Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm_and_yarn group across 3 directories with 32 updates #18

Open
wants to merge 35 commits into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 23, 2025

Bumps the npm_and_yarn group with 10 updates in the /Open-ILS/src/eg2 directory:

Package From To
moment 2.29.4 2.30.1
moment-timezone 0.5.43 0.5.47
@angular-devkit/build-angular 15.2.8 19.1.8
karma 6.4.2 6.4.4
semver 5.7.1 5.7.2
async 3.2.5 3.2.6
follow-redirects 1.15.2 1.15.9
ip 2.0.0 removed
socks 2.7.1 2.8.4
word-wrap 1.2.3 1.2.5

Bumps the npm_and_yarn group with 13 updates in the /Open-ILS/web/js/ui/default/staff directory:

Package From To
bootstrap 3.4.1 5.0.0
moment 2.29.1 2.30.1
moment-timezone 0.5.33 0.5.35
semver 4.3.6 5.7.2
loader-utils 1.4.0 1.4.2
async 2.6.3 2.6.4
body-parser 1.20.0 1.20.3
copy-webpack-plugin 4.6.0 12.0.2
follow-redirects 1.15.1 1.15.9
json5 0.5.1 removed
webpack 3.12.0 5.98.0
minimist 1.2.5 1.2.8
angular 1.6.10 1.8.3

Bumps the npm_and_yarn group with 4 updates in the /Open-ILS/web/opac/deps directory: bootstrap, ws, tough-cookie and word-wrap.

Updates moment from 2.29.4 to 2.30.1

Changelog

Sourced from moment's changelog.

2.30.1

2.30.0 Full changelog

  • Release Dec 26, 2023
Commits

Updates moment-timezone from 0.5.43 to 0.5.47

Release notes

Sourced from moment-timezone's releases.

Release 0.5.47

  • Updated data to IANA TZDB 2025a.

Release 0.5.46

  • Updated data to IANA TZDB 2024b. This only affects historical timestamps; no future timestamps have changed.

Release 0.5.45

  • Updated data to IANA TZDB 2024a.

Release 0.5.44

  • Updated data to IANA TZDB 2023d.
  • Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.
  • Performance improvements:
    • Use binary search when looking up zone information #720.
    • Avoid redundant checks in tz.guess().
    • Avoid redundant getZone() calls in .tz().
Changelog

Sourced from moment-timezone's changelog.

0.5.47 2025-01-28

  • Updated data to IANA TZDB 2025a.

0.5.46 2024-10-06

  • Updated data to IANA TZDB 2024b. This only affects historical timestamps; no future timestamps have changed.

0.5.45 2024-02-04

  • Updated data to IANA TZDB 2024a.

0.5.44 2023-12-29

  • Updated data to IANA TZDB 2023d.
  • Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.
  • Performance improvements:
    • Use binary search when looking up zone information #720.
    • Avoid redundant checks in tz.guess().
    • Avoid redundant getZone() calls in .tz().
Commits
  • 56ab2a8 Build moment-timezone 0.5.47
  • 991678d Bump version to 0.5.47
  • d70aa57 Merge pull request #1125 from moment/automated/data-update
  • 5a3abe1 data: Add 2025a
  • c666ad1 tests: Rebuild guess tests for 2025
  • cfefd24 Move GitHub bug report template to new format
  • 4b7ce20 Build moment-timezone 0.5.46
  • 64a0288 Bump version to 0.5.46
  • d5f3c70 Merge pull request #1121 from moment/automated/data-update
  • 1c6b26d ci: Allow tests to be run manually on a branch
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 15.2.8 to 19.1.8

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v19.1.8

19.1.8 (2025-02-19)

@​angular/cli

Commit Description
fix - f76cee637 correctly parse and resolve relative schematic collection names on Windows
fix - ceba7739c prefer installed package as fallback when listing package groups

@​angular-devkit/build-angular

Commit Description
fix - c54b9996a pass missing options to Karma esbuild builder

@​angular/build

Commit Description
fix - 2f60a24dd suppress asset missing warning for /index.html requests
fix - b8f7952b7 update critical CSS inlining to support autoCsp

v19.1.7

19.1.7 (2025-02-12)

@​schematics/angular

Commit Description
fix - de73b1c0c include default export for Express app

@​angular/build

Commit Description
fix - 8890a5f76 always provide Vite client helpers with development server
fix - df1d38846 configure Vite CORS option
fix - a13a49d95 exclude unmodified files from logs with --localize
fix - 0826315fa handle unlocalizable files correctly in localized prerender
perf - d2e1c8e9f cache translated i18n bundles for faster builds

@​angular/ssr

Commit Description
fix - f5d974576 accurately calculate content length for static pages with \r\n
fix - c26ea1619 properly handle baseHref with protocol

v19.1.6

19.1.6 (2025-02-05)

@​schematics/angular

Commit Description
fix - 3f7042672 remove additional newline after standalone property
fix - e9778dba0 skip ssr migration when @angular/ssr is not a dependency

@​angular/build

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.1.8 (2025-02-19)

@​angular/cli

Commit Type Description
f76cee637 fix correctly parse and resolve relative schematic collection names on Windows
ceba7739c fix prefer installed package as fallback when listing package groups

@​angular-devkit/build-angular

Commit Type Description
c54b9996a fix pass missing options to Karma esbuild builder

@​angular/build

Commit Type Description
2f60a24dd fix suppress asset missing warning for /index.html requests
b8f7952b7 fix update critical CSS inlining to support autoCsp

19.2.0-next.2 (2025-02-12)

@​schematics/angular

Commit Type Description
aa0ae457b fix include default export for Express app
4a5b76a8e fix remove additional newline after standalone property
c716ce152 fix skip ssr migration when @angular/ssr is not a dependency

@​angular-devkit/build-angular

Commit Type Description
ef7ea536f feat add aot option to jest
523d539c6 feat add aot option to karma

@​angular/build

Commit Type Description
beefed839 fix always provide Vite client helpers with development server
5c1360179 fix avoid pre-transform errors with Vite pre-bundling
be15b886c fix configure Vite CORS option

... (truncated)

Commits
  • 64be376 release: cut the v19.1.8 release
  • c2cbc0f build: add @​types/node to assorted locations where node types are being relie...
  • b8f7952 fix(@​angular/build): update critical CSS inlining to support autoCsp
  • 415c02e refactor: move builtin module imports to use node: prefix imports
  • c54b999 fix(@​angular-devkit/build-angular): pass missing options to Karma esbuild bui...
  • 0d6cda2 test: use esbuild-based karma builder for e2e tests in esbuild suite
  • 2f60a24 fix(@​angular/build): suppress asset missing warning for /index.html requests
  • a70c3dc test: reduce flakiness of reuse-dep-optimization-cache e2e test
  • ceba773 fix(@​angular/cli): prefer installed package as fallback when listing package ...
  • 5c56cdb refactor(@​angular/cli): handle undefined ng add collection name
  • Additional commits viewable in compare view

Updates karma from 6.4.2 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)
Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)
Commits
  • 84f85e7 chore(release): 6.4.4 [skip ci]
  • a4d1284 build(deps-dev): bump ws from 6.2.1 to 6.2.3
  • d8cf806 chore(release): 6.4.3 [skip ci]
  • d7f2d69 fix: add build commits for patch release
  • 85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
  • 0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
  • 86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
  • 450fdfd docs: Add deprecation notice to Karma README
  • See full diff in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates @babel/traverse from 7.22.4 to 7.26.9

Release notes

Sourced from @​babel/traverse's releases.

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.26.8 (2025-02-08)

🏠 Internal

  • babel-preset-env
    • #17097 Update dependency babel-plugin-polyfill-corejs3 to ^0.11.0

v7.26.7 (2025-01-24)

Thanks @​branchseer and @​tquetano-netflix for your first PRs!

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol
  • babel-parser
  • babel-core
  • babel-plugin-transform-typescript
  • babel-plugin-transform-typescript, babel-traverse, babel-types

Committers: 6

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol
  • babel-parser
  • babel-core
  • babel-plugin-transform-typescript
  • babel-plugin-transform-typescript, babel-traverse, babel-types

v7.26.6 (2025-01-13)

🐛 Bug Fix

  • babel-plugin-transform-nullish-coalescing-operator

v7.26.5 (2025-01-10)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-transform-block-scoped-functions
  • babel-plugin-transform-typescript
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-transform-flow-strip-types, babel-types

... (truncated)

Commits

Updates async from 3.2.5 to 3.2.6

Commits
  • 85fb18f Version 3.2.6
  • 8c0c941 Update built files
  • 5f756b4 Fix ReDoS (#1980)
  • 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
  • 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
  • 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
  • afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
  • 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
  • 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
  • f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
  • Additional commits viewable in compare view

Updates body-parser from 1.20.1 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

New Contributors

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone
Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1 / 2022-10-06

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates braces from 3.0.2 to 3.0.3

Commits

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

  • Allow leading dot for domain (#174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

  • Add partitioned option

0.5.0

  • Add priority option
  • Fix expires option to reject invalid dates
  • pref: improve default decode speed
  • pref: remove slow string split in parse
Commits
Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.


Updates copy-webpack-plugin from 11.0.0 to 12.0.2

Release notes

Sourced from copy-webpack-plugin's releases.

v12.0.2

12.0.2 (2024-01-17)

Bug Fixes

v12.0.1

12.0.1 (2024-01-11)

Bug Fixes

v12.0.0

12.0.0 (2024-01-10)

⚠ BREAKING CHANGES

  • update globby to 14.0.0
  • minimum supported Node.js version is 18.12.0 (#759) (a5b7d06)

v11.0.0

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

v10.2.4

10.2.4 (2022-01-31)

Bug Fixes

v10.2.3

10.2.3 (2022-01-29)

Bug Fixes

v10.2.2

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

12.0.2 (2024-01-17)

Bug Fixes

12.0.1 (2024-01-11)

Bug Fixes

12.0.0 (2024-01-10)

⚠ BREAKING CHANGES

  • update globby to 14.0.0
  • minimum supported Node.js version is 18.12.0 (#759) (a5b7d06)

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

build

10.2.4 (2022-01-31)

Bug Fixes

10.2.3 (2022-01-29)

Bug Fixes

10.2.2 (2022-01-28)

... (truncated)

Commits

Updates ws from 8.11.0 to 8.17.1

Release notes

Sourced from ws's releases.

8.18.1

Bug fixes

  • The length of the UNIX domain socket paths in the tests has been shortened to make them work when run via CITGM (021f7b8b).

8.18.0

Features

  • Added support for Blob (#2229).

8.17.1

Bug fixes

  • Fixed a DoS vulner...

    Description has been truncated

dbriem and others added 30 commits February 16, 2025 18:37
Ensure setTimeout delays focus when reordering shelving
locations using up/down arrow keys in the administration
interface.

Release-note: Fix an issue in the Shelving Location Group
admin screen that caused keyboard focus to disappear.

To test:
- Go to Admin->Local Admin->Shelving Location Groups
- If you don't at least 3 groups, create them
- Tab to an item's move button (4 arrow icon)
- Press up and down to move the item, note focus is
  retained

Signed-off-by: Dan Briem <dbriem@harrisonpl.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
…t export

This patch fixes an issue where the "Include items?" option
when exporting records from the new Angular buckets interface
was ignored.

To test
-------
[1] Create a record bucket that has at least one bib that
    has items attached to it.
[2] Use the 'Export All' button from the bucket interface
    and select the Include items? option
[3] Select the record from the list and use the Export Selected
    Records action with the Include items? option in effect.
[4] Review both output files and note that the 852 fields with
    item information are not include.
[5] Apply the patch and repeat stesp 2 and 3. This time, the
    852 fields should be present.

Release-note: Fixes an issue that caused the "Include items?" option
when exporting records from the Record Buckets interface to be ignored.

Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
If you switch between the flat and enhanced MARC editor, then
save, the editor reverts to whichever tab was initially loaded.

This synchronizes the one-way data binding of `editorTab` with
`ngbNav`'s `activeId` in the `navChange` callback.

Release-note: Fix an issue that caused MARC editor interface to change
unexpectedly when a record is saved.

To test:
- Go to a record and click the MARC Edit tab
- Switch from Enhanced to Flat (or vice-versa if Flat's selected)
- Click Save, note it doesn't switch to the initially loaded tab

Signed-off-by: Dan Briem <dbriem@harrisonpl.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>
Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>
Signed-off-by: Jason Stephenson <jason@sigio.com>
Signed-off-by: Jason Stephenson <jason@sigio.com>
Updating screenshots and instructions for this page: https://docs.evergreen-ils.org/docs/latest/admin/copy_statuses.html

Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
- Removed outdated images: `event_def_details.png`, `new_event_def.png`
- Added new images: `local_admin_option.png`, `new_event_def_btn.png`, `tabs.png`
- Updated images for sections: Email and Print Event Definitions and Parameters
- Cleanup and streamlined content in action triggers documentation:
  - Changed \"Introduction\" to \"Overview\"
  - Reorganized content for clarity
  - Consolidated some sections and reduced redundancy
  - Added explanations for components like Hooks and Reactors
  - Expanded on how to create alternate message templates
  - Explained cron job setup in detail

Release-Note: Improve and reorganize action triggers documentation in admin module

Signed-off-by: Ian Skelskey <ianskelskey@gmail.com>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
This patch updates the release note extractor script so that if
a commit includes a release note tagged with Release-note: that
extends over more than one line, all of them will be considered
as part of the same note. Multi-line release notes should not
start with a whitespace character on the second and subsequent lines.

To test
-------
[1] Apply the patch and run extract_release_notes_from_commits.pl;
    verify that multi-line release notes in commit messages are
    fully included in the output.

Release-note: [dev] Update the release
note extractor
so that all lines of a
multi-line release notes in a commit
message are
incuded in the output

Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
…haracter Map

This patch fixes an issue where the HostListener for the jump-to-letter-range
navigation feature of the new MARC Edit Character Map was grabbing keydown
events that it shouldn't have tried to handle. It also cleans up browser
console noise generated when the user types a digit character.

To test
-------
[1] Open a bib record and ensure that the enahnced MARC editor tab is
    active.
[2] Try to add the record to a new bucket via the Other Actions menu. Note
    that keys in the range 0-9 and a-z are not entered into the bucket
    name input when pressed.
[3] Try other text inputs in the MARC editor, such as the bib source input.
    Note that the same alphanumeric characters cannot be entered.
[4] Apply the patch and repeat steps 1-3. This time, there should be no
    interference with keyboard input.
[5] Open the Special Characters modal. Verify that single-letter keyboard
    shortcuts work as aspected.
[6] Close the modal. Verify that keyboard input remains normal.

This patch intentionally does not include a release notes entry as it
follows up on an enhancement that has not been released yet.

Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
Signed-off-by: Dan Briem <dbriem@harrisonpl.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
Add a Perl sigtrap handler in clark-kent.pl to log the signal and exit
when it receives a signal.

Testing is relatively straightforward:

1. Start the reporter.
2. Send it the TERM signale with kill: `kill $(cat /tmp/reporter-LOCK)`.
3. Check the osrfsys.log to see that nothing is logged.
4. Delete the reporter lock file: `rm /tmp/reporter-LOCK.`
5. Apply this commit.
6. Do `sudo make install` in the Evergreen source directory.
7. Follow that with `sudo chown -R opensrf:opensrf /openils ./`.
8. Repeat steps 1 & 2.
9. `grep 'Reporter received signal' /openils/var/log/osrfsys.log` should
   return a line.
10. Delete the reporter lock file (for hygiene).

Release-note: Add a signal handler to the reporter to log the signal and exit.

Signed-off-by: Jason Stephenson <jason@sigio.com>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
Fetches the Library Setting for whether to show legacy invoice links in
invoice.component. This will allow the 'Open In Legacy Interface' link
to appear.

Release-note: Display a "Show Invoice in Legacy Interface" in invoices
when configured.

Signed-off-by: Steven Mayo <smayo@georgialibraries.org>
Signed-off-by: Jane Sandberg <sandbergja@gmail.com>
Correct 3.13.8-3.13.19-upgrade-db.sql to 3.13.8-3.13.9-upgrade-db.sql
filename.

Signed-off-by: Jason Stephenson <jason@sigio.com>
It looks like the wrong version number, 3.13.19, was used when
stamping the file.  This commit corrects that.

Signed-off-by: Jason Stephenson <jason@sigio.com>
…ion character escape

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.2.1 to 4.2.3.
- [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md)
- [Commits](browserify/browserify-sign@v4.2.1...v4.2.3)

---
updated-dependencies:
- dependency-name: browserify-sign
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.4 to 6.6.1.
- [Commits](indutny/elliptic@v6.5.4...v6.6.1)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Potential fix for code scanning alert no. 45: Useless regular-expression character escape
…ILS/web/js/ui/default/staff/decode-uri-component-0.2.2

Bump decode-uri-component from 0.2.0 to 0.2.2 in /Open-ILS/web/js/ui/default/staff
…LS/web/js/ui/default/staff/browserify-sign-4.2.3

Bump browserify-sign from 4.2.1 to 4.2.3 in /Open-ILS/web/js/ui/default/staff
…ILS/web/js/ui/default/staff/elliptic-6.6.1

Bump elliptic from 6.5.4 to 6.6.1 in /Open-ILS/web/js/ui/default/staff
Bumps the npm_and_yarn group with 1 update in the /Open-ILS/web/js/ui/default/staff directory: [karma](https://github.com/karma-runner/karma).


Updates `karma` from 1.7.1 to 6.4.4
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@1.7.1...v6.4.4)

---
updated-dependencies:
- dependency-name: karma
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
…ILS/web/js/ui/default/staff/npm_and_yarn-1dc217bc5b

Bump karma from 1.7.1 to 6.4.4 in /Open-ILS/web/js/ui/default/staff in the npm_and_yarn group across 1 directory
…ion character escape

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Potential fix for code scanning alert no. 44: Useless regular-expression character escape
…ion character escape

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Potential fix for code scanning alert no. 43: Useless regular-expression character escape
…caping

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
IanSkelskey and others added 5 commits February 22, 2025 21:23
Potential fix for code scanning alert no. 41: Double escaping or unescaping
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Potential fix for code scanning alert no. 11: Insecure randomness
Bumps the npm_and_yarn group with 10 updates in the /Open-ILS/src/eg2 directory:

| Package | From | To |
| --- | --- | --- |
| [moment](https://github.com/moment/moment) | `2.29.4` | `2.30.1` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.43` | `0.5.47` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `15.2.8` | `19.1.8` |
| [karma](https://github.com/karma-runner/karma) | `6.4.2` | `6.4.4` |
| [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` |
| [async](https://github.com/caolan/async) | `3.2.5` | `3.2.6` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.2` | `1.15.9` |
| [ip](https://github.com/indutny/node-ip) | `2.0.0` | `removed` |
| [socks](https://github.com/JoshGlazebrook/socks) | `2.7.1` | `2.8.4` |
| [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` |

Bumps the npm_and_yarn group with 13 updates in the /Open-ILS/web/js/ui/default/staff directory:

| Package | From | To |
| --- | --- | --- |
| [bootstrap](https://github.com/twbs/bootstrap) | `3.4.1` | `5.0.0` |
| [moment](https://github.com/moment/moment) | `2.29.1` | `2.30.1` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.33` | `0.5.35` |
| [semver](https://github.com/npm/node-semver) | `4.3.6` | `5.7.2` |
| [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `1.4.2` |
| [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.20.0` | `1.20.3` |
| [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) | `4.6.0` | `12.0.2` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.1` | `1.15.9` |
| [json5](https://github.com/json5/json5) | `0.5.1` | `removed` |
| [webpack](https://github.com/webpack/webpack) | `3.12.0` | `5.98.0` |
| [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` |
| [angular](https://github.com/angular/angular.js) | `1.6.10` | `1.8.3` |

Bumps the npm_and_yarn group with 4 updates in the /Open-ILS/web/opac/deps directory: [bootstrap](https://github.com/twbs/bootstrap), [ws](https://github.com/websockets/ws), [tough-cookie](https://github.com/salesforce/tough-cookie) and [word-wrap](https://github.com/jonschlinkert/word-wrap).


Updates `moment` from 2.29.4 to 2.30.1
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.4...2.30.1)

Updates `moment-timezone` from 0.5.43 to 0.5.47
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.43...0.5.47)

Updates `@angular-devkit/build-angular` from 15.2.8 to 19.1.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@15.2.8...19.1.8)

Updates `karma` from 6.4.2 to 6.4.4
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@v6.4.2...v6.4.4)

Updates `semver` from 5.7.1 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `@babel/traverse` from 7.22.4 to 7.26.9
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.9/packages/babel-traverse)

Updates `async` from 3.2.5 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.5...v3.2.6)

Updates `body-parser` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.0...1.20.3)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cookie` from 0.4.2 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.2...v0.7.1)

Updates `copy-webpack-plugin` from 11.0.0 to 12.0.2
- [Release notes](https://github.com/webpack-contrib/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/copy-webpack-plugin@v4.6.0...v12.0.2)

Updates `ws` from 8.11.0 to 8.17.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.13.0...8.18.1)

Updates `express` from 4.18.2 to 4.21.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md)
- [Commits](expressjs/express@4.18.2...4.21.2)

Updates `follow-redirects` from 1.15.2 to 1.15.9
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.9)

Removes `ip`

Updates `socks` from 2.7.1 to 2.8.4
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.7.1...2.8.4)

Updates `path-to-regexp` from 0.1.7 to 0.1.12
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12)

Updates `nanoid` from 3.3.6 to 3.3.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.6...3.3.8)

Updates `send` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.18.0...0.19.0)

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `socket.io` from 4.6.2 to 4.8.1
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/4.6.2...socket.io@4.8.1)

Updates `socks` from 2.7.1 to 2.8.4
- [Release notes](https://github.com/JoshGlazebrook/socks/releases)
- [Commits](JoshGlazebrook/socks@2.7.1...2.8.4)

Updates `webpack` from 5.76.1 to 5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v3.12.0...v5.98.0)

Updates `webpack-dev-middleware` from 5.3.3 to 7.4.2
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v5.3.3...v7.4.2)

Updates `word-wrap` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

Updates `bootstrap` from 3.4.1 to 5.0.0
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v3.4.1...v5.0.0)

Updates `moment` from 2.29.1 to 2.30.1
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.4...2.30.1)

Updates `moment-timezone` from 0.5.33 to 0.5.35
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.43...0.5.47)

Updates `semver` from 4.3.6 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `loader-utils` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md)
- [Commits](webpack/loader-utils@v1.4.0...v1.4.2)

Updates `async` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v3.2.5...v3.2.6)

Updates `body-parser` from 1.20.0 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.0...1.20.3)

Updates `copy-webpack-plugin` from 4.6.0 to 12.0.2
- [Release notes](https://github.com/webpack-contrib/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/copy-webpack-plugin@v4.6.0...v12.0.2)

Updates `follow-redirects` from 1.15.1 to 1.15.9
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.2...v1.15.9)

Removes `json5`

Updates `webpack` from 3.12.0 to 5.98.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v3.12.0...v5.98.0)

Updates `minimist` from 1.2.5 to 1.2.8
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

Updates `serialize-javascript` from 1.9.1 to 6.0.2
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v1.9.1...v6.0.2)

Updates `yargs-parser` from 7.0.0 to 20.2.9
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs-parser@v7.0.0...yargs-parser-v20.2.9)

Updates `webpack` from 3.12.0 to 5.98.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v3.12.0...v5.98.0)

Updates `angular` from 1.6.10 to 1.8.3
- [Changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md)
- [Commits](angular/angular.js@v1.6.10...v1.8.3)

Updates `bootstrap` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v3.4.1...v5.0.0)

Updates `ws` from 8.13.0 to 8.18.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.13.0...8.18.1)

Updates `tough-cookie` from 4.1.2 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.4)

Updates `word-wrap` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: moment-timezone
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: karma
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: copy-webpack-plugin
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socks
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nanoid
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socket.io
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: socks
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: word-wrap
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: bootstrap
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: moment
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: moment-timezone
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: loader-utils
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: async
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: copy-webpack-plugin
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: minimist
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serialize-javascript
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yargs-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: angular
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: bootstrap
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: word-wrap
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 23, 2025
@IanSkelskey
Copy link
Owner

IanSkelskey commented Feb 23, 2025

@dependabot rebase

Copy link
Author

dependabot bot commented on behalf of github Feb 23, 2025

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants