Repository navigation
build(deps): bump the safe-non-major-updates group across 1 directory with 7 updates - #41
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… with 7 updates Bumps the safe-non-major-updates group with 7 updates in the /bff directory: | Package | From | To | | --- | --- | --- | | [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.0` | `13.2.0` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.2` | `13.3.3` | | [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` | | [openid-client](https://github.com/panva/openid-client) | `6.8.5` | `6.8.8` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.1` | `22.20.5` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.15` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `4.1.12` | Updates `@fastify/helmet` from 13.1.0 to 13.2.0 - [Release notes](https://github.com/fastify/fastify-helmet/releases) - [Commits](fastify/fastify-helmet@v13.1.0...v13.2.0) Updates `@simplewebauthn/server` from 13.3.2 to 13.3.3 - [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases) - [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md) - [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.3/packages/server) Updates `fastify` from 5.12.5 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.5...v5.12.7) Updates `openid-client` from 6.8.5 to 6.8.8 - [Release notes](https://github.com/panva/openid-client/releases) - [Changelog](https://github.com/panva/openid-client/blob/main/CHANGELOG.md) - [Commits](panva/openid-client@v6.8.5...v6.8.8) Updates `@types/node` from 22.20.1 to 22.20.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.12 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.15) Updates `vitest` from 4.1.11 to 4.1.12 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.12/packages/vitest) --- updated-dependencies: - dependency-name: "@fastify/helmet" dependency-version: 13.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-non-major-updates - dependency-name: "@simplewebauthn/server" dependency-version: 13.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-non-major-updates - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-non-major-updates - dependency-name: openid-client dependency-version: 6.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-non-major-updates - dependency-name: "@types/node" dependency-version: 22.20.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-non-major-updates - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-non-major-updates - dependency-name: vitest dependency-version: 4.1.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-non-major-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the safe-non-major-updates group with 7 updates in the /bff directory:
13.1.013.2.013.3.213.3.35.12.55.12.76.8.56.8.822.20.122.20.54.23.124.23.154.1.114.1.12Updates
@fastify/helmetfrom 13.1.0 to 13.2.0Release notes
Sourced from @fastify/helmet's releases.
Commits
f715808Bumped v13.2.06ab142afix: inherit global enableCSPNonces on routes with custom helmet options (#324)6e3234fBumped v13.1.24b0aac4ci: enable trusted publishing releases8854d49Bumped v13.1.1c4bbcb2chore(.npmrc): add min-release-age (#319)8406fa8chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#321)d8da457chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#320)655cd3achore: bump c8 from 11.0.0 to 12.0.0 (#317)928d9b5ci: pin actions to commit-hashMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@fastify/helmetsince your current version.Updates
@simplewebauthn/serverfrom 13.3.2 to 13.3.3Release notes
Sourced from @simplewebauthn/server's releases.
Changelog
Sourced from @simplewebauthn/server's changelog.
Commits
4b189bdUpdate server version to 13.3.305db595Add GlobalSign Root R46 to FIDO MDS default root certs (#789)9bf80bfUse JWT header alg when verifying MDS blob (#788)Updates
fastifyfrom 5.12.5 to 5.12.7Release notes
Sourced from fastify's releases.
Commits
9f40003Bumped v5.12.716469b9Bumped v5.12.663496de[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)20b55d4[Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)38d2b63[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...3241fbd[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...1a46b1b[Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)7e06676[Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)1b0eb32[Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)a636a10[Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)Updates
openid-clientfrom 6.8.5 to 6.8.8Release notes
Sourced from openid-client's releases.
Changelog
Sourced from openid-client's changelog.
Commits
04c5982chore(release): 6.8.85eccf2echore: bump packagesd730f80fix(passport): handle rejected async verification callbacksb931c40refactor: share grant polling lifecycle and retry handlingd687796fix: isolate lazy client authentication handler cachese816bf0fix: calculate token lifetimes using elapsed time10ba026fix: select a unique decryption key when kid is omittedb26170efix: retain polling abort signals through response processingaf32783fix: apply the default HTTP request timeout5433d68fix: preserve clock settings across DCR nonce retriesUpdates
@types/nodefrom 22.20.1 to 22.20.5Commits
Updates
tsxfrom 4.23.12 to 4.23.15Release notes
Sourced from tsx's releases.
Commits
ca66105test: fix drive-less file URLs in ESM resolver fixtures2da3407fix: expose require.cache and require.extensions to tsImport CommonJS modules38e1588fix: exclude bare builtins from namespace inheritance562c434fix: make namespaced register() overloads portable for declaration emitedfb1f0build: upgrade pkgroll and externalize CJS loader reference70e7828test: upgrade tinyspy for disposable API9ed2022ci: avoid duplicate release notifications872e77frefactor: use disposables for cleanup6e5236bfix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...28e1f12fix(cache): bound shared transform cache memory (#835)Updates
vitestfrom 4.1.11 to 4.1.12Release notes
Sourced from vitest's releases.
Commits
4766ce1chore: release v4.1.12 (#11610)5bf2197chore: delete wdio folder from v4 branch to avoid falsy release (#11581)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions