Data-Science-For-Beginners

Commit Graph

Author	SHA1	Message	Date
Lee Stott	52dbe5e146	Merge branch 'main' into copilot/fix-serialize-javascript-vulnerability	2 weeks ago
Lee Stott	bfdae9acd4	Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	2 weeks ago
copilot-swe-agent[bot]	dfba49f650	fix: tighten override ranges and align engine floor	2 weeks ago
copilot-swe-agent[bot]	2e2ddb90bd	fix: declare Node 20 requirement for solution build	2 weeks ago
copilot-swe-agent[bot]	23daaa1a13	fix: align meaningful visualizations dependency patch	2 weeks ago
copilot-swe-agent[bot]	ff871a6454	fix: upgrade serialize-javascript to 7.0.5	2 weeks ago
copilot-swe-agent[bot]	e35de59ece	fix: update webpack-dev-server override to 5.2.6 and add engines field - Update webpack-dev-server override from 5.2.4 to 5.2.6 (latest) - Add engines field specifying node >=20.0.0 to document the Node version requirement introduced by the v5 dependency chain - Regenerate package-lock.json	2 weeks ago
copilot-swe-agent[bot]	3f8ced87b1	fix: update webpack dev server to 5.2.4	2 weeks ago
dependabot[bot]	72d2f2f7b2	chore(deps-dev): bump websocket-driver Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
dependabot[bot]	93e422771c	bump ws in /3-Data-Visualization/13-meaningful-visualizations/solution Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together. Updates `ws` from 7.5.10 to 7.5.12 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12) Updates `ws` from 8.18.3 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12) --- updated-dependencies: - dependency-name: ws dependency-version: 7.5.12 dependency-type: indirect - dependency-name: ws dependency-version: 8.21.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
Lee Stott	4d65d5327f	Merge pull request #785 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/js-yaml-4.3.0 chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 weeks ago
dependabot[bot]	29e3ed8705	chore(deps-dev): bump js-yaml Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	d7a92443d1	chore(deps-dev): bump launch-editor Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.6.0 to 2.14.1. - [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Lee Stott	b681a26ab3	Merge pull request #774 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/babel/plugin-transform-modules-systemjs-7.29.4 chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.4 in /3-Data-Visualization/13-meaningful-visualizations/solution	2 months ago
dependabot[bot]	df823d5940	chore(deps-dev): bump @babel/plugin-transform-modules-systemjs Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.20.11 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	d61ee21fac	chore(deps-dev): bump fast-uri Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	b4788b8aa0	chore(deps-dev): bump follow-redirects Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.6 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	8a624fe6f2	chore(deps-dev): bump node-forge Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.2 to 1.4.0. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	9189182aee	Merge pull request #766 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/flatted-3.4.2 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 months ago
dependabot[bot]	ea5d49f977	chore(deps-dev): bump flatted Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	cedfe64036	chore(deps-dev): bump lodash Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	99848c7e35	chore(deps-dev): bump picomatch Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2) --- updated-dependencies: - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	1c2884f70b	Merge pull request #752 from microsoft/copilot/update-braces-dependency Fix braces transitive dependency vulnerability (< 3.0.3)	5 months ago
dependabot[bot]	e7a36cab81	chore(deps-dev): bump svgo Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2. - [Release notes](https://github.com/svg/svgo/releases) - [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2) --- updated-dependencies: - dependency-name: svgo dependency-version: 2.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
copilot-swe-agent[bot]	76e3b95d99	Fix braces vulnerability: add override for braces >= 3.0.3 and regenerate lockfiles Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>	5 months ago
Lee Stott	1f24baf07b	Merge pull request #750 from microsoft/copilot/update-qs-to-6-14-1 Fix qs transitive dependency vulnerability: update to 6.14.2	5 months ago
copilot-swe-agent[bot]	49ed86fee1	Update qs to 6.14.2 to fix security vulnerability Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>	5 months ago
dependabot[bot]	43d0976518	chore(deps-dev): bump minimatch Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5) --- updated-dependencies: - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
Lee Stott	dbc012b453	Merge branch 'main' into dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/lodash-4.17.23	5 months ago
dependabot[bot]	db249e0f0c	chore(deps-dev): bump webpack Bumps [webpack](https://github.com/webpack/webpack) from 5.83.1 to 5.105.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack/compare/v5.83.1...v5.105.0) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.105.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	2ec859bd97	chore(deps-dev): bump lodash Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	3d73906ac9	Bump qs and express Bumps [qs](https://github.com/ljharb/qs) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.14.1) Updates `express` from 4.21.2 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](https://github.com/expressjs/express/compare/4.21.2...v4.22.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: express dependency-version: 4.22.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	7 months ago
dependabot[bot]	d105e6f3a6	Bump node-forge Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	947f31ab88	Bump js-yaml Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	c9eea76c61	Bump ws in /3-Data-Visualization/13-meaningful-visualizations/solution Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together. Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.10) Updates `ws` from 8.11.0 to 8.18.3 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.10) --- updated-dependencies: - dependency-name: ws dependency-version: 7.5.10 dependency-type: indirect - dependency-name: ws dependency-version: 8.18.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	faca2af8c2	Bump braces Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	fda2331a8b	Bump on-headers and compression Bumps [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression). These dependencies needed to be updated together. Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0) Updates `compression` from 1.7.4 to 1.8.1 - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/compression/compare/1.7.4...v1.8.1) --- updated-dependencies: - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect - dependency-name: compression dependency-version: 1.8.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	b4a4a733dd	Bump vue in /3-Data-Visualization/13-meaningful-visualizations/solution Bumps [vue](https://github.com/vuejs/core) from 2.6.12 to 3.5.19. - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.5.19) --- updated-dependencies: - dependency-name: vue dependency-version: 3.5.19 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
Lee Stott	48342fda50	Merge pull request #591 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/http-proxy-middleware-2.0.9 Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /3-Data-Visualization/13-meaningful-visualizations/solution	11 months ago
dependabot[bot]	6e2d0ea8d4	Bump tmp, eslint and eslint-plugin-vue Removes [tmp](https://github.com/raszi/node-tmp). It's no longer used after updating ancestor dependencies [tmp](https://github.com/raszi/node-tmp), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue). These dependencies need to be updated together. Removes `tmp` Updates `eslint` from 6.8.0 to 9.34.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v6.8.0...v9.34.0) Updates `eslint-plugin-vue` from 6.2.2 to 10.4.0 - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/eslint-plugin-vue/compare/v6.2.2...v10.4.0) --- updated-dependencies: - dependency-name: tmp dependency-version: dependency-type: indirect - dependency-name: eslint dependency-version: 9.34.0 dependency-type: direct:development - dependency-name: eslint-plugin-vue dependency-version: 10.4.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	08ff93870b	Bump http-proxy-middleware Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.6 to 2.0.9. - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](https://github.com/chimurai/http-proxy-middleware/compare/v2.0.6...v2.0.9) --- updated-dependencies: - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	8840f2a8a7	Bump express Bumps [express](https://github.com/expressjs/express) from 4.19.2 to 4.21.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](https://github.com/expressjs/express/compare/4.19.2...4.21.2) --- updated-dependencies: - dependency-name: express dependency-version: 4.21.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Anthony Bartolo	6e2eed6b87	Merge pull request #540 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/follow-redirects-1.15.6 Bump follow-redirects from 1.15.2 to 1.15.6 in /3-Data-Visualization/13-meaningful-visualizations/solution	1 year ago
Anthony Bartolo	97ee7ce57c	Merge pull request #541 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/webpack-dev-middleware-5.3.4 Bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /3-Data-Visualization/13-meaningful-visualizations/solution	1 year ago
dependabot[bot]	35ea9223f7	Bump express Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2) --- updated-dependencies: - dependency-name: express dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	a6bd1150d1	Bump webpack-dev-middleware Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4. - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4) --- updated-dependencies: - dependency-name: webpack-dev-middleware dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
dependabot[bot]	ecb58d82ce	Bump follow-redirects Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.6. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.6) --- updated-dependencies: - dependency-name: follow-redirects dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Jasmine Greenaway	a0cfbdd0cf	Merge pull request #506 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/word-wrap-1.2.4 Bump word-wrap from 1.2.3 to 1.2.4 in /3-Data-Visualization/13-meaningful-visualizations/solution	3 years ago
dependabot[bot]	131a4f4ef9	Bump @babel/traverse Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.12.12 to 7.23.2. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/traverse" dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	7af4ffb202	Bump word-wrap Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago

1 2

97 Commits (copilot/fix-serialize-javascript-vulnerability)