Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.
4.0.4
fix: Update picomatch to fix regression #179 (8becb55)
backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch
[4.0.7] - 2024-05-22
this is basically v4.0.5, with some README updates
it is vulnerable to CVE-2024-4067
Updated braces to v3.0.3 to avoid CVE-2024-4068
does NOT break API compatibility
[4.0.6] - 2024-05-21
Added hasBraces to check if a pattern contains braces.
Fixes CVE-2024-4067
BREAKS API COMPATIBILITY
Should be labeled as a major release, but it's not.
[4.0.1 - 4.0.5]
[4.0.0] - 2019-03-20
Added
Adds support for options.onMatch. See the readme for details
Adds support for options.onIgnore. See the readme for details
Adds support for options.onResult. See the readme for details
Breaking changes
Require Node.js >= 8.6
Removed support for passing an array of brace patterns to micromatch.braces().
To strictly enforce closing brackets (for {, [, and (), you must now use strictBrackets=true instead of strictErrors.
cache - caching and all related options and methods have been removed
options.unixify was renamed to options.windows
options.nodupes Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the onMatch, onResult and onIgnore functions.
options.snapdragon was removed, as snapdragon is no longer used.
options.sourcemap was removed, as snapdragon is no longer used, which provided sourcemap support.
[3.0.0] - 2017-04-11
Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:
micromatch results are directly compared to bash results
in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.
This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.
These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.
This is a backport of the minor ReDos vulnerability in ansi-regex@<6.0.1, as requested in #38.
Fix ReDoS in certain cases (#37)
You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.
Allow redefining name property on wrapped functions.
v3.1.0
Added q.pushAsync and q.unshiftAsync, analagous to q.push and q.unshift, except they always do not accept a callback, and reject if processing the task errors. (#1659)
Promises returned from q.push and q.unshift when a callback is not passed now resolve even if an error ocurred. (#1659)
Fixed a parsing bug in autoInject with complicated function bodies (#1663)
Added ES6+ configuration for Browserify bundlers (#1653)
There are a lot of new features and subtle breaking changes in this major version, but the biggest feature is that most Async methods return a Promise if you omit the callback, meaning you can await them from within an async function.
Bumps the npm_and_yarn group with 3 updates in the / directory: [browserslist](https://github.com/browserslist/browserslist), [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts) and [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component).
Updates `browserslist` from 4.14.2 to 4.24.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/browserslist/browserslist/releases">browserslist's releases</a>.</em></p>
<blockquote>
<h2>4.24.2</h2>
<ul>
<li>Clarify outdated <code>caniuse-lite</code> warning text.</li>
</ul>
<h2>4.24.1</h2>
<ul>
<li>Added months since last <code>caniuse-lite</code> update to the warning (by <a href="https://github.com/mezhnin"><code>@mezhnin</code></a>).</li>
</ul>
<h2>4.24.0</h2>
<ul>
<li>Added <code>browserslist.findConfigFile()</code> helper (by <a href="https://github.com/JLHwung"><code>@JLHwung</code></a>).</li>
</ul>
<h2>4.23.3</h2>
<ul>
<li>Fixed <code>>=</code> query for <code>ios</code> (by <a href="https://github.com/syi0808"><code>@syi0808</code></a>).</li>
</ul>
<h2>4.23.2</h2>
<ul>
<li>Updated Firefox ESR.</li>
</ul>
<h2>4.23.1</h2>
<ul>
<li>Fixed feature query with mobile to desktop when caniuse lags (by <a href="https://github.com/steverep"><code>@steverep</code></a>).</li>
</ul>
<h2>4.23.0</h2>
<ul>
<li>Added <code>BROWSERSLIST_ROOT_PATH</code> (by <a href="https://github.com/teleclimber"><code>@teleclimber</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md">browserslist's changelog</a>.</em></p>
<blockquote>
<h2>4.24.2</h2>
<ul>
<li>Clarify outdated <code>caniuse-lite</code> warning text.</li>
</ul>
<h2>4.24.1</h2>
<ul>
<li>Added months since last <code>caniuse-lite</code> update to the warning (by <a href="https://github.com/mezhnin"><code>@mezhnin</code></a>).</li>
</ul>
<h2>4.24.0</h2>
<ul>
<li>Added <code>browserslist.findConfigFile()</code> helper (by <a href="https://github.com/JLHwung"><code>@JLHwung</code></a>).</li>
</ul>
<h2>4.23.3</h2>
<ul>
<li>Fixed <code>>=</code> query for <code>ios</code> (by <a href="https://github.com/syi0808"><code>@syi0808</code></a>).</li>
</ul>
<h2>4.23.2</h2>
<ul>
<li>Updated Firefox ESR.</li>
</ul>
<h2>4.23.1</h2>
<ul>
<li>Fixed feature query with mobile to desktop when caniuse lags (by <a href="https://github.com/steverep"><code>@steverep</code></a>).</li>
</ul>
<h2>4.23.0</h2>
<ul>
<li>Added <code>BROWSERSLIST_ROOT_PATH</code> (by <a href="https://github.com/teleclimber"><code>@teleclimber</code></a>).</li>
</ul>
<h2>4.22.3</h2>
<ul>
<li>Fixed white spaces support in <code>supports</code> query (<a href="https://github.com/g-plane"><code>@g-plane</code></a>).</li>
<li>Fixed shared config like <code>@company/package/browserslist-config</code> (<a href="https://github.com/boucodes"><code>@boucodes</code></a>).</li>
</ul>
<h2>4.22.2</h2>
<ul>
<li>Fixed idempotency in time queries with <code>mobileToDesktop</code> (by Aliaksei Sapach).</li>
</ul>
<h2>4.22.1</h2>
<ul>
<li>Updated Firefox ESR (by <a href="https://github.com/lerkor"><code>@lerkor</code></a>).</li>
</ul>
<h2>4.22</h2>
<ul>
<li>Added <code>fully supports</code> query (by Ben Scott).</li>
<li>Added <code>partially supports</code> alias for <code>supports</code> query (by Ben Scott).</li>
</ul>
<h2>4.21.11</h2>
<ul>
<li>Added warning to <code>--update-db</code> to move to new CLI (by Ivan Vasilev).</li>
<li>Fixed docs (by Tatsunori Uchino).</li>
</ul>
<h2>4.21.10</h2>
<ul>
<li>Updated Firefox ESR.</li>
</ul>
<h2>4.21.9</h2>
<ul>
<li>Fixed Opera Mobile edge cases (by Steve Repsher).</li>
</ul>
<h2>4.21.8</h2>
<ul>
<li>Fixed <code>supports</code> query and <code>mobileToDesktop</code> (by Steve Repsher).</li>
</ul>
<h2>4.21.7</h2>
<ul>
<li>Fixed last queries for Android (by Steve Repsher).</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/browserslist/browserslist/commit/065c69b0e1e6ad679263d03e22c605830bbc52e5"><code>065c69b</code></a> Release 4.24.2 version</li>
<li><a href="https://github.com/browserslist/browserslist/commit/c30a4b50044d49392a13df5c7b716fa3bc031597"><code>c30a4b5</code></a> More clear warning text</li>
<li><a href="https://github.com/browserslist/browserslist/commit/8fbb3044153a94b380297c31cceb46a310c7ba68"><code>8fbb304</code></a> Release 4.24.1 version</li>
<li><a href="https://github.com/browserslist/browserslist/commit/f640f4d3c868e546e5a6c4521bc05e48dc0ca7e5"><code>f640f4d</code></a> Update dependencies and Node.js version on CI</li>
<li><a href="https://github.com/browserslist/browserslist/commit/c017b81728921aa9eeb01c218d834c9edf98ca7b"><code>c017b81</code></a> Updated oldDataWarning function to display how many months old caniuse-lite i...</li>
<li><a href="https://github.com/browserslist/browserslist/commit/8ae85caa905d130f4ca86f7a998a5b63abbbe582"><code>8ae85ca</code></a> Show how to use browserslist.defaults</li>
<li><a href="https://github.com/browserslist/browserslist/commit/9320799fbc1bc36c0844aa7a46e04d0cbab266a6"><code>9320799</code></a> Improve JS API docs</li>
<li><a href="https://github.com/browserslist/browserslist/commit/fb0dcdba6e6ca8abb9fbf89f019add8824e77a12"><code>fb0dcdb</code></a> Update dependencies</li>
<li><a href="https://github.com/browserslist/browserslist/commit/b11087b677e9190db9a7177046716791a0acc70e"><code>b11087b</code></a> Release 4.24.0 version</li>
<li><a href="https://github.com/browserslist/browserslist/commit/fcad5613322301ca94f3d72c2bd697f27d8b8719"><code>fcad561</code></a> Update dependencies</li>
<li>Additional commits viewable in <a href="https://github.com/browserslist/browserslist/compare/4.14.2...4.24.2">compare view</a></li>
</ul>
</details>
<br />
Updates `react-scripts` from 4.0.3 to 5.0.1
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/facebook/create-react-app/commit/19fa58d527ae74f2b6baa0867463eea1d290f9a5"><code>19fa58d</code></a> Publish</li>
<li><a href="https://github.com/facebook/create-react-app/commit/9802941ff049a28da2682801bc182a29761b71f4"><code>9802941</code></a> fix: webpack noise printed only if error or warning (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/12245">#12245</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/2eef1d0a1db2e84cdcd6e7ca941c85a48cc7cc65"><code>2eef1d0</code></a> Update templates to use React 18 <code>createRoot</code> (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/12220">#12220</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/221e511730ca51c036c6954a9d2ee7659ff860f9"><code>221e511</code></a> Publish</li>
<li><a href="https://github.com/facebook/create-react-app/commit/5614c87bfbaae0ce52ac15aedd2cd0f91ffd420d"><code>5614c87</code></a> Add support for Tailwind (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11717">#11717</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/20edab4894b301f6b90dad0f90a2f82c52a7ac66"><code>20edab4</code></a> fix(webpackDevServer): disable overlay for warnings (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11413">#11413</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/3afbbc0ab922fb982bb275ccb3fe5beecdf5f889"><code>3afbbc0</code></a> Update all dependencies (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11624">#11624</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/f5467d5e77d51a3f23dd5fa70697dbab79832489"><code>f5467d5</code></a> feat(eslint-config-react-app): support ESLint 8.x (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11375">#11375</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/c7627ce96c4674f327081f101dd0e2771be4d045"><code>c7627ce</code></a> Update webpack and dev server (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11646">#11646</a>)</li>
<li><a href="https://github.com/facebook/create-react-app/commit/544befeb536a89b0ff95792df70bb037b17f55b9"><code>544befe</code></a> Update package.json (<a href="https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts/issues/11597">#11597</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/facebook/create-react-app/commits/react-scripts@5.0.1/packages/react-scripts">compare view</a></li>
</ul>
</details>
<br />
Updates `@babel/traverse` from 7.15.4 to 7.26.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/babel/babel/releases"><code>@babel/traverse</code>'s releases</a>.</em></p>
<blockquote>
<h2>v7.26.4 (2024-12-05)</h2>
<h4>:leftwards_arrow_with_hook: Revert</h4>
<ul>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17005">#17005</a> Revert "perf: Improve scope information collection performance" (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 2</h4>
<ul>
<li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
<h2>v7.26.3 (2024-12-04)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16958">#16958</a> [preserveFormat] force semicolons when invalidating ASI (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-helper-builder-binary-assignment-operator-visitor</code>, <code>babel-plugin-transform-exponentiation-operator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16895">#16895</a> Remove helper-builder-binary-assignment-operator-visitor (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16959">#16959</a> perf: Reduce the use of temporary objects (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16923">#16923</a> perf: Improve scope information collection performance (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/16964">#16964</a> perf: Avoid repeated traversal when creating scope (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-modules-commonjs</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16954">#16954</a> perf: Remove use of <code>simplifyAccess</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 4</h4>
<ul>
<li>Babel Bot (<a href="https://github.com/babel-bot"><code>@babel-bot</code></a>)</li>
<li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
<li><a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a></li>
</ul>
<h2>v7.26.2 (2024-10-30)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16903">#16903</a> fix: Parse placeholder for TS namespace (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/16937">#16937</a> fix: Account for offsets when creating new Position instances (<a href="https://github.com/DylanPiercey"><code>@DylanPiercey</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16948">#16948</a> Fix mapping of tokens with generated nodes in between (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 6</h4>
<ul>
<li>Babel Bot (<a href="https://github.com/babel-bot"><code>@babel-bot</code></a>)</li>
<li>Dylan Piercey (<a href="https://github.com/DylanPiercey"><code>@DylanPiercey</code></a>)</li>
<li>Huáng Jùnliàng (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
<li>Nicolò Ribaudo (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
<li><a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/babel/babel/blob/main/CHANGELOG.md"><code>@babel/traverse</code>'s changelog</a>.</em></p>
<blockquote>
<h2>v7.26.4 (2024-12-05)</h2>
<h4>:leftwards_arrow_with_hook: Revert</h4>
<ul>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17005">#17005</a> Revert "perf: Improve scope information collection performance" (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.3 (2024-12-04)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16958">#16958</a> [preserveFormat] force semicolons when invalidating ASI (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:house: Internal</h4>
<ul>
<li><code>babel-helper-builder-binary-assignment-operator-visitor</code>, <code>babel-plugin-transform-exponentiation-operator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16895">#16895</a> Remove helper-builder-binary-assignment-operator-visitor (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h4>:running_woman: Performance</h4>
<ul>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16959">#16959</a> perf: Reduce the use of temporary objects (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16923">#16923</a> perf: Improve scope information collection performance (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/16964">#16964</a> perf: Avoid repeated traversal when creating scope (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-modules-commonjs</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16954">#16954</a> perf: Remove use of <code>simplifyAccess</code> (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.2 (2024-10-30)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16903">#16903</a> fix: Parse placeholder for TS namespace (<a href="https://github.com/liuxingbaoyu"><code>@liuxingbaoyu</code></a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/16937">#16937</a> fix: Account for offsets when creating new Position instances (<a href="https://github.com/DylanPiercey"><code>@DylanPiercey</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16948">#16948</a> Fix mapping of tokens with generated nodes in between (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.1 (2024-10-25)</h2>
<h4>:bug: Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16936">#16936</a> fix(parser): offset internal index locations by startIndex (<a href="https://github.com/DylanPiercey"><code>@DylanPiercey</code></a>)</li>
</ul>
</li>
</ul>
<h2>v7.26.0 (2024-10-25)</h2>
<h4>:rocket: New Feature</h4>
<ul>
<li><code>babel-core</code>, <code>babel-generator</code>, <code>babel-parser</code>, <code>babel-plugin-syntax-import-assertions</code>, <code>babel-plugin-syntax-import-attributes</code>, <code>babel-preset-env</code>, <code>babel-standalone</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16850">#16850</a> Enable import attributes parsing by default (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-core</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16862">#16862</a> feat: support async plugin's pre/post (<a href="https://github.com/timofei-iatsenko"><code>@timofei-iatsenko</code></a>)</li>
</ul>
</li>
<li><code>babel-compat-data</code>, <code>babel-plugin-proposal-regexp-modifiers</code>, <code>babel-plugin-transform-regexp-modifiers</code>, <code>babel-preset-env</code>, <code>babel-standalone</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16692">#16692</a> Add <code>transform-regexp-modifiers</code> to <code>preset-env</code> (<a href="https://github.com/JLHwung"><code>@JLHwung</code></a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16849">#16849</a> feat: add <code>startIndex</code> parser option (<a href="https://github.com/DylanPiercey"><code>@DylanPiercey</code></a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-parser</code>, <code>babel-plugin-syntax-flow</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/16841">#16841</a> Always enable parsing of Flow enums (<a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li>
</ul>
</li>
<li><code>babel-helpers</code>, <code>babel-preset-typescript</code>, <code>babel-runtime-corejs3</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/babel/babel/commit/cf7b9cd7acce0502e4cc9227a07fc9f7d25ff3e2"><code>cf7b9cd</code></a> v7.26.4</li>
<li><a href="https://github.com/babel/babel/commit/f33704a1bc48fa562b51e6cc67691cbd42edeaf9"><code>f33704a</code></a> Revert "perf: Improve scope information collection performance" (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/17005">#17005</a>)</li>
<li><a href="https://github.com/babel/babel/commit/36ca8faeb52245fe268fb33b235f61ace073b2cc"><code>36ca8fa</code></a> v7.26.3</li>
<li><a href="https://github.com/babel/babel/commit/ded157156a614d499421f6a2cd5763c7b34e8764"><code>ded1571</code></a> perf: Improve scope information collection performance (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16923">#16923</a>)</li>
<li><a href="https://github.com/babel/babel/commit/943bdfe7bc64a71389154445da3826f2ee69bbf6"><code>943bdfe</code></a> perf: Avoid repeated traversal when creating scope (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16964">#16964</a>)</li>
<li><a href="https://github.com/babel/babel/commit/b07957ebb316a1e2fc67454fc7423508bb942e63"><code>b07957e</code></a> v7.25.9</li>
<li><a href="https://github.com/babel/babel/commit/af917594e4df3decdde2ce0b1614d607b27367a5"><code>af91759</code></a> fix: Accidentally publishing useless files (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16917">#16917</a>)</li>
<li><a href="https://github.com/babel/babel/commit/2533cfb0c1d90140f320f1e03d41e20407ca30bf"><code>2533cfb</code></a> v7.25.7</li>
<li><a href="https://github.com/babel/babel/commit/611d9589304399fc17db19dd3ef9dc21e7780c7a"><code>611d958</code></a> [babel 8] Create <code>TSClassImplements|TSInterfaceHeritage</code> nodes (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16731">#16731</a>)</li>
<li><a href="https://github.com/babel/babel/commit/506bf91dd2428b1901c3d1580de7be25958c427d"><code>506bf91</code></a> Remove <code>BABEL_TYPES_8_BREAKING</code> flag and enable it by default (<a href="https://github.com/babel/babel/tree/HEAD/packages/babel-traverse/issues/16817">#16817</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/babel/babel/commits/v7.26.4/packages/babel-traverse">compare view</a></li>
</ul>
</details>
<br />
Updates `braces` from 2.3.2 to 3.0.3
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/micromatch/braces/blob/master/CHANGELOG.md">braces's changelog</a>.</em></p>
<blockquote>
<h1>Release history</h1>
<p>All notable changes to this project will be documented in this file.</p>
<p>The format is based on <a href="http://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>
and this project adheres to <a href="http://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<!-- raw HTML omitted -->
<ul>
<li>Changelogs are for humans, not machines.</li>
<li>There should be an entry for every single version.</li>
<li>The same types of changes should be grouped.</li>
<li>Versions and sections should be linkable.</li>
<li>The latest version comes first.</li>
<li>The release date of each versions is displayed.</li>
<li>Mention whether you follow Semantic Versioning.</li>
</ul>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
<p>Changelog entries are classified using the following labels <em>(from <a href="http://keepachangelog.com/">keep-a-changelog</a></em>):</p>
<ul>
<li><code>Added</code> for new features.</li>
<li><code>Changed</code> for changes in existing functionality.</li>
<li><code>Deprecated</code> for soon-to-be removed features.</li>
<li><code>Removed</code> for now removed features.</li>
<li><code>Fixed</code> for any bug fixes.</li>
<li><code>Security</code> in case of vulnerabilities.</li>
</ul>
<!-- raw HTML omitted -->
<h2>[3.0.0] - 2018-04-08</h2>
<p>v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.</p>
<p><strong>Breaking Changes</strong></p>
<ul>
<li>The undocumented <code>.makeRe</code> method was removed</li>
</ul>
<p><strong>Non-breaking changes</strong></p>
<ul>
<li>Caching was removed</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/micromatch/braces/commits/3.0.3">compare view</a></li>
</ul>
</details>
<br />
Updates `micromatch` from 3.1.10 to 4.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/micromatch/micromatch/releases">micromatch's releases</a>.</em></p>
<blockquote>
<h2>4.0.8</h2>
<p>Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.</p>
<h2>4.0.4</h2>
<ul>
<li>fix: Update picomatch to fix regression <a href="https://redirect.github.com/micromatch/micromatch/issues/179">#179</a> (8becb55)</li>
</ul>
<h2>4.0.3</h2>
<ul>
<li>Enforce newer version of picomatch with bugfixes</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md">micromatch's changelog</a>.</em></p>
<blockquote>
<h2>[4.0.8] - 2024-08-22</h2>
<ul>
<li>backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch</li>
</ul>
<h2>[4.0.7] - 2024-05-22</h2>
<ul>
<li>this is basically v4.0.5, with some README updates</li>
<li><strong>it is vulnerable to CVE-2024-4067</strong></li>
<li>Updated braces to v3.0.3 to avoid CVE-2024-4068</li>
<li>does NOT break API compatibility</li>
</ul>
<h2>[4.0.6] - 2024-05-21</h2>
<ul>
<li>Added <code>hasBraces</code> to check if a pattern contains braces.</li>
<li>Fixes CVE-2024-4067</li>
<li><strong>BREAKS API COMPATIBILITY</strong></li>
<li>Should be labeled as a major release, but it's not.</li>
</ul>
<h2>[4.0.1 - 4.0.5]</h2>
<h2>[4.0.0] - 2019-03-20</h2>
<h3>Added</h3>
<ul>
<li>Adds support for <code>options.onMatch</code>. See the readme for details</li>
<li>Adds support for <code>options.onIgnore</code>. See the readme for details</li>
<li>Adds support for <code>options.onResult</code>. See the readme for details</li>
</ul>
<h3>Breaking changes</h3>
<ul>
<li>Require Node.js >= 8.6</li>
<li>Removed support for passing an array of brace patterns to <code>micromatch.braces()</code>.</li>
<li>To strictly enforce closing brackets (for <code>{</code>, <code>[</code>, and <code>(</code>), you must now use <code>strictBrackets=true</code> instead of <code>strictErrors</code>.</li>
<li><code>cache</code> - caching and all related options and methods have been removed</li>
<li><code>options.unixify</code> was renamed to <code>options.windows</code></li>
<li><code>options.nodupes</code> Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the <code>onMatch</code>, <code>onResult</code> and <code>onIgnore</code> functions.</li>
<li><code>options.snapdragon</code> was removed, as snapdragon is no longer used.</li>
<li><code>options.sourcemap</code> was removed, as snapdragon is no longer used, which provided sourcemap support.</li>
</ul>
<h2>[3.0.0] - 2017-04-11</h2>
<p>Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:</p>
<ul>
<li>micromatch results are directly compared to bash results</li>
<li>in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results</li>
<li>micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.</li>
</ul>
<p>This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.</p>
<p>These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an <a href="https://gist.github.com/jonschlinkert/099c8914f56529f75bc757cc9e5e8e2a">AST is created</a>, then a new string is generated by the compiler.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/micromatch/micromatch/commit/8bd704ec0d9894693d35da425d827819916be920"><code>8bd704e</code></a> 4.0.8</li>
<li><a href="https://github.com/micromatch/micromatch/commit/a0e68416a44da10f3e4e30845ab95af4fd286d5a"><code>a0e6841</code></a> run verb to generate README documentation</li>
<li><a href="https://github.com/micromatch/micromatch/commit/4ec288484f6e8cccf597ad3d43529c31d0f7a02a"><code>4ec2884</code></a> Merge branch 'v4' into hauserkristof-feature/v4.0.8</li>
<li><a href="https://github.com/micromatch/micromatch/commit/03aa8052171e878897eee5d7bb2ae0ae83ec2ade"><code>03aa805</code></a> Merge pull request <a href="https://redirect.github.com/micromatch/micromatch/issues/266">#266</a> from hauserkristof/feature/v4.0.8</li>
<li><a href="https://github.com/micromatch/micromatch/commit/814f5f70efcd100ca9d29198867812a3d6ab91a8"><code>814f5f7</code></a> lint</li>
<li><a href="https://github.com/micromatch/micromatch/commit/67fcce6a1077c2faf5ad0c5f998fa70202cc5dae"><code>67fcce6</code></a> fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5</li>
<li><a href="https://github.com/micromatch/micromatch/commit/113f2e3fa7cb30b429eda7c4c38475a8e8ba1b30"><code>113f2e3</code></a> fix: CVE numbers in CHANGELOG</li>
<li><a href="https://github.com/micromatch/micromatch/commit/d9dbd9a266686f44afb38da26fe016f96d1ec04f"><code>d9dbd9a</code></a> feat: updated CHANGELOG</li>
<li><a href="https://github.com/micromatch/micromatch/commit/2ab13157f416679f54e3a32b1425e184bd16749e"><code>2ab1315</code></a> fix: use actions/setup-node@v4</li>
<li><a href="https://github.com/micromatch/micromatch/commit/1406ea38f3e24b29f4d4f46908d5cffcb3e6c4ce"><code>1406ea3</code></a> feat: rework test to work on macos with node 10,12 and 14</li>
<li>Additional commits viewable in <a href="https://github.com/micromatch/micromatch/compare/3.1.10...4.0.8">compare view</a></li>
</ul>
</details>
<br />
Updates `loader-utils` from 1.2.3 to 2.0.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/loader-utils/releases">loader-utils's releases</a>.</em></p>
<blockquote>
<h2>v2.0.4</h2>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li>
</ul>
<h2>v2.0.3</h2>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3>
<h3>Bug Fixes</h3>
<ul>
<li><strong>security:</strong> prototype pollution exploit (<a href="https://redirect.github.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li>
</ul>
<h2>v2.0.2</h2>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>base64 generation and unicode characters (<a href="https://redirect.github.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li>
</ul>
<h2>v2.0.1</h2>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>md4 support on Node.js v17 (<a href="https://redirect.github.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li>
</ul>
<h2>v2.0.0</h2>
<h2><a href="https://github.com/webpack/loader-utils/compare/v1.4.0...v2.0.0">2.0.0</a> (2020-03-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum required <code>Node.js</code> version is <code>8.9.0</code> (<a href="https://redirect.github.com/webpack/loader-utils/issues/166">#166</a>) (<a href="https://github.com/webpack/loader-utils/commit/c937e8c77231b42018be616b784a6b45eac86f8a">c937e8c</a>)</li>
<li>the <code>getOptions</code> method returns empty object on empty query (<a href="https://redirect.github.com/webpack/loader-utils/issues/167">#167</a>) (<a href="https://github.com/webpack/loader-utils/commit/b595cfba022d3f04f3d310dd570b0253e461605b">b595cfb</a>)</li>
<li>Use <code>md4</code> by default</li>
</ul>
<h2>v1.4.2</h2>
<h3><a href="https://github.com/webpack/loader-utils/compare/v1.4.1...v1.4.2">1.4.2</a> (2022-11-11)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/226">#226</a>) (<a href="https://github.com/webpack/loader-utils/commit/17cbf8fa8989c1cb45bdd2997aa524729475f1fa">17cbf8f</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md">loader-utils's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.3...v2.0.4">2.0.4</a> (2022-11-11)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/225">#225</a>) (<a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb">ac09944</a>)</li>
</ul>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.3">2.0.3</a> (2022-10-20)</h3>
<h3>Bug Fixes</h3>
<ul>
<li><strong>security:</strong> prototype pollution exploit (<a href="https://redirect.github.com/webpack/loader-utils/issues/217">#217</a>) (<a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c">a93cf6f</a>)</li>
</ul>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.1...v2.0.2">2.0.2</a> (2021-11-04)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>base64 generation and unicode characters (<a href="https://redirect.github.com/webpack/loader-utils/issues/197">#197</a>) (<a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f">8c2d24e</a>)</li>
</ul>
<h3><a href="https://github.com/webpack/loader-utils/compare/v2.0.0...v2.0.1">2.0.1</a> (2021-10-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>md4 support on Node.js v17 (<a href="https://redirect.github.com/webpack/loader-utils/issues/193">#193</a>) (<a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a">1069f61</a>)</li>
</ul>
<h2><a href="https://github.com/webpack/loader-utils/compare/v1.4.0...v2.0.0">2.0.0</a> (2020-03-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum required <code>Node.js</code> version is <code>8.9.0</code> (<a href="https://redirect.github.com/webpack/loader-utils/issues/166">#166</a>) (<a href="https://github.com/webpack/loader-utils/commit/c937e8c77231b42018be616b784a6b45eac86f8a">c937e8c</a>)</li>
<li>the <code>getOptions</code> method returns empty object on empty query (<a href="https://redirect.github.com/webpack/loader-utils/issues/167">#167</a>) (<a href="https://github.com/webpack/loader-utils/commit/b595cfba022d3f04f3d310dd570b0253e461605b">b595cfb</a>)</li>
<li>Use <code>md4</code> by default</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1><a href="https://github.com/webpack/loader-utils/compare/v1.3.0...v1.4.0">1.4.0</a> (2020-02-19)</h1>
<h3>Features</h3>
<ul>
<li>the <code>resourceQuery</code> is passed to the <code>interpolateName</code> method (<a href="https://redirect.github.com/webpack/loader-utils/issues/163">#163</a>) (<a href="https://github.com/webpack/loader-utils/commit/cd0e428">cd0e428</a>)</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1><a href="https://github.com/webpack/loader-utils/compare/v1.2.3...v1.3.0">1.3.0</a> (2020-02-19)</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/webpack/loader-utils/commit/6688b5028106f144ee9f543bebc8e6a87b57829f"><code>6688b50</code></a> chore(release): 2.0.4</li>
<li><a href="https://github.com/webpack/loader-utils/commit/ac09944dfacd7c4497ef692894b09e63e09a5eeb"><code>ac09944</code></a> fix: ReDoS problem (<a href="https://redirect.github.com/webpack/loader-utils/issues/225">#225</a>)</li>
<li><a href="https://github.com/webpack/loader-utils/commit/7162619fb982c394ed75098a0a0ed7e7f3177c70"><code>7162619</code></a> chore(release): 2.0.3</li>
<li><a href="https://github.com/webpack/loader-utils/commit/a93cf6f4702012030f6b5ee8340d5c95ec1c7d4c"><code>a93cf6f</code></a> fix(security): prototype polution exploit (<a href="https://redirect.github.com/webpack/loader-utils/issues/217">#217</a>)</li>
<li><a href="https://github.com/webpack/loader-utils/commit/90c7c4be17e3e0b2f6091a69c67db7a6df9fd044"><code>90c7c4b</code></a> chore(release): 2.0.2</li>
<li><a href="https://github.com/webpack/loader-utils/commit/8c2d24ee400bc4567335e97ee6004c3baa6ef66f"><code>8c2d24e</code></a> fix: base64 generation and unicode characters (<a href="https://redirect.github.com/webpack/loader-utils/issues/197">#197</a>)</li>
<li><a href="https://github.com/webpack/loader-utils/commit/5fb556208426d281a18dfbf6f45dca24bfb24e96"><code>5fb5562</code></a> chore(release): 2.0.1</li>
<li><a href="https://github.com/webpack/loader-utils/commit/1069f61284a571614ee4acdde6e6087174be118a"><code>1069f61</code></a> fix: md4 support on Node.js v17 (<a href="https://redirect.github.com/webpack/loader-utils/issues/193">#193</a>)</li>
<li><a href="https://github.com/webpack/loader-utils/commit/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568"><code>d9f4e23</code></a> chore(release): 2.0.0</li>
<li><a href="https://github.com/webpack/loader-utils/commit/865dc03909bd0018c9d6a26ea65814faec8eb1e5"><code>865dc03</code></a> refactor: switch to <code>md4</code> by default (<a href="https://redirect.github.com/webpack/loader-utils/issues/168">#168</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/loader-utils/compare/v1.2.3...v2.0.4">compare view</a></li>
</ul>
</details>
<br />
Updates `ansi-html` from 0.0.7 to 0.0.9
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/Tjatse/ansi-html/commits">compare view</a></li>
</ul>
</details>
<br />
Updates `ansi-regex` from 2.1.1 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/chalk/ansi-regex/releases">ansi-regex's releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h3>Fixes (backport of <code>6.0.1</code> to v5)</h3>
<p>This is a backport of the <strong>minor</strong> ReDos vulnerability in <code>ansi-regex@<6.0.1</code>, as requested in <a href="https://redirect.github.com/chalk/ansi-regex/issues/38">#38</a>.</p>
<ul>
<li>Fix <a href="https://en.wikipedia.org/wiki/ReDoS">ReDoS</a> in certain cases (<a href="https://redirect.github.com/chalk/ansi-regex/issues/37">#37</a>)
You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.</li>
</ul>
<p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807">CVE-2021-3807</a></p>
<p><a href="https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1">https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1</a></p>
<p>Thank you <a href="https://github.com/yetingli"><code>@yetingli</code></a> for the patch and reproduction case!</p>
<h2>v5.0.0</h2>
<h3>Breaking</h3>
<ul>
<li>Require Node.js 8 166a0d5</li>
</ul>
<h3>Enhancements</h3>
<ul>
<li>Add TypeScript definition (<a href="https://redirect.github.com/chalk/ansi-regex/issues/32">#32</a>) e77ea17</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0">https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0</a></p>
<h2>v4.1.0</h2>
<ul>
<li>Support more escape code like links (<a href="https://redirect.github.com/chalk/ansi-regex/issues/29">#29</a>) 96200bb</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0">https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/chalk/ansi-regex/commit/a9babce885cf19c363cf1d1c645f834592c3f7a4"><code>a9babce</code></a> 5.0.1</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/4657833b3419f381c8ef4eb5787e71c5206b1b35"><code>4657833</code></a> fix incorrect format</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8"><code>c3c0b3f</code></a> Fix potential ReDoS (<a href="https://redirect.github.com/chalk/ansi-regex/issues/37">#37</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/178363b3a297b712a0054e702d8ddde3879913e5"><code>178363b</code></a> Move to GitHub Actions (<a href="https://redirect.github.com/chalk/ansi-regex/issues/35">#35</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/0755e661553387cfebcb62378181e9f55b2567ff"><code>0755e66</code></a> Add <a href="https://github.com/Qix"><code>@Qix</code></a>- to funding.yml</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/2b56fb0c7a07108e5b54241e8faec160d393aedb"><code>2b56fb0</code></a> 5.0.0</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f26f7fe2287b44d3092c75a8dc3f7722282773d0"><code>f26f7fe</code></a> Meta tweaks</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/e77ea173f2e2b3f8bee370bf4cc4d29820783daf"><code>e77ea17</code></a> Add TypeScript definition (<a href="https://redirect.github.com/chalk/ansi-regex/issues/32">#32</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/166a0d5eddedacf0db7ccd7ee137b862ab1dae70"><code>166a0d5</code></a> Require Node.js 8</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f115fca8a0d1bd7be0af5efa6b6ade54e7145207"><code>f115fca</code></a> Tidelift tasks</li>
<li>Additional commits viewable in <a href="https://github.com/chalk/ansi-regex/compare/2.1.1...v5.0.1">compare view</a></li>
</ul>
</details>
<br />
Updates `async` from 2.6.3 to 3.2.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/caolan/async/blob/master/CHANGELOG.md">async's changelog</a>.</em></p>
<blockquote>
<h1>v3.2.5</h1>
<ul>
<li>Ensure <code>Error</code> objects such as <code>AggregateError</code> are propagated without modification (<a href="https://redirect.github.com/caolan/async/issues/1920">#1920</a>)</li>
</ul>
<h1>v3.2.4</h1>
<ul>
<li>Fix a bug in <code>priorityQueue</code> where it didn't wait for the result. (<a href="https://redirect.github.com/caolan/async/issues/1725">#1725</a>)</li>
<li>Fix a bug where <code>unshiftAsync</code> was included in <code>priorityQueue</code>. (<a href="https://redirect.github.com/caolan/async/issues/1790">#1790</a>)</li>
</ul>
<h1>v3.2.3</h1>
<ul>
<li>Fix bugs in comment parsing in <code>autoInject</code>. (<a href="https://redirect.github.com/caolan/async/issues/1767">#1767</a>, <a href="https://redirect.github.com/caolan/async/issues/1780">#1780</a>)</li>
</ul>
<h1>v3.2.2</h1>
<ul>
<li>Fix potential prototype pollution exploit</li>
</ul>
<h1>v3.2.1</h1>
<ul>
<li>Use <code>queueMicrotask</code> if available to the environment (<a href="https://redirect.github.com/caolan/async/issues/1761">#1761</a>)</li>
<li>Minor perf improvement in <code>priorityQueue</code> (<a href="https://redirect.github.com/caolan/async/issues/1727">#1727</a>)</li>
<li>More examples in documentation (<a href="https://redirect.github.com/caolan/async/issues/1726">#1726</a>)</li>
<li>Various doc fixes (<a href="https://redirect.github.com/caolan/async/issues/1708">#1708</a>, <a href="https://redirect.github.com/caolan/async/issues/1712">#1712</a>, <a href="https://redirect.github.com/caolan/async/issues/1717">#1717</a>, <a href="https://redirect.github.com/caolan/async/issues/1740">#1740</a>, <a href="https://redirect.github.com/caolan/async/issues/1739">#1739</a>, <a href="https://redirect.github.com/caolan/async/issues/1749">#1749</a>, <a href="https://redirect.github.com/caolan/async/issues/1756">#1756</a>)</li>
<li>Improved test coverage (<a href="https://redirect.github.com/caolan/async/issues/1754">#1754</a>)</li>
</ul>
<h1>v3.2.0</h1>
<ul>
<li>Fix a bug in Safari related to overwriting <code>func.name</code></li>
<li>Remove built-in browserify configuration (<a href="https://redirect.github.com/caolan/async/issues/1653">#1653</a>)</li>
<li>Varios doc fixes (<a href="https://redirect.github.com/caolan/async/issues/1688">#1688</a>, <a href="https://redirect.github.com/caolan/async/issues/1703">#1703</a>, <a href="https://redirect.github.com/caolan/async/issues/1704">#1704</a>)</li>
</ul>
<h1>v3.1.1</h1>
<ul>
<li>Allow redefining <code>name</code> property on wrapped functions.</li>
</ul>
<h1>v3.1.0</h1>
<ul>
<li>Added <code>q.pushAsync</code> and <code>q.unshiftAsync</code>, analagous to <code>q.push</code> and <code>q.unshift</code>, except they always do not accept a callback, and reject if processing the task errors. (<a href="https://redirect.github.com/caolan/async/issues/1659">#1659</a>)</li>
<li>Promises returned from <code>q.push</code> and <code>q.unshift</code> when a callback is not passed now resolve even if an error ocurred. (<a href="https://redirect.github.com/caolan/async/issues/1659">#1659</a>)</li>
<li>Fixed a parsing bug in <code>autoInject</code> with complicated function bodies (<a href="https://redirect.github.com/caolan/async/issues/1663">#1663</a>)</li>
<li>Added ES6+ configuration for Browserify bundlers (<a href="https://redirect.github.com/caolan/async/issues/1653">#1653</a>)</li>
<li>Various doc fixes (<a href="https://redirect.github.com/caolan/async/issues/1664">#1664</a>, <a href="https://redirect.github.com/caolan/async/issues/1658">#1658</a>, <a href="https://redirect.github.com/caolan/async/issues/1665">#1665</a>, <a href="https://redirect.github.com/caolan/async/issues/1652">#1652</a>)</li>
</ul>
<h1>v3.0.1</h1>
<h2>Bug fixes</h2>
<ul>
<li>Fixed a regression where arrays passed to <code>queue</code> and <code>cargo</code> would be completely flattened. (<a href="https://redirect.github.com/caolan/async/issues/1645">#1645</a>)</li>
<li>Clarified Async's browser support (<a href="https://redirect.github.com/caolan/async/issues/1643">#1643</a>)</li>
</ul>
<h1>v3.0.0</h1>
<p>The <code>async</code>/<code>await</code> release!</p>
<p>There are a lot of new features and subtle breaking changes in this major version, but the biggest feature is that most Async methods return a Promise if you omit the callback, meaning you can <code>await</code> them from within an <code>async</code> function.</p>
<pre lang="js"><code></tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/caolan/async/commit/85fb18f3d319d14d893ec24648929ff0eb908768"><code>85fb18f</code></a> Version 3.2.6</li>
<li><a href="https://github.com/caolan/async/commit/8c0c94152ff20e9b4aeff5d00244ec41dd78b66b"><code>8c0c941</code></a> Update built files</li>
<li><a href="https://github.com/caolan/async/commit/5f756b4470d91778702cace5f5fce8060aeb7ad6"><code>5f756b4</code></a> Fix ReDoS (<a href="https://redirect.github.com/caolan/async/issues/1980">#1980</a>)</li>
<li><a href="https://github.com/caolan/async/commit/39cdc9bd72046045b3f02f77da0dbca5028ba8fd"><code>39cdc9b</code></a> build(deps-dev): bump karma from 6.4.3 to 6.4.4 (<a href="https://redirect.github.com/caolan/async/issues/1985">#1985</a>)</li>
<li><a href="https://github.com/caolan/async/commit/7b8ddeb976124ba110de5923ce40512d4f3369b1"><code>7b8ddeb</code></a> build(deps-dev): bump <code>@babel/core</code> from 7.24.7 to 7.25.2 (<a href="https://redirect.github.com/caolan/async/issues/1981">#1981</a>)</li>
<li><a href="https://github.com/caolan/async/commit/4634a9d26a8112500fb8ecbb67a1c78d735011c2"><code>4634a9d</code></a> build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (<a href="https://redirect.github.com/caolan/async/issues/1982">#1982</a>)</li>
<li><a href="https://github.com/caolan/async/commit/afb176c15be82a217ad198c5e7dee303a551705c"><code>afb176c</code></a> build(deps-dev): bump chai from 4.4.1 to 4.5.0 (<a href="https://redirect.github.com/caolan/async/issues/1983">#1983</a>)</li>
<li><a href="https://github.com/caolan/async/commit/3568a74de7ab5bcbe20756cc9c5d631cf26e2e65"><code>3568a74</code></a> build(deps-dev): bump <code>@babel/eslint-parser</code> from 7.24.7 to 7.25.1 (<a href="https://redirect.github.com/caolan/async/issues/1984">#1984</a>)</li>
<li><a href="https://github.com/caolan/async/commit/9e885fda800b93b67f2e046db6ce154dfc4f613a"><code>9e885fd</code></a> build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (<a href="https://redirect.github.com/caolan/async/issues/1986">#1986</a>)</li>
<li><a href="https://github.com/caolan/async/commit/f9c7f2a06e515690186ce4108715085d6a7d1b69"><code>f9c7f2a</code></a> build(deps-dev): bump semver from 7.6.2 to 7.6.3 (<a href="https://redirect.github.com/caolan/async/issues/1987">#1987</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/caolan/async/compare/v2.6.3...v3.2.6">compare view</a></li>
</ul>
</details>
<br />
Updates `body-parser` from 1.19.0 to 1.20.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/body-parser/releases">body-parser's releases</a>.</em></p>
<blockquote>
<h2>1.20.3</h2>
<h2>What's Changed</h2>
<h3>Important</h3>
<ul>
<li>deps: qs@6.13.0</li>
<li>add <code>depth</code> option to customize the depth level in the parser</li>
<li><strong>IMPORTANT:</strong> The default <code>depth</code> level for parsing URL-encoded data is now <code>32</code> (previously was <code>Infinity</code>). <a href="https://github.com/expressjs/body-parser/blob/17529513673e39ba79886a7ce3363320cf1c0c50/README.md#depth">Documentation</a></li>
</ul>
<h3>Other changes</h3>
<ul>
<li>chore: add support for OSSF scorecard reporting by <a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/522">expressjs/body-parser#522</a></li>
<li>ci: fix errors in ci github action for node 8 and 9 by <a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/523">expressjs/body-parser#523</a></li>
<li>fix: pin to node@22.4.1 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/527">expressjs/body-parser#527</a></li>
<li>deps: qs@6.12.3 by <a href="https://github.com/melikhov-dev"><code>@melikhov-dev</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/521">expressjs/body-parser#521</a></li>
<li>Add OSSF Scorecard badge by <a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/531">expressjs/body-parser#531</a></li>
<li>Linter by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/534">expressjs/body-parser#534</a></li>
<li>Release: 1.20.3 by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/535">expressjs/body-parser#535</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/inigomarquinez"><code>@inigomarquinez</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/522">expressjs/body-parser#522</a></li>
<li><a href="https://github.com/melikhov-dev"><code>@melikhov-dev</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/521">expressjs/body-parser#521</a></li>
<li><a href="https://github.com/bjohansebas"><code>@bjohansebas</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/531">expressjs/body-parser#531</a></li>
<li><a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/body-parser/pull/534">expressjs/body-parser#534</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3">https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3</a></p>
<h2>1.20.2</h2>
<ul>
<li>Fix strict json error message on Node.js 19+</li>
<li>deps: content-type@~1.0.5
<ul>
<li>perf: skip value escaping when unnecessary</li>
</ul>
</li>
<li>deps: raw-body@2.5.2</li>
</ul>
<h2>1.20.1</h2>
<ul>
<li>deps: qs@6.11.0</li>
<li>perf: remove unnecessary object clone</li>
</ul>
<h2>1.20.0</h2>
<ul>
<li>Fix error message for json parse whitespace in <code>strict</code></li>
<li>Fix internal error when inflated body exceeds limit</li>
<li>Prevent loss of async hooks context</li>
<li>Prevent hanging when request already read</li>
<li>deps: depd@2.0.0
<ul>
<li>Replace internal <code>eval</code> usage with <code>Function</code> constructor</li>
<li>Use instance methods on <code>process</code> to check for listeners</li>
</ul>
</li>
<li>deps: http-errors@2.0.0
<ul>
<li>deps: depd@2.0.0</li>
<li>deps: statuses@2.0.1</li>
</ul>
</li>
<li>deps: on-finished@2.4.1</li>
<li>deps: qs@6.10.3</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's changelog</a>.</em></p>
<blockquote>
<h1>1.20.3 / 2024-09-10</h1>
<ul>
<li>deps: qs@6.13.0</li>
<li>add <code>depth</code> option to customize the depth level in the parser</li>
<li>IMPORTANT: The default <code>depth</code> level for parsing URL-encoded data is now <code>32</code> (previously was <code>Infinity</code>)</li>
</ul>
<h1>1.20.2 / 2023-02-21</h1>
<ul>
<li>Fix strict json error message on Node.js 19+</li>
<li>deps: content-type@~1.0.5
<ul>
<li>perf: skip value escaping when unnecessary</li>
</ul>
</li>
<li>deps: raw-body@2.5.2</li>
</ul>
<h1>1.20.1 / 2022-10-06</h1>
<ul>
<li>deps: qs@6.11.0</li>
<li>perf: remove unnecessary object clone</li>
</ul>
<h1>1.20.0 / 2022-04-02</h1>
<ul>
<li>Fix error message for json parse whitespace in <code>strict</code></li>
<li>Fix internal error when inflated body exceeds limit</li>
<li>Prevent loss of async hooks context</li>
<li>Prevent hanging when request already read</li>
<li>deps: depd@2.0.0
<ul>
<li>Replace internal <code>eval</code> usage with <code>Function</code> constructor</li>
<li>Use instance methods on <code>process</code> to check for listeners</li>
</ul>
</li>
<li>deps: http-errors@2.0.0
<ul>
<li>deps: depd@2.0.0</li>
<li>deps: statuses@2.0.1</li>
</ul>
</li>
<li>deps: on-finished@2.4.1</li>
<li>deps: qs@6.10.3</li>
<li>deps: raw-body@2.5.1
<ul>
<li>deps: http-errors@2.0.0</li>
</ul>
</li>
</ul>
<h1>1.19.2 / 2022-02-15</h1>
<ul>
<li>deps: bytes@3.1.2</li>
<li>deps: qs@6.9.7
<ul>
<li>Fix handling of <code>__proto__</code> keys</li>
</ul>
</li>
<li>deps: raw-body@2.4.3
<ul>
<li>deps: bytes@3.1.2</li>
</ul>
</li>
</ul>
<h1>1.19.1 / 2021-12-10</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/expressjs/body-parser/commit/17529513673e39ba79886a7ce3363320cf1c0c50"><code>1752951</code></a> 1.20.3</li>
<li><a href="https://github.com/expressjs/body-parser/commit/39744cfe2ac4fb37a19ed7c43e3a74332f428e17"><code>39744cf</code></a> chore: linter (<a href="https://redirect.github.com/expressjs/body-parser/issues/534">#534</a>)</li>
<li><a href="https://github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce"><code>b2695c4</code></a> Merge commit from fork</li>
<li><a href="https://github.com/expressjs/body-parser/commit/ade0f3f82f91086d6cd2ed2cb4b0aff448fbc2e5"><code>ade0f3f</code></a> add scorecard to readme (<a href="https://redirect.github.com/expressjs/body-parser/issues/531">#531</a>)</li>
<li><a href="https://github.com/expressjs/body-parser/commit/99a1bd62456f932004b84767d6393bc261f75d36"><code>99a1bd6</code></a> deps: qs@6.12.3 (<a href="https://redirect.github.com/expressjs/body-parser/issues/521">#521</a>)</li>
<li><a href="https://github.com/expressjs/body-parser/commit/947859160527c7aaaa20da79e2c3ba542baaaf66"><code>9478591</code></a> fix: pin to node@22.4.1</li>
<li><a href="https://github.com/expressjs/body-parser/commit/83db46a1e5512135ce01ed90b9132ee16a2657a8"><code>83db46a</code></a> ci: fix errors in ci github action for node 8 and 9 (<a href="https://redirect.github.com/expressjs/body-parser/issues/523">#523</a>)</li>
<li><a href="https://github.com/expressjs/body-parser/commit/9d4e2125b580b055b2a3aa140df9b8fce363af46"><code>9d4e212</code></a> chore: add support for OSSF scorecard reporting (<a href="https://redirect.github.com/expressjs/body-parser/issues/522">#522</a>)</li>
<li><a href="https://github.com/expressjs/body-parser/commit/ee91374eae1555af679550b1d2fb5697d9924109"><code>ee91374</code></a> 1.20.2</li>
<li><a href="https://github.com/expressjs/body-parser/commit/368a93a613a1ac6cbdec9694f4018e707b3c1f50"><code>368a93a</code></a> Fix strict json error message on Node.js 19+</li>
<li>Additional commits viewable in <a href="https://github.com/expressjs/body-parser/compare/1.19.0...1.20.3">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~ulisesgascon">ulisesgascon</a>, a new releaser for body-parser since your current version.</p>
</details>
<br />
Updates `cookie` from 0.4.0 to 0.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/jshttp/cookie/releases">cookie's releases</a>.</em></p>
<blockquote>
<h2>0.7.1</h2>
<p><strong>Fixed</strong></p>
<ul>
<li>Allow leading dot for domain (<a href="https://redirect.github.com/jshttp/cookie/issues/174">#174</a>)
<ul>
<li>Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec</li>
</ul>
</li>
<li>Add fast path for <code>serialize</code> without options, use <code>obj.hasOwnProperty</code> when parsing (<a href="https://redirect.github.com/jshttp/cookie/issues/172">#172</a>)</li>
</ul>
<p><a href="https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1">https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1</a></p>
<h2>0.7.0</h2>
<ul>
<li>perf: parse cookies ~10% faster (<a href="https://redirect.github.com/jshttp/cookie/issues/144">#144</a> by <a href="https://github.com/kurtextrem"><code>@kurtextrem</code></a> and <a href="https://redirect.github.com/jshttp/cookie/issues/170">#170</a>)</li>
<li>fix: narrow the validation of cookies to match RFC6265 (<a href="https://redirect.github.com/jshttp/cookie/issues/167">#167</a> by <a href="https://github.com/bewinsnw"><code>@bewinsnw</code></a>)</li>
<li>fix: add <code>main</code> to <code>package.json</code> for rspack (<a href="https://redirect.github.com/jshttp/cookie/issues/166">#166</a> by <a href="https://github.com/proudparrot2"><code>@proudparrot2</code></a>)</li>
</ul>
<p><a href="https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0">https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0</a></p>
<h2>0.6.0</h2>
<ul>
<li>Add <code>partitioned</code> option</li>
</ul>
<h2>0.5.0</h2>
<ul>
<li>Add <code>priority</code> option</li>
<li>Fix <code>expires</code> option to reject invalid dates</li>
<li>pref: improve default decode speed</li>
<li>pref: remove slow string split in parse</li>
</ul>
<h2>0.4.2</h2>
<ul>
<li>pref: read value only when assigning in parse</li>
<li>pref: remove unnecessary regexp in parse</li>
</ul>
<h2>0.4.1</h2>
<ul>
<li>Fix <code>maxAge</code> option to reject invalid values</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jshttp/cookie/commit/cf4658f492c5bd96aeaf5693c3500f8495031014"><code>cf4658f</code></a> 0.7.1</li>
<li><a href="https://github.com/jshttp/cookie/commit/6a8b8f5a49af7897b98ebfb29a1c4955afa3d33e"><code>6a8b8f5</code></a> Allow leading dot for domain (<a href="https://redirect.github.com/jshttp/cookie/issues/174">#174</a>)</li>
<li><a href="https://github.com/jshttp/cookie/commit/58015c0b93de0b63db245cfdc5a108e511a81ad0"><code>58015c0</code></a> Remove more code and perf wins (<a href="https://redirect.github.com/jshttp/cookie/issues/172">#172</a>)</li>
<li><a href="https://github.com/jshttp/cookie/commit/ab057d6c06b94a7b1e3358e69a685ae49c97b627"><code>ab057d6</code></a> 0.7.0</li>
<li><a href="https://github.com/jshttp/cookie/commit/5f02ca87688481dbcf155e49ca8b61732f30e542"><code>5f02ca8</code></a> Migrate history to GitHub releases</li>
<li><a href="https://github.com/jshttp/cookie/commit/a5d591ce8447dd63821779724f96ad3c774c8579"><code>a5d591c</code></a> Migrate history to GitHub releases</li>
<li><a href="https://github.com/jshttp/cookie/commit/51968f94b5e820adeceef505539fa193ffe2d105"><code>51968f9</code></a> Skip isNaN</li>
<li><a href="https://github.com/jshttp/cookie/commit/9e7ca51ade4b325307eedd6b4dec190983e9e2cc"><code>9e7ca51</code></a> perf(parse): cache length, return early (<a href="https://redirect.github.com/jshttp/cookie/issues/144">#144</a>)</li>
<li><a href="https://github.com/jshttp/cookie/commit/d6f39b0aab5521a8b118b466a515fd6eb0b9f65e"><code>d6f39b0</code></a> Fix tests for old node</li>
<li><a href="https://github.com/jshttp/cookie/commit/6bb701f14e59c5e768933bfae9b578db4ed26c6e"><code>6bb701f</code></a> Remove failing scorecard</li>
<li>Additional commits viewable in <a href="https://github.com/jshttp/cookie/compare/v0.4.0...v0.7.1">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~blakeembrey">blakeembrey</a>, a new releaser for cookie since your current version.</p>
</details>
<br />
Updates `cross-spawn` from 6.0.5 to 7.0.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md">cross-spawn's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6">7.0.6</a> (2024-11-18)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>update cross-spawn version to 7.0.5 in package-lock.json (<a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176">f700743</a>)</li>
</ul>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5">7.0.5</a> (2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>fix escaping bug introduced by backtracking (<a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f">640d391</a>)</li>
</ul>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4">7.0.4</a> (2024-11-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>disable regexp backtracking (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff">5ff3a07</a>)</li>
</ul>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.2...v7.0.3">7.0.3</a> (2020-05-25)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>detect path key based on correct environment (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/133">#133</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/159e7e9785e57451cba034ae51719f97135074ae">159e7e9</a>)</li>
</ul>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.1...v7.0.2">7.0.2</a> (2020-04-04)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>fix worker threads in Node >=11.10.0 (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/132">#132</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/6c5b4f015814a6c4f6b33230dfd1a860aedc0aaf">6c5b4f0</a>)</li>
</ul>
<h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.0...v7.0.1">7.0.1</a> (2019-10-07)</h3>
<h3>Bug Fixes</h3>
<ul>
<li><strong>core:</strong> support worker threads (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/127">#127</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/cfd49c9">cfd49c9</a>)</li>
</ul>
<h2><a href="https://github.com/moxystudio/node-cross-spawn/compare/v6.0.5...v7.0.0">7.0.0</a> (2019-09-03)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>
<p>drop support for Node.js < 8</p>
</li>
<li>
<p>drop support for versions below Node.js 8 (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/125">#125</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/16feb53">16feb53</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0"><code>77cd97f</code></a> chore(release): 7.0.6</li>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85"><code>6717de4</code></a> chore: upgrade standard-version</li>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176"><code>f700743</code></a> fix: update cross-spawn version to 7.0.5 in package-lock.json</li>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263"><code>9a7e3b2</code></a> chore: fix build status badge</li>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184"><code>0852683</code></a> chore(release): 7.0.5</li>
<li><a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943...
_Description has been truncated_
This repo is archived. You cannot comment on pull requests.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps the npm_and_yarn group with 3 updates in the / directory: browserslist, react-scripts and decode-uri-component.
Updates
browserslistfrom 4.14.2 to 4.24.2Release notes
Sourced from browserslist's releases.
Changelog
Sourced from browserslist's changelog.
... (truncated)
Commits
065c69bRelease 4.24.2 versionc30a4b5More clear warning text8fbb304Release 4.24.1 versionf640f4dUpdate dependencies and Node.js version on CIc017b81Updated oldDataWarning function to display how many months old caniuse-lite i...8ae85caShow how to use browserslist.defaults9320799Improve JS API docsfb0dcdbUpdate dependenciesb11087bRelease 4.24.0 versionfcad561Update dependenciesUpdates
react-scriptsfrom 4.0.3 to 5.0.1Commits
19fa58dPublish9802941fix: webpack noise printed only if error or warning (#12245)2eef1d0Update templates to use React 18createRoot(#12220)221e511Publish5614c87Add support for Tailwind (#11717)20edab4fix(webpackDevServer): disable overlay for warnings (#11413)3afbbc0Update all dependencies (#11624)f5467d5feat(eslint-config-react-app): support ESLint 8.x (#11375)c7627ceUpdate webpack and dev server (#11646)544befeUpdate package.json (#11597)Updates
@babel/traversefrom 7.15.4 to 7.26.4Release notes
Sourced from
@babel/traverse's releases.... (truncated)
Changelog
Sourced from
@babel/traverse's changelog.... (truncated)
Commits
cf7b9cdv7.26.4f33704aRevert "perf: Improve scope information collection performance" (#17005)36ca8fav7.26.3ded1571perf: Improve scope information collection performance (#16923)943bdfeperf: Avoid repeated traversal when creating scope (#16964)b07957ev7.25.9af91759fix: Accidentally publishing useless files (#16917)2533cfbv7.25.7611d958[babel 8] CreateTSClassImplements|TSInterfaceHeritagenodes (#16731)506bf91RemoveBABEL_TYPES_8_BREAKINGflag and enable it by default (#16817)Updates
bracesfrom 2.3.2 to 3.0.3Changelog
Sourced from braces's changelog.
Commits
Updates
micromatchfrom 3.1.10 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
... (truncated)
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
loader-utilsfrom 1.2.3 to 2.0.4Release notes
Sourced from loader-utils's releases.
... (truncated)
Changelog
Sourced from loader-utils's changelog.
... (truncated)
Commits
6688b50chore(release): 2.0.4ac09944fix: ReDoS problem (#225)7162619chore(release): 2.0.3a93cf6ffix(security): prototype polution exploit (#217)90c7c4bchore(release): 2.0.28c2d24efix: base64 generation and unicode characters (#197)5fb5562chore(release): 2.0.11069f61fix: md4 support on Node.js v17 (#193)d9f4e23chore(release): 2.0.0865dc03refactor: switch tomd4by default (#168)Updates
ansi-htmlfrom 0.0.7 to 0.0.9Commits
Updates
ansi-regexfrom 2.1.1 to 5.0.1Release notes
Sourced from ansi-regex's releases.
Commits
a9babce5.0.14657833fix incorrect formatc3c0b3fFix potential ReDoS (#37)178363bMove to GitHub Actions (#35)0755e66Add@Qix- to funding.yml2b56fb05.0.0f26f7feMeta tweakse77ea17Add TypeScript definition (#32)166a0d5Require Node.js 8f115fcaTidelift tasksUpdates
asyncfrom 2.6.3 to 3.2.6Changelog
Sourced from async's changelog.
... (truncated)
Commits
85fb18fVersion 3.2.68c0c941Update built files5f756b4Fix ReDoS (#1980)39cdc9bbuild(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)7b8ddebbuild(deps-dev): bump@babel/corefrom 7.24.7 to 7.25.2 (#1981)4634a9dbuild(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)afb176cbuild(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)3568a74build(deps-dev): bump@babel/eslint-parserfrom 7.24.7 to 7.25.1 (#1984)9e885fdbuild(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)f9c7f2abuild(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)Updates
body-parserfrom 1.19.0 to 1.20.3Release notes
Sourced from body-parser's releases.
... (truncated)
Changelog
Sourced from body-parser's changelog.
... (truncated)
Commits
17529511.20.339744cfchore: linter (#534)b2695c4Merge commit from forkade0f3fadd scorecard to readme (#531)99a1bd6deps: qs@6.12.3 (#521)9478591fix: pin to node@22.4.183db46aci: fix errors in ci github action for node 8 and 9 (#523)9d4e212chore: add support for OSSF scorecard reporting (#522)ee913741.20.2368a93aFix strict json error message on Node.js 19+Maintainer changes
This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.
Updates
cookiefrom 0.4.0 to 0.7.1Release notes
Sourced from cookie's releases.
Commits
cf4658f0.7.16a8b8f5Allow leading dot for domain (#174)58015c0Remove more code and perf wins (#172)ab057d60.7.05f02ca8Migrate history to GitHub releasesa5d591cMigrate history to GitHub releases51968f9Skip isNaN9e7ca51perf(parse): cache length, return early (#144)d6f39b0Fix tests for old node6bb701fRemove failing scorecardMaintainer changes
This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.
Updates
cross-spawnfrom 6.0.5 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
... (truncated)
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5