Title: build(deps): bump the npm_and_yarn group across 1 directory with 4 updates by dependabot[bot] · Pull Request #221 · PythonCoderAS/bbcode-ast · GitHub
Open Graph Title: build(deps): bump the npm_and_yarn group across 1 directory with 4 updates by dependabot[bot] · Pull Request #221 · PythonCoderAS/bbcode-ast
X Title: build(deps): bump the npm_and_yarn group across 1 directory with 4 updates by dependabot[bot] · Pull Request #221 · PythonCoderAS/bbcode-ast
Description: Bumps the npm_and_yarn group with 3 updates in the / directory: webpack, braces and js-yaml.
Updates webpack from 5.90.0 to 5.104.1
Release notes
Sourced from webpack's releases.
v5.104.1
5.104.1
Patch Changes
2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.
v5.104.0
5.104.0
Minor Changes
d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
d3dd841: Enhance import.meta.env to support object access.
4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
04cd530: Handle more at-rules for CSS modules.
cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
5983843: Provide a stable runtime function variable __webpack_global__.
d3dd841: Improved localIdentName hashing for CSS.
Patch Changes
22c48fb: Added module existence check for informative error message in development mode.
50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
d3dd841: Support universal lazy compilation.
d3dd841: Fixed module library export definitions when multiple runtimes.
d3dd841: Fixed CSS nesting and CSS custom properties parsing.
d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
aab1da9: Fixed bugs for css/global type.
d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
d3dd841: Handle nested __webpack_require__.
728ddb7: The speed of identifier parsing has been improved.
0f8b31b: Improve types.
d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
d3dd841: Serialize HookWebpackError.
d3dd841: Added ability to use built-in properties in dotenv and define plugin.
3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
d3dd841: Reduce collision for local indent name in CSS.
d3dd841: Remove CSS link tags when CSS imports are removed.
v5.103.0
Features
Added DotenvPlugin and top level dotenv option to enable this plugin
Added WebpackManifestPlugin
Added support the ignoreList option in devtool plugins
Allow to use custom javascript parse function
... (truncated)
Changelog
Sourced from webpack's changelog.
5.104.1
Patch Changes
2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.
5.104.0
Minor Changes
d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
d3dd841: Enhance import.meta.env to support object access.
4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
04cd530: Handle more at-rules for CSS modules.
cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
5983843: Provide a stable runtime function variable __webpack_global__.
d3dd841: Improved localIdentName hashing for CSS.
Patch Changes
22c48fb: Added module existence check for informative error message in development mode.
50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
d3dd841: Support universal lazy compilation.
d3dd841: Fixed module library export definitions when multiple runtimes.
d3dd841: Fixed CSS nesting and CSS custom properties parsing.
d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.
aab1da9: Fixed bugs for css/global type.
d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.
d3dd841: Handle nested __webpack_require__.
728ddb7: The speed of identifier parsing has been improved.
0f8b31b: Improve types.
d3dd841: Don't corrupt debugId injection when hidden-source-map is used.
2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.
d3dd841: Serialize HookWebpackError.
d3dd841: Added ability to use built-in properties in dotenv and define plugin.
3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.
d3dd841: Reduce collision for local indent name in CSS.
d3dd841: Remove CSS link tags when CSS imports are removed.
Commits
24e3c2d chore(release): new release (#20253)
2efd21b fix(re-exports): reexports runtime calculation should not accessing `__WEBPAC...
c510070 fix(security): userinfo bypass vulnerability in HttpUriPlugin allowedUris
4b0501c ci: fix release (#20252)
0c213ce ci: use \<@&1450591255485743204> over @here for discord notificationw
5bf8bc5 refactor: types for benchmarks and tests
505a5e7 chore(release): new release (#20188)
0c06680 refactor: update eslint configuration
2eb0d6a ci: release announcement (#20238)
b2b2459 ci: cancel in progress (#20239)
Additional commits viewable in compare view
Updates braces from 3.0.2 to 3.0.3
Commits
74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view
Updates js-yaml from 4.1.0 to 4.1.1
Changelog
Sourced from js-yaml's changelog.
[4.1.1] - 2025-11-12
Security
Fix prototype pollution issue in yaml merge (<<) operator.
Commits
cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view
Updates serialize-javascript from 6.0.0 to 6.0.2
Release notes
Sourced from serialize-javascript's releases.
v6.0.2
fix: serialize URL string contents to prevent XSS (#173) f27d65d
Bump @babel/traverse from 7.10.1 to 7.23.7 (#171) 02499c0
docs: update readme with URL support (#146) 0d88527
chore: update node version and lock file e2a3a91
fix typo (#164) 5a1fa64
yahoo/serialize-javascript@v6.0.1...v6.0.2
v6.0.1
What's Changed
Bump mocha from 9.0.1 to 9.0.2 by @dependabot in yahoo/serialize-javascript#126
Bump mocha from 9.0.2 to 9.0.3 by @dependabot in yahoo/serialize-javascript#127
Bump path-parse from 1.0.6 to 1.0.7 by @dependabot in yahoo/serialize-javascript#129
Bump mocha from 9.0.3 to 9.1.0 by @dependabot in yahoo/serialize-javascript#130
Bump mocha from 9.1.0 to 9.1.1 by @dependabot in yahoo/serialize-javascript#131
Bump mocha from 9.1.1 to 9.1.2 by @dependabot in yahoo/serialize-javascript#132
Bump mocha from 9.1.2 to 9.1.3 by @dependabot in yahoo/serialize-javascript#133
Bump mocha from 9.1.3 to 9.1.4 by @dependabot in yahoo/serialize-javascript#137
Bump mocha from 9.1.4 to 9.2.0 by @dependabot in yahoo/serialize-javascript#138
Bump chai from 4.3.4 to 4.3.6 by @dependabot in yahoo/serialize-javascript#140
Bump ansi-regex from 5.0.0 to 5.0.1 by @dependabot in yahoo/serialize-javascript#141
Bump mocha from 9.2.0 to 9.2.2 by @dependabot in yahoo/serialize-javascript#143
Bump minimist from 1.2.5 to 1.2.6 by @dependabot in yahoo/serialize-javascript#144
Bump mocha from 9.2.2 to 10.0.0 by @dependabot in yahoo/serialize-javascript#145
Bump mocha from 10.0.0 to 10.1.0 by @dependabot in yahoo/serialize-javascript#149
Bump chai from 4.3.6 to 4.3.7 by @dependabot in yahoo/serialize-javascript#150
ci: test.yml - actions bump by @piwysocki in yahoo/serialize-javascript#151
Bump minimatch from 3.0.4 to 3.1.2 by @dependabot in yahoo/serialize-javascript#152
Bump mocha from 10.1.0 to 10.2.0 by @dependabot in yahoo/serialize-javascript#153
Bump json5 from 2.1.3 to 2.2.3 by @dependabot in yahoo/serialize-javascript#155
Fix serialization issue for 0n. by @momocow in yahoo/serialize-javascript#156
Release v6.0.1 by @okuryu in yahoo/serialize-javascript#157
New Contributors
@piwysocki made their first contribution in yahoo/serialize-javascript#151
@momocow made their first contribution in yahoo/serialize-javascript#156
Full Changelog: yahoo/serialize-javascript@v6.0.0...v6.0.1
Commits
b71ec23 6.0.2
f27d65d fix: serialize URL string contents to prevent XSS (#173)
02499c0 Bump @babel/traverse from 7.10.1 to 7.23.7 (#171)
0d88527 docs: update readme with URL support (#146)
e2a3a91 chore: update node version and lock file
5a1fa64 fix typo (#164)
7139f92 Release v6.0.1 (#157)
7e23ae8 Fix serialization issue for 0n. (#156)
343abd9 Bump json5 from 2.1.3 to 2.2.3 (#155)
38d0e70 Bump mocha from 10.1.0 to 10.2.0 (#153)
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps the npm_and_yarn group with 3 updates in the / directory: webpack, braces and js-yaml. Updates webpack from 5.90.0 to 5.104.1 Release notes Sourced from webpack's releases. v5.104.1 5.1...
X Description: Bumps the npm_and_yarn group with 3 updates in the / directory: webpack, braces and js-yaml. Updates webpack from 5.90.0 to 5.104.1 Release notes Sourced from webpack's releases. v5.104.1...
Opengraph URL: https://github.com/PythonCoderAS/bbcode-ast/pull/221
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:67976374-05e8-d35d-9aec-cd1992f4050a |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | CA82:2BEA70:695B83:8ECEC5:6A51EF81 |
| html-safe-nonce | d876eefdca94ea4c2231f9e0998757da604ea59b5e0192c9f320e2524882195e |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDQTgyOjJCRUE3MDo2OTVCODM6OEVDRUM1OjZBNTFFRjgxIiwidmlzaXRvcl9pZCI6Ijc0NDgzNDE0MDQ3MjI1MjQwMzMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 3005f31c2e0700d1284a07c7527c793bfc9af7bba05028f7d21104249ab9388d |
| hovercard-subject-tag | pull_request:3176576821 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/PythonCoderAS/bbcode-ast/pull/221/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps the npm_and_yarn group with 3 updates in the / directory: webpack, braces and js-yaml. Updates webpack from 5.90.0 to 5.104.1 Release notes Sourced from webpack's releases. v5.104.1 5.1... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | b9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/PythonCoderAS/bbcode-ast git https://github.com/PythonCoderAS/bbcode-ast.git |
| octolytics-dimension-user_id | 13932583 |
| octolytics-dimension-user_login | PythonCoderAS |
| octolytics-dimension-repository_id | 526190192 |
| octolytics-dimension-repository_nwo | PythonCoderAS/bbcode-ast |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 526190192 |
| octolytics-dimension-repository_network_root_nwo | PythonCoderAS/bbcode-ast |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 7aed05249554b889eb33d002851a973eebcc7e91 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width