Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 18, 2024

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package From To
@grpc/grpc-js 1.8.13 1.8.22
jose 4.13.1 4.15.7
katex 0.16.4 0.16.10
rehype-katex 6.0.2 6.0.3
protobufjs 7.2.3 7.3.2
firebase-admin 11.6.0 12.1.1
semver 7.3.8 7.6.2

Updates @grpc/grpc-js from 1.8.13 to 1.8.22

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.8.22

  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.

@​grpc/grpc-js@​1.8.21

  • Fix propagation of UNIMPLEMENTED error messages (#2528)

@​grpc/grpc-js 1.8.20

  • Fix a crash when the channel option grpc.keepalive_permit_without_calls is set (#2519)

@​grpc/grpc-js 1.8.19

  • Update keepalive behavior to more correctly handle short calls and long periods of inactivity (#2513)

@​grpc/grpc-js 1.8.18

  • Fix reporting of call stacks in unary request errors (#2503)
  • Fix reporting of proxy info in channelz socket responses (#2503)

@​grpc/grpc-js 1.8.17

  • Disallow pick_first LB policy as the direct child of an outlier_detection LB policy (#2476)

@​grpc/grpc-js 1.8.16

  • Fix missing transport trace logs (#2470)

@​grpc/grpc-js 1.8.15

  • Fix a memory leak that could result from a specific pattern of recursive function calls (#2456)
  • Ensure status and error events are consistently emitted asynchronously (#2456)

@​grpc/grpc-js 1.8.14

  • Fix sequencing of some events related to connectivity state changes (#2421)
Commits
  • a8a0203 Merge pull request from GHSA-7v5v-9h63-cj86
  • 3b110cd grpc-js: Bump to 1.8.22
  • 8e62222 grpc-js: Avoid buffering significantly more than max_receive_message_size per...
  • 9d83947 Merge pull request #2742 from sergiitk/backport-1.8-psm-interop-common-prod-t...
  • 00f348c Merge pull request #2729 from sergiitk/psm-interop-common-prod-tests
  • 36d105b Merge pull request #2737 from murgatroid99/backport-1.8-grpc-js_linkify-it_fix
  • 969e305 Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fix
  • d78216f Merge pull request #2715 from sergiitk/backport-1.8-psm-interop-pkg-dev
  • f38966a Merge pull request #2712 from sergiitk/psm-interop-pkg-dev
  • ffefff2 Merge pull request #2640 from XuanWang-Amos/backport-1.8-psm-interop-shared-b...
  • Additional commits viewable in compare view

Updates jose from 4.13.1 to 4.15.7

Release notes

Sourced from jose's releases.

v4.15.7

Fixes

  • add a workerd package.json target (e36d69e)

v4.15.5

Fixes

v4.15.4

Fixes

v4.15.3

This release contains only Node.js CITGM related test updates.

Fixes nodejs/citgm#1011

v4.15.2

Fixes

  • build: add a node target for jose-browser-runtime releases (abb63d0)

v4.15.1

Fixes

  • resolve missing types for the cryptoRuntime const (1627965)

v4.15.0

Features

  • export the used crypto runtime as a constant (0681dda)

v4.14.6

Fixes

  • build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

v4.14.5

Refactor

  • catch type error when decoding base64url signature (#569) (935e920)
  • catch type errors when decoding various base64url strings (9024e87)

v4.14.4

Refactor

  • cleanup NODE-ED25519 workerd workarounds (072e83d)

... (truncated)

Changelog

Sourced from jose's changelog.

4.15.7 (2024-06-18)

4.15.6 (2024-06-18)

Fixes

  • add a workerd package.json target (e36d69e)

4.15.5 (2024-03-07)

Fixes

  • add a maxOutputLength option to zlib inflate (1b91d88)

4.15.4 (2023-10-14)

Fixes

4.15.3 (2023-10-11)

4.15.2 (2023-10-04)

Fixes

  • build: add a node target for jose-browser-runtime releases (abb63d0)

4.15.1 (2023-10-02)

Fixes

  • resolve missing types for the cryptoRuntime const (1627965)

4.15.0 (2023-10-02)

Features

  • export the used crypto runtime as a constant (0681dda)

4.14.6 (2023-09-04)

Fixes

... (truncated)

Commits
  • 5084808 chore(release): 4.15.7
  • 122c939 chore(release): 4.15.6
  • e36d69e fix: add a workerd package.json target
  • 765aafd chore(release): 4.15.5
  • b36e45e test: add export check to x509 pem import tests
  • e839ecb test: stop testing JWE RSA1_5 Algorithm
  • 1b91d88 fix: add a maxOutputLength option to zlib inflate
  • 9ca2b24 build: remove release action
  • f3035d8 chore: cleanup after release
  • f0bb220 chore(release): 4.15.4
  • Additional commits viewable in compare view

Updates katex from 0.16.4 to 0.16.10

Release notes

Sourced from katex's releases.

v0.16.10

0.16.10 (2024-03-24)

Bug Fixes

v0.16.9

0.16.9 (2023-10-02)

Features

v0.16.8

0.16.8 (2023-06-24)

Features

  • expose error length and raw error message on ParseError (#3820) (710774a)

v0.16.7

0.16.7 (2023-04-28)

Bug Fixes

  • docs/support_table.md: delete redundant "varPsi" (#3814) (33a1b98)

v0.16.6

0.16.6 (2023-04-17)

Bug Fixes

v0.16.5

0.16.5 (2023-04-17)

Features

  • __defineFunction API exposing internal defineFunction (#3805) (c7b1f84), closes #3756
Changelog

Sourced from katex's changelog.

0.16.10 (2024-03-24)

Bug Fixes

0.16.9 (2023-10-02)

Features

0.16.8 (2023-06-24)

Features

  • expose error length and raw error message on ParseError (#3820) (710774a)

0.16.7 (2023-04-28)

Bug Fixes

  • docs/support_table.md: delete redundant "varPsi" (#3814) (33a1b98)

0.16.6 (2023-04-17)

Bug Fixes

0.16.5 (2023-04-17)

Features

  • __defineFunction API exposing internal defineFunction (#3805) (c7b1f84), closes #3756
Commits
  • ab32359 chore(release): 0.16.10 [ci skip]
  • fc5af64 fix: force protocol to be lowercase for better protocol filtering
  • 085e21b fix: maxExpand limit with Unicode sub/superscripts
  • e88b4c3 fix: \edef bypassing maxExpand via exponential blowup
  • c5897fc fix: escape \includegraphics src and alt
  • 5677f37 chore: fix some typos (#3936)
  • d9640f1 chore(deps): update dependency json-stable-stringify to v1.1.1 [skip netlify]...
  • 9a1f2f2 chore(deps): update dependency css-loader to v6.10.0 [skip netlify] (#3887)
  • 1851860 chore(deps): update dependency cssnano to v5.1.15 [skip netlify] (#3883)
  • e69d8b1 chore(deps): update dependency browserslist to v4.23.0 [skip netlify] (#3886)
  • Additional commits viewable in compare view

Updates rehype-katex from 6.0.2 to 6.0.3

Release notes

Sourced from rehype-katex's releases.

rehype-katex@6.0.3

  • e28098a Fix to catch non-parse katex errors
  • f7a35ea Replace dependency to improve browser bundle size

Full Changelog: https://github.com/remarkjs/remark-math/compare/rehype-katex@6.0.2...rehype-katex@6.0.3

Commits
  • e18d024 rehype-katex: 6.0.3
  • f7a35ea Replace dependency to improve browser bundle size
  • e28098a Fix to catch non-parse katex errors
  • a323406 Update dev-dependencies
  • 7e82f93 Refactor Wording, few details on syntax in readme
  • 817ba54 Update dev-dependencies
  • f4596b4 Add some notes on working like code
  • 218948d Update top-level await in readmes
  • ee0970f Fix typo in readme of rehype-katex
  • 00f8531 Update @types/web
  • Additional commits viewable in compare view

Updates protobufjs from 7.2.3 to 7.3.2

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.3.2

7.3.2 (2024-06-12)

Bug Fixes

  • docs: Update readme to correct command for creating types (#1939) (0f9d477)
  • Also fixes an issue with 7.3.1, where the dist/ folder containing the build artifacts was missing on npm.

protobufjs: v7.3.1

7.3.1 (2024-06-05)

Bug Fixes

  • types: reserved field in IType can contain reserved names (#2001) (d1d2c0c)

protobufjs: v7.3.0

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

protobufjs: v7.2.6

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

protobufjs: v7.2.5

7.2.5 (2023-08-21)

Bug Fixes

protobufjs: v7.2.4

7.2.4 (2023-06-23)

Bug Fixes

  • do not let setProperty change the prototype (#1899) (e66379f)
Changelog

Sourced from protobufjs's changelog.

7.3.2 (2024-06-12)

Bug Fixes

  • docs: Update readme to correct command for creating types (#1939) (0f9d477)

7.3.1 (2024-06-05)

Bug Fixes

  • types: reserved field in IType can contain reserved names (#2001) (d1d2c0c)

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

7.2.5 (2023-08-21)

Bug Fixes

7.2.4 (2023-06-23)

Bug Fixes

  • do not let setProperty change the prototype (#1899) (e66379f)
Commits

Updates firebase-admin from 11.6.0 to 12.1.1

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v12.1.1

Bug Fixes

  • fix: Export error classes (#2151)

Miscellaneous

  • [chore] Release 12.1.1 (#2561)
  • build(deps): updgrade jwks-rsa (#2570)
  • --- (#2568)
  • --- (#2566)
  • --- (#2567)
  • --- (#2569)
  • build(deps-dev): bump @​firebase/auth-types from 0.12.1 to 0.12.2 (#2556)
  • build(deps-dev): bump @​microsoft/api-extractor from 7.43.2 to 7.43.7 (#2559)
  • chore: upgrade firestore to 7.7.0 (#2560)
  • build(deps-dev): bump @​firebase/app-compat from 0.2.32 to 0.2.33 (#2555)
  • build(deps): bump @​google-cloud/firestore from 7.6.0 to 7.7.0 (#2558)
  • Fix api extractor issues to expose error types (#2549)
  • build(deps-dev): bump @​types/lodash from 4.17.0 to 4.17.1 (#2546)
  • build(deps): bump @​google-cloud/storage from 7.10.2 to 7.11.0 (#2547)
  • build(deps-dev): bump @​microsoft/api-extractor from 7.43.1 to 7.43.2 (#2545)
  • build(deps): bump @​types/node from 20.12.7 to 20.12.10 (#2544)
  • build(deps-dev): bump @​firebase/app-compat from 0.2.31 to 0.2.32 (#2540)
  • build(deps): bump @​google-cloud/storage from 7.10.1 to 7.10.2 (#2541)
  • build(deps): bump @​google-cloud/storage from 7.10.0 to 7.10.1 (#2536)
  • Update package.json to use farmhash 3.3.1 (#2534)

Firebase Admin Node.js SDK v12.1.0

New Features

  • feat(rc): Add server side Remote Config support (#2529)

Miscellaneous

  • [chore] Release 12.1.0 (#2532)
  • Fix minor typo (#2533)
  • chore: Excluding certain event_types from processing uid (#2370)
  • build(deps-dev): bump gulp from 4.0.2 to 5.0.0 (#2526)
  • build(deps-dev): bump @​firebase/app-compat from 0.2.29 to 0.2.30 (#2527)
  • build(deps): bump @​google-cloud/firestore from 7.5.0 to 7.6.0 (#2528)
  • build(deps): bump undici in /.github/actions/send-email (#2521)
  • build(deps-dev): bump @​firebase/auth-types from 0.12.0 to 0.12.1 (#2514)
  • build(deps-dev): bump mocha from 10.3.0 to 10.4.0 (#2513)
  • build(deps): bump @​types/node from 20.11.30 to 20.12.2 (#2516)
  • build(deps): bump @​google-cloud/firestore from 7.4.0 to 7.5.0 (#2517)
  • build(deps-dev): bump @​firebase/app-compat from 0.2.28 to 0.2.29 (#2510)
  • build(deps): bump @​google-cloud/storage from 7.7.0 to 7.9.0 (#2509)

... (truncated)

Commits

Updates semver from 7.3.8 to 7.6.2

Release notes

Sourced from semver's releases.

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

v7.6.0

7.6.0 (2024-01-31)

Features

Chores

... (truncated)

Changelog

Sourced from semver's changelog.

7.6.2 (2024-05-09)

Bug Fixes

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

7.6.0 (2024-01-31)

Features

Chores

... (truncated)

Commits
  • eb1380b chore: release 7.6.2 (#714)
  • 6466ba9 fix(lru): use map.delete() directly (#713)
  • d777418 chore: release 7.6.1 (#706)
  • 988a8de deps: uninstall lru-cache (#709)
  • 5feeb7f chore: postinstall for dependabot template-oss PR
  • dd09b60 chore: bump @​npmcli/template-oss to 4.22.0
  • c570a34 fix(linting): no-unused-vars
  • ad8ff11 fix: use internal cache implementation
  • 3fabe4d deps: remove lru-cache
  • ec49cdc chore: chore: chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.13` | `1.8.22` |
| [jose](https://github.com/panva/jose) | `4.13.1` | `4.15.7` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.4` | `0.16.10` |
| [rehype-katex](https://github.com/remarkjs/remark-math) | `6.0.2` | `6.0.3` |
| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.2.3` | `7.3.2` |
| [firebase-admin](https://github.com/firebase/firebase-admin-node) | `11.6.0` | `12.1.1` |
| [semver](https://github.com/npm/node-semver) | `7.3.8` | `7.6.2` |



Updates `@grpc/grpc-js` from 1.8.13 to 1.8.22
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.8.13...@grpc/grpc-js@1.8.22)

Updates `jose` from 4.13.1 to 4.15.7
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/v4.15.7/CHANGELOG.md)
- [Commits](panva/jose@v4.13.1...v4.15.7)

Updates `katex` from 0.16.4 to 0.16.10
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.4...v0.16.10)

Updates `rehype-katex` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/remarkjs/remark-math/releases)
- [Commits](https://github.com/remarkjs/remark-math/compare/rehype-katex@6.0.2...rehype-katex@6.0.3)

Updates `protobufjs` from 7.2.3 to 7.3.2
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.3...protobufjs-v7.3.2)

Updates `firebase-admin` from 11.6.0 to 12.1.1
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Commits](firebase/firebase-admin-node@v11.6.0...v12.1.1)

Updates `semver` from 7.3.8 to 7.6.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.3.8...v7.6.2)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: jose
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: katex
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rehype-katex
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: firebase-admin
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant