Bump the npm_and_yarn group across 1 directory with 8 updates #18

dependabot · 2024-12-24T09:46:37Z

Warning

Dependabot will stop supporting npm v6!

Please upgrade to one of the following versions: v7, v8, v9, or v10.

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package	From	To
ra-ui-materialui	`3.13.1`	`5.4.3`
@babel/traverse	`7.13.0`	`7.26.4`
@babel/traverse	`7.8.6`	`7.26.4`
ajv	`6.12.0`	`6.12.6`
ansi-regex	`5.0.0`	`5.0.1`
ansi-regex	`4.1.0`	`5.0.1`
decode-uri-component	`0.2.0`	`0.2.2`
json5	`2.2.0`	`2.2.3`
json5	`1.0.1`	`2.2.3`
loader-utils	`1.4.0`	`1.4.2`
ua-parser-js	`0.7.28`	`0.7.40`

Updates ra-ui-materialui from 3.13.1 to 5.4.3

Release notes

Sourced from ra-ui-materialui's releases.

5.4.3

Fix <FormDataConsumer> causes its children to flicker (#10417) (djhi)

[Doc] Remove <ShowBase emptyWhileLoading> from the docs (#10416) (slax57)

[Doc] Introduce <DatagridAG> custom cell editors (#10410) (djhi)

[Doc] Update Access Control instructions following ra-rbac update (#10409) (djhi)

[Doc] Fix <TreeWithDetails filter> doc chapter (#10406) (erwanMarmelab)

Bump nanoid from 3.3.7 to 3.3.8 (#10414) (dependabot[bot])

5.4.2

Fix: Improve AutocompleteInput creation support (#10391) (djhi)

Fix useLogin should invalidate the getPermissions cache (#10392) (slax57)

Fix <Datagrid> rowClick function cannot expand or select (#10404) (djhi)

Fix <FileInput> triggers onChange twice with latest version of react-dropzone (#10402) (slax57)

Fix type of disableClearable prop for AutocompleteInput (#10393) (smeng9)

[Doc] Backport <ReferenceManyToManyField queryOptions> and <ReferenceManyToManyInput queryOptions mutationOptions> doc (#10403) (erwanMarmelab)

[Doc] Fix <DateRangeInput> import syntax (#10399) (erwanMarmelab)

[Doc] Introduce <TreeWithDetails filter> prop to render a sub tree (#10398) (djhi)

5.4.1

Fix access control basename handling (#10383) (djhi)

Fix ReferenceManyField executes filter reset filter too often (#10371) (fzaninotto)

[Doc] Add video tutorial to Access Control documentation (#10378) (fzaninotto)

[Doc] Fix AutocompleteArrrayInput contains a useless tip (#10373) (erwanMarmelab)

[Doc] Update useUpdate doc to explain returnPromise option (#10372) (fzaninotto)

[Doc] Fix Supabase (GraphQL) DataProvider link label (#10370) (zackha)

[TypeScript] Fix <ReferenceArrayField queryOptions> param type (#10389) (dricholm)

[Storybook] Re-enable storysource addon (#10363) (slax57)

[Chore] Add a story when TextInput trigger a server error (#10386) (erwanMarmelab)

5.4.0

Introduce <FilterLiveForm> (#10344) (slax57)

Fix: Remove redundant optimization of cache lookup for useGetMany(Aggregate) placeholderData (#10256) (wattroll)

Fix <SortButton> default translation (#10368) (fzaninotto)

Fix useCanAccessResources cannot have react-query options (#10362) (djhi)

Fix FilterListItem story shows wrong way of resetting a filter (#10358) (fzaninotto)

[TypeScript] Add missing parameter to add function type of <SimpleFormIteratorContextValue> (#10359) (Aikain)

[Demo] Showcase tabs with icons (#10369) (fzaninotto)

[Chore] Reorganize ra-core/form directory (#10364) (fzaninotto)

[Chore] Remove useSafeSetState hook (#10341) (geobde)

[Doc] Document <DateRangeInput> as a filter (#10365) (erwanMarmelab)

[Doc] Fix useRegisterMutationMiddleware documentation (#10360) (djhi)

[Doc] Improve Access Control for Custom Pages (#10357) (fzaninotto)

[Doc] Fix <AppBar userMenu> example usage (#10356) (fzaninotto)

Build(deps): Bump cross-spawn from 6.0.5 to 6.0.6 (#10361) (dependabot[bot])

v5.3.4

Fix <SimpleList> ErrorInFetch story (#10353) (erwanMarmelab)

Fix <Datagrid> bulkActionButtons shows empty toolbar when user cannot access the delete action (#10347) (fzaninotto)

Fix <SimpleList linkType={false}> UI (#10343) (erwanMarmelab)

[Doc] Fix react-query devtools documentation (#10346) (dricholm)

... (truncated)

Changelog

Sourced from ra-ui-materialui's changelog.

5.4.3

Fix <FormDataConsumer> causes its children to flicker (#10417) (djhi)

[Doc] Remove <ShowBase emptyWhileLoading> from the docs (#10416) (slax57)

[Doc] Introduce <DatagridAG> custom cell editors (#10410) (djhi)

[Doc] Update Access Control instructions following ra-rbac update (#10409) (djhi)

[Doc] Fix <TreeWithDetails filter> doc chapter (#10406) (erwanMarmelab)

Bump nanoid from 3.3.7 to 3.3.8 (#10414) (dependabot[bot])

5.4.2

Fix: Improve AutocompleteInput creation support (#10391) (djhi)

Fix useLogin should invalidate the getPermissions cache (#10392) (slax57)

Fix <Datagrid> rowClick function cannot expand or select (#10404) (djhi)

Fix <FileInput> triggers onChange twice with latest version of react-dropzone (#10402) (slax57)

Fix type of disableClearable prop for AutocompleteInput (#10393) (smeng9)

[Doc] Backport <ReferenceManyToManyField queryOptions> and <ReferenceManyToManyInput queryOptions mutationOptions> doc (#10403) (erwanMarmelab)

[Doc] Fix <DateRangeInput> import syntax (#10399) (erwanMarmelab)

[Doc] Introduce <TreeWithDetails filter> prop to render a sub tree (#10398) (djhi)

5.4.1

Fix access control basename handling (#10383) (djhi)

Fix ReferenceManyField executes filter reset filter too often (#10371) (fzaninotto)

[Doc] Add video tutorial to Access Control documentation (#10378) (fzaninotto)

[Doc] Fix AutocompleteArrrayInput contains a useless tip (#10373) (erwanMarmelab)

[Doc] Update useUpdate doc to explain returnPromise option (#10372) (fzaninotto)

[Doc] Fix Supabase (GraphQL) DataProvider link label (#10370) (zackha)

[TypeScript] Fix <ReferenceArrayField queryOptions> param type (#10389) (dricholm)

[Storybook] Re-enable storysource addon (#10363) (slax57)

[Chore] Add a story when TextInput trigger a server error (#10386) (erwanMarmelab)

5.4.0

Introduce <FilterLiveForm> (#10344) (slax57)

Fix: Remove redundant optimization of cache lookup for useGetMany(Aggregate) placeholderData (#10256) (wattroll)

Fix <SortButton> default translation (#10368) (fzaninotto)

Fix useCanAccessResources cannot have react-query options (#10362) (djhi)

Fix FilterListItem story shows wrong way of resetting a filter (#10358) (fzaninotto)

[TypeScript] Add missing parameter to add function type of <SimpleFormIteratorContextValue> (#10359) (Aikain)

[Demo] Showcase tabs with icons (#10369) (fzaninotto)

[Chore] Reorganize ra-core/form directory (#10364) (fzaninotto)

[Chore] Remove useSafeSetState hook (#10341) (geobde)

[Doc] Document <DateRangeInput> as a filter (#10365) (erwanMarmelab)

[Doc] Fix useRegisterMutationMiddleware documentation (#10360) (djhi)

[Doc] Improve Access Control for Custom Pages (#10357) (fzaninotto)

[Doc] Fix <AppBar userMenu> example usage (#10356) (fzaninotto)

Build(deps): Bump cross-spawn from 6.0.5 to 6.0.6 (#10361) (dependabot[bot])

5.3.4

... (truncated)

Upgrade guide

Sourced from ra-ui-materialui's upgrade guide.

layout: default title: "Upgrading to v5"

Upgrading to v5

React-admin v5 mostly focuses on removing deprecated features and upgrading dependencies. This makes the upgrade process easier than previous versions. However, there are still some breaking changes you should be aware of.

IE11 Is No Longer Supported

Dependencies

React 18

Use @tanstack/react-query instead of react-query

Minor Dependencies

UI Changes

Inputs Have Full Width By Default

Links are now underlined by default

Dark Theme Is Available By Default

Data Provider

ra-data-graphql And ra-data-graphql-simple No Longer Return A Promise

Application Root & Layout

<Admin menu> Is No Longer Supported

<Admin history> Prop Was Removed

<HistoryRouter> Was Removed

Custom Layout No Longer Receives Props

Custom App Bars No Longer Receive Props

Custom Menu No Longer Receive Props

Custom Error Page No Longer Receives Title

Custom Catch All No Longer Receives Title

List Components

List Components Can No Longer Be Used In Standalone

<List hasCreate> Is No Longer Supported

<Datagrid rowClick> is no longer false by default

<Datagrid expand> Components No Longer Receive Any Props

<Datagrid> In Standalone Requires a resource Prop

setFilters Is No Longer Debounced By Default

Updates to bulkActionButtons Syntax

<PaginationLimit> Component Was Removed

<DatagridBody> No Longer Provides record Prop To <DatagridRow>

useRecordSelection Props have changed

Show and Edit Pages

Custom Edit or Show Actions No Longer Receive Any Props

Inputs default ids are auto-generated

<SimpleFormIterator> No Longer Clones Its Buttons

<SimpleFormIterator> no longer clones its children

<FormDataConsumer> no longer passes a getSource function

Mutation Middlewares No Longer Receive The Mutation Options

warnWhenUnsavedChanges Changes

Global Server Side Validation Error Message Must Be Passed Via The root.serverError Key

Input Components

... (truncated)

Commits

9e441c2 v5.4.3
a25733d Update changelog for 5.4.3
d135bd3 Merge pull request #10417 from marmelab/fix-form-data-consumer-flicker
b05a1a0 [no ci] minor improvements to story
5d339c8 Add comment [no ci]
08f256b Fix FormDataConsumer
fa523be Add a FormDataConsumer showing the issue
526d088 Merge pull request #10416 from marmelab/doc-ShowBase-emptyWhileLoading
8c01e20 [Doc] Remove \<ShowBase emptyWhileLoading> from the docs
bdf5cce Merge pull request #10414 from marmelab/dependabot/npm_and_yarn/nanoid-3.3.8
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by djhi, a new releaser for ra-ui-materialui since your current version.

Updates @babel/traverse from 7.13.0 to 7.26.4

Release notes

Sourced from @babel/traverse's releases.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

Committers: 6

Babel Bot (@babel-bot)

Dylan Piercey (@DylanPiercey)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

v7.26.1 (2024-10-25)

🐛 Bug Fix

babel-parser

#16936 fix(parser): offset internal index locations by startIndex (@DylanPiercey)

v7.26.0 (2024-10-25)

🚀 New Feature

babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types

#16850 Enable import attributes parsing by default (@nicolo-ribaudo)

babel-core

#16862 feat: support async plugin's pre/post (@timofei-iatsenko)

babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone

#16692 Add transform-regexp-modifiers to preset-env (@JLHwung)

babel-parser

#16849 feat: add startIndex parser option (@DylanPiercey)

babel-generator, babel-parser, babel-plugin-syntax-flow

#16841 Always enable parsing of Flow enums (@nicolo-ribaudo)

babel-helpers, babel-preset-typescript, babel-runtime-corejs3

... (truncated)

Commits

cf7b9cd v7.26.4
f33704a Revert "perf: Improve scope information collection performance" (#17005)
36ca8fa v7.26.3
ded1571 perf: Improve scope information collection performance (#16923)
943bdfe perf: Avoid repeated traversal when creating scope (#16964)
b07957e v7.25.9
af91759 fix: Accidentally publishing useless files (#16917)
2533cfb v7.25.7
611d958 [babel 8] Create TSClassImplements|TSInterfaceHeritage nodes (#16731)
506bf91 Remove BABEL_TYPES_8_BREAKING flag and enable it by default (#16817)
Additional commits viewable in compare view

Updates @babel/traverse from 7.8.6 to 7.26.4

Release notes

Sourced from @babel/traverse's releases.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

Committers: 4

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

Committers: 6

Babel Bot (@babel-bot)

Dylan Piercey (@DylanPiercey)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.26.4 (2024-12-05)

↩️ Revert

babel-traverse

#17005 Revert "perf: Improve scope information collection performance" (@JLHwung)

v7.26.3 (2024-12-04)

🐛 Bug Fix

babel-generator

#16958 [preserveFormat] force semicolons when invalidating ASI (@nicolo-ribaudo)

🏠 Internal

babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator

#16895 Remove helper-builder-binary-assignment-operator-visitor (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-generator

#16959 perf: Reduce the use of temporary objects (@liuxingbaoyu)

babel-traverse

#16923 perf: Improve scope information collection performance (@liuxingbaoyu)

#16964 perf: Avoid repeated traversal when creating scope (@liuxingbaoyu)

babel-plugin-transform-modules-commonjs

#16954 perf: Remove use of simplifyAccess (@liuxingbaoyu)

v7.26.2 (2024-10-30)

🐛 Bug Fix

babel-parser

#16903 fix: Parse placeholder for TS namespace (@liuxingbaoyu)

#16937 fix: Account for offsets when creating new Position instances (@DylanPiercey)

babel-generator

#16948 Fix mapping of tokens with generated nodes in between (@nicolo-ribaudo)

v7.26.1 (2024-10-25)

🐛 Bug Fix

babel-parser

#16936 fix(parser): offset internal index locations by startIndex (@DylanPiercey)

v7.26.0 (2024-10-25)

🚀 New Feature

babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types

#16850 Enable import attributes parsing by default (@nicolo-ribaudo)

babel-core

#16862 feat: support async plugin's pre/post (@timofei-iatsenko)

babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone

#16692 Add transform-regexp-modifiers to preset-env (@JLHwung)

babel-parser

#16849 feat: add startIndex parser option (@DylanPiercey)

babel-generator, babel-parser, babel-plugin-syntax-flow

#16841 Always enable parsing of Flow enums (@nicolo-ribaudo)

babel-helpers, babel-preset-typescript, babel-runtime-corejs3

... (truncated)

Commits

cf7b9cd v7.26.4
f33704a Revert "perf: Improve scope information collection performance" (#17005)
36ca8fa v7.26.3
ded1571 perf: Improve scope information collection performance (#16923)
943bdfe perf: Avoid repeated traversal when creating scope (#16964)
b07957e v7.25.9
af91759 fix: Accidentally publishing useless files (#16917)
2533cfb v7.25.7
611d958 [babel 8] Create TSClassImplements|TSInterfaceHeritage nodes (#16731)
506bf91 Remove BABEL_TYPES_8_BREAKING flag and enable it by default (#16817)
Additional commits viewable in compare view

Updates ajv from 6.12.0 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates ansi-regex from 5.0.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

Commits

a9babce 5.0.1
4657833 fix incorrect format
c3c0b3f Fix potential ReDoS (#37)
178363b Move to GitHub Actions (#35)
0755e66 Add @Qix- to funding.yml
See full diff in compare view

Updates ansi-regex from 4.1.0 to 5.0.1

Release notes

Sourced from ansi-regex's releases.

v5.0.1

Fixes (backport of 6.0.1 to v5)

This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.

Fix ReDoS in certain cases (#37) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1

Thank you @yetingli for the patch and reproduction case!

Commits

a9babce 5.0.1
4657833 fix incorrect format
c3c0b3f Fix potential ReDoS (#37)
178363b Move to GitHub Actions (#35)
0755e66 Add @Qix- to funding.yml
See full diff in compare view

Updates decode-uri-component from 0.2.0 to 0.2.2

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

SamVerschueren/decode-uri-component@v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

SamVerschueren/decode-uri-component@v0.2.0...v0.2.1

Commits

a0eea46 0.2.2
980e0bf Prevent overwriting previously decoded tokens
3c8a373 0.2.1
76abc93 Switch to GitHub workflows
746ca5d Fix issue where decode throws - fixes #6
486d7e2 Update license (#1)
a650457 Tidelift tasks
66e1c28 Meta tweaks
See full diff in compare view

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

...
Description has been truncated

Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ra-ui-materialui](https://github.com/marmelab/react-admin) | `3.13.1` | `5.4.3` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.13.0` | `7.26.4` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.8.6` | `7.26.4` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.0` | `6.12.6` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `5.0.0` | `5.0.1` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `4.1.0` | `5.0.1` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [json5](https://github.com/json5/json5) | `2.2.0` | `2.2.3` | | [json5](https://github.com/json5/json5) | `1.0.1` | `2.2.3` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `1.4.2` | | [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `0.7.28` | `0.7.40` | Updates `ra-ui-materialui` from 3.13.1 to 5.4.3 - [Release notes](https://github.com/marmelab/react-admin/releases) - [Changelog](https://github.com/marmelab/react-admin/blob/master/CHANGELOG.md) - [Upgrade guide](https://github.com/marmelab/react-admin/blob/master/docs/Upgrade.md) - [Commits](marmelab/react-admin@v3.13.1...v5.4.3) Updates `@babel/traverse` from 7.13.0 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `@babel/traverse` from 7.8.6 to 7.26.4 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse) Updates `ajv` from 6.12.0 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.0...v6.12.6) Updates `ansi-regex` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v5.0.0...v5.0.1) Updates `ansi-regex` from 4.1.0 to 5.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v5.0.0...v5.0.1) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `json5` from 1.0.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `loader-utils` from 1.4.0 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.0...v1.4.2) Updates `ua-parser-js` from 0.7.28 to 0.7.40 - [Release notes](https://github.com/faisalman/ua-parser-js/releases) - [Changelog](https://github.com/faisalman/ua-parser-js/blob/0.7.40/changelog.md) - [Commits](faisalman/ua-parser-js@0.7.28...0.7.40) --- updated-dependencies: - dependency-name: ra-ui-materialui dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ua-parser-js dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 24, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 8 updates #18

Bump the npm_and_yarn group across 1 directory with 8 updates #18

Uh oh!

dependabot bot commented on behalf of github Dec 24, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm_and_yarn group across 1 directory with 8 updates #18

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 8 updates #18

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 24, 2024

5.4.3

5.4.2

5.4.1

5.4.0

v5.3.4

5.4.3

5.4.2

5.4.1

5.4.0

5.3.4

layout: default title: "Upgrading to v5"

Upgrading to v5

v7.26.4 (2024-12-05)

↩️ Revert

Committers: 2

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 4

v7.26.2 (2024-10-30)

🐛 Bug Fix

Committers: 6

v7.26.4 (2024-12-05)

↩️ Revert

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.26.2 (2024-10-30)

🐛 Bug Fix

v7.26.1 (2024-10-25)

🐛 Bug Fix

v7.26.0 (2024-10-25)

🚀 New Feature

v7.26.4 (2024-12-05)

↩️ Revert

Committers: 2

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 4

v7.26.2 (2024-10-30)

🐛 Bug Fix

Committers: 6

v7.26.4 (2024-12-05)

↩️ Revert

v7.26.3 (2024-12-04)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

v7.26.2 (2024-10-30)

🐛 Bug Fix

v7.26.1 (2024-10-25)

🐛 Bug Fix

v7.26.0 (2024-10-25)

🚀 New Feature

v6.12.6

v6.12.5

v6.12.4

v6.12.3

v6.12.2

v6.12.1

v5.0.1

Fixes (backport of 6.0.1 to v5)

v5.0.1

Fixes (backport of 6.0.1 to v5)

v0.2.2

v0.2.1

v2.2.3

v2.2.2

v2.2.1

v2.2.3 [code, diff]

Fixes (backport of `6.0.1` to v5)

Fixes (backport of `6.0.1` to v5)