⬆️ Bump json5, ava and tsconfig-paths

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps json5 to 2.2.2 and updates ancestor dependencies json5, ava and tsconfig-paths. These dependencies need to be updated together.

Updates json5 from 0.5.1 to 2.2.2

Release notes

Sourced from json5's releases.

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

v2.1.0

New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. (#187)

v2.0.1

Fix: The browser builds in the dist directory support ES5. (#182)

v2.0.0

Major: JSON5 officially supports Node.js v6 and later. Support for Node.js v4 has been dropped. Since Node.js v6 supports ES5 features, the code has been rewritten in native ES5, and the dependence on Babel has been eliminated.

New: Support for Unicode 10 has been added.

New: The test framework has been migrated from Mocha to Tap.

New: The browser build at dist/index.js is no longer minified by default. A minified version is available at dist/index.min.js. (#181)

Fix: The warning has been made clearer when line and paragraph separators are used in strings.

Fix: package.json5 has been restored, and it is automatically generated and

... (truncated)

Changelog

Sourced from json5's changelog.

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, diff]

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

... (truncated)

Commits

14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
d720b4f Improve readme (e.g. explain JSON5 better!) (#291)
910ce25 docs: fix spelling of Aseem
2aab4dd test: require tap as t in cli tests
6d42686 test: remove mocha syntax from tests
4798b9d docs: update installation and usage for modules
Additional commits viewable in compare view

Updates ava from 0.23.0 to 5.1.0

Release notes

Sourced from ava's releases.

v5.1.0

What's Changed

Output logs for tests that remain pending when AVA exits by @kevo1ution in avajs/ava#3125

Check for --config file extensions after they fail to load, allowing custom loaders by @panva in avajs/ava#3135

New Contributors

@kevo1ution made their first contribution in avajs/ava#3125

@panva made their first contribution in avajs/ava#3135

Full Changelog: https://github.com/avajs/ava/compare/v5.0.1...v5.1.0

v5.0.1

Despite the major version bump this is a relatively minor release. Node.js 12 is no longer supported. The type definitions are now distributed to be compatible with TypeScript 4.7 or newer.
npm install --save-dev ava
Breaking Changes

AVA now requires Node.js 14.19, 16.15 or 18. avajs/ava#3043

Type definition distribution assumes at least TypeScript 4.7. avajs/ava#3041

We're now exporting types rather than interfaces. avajs/ava#3096

Improvements

Detect process.exit() called from tests by @gibson042 in avajs/ava#3080

Improve test result accessibility by @gibson042 in avajs/ava#3082

Parse for line numbers with latest supported ECMA version by @novemberborn in avajs/ava#3063

Work around os.cpus() returning an empty array on unsupported platforms by @catink123 in avajs/ava#3095

Count timeouts separately from the timed out tests by @novemberborn in avajs/ava#3099

Cap idle timeouts to the maximum possible value by @creestor in avajs/ava#3100

New Contributors

@Prinzhorn made their first contribution in avajs/ava#3073

@catink123 made their first contribution in avajs/ava#3095

@creestor made their first contribution in avajs/ava#3100

@DavidVujic made their first contribution in avajs/ava#3109

Full Changelog: https://github.com/avajs/ava/compare/v4.3.3...v5.0.1

v5.0.0

Despite the major version bump this is a relatively minor release. Node.js 12 is no longer supported. The type definitions are now distributed to be compatible with TypeScript 4.7 or newer.

It's available as a pre-release under the next tag for the next few weeks:
npm install --save-dev ava@next

... (truncated)

Commits

4ecfe7d 5.1.0
609b307 Update dependencies
647d3e1 Check for --config file extensions after they fail to load, allowing custom l...
9206928 Output logs for tests that remain pending when AVA exits
136dde3 Update reporter logs for latest Node.js 16
7007f13 5.0.1
48dcafa Update dependencies; more type tweaks
3ebe65c Re-organize types for maximum compatibility
2d3f394 Update to the browser testing recipe to use jsdom directly
52b2270 Cap idle timeouts to the maximum possible value
Additional commits viewable in compare view

Updates tsconfig-paths from 3.9.0 to 3.10.1

Changelog

Sourced from tsconfig-paths's changelog.

[3.10.1] - 2021-07-06

Fixed

Add register.js to published files

[3.10.0] - 2021-07-06

Added

feat(tsconfig-loader): extends config from node_modules (#106). Thanks to @zorji for this PR!

Fixed

Update CHANGELOG.md (#96). Thanks to @OliverJAsh for this PR!

Fix "bootstraping" typo (#111). Thanks to @KRMisha for this PR!

Update Readme fixes #116 (#123). Thanks to @benwinding for this PR!

Fixed typo (#144). Thanks to @mprinc for this PR!

[TYPO] src/mapping-entry.ts (#145). Thanks to @mprinc for this PR!

docs(README): fix typos (#156). Thanks to @PiDelport for this PR!

deps: bump json5 to use type definition provided officially (#158). Thanks to @koba04 for this PR!

Update tsconfig-loader.ts (#161). Thanks to @fecqs for this PR!

fix typo (#165). Thanks to @wonda-tea-coffee for this PR!

Add file extenstion to typings property value (#151). Thanks to @dangrussell for this PR!

Commits

80bc810 v3.10.1
beb9a47 Add changelog for 3.10.1
893b76d Add register.js to published files
9327fa1 v3.10.0
766a0e8 Update changelog for 3.10.0
2cf8b21 Categorize changelog
fb67ba2 Update changelog with unreleased PRs
079285a Add file extenstion to typings property value (#151)
c49386c feat(tsconfig-loader): extends config from node_modules without './node_modul...
f289c99 fix typo (#165)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Dec 30 '22 10:12 dependabot[bot]