Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update many non-major #21

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 21, 2022

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
browser-sync (source) ^2.27.7 -> ^2.29.3 age adoption passing confidence devDependencies minor
firebase-admin (source) ^10.0.2 -> ^10.3.0 age adoption passing confidence dependencies minor
firebase-functions ^3.18.0 -> ^3.24.1 age adoption passing confidence dependencies minor
lots0logs/gh-action-get-changed-files 2.1.4 -> 2.2.2 age adoption passing confidence action minor
node (source) 14 -> 14.21.3 age adoption passing confidence engines minor

Release Notes

BrowserSync/browser-sync (browser-sync)

v2.29.3: The one that fixes snippetOptions

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.29.2...v2.29.3

v2.29.2

Compare Source

v2.29.1

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.29.0...v2.29.1

v2.29.0: The one that restores IE11 support 💪

Compare Source

What's Changed

esbuild does not support down-level transpiling as far as IE11 - so when I switched to it, it accidentally broke IE11 support 😢

This is an important issue for me - many devs that support old browsers like IE11 are doing so because their projects are used in public services, or internal applications. Not every developer out there has the luxury of supporting evergreen-only browsers.

So, IE11 will work once again 🎉. Please use the issues thread to make me aware of any problem that's preventing you from using Browsersync in your day job 💪 (and be sure to thumbs-up the issues you want to see resolved)

### IE11 works, again
npm install browser-sync@latest

Full Changelog: BrowserSync/browser-sync@v2.28.3...v2.29.0

v2.28.3

Compare Source

v2.28.2

Compare Source

v2.28.1

Compare Source

v2.28.0: the one that finally removes document.write

Compare Source

What's Changed

Full Changelog: BrowserSync/browser-sync@v2.27.12...v2.28.0

v2.27.12

Compare Source

v2.27.11

Compare Source

v2.27.10

Compare Source

v2.27.9: 2.27.9

Compare Source

What's Changed

A bug prevented the help output from displaying - it was introduced when the CLI parser yargs was updated, and is now fixed :)

Full Changelog: BrowserSync/browser-sync@v2.27.8...v2.27.9

v2.27.8: 2.27.8

Compare Source

This release upgrades Socket.io (client+server) to the latest versions - solving the following issues, and silencing security warning :)

PR:

Resolved Issues:

Thanks to @​lachieh for the original PR, which helped me land this fix

firebase/firebase-admin-node (firebase-admin)

v10.3.0: Firebase Admin Node.js SDK v10.3.0

Compare Source

Bug Fixes
Miscellaneous

v10.2.0: Firebase Admin Node.js SDK v10.2.0

Compare Source

New Features
  • feat: Add Task Queue API (#​1674)
  • feat(auth): Support generate oob code request type VERIFY_AND_CHANGE_EMAIL (#​1633)
Miscellaneous

v10.1.0: Firebase Admin Node.js SDK v10.1.0

Compare Source

Miscellaneous
firebase/firebase-functions (firebase-functions)

v3.24.1

Compare Source

  • Fix reference docs for performance monitoring.
  • Fix bug where function configuration wil null values couldn't be deployed. (#​1246)

v3.24.0

Compare Source

  • Add performance monitoring triggers to v2 alerts (#​1223).

v3.23.0

Compare Source

  • Fixes a bug that disallowed setting customClaims and/or sessionClaims in blocking functions (#​1199).
  • Add v2 Schedule Triggers (#​1177).

v3.22.0

Compare Source

  • Adds RTDB Triggers for v2 functions (#​1127)
  • Adds support for Firebase Admin SDK v11 (#​1151)
  • Fixes bug where emulated task queue function required auth header (#​1154)

v3.21.2

Compare Source

  • Fixes bug where toJSON was not defined in UserRecord (#​1125).

v3.21.1

Compare Source

  • Add debug feature to enable cors option for v2 onRequest and onCall handlers. (#​1099)

v3.21.0

Compare Source

  • Adds CPU option and enhances internal data structures (#​1077)
  • Add auth blocking handlers (#​1080)
  • Add support for secrets in v2 (#​1079)
  • Update types for AlertPayloads (#​1087)
  • Update AppDistribution [@type] (#​1088)
  • Update CloudEvent types (#​1089)
  • Generate documentation with api-extractor (#​1071)
  • Change type info to be inheritance friendly. (#​1091)
  • Changes the memory options from MB to MiB and GB to GiB for greater clarity (#​1090)

v3.20.1

Compare Source

  • Improve authorization for tasks. (#​1073)

v3.20.0

Compare Source

  • Changes internal structure to be more flexible (#​1070).

v3.19.0

Compare Source

  • Add support for more regions and memory for v2 functions (#​1037).
  • Fixes bug where some RTDB instance names were incorrectly parsed (#​1056).

v3.18.1

Compare Source

  • Expose stack YAML via __/functions.yaml endpoint instead (#​1036).
lots0logs/gh-action-get-changed-files (lots0logs/gh-action-get-changed-files)

v2.2.2: [FIX]: v2.2.2

Compare Source

v2.2.1: [MAINTENANCE] v2.2.1

Compare Source

v2.2.0: [MAINTENANCE] v2.2.0

Compare Source

nodejs/node (node)

v14.21.3: 2023-02-16, Version 14.21.3 'Fermium' (LTS), @​richardlau

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

  • CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
  • CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.

This security release also includes an npm update for Node.js 14 to address a number
of CVEs which either do not affect Node.js or are low severity in the context of Node.js. You
can get more details for the individual CVEs in
nodejs-dependency-vuln-assessments.

Commits

v14.21.2: 2022-12-13, Version 14.21.2 'Fermium' (LTS), @​richardlau

Compare Source

Notable Changes
OpenSSL 1.1.1s

This update is a bugfix release and does not address any security
vulnerabilities.

Root certificates updated to NSS 3.85

Certificates added:

  • Autoridad de Certificacion Firmaprofesional CIF A626340
  • Certainly Root E1
  • Certainly Root R1
  • D-TRUST BR Root CA 1 2020
  • D-TRUST EV Root CA 1 2020
  • DigiCert TLS ECC P384 Root G5
  • DigiCert TLS RSA4096 Root G5
  • E-Tugra Global Root CA ECC v3
  • E-Tugra Global Root CA RSA v3
  • HiPKI Root CA - G1
  • ISRG Root X2
  • Security Communication ECC RootCA1
  • Security Communication RootCA3
  • Telia Root CA v2
  • vTrus ECC Root CA
  • vTrus Root CA

Certificates removed:

  • Cybertrust Global Root
  • DST Root CA X3
  • GlobalSign Root CA - R2
  • Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f

Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.

Commits

v14.21.1: 2022-11-04, Version 14.21.1 'Fermium' (LTS), @​BethGriggs

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

  • CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)

More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.

Commits

v14.21.0: 2022-11-01, Version 14.21.0 'Fermium' (LTS), @​danielleadams

Compare Source

Notable changes
  • deps:
    • update corepack to 0.14.2 (Node.js GitHub Bot) #​44775
  • src:
    • add --openssl-shared-config option (Daniel Bevenius) #​43124
Commits

v14.20.1: 2022-09-23, Version 14.20.1 'Fermium' (LTS), @​bengl

Compare Source

This is a security release.

Notable changes

The following CVEs are fixed in this release:

More detailed information on each of the vulnerabilities can be found in September 22nd 2022 Security Releases blog post.

Commits

v14.20.0: 2022-07-07, Version 14.20.0 'Fermium' (LTS), @​danielleadams prepared by @​juanarbol

Compare Source

This is a security release.

Notable Changes
Commits

v14.19.3: 2022-05-17, Version 14.19.3 'Fermium' (LTS), @​richardlau

Compare Source

Notable Changes
  • This release updates OpenSSL to 1.1.1o. This update is not being treated as a security release as the issues addressed in OpenSSL 1.1.1o were assessed to not affect Node.js 14. See https://nodejs.org/en/blog/vulnerability/openssl-fixes-in-regular-releases-may2022/ for more information on how the May 2022 OpenSSL releases affects other Node.js release lines.
  • The list of GPG keys used to sign releases has been synchronized with the main branch.
Commits

v14.19.2: 2022-05-04, Version 14.19.2 'Fermium' (LTS), @​BethGriggs prepared by @​juanarbol

Compare Source

Notable Changes

doc:

  • New release key for Bryan English

Learn more at: #​42102
Contributed by Bryan English (@​bengl)

npm:

  • Upgrade npm to v6.14.17.

Learn more at: #​42900
Contributed by Ruy Adorno (@​ruyadorno)

V8:

  • V8 had a stack overflow issue affecting the vm module, cherry-picking cc9a8a37445e
    from V8 solves this issue.

Learn more at: #​41826
Contributed by Gus Caplan (@​devsnek)

  • Using getHeapSnapshot() was causing a Node.js crash due a V8 issue, this is fixed by backporting 367b0c1e7a32
    from V8.

Learn more at: #​42637
Contributed by Chengzhong Wu (@​legendecas)

Commits

v14.19.1: 2022-03-17, Version 14.19.1 'Fermium' (LTS), @​richardlau

Compare Source

This is a security release.

Notable Changes

Update to OpenSSL 1.1.1n, which addresses the following vulnerability:

Commits

v14.19.0: 2022-02-01, Version 14.19.0 'Fermium


Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added automerge PR that should be merged automatically dependencies Pull requests that update a dependency file labels Feb 21, 2022
@renovate renovate bot force-pushed the renovate/many-non-major branch from ea821c4 to 3871710 Compare March 13, 2022 21:40
@renovate renovate bot changed the title fix(deps): update dependency firebase-functions to ^3.18.1 chore(deps): update many non-major Mar 13, 2022
@renovate renovate bot force-pushed the renovate/many-non-major branch 2 times, most recently from 3e4f3c3 to 14842fe Compare March 16, 2022 20:31
@renovate renovate bot force-pushed the renovate/many-non-major branch from 14842fe to fdd510d Compare April 4, 2022 21:31
@renovate renovate bot force-pushed the renovate/many-non-major branch from fdd510d to 7059a94 Compare April 14, 2022 18:39
@renovate renovate bot force-pushed the renovate/many-non-major branch from 7059a94 to 9c132df Compare April 24, 2022 21:49
@renovate renovate bot force-pushed the renovate/many-non-major branch from 9c132df to 5a63b37 Compare May 16, 2022 01:27
@renovate renovate bot force-pushed the renovate/many-non-major branch from 5a63b37 to 2773709 Compare June 18, 2022 21:58
@renovate renovate bot force-pushed the renovate/many-non-major branch 2 times, most recently from 11aaa18 to 15e411e Compare March 23, 2023 15:26
@renovate renovate bot force-pushed the renovate/many-non-major branch from 15e411e to a9f05a4 Compare May 28, 2023 09:47
@renovate renovate bot force-pushed the renovate/many-non-major branch from 15c63bd to 8a8e8a2 Compare April 14, 2024 11:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge PR that should be merged automatically dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants