expo-starter Bump the npm_and_yarn group across 1 directory with 3 updates

Bumps the npm_and_yarn group with 3 updates in the / directory: braces, fast-loops and undici.

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates fast-loops from 1.1.3 to 1.1.4

Commits

See full diff in compare view

Updates undici from 6.17.0 to 6.19.7

Release notes

Sourced from undici's releases.

v6.19.7

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.6...v6.19.7

v6.19.6

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.5...v6.19.6

v6.19.5

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.4...v6.19.5

v6.19.4

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.3...v6.19.4

v6.19.3

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.2...v6.19.3

v6.19.2

What's Changed

fix #3337 by @KhafraDev in nodejs/undici#3338

build: use husky as husky install is deprecated by @jazelly in nodejs/undici#3340

fix: interceptors.d.ts has no default export by @Uzlopak in nodejs/undici#3332

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.1...v6.19.2

v6.19.1

What's Changed

don't append empty origin by @KhafraDev in nodejs/undici#3335

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.0...v6.19.1

v6.19.0

What's Changed

build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in nodejs/undici#3305

build(deps): bump codecov/codecov-action from 4.3.1 to 4.4.1 by @dependabot in nodejs/undici#3303

build(deps): bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in nodejs/undici#3304

build(deps): bump github/codeql-action from 3.25.3 to 3.25.7 by @dependabot in nodejs/undici#3306

build(deps): bump node from 9e8f45f to dd7e693 in /build by @dependabot in nodejs/undici#3309

build(deps): bump node from dd7e693 to e6d4495 in /build by @dependabot in nodejs/undici#3313

remove websocket experimental warning by @KhafraDev in nodejs/undici#3311

perf: optimization of request instantiation by @tsctx in nodejs/undici#3107

perf: convert object to params by @DarkGL in nodejs/undici#3302

build(deps-dev): bump borp from 0.14.0 to 0.15.0 by @dependabot in nodejs/undici#3320

build(deps-dev): bump c8 from 9.1.0 to 10.0.0 by @dependabot in nodejs/undici#3321

fix: add missing error classes to types by @maxbeatty in nodejs/undici#3316

export interceptor to type def file by @jakecastelli in nodejs/undici#3318

build(deps): bump node from e6d4495 to 075a5cc in /build by @dependabot in nodejs/undici#3326

doc: clearify the behaviour of bodyTimeout in the request by @jakecastelli in nodejs/undici#3324

feature: support pre-shared sessions by @tastypackets in nodejs/undici#3325

... (truncated)

Commits

c81f5a7 Bumped v6.19.7
09c5667 build: remove -i flag to docker run to allow command being run without a TTY
b9bf7ad Bumped v6.19.6
638ee32 fix: memory leak in finalization first appearing in v6.16.0 (#3445)
8499c4b Bumped v6.19.5
93605ab fix: restore externalized Node.js dep compatibility (#3421)
62241c3 Bumped v6.19.4
e51aa88 Update esbuild to 0.19.10 (#3415)
99102cc Bumped v6.19.3
b696a78 In CITGM, skip tests that are flaky there (#3413)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Aug 15 '24 23:08 dependabot[bot]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	None	`0`	44.6 kB	jonschlinkert
npm/[email protected]	None	`0`	16.7 kB	jonschlinkert
npm/[email protected]	environment, network	`0`	1.13 MB	matteo.collina

🚮 Removed packages: npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Aug 15 '24 23:08 socket-security[bot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Mar 24 '25 06:03 dependabot[bot]