Bump semver, botframework-connector, mocha and replace in /botbuilder-teams-js

Open dependabot[bot] opened this issue 2 years ago • 0 comments

Bumps semver to 7.5.3 and updates ancestor dependencies semver, botframework-connector, mocha and replace. These dependencies need to be updated together.

Updates semver from 5.7.0 to 7.5.3

Release notes

Sourced from semver's releases.

v7.5.3

7.5.3 (2023-06-22)

Bug Fixes

abdd93d #571 set max lengths in regex for numeric and build identifiers (#571) (@lukekarrys)

Documentation

bf53dd8 #569 add example for > comparator (#569) (@mbtools)

v7.5.2

7.5.2 (2023-06-15)

Bug Fixes

58c791f #566 diff when detecting major change from prerelease (#566) (@lukekarrys)

5c8efbc #565 preserve build in raw after inc (#565) (@lukekarrys)

717534e #564 better handling of whitespace (#564) (@lukekarrys)

v7.5.1

7.5.1 (2023-05-12)

Bug Fixes

d30d25a #559 show type on invalid semver error (#559) (@tjenkinson)

v7.5.0

7.5.0 (2023-04-17)

Features

503a4e5 #548 allow identifierBase to be false (#548) (@lsvalina)

Bug Fixes

e219bb4 #552 throw on bad version with correct error message (#552) (@wraithgar)

fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@tjenkinson)

2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@macno)

v7.4.0

7.4.0 (2023-04-10)

Features

113f513 #532 identifierBase parameter for .inc (#532) (@wraithgar, @b-bly)

48d8f8f #530 export new RELEASE_TYPES constant (@hcharley)

Bug Fixes

... (truncated)

Changelog

Sourced from semver's changelog.

7.5.3 (2023-06-22)

Bug Fixes

abdd93d #571 set max lengths in regex for numeric and build identifiers (#571) (@lukekarrys)

Documentation

bf53dd8 #569 add example for > comparator (#569) (@mbtools)

7.5.2 (2023-06-15)

Bug Fixes

58c791f #566 diff when detecting major change from prerelease (#566) (@lukekarrys)

5c8efbc #565 preserve build in raw after inc (#565) (@lukekarrys)

717534e #564 better handling of whitespace (#564) (@lukekarrys)

7.5.1 (2023-05-12)

Bug Fixes

d30d25a #559 show type on invalid semver error (#559) (@tjenkinson)

7.5.0 (2023-04-17)

Features

503a4e5 #548 allow identifierBase to be false (#548) (@lsvalina)

Bug Fixes

e219bb4 #552 throw on bad version with correct error message (#552) (@wraithgar)

fc2f3df #546 incorrect results from diff sometimes with prerelease versions (#546) (@tjenkinson)

2781767 #547 avoid re-instantiating SemVer during diff compare (#547) (@macno)

7.4.0 (2023-04-10)

Features

113f513 #532 identifierBase parameter for .inc (#532) (@wraithgar, @b-bly)

48d8f8f #530 export new RELEASE_TYPES constant (@hcharley)

Bug Fixes

940723d #538 intersects with v0.0.0 and v0.0.0-0 (#538) (@wraithgar)

aa516b5 #535 faster parse options (#535) (@H4ad)

61e6ea1 #536 faster cache key factory for range (#536) (@H4ad)

f8b8b61 #541 optimistic parse (#541) (@H4ad)

796cbe2 #533 semver.diff prerelease to release recognition (#533) (@wraithgar, @dominique-blockchain)

... (truncated)

Commits

7fdf1ef chore: release 7.5.3
bf53dd8 docs: add example for > comparator (#569)
abdd93d fix: set max lengths in regex for numeric and build identifiers (#571)
e7b78de chore: release 7.5.2
58c791f fix: diff when detecting major change from prerelease (#566)
5c8efbc fix: preserve build in raw after inc (#565)
717534e fix: better handling of whitespace (#564)
2f738e9 chore: bump @npmcli/template-oss from 4.14.1 to 4.15.1 (#558)
aa016a6 chore: release 7.5.1
d30d25a fix: show type on invalid semver error (#559)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.

Updates botframework-connector from 4.3.2 to 4.20.0

Release notes

Sourced from botframework-connector's releases.

Bot Framework for JS SDK 4.20.0

This is the June 2023 release of the JavaScript SDK. This release contains Teams features and bug/security fixes.

What's Changed

Teams

feat: Add MeetingTabIconSurface to MeetingSurface capabilities by @corinagum in microsoft/botbuilder-js#4459

feat: Add support for Teams Adaptive cards in QnA Dialog by @anishprasad01 in microsoft/botbuilder-js#4467

fix: Teams Meeting Notification interface structure changes by @singhk97 in microsoft/botbuilder-js#4416

fix: Teams activity handler documentation fix by @singhk97 in microsoft/botbuilder-js#4407

fix: #4408 Cloud adapter is not working with teams SSO by @erquirogasw in microsoft/botbuilder-js#4427

port: #4463 #6596 TeamsChannelData need OnBehalfOf by @ceciliaavila in microsoft/botbuilder-js#4474

Other

fix: streaming client should connect under Node.js by @compulim in microsoft/botbuilder-js#4413

fix: #4414 JS Linux Functional Test pipeline failing by @ceciliaavila in microsoft/botbuilder-js#4419

fix: #4400 Security vulnerabilityCVE-2022-23540, CVE-2022-23539, CVE-2022-23541, CVE-2022-23529 by @erquirogasw in microsoft/botbuilder-js#4409

fix: Add check to handle bad values in Orchestrator botState.ts by @anishprasad01 in microsoft/botbuilder-js#4425

fix: Update channelServiceRoutes to add next() parameter to support restify 10.0.0+ by @anishprasad01 in microsoft/botbuilder-js#4429

fix: #4452 #4456 #4460[botframework-streaming] Should reject pending requests on disconnection by @compulim in microsoft/botbuilder-js#4461

fix: #4455 [botframework-streaming] Tests are not conclusive by @sw-joelmut in microsoft/botbuilder-js#4468

fix: #4466 Fix telemetry activityId and conversationId properties by @sw-joelmut in microsoft/botbuilder-js#4471

chore: bump vm2 from 3.9.11 to 3.9.17 by @dependabot in microsoft/botbuilder-js#4451

port: #4464 USER scope variable values do not transfer to skill when SSO is configured by @ceciliaavila in microsoft/botbuilder-js#4472

port: #4432 Expired JWT token exception not being handled (#6572) by @ceciliaavila in microsoft/botbuilder-js#4436

chore: bump json5 from 1.0.1 to 1.0.2 in /testing/browser-functional/browser-echo-bot by @dependabot in microsoft/botbuilder-js#4402

chore: bump json5 from 1.0.1 to 1.0.2 by @dependabot in microsoft/botbuilder-js#4403

chore: bump ua-parser-js from 0.7.31 to 0.7.33 in /testing/browser-functional/browser-echo-bot by @dependabot in microsoft/botbuilder-js#4422

fix: #4449 CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken by @sw-joelmut in microsoft/botbuilder-js#4457

chore: bump cookiejar from 2.1.2 to 2.1.4 by @dependabot in microsoft/botbuilder-js#4417

bump: Update tools/nyc dependency by @sw-joelmut in microsoft/botbuilder-js#4475

port: #4465 #6560 Allow TokenCredential authentication in CosmosDbPartitionedStorage by @ceciliaavila in microsoft/botbuilder-js#4473

chore: bump vm2 from 3.9.17 to 3.9.18 by @dependabot in microsoft/botbuilder-js#4478

fix: Updates fast-xml-parser to address "Prototype Pollution" vulnerability by @giacomorebonato in microsoft/botbuilder-js#4477

New Contributors

@corinagum made their first contribution in microsoft/botbuilder-js#4459

@giacomorebonato made their first contribution in microsoft/botbuilder-js#4477

Full Changelog: https://github.com/microsoft/botbuilder-js/compare/4.19.0...4.20.0

Bot Framework JS SDK 4.19.3

Welcome to the March 2023 release of the Bot Framework SDK.

What's Changed

Streaming client should connect under Node.js microsoft/botbuilder-js#4413

Update channelServiceRoutes to add next() parameter to support restify 10.0.0+ microsoft/botbuilder-js#4429

Bot Framework JS SDK 4.19.2

Welcome to the February 2023 release of the Bot Framework SDK.

... (truncated)

Commits

See full diff in compare view

Updates mocha from 6.1.4 to 10.2.0

Release notes

Sourced from mocha's releases.

v10.2.0

10.2.0 / 2022-12-11

:tada: Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

:bug: Fixes

#4946: Browser: color of failed test icon (@kleisauke)

:book: Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

v10.1.0

10.1.0 / 2022-10-16

:tada: Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

:nut_and_bolt: Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

v10.0.0

10.0.0 / 2022-05-01

:boom: Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

:nut_and_bolt: Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.2.0 / 2022-12-11

:tada: Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

:bug: Fixes

#4946: Browser: color of failed test icon (@kleisauke)

:book: Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

10.1.0 / 2022-10-16

:tada: Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

:nut_and_bolt: Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

10.0.0 / 2022-05-01

:boom: Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

:nut_and_bolt: Other

#4878: Update production dependencies (@juergba)

#4876: Add Node.js v18 to CI test matrix (@outsideris)

... (truncated)

Commits

202e9b8 build(v10.2.0): release
6782d6d build(v10.2.0): update CHANGELOG
73bb819 feat(esm): ability to decorate ESM module name before importing it (#4945)
fc4ac58 chore(devDeps): remove unused depedencies (#4949)
0a10ddc docs: remove duplicated header (#4944)
b0a0fb8 fix(browser): failed test icon color (#4946)
3cc9cac ci: update stale action (#4931)
8f3c37b chore(ci): workaround for firefox error (#4933)
5f96d51 build(v10.1.0): release
ed74f16 build(v10.1.0): update CHANGELOG
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by juergba, a new releaser for mocha since your current version.

Updates replace from 1.1.0 to 1.2.2

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Jun 23 '23 14:06 dependabot[bot]