | `1.5.10` |



Updates `moment-timezone` from 0.5.43 to 0.5.45
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.43...0.5.45)

Updates `log4js` from 3.0.6 to 6.4.0
- [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md)
- [Commits](log4js-node/log4js-node@v3.0.6...v6.4.0)

Updates `@babel/traverse` from 7.22.20 to 7.25.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.25.7/packages/babel-traverse)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `semver` from 5.3.0 to 6.3.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md)
- [Commits](npm/node-semver@v5.3.0...v6.3.1)

Updates `eslint-plugin-node` from 4.2.3 to 11.1.0
- [Release notes](https://github.com/mysticatea/eslint-plugin-node/releases)
- [Commits](mysticatea/eslint-plugin-node@v4.2.3...v11.1.0)

Removes `got`

Updates `ava` from 2.4.0 to 6.1.3
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](avajs/ava@v2.4.0...v6.1.3)

Updates `moment` from 2.29.4 to 2.30.1
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.4...2.30.1)

Updates `path-to-regexp` from 0.1.7 to 0.1.11
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.11)

Updates `yargs-parser` from 10.1.0 to 18.1.3
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v10.1.0...v18.1.3)

Updates `moment-timezone` from 0.5.13 to 0.5.45
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.43...0.5.45)

Updates `log4js` from 0.6.38 to 6.4.0
- [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md)
- [Commits](log4js-node/log4js-node@v3.0.6...v6.4.0)

Updates `semver` from 4.3.6 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md)
- [Commits](npm/node-semver@v5.3.0...v6.3.1)

Updates `hosted-git-info` from 2.8.5 to 2.8.9
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.8.5...v2.8.9)

Updates `minimist` from 0.0.8 to 1.2.8
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v0.0.8...v1.2.8)

Updates `mkdirp` from 0.5.1 to 0.5.6
- [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6)

Updates `moment` from 2.18.1 to 2.30.1
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.4...2.30.1)

Updates `path-parse` from 1.0.6 to 1.0.7
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.11)

Updates `express` from 4.16.3 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.16.3...4.21.0)

Updates `qs` from 6.5.1 to 6.5.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.5.1...v6.5.2)

Updates `axios` from 0.16.2 to 0.28.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md)
- [Commits](axios/axios@v0.16.2...v0.28.0)

Updates `express` from 4.16.3 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.16.3...4.21.0)

Updates `body-parser` from 1.18.3 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.18.3...1.20.3)

Updates `cookie` from 0.3.1 to 0.6.0
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Changelog](https://github.com/jshttp/cookie/blob/v0.6.0/HISTORY.md)
- [Commits](jshttp/cookie@v0.3.1...v0.6.0)

Updates `follow-redirects` from 1.2.4 to 1.15.9
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.2.4...v1.15.9)

Updates `send` from 0.16.2 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.16.2...0.19.0)

Updates `serve-static` from 1.13.2 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.13.2...v1.16.2)

Updates `url-parse` from 1.4.7 to 1.5.10
- [Commits](unshiftio/url-parse@1.4.7...1.5.10)

---
updated-dependencies:
- dependency-name: moment-timezone
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: log4js
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: eslint-plugin-node
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ava
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: moment
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yargs-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: moment-timezone
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: log4js
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: hosted-git-info
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: mkdirp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: moment
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-parse
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: url-parse
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 6, 2024
Copy link

⚠️ Este repositório ainda não está catalogado no Backstage. ⚠️

Por favor, catalogue-o seguindo as instruções nesta documentação. [Via VPN].

💁 Qualquer problema ou dúvida, estamos no Slack, basta abrir um ticket no canal #help-foundation-platform.

@devsec-app-pagarme
Copy link

Gandalf - Continuous AppSec

📌 Lembrete

Este repositório está sendo monitorando de forma automática e contínua em busca de achados que possam comprometer a segurança da aplicação.
Para maiores detalhes, acesse aqui à plataforma.

📋 Resumo de achados no repositório escriba

Criticade Achados
Critical 2
High 14
Medium 0
Low 0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants