Skip to content

Bump shell-quote and react-native in /NotificationHubSample/app#126

Open
dependabot[bot] wants to merge 123 commits intomainfrom
dependabot/npm_and_yarn/NotificationHubSample/app/shell-quote-and-react-native-1.7.4
Open

Bump shell-quote and react-native in /NotificationHubSample/app#126
dependabot[bot] wants to merge 123 commits intomainfrom
dependabot/npm_and_yarn/NotificationHubSample/app/shell-quote-and-react-native-1.7.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 8, 2022

Bumps shell-quote to 1.7.4 and updates ancestor dependency react-native. These dependencies need to be updated together.

Updates shell-quote from 1.6.1 to 1.7.4

Changelog

Sourced from shell-quote's changelog.

v1.7.4 - 2022-10-12

Merged

Commits

  • [eslint] fix indentation and whitespace aaa9d1f
  • [eslint] additional cleanup 397cb62
  • [meta] add auto-changelog 497fca5
  • [actions] add reusable workflows 4763c36
  • [eslint] add eslint 6ee1437
  • [readme] rename, add badges 7eb5134
  • [meta] update URLs 67381b6
  • [meta] create FUNDING.yml; add funding in package.json 8641572
  • [meta] use npmignore to autogenerate an npmignore file 2e2007a
  • Only apps should have lockfiles f97411e
  • [Dev Deps] update tape 051f608
  • [meta] add safe-publish-latest 18cadf9
  • [Tests] add aud in posttest dc1cc12

1.7.3

  • Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)

1.7.2

  • Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2)

1.7.1

  • Fix $ being removed when not part of an environment variable name. (@​Adman in #32)

1.7.0

  • Add support for parsing >> and >& redirection operators. (@​forivall in #16)
  • Add support for parsing <( process substitution operator. (@​cuonglm in #15)

1.6.3

  • Fix Windows path quoting problems. (@​dy in #34)

v1.6.2 - 2019-08-13

Merged

Commits

... (truncated)

Commits
  • 5409e72 v1.7.4
  • 4763c36 [actions] add reusable workflows
  • 8641572 [meta] create FUNDING.yml; add funding in package.json
  • 497fca5 [meta] add auto-changelog
  • 7eb5134 [readme] rename, add badges
  • 67381b6 [meta] update URLs
  • 2e2007a [meta] use npmignore to autogenerate an npmignore file
  • 18cadf9 [meta] add safe-publish-latest
  • 397cb62 [eslint] additional cleanup
  • aaa9d1f [eslint] fix indentation and whitespace
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.


Updates react-native from 0.64.1 to 0.70.6

Release notes

Sourced from react-native's releases.

0.70.6

Fixed

  • Fixed regression: @​jest/create-cache-key-function dependency was inadvertedly bumped to 29.x. We are bringing it back to 27.0.1. (fb0e88beb9 by @​kelset)

Changed

iOS specific


You can participate in the conversation on the status of this release in this discussion


To help you upgrade to this version, you can use the upgrade helper ⚛️


You can find the whole changelog history in the changelog.md file.

0.70.5

Hotfix

This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.70.x, update to this version to fix it.

If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.


You can participate in the conversation on the status of this release in this discussion


To help you upgrade to this version, you can use the upgrade helper ⚛️


You can find the whole changelog history in the changelog.md file.

0.70.4

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.70.6

Fixed

  • Fixed regression: @​jest/create-cache-key-function dependency was inadvertedly bumped to 29.x. We are bringing it back to 27.0.1. (fb0e88beb9 by @​kelset)

Changed

iOS specific

v0.70.5

Fixed

v0.70.4

Changed

Fixed

iOS specific

v0.70.3

Fixed

  • Stop styles from being reset when detaching Animated.Values in old renderer (2f58e52006 by @​javache)
  • Revert "Fix TextInput dropping text when used as uncontrolled component with defaultValue" to fix TextInputs not being settable to undefined programmatically (e2645a5) by Garrett Forbes Monroe

Android specific

iOS specific

... (truncated)

Commits
  • 49dd38f [0.70.6] Bump version numbers
  • fb0e88b [LOCAL] correct fix: bring back jest cache but on the right version
  • c563759 [LOCAL] Bump git checkout cache key
  • 69ce989 Revert "[0.70.6] Bump version numbers"
  • 02a388f [0.70.6] Bump version numbers
  • ef29c9b [LOCAL] remove regression: unwanted @​jest/create-cache-key-function dependency
  • 9bcc5e0 [LOCAL] Bump CLI to 9.3.2
  • 11473c3 Add support Promise.any out of box (#35080)
  • 3f1c55b Update ruby codegen to cleanup build folder. (#34398)
  • 35fa47b [0.70.5] Bump version numbers
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by fb, a new releaser for react-native since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

kylekampy and others added 30 commits January 23, 2019 14:40
Remove old broken VSTO telemetry sample and replace
Added Apache Cordova and Ionic 3 sample apps plus reworked the readme.
fixed links in the .NET readme
chore(iOS): remove old sample apps
mpodwysocki and others added 26 commits January 21, 2022 11:35
Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.12 to 3.2.0.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.1.12...3.2.0)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…onHubSample/app/nanoid-3.2.0

Bump nanoid from 3.1.12 to 3.2.0 in /NotificationHubSample/app
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.14.7...v1.14.8)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.1 to 3.0.4.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…onHubSample/app/plist-3.0.4

Bump plist from 3.0.1 to 3.0.4 in /NotificationHubSample/app
…onHubSample/app/follow-redirects-1.14.8

Bump follow-redirects from 1.14.7 to 1.14.8 in /NotificationHubSample/app
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…onHubSample/app/async-2.6.4

Bump async from 2.6.3 to 2.6.4 in /NotificationHubSample/app
…onHubSample/app/minimist-1.2.6

Bump minimist from 1.2.5 to 1.2.6 in /NotificationHubSample/app
Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](chalk/ansi-regex@v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: ansi-regex
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…onHubSample/app/plist-3.0.5

Bump plist from 3.0.4 to 3.0.5 in /NotificationHubSample/app
…onHubSample/app/ansi-regex-3.0.1

Bump ansi-regex from 3.0.0 to 3.0.1 in /NotificationHubSample/app
Bumps [Newtonsoft.Json](https://github.com/JamesNK/Newtonsoft.Json) from 6.0.4 to 13.0.1.
- [Release notes](https://github.com/JamesNK/Newtonsoft.Json/releases)
- [Commits](JamesNK/Newtonsoft.Json@6.0.4...13.0.1)

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2.
- [Release notes](https://github.com/isaacs/minimatch/releases)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [Newtonsoft.Json](https://github.com/JamesNK/Newtonsoft.Json) from 12.0.3 to 13.0.2.
- [Release notes](https://github.com/JamesNK/Newtonsoft.Json/releases)
- [Commits](JamesNK/Newtonsoft.Json@12.0.3...13.0.2)

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…riPushNotifications/Newtonsoft.Json-13.0.1

Bump Newtonsoft.Json from 6.0.4 to 13.0.1 in /PushToSafari/SafariPushNotifications
…mple/app/windows/app/Newtonsoft.Json-13.0.2

Bump Newtonsoft.Json from 12.0.3 to 13.0.2 in /NotificationHubSample/app/windows/app
Bumps [Newtonsoft.Json](https://github.com/JamesNK/Newtonsoft.Json) from 13.0.1 to 13.0.2.
- [Release notes](https://github.com/JamesNK/Newtonsoft.Json/releases)
- [Commits](JamesNK/Newtonsoft.Json@13.0.1...13.0.2)

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
…onHubSample/app/decode-uri-component-0.2.2

Bump decode-uri-component from 0.2.0 to 0.2.2 in /NotificationHubSample/app
…riPushNotifications/Newtonsoft.Json-13.0.2

Bump Newtonsoft.Json from 13.0.1 to 13.0.2 in /PushToSafari/SafariPushNotifications
…onHubSample/app/minimatch-3.1.2

Bump minimatch from 3.0.4 to 3.1.2 in /NotificationHubSample/app
Bumps [shell-quote](https://github.com/ljharb/shell-quote) to 1.7.4 and updates ancestor dependency [react-native](https://github.com/facebook/react-native). These dependencies need to be updated together.


Updates `shell-quote` from 1.6.1 to 1.7.4
- [Release notes](https://github.com/ljharb/shell-quote/releases)
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@1.6.1...v1.7.4)

Updates `react-native` from 0.64.1 to 0.70.6
- [Release notes](https://github.com/facebook/react-native/releases)
- [Changelog](https://github.com/facebook/react-native/blob/main/CHANGELOG.md)
- [Commits](facebook/react-native@v0.64.1...v0.70.6)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-type: indirect
- dependency-name: react-native
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 8, 2022
@marstr marstr force-pushed the main branch 2 times, most recently from 0c90e11 to 821324c Compare November 30, 2023 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants