Lee Stott
bfdae9acd4
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2 weeks ago
copilot-swe-agent[bot]
dfba49f650
fix: tighten override ranges and align engine floor
2 weeks ago
copilot-swe-agent[bot]
23daaa1a13
fix: align meaningful visualizations dependency patch
2 weeks ago
copilot-swe-agent[bot]
e35de59ece
fix: update webpack-dev-server override to 5.2.6 and add engines field
...
- Update webpack-dev-server override from 5.2.4 to 5.2.6 (latest)
- Add engines field specifying node >=20.0.0 to document the Node
version requirement introduced by the v5 dependency chain
- Regenerate package-lock.json
2 weeks ago
copilot-swe-agent[bot]
3f8ced87b1
fix: update webpack dev server to 5.2.4
2 weeks ago
dependabot[bot]
72d2f2f7b2
chore(deps-dev): bump websocket-driver
...
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node ) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md )
- [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5 )
---
updated-dependencies:
- dependency-name: websocket-driver
dependency-version: 0.7.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
dependabot[bot]
93e422771c
bump ws in /3-Data-Visualization/13-meaningful-visualizations/solution
...
Bumps and [ws](https://github.com/websockets/ws ). These dependencies needed to be updated together.
Updates `ws` from 7.5.10 to 7.5.12
- [Release notes](https://github.com/websockets/ws/releases )
- [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12 )
Updates `ws` from 8.18.3 to 8.21.1
- [Release notes](https://github.com/websockets/ws/releases )
- [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.12 )
---
updated-dependencies:
- dependency-name: ws
dependency-version: 7.5.12
dependency-type: indirect
- dependency-name: ws
dependency-version: 8.21.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
dependabot[bot]
bcf91e8c44
chore(deps-dev): bump websocket-driver
...
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node ) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md )
- [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5 )
---
updated-dependencies:
- dependency-name: websocket-driver
dependency-version: 0.7.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 weeks ago
Lee Stott
ef1c4b22bd
Merge pull request #786 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/js-yaml-4.3.0
...
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 in /3-Data-Visualization/13-meaningful-visualizations/starter
4 weeks ago
Lee Stott
4d65d5327f
Merge pull request #785 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/js-yaml-4.3.0
...
chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 in /3-Data-Visualization/13-meaningful-visualizations/solution
4 weeks ago
Lee Stott
9d9cae99dd
Merge pull request #779 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/launch-editor-2.14.1
...
chore(deps-dev): bump launch-editor from 2.6.0 to 2.14.1 in /3-Data-Visualization/13-meaningful-visualizations/solution
4 weeks ago
Lee Stott
acc144a600
Merge pull request #778 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/launch-editor-2.14.1
...
chore(deps-dev): bump launch-editor from 2.6.0 to 2.14.1 in /3-Data-Visualization/13-meaningful-visualizations/starter
4 weeks ago
dependabot[bot]
8c02f44980
chore(deps-dev): bump js-yaml
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 4.1.1 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.3.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago
dependabot[bot]
29e3ed8705
chore(deps-dev): bump js-yaml
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 4.1.1 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.0/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.3.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago
dependabot[bot]
d7a92443d1
chore(deps-dev): bump launch-editor
...
Bumps [launch-editor](https://github.com/vitejs/launch-editor ) from 2.6.0 to 2.14.1.
- [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1 )
---
updated-dependencies:
- dependency-name: launch-editor
dependency-version: 2.14.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
6cfb35cf2f
chore(deps-dev): bump launch-editor
...
Bumps [launch-editor](https://github.com/vitejs/launch-editor ) from 2.6.0 to 2.14.1.
- [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1 )
---
updated-dependencies:
- dependency-name: launch-editor
dependency-version: 2.14.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
2dd48ac4a1
chore(deps-dev): bump picomatch
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Lee Stott
0d9af55c68
Merge pull request #775 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/babel/plugin-transform-modules-systemjs-7.29.4
...
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.4 in /3-Data-Visualization/13-meaningful-visualizations/starter
2 months ago
Lee Stott
b681a26ab3
Merge pull request #774 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/babel/plugin-transform-modules-systemjs-7.29.4
...
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.4 in /3-Data-Visualization/13-meaningful-visualizations/solution
2 months ago
Lee Stott
54101e1c8d
Merge pull request #773 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/fast-uri-3.1.2
...
chore(deps-dev): bump fast-uri from 3.0.6 to 3.1.2 in /3-Data-Visualization/13-meaningful-visualizations/starter
2 months ago
dependabot[bot]
6963d269e1
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs
...
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs ) from 7.20.11 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs )
---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
dependency-version: 7.29.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
df823d5940
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs
...
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs ) from 7.20.11 to 7.29.4.
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs )
---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
dependency-version: 7.29.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
0aa821e8bf
chore(deps-dev): bump fast-uri
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.0.6 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
d61ee21fac
chore(deps-dev): bump fast-uri
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.0.6 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.2 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
6e5e202c2f
chore(deps-dev): bump follow-redirects
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.6 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
b4788b8aa0
chore(deps-dev): bump follow-redirects
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.6 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.6...v1.16.0 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
8a624fe6f2
chore(deps-dev): bump node-forge
...
Bumps [node-forge](https://github.com/digitalbazaar/forge ) from 1.3.2 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md )
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0 )
---
updated-dependencies:
- dependency-name: node-forge
dependency-version: 1.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Lee Stott
9189182aee
Merge pull request #766 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/flatted-3.4.2
...
chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /3-Data-Visualization/13-meaningful-visualizations/solution
4 months ago
dependabot[bot]
ea5d49f977
chore(deps-dev): bump flatted
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Lee Stott
2240a2486e
Merge pull request #765 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/lodash-4.18.1
...
chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /3-Data-Visualization/13-meaningful-visualizations/solution
4 months ago
dependabot[bot]
cedfe64036
chore(deps-dev): bump lodash
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Lee Stott
b305bb72d2
Merge pull request #764 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/lodash-4.18.1
...
chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 in /3-Data-Visualization/13-meaningful-visualizations/starter
4 months ago
Lee Stott
c9317d6c3b
Merge pull request #759 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/node-forge-1.4.0
...
chore(deps-dev): bump node-forge from 1.3.2 to 1.4.0 in /3-Data-Visualization/13-meaningful-visualizations/starter
4 months ago
Lee Stott
9c4bfea0f9
Merge pull request #758 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/picomatch-2.3.2
...
chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 in /3-Data-Visualization/13-meaningful-visualizations/solution
4 months ago
dependabot[bot]
36ccf3eb60
chore(deps-dev): bump lodash
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
1837807125
chore(deps-dev): bump node-forge
...
Bumps [node-forge](https://github.com/digitalbazaar/forge ) from 1.3.2 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md )
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.2...v1.4.0 )
---
updated-dependencies:
- dependency-name: node-forge
dependency-version: 1.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
99848c7e35
chore(deps-dev): bump picomatch
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
1e61a6f403
chore(deps-dev): bump flatted
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Lee Stott
1c2884f70b
Merge pull request #752 from microsoft/copilot/update-braces-dependency
...
Fix braces transitive dependency vulnerability (< 3.0.3)
5 months ago
Lee Stott
e1b33740aa
Merge pull request #755 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/svgo-2.8.2
...
chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /3-Data-Visualization/13-meaningful-visualizations/solution
5 months ago
dependabot[bot]
e7a36cab81
chore(deps-dev): bump svgo
...
Bumps [svgo](https://github.com/svg/svgo ) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases )
- [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2 )
---
updated-dependencies:
- dependency-name: svgo
dependency-version: 2.8.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
25c676dc31
chore(deps-dev): bump svgo
...
Bumps [svgo](https://github.com/svg/svgo ) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases )
- [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2 )
---
updated-dependencies:
- dependency-name: svgo
dependency-version: 2.8.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
copilot-swe-agent[bot]
76e3b95d99
Fix braces vulnerability: add override for braces >= 3.0.3 and regenerate lockfiles
...
Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>
5 months ago
Lee Stott
1f24baf07b
Merge pull request #750 from microsoft/copilot/update-qs-to-6-14-1
...
Fix qs transitive dependency vulnerability: update to 6.14.2
5 months ago
copilot-swe-agent[bot]
49ed86fee1
Update qs to 6.14.2 to fix security vulnerability
...
Co-authored-by: leestott <2511341+leestott@users.noreply.github.com>
5 months ago
dependabot[bot]
43d0976518
chore(deps-dev): bump minimatch
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
1354eac9ce
chore(deps-dev): bump minimatch
...
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Lee Stott
dbc012b453
Merge branch 'main' into dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/lodash-4.17.23
5 months ago
Lee Stott
7480d2090f
Merge pull request #734 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/starter/lodash-4.17.23
...
chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 in /3-Data-Visualization/13-meaningful-visualizations/starter
5 months ago
Lee Stott
487c5d1278
Merge pull request #739 from microsoft/dependabot/npm_and_yarn/3-Data-Visualization/13-meaningful-visualizations/solution/webpack-5.105.0
...
chore(deps-dev): bump webpack from 5.83.1 to 5.105.0 in /3-Data-Visualization/13-meaningful-visualizations/solution
5 months ago