Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the security group in /web with 8 updates #4759

Merged
merged 1 commit into from
Jul 13, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 13, 2024

Bumps the security group in /web with 8 updates:

Package From To
@mui/icons-material 5.16.0 5.16.1
@mui/material 5.16.0 5.16.1
@babel/cli 7.24.7 7.24.8
@babel/core 7.24.7 7.24.8
@babel/eslint-parser 7.24.7 7.24.8
@babel/preset-env 7.24.7 7.24.8
sass 1.77.6 1.77.8
webpack 5.92.1 5.93.0

Updates @mui/icons-material from 5.16.0 to 5.16.1

Release notes

Sourced from @​mui/icons-material's releases.

v5.16.1

A big thanks to the 4 contributors who made this release possible. Here are some highlights ✨:

  • ⚛️ All packages, including Material UI, are now compatible with React 18.3.1

@mui/material@5.16.1

@mui/joy@5.0.0-beta.48

Docs

Core

All contributors of this release in alphabetical order: @​aarongarciah, @​oliviertassinari, @​omahs, @​ZeeshanTamboli

Changelog

Sourced from @​mui/icons-material's changelog.

v5.16.1

Jul 11, 2024

A big thanks to the 4 contributors who made this release possible. Here are some highlights ✨:

  • ⚛️ All packages, including Material UI, are now compatible with React 18.3.1

@mui/material@5.16.1

@mui/joy@5.0.0-beta.48

Docs

Core

All contributors of this release in alphabetical order: @​aarongarciah, @​oliviertassinari, @​omahs, @​ZeeshanTamboli

Commits

Updates @mui/material from 5.16.0 to 5.16.1

Release notes

Sourced from @​mui/material's releases.

v5.16.1

A big thanks to the 4 contributors who made this release possible. Here are some highlights ✨:

  • ⚛️ All packages, including Material UI, are now compatible with React 18.3.1

@mui/material@5.16.1

@mui/joy@5.0.0-beta.48

Docs

Core

All contributors of this release in alphabetical order: @​aarongarciah, @​oliviertassinari, @​omahs, @​ZeeshanTamboli

Changelog

Sourced from @​mui/material's changelog.

v5.16.1

Jul 11, 2024

A big thanks to the 4 contributors who made this release possible. Here are some highlights ✨:

  • ⚛️ All packages, including Material UI, are now compatible with React 18.3.1

@mui/material@5.16.1

@mui/joy@5.0.0-beta.48

Docs

Core

All contributors of this release in alphabetical order: @​aarongarciah, @​oliviertassinari, @​omahs, @​ZeeshanTamboli

Commits

Updates @babel/cli from 7.24.7 to 7.24.8

Release notes

Sourced from @​babel/cli's releases.

v7.24.8 (2024-07-11)

Thanks @​H0onnn, @​jkup and @​SreeXD for your first pull requests!

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

Changelog

Sourced from @​babel/cli's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Commits

Updates @babel/core from 7.24.7 to 7.24.8

Release notes

Sourced from @​babel/core's releases.

v7.24.8 (2024-07-11)

Thanks @​H0onnn, @​jkup and @​SreeXD for your first pull requests!

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

Changelog

Sourced from @​babel/core's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Commits

Updates @babel/eslint-parser from 7.24.7 to 7.24.8

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.24.8 (2024-07-11)

Thanks @​H0onnn, @​jkup and @​SreeXD for your first pull requests!

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

Changelog

Sourced from @​babel/eslint-parser's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Commits

Updates @babel/preset-env from 7.24.7 to 7.24.8

Release notes

Sourced from @​babel/preset-env's releases.

v7.24.8 (2024-07-11)

Thanks @​H0onnn, @​jkup and @​SreeXD for your first pull requests!

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

Changelog

Sourced from @​babel/preset-env's changelog.

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Commits

Updates sass from 1.77.6 to 1.77.8

Release notes

Sourced from sass's releases.

Dart Sass 1.77.8

To install Sass 1.77.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.77.8

  • No user-visible changes.

1.77.7

  • Declarations that appear after nested rules are deprecated, because the semantics Sass has historically used are different from the semantics specified by CSS. In the future, Sass will adopt the standard CSS semantics.

    See the Sass website for details.

  • Potentially breaking bug fix: // in certain places such as unknown at-rule values was being preserved in the CSS output, leading to potentially invalid CSS. It's now properly parsed as a silent comment and omitted from the CSS output.

Commits

Updates webpack from 5.92.1 to 5.93.0

Release notes

Sourced from webpack's releases.

v5.93.0

Bug Fixes

  • Generate correct relative path to runtime chunks
  • Makes DefinePlugin quieter under default log level
  • Fixed mangle destructuring default in namespace import
  • Fixed consumption of eager shared modules for module federation
  • Strip slash for pretty regexp
  • Calculate correct contenthash for CSS generator options

New Features

  • Added the binary generator option for asset modules to explicitly keep source maps produced by loaders
  • Added the modern-module library value for tree shakable output
  • Added the overrideStrict option to override strict or non-strict mode for javascript modules
Commits
  • 277460b chore(release): 5.93.0
  • 76ab754 fix: relative path to runtime chunks
  • 40b1a77 test: added
  • 080e54f fix: relative path to runtime chunks
  • 7764e38 chore(deps-dev): bump eslint from 9.5.0 to 9.6.0
  • 22738f3 chore(deps-dev): bump eslint from 9.5.0 to 9.6.0
  • 1a27b9e fix: contenthash for css generator options
  • e716d44 chore(deps-dev): bump @​eslint/js from 9.5.0 to 9.6.0
  • 7a34330 chore(deps-dev): bump typescript from 5.5.2 to 5.5.3
  • 974752f chore(deps-dev): bump globals from 15.6.0 to 15.8.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group in /web with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material) | `5.16.0` | `5.16.1` |
| [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material) | `5.16.0` | `5.16.1` |
| [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) | `7.24.7` | `7.24.8` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.7` | `7.24.8` |
| [@babel/eslint-parser](https://github.com/babel/babel/tree/HEAD/eslint/babel-eslint-parser) | `7.24.7` | `7.24.8` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.24.7` | `7.24.8` |
| [sass](https://github.com/sass/dart-sass) | `1.77.6` | `1.77.8` |
| [webpack](https://github.com/webpack/webpack) | `5.92.1` | `5.93.0` |


Updates `@mui/icons-material` from 5.16.0 to 5.16.1
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v5.16.1/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v5.16.1/packages/mui-icons-material)

Updates `@mui/material` from 5.16.0 to 5.16.1
- [Release notes](https://github.com/mui/material-ui/releases)
- [Changelog](https://github.com/mui/material-ui/blob/v5.16.1/CHANGELOG.md)
- [Commits](https://github.com/mui/material-ui/commits/v5.16.1/packages/mui-material)

Updates `@babel/cli` from 7.24.7 to 7.24.8
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-cli)

Updates `@babel/core` from 7.24.7 to 7.24.8
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-core)

Updates `@babel/eslint-parser` from 7.24.7 to 7.24.8
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.8/eslint/babel-eslint-parser)

Updates `@babel/preset-env` from 7.24.7 to 7.24.8
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.8/packages/babel-preset-env)

Updates `sass` from 1.77.6 to 1.77.8
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.77.6...1.77.8)

Updates `webpack` from 5.92.1 to 5.93.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.92.1...v5.93.0)

---
updated-dependencies:
- dependency-name: "@mui/icons-material"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@mui/material"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/eslint-parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependabot javascript Pull requests that update Javascript code type::security labels Jul 13, 2024
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit e40127e into main Jul 13, 2024
110 checks passed
@replicated-ci replicated-ci deleted the dependabot/npm_and_yarn/web/security-b8de46130e branch July 13, 2024 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot javascript Pull requests that update Javascript code type::security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant