Bump the npm_and_yarn at /client security update group in /client with 4 updates #70
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn at /client security update group in /client with 4 updates: karma, mocha, nightwatch and debug.
Updates
karma
from 5.2.3 to 6.3.16Release notes
Sourced from karma's releases.
... (truncated)
Changelog
Sourced from karma's changelog.
... (truncated)
Commits
ab4b328
chore(release): 6.3.16 [skip ci]ff7edbb
fix(security): mitigate the "Open Redirect Vulnerability"c1befa0
chore(release): 6.3.15 [skip ci]d9dade2
fix(helper): make mkdirIfNotExists helper resilient to concurrent calls653c762
ci: prevent duplicate CI tasks on creating a PRc97e562
chore(release): 6.3.14 [skip ci]91d5acd
fix: remove string template from client code69cfc76
fix: warn whensingleRun
andautoWatch
arefalse
839578c
fix(security): remove XSS vulnerability inreturnUrl
query paramdb53785
chore(release): 6.3.13 [skip ci]Updates
mocha
from 6.2.3 to 10.2.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
202e9b8
build(v10.2.0): release6782d6d
build(v10.2.0): update CHANGELOG73bb819
feat(esm): ability to decorate ESM module name before importing it (#4945)fc4ac58
chore(devDeps): remove unused depedencies (#4949)0a10ddc
docs: remove duplicated header (#4944)b0a0fb8
fix(browser): failed test icon color (#4946)3cc9cac
ci: update stale action (#4931)8f3c37b
chore(ci): workaround for firefox error (#4933)5f96d51
build(v10.1.0): releaseed74f16
build(v10.1.0): update CHANGELOGUpdates
nightwatch
from 1.7.12 to 3.2.1Release notes
Sourced from nightwatch's releases.
... (truncated)
Commits
f6ed245
3.2.17b58d6b
Bump get-func-name version for CVE-2023-436464035f2e
3.2.0c4a1115
fix #3849: pass settings to global hooks while called from programatic api (#...ecaa66b
Migrate lib/http files to TS. (#3886)e58c0d3
Fixes/3431 consider always match from desired capabilities (#3907)460d28a
Feat: event setup for nightwatch hooks (#3706)917fc7d
[chore] bump to selenium 4.13 (#3920)55800bb
remove color param from mocha cli runner tests (#3919)fd9a5c0
add GitHub Actions in the list of supporting colors (#3914)Maintainer changes
This version was pushed to npm by automatedtester, a new releaser for nightwatch since your current version.
Updates
debug
from 3.2.6 to 4.3.4Release notes
Sourced from debug's releases.
... (truncated)
Commits
da66c86
4.3.49b33412
replace deprecated String.prototype.substr() (#876)c0805cc
add section about configuring JS console to show debug messages (#866)043d3cd
4.3.34079aae
update license and more maintainership information19b36c0
update repository location + maintainership informationf851b00
adds README section regarding usage in child procs (#850)d177f2b
Remove accidental epizeuxise47f96d
4.3.21e9d38c
cache enabled status per-logger (#799)Maintainer changes
This version was pushed to npm by qix, a new releaser for debug since your current version.
You can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.