Skip to content

Bump the npm_and_yarn group across 1 directory with 8 updates #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 24, 2024

Warning

Dependabot will stop supporting npm v6!

Please upgrade to one of the following versions: v7, v8, v9, or v10.

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package From To
ra-ui-materialui 3.13.1 5.4.3
@babel/traverse 7.13.0 7.26.4
@babel/traverse 7.8.6 7.26.4
ajv 6.12.0 6.12.6
ansi-regex 5.0.0 5.0.1
ansi-regex 4.1.0 5.0.1
decode-uri-component 0.2.0 0.2.2
json5 2.2.0 2.2.3
json5 1.0.1 2.2.3
loader-utils 1.4.0 1.4.2
ua-parser-js 0.7.28 0.7.40

Updates ra-ui-materialui from 3.13.1 to 5.4.3

Release notes

Sourced from ra-ui-materialui's releases.

5.4.3

  • Fix <FormDataConsumer> causes its children to flicker (#10417) (djhi)
  • [Doc] Remove <ShowBase emptyWhileLoading> from the docs (#10416) (slax57)
  • [Doc] Introduce <DatagridAG> custom cell editors (#10410) (djhi)
  • [Doc] Update Access Control instructions following ra-rbac update (#10409) (djhi)
  • [Doc] Fix <TreeWithDetails filter> doc chapter (#10406) (erwanMarmelab)
  • Bump nanoid from 3.3.7 to 3.3.8 (#10414) (dependabot[bot])

5.4.2

  • Fix: Improve AutocompleteInput creation support (#10391) (djhi)
  • Fix useLogin should invalidate the getPermissions cache (#10392) (slax57)
  • Fix <Datagrid> rowClick function cannot expand or select (#10404) (djhi)
  • Fix <FileInput> triggers onChange twice with latest version of react-dropzone (#10402) (slax57)
  • Fix type of disableClearable prop for AutocompleteInput (#10393) (smeng9)
  • [Doc] Backport <ReferenceManyToManyField queryOptions> and <ReferenceManyToManyInput queryOptions mutationOptions> doc (#10403) (erwanMarmelab)
  • [Doc] Fix <DateRangeInput> import syntax (#10399) (erwanMarmelab)
  • [Doc] Introduce <TreeWithDetails filter> prop to render a sub tree (#10398) (djhi)

5.4.1

  • Fix access control basename handling (#10383) (djhi)
  • Fix ReferenceManyField executes filter reset filter too often (#10371) (fzaninotto)
  • [Doc] Add video tutorial to Access Control documentation (#10378) (fzaninotto)
  • [Doc] Fix AutocompleteArrrayInput contains a useless tip (#10373) (erwanMarmelab)
  • [Doc] Update useUpdate doc to explain returnPromise option (#10372) (fzaninotto)
  • [Doc] Fix Supabase (GraphQL) DataProvider link label (#10370) (zackha)
  • [TypeScript] Fix <ReferenceArrayField queryOptions> param type (#10389) (dricholm)
  • [Storybook] Re-enable storysource addon (#10363) (slax57)
  • [Chore] Add a story when TextInput trigger a server error (#10386) (erwanMarmelab)

5.4.0

v5.3.4

... (truncated)

Changelog

Sourced from ra-ui-materialui's changelog.

5.4.3

  • Fix <FormDataConsumer> causes its children to flicker (#10417) (djhi)
  • [Doc] Remove <ShowBase emptyWhileLoading> from the docs (#10416) (slax57)
  • [Doc] Introduce <DatagridAG> custom cell editors (#10410) (djhi)
  • [Doc] Update Access Control instructions following ra-rbac update (#10409) (djhi)
  • [Doc] Fix <TreeWithDetails filter> doc chapter (#10406) (erwanMarmelab)
  • Bump nanoid from 3.3.7 to 3.3.8 (#10414) (dependabot[bot])

5.4.2

  • Fix: Improve AutocompleteInput creation support (#10391) (djhi)
  • Fix useLogin should invalidate the getPermissions cache (#10392) (slax57)
  • Fix <Datagrid> rowClick function cannot expand or select (#10404) (djhi)
  • Fix <FileInput> triggers onChange twice with latest version of react-dropzone (#10402) (slax57)
  • Fix type of disableClearable prop for AutocompleteInput (#10393) (smeng9)
  • [Doc] Backport <ReferenceManyToManyField queryOptions> and <ReferenceManyToManyInput queryOptions mutationOptions> doc (#10403) (erwanMarmelab)
  • [Doc] Fix <DateRangeInput> import syntax (#10399) (erwanMarmelab)
  • [Doc] Introduce <TreeWithDetails filter> prop to render a sub tree (#10398) (djhi)

5.4.1

  • Fix access control basename handling (#10383) (djhi)
  • Fix ReferenceManyField executes filter reset filter too often (#10371) (fzaninotto)
  • [Doc] Add video tutorial to Access Control documentation (#10378) (fzaninotto)
  • [Doc] Fix AutocompleteArrrayInput contains a useless tip (#10373) (erwanMarmelab)
  • [Doc] Update useUpdate doc to explain returnPromise option (#10372) (fzaninotto)
  • [Doc] Fix Supabase (GraphQL) DataProvider link label (#10370) (zackha)
  • [TypeScript] Fix <ReferenceArrayField queryOptions> param type (#10389) (dricholm)
  • [Storybook] Re-enable storysource addon (#10363) (slax57)
  • [Chore] Add a story when TextInput trigger a server error (#10386) (erwanMarmelab)

5.4.0

5.3.4

... (truncated)

Upgrade guide

Sourced from ra-ui-materialui's upgrade guide.


layout: default title: "Upgrading to v5"

Upgrading to v5

React-admin v5 mostly focuses on removing deprecated features and upgrading dependencies. This makes the upgrade process easier than previous versions. However, there are still some breaking changes you should be aware of.

... (truncated)

Commits
  • 9e441c2 v5.4.3
  • a25733d Update changelog for 5.4.3
  • d135bd3 Merge pull request #10417 from marmelab/fix-form-data-consumer-flicker
  • b05a1a0 [no ci] minor improvements to story
  • 5d339c8 Add comment [no ci]
  • 08f256b Fix FormDataConsumer
  • fa523be Add a FormDataConsumer showing the issue
  • 526d088 Merge pull request #10416 from marmelab/doc-ShowBase-emptyWhileLoading
  • 8c01e20 [Doc] Remove \<ShowBase emptyWhileLoading> from the docs
  • bdf5cce Merge pull request #10414 from marmelab/dependabot/npm_and_yarn/nanoid-3.3.8
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by djhi, a new releaser for ra-ui-materialui since your current version.


Updates @babel/traverse from 7.13.0 to 7.26.4

Release notes

Sourced from @​babel/traverse's releases.

v7.26.4 (2024-12-05)

↩️ Revert

  • babel-traverse
    • #17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

Committers: 2

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

  • babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

🏃‍♀️ Performance

Committers: 4

v7.26.2 (2024-10-30)

🐛 Bug Fix

Committers: 6

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.26.4 (2024-12-05)

↩️ Revert

  • babel-traverse
    • #17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

  • babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

🏃‍♀️ Performance

v7.26.2 (2024-10-30)

🐛 Bug Fix

v7.26.1 (2024-10-25)

🐛 Bug Fix

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3

... (truncated)

Commits

Updates @babel/traverse from 7.8.6 to 7.26.4

Release notes

Sourced from @​babel/traverse's releases.

v7.26.4 (2024-12-05)

↩️ Revert

  • babel-traverse
    • #17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

Committers: 2

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

  • babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

🏃‍♀️ Performance

Committers: 4

v7.26.2 (2024-10-30)

🐛 Bug Fix

Committers: 6

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.26.4 (2024-12-05)

↩️ Revert

  • babel-traverse
    • #17005 Revert "perf: Improve scope information collection performance" (@​JLHwung)

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

  • babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

🏃‍♀️ Performance

v7.26.2 (2024-10-30)

🐛 Bug Fix

v7.26.1 (2024-10-25)

🐛 Bug Fix

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3

... (truncated)

Commits

Updates ajv from 6.12.0 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@​issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

Commits
  • fe59143 6.12.6
  • d580d3e Merge pull request #1298 from ajv-validator/fix-url
  • fd36389 fix: regular expression for "url" format
  • 490e34c docs: link to v7-beta branch
  • 9cd93a1 docs: note about v7 in readme
  • 877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
  • f1c8e45 6.12.5
  • 764035e Merge branch 'ChALkeR-chalker/fix-comma'
  • 3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
  • a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
  • Additional commits viewable in compare view

Updates ansi-regex from 5.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Updates ansi-regex from 4.1.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

  • Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @​yetingli for the patch and reproduction case!

Commits

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

  • Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

  • Switch to GitHub workflows 76abc93
  • Fix issue where decode throws - fixes #6 746ca5d
  • Update license (#1) 486d7e2
  • Tidelift tasks a650457
  • Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

    ...

    Description has been truncated

Bumps the npm_and_yarn group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ra-ui-materialui](https://github.com/marmelab/react-admin) | `3.13.1` | `5.4.3` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.13.0` | `7.26.4` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.8.6` | `7.26.4` |
| [ajv](https://github.com/ajv-validator/ajv) | `6.12.0` | `6.12.6` |
| [ansi-regex](https://github.com/chalk/ansi-regex) | `5.0.0` | `5.0.1` |
| [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `5.0.1` |
| [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` |
| [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` |
| [json5](https://github.com/json5/json5) | `1.0.1` | `2.2.3` |
| [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `1.4.2` |
| [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.28` | `0.7.40` |



Updates `ra-ui-materialui` from 3.13.1 to 5.4.3
- [Release notes](https://github.com/marmelab/react-admin/releases)
- [Changelog](https://github.com/marmelab/react-admin/blob/master/CHANGELOG.md)
- [Upgrade guide](https://github.com/marmelab/react-admin/blob/master/docs/Upgrade.md)
- [Commits](marmelab/react-admin@v3.13.1...v5.4.3)

Updates `@babel/traverse` from 7.13.0 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse)

Updates `@babel/traverse` from 7.8.6 to 7.26.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse)

Updates `ajv` from 6.12.0 to 6.12.6
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.12.0...v6.12.6)

Updates `ansi-regex` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v5.0.0...v5.0.1)

Updates `ansi-regex` from 4.1.0 to 5.0.1
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v5.0.0...v5.0.1)

Updates `decode-uri-component` from 0.2.0 to 0.2.2
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

Updates `json5` from 2.2.0 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.0...v2.2.3)

Updates `json5` from 1.0.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.0...v2.2.3)

Updates `loader-utils` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md)
- [Commits](webpack/loader-utils@v1.4.0...v1.4.2)

Updates `ua-parser-js` from 0.7.28 to 0.7.40
- [Release notes](https://github.com/faisalman/ua-parser-js/releases)
- [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.40/changelog.md)
- [Commits](faisalman/ua-parser-js@0.7.28...0.7.40)

---
updated-dependencies:
- dependency-name: ra-ui-materialui
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ajv
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ansi-regex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: decode-uri-component
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: loader-utils
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ua-parser-js
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants