Data-Science-For-Beginners

Commit Graph

Author	SHA1	Message	Date
Lee Stott	52dbe5e146	Merge branch 'main' into copilot/fix-serialize-javascript-vulnerability	2 weeks ago
Lee Stott	7b3c40e34f	Merge pull request #803 from microsoft/copilot/fix-webpack-dev-server-vulnerability [Lesson 13] Patch webpack-dev-server source exposure	2 weeks ago
Lee Stott	bfdae9acd4	Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	2 weeks ago
copilot-swe-agent[bot]	dfba49f650	fix: tighten override ranges and align engine floor	2 weeks ago
copilot-swe-agent[bot]	2e2ddb90bd	fix: declare Node 20 requirement for solution build	2 weeks ago
copilot-swe-agent[bot]	23daaa1a13	fix: align meaningful visualizations dependency patch	2 weeks ago
copilot-swe-agent[bot]	6387184651	Pin ws to patched versions	2 weeks ago
copilot-swe-agent[bot]	ff871a6454	fix: upgrade serialize-javascript to 7.0.5	2 weeks ago
copilot-swe-agent[bot]	e35de59ece	fix: update webpack-dev-server override to 5.2.6 and add engines field - Update webpack-dev-server override from 5.2.4 to 5.2.6 (latest) - Add engines field specifying node >=20.0.0 to document the Node version requirement introduced by the v5 dependency chain - Regenerate package-lock.json	2 weeks ago
copilot-swe-agent[bot]	3f8ced87b1	fix: update webpack dev server to 5.2.4	2 weeks ago
dependabot[bot]	72d2f2f7b2	chore(deps-dev): bump websocket-driver Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
dependabot[bot]	93e422771c	bump ws in /3-Data-Visualization/13-meaningful-visualizations/solution Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together. Updates `ws` from 7.5.10 to 7.5.12 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12) Updates `ws` from 8.18.3 to 8.21.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12) --- updated-dependencies: - dependency-name: ws dependency-version: 7.5.12 dependency-type: indirect - dependency-name: ws dependency-version: 8.21.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
dependabot[bot]	bcf91e8c44	chore(deps-dev): bump websocket-driver Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
Lee Stott	ef1c4b22bd	Merge pull request #786 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/js-yaml-4.3.0 chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 in /3-Data-Visualization/13-meaningful-visualizations/starter	4 weeks ago
Lee Stott	4d65d5327f	Merge pull request #785 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/js-yaml-4.3.0 chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 weeks ago
Lee Stott	9d9cae99dd	Merge pull request #779 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/launch-editor-2.14.1 chore(deps-dev): bump launch-editor from 2.6.0 to 2.14.1 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 weeks ago
Lee Stott	acc144a600	Merge pull request #778 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/launch-editor-2.14.1 chore(deps-dev): bump launch-editor from 2.6.0 to 2.14.1 in /3-Data-Visualization/13-meaningful-visualizations/starter	4 weeks ago
dependabot[bot]	8c02f44980	chore(deps-dev): bump js-yaml Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	29e3ed8705	chore(deps-dev): bump js-yaml Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	d7a92443d1	chore(deps-dev): bump launch-editor Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.6.0 to 2.14.1. - [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	6cfb35cf2f	chore(deps-dev): bump launch-editor Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.6.0 to 2.14.1. - [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	2dd48ac4a1	chore(deps-dev): bump picomatch Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2) --- updated-dependencies: - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Lee Stott	0d9af55c68	Merge pull request #775 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/babel/plugin-transform-modules-systemjs-7.29.4 chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.4 in /3-Data-Visualization/13-meaningful-visualizations/starter	2 months ago
Lee Stott	b681a26ab3	Merge pull request #774 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/babel/plugin-transform-modules-systemjs-7.29.4 chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.4 in /3-Data-Visualization/13-meaningful-visualizations/solution	2 months ago
Lee Stott	54101e1c8d	Merge pull request #773 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/fast-uri-3.1.2 chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.2 in /3-Data-Visualization/13-meaningful-visualizations/starter	2 months ago
dependabot[bot]	6963d269e1	chore(deps-dev): bump @babel/plugin-transform-modules-systemjs Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.20.11 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	df823d5940	chore(deps-dev): bump @babel/plugin-transform-modules-systemjs Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.20.11 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	0aa821e8bf	chore(deps-dev): bump fast-uri Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	d61ee21fac	chore(deps-dev): bump fast-uri Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	6e5e202c2f	chore(deps-dev): bump follow-redirects Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.6 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	b4788b8aa0	chore(deps-dev): bump follow-redirects Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.6 to 1.16.0. - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0) --- updated-dependencies: - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	8a624fe6f2	chore(deps-dev): bump node-forge Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.2 to 1.4.0. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	9189182aee	Merge pull request #766 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/flatted-3.4.2 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 months ago
dependabot[bot]	ea5d49f977	chore(deps-dev): bump flatted Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	2240a2486e	Merge pull request #765 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/lodash-4.18.1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 months ago
dependabot[bot]	cedfe64036	chore(deps-dev): bump lodash Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	b305bb72d2	Merge pull request #764 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/lodash-4.18.1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /3-Data-Visualization/13-meaningful-visualizations/starter	4 months ago
Lee Stott	c9317d6c3b	Merge pull request #759 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/node-forge-1.4.0 chore(deps-dev): bump node-forge from 1.3.2 to 1.4.0 in /3-Data-Visualization/13-meaningful-visualizations/starter	4 months ago
Lee Stott	9c4bfea0f9	Merge pull request #758 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/picomatch-2.3.2 chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 in /3-Data-Visualization/13-meaningful-visualizations/solution	4 months ago
dependabot[bot]	36ccf3eb60	chore(deps-dev): bump lodash Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	1837807125	chore(deps-dev): bump node-forge Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.2 to 1.4.0. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	99848c7e35	chore(deps-dev): bump picomatch Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2) --- updated-dependencies: - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	1e61a6f403	chore(deps-dev): bump flatted Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Lee Stott	1c2884f70b	Merge pull request #752 from microsoft/copilot/update-braces-dependency Fix braces transitive dependency vulnerability (< 3.0.3)	5 months ago
Lee Stott	e1b33740aa	Merge pull request #755 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/svgo-2.8.2 chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /3-Data-Visualization/13-meaningful-visualizations/solution	5 months ago
dependabot[bot]	e7a36cab81	chore(deps-dev): bump svgo Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2. - [Release notes](https://github.com/svg/svgo/releases) - [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2) --- updated-dependencies: - dependency-name: svgo dependency-version: 2.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
dependabot[bot]	25c676dc31	chore(deps-dev): bump svgo Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2. - [Release notes](https://github.com/svg/svgo/releases) - [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2) --- updated-dependencies: - dependency-name: svgo dependency-version: 2.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
copilot-swe-agent[bot]	76e3b95d99	Fix braces vulnerability: add override for braces >= 3.0.3 and regenerate lockfiles Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>	5 months ago
Lee Stott	1f24baf07b	Merge pull request #750 from microsoft/copilot/update-qs-to-6-14-1 Fix qs transitive dependency vulnerability: update to 6.14.2	5 months ago
copilot-swe-agent[bot]	49ed86fee1	Update qs to 6.14.2 to fix security vulnerability Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>	5 months ago

1 2 3 4 5 ...

430 Commits (copilot/update-got-package-version)