mirror of
https://github.com/Unleash/unleash.git
synced 2026-09-10 06:05:47 +00:00
main
54 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 Simon Hornby
|
c5f0b50b30 |
chore: slightly simpler quick start setup (#10933)
Co-authored-by: Melinda Fekete <melinda.fekete@getunleash.io> |
||
|
Gastón Fournier
|
6002c5894d |
fix: docker oss image now running with ESM (#10073)
The docker image was trying to load as CJS module:
```
unleash-1 | node:internal/modules/cjs/loader:1404
unleash-1 | throw err;
unleash-1 | ^
unleash-1 |
unleash-1 | Error: Cannot find module './build'
unleash-1 | Require stack:
unleash-1 | - /unleash/index.js
unleash-1 | at Function._resolveFilename (node:internal/modules/cjs/loader:1401:15)
unleash-1 | at defaultResolveImpl (node:internal/modules/cjs/loader:1057:19)
unleash-1 | at resolveForCJSWithHooks (node:internal/modules/cjs/loader:1062:22)
unleash-1 | at Function._load (node:internal/modules/cjs/loader:1211:37)
unleash-1 | at TracingChannel.traceSync (node:diagnostics_channel:322:14)
unleash-1 | at wrapModuleLoad (node:internal/modules/cjs/loader:235:24)
unleash-1 | at Module.require (node:internal/modules/cjs/loader:1487:12)
unleash-1 | at require (node:internal/modules/helpers:135:16)
unleash-1 | at Object.<anonymous> (/unleash/index.js:3:17)
unleash-1 | at Module._compile (node:internal/modules/cjs/loader:1730:14) {
unleash-1 | code: 'MODULE_NOT_FOUND',
unleash-1 | requireStack: [ '/unleash/index.js' ]
unleash-1 | }
unleash-1 |
unleash-1 | Node.js v22.15.1
```
This PR makes use of the existing server.ts file instead of having a
specific index.js inside the docker folder, because they both do the
same thing
|
||
|
Christopher Kolstad
|
f8f7b55a53 |
task: Remove docker package setup. (#8959)
Keeping the index.js inside the docker folder to avoid our tsconfig having to be changed. In addition, updated the build to copy less of the folders into our final image, since we really only needed build and node_modules. Should reduce attack surface of the container. |
||
|
renovate[bot]
|
8fbf7976e6 |
chore(deps): update yarn to v4.5.3 (#8911)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [yarn](https://redirect.github.com/yarnpkg/berry) ([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-cli)) | [`4.5.1` -> `4.5.3`](https://renovatebot.com/diffs/npm/yarn/4.5.1/4.5.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>yarnpkg/berry (yarn)</summary> ### [`v4.5.3`](https://redirect.github.com/yarnpkg/berry/compare/a38b314f0ce875ebc758778fd65f93ea3d4ef224...2fe7d635e8eb163c1b3e56ab76e652b6bae8c160) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/a38b314f0ce875ebc758778fd65f93ea3d4ef224...2fe7d635e8eb163c1b3e56ab76e652b6bae8c160) ### [`v4.5.2`](https://redirect.github.com/yarnpkg/berry/compare/b5baf9bb17ca953fe7faa593090a6376bd3d0156...a38b314f0ce875ebc758778fd65f93ea3d4ef224) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/b5baf9bb17ca953fe7faa593090a6376bd3d0156...a38b314f0ce875ebc758778fd65f93ea3d4ef224) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
302af67a29 |
chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /docker (#8787)
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md">cross-spawn's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6">7.0.6</a> (2024-11-18)</h3> <h3>Bug Fixes</h3> <ul> <li>update cross-spawn version to 7.0.5 in package-lock.json (<a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176">f700743</a>)</li> </ul> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5">7.0.5</a> (2024-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>fix escaping bug introduced by backtracking (<a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f">640d391</a>)</li> </ul> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4">7.0.4</a> (2024-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>disable regexp backtracking (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff">5ff3a07</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0"><code>77cd97f</code></a> chore(release): 7.0.6</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85"><code>6717de4</code></a> chore: upgrade standard-version</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176"><code>f700743</code></a> fix: update cross-spawn version to 7.0.5 in package-lock.json</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263"><code>9a7e3b2</code></a> chore: fix build status badge</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184"><code>0852683</code></a> chore(release): 7.0.5</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f"><code>640d391</code></a> fix: fix escaping bug introduced by backtracking</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/bff0c87c8b627c4e6d04ec2449e733048bebb464"><code>bff0c87</code></a> chore: remove codecov</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/a7c6abc6fee79641d45b452fe6217deaa1bd0973"><code>a7c6abc</code></a> chore: replace travis with github workflows</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/9b9246e0969e86656d7ccd527716bc3c18842a19"><code>9b9246e</code></a> chore(release): 7.0.4</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff"><code>5ff3a07</code></a> fix: disable regexp backtracking (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)</li> <li>Additional commits viewable in <a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Gastón Fournier
|
b5054f0641 |
Revert "fix: set path-to-regexp version in docker" (#8597)
Reverts Unleash/unleash#8572 |
||
|
Gastón Fournier
|
9809316a65 |
fix: set path-to-regexp version in docker (#8572)
Should fix: https://github.com/Unleash/unleash/security/dependabot/191 |
||
|
renovate[bot]
|
1894271791 |
chore(deps): update yarn to v4.5.1 (#8565)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [yarn](https://redirect.github.com/yarnpkg/berry) ([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-cli)) | [`4.4.1` -> `4.5.1`](https://renovatebot.com/diffs/npm/yarn/4.4.1/4.5.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>yarnpkg/berry (yarn)</summary> ### [`v4.5.1`](https://redirect.github.com/yarnpkg/berry/compare/68e10d099fb6bee03e4450bc516c0c04e24bcb96...b5baf9bb17ca953fe7faa593090a6376bd3d0156) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/68e10d099fb6bee03e4450bc516c0c04e24bcb96...b5baf9bb17ca953fe7faa593090a6376bd3d0156) ### [`v4.5.0`](https://redirect.github.com/yarnpkg/berry/compare/d2afdfcf8819c449dc9784959ab5beb1389a4b26...68e10d099fb6bee03e4450bc516c0c04e24bcb96) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/d2afdfcf8819c449dc9784959ab5beb1389a4b26...68e10d099fb6bee03e4450bc516c0c04e24bcb96) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMzMuMSIsInVwZGF0ZWRJblZlciI6IjM4LjEzMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Gastón Fournier
|
34204334df |
chore: Update docker yarnlock (#8174)
After building Unleash updating docker yarn.lock file |
||
|
dependabot[bot]
|
cb6d45d29a | chore(deps): bump dompurify from 3.1.2 to 3.1.6 in /docker (#8154) | ||
|
renovate[bot]
|
af524e6485 |
chore(deps): update yarn to v4.4.1 (#8126)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [yarn](https://redirect.github.com/yarnpkg/berry) ([source](https://redirect.github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-cli)) | [`4.3.1` -> `4.4.1`](https://renovatebot.com/diffs/npm/yarn/4.3.1/4.4.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>yarnpkg/berry (yarn)</summary> ### [`v4.4.1`](https://redirect.github.com/yarnpkg/berry/compare/ab48d624e2490567be531b4e7c7145c5bc6e55f2...d2afdfcf8819c449dc9784959ab5beb1389a4b26) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/ab48d624e2490567be531b4e7c7145c5bc6e55f2...d2afdfcf8819c449dc9784959ab5beb1389a4b26) ### [`v4.4.0`](https://redirect.github.com/yarnpkg/berry/compare/2e73cdb7e2057a3ab4bd93074190b508b407c7ab...ab48d624e2490567be531b4e7c7145c5bc6e55f2) [Compare Source](https://redirect.github.com/yarnpkg/berry/compare/2e73cdb7e2057a3ab4bd93074190b508b407c7ab...ab48d624e2490567be531b4e7c7145c5bc6e55f2) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0336cc1787 | chore(deps): bump micromatch from 4.0.5 to 4.0.8 in /docker (#8003) | ||
|
dependabot[bot]
|
89f3f09b6e |
chore(deps): bump axios from 1.6.8 to 1.7.4 in /docker (#7878)
Bumps [axios](https://github.com/axios/axios) from 1.6.8 to 1.7.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>Release v1.7.4</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li><strong>sec:</strong> CVE-2024-39338 (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>) (<a href="https://redirect.github.com/axios/axios/issues/6543">#6543</a>) (<a href="https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a">6b6b605</a>)</li> <li><strong>sec:</strong> disregard protocol-relative URL to remediate SSRF (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>) (<a href="https://github.com/axios/axios/commit/07a661a2a6b9092c4aa640dcc7f724ec5e65bdda">07a661a</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/levpachmanov" title="+47/-11 ([#6543](https://github.com/axios/axios/issues/6543) )">Lev Pachmanov</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/hainenber" title="+49/-4 ([#6539](https://github.com/axios/axios/issues/6539) )">Đỗ Trọng Hải</a></li> </ul> <h2>Release v1.7.3</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li><strong>adapter:</strong> fix progress event emitting; (<a href="https://redirect.github.com/axios/axios/issues/6518">#6518</a>) (<a href="https://github.com/axios/axios/commit/e3c76fc9bdd03aa4d98afaf211df943e2031453f">e3c76fc</a>)</li> <li><strong>fetch:</strong> fix withCredentials request config (<a href="https://redirect.github.com/axios/axios/issues/6505">#6505</a>) (<a href="https://github.com/axios/axios/commit/85d4d0ea0aae91082f04e303dec46510d1b4e787">85d4d0e</a>)</li> <li><strong>xhr:</strong> return original config on errors from XHR adapter (<a href="https://redirect.github.com/axios/axios/issues/6515">#6515</a>) (<a href="https://github.com/axios/axios/commit/8966ee7ea62ecbd6cfb39a905939bcdab5cf6388">8966ee7</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+211/-159 ([#6518](https://github.com/axios/axios/issues/6518) [#6519](https://github.com/axios/axios/issues/6519) )">Dmitriy Mozgovoy</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/ValeraS" title="+3/-3 ([#6515](https://github.com/axios/axios/issues/6515) )">Valerii Sidorenko</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/prianyu" title="+2/-2 ([#6505](https://github.com/axios/axios/issues/6505) )">prianYu</a></li> </ul> <h2>Release v1.7.2</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li><strong>fetch:</strong> enhance fetch API detection; (<a href="https://redirect.github.com/axios/axios/issues/6413">#6413</a>) (<a href="https://github.com/axios/axios/commit/4f79aef81b7c4644328365bfc33acf0a9ef595bc">4f79aef</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+3/-3 ([#6413](https://github.com/axios/axios/issues/6413) )">Dmitriy Mozgovoy</a></li> </ul> <h2>Release v1.7.1</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li><strong>fetch:</strong> fixed ReferenceError issue when TextEncoder is not available in the environment; (<a href="https://redirect.github.com/axios/axios/issues/6410">#6410</a>) (<a href="https://github.com/axios/axios/commit/733f15fe5bd2d67e1fadaee82e7913b70d45dc5e">733f15f</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+14/-9 ([#6410](https://github.com/axios/axios/issues/6410) )">Dmitriy Mozgovoy</a></li> </ul> <h2>Release v1.7.0</h2> <h2>Release notes:</h2> <h3>Features</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/axios/axios/compare/v1.7.3...v1.7.4">1.7.4</a> (2024-08-13)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>sec:</strong> CVE-2024-39338 (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>) (<a href="https://redirect.github.com/axios/axios/issues/6543">#6543</a>) (<a href="https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a">6b6b605</a>)</li> <li><strong>sec:</strong> disregard protocol-relative URL to remediate SSRF (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>) (<a href="https://github.com/axios/axios/commit/07a661a2a6b9092c4aa640dcc7f724ec5e65bdda">07a661a</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/levpachmanov" title="+47/-11 ([#6543](https://github.com/axios/axios/issues/6543) )">Lev Pachmanov</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/hainenber" title="+49/-4 ([#6539](https://github.com/axios/axios/issues/6539) )">Đỗ Trọng Hải</a></li> </ul> <h2><a href="https://github.com/axios/axios/compare/v1.7.2...v1.7.3">1.7.3</a> (2024-08-01)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>adapter:</strong> fix progress event emitting; (<a href="https://redirect.github.com/axios/axios/issues/6518">#6518</a>) (<a href="https://github.com/axios/axios/commit/e3c76fc9bdd03aa4d98afaf211df943e2031453f">e3c76fc</a>)</li> <li><strong>fetch:</strong> fix withCredentials request config (<a href="https://redirect.github.com/axios/axios/issues/6505">#6505</a>) (<a href="https://github.com/axios/axios/commit/85d4d0ea0aae91082f04e303dec46510d1b4e787">85d4d0e</a>)</li> <li><strong>xhr:</strong> return original config on errors from XHR adapter (<a href="https://redirect.github.com/axios/axios/issues/6515">#6515</a>) (<a href="https://github.com/axios/axios/commit/8966ee7ea62ecbd6cfb39a905939bcdab5cf6388">8966ee7</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+211/-159 ([#6518](https://github.com/axios/axios/issues/6518) [#6519](https://github.com/axios/axios/issues/6519) )">Dmitriy Mozgovoy</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/ValeraS" title="+3/-3 ([#6515](https://github.com/axios/axios/issues/6515) )">Valerii Sidorenko</a></li> <li><!-- raw HTML omitted --> <a href="https://github.com/prianyu" title="+2/-2 ([#6505](https://github.com/axios/axios/issues/6505) )">prianYu</a></li> </ul> <h2><a href="https://github.com/axios/axios/compare/v1.7.1...v1.7.2">1.7.2</a> (2024-05-21)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>fetch:</strong> enhance fetch API detection; (<a href="https://redirect.github.com/axios/axios/issues/6413">#6413</a>) (<a href="https://github.com/axios/axios/commit/4f79aef81b7c4644328365bfc33acf0a9ef595bc">4f79aef</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+3/-3 ([#6413](https://github.com/axios/axios/issues/6413) )">Dmitriy Mozgovoy</a></li> </ul> <h2><a href="https://github.com/axios/axios/compare/v1.7.0...v1.7.1">1.7.1</a> (2024-05-20)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>fetch:</strong> fixed ReferenceError issue when TextEncoder is not available in the environment; (<a href="https://redirect.github.com/axios/axios/issues/6410">#6410</a>) (<a href="https://github.com/axios/axios/commit/733f15fe5bd2d67e1fadaee82e7913b70d45dc5e">733f15f</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li><!-- raw HTML omitted --> <a href="https://github.com/DigitalBrainJS" title="+14/-9 ([#6410](https://github.com/axios/axios/issues/6410) )">Dmitriy Mozgovoy</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/abd24a7367726616e60dfc04cb394b4be37cf597"><code>abd24a7</code></a> chore(release): v1.7.4 (<a href="https://redirect.github.com/axios/axios/issues/6544">#6544</a>)</li> <li><a href="https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a"><code>6b6b605</code></a> fix(sec): CVE-2024-39338 (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>) (<a href="https://redirect.github.com/axios/axios/issues/6543">#6543</a>)</li> <li><a href="https://github.com/axios/axios/commit/07a661a2a6b9092c4aa640dcc7f724ec5e65bdda"><code>07a661a</code></a> fix(sec): disregard protocol-relative URL to remediate SSRF (<a href="https://redirect.github.com/axios/axios/issues/6539">#6539</a>)</li> <li><a href="https://github.com/axios/axios/commit/c6cce43cd94489f655f4488c5a50ecaf781c94f2"><code>c6cce43</code></a> chore(release): v1.7.3 (<a href="https://redirect.github.com/axios/axios/issues/6521">#6521</a>)</li> <li><a href="https://github.com/axios/axios/commit/e3c76fc9bdd03aa4d98afaf211df943e2031453f"><code>e3c76fc</code></a> fix(adapter): fix progress event emitting; (<a href="https://redirect.github.com/axios/axios/issues/6518">#6518</a>)</li> <li><a href="https://github.com/axios/axios/commit/85d4d0ea0aae91082f04e303dec46510d1b4e787"><code>85d4d0e</code></a> fix(fetch): fix withCredentials request config (<a href="https://redirect.github.com/axios/axios/issues/6505">#6505</a>)</li> <li><a href="https://github.com/axios/axios/commit/92cd8ed94362f929d3d0ed85ca84296c0ac8fd6d"><code>92cd8ed</code></a> chore(github): update ISSUE_TEMPLATE.md (<a href="https://redirect.github.com/axios/axios/issues/6519">#6519</a>)</li> <li><a href="https://github.com/axios/axios/commit/8966ee7ea62ecbd6cfb39a905939bcdab5cf6388"><code>8966ee7</code></a> fix(xhr): return original config on errors from XHR adapter (<a href="https://redirect.github.com/axios/axios/issues/6515">#6515</a>)</li> <li><a href="https://github.com/axios/axios/commit/0e4f9fa29077ebee4499facea6be1492b42e8a26"><code>0e4f9fa</code></a> chore(release): v1.7.2 (<a href="https://redirect.github.com/axios/axios/issues/6414">#6414</a>)</li> <li><a href="https://github.com/axios/axios/commit/4f79aef81b7c4644328365bfc33acf0a9ef595bc"><code>4f79aef</code></a> fix(fetch): enhance fetch API detection; (<a href="https://redirect.github.com/axios/axios/issues/6413">#6413</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.6.8...v1.7.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Christopher Kolstad
|
f4e3388606 |
task: Yarn v4 (#7457)
Moves to Yarn v4 --------- Co-authored-by: Alvin Bryan <107407814+alvinometric@users.noreply.github.com> |
||
|
dependabot[bot]
|
f80726ddb6 |
chore(deps): bump ws from 8.17.0 to 8.17.1 in /docker (#7410)
Bumps [ws](https://github.com/websockets/ws) from 8.17.0 to 8.17.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>8.17.1</h2> <h1>Bug fixes</h1> <ul> <li>Fixed a DoS vulnerability (<a href="https://redirect.github.com/websockets/ws/issues/2231">#2231</a>).</li> </ul> <p>A request with a number of headers exceeding the[<code>server.maxHeadersCount</code>][] threshold could be used to crash a ws server.</p> <pre lang="js"><code>const http = require('http'); const WebSocket = require('ws'); <p>const wss = new WebSocket.Server({ port: 0 }, function () { const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split(''); const headers = {}; let count = 0;</p> <p>for (let i = 0; i < chars.length; i++) { if (count === 2000) break;</p> <pre><code>for (let j = 0; j &lt; chars.length; j++) { const key = chars[i] + chars[j]; headers[key] = 'x'; if (++count === 2000) break; } </code></pre> <p>}</p> <p>headers.Connection = 'Upgrade'; headers.Upgrade = 'websocket'; headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ=='; headers['Sec-WebSocket-Version'] = '13';</p> <p>const request = http.request({ headers: headers, host: '127.0.0.1', port: wss.address().port });</p> <p>request.end(); }); </code></pre></p> <p>The vulnerability was reported by <a href="https://github.com/rrlapointe">Ryan LaPointe</a> in <a href="https://redirect.github.com/websockets/ws/issues/2230">websockets/ws#2230</a>.</p> <p>In vulnerable versions of ws, the issue can be mitigated in the following ways:</p> <ol> <li>Reduce the maximum allowed length of the request headers using the [<code>--max-http-header-size=size</code>][] and/or the [<code>maxHeaderSize</code>][] options so that no more headers than the <code>server.maxHeadersCount</code> limit can be sent.</li> </ol> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/3c56601092872f7d7566989f0e379271afd0e4a1"><code>3c56601</code></a> [dist] 8.17.1</li> <li><a href="https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c"><code>e55e510</code></a> [security] Fix crash when the Upgrade header cannot be read (<a href="https://redirect.github.com/websockets/ws/issues/2231">#2231</a>)</li> <li><a href="https://github.com/websockets/ws/commit/6a00029edd924499f892aed8003cef1fa724cfe5"><code>6a00029</code></a> [test] Increase code coverage</li> <li><a href="https://github.com/websockets/ws/commit/ddfe4a804d79e7788ab136290e609f91cf68423f"><code>ddfe4a8</code></a> [perf] Reduce the amount of <code>crypto.randomFillSync()</code> calls</li> <li>See full diff in <a href="https://github.com/websockets/ws/compare/8.17.0...8.17.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
2657637b72 |
chore(deps): bump braces from 3.0.2 to 3.0.3 in /docker (#7370)
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d"><code>74b2db2</code></a> 3.0.3</li> <li><a href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e"><code>88f1429</code></a> update eslint. lint, fix unit tests.</li> <li><a href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"><code>415d660</code></a> Snyk js braces 6838727 (<a href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li> <li><a href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6"><code>190510f</code></a> fix tests, skip 1 test in test/braces.expand</li> <li><a href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856"><code>716eb9f</code></a> readme bump</li> <li><a href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3"><code>a5851e5</code></a> Merge pull request <a href="https://redirect.github.com/micromatch/braces/issues/37">#37</a> from coderaiser/fix/vulnerability</li> <li><a href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538"><code>2092bd1</code></a> feature: braces: add maxSymbols (<a href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li> <li><a href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3"><code>9f5b4cf</code></a> fix: vulnerability (<a href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li> <li><a href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d"><code>98414f9</code></a> remove funding file</li> <li><a href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14"><code>665ab5d</code></a> update keepEscaping doc (<a href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li> <li>Additional commits viewable in <a href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Gastón Fournier
|
a0fce0ec12 |
Revert "fix: yarn v4 requires prepack instead of prepare script when building…" (#7373)
Reverts Unleash/unleash#7371 |
||
|
Christopher Kolstad
|
a971c770e9 |
task: Yarn v4 (#7345)
Trying again, this time with correct .gitignore already setup, and a workflow configured to try what was failing prior to our revert. |
||
|
Jaanus Sellin
|
f0f339ead3 |
fix: revert yarn4 (#7334)
Reverting yarn4, because we are stuck on broker build for couple of days now. |
||
|
Christopher Kolstad
|
15726cc8ac |
chore: upgrade to yarn v4 (#7230)
 This has been on our TODO list for a long time. We're moving to latest released at the time of commit (v4.2.2) |
||
|
renovate[bot]
|
29de7c2dec |
chore(deps): update dependency path-scurry to v1.11.1 (#7278)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [path-scurry](https://togithub.com/isaacs/path-scurry) | [`1.10.2` -> `1.11.1`](https://renovatebot.com/diffs/npm/path-scurry/1.10.2/1.11.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>isaacs/path-scurry (path-scurry)</summary> ### [`v1.11.1`](https://togithub.com/isaacs/path-scurry/compare/v1.11.0...v1.11.1) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.11.0...v1.11.1) ### [`v1.11.0`](https://togithub.com/isaacs/path-scurry/compare/v1.10.4...v1.11.0) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.10.4...v1.11.0) ### [`v1.10.4`](https://togithub.com/isaacs/path-scurry/compare/v1.10.3...v1.10.4) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.10.3...v1.10.4) ### [`v1.10.3`](https://togithub.com/isaacs/path-scurry/compare/v1.10.2...v1.10.3) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.10.2...v1.10.3) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zODguMSIsInVwZGF0ZWRJblZlciI6IjM3LjM4OC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Christopher Kolstad
|
0db5bc193f |
task: upgraded semver dependency (and biome) (#7272)
Sorry for the extra noise here, but this seems to be the biome upgrade altering formatting slightly. |
||
|
Christopher Kolstad
|
d6b158b8b0 |
chore: readded resolutions for our docker package file (#7253)
Since this isn't inherited from our mother package, we needed to readd resolutions and overrides. I've just copied what we used to have here for now. |
||
|
Christopher Kolstad
|
3daa731ed6 |
chore: removed passport from docker package.json file (#7159)
If you still need passport/custom auth, you should use the community image https://github.com/Unleash/unleash-docker-community |
||
|
Christopher Kolstad
|
7e38d6bae1 |
Node20 (#7095)
Upgrades workflows, nvmrc and package.json to use Node 20. |
||
|
Ivar Conradi Østhus
|
f1addd9ea1 | fix: update dependencies in OSS docker file | ||
|
renovate[bot]
|
92d881b96f |
chore(deps): update dependency path-scurry to v1.10.2 (#6850)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [path-scurry](https://togithub.com/isaacs/path-scurry) | [`1.6.3` -> `1.10.2`](https://renovatebot.com/diffs/npm/path-scurry/1.6.3/1.10.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>isaacs/path-scurry (path-scurry)</summary> ### [`v1.10.2`](https://togithub.com/isaacs/path-scurry/compare/v1.10.1...v1.10.2) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.10.1...v1.10.2) ### [`v1.10.1`](https://togithub.com/isaacs/path-scurry/compare/v1.10.0...v1.10.1) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.10.0...v1.10.1) ### [`v1.10.0`](https://togithub.com/isaacs/path-scurry/compare/v1.9.2...v1.10.0) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.9.2...v1.10.0) ### [`v1.9.2`](https://togithub.com/isaacs/path-scurry/compare/v1.9.1...v1.9.2) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.9.1...v1.9.2) ### [`v1.9.1`](https://togithub.com/isaacs/path-scurry/compare/v1.9.0...v1.9.1) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.9.0...v1.9.1) ### [`v1.9.0`](https://togithub.com/isaacs/path-scurry/compare/v1.8.0...v1.9.0) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.8.0...v1.9.0) ### [`v1.8.0`](https://togithub.com/isaacs/path-scurry/compare/v1.7.1...v1.8.0) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.7.1...v1.8.0) ### [`v1.7.1`](https://togithub.com/isaacs/path-scurry/compare/v1.7.0...v1.7.1) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.7.0...v1.7.1) ### [`v1.7.0`](https://togithub.com/isaacs/path-scurry/compare/v1.6.4...v1.7.0) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.6.4...v1.7.0) ### [`v1.6.4`](https://togithub.com/isaacs/path-scurry/compare/v1.6.3...v1.6.4) [Compare Source](https://togithub.com/isaacs/path-scurry/compare/v1.6.3...v1.6.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
69d06c421f | chore(deps): bump tar from 6.2.0 to 6.2.1 in /docker (#6816) | ||
|
dependabot[bot]
|
1b6354d42d |
chore(deps): bump follow-redirects from 1.15.5 to 1.15.6 in /docker (#6570)
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/35a517c5861d79dc8bff7db8626013d20b711b06"><code>35a517c</code></a> Release version 1.15.6 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b"><code>c4f847f</code></a> Drop Proxy-Authorization across hosts.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/8526b4a1b2ab3a2e4044299377df623a661caa76"><code>8526b4a</code></a> Use GitHub for disclosure.</li> <li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.5...v1.15.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
4a8faacbd8 |
chore(deps): update dependency es5-ext to v0.10.64 (#6458)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [es5-ext](https://togithub.com/medikoo/es5-ext) | [`0.10.63` -> `0.10.64`](https://renovatebot.com/diffs/npm/es5-ext/0.10.63/0.10.64) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>medikoo/es5-ext (es5-ext)</summary> ### [`v0.10.64`](https://togithub.com/medikoo/es5-ext/blob/HEAD/CHANGELOG.md#01064-2024-02-27) [Compare Source](https://togithub.com/medikoo/es5-ext/compare/v0.10.63...v0.10.64) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMjcuMiIsInVwZGF0ZWRJblZlciI6IjM3LjIyNy4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3704956a06 |
chore(deps): bump es5-ext from 0.10.62 to 0.10.63 in /docker (#6350)
Bumps [es5-ext](https://github.com/medikoo/es5-ext) from 0.10.62 to 0.10.63. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/medikoo/es5-ext/releases">es5-ext's releases</a>.</em></p> <blockquote> <h2>0.10.63 (2024-02-23)</h2> <h3>Bug Fixes</h3> <ul> <li>Do not rely on problematic regex (<a href="https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2">3551cdd</a>), addresses <a href="https://redirect.github.com/medikoo/es5-ext/issues/201">#201</a></li> <li>Support ES2015+ function definitions in <code>function#toStringTokens()</code> (<a href="https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602">a52e957</a>), addresses <a href="https://redirect.github.com/medikoo/es5-ext/issues/021">#021</a></li> <li>Ensure postinstall script does not crash on Windows, fixes <a href="https://redirect.github.com/medikoo/es5-ext/issues/181">#181</a> (<a href="https://github.com/medikoo/es5-ext/commit/bf8ed799d57df53096da9d908ff577f305e1366f">bf8ed79</a>)</li> </ul> <h3>Maintenance Improvements</h3> <ul> <li>Simplify the manifest message (<a href="https://github.com/medikoo/es5-ext/commit/7855319f41b9736639cf4555bd2c419f17addf55">7855319</a>)</li> </ul> <hr /> <p><a href="https://github.com/medikoo/es5-ext/compare/v0.10.62...v0.10.63">Comparison since last release</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/medikoo/es5-ext/blob/main/CHANGELOG.md">es5-ext's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/medikoo/es5-ext/compare/v0.10.62...v0.10.63">0.10.63</a> (2024-02-23)</h3> <h3>Bug Fixes</h3> <ul> <li>Do not rely on problematic regex (<a href="https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2">3551cdd</a>), addresses <a href="https://redirect.github.com/medikoo/es5-ext/issues/201">#201</a></li> <li>Support ES2015+ function definitions in <code>function#toStringTokens()</code> (<a href="https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602">a52e957</a>), addresses <a href="https://redirect.github.com/medikoo/es5-ext/issues/021">#021</a></li> <li>Ensure postinstall script does not crash on Windows, fixes <a href="https://redirect.github.com/medikoo/es5-ext/issues/181">#181</a> (<a href="https://github.com/medikoo/es5-ext/commit/bf8ed799d57df53096da9d908ff577f305e1366f">bf8ed79</a>)</li> </ul> <h3>Maintenance Improvements</h3> <ul> <li>Simplify the manifest message (<a href="https://github.com/medikoo/es5-ext/commit/7855319f41b9736639cf4555bd2c419f17addf55">7855319</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/medikoo/es5-ext/commit/de4e03c4776a303284142f73f3f181a070615817"><code>de4e03c</code></a> chore: Release v0.10.63</li> <li><a href="https://github.com/medikoo/es5-ext/commit/3fd53b755ec883be8f119c747f0b04130741e456"><code>3fd53b7</code></a> chore: Upgrade<code> lint-staged</code> to v13</li> <li><a href="https://github.com/medikoo/es5-ext/commit/bf8ed799d57df53096da9d908ff577f305e1366f"><code>bf8ed79</code></a> chore: Ensure postinstall script does not crash on Windows</li> <li><a href="https://github.com/medikoo/es5-ext/commit/2cbbb0717bd8de6e38fcba1f0d45bc876e7a1951"><code>2cbbb07</code></a> chore: Bump dependencies</li> <li><a href="https://github.com/medikoo/es5-ext/commit/22d0416ea170000a115609f22a560dfa9193ebb0"><code>22d0416</code></a> chore: Bump LICENSE year</li> <li><a href="https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602"><code>a52e957</code></a> fix: Support ES2015+ function definitions in <code>function#toStringTokens()</code></li> <li><a href="https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2"><code>3551cdd</code></a> fix: Do not rely on problematic regex</li> <li><a href="https://github.com/medikoo/es5-ext/commit/7855319f41b9736639cf4555bd2c419f17addf55"><code>7855319</code></a> chore: Simplify the manifest message</li> <li>See full diff in <a href="https://github.com/medikoo/es5-ext/compare/v0.10.62...v0.10.63">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
43b4343263 |
chore(deps): update dependency es5-ext to v0.10.63 [security] (#6349)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [es5-ext](https://togithub.com/medikoo/es5-ext) | [`0.10.62` -> `0.10.63`](https://renovatebot.com/diffs/npm/es5-ext/0.10.62/0.10.63) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2024-27088](https://togithub.com/medikoo/es5-ext/security/advisories/GHSA-4gmj-3p3h-gm8h) ### Impact Passing functions with very long names or complex default argument names into `function#copy` or`function#toStringTokens` may put script to stall ### Patches Fixed with https://github.com/medikoo/es5-ext/commit/3551cdd7b2db08b1632841f819d008757d28e8e2 and https://github.com/medikoo/es5-ext/commit/a52e95736690ad1d465ebcd9791d54570e294602 Published with v0.10.63 ### Workarounds No real workaround aside of refraining from using above utilities. ### References [https://github.com/medikoo/es5-ext/issues/201](https://togithub.com/medikoo/es5-ext/issues/201) --- ### Release Notes <details> <summary>medikoo/es5-ext (es5-ext)</summary> ### [`v0.10.63`](https://togithub.com/medikoo/es5-ext/blob/HEAD/CHANGELOG.md#01063-2024-02-23) [Compare Source](https://togithub.com/medikoo/es5-ext/compare/v0.10.62...v0.10.63) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIxMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Gastón Fournier
|
7b8c1f0d04 |
chore: regenerate yarn.lock of docker folder (#6280)
## About the changes Regenerate yarn.lock from docker folder: `rm cloud/yarn.lock && cd cloud && yarn install` Resolves: https://github.com/Unleash/unleash/security/dependabot/120 |
||
|
Gastón Fournier
|
a9cd81a61c |
chore: pin ip library (#6276)
## About the changes Add resolution to IP library so transitive dependencies also use the latest library |
||
|
dependabot[bot]
|
77f6978103 |
chore(deps): bump follow-redirects from 1.15.3 to 1.15.4 in /docker (#5794)
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.3 to 1.15.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/65858205e59f1e23c9bf173348a7a7cbb8ac47f5"><code>6585820</code></a> Release version 1.15.4 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"><code>7a6567e</code></a> Disallow bracketed hostnames.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/05629af696588b90d64e738bc2e809a97a5f92fc"><code>05629af</code></a> Prefer native URL instead of deprecated url.parse.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/1cba8e85fa73f563a439fe460cf028688e4358df"><code>1cba8e8</code></a> Prefer native URL instead of legacy url.resolve.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/72bc2a4229bc18dc9fbd57c60579713e6264cb92"><code>72bc2a4</code></a> Simplify _processResponse error handling.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/3d42aecdca39b144a0a2f27ea134b4cf67dd796a"><code>3d42aec</code></a> Add bracket tests.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/bcbb096b32686ecad6cd34235358ed6f2217d4f0"><code>bcbb096</code></a> Do not directly set Error properties.</li> <li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.3...v1.15.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Gastón Fournier
|
607e01b6d3 |
fix: docker deploy failing (#5546)
#5537 updated package.json but not yarn.lock |
||
|
renovate[bot]
|
d21a276b4f |
fix(deps): update dependency passport to ^0.7.0 (#5537)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [passport](https://www.passportjs.org/) ([source](https://togithub.com/jaredhanson/passport)) | [`^0.6.0` -> `^0.7.0`](https://renovatebot.com/diffs/npm/passport/0.6.0/0.7.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>jaredhanson/passport (passport)</summary> ### [`v0.7.0`](https://togithub.com/jaredhanson/passport/blob/HEAD/CHANGELOG.md#070---2023-11-27) [Compare Source](https://togithub.com/jaredhanson/passport/compare/v0.6.0...v0.7.0) ##### Changed - Set `req.authInfo` by default when using the `assignProperty` option to `authenticate()` middleware. This makes the behavior the same as when not using the option, and can be disabled by setting `authInfo` option to `false`. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 7pm every weekday,before 5am every weekday" in timezone Europe/Madrid, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44MS4zIiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Mateusz Kwasniewski
|
fc8ddbd6ff | fix: string-width issue when running docker container (#4808) | ||
|
Ivar Conradi Østhus
|
a9d1750a4e | fix: resolution for semver in docker as well (#4168) | ||
|
Gastón Fournier
|
51ffe02cfd |
fix: update yarn.lock (#4160)
## About the changes Update yarn.lock |
||
|
Ivar Conradi Østhus
|
9249f7459c | fix: add resolution for semver | ||
|
Gastón Fournier
|
0426dd505d |
chore: update to node 18 (#3527)
## About the changes This upgrades our main branch to use node 18 which is the active LTS version and stops using node 14 which reaches the end of life in a few weeks: https://nodejs.dev/en/about/releases/ This PR also adds `--no-experimental-fetch` for frontend tests and other frontend commands. Related to: https://github.com/node-fetch/node-fetch/issues/1566 More about the experimental fetch release: https://nodejs.org/en/blog/announcements/v18-release-announce#fetch-experimental |
||
|
Jaanus Sellin
|
6fe3d0ae5a | fix: fix path-scurry resolution (#3488) | ||
|
renovate[bot]
|
2e559e1716 |
chore(deps): update dependency minimist to v1.2.8 (#3446)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [minimist](https://togithub.com/minimistjs/minimist) | [`1.2.7` -> `1.2.8`](https://renovatebot.com/diffs/npm/minimist/1.2.7/1.2.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [minimist](https://togithub.com/minimistjs/minimist) | [`1.2.6` -> `1.2.8`](https://renovatebot.com/diffs/npm/minimist/1.2.6/1.2.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>minimistjs/minimist</summary> ### [`v1.2.8`](https://togithub.com/minimistjs/minimist/blob/HEAD/CHANGELOG.md#v128-httpsgithubcomminimistjsminimistcomparev127v128---2023-02-09) [Compare Source](https://togithub.com/minimistjs/minimist/compare/v1.2.7...v1.2.8) ##### Merged - \[Fix] Fix long option followed by single dash [`#17`](https://togithub.com/minimistjs/minimist/pull/17) - \[Tests] Remove duplicate test [`#12`](https://togithub.com/minimistjs/minimist/pull/12) - \[Fix] opt.string works with multiple aliases [`#10`](https://togithub.com/minimistjs/minimist/pull/10) ##### Fixed - \[Fix] Fix long option followed by single dash ([#​17](https://togithub.com/minimistjs/minimist/issues/17)) [`#15`](https://togithub.com/minimistjs/minimist/issues/15) - \[Tests] Remove duplicate test ([#​12](https://togithub.com/minimistjs/minimist/issues/12)) [`#8`](https://togithub.com/minimistjs/minimist/issues/8) - \[Fix] Fix long option followed by single dash [`#15`](https://togithub.com/minimistjs/minimist/issues/15) - \[Fix] opt.string works with multiple aliases ([#​10](https://togithub.com/minimistjs/minimist/issues/10)) [`#9`](https://togithub.com/minimistjs/minimist/issues/9) - \[Fix] Fix handling of short option with non-trivial equals [`#5`](https://togithub.com/minimistjs/minimist/issues/5) - \[Tests] Remove duplicate test [`#8`](https://togithub.com/minimistjs/minimist/issues/8) - \[Fix] opt.string works with multiple aliases [`#9`](https://togithub.com/minimistjs/minimist/issues/9) ##### Commits - Merge tag 'v0.2.3' [`a026794`](https://togithub.com/minimistjs/minimist/commit/a0267947c7870fc5847cf2d437fbe33f392767da) - \[eslint] fix indentation and whitespace [`5368ca4`](https://togithub.com/minimistjs/minimist/commit/5368ca4147e974138a54cc0dc4cea8f756546b70) - \[eslint] fix indentation and whitespace [`e5f5067`](https://togithub.com/minimistjs/minimist/commit/e5f5067259ceeaf0b098d14bec910f87e58708c7) - \[eslint] more cleanup [`62fde7d`](https://togithub.com/minimistjs/minimist/commit/62fde7d935f83417fb046741531a9e2346a36976) - \[eslint] more cleanup [`36ac5d0`](https://togithub.com/minimistjs/minimist/commit/36ac5d0d95e4947d074e5737d94814034ca335d1) - \[meta] add `auto-changelog` [`73923d2`](https://togithub.com/minimistjs/minimist/commit/73923d223553fca08b1ba77e3fbc2a492862ae4c) - \[actions] add reusable workflows [`d80727d`](https://togithub.com/minimistjs/minimist/commit/d80727df77bfa9e631044d7f16368d8f09242c91) - \[eslint] add eslint; rules to enable later are warnings [`48bc06a`](https://togithub.com/minimistjs/minimist/commit/48bc06a1b41f00e9cdf183db34f7a51ba70e98d4) - \[eslint] fix indentation [`34b0f1c`](https://togithub.com/minimistjs/minimist/commit/34b0f1ccaa45183c3c4f06a91f9b405180a6f982) - \[readme] rename and add badges [`5df0fe4`](https://togithub.com/minimistjs/minimist/commit/5df0fe49211bd09a3636f8686a7cb3012c3e98f0) - \[Dev Deps] switch from `covert` to `nyc` [`a48b128`](https://togithub.com/minimistjs/minimist/commit/a48b128fdb8d427dfb20a15273f83e38d97bef07) - \[Dev Deps] update `covert`, `tape`; remove unnecessary `tap` [`f0fb958`](https://togithub.com/minimistjs/minimist/commit/f0fb958e9a1fe980cdffc436a211b0bda58f621b) - \[meta] create FUNDING.yml; add `funding` in package.json [`3639e0c`](https://togithub.com/minimistjs/minimist/commit/3639e0c819359a366387e425ab6eabf4c78d3caa) - \[meta] use `npmignore` to autogenerate an npmignore file [`be2e038`](https://togithub.com/minimistjs/minimist/commit/be2e038c342d8333b32f0fde67a0026b79c8150e) - Only apps should have lockfiles [`282b570`](https://togithub.com/minimistjs/minimist/commit/282b570e7489d01b03f2d6d3dabf79cd3e5f84cf) - isConstructorOrProto adapted from PR [`ef9153f`](https://togithub.com/minimistjs/minimist/commit/ef9153fc52b6cea0744b2239921c5dcae4697f11) - \[Dev Deps] update `@ljharb/eslint-config`, `aud` [`098873c`](https://togithub.com/minimistjs/minimist/commit/098873c213cdb7c92e55ae1ef5aa1af3a8192a79) - \[Dev Deps] update `@ljharb/eslint-config`, `aud` [`3124ed3`](https://togithub.com/minimistjs/minimist/commit/3124ed3e46306301ebb3c834874ce0241555c2c4) - \[meta] add `safe-publish-latest` [`4b927de`](https://togithub.com/minimistjs/minimist/commit/4b927de696d561c636b4f43bf49d4597cb36d6d6) - \[Tests] add `aud` in `posttest` [`b32d9bd`](https://togithub.com/minimistjs/minimist/commit/b32d9bd0ab340f4e9f8c3a97ff2a4424f25fab8c) - \[meta] update repo URLs [`f9fdfc0`](https://togithub.com/minimistjs/minimist/commit/f9fdfc032c54884d9a9996a390c63cd0719bbe1a) - \[actions] Avoid 0.6 tests due to build failures [`ba92fe6`](https://togithub.com/minimistjs/minimist/commit/ba92fe6ebbdc0431cca9a2ea8f27beb492f5e4ec) - \[Dev Deps] update `tape` [`950eaa7`](https://togithub.com/minimistjs/minimist/commit/950eaa74f112e04d23e9c606c67472c46739b473) - \[Dev Deps] add missing `npmignore` dev dep [`3226afa`](https://togithub.com/minimistjs/minimist/commit/3226afaf09e9d127ca369742437fe6e88f752d6b) - Merge tag 'v0.2.2' [`980d7ac`](https://togithub.com/minimistjs/minimist/commit/980d7ac61a0b4bd552711251ac107d506b23e41f) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4zMS40IiwidXBkYXRlZEluVmVyIjoiMzUuMzEuNCJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
5e43eb1880 | chore(deps): bump @sideway/formula from 3.0.0 to 3.0.1 in /docker (#3303) | ||
|
dependabot[bot]
|
80d95b42a7 |
chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 in /docker (#3045)
Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.1.0 to 4.1.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kornelski/http-cache-semantics/commit/24496504352199caf360d1b4d4a01efdc8a7249e"><code>2449650</code></a> Update mocha</li> <li><a href="https://github.com/kornelski/http-cache-semantics/commit/560b2d8ef452bbba20ffed69dc155d63ac757b74"><code>560b2d8</code></a> Don't use regex to trim whitespace</li> <li><a href="https://github.com/kornelski/http-cache-semantics/commit/b1bdb92638426fab978f31e1330b6833015cabf0"><code>b1bdb92</code></a> Remove linting package zoo</li> <li><a href="https://github.com/kornelski/http-cache-semantics/commit/c20dc7eeca608339143857953ee7ed9343fe6d3d"><code>c20dc7e</code></a> Cache 308</li> <li>See full diff in <a href="https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
e9809c0ff0 |
chore(deps): bump knex from 2.2.0 to 2.4.0 in /docker (#2869)
Bumps [knex](https://github.com/knex/knex) from 2.2.0 to 2.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/knex/knex/releases">knex's releases</a>.</em></p> <blockquote> <h2>2.4.0</h2> <h3>New features:</h3> <ul> <li>Support partial unique indexes <a href="https://github-redirect.dependabot.com/knex/knex/issues/5316">#5316</a></li> <li>Make compiling SQL in error message optional <a href="https://github-redirect.dependabot.com/knex/knex/issues/5282">#5282</a></li> </ul> <h3>Bug fixes</h3> <ul> <li>Insert array into json column <a href="https://github-redirect.dependabot.com/knex/knex/issues/5321">#5321</a></li> <li>Fix unexpected max acquire-timeout <a href="https://github-redirect.dependabot.com/knex/knex/issues/5377">#5377</a></li> <li>Fix: orWhereJson <a href="https://github-redirect.dependabot.com/knex/knex/issues/5361">#5361</a></li> <li>MySQL: Add assertion for basic where clause not to be object or array <a href="https://github-redirect.dependabot.com/knex/knex/issues/1227">#1227</a></li> <li>SQLite: Fix changing the default value of a boolean column in SQLite <a href="https://github-redirect.dependabot.com/knex/knex/issues/5319">#5319</a></li> </ul> <h3>Typings:</h3> <ul> <li>add missing type for 'expirationChecker' on PgConnectionConfig <a href="https://github-redirect.dependabot.com/knex/knex/issues/5334">#5334</a></li> </ul> <h2>2.3.0</h2> <h3>New features:</h3> <ul> <li>PostgreSQL: Explicit jsonb support for custom pg clients <a href="https://github-redirect.dependabot.com/knex/knex/issues/5201">#5201</a></li> <li>SQLite: Support returning with sqlite3 and better-sqlite3 <a href="https://github-redirect.dependabot.com/knex/knex/issues/5285">#5285</a></li> <li>MSSQL: Implement mapBinding mssql dialect option <a href="https://github-redirect.dependabot.com/knex/knex/issues/5292">#5292</a></li> </ul> <h3>Typings:</h3> <ul> <li>Update types for TS 4.8 <a href="https://github-redirect.dependabot.com/knex/knex/issues/5279">#5279</a></li> <li>Fix typo <a href="https://github-redirect.dependabot.com/knex/knex/issues/5267">#5267</a></li> <li>Fix WhereJsonObject withCompositeTableType <a href="https://github-redirect.dependabot.com/knex/knex/issues/5306">#5306</a></li> <li>Fix AnalyticFunction type <a href="https://github-redirect.dependabot.com/knex/knex/issues/5304">#5304</a></li> <li>Infer specific column value type in aggregations <a href="https://github-redirect.dependabot.com/knex/knex/issues/5297">#5297</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/knex/knex/blob/master/CHANGELOG.md">knex's changelog</a>.</em></p> <blockquote> <h1>2.4.0 - 06 January, 2022</h1> <h3>New features:</h3> <ul> <li>Support partial unique indexes <a href="https://github-redirect.dependabot.com/knex/knex/issues/5316">#5316</a></li> <li>Make compiling SQL in error message optional <a href="https://github-redirect.dependabot.com/knex/knex/issues/5282">#5282</a></li> </ul> <h3>Bug fixes</h3> <ul> <li>Insert array into json column <a href="https://github-redirect.dependabot.com/knex/knex/issues/5321">#5321</a></li> <li>Fix unexpected max acquire-timeout <a href="https://github-redirect.dependabot.com/knex/knex/issues/5377">#5377</a></li> <li>Fix: orWhereJson <a href="https://github-redirect.dependabot.com/knex/knex/issues/5361">#5361</a></li> <li>MySQL: Add assertion for basic where clause not to be object or array <a href="https://github-redirect.dependabot.com/knex/knex/issues/1227">#1227</a></li> <li>SQLite: Fix changing the default value of a boolean column in SQLite <a href="https://github-redirect.dependabot.com/knex/knex/issues/5319">#5319</a></li> </ul> <h3>Typings:</h3> <ul> <li>add missing type for 'expirationChecker' on PgConnectionConfig <a href="https://github-redirect.dependabot.com/knex/knex/issues/5334">#5334</a></li> </ul> <h1>2.3.0 - 31 August, 2022</h1> <h3>New features:</h3> <ul> <li>PostgreSQL: Explicit jsonb support for custom pg clients <a href="https://github-redirect.dependabot.com/knex/knex/issues/5201">#5201</a></li> <li>SQLite: Support returning with sqlite3 and better-sqlite3 <a href="https://github-redirect.dependabot.com/knex/knex/issues/5285">#5285</a></li> <li>MSSQL: Implement mapBinding mssql dialect option <a href="https://github-redirect.dependabot.com/knex/knex/issues/5292">#5292</a></li> </ul> <h3>Typings:</h3> <ul> <li>Update types for TS 4.8 <a href="https://github-redirect.dependabot.com/knex/knex/issues/5279">#5279</a></li> <li>Fix typo <a href="https://github-redirect.dependabot.com/knex/knex/issues/5267">#5267</a></li> <li>Fix WhereJsonObject withCompositeTableType <a href="https://github-redirect.dependabot.com/knex/knex/issues/5306">#5306</a></li> <li>Fix AnalyticFunction type <a href="https://github-redirect.dependabot.com/knex/knex/issues/5304">#5304</a></li> <li>Infer specific column value type in aggregations <a href="https://github-redirect.dependabot.com/knex/knex/issues/5297">#5297</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/knex/knex/commit/3475d8166863d6c9535527cd541d7c894e21ea84"><code>3475d81</code></a> Prepare to release 2.4.0</li> <li><a href="https://github.com/knex/knex/commit/e97f92201a360f666e7df529fe5ff1cd1f7f9fcd"><code>e97f922</code></a> Bump tsd from 0.24.1 to 0.25.0 (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5396">#5396</a>)</li> <li><a href="https://github.com/knex/knex/commit/e145322da92749be7749f9ade5b5f5a66d6586a4"><code>e145322</code></a> 1227: add assertion for basic where clause values (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5417">#5417</a>)</li> <li><a href="https://github.com/knex/knex/commit/962bb0a635ed40a240021379521814b5bd36d438"><code>962bb0a</code></a> Bump sinon from 14.0.2 to 15.0.1 (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5413">#5413</a>)</li> <li><a href="https://github.com/knex/knex/commit/ab45314e70bc55a98de08d9c2bd7005bac146702"><code>ab45314</code></a> Add JSDoc (TS Flavour) to mjs stub file (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5390">#5390</a>)</li> <li><a href="https://github.com/knex/knex/commit/72bd1f7396b8472eb416a1eb8c8270737189b999"><code>72bd1f7</code></a> Fix: orWhereJson (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5361">#5361</a>)</li> <li><a href="https://github.com/knex/knex/commit/4fc939a17640fd1abf1a94d106b7836ae20c1d1e"><code>4fc939a</code></a> Fixes unexpected max acquire-timeout (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5377">#5377</a>)</li> <li><a href="https://github.com/knex/knex/commit/5c4837cd4f26d192527684a2d22ed2f0563060fe"><code>5c4837c</code></a> Fix lib/.gitignore path separator on Windows. (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5325">#5325</a>)</li> <li><a href="https://github.com/knex/knex/commit/7dbbd007014911b1f240fdf8cec8a191022eb6f7"><code>7dbbd00</code></a> Bump actions/setup-node from 3.4.1 to 3.5.1 (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5356">#5356</a>)</li> <li><a href="https://github.com/knex/knex/commit/d39051f4a56bbd4b2b48500f08198efddef5b94d"><code>d39051f</code></a> fix: add missing type for 'expirationChecker' on PgConnectionConfig (<a href="https://github-redirect.dependabot.com/knex/knex/issues/5334">#5334</a>)</li> <li>Additional commits viewable in <a href="https://github.com/knex/knex/compare/2.2.0...2.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Unleash/unleash/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
7207f1b572 |
chore(deps): update dependency minimatch to v5 (#2400)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [minimatch](https://togithub.com/isaacs/minimatch) | [`^3.0.5` -> `^5.0.0`](https://renovatebot.com/diffs/npm/minimatch/3.1.2/5.1.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>isaacs/minimatch</summary> ### [`v5.1.0`](https://togithub.com/isaacs/minimatch/compare/v5.0.1...v5.1.0) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v5.0.1...v5.1.0) ### [`v5.0.1`](https://togithub.com/isaacs/minimatch/compare/v5.0.0...v5.0.1) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v5.0.0...v5.0.1) ### [`v5.0.0`](https://togithub.com/isaacs/minimatch/compare/v4.2.1...v5.0.0) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v4.2.1...v5.0.0) ### [`v4.2.1`](https://togithub.com/isaacs/minimatch/compare/v4.2.0...v4.2.1) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v4.2.0...v4.2.1) ### [`v4.2.0`](https://togithub.com/isaacs/minimatch/compare/v4.1.1...v4.2.0) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v4.1.1...v4.2.0) ### [`v4.1.1`](https://togithub.com/isaacs/minimatch/compare/v4.1.0...v4.1.1) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v4.1.0...v4.1.1) ### [`v4.1.0`](https://togithub.com/isaacs/minimatch/compare/v4.0.0...v4.1.0) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v4.0.0...v4.1.0) ### [`v4.0.0`](https://togithub.com/isaacs/minimatch/compare/v3.1.2...v4.0.0) [Compare Source](https://togithub.com/isaacs/minimatch/compare/v3.1.2...v4.0.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/Unleash/unleash). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4yMS42IiwidXBkYXRlZEluVmVyIjoiMzQuMjEuNiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Ivar Conradi Østhus
|
0717b281fa | fix: update resolutions | ||
|
Simon Hornby
|
3d0146cca7 |
Fix docker build (#2326)
* fix: patch stale docker lockfile * fix: patch docker build to respect the fact that frontend now depends on some constants defined in unleash |
