Bump serialize-javascript, react-scripts and stream-chat-react
Bumps serialize-javascript to 6.0.2 and updates ancestor dependencies serialize-javascript, react-scripts and stream-chat-react. These dependencies need to be updated together.
Updates serialize-javascript from 2.1.2 to 6.0.2
Release notes
Sourced from serialize-javascript's releases.
v6.0.2
- fix: serialize URL string contents to prevent XSS (#173) f27d65d
- Bump
@babel/traversefrom 7.10.1 to 7.23.7 (#171) 02499c0- docs: update readme with URL support (#146) 0d88527
- chore: update node version and lock file e2a3a91
- fix typo (#164) 5a1fa64
https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2
v6.0.1
What's Changed
- Bump mocha from 9.0.1 to 9.0.2 by
@dependabotin yahoo/serialize-javascript#126- Bump mocha from 9.0.2 to 9.0.3 by
@dependabotin yahoo/serialize-javascript#127- Bump path-parse from 1.0.6 to 1.0.7 by
@dependabotin yahoo/serialize-javascript#129- Bump mocha from 9.0.3 to 9.1.0 by
@dependabotin yahoo/serialize-javascript#130- Bump mocha from 9.1.0 to 9.1.1 by
@dependabotin yahoo/serialize-javascript#131- Bump mocha from 9.1.1 to 9.1.2 by
@dependabotin yahoo/serialize-javascript#132- Bump mocha from 9.1.2 to 9.1.3 by
@dependabotin yahoo/serialize-javascript#133- Bump mocha from 9.1.3 to 9.1.4 by
@dependabotin yahoo/serialize-javascript#137- Bump mocha from 9.1.4 to 9.2.0 by
@dependabotin yahoo/serialize-javascript#138- Bump chai from 4.3.4 to 4.3.6 by
@dependabotin yahoo/serialize-javascript#140- Bump ansi-regex from 5.0.0 to 5.0.1 by
@dependabotin yahoo/serialize-javascript#141- Bump mocha from 9.2.0 to 9.2.2 by
@dependabotin yahoo/serialize-javascript#143- Bump minimist from 1.2.5 to 1.2.6 by
@dependabotin yahoo/serialize-javascript#144- Bump mocha from 9.2.2 to 10.0.0 by
@dependabotin yahoo/serialize-javascript#145- Bump mocha from 10.0.0 to 10.1.0 by
@dependabotin yahoo/serialize-javascript#149- Bump chai from 4.3.6 to 4.3.7 by
@dependabotin yahoo/serialize-javascript#150- ci: test.yml - actions bump by
@piwysockiin yahoo/serialize-javascript#151- Bump minimatch from 3.0.4 to 3.1.2 by
@dependabotin yahoo/serialize-javascript#152- Bump mocha from 10.1.0 to 10.2.0 by
@dependabotin yahoo/serialize-javascript#153- Bump json5 from 2.1.3 to 2.2.3 by
@dependabotin yahoo/serialize-javascript#155- Fix serialization issue for 0n. by
@momocowin yahoo/serialize-javascript#156- Release v6.0.1 by
@okuryuin yahoo/serialize-javascript#157New Contributors
@piwysockimade their first contribution in yahoo/serialize-javascript#151@momocowmade their first contribution in yahoo/serialize-javascript#156Full Changelog: https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1
v6.0.0
Changelog
... (truncated)
Commits
b71ec236.0.2f27d65dfix: serialize URL string contents to prevent XSS (#173)02499c0Bump@babel/traversefrom 7.10.1 to 7.23.7 (#171)0d88527docs: update readme with URL support (#146)e2a3a91chore: update node version and lock file5a1fa64fix typo (#164)7139f92Release v6.0.1 (#157)7e23ae8Fix serialization issue for 0n. (#156)343abd9Bump json5 from 2.1.3 to 2.2.3 (#155)38d0e70Bump mocha from 10.1.0 to 10.2.0 (#153)- Additional commits viewable in compare view
Updates react-scripts from 3.0.1 to 5.0.1
Changelog
Sourced from react-scripts's changelog.
3.4.4 (2020-10-20)
v3.4.4 release bumps
resolve-url-loaderto a version for whichnpm auditdoes not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.3 to 3.4.4
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]or
yarn add --exact [email protected]3.4.3 (2020-08-12)
v3.4.3 release bumps
terser-webpack-pluginto a version for whichnpm auditdoes not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.2 to 3.4.3
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]or
yarn add --exact [email protected]3.4.2 (2020-08-11)
v3.4.2 release bumps
webpack-dev-serverto a version for whichnpm auditdoes not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.1 to 3.4.2
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]or
... (truncated)
Commits
19fa58dPublish9802941fix: webpack noise printed only if error or warning (#12245)2eef1d0Update templates to use React 18createRoot(#12220)221e511Publish5614c87Add support for Tailwind (#11717)20edab4fix(webpackDevServer): disable overlay for warnings (#11413)3afbbc0Update all dependencies (#11624)f5467d5feat(eslint-config-react-app): support ESLint 8.x (#11375)c7627ceUpdate webpack and dev server (#11646)544befeUpdate package.json (#11597)- Additional commits viewable in compare view
Updates stream-chat-react from 0.5.8 to 0.8.8
Changelog
Sourced from stream-chat-react's changelog.
10.8.8 (2023-07-27)
Bug Fixes
10.8.7 (2023-07-17)
Bug Fixes
10.8.6 (2023-07-11)
Bug Fixes
- enable search results scrolling (#2041) (e61cabe)
- prevent ignoring the clearSearchOnClickOutside search param on mobile (#2039) (e83d313)
10.8.5 (2023-06-27)
Bug Fixes
10.8.4 (2023-06-22)
Bug Fixes
10.8.3 (2023-06-12)
Bug Fixes
10.8.2 (2023-06-09)
Bug Fixes
... (truncated)
Commits
6cb33e90.8.860c9bf8Updating changelog3d131baUpdating stream-chat version2c74a68Merge pull request #169 from GetStream/vishal/notification-fix2127e6fMerge pull request #170 from GetStream/vishal/thread-remove-message-fix0848129Merge pull request #171 from GetStream/vishal/typing-indicator4801be2Merge pull request #172 from GetStream/vishal/moderator-check-fix311fab9Fixing the check for moderator rolec24dc7aFix in typing indicator to exclude current usere592a4eFixing remove message functionality for threads- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by vishtree, a new releaser for stream-chat-react since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.