Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the security group in /web with 8 updates #4954

Merged
merged 1 commit into from
Oct 19, 2024
Merged

Bump the security group in /web with 8 updates #4954

merged 1 commit into from
Oct 19, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 19, 2024

Bumps the security group in /web with 8 updates:

Package From To
apexcharts 3.54.0 3.54.1
@storybook/addon-links 8.3.5 8.3.6
@testing-library/jest-dom 6.5.0 6.6.2
@types/lodash 4.17.10 4.17.11
html-webpack-plugin 5.6.0 5.6.2
msw 2.4.10 2.4.11
sass 1.79.5 1.80.3
tailwindcss 3.4.13 3.4.14

Updates apexcharts from 3.54.0 to 3.54.1

Release notes

Sourced from apexcharts's releases.

💎 Version 3.54.1

What's Changed

  • improve border radius implementation in stacked bar charts by @​junedchhipa in apexcharts/apexcharts.js#4747
  • Bar and column true stroke and fill paths by @​rosco54 in apexcharts/apexcharts.js#4753
  • fix #4757; allow duplicate labels in yaxis
  • fix #4623; use x value from w.config.series instead of w.globals.labels
  • fix #4750; safari tooltip issue
  • Restore true stroke paths on bars and columns - by @​rosco54
  • fix #4755; tooltip marker color when fill type is gradient
  • fix apexcharts/react-apexcharts#627 prevent mutating config.colors as it causes reactivity issues in react
  • move some styles to foreignObject as external styles are not applied when exporting
  • fix #4657; fix #4818; border radius on last element when previous datapoint is zero
  • fix #4738; legend height when position is bottom
  • fix #4734; last annotation was not shown because of a refactor

Full Changelog: apexcharts/apexcharts.js@v3.54.0...v3.54.1

Commits

Updates @storybook/addon-links from 8.3.5 to 8.3.6

Release notes

Sourced from @​storybook/addon-links's releases.

v8.3.6

8.3.6

Changelog

Sourced from @​storybook/addon-links's changelog.

8.3.6

Commits

Updates @testing-library/jest-dom from 6.5.0 to 6.6.2

Release notes

Sourced from @​testing-library/jest-dom's releases.

v6.6.2

6.6.2 (2024-10-17)

Bug Fixes

  • remove recursive type reference in vitest types (#636) (4468378)

v6.6.1

6.6.1 (2024-10-16)

Bug Fixes

  • fix lodash import in to-have-selection.js (#642) (ced792e)

v6.6.0

6.6.0 (2024-10-16)

Features

Commits
  • 4468378 fix: remove recursive type reference in vitest types (#636)
  • abba961 docs: add billyjanitsch as a contributor for bug (#644)
  • 9490615 docs: add G-Rath as a contributor for code (#643)
  • ced792e fix: fix lodash import in to-have-selection.js (#642)
  • 9b14804 feat: implement toHaveSelection (#637)
  • f5b0e94 docs: add diegohaz as a contributor for ideas (#640)
  • 68e927e docs: add pwolaq as a contributor for code, and test (#639)
  • 04005db docs: add silviuaavram as a contributor for code, and test (#638)
  • 4723de3 docs: add mibcadet as a contributor for doc (#628)
  • 8fd402a docs: how to update tsconfig for vitest matchers extension (#624)
  • Additional commits viewable in compare view

Updates @types/lodash from 4.17.10 to 4.17.11

Commits

Updates html-webpack-plugin from 5.6.0 to 5.6.2

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.2 (2024-10-17)

Bug Fixes

5.6.1 (2024-10-17)

Bug Fixes

  • avoid importing all of lodash (#1864) (2caf5db)
  • don't use initialize hooks to allow dynamic plugin injection (ae85878)
  • handle childCompilation.errors being an iterator rather than array (#1863) (4c0c894)
Commits

Updates msw from 2.4.10 to 2.4.11

Release notes

Sourced from msw's releases.

v2.4.11 (2024-10-14)

Bug Fixes

Commits

Updates sass from 1.79.5 to 1.80.3

Release notes

Sourced from sass's releases.

Dart Sass 1.80.3

To install Sass 1.80.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where @import url("...") would crash in plain CSS files.

  • Improve consistency of how warnings are emitted by different parts of the compiler. This should result in minimal user-visible changes, but different types of warnings should now respond more reliably to flags like --quiet, --verbose, and --silence-deprecation.

See the full changelog for changes in earlier releases.

Dart Sass 1.80.2

To install Sass 1.80.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where deprecation warnings were incorrectly emitted for the plain-CSS invert() function.

See the full changelog for changes in earlier releases.

Dart Sass 1.80.1

To install Sass 1.80.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where repeated deprecation warnings were not automatically limited.

See the full changelog for changes in earlier releases.

Dart Sass 1.80.0

To install Sass 1.80.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • @import is now officially deprecated, as are global built-in functions that are available within built-in modules. See the Sass blog post for more details on the deprecation process.

... (truncated)

Changelog

Sourced from sass's changelog.

1.80.3

  • Fix a bug where @import url("...") would crash in plain CSS files.

  • Improve consistency of how warnings are emitted by different parts of the compiler. This should result in minimal user-visible changes, but different types of warnings should now respond more reliably to flags like --quiet, --verbose, and --silence-deprecation.

1.80.2

  • Fix a bug where deprecation warnings were incorrectly emitted for the plain-CSS invert() function.

1.80.1

  • Fix a bug where repeated deprecation warnings were not automatically limited.

1.80.0

  • @import is now officially deprecated, as are global built-in functions that are available within built-in modules. See the Sass blog post for more details on the deprecation process.

Embedded Host

  • Fix an error that would sometimes occur when deprecation warnings were emitted when using a custom importer with the legacy API.

1.79.6

  • Fix a bug where Sass would add an extra */ after loud comments with whitespace after an explicit */ in the indented syntax.

  • Potentially breaking bug fix: Adding text after an explicit */ in the indented syntax is now an error, rather than silently generating invalid CSS.

Embedded Host

  • Properly export the SassBoolean type.
Commits

Updates tailwindcss from 3.4.13 to 3.4.14

Release notes

Sourced from tailwindcss's releases.

v3.4.14

Fixed

  • Don't set display: none on elements that use hidden="until-found" (#14625)
Changelog

Sourced from tailwindcss's changelog.

[3.4.14] - 2024-10-15

Fixed

  • Don't set display: none on elements that use hidden="until-found" (#14625)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the security group in /web with 8 updates
1004e73 
Bumps the security group in /web with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [apexcharts](https://github.com/apexcharts/apexcharts.js) | `3.54.0` | `3.54.1` |
| [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `8.3.5` | `8.3.6` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.5.0` | `6.6.2` |
| [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.10` | `4.17.11` |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.0` | `5.6.2` |
| [msw](https://github.com/mswjs/msw) | `2.4.10` | `2.4.11` |
| [sass](https://github.com/sass/dart-sass) | `1.79.5` | `1.80.3` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss) | `3.4.13` | `3.4.14` |


Updates `apexcharts` from 3.54.0 to 3.54.1
- [Release notes](https://github.com/apexcharts/apexcharts.js/releases)
- [Commits](apexcharts/apexcharts.js@v3.54.0...v3.54.1)

Updates `@storybook/addon-links` from 8.3.5 to 8.3.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.3.6/code/addons/links)

Updates `@testing-library/jest-dom` from 6.5.0 to 6.6.2
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.5.0...v6.6.2)

Updates `@types/lodash` from 4.17.10 to 4.17.11
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash)

Updates `html-webpack-plugin` from 5.6.0 to 5.6.2
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v5.6.0...v5.6.2)

Updates `msw` from 2.4.10 to 2.4.11
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.4.10...v2.4.11)

Updates `sass` from 1.79.5 to 1.80.3
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.79.5...1.80.3)

Updates `tailwindcss` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.14/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss@v3.4.13...v3.4.14)

---
updated-dependencies:
- dependency-name: apexcharts
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@storybook/addon-links"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: "@types/lodash"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: html-webpack-plugin
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: msw
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code type::security labels Oct 19, 2024
replicated-ci
replicated-ci approved these changes Oct 19, 2024
View reviewed changes
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit 3fe14a5 into main Oct 19, 2024
122 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-4d96802c7e branch October 19, 2024 06:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@replicated-ci replicated-ci replicated-ci approved these changes

Assignees
No one assigned
Labels
dependabot javascript Pull requests that update Javascript code type::security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@replicated-ci