Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update many non-major #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Oct 4, 2021

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@netlify/zip-it-and-ship-it ^4.23.0 -> ^4.30.0 age adoption passing confidence dependencies minor
browser-sync (source) ^2.27.5 -> ^2.29.3 age adoption passing confidence devDependencies minor
firebase-admin (source) ^9.11.1 -> ^9.12.0 age adoption passing confidence dependencies minor
firebase-functions ^3.15.7 -> ^3.24.1 age adoption passing confidence dependencies minor
firebase-tools ^9.18.0 -> ^9.23.3 age adoption passing confidence dependencies minor
lots0logs/gh-action-get-changed-files 2.1.4 -> 2.2.2 age adoption passing confidence action minor
node (source) 14 -> 14.21.3 age adoption passing confidence engines minor

Release Notes

netlify/zip-it-and-ship-it (@​netlify/zip-it-and-ship-it)

v4.30.0

Compare Source

Features
4.29.5 (2021-11-17)
Bug Fixes
  • ensure directories are created before writing files (#​816) (8ea63dd)
  • only transpile ESM imports when entrypoint is ESM (#​807) (a1b0a15)
4.29.4 (2021-11-12)
Bug Fixes
4.29.3 (2021-11-11)
Bug Fixes
4.29.2 (2021-11-09)
Bug Fixes
4.29.1 (2021-11-08)
Bug Fixes

v4.29.5

Compare Source

v4.29.4

Compare Source

v4.29.3

Compare Source

v4.29.2

Compare Source

v4.29.1

Compare Source

v4.29.0

Compare Source

Features
4.28.3 (2021-11-02)
Bug Fixes
4.28.2 (2021-11-02)
Bug Fixes
4.28.1 (2021-10-27)
Bug Fixes

v4.28.3

Compare Source

v4.28.2

Compare Source

v4.28.1

Compare Source

v4.28.0

Compare Source

Features
Bug Fixes

v4.27.0

Compare Source

Features
4.26.1 (2021-10-20)
Bug Fixes
  • take repositoryRoot into account when computing base path with esbuild (#​754) (8b2f8ea)

v4.26.1

Compare Source

v4.26.0

Compare Source

Features

v4.25.0

Compare Source

Features

v4.24.0

Compare Source

Features
Bug Fixes
4.23.6 (2021-10-06)
Bug Fixes
  • allow Node modules to be excluded from the bundle (#​673) (5078244)
4.23.5 (2021-10-06)
Bug Fixes
4.23.4 (2021-10-04)
Bug Fixes
Miscellaneous Chores
4.23.3 (2021-09-29)
Bug Fixes
4.23.2 (2021-09-27)
Bug Fixes
  • limit nodeModulesWithDynamicImports to unresolved imports (#​671) (ce6d1ce)
4.23.1 (2021-09-27)
Bug Fixes

v4.23.6

Compare Source

v4.23.5

Compare Source

v4.23.4

Compare Source

v4.23.3

Compare Source

v4.23.2

Compare Source

v4.23.1

Compare Source

BrowserSync/browser-sync (browser-sync)

v2.29.3: The one that fixes snippetOptions

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.29.2...v2.29.3

v2.29.2

Compare Source

v2.29.1

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.29.0...v2.29.1

v2.29.0: The one that restores IE11 support 💪

Compare Source

What's Changed

esbuild does not support down-level transpiling as far as IE11 - so when I switched to it, it accidentally broke IE11 support 😢

This is an important issue for me - many devs that support old browsers like IE11 are doing so because their projects are used in public services, or internal applications. Not every developer out there has the luxury of supporting evergreen-only browsers.

So, IE11 will work once again 🎉. Please use the issues thread to make me aware of any problem that's preventing you from using Browsersync in your day job 💪 (and be sure to thumbs-up the issues you want to see resolved)

### IE11 works, again
npm install browser-sync@latest

Full Changelog: BrowserSync/browser-sync@v2.28.3...v2.29.0

v2.28.3

Compare Source

v2.28.2

Compare Source

v2.28.1

Compare Source

v2.28.0: the one that finally removes document.write

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.27.12...v2.28.0

v2.27.12

Compare Source

v2.27.11

Compare Source

v2.27.10

Compare Source

v2.27.9: 2.27.9

Compare Source

What's Changed

A bug prevented the help output from displaying - it was introduced when the CLI parser yargs was updated, and is now fixed :)

Full Changelog: BrowserSync/browser-sync@v2.27.8...v2.27.9

v2.27.8: 2.27.8

Compare Source

This release upgrades Socket.io (client+server) to the latest versions - solving the following issues, and silencing security warning :)

PR:

Resolved Issues:

Thanks to @​lachieh for the original PR, which helped me land this fix

v2.27.7

Compare Source

v2.27.6

Compare Source

firebase/firebase-admin-node (firebase-admin)

v9.12.0: Firebase Admin Node.js SDK v9.12.0

Compare Source

New Features
  • feat(rc): Add Remote Config Parameter Value Type Support (#​1424)
Bug Fixes
  • fix(fac): Verify Token: Change the jwks cache duration from 1 day to 6 hours (#​1439)
  • fix(rtdb): Changed admin.database to use database-compat package (#​1437)
Miscellaneous
firebase/firebase-functions (firebase-functions)

v3.24.1

Compare Source

  • Fix reference docs for performance monitoring.
  • Fix bug where function configuration wil null values couldn't be deployed. (#​1246)

v3.24.0

Compare Source

  • Add performance monitoring triggers to v2 alerts (#​1223).

v3.23.0

Compare Source

  • Fixes a bug that disallowed setting customClaims and/or sessionClaims in blocking functions (#​1199).
  • Add v2 Schedule Triggers (#​1177).

v3.22.0

Compare Source

  • Adds RTDB Triggers for v2 functions (#​1127)
  • Adds support for Firebase Admin SDK v11 (#​1151)
  • Fixes bug where emulated task queue function required auth header (#​1154)

v3.21.2

Compare Source

  • Fixes bug where toJSON was not defined in UserRecord (#​1125).

v3.21.1

Compare Source

  • Add debug feature to enable cors option for v2 onRequest and onCall handlers. (#​1099)

v3.21.0

Compare Source

  • Adds CPU option and enhances internal data structures (#​1077)
  • Add auth blocking handlers (#​1080)
  • Add support for secrets in v2 (#​1079)
  • Update types for AlertPayloads (#​1087)
  • Update AppDistribution [@type] (#​1088)
  • Update CloudEvent types (#​1089)
  • Generate documentation with api-extractor (#​1071)
  • Change type info to be inheritance friendly. (#​1091)
  • Changes the memory options from MB to MiB and GB to GiB for greater clarity (#​1090)

v3.20.1

Compare Source

  • Improve authorization for tasks. (#​1073)

v3.20.0

Compare Source

  • Changes internal structure to be more flexible (#​1070).

v3.19.0

Compare Source

  • Add support for more regions and memory for v2 functions (#​1037).
  • Fixes bug where some RTDB instance names were incorrectly parsed (#​1056).

v3.18.1

Compare Source

  • Expose stack YAML via __/functions.yaml endpoint instead (#​1036).

v3.18.0

Compare Source

  • Add new runtime option for setting secrets.

v3.17.2

Compare Source

  • Fix issue where v2 TS users couldn't compile their code because of unexported types. (#​1033)

v3.17.1

Compare Source

  • Fix issue where TS users couldn't compile their code because of unexported types. (#​1032)

v3.17.0

Compare Source

  • Parallelizes network calls that occur when validating authorization for onCall handlers.
  • Adds new regions to V2 API
  • Fixes bug where the emulator crashed when given app without an options property.
  • Adds new alerting providers

v3.16.0

Compare Source

  • GCS Enhancement
  • Add option to allow callable functions to ignore invalid App Check tokens
  • Add firebase-admin v10 as an allowed peer dependency
  • Fix bug where onCall handler failed to encode returned value with functions
firebase/firebase-tools (firebase-tools)

v9.23.3

Compare Source

  • Upgrades Database Emulator to v4.7.3, removing log4j dependency.

v9.23.2

Compare Source

  • Fixes issue when installing a Firebase Extension where secrets would be created before validation.
  • Fixes issue with filtering on a specific storage bucket using functions in the emulator. (#​3893)
  • Fixes check in Cloud Functions for Firebase initialization to check for API enablement before trying to enable them. (#​2574)
  • No longer tries to clean up function build images from Artifact Registry when Artifact Registry is not enabled. (#​3943)
  • Show error message when running firebase init hosting:github with no Hosting config in firebase.json. (#​3113)
  • Fixes issue where remoteconfig:get was not fetching the latest version by default. (#​3559)
  • Fixes issue where empty variables in .env files would instead read as multi-line values. (#​3934)

v9.23.1

Compare Source

  • Corrects a bug where containers in Artifact Registry would not be deleted if a function has an upper case character in its name (#​3918)
  • Fixes issue where providing the --project flag during init would not be recognized with a default project already set. (#​3870)
  • Fixes issue with setting memory limits for some functions (#​3924)
  • New HTTPS functions only allow secure traffic. (#​3923)
  • No longer default-enable AR and don't send builds to AR unless an experiment is enabled (#​3935)

v9.23.0

Compare Source

  • firebase deploy --only extensions now supports project specifc .env files. When deploying to multiple projects, param values that are different between projects can be put in extensions/${extensionInstanceId}.env.${projectIdOrAlias} and common param values can be put in extensions/${extensionInstanceId}.env.

v9.22.0

Compare Source

  • Adds firebase ext:export command, and adds extensions to firebase deploy. See https://firebase.google.com/docs/extensions/reuse-project-config for more infomation on how to manage your extensions with these commands.
  • Fixes issue where init would crash with multiple Hosting items selected (#​3742).
  • Adds a command (crashlytics:symbols:upload) to upload native symbol files, used in Android NDK crash symbolication.

v9.21.0

Compare Source

  • Fix Auth Emulator deleteTenant not working with Node Admin (#​3817).
  • Fix Crashlytics Android Native Symbols not working on Windows due to ":" in the path (#​3842)
  • Fixes Firestore emulator UI showing requests out of order

v9.20.0

Compare Source

  • ext:install, ext:update and ext:configure now support param type secret.

v9.19.0

Compare Source

  • ext:dev:publish and ext:update now support --force and --non-interactive flags.
  • Fixes issue where account specified by login:use was not being correctly loaded (#​3759).
  • Fixes minor layout issues in Auth Emulator IDP sign-in page (#​3774).
lots0logs/gh-action-get-changed-files (lots0logs/gh-action-get-changed-files)

v2.2.2: [FIX]: v2.2.2

Compare Source

v2.2.1: [MAINTENANCE] v2.2.1

Compare Source

v2.2.0: [MAINTENANCE] v2.2.0

Compare Source

nodejs/node (node)

v14.21.3: 2023-02-16, Version 14.21.3 'Fermium' (LTS), @​richardlau

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

  • CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
  • CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.

This security release also includes an npm update for Node.js 14 to address a number
of CVEs which either do not affect Node.js or are low severity in the context of Node.js. You
can get more details for the individual CVEs in
nodejs-dependency-vuln-assessments.

Commits

v14.21.2: 2022-12-13, Version 14.21.2 'Fermium' (LTS), @​richardlau

Compare Source

Notable Changes
OpenSSL 1.1.1s

This update is a bugfix release and does not address any security
vulnerabilities.

Root certificates updated to NSS 3.85

Certificates added:

  • Autoridad de Certificacion Firmaprofesional CIF A626340
  • Certainly Root E1
  • Certainly Root R1
  • D-TRUST BR Root CA 1 2020
  • D-TRUST EV Root CA 1 2020
  • DigiCert TLS ECC P384 Root G5
  • DigiCert TLS RSA4096 Root G5
  • E-Tugra Global Root CA ECC v3
  • E-Tugra Global Root CA RSA v3
  • HiPKI Root CA - G1
  • ISRG Root X2
  • Security Communication ECC RootCA1
  • Security Communication RootCA3
  • Telia Root CA v2
  • vTrus ECC Root CA
  • vTrus Root CA

Certificates removed:

  • Cybertrust Global Root
  • DST Root CA X3
  • GlobalSign Root CA - R2
  • Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f

Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.

Commits

v14.21.1: 2022-11-04, Version 14.21.1 'Fermium' (LTS), @​BethGriggs

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

  • CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.

Commits

v14.21.0: 2022-11-01, Version 14.21.0 'Fermium' (LTS), @​danielleadams

Compare Source

Notable changes
  • deps:
    • update corepack to 0.14.2 (Node.js GitHub Bot) #​44775
  • src:
    • add --openssl-shared-config option (Daniel Bevenius) #​43124
Commits

v14.20.1: 2022-09-23, Version 14.20.1 'Fermium' (LTS), @​bengl

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:


Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added automerge PR that should be merged automatically dependencies Pull requests that update a dependency file labels Oct 4, 2021
@renovate renovate bot force-pushed the renovate/many-non-major branch 5 times, most recently from 0125cc1 to be6e4cf Compare October 11, 2021 10:32
@renovate renovate bot force-pushed the renovate/many-non-major branch 2 times, most recently from 936f699 to a399e3d Compare October 18, 2021 22:39
@renovate renovate bot force-pushed the renovate/many-non-major branch 5 times, most recently from d1e6c86 to 58ea086 Compare October 27, 2021 11:00
@renovate renovate bot force-pushed the renovate/many-non-major branch 4 times, most recently from 773e8f8 to 5aa33ca Compare November 2, 2021 18:44
@renovate renovate bot force-pushed the renovate/many-non-major branch 5 times, most recently from db1ff7e to 8510f01 Compare November 11, 2021 12:52
@renovate renovate bot force-pushed the renovate/many-non-major branch 4 times, most recently from b6b83b9 to 288b378 Compare November 19, 2021 00:43
@renovate renovate bot force-pushed the renovate/many-non-major branch 2 times, most recently from 685f437 to 9bf4995 Compare December 16, 2021 22:20
@renovate renovate bot force-pushed the renovate/many-non-major branch 3 times, most recently from 01ff18f to ca5425e Compare February 7, 2022 20:23
@renovate renovate bot force-pushed the renovate/many-non-major branch 3 times, most recently from c699943 to 72d2fad Compare March 16, 2022 20:11
@renovate renovate bot force-pushed the renovate/many-non-major branch from 72d2fad to 4faafd8 Compare April 24, 2022 18:49
@renovate renovate bot force-pushed the renovate/many-non-major branch from 4faafd8 to 434ba33 Compare May 15, 2022 20:25
@renovate renovate bot force-pushed the renovate/many-non-major branch from 434ba33 to 076d9cd Compare June 18, 2022 17:50
@renovate renovate bot force-pushed the renovate/many-non-major branch from 12bcae1 to d6a8ae1 Compare March 16, 2023 07:59
@renovate renovate bot force-pushed the renovate/many-non-major branch from d6a8ae1 to a055d72 Compare March 23, 2023 15:25
@renovate renovate bot force-pushed the renovate/many-non-major branch from a055d72 to f0b4538 Compare May 29, 2023 13:59
@renovate renovate bot force-pushed the renovate/many-non-major branch from a0789a1 to 3a46fd0 Compare April 17, 2024 05:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge PR that should be merged automatically dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants