Bump the npm_and_yarn group across 17 directories with 16 updates

[dependabot]

Bumps the npm_and_yarn group with 8 updates in the /example-app-authorize.net directory:

Package	From	To
jose	4.14.4	4.15.5
next	14.2.3	14.2.32
vite	4.4.9	5.4.21
@babel/helpers	7.22.10	7.28.4
@babel/traverse	7.22.10	7.28.5
brace-expansion	1.1.11	1.1.12
dset	3.1.2	3.1.4
js-yaml	3.14.1	3.14.2

Bumps the npm_and_yarn group with 10 updates in the /example-app-authorize.net/example directory:

Package	From	To
jose	4.14.6	4.15.9
next	13.4.19	14.2.32
@babel/helpers	7.22.15	7.28.4
@babel/traverse	7.22.17	7.28.5
brace-expansion	1.1.11	1.1.12
cross-spawn	7.0.3	7.0.6
dset	3.1.2	3.1.4
js-yaml	4.1.0	4.1.1
micromatch	4.0.5	4.0.8
nanoid	3.3.6	3.3.11

Bumps the npm_and_yarn group with 2 updates in the /example-app-checkout-prices directory: next and vite.
Bumps the npm_and_yarn group with 9 updates in the /example-app-crm directory:

Package	From	To
next	14.2.3	14.2.32
vite	5.3.3	5.4.21
vitest	1.6.0	1.6.1
@babel/helpers	7.25.0	7.28.4
brace-expansion	1.1.11	1.1.12
dset	3.1.3	3.1.4
form-data	2.5.1	2.5.5
js-yaml	4.1.0	4.1.1
micromatch	4.0.7	4.0.8

Bumps the npm_and_yarn group with 10 updates in the /example-app-customer-insights directory:

Package	From	To
next	14.1.2	14.2.32
vite	5.2.10	5.4.21
vitest	1.5.2	1.6.1
@babel/helpers	7.23.1	7.28.4
@babel/traverse	7.23.0	7.28.5
brace-expansion	1.1.11	1.1.12
dset	3.1.2	3.1.4
form-data	4.0.0	4.0.5
js-yaml	3.14.1	3.14.2
micromatch	4.0.5	4.0.8

Bumps the npm_and_yarn group with 9 updates in the /example-app-invoices directory:

Package	From	To
next	14.2.3	14.2.32
vite	5.3.3	5.4.21
vitest	1.6.0	1.6.1
@babel/helpers	7.25.0	7.28.4
brace-expansion	1.1.11	1.1.12
dset	3.1.3	3.1.4
form-data	4.0.0	4.0.5
js-yaml	4.1.0	4.1.1
micromatch	4.0.7	4.0.8

Bumps the npm_and_yarn group with 8 updates in the /example-app-klarna directory:

Package	From	To
jose	4.14.6	4.15.5
next	13.4.19	14.2.32
vite	4.4.9	5.4.21
@babel/helpers	7.22.15	7.28.4
@babel/traverse	7.22.17	7.28.5
brace-expansion	1.1.11	1.1.12
dset	3.1.2	3.1.4
form-data	4.0.0	4.0.5

Bumps the npm_and_yarn group with 10 updates in the /example-app-sendgrid directory:

Package	From	To
next	14.2.3	14.2.32
vite	5.3.3	5.4.21
vitest	1.6.0	1.6.1
@babel/helpers	7.25.0	7.28.4
brace-expansion	1.1.11	1.1.12
dset	3.1.3	3.1.4
form-data	4.0.0	4.0.5
js-yaml	4.1.0	4.1.1
micromatch	4.0.7	4.0.8
nodemailer	6.9.14	7.0.7

Bumps the npm_and_yarn group with 6 updates in the /example-app-sequra directory:

Package	From	To
jose	4.14.6	4.15.5
next	14.2.1	14.2.32
vite	4.4.9	5.4.21
@babel/helpers	7.26.0	7.28.4
brace-expansion	1.1.11	1.1.12
js-yaml	3.14.1	3.14.2

Bumps the npm_and_yarn group with 3 updates in the /example-app-shipstation directory: next, vite and js-yaml.
Bumps the npm_and_yarn group with 10 updates in the /example-app-similar-products-embeddings directory:

Package	From	To
jose	4.15.2	4.15.9
next	15.1.7	15.4.7
vite	5.2.10	5.4.21
vitest	1.5.2	1.6.1
@babel/helpers	7.23.1	7.28.4
@babel/traverse	7.23.0	7.28.5
brace-expansion	1.1.11	1.1.12
dset	3.1.2	3.1.4
form-data	4.0.0	4.0.5
micromatch	4.0.5	4.0.8

Bumps the npm_and_yarn group with 6 updates in the /example-app-slack directory:

Package	From	To
next	14.2.3	14.2.32
@babel/helpers	7.24.7	7.28.4
brace-expansion	1.1.11	1.1.12
dset	3.1.3	3.1.4
js-yaml	4.1.0	4.1.1
micromatch	4.0.7	4.0.8

Bumps the npm_and_yarn group with 9 updates in the /example-app-taxjar directory:

Package	From	To
next	14.2.3	14.2.32
vite	5.3.3	5.4.21
vitest	1.6.0	1.6.1
@babel/helpers	7.24.7	7.28.4
brace-expansion	1.1.11	1.1.12
dset	3.1.3	3.1.4
form-data	4.0.0	4.0.5
js-yaml	4.1.0	4.1.1
micromatch	4.0.7	4.0.8

Bumps the npm_and_yarn group with 1 update in the /example-auth-nextjs-pages-router-apollo directory: next.
Bumps the npm_and_yarn group with 6 updates in the /example-auth-openidconnect-nextjs-app-router-apollo directory:

Package	From	To
next	14.1.3	14.2.32
brace-expansion	1.1.11	1.1.12
cross-spawn	7.0.3	7.0.6
js-yaml	4.1.0	4.1.1
micromatch	4.0.5	4.0.8
nanoid	3.3.6	3.3.11

Bumps the npm_and_yarn group with 6 updates in the /example-auth-openidconnect-nextjs-app-router-urql directory:

Package	From	To
next	14.1.3	14.2.32
brace-expansion	1.1.11	1.1.12
cross-spawn	7.0.3	7.0.6
js-yaml	4.1.0	4.1.1
micromatch	4.0.5	4.0.8
nanoid	3.3.6	3.3.11

Bumps the npm_and_yarn group with 6 updates in the /example-auth-openidconnect-nextjs-pages-router-apollo directory:

Package	From	To
next	13.4.4	14.2.32
brace-expansion	1.1.11	1.1.12
cross-spawn	7.0.3	7.0.6
js-yaml	4.1.0	4.1.1
micromatch	4.0.5	4.0.8
nanoid	3.3.6	3.3.11

Updates jose from 4.14.4 to 4.15.5

Release notes

Sourced from jose's releases.

v4.15.5

Fixes

• add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176

v4.15.4

Fixes

• types: export GetKeyFunction (#592) (936c9df), closes #591

v4.15.3

This release contains only Node.js CITGM related test updates.

Fixes nodejs/citgm#1011

v4.15.2

Fixes

• build: add a node target for jose-browser-runtime releases (abb63d0)

v4.15.1

Fixes

• resolve missing types for the cryptoRuntime const (1627965)

v4.15.0

Features

• export the used crypto runtime as a constant (0681dda)

v4.14.6

Fixes

• build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

v4.14.5

Refactor

• catch type error when decoding base64url signature (#569) (935e920)
• catch type errors when decoding various base64url strings (9024e87)

Changelog

Sourced from jose's changelog.

4.15.5 (2024-03-07)

Fixes

• add a maxOutputLength option to zlib inflate (1b91d88)

4.15.4 (2023-10-14)

Fixes

• types: export GetKeyFunction (#592) (936c9df), closes #591

4.15.3 (2023-10-11)

4.15.2 (2023-10-04)

Fixes

• build: add a node target for jose-browser-runtime releases (abb63d0)

4.15.1 (2023-10-02)

Fixes

• resolve missing types for the cryptoRuntime const (1627965)

4.15.0 (2023-10-02)

Features

• export the used crypto runtime as a constant (0681dda)

4.14.6 (2023-09-04)

Fixes

• build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

4.14.5 (2023-09-02)

Refactor

• catch type error when decoding base64url signature (#569) (935e920)

... (truncated)

Commits

• 765aafd chore(release): 4.15.5
• b36e45e test: add export check to x509 pem import tests
• e839ecb test: stop testing JWE RSA1_5 Algorithm
• 1b91d88 fix: add a maxOutputLength option to zlib inflate
• 9ca2b24 build: remove release action
• f3035d8 chore: cleanup after release
• f0bb220 chore(release): 4.15.4
• 6f38554 chore: bump dev deps
• 936c9df fix(types): export GetKeyFunction (#592)
• 5ac6619 chore: bump dev deps
• Additional commits viewable in compare view

Updates next from 14.2.3 to 14.2.32

Commits

• 89ee561 v14.2.32
• 6a974ad [backport v14]: fix router handling when setting a location response header (...
• 55f7662 v14.2.31
• 5dd68a5 [backport v14]: fix(next/image): improve and simplify detect-content-type (#8...
• bcc7c65 [backport v14]: fix(next/image): fix image-optimizer.ts headers (#82114) (#82...
• 243072b v14.2.30
• f523d4a [backport]: config.allowedDevOrigins (#80410)
• ca92115 v14.2.29
• ec9ee87 Only share incremental cache for edge in next start (#79389)
• e65628a v14.2.28
• Additional commits viewable in compare view

Updates vite from 4.4.9 to 5.4.21

Release notes

Sourced from vite's releases.

v5.4.21

Please refer to CHANGELOG.md for details.

v5.4.20

Please refer to CHANGELOG.md for details.

v5.4.19

Please refer to CHANGELOG.md for details.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

v4.5.14

Please refer to CHANGELOG.md for details.

v4.5.13

Please refer to CHANGELOG.md for details.

v4.5.12

Please refer to CHANGELOG.md for details.

v4.5.11

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.21 (2025-10-20)

• fix(dev): trim trailing slash before server.fs.deny check (#20968) (#20970) (cad1d31), closes #20968 #20970
• chore: update CHANGELOG (ca88ed7)

5.4.20 (2025-09-08)

• fix: apply fs.strict check to HTML files (#20736) (482000f), closes #20736
• fix: port sirv@3.0.2 changes to sirv@2.0.4 (#20737) (4f1c35b), closes #20737

5.4.19 (2025-04-30)

• fix: backport #19965, check static serve file inside sirv (#19966) (766947e), closes #19965 #19966

5.4.18 (2025-04-10)

• fix: backport #19830, reject requests with # in request-target (#19831) (823675b), closes #19830 #19831

5.4.17 (2025-04-03)

• fix: backport #19782, fs check with svg and relative paths (#19784) (84b2b46), closes #19782 #19784

5.4.16 (2025-03-31)

• fix: backport #19761, fs check in transform middleware (#19762) (b627c50), closes #19761 #19762

5.4.15 (2025-03-24)

• fix: backport #19702, fs raw query with query separators (#19703) (807d7f0), closes #19702 #19703

5.4.14 (2025-01-21)

• fix: preview.allowedHosts with specific values was not respected (#19246) (9df6e6b), closes #19246
• fix: allow CORS from loopback addresses by default (#19249) (7d1699c), closes #19249

... (truncated)

Commits

• adce3c2 release: v5.4.21
• cad1d31 fix(dev): trim trailing slash before server.fs.deny check (#20968) (#20970)
• ca88ed7 chore: update CHANGELOG
• 997700f release: v5.4.20
• 482000f fix: apply fs.strict check to HTML files (#20736)
• 80a333a release: v5.4.19
• 766947e fix: backport #19965, check static serve file inside sirv (#19966)
• 731b77d release: v5.4.18
• 823675b fix: backport #19830, reject requests with # in request-target (#19831)
• 0a2518a release: v5.4.17
• Additional commits viewable in compare view

Updates @babel/helpers from 7.22.10 to 7.28.4

Release notes

Sourced from @​babel/helpers's releases.

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #17474 Switch to @​jridgewell/remapping (@​mrginglymus)

Committers: 5

• Babel Bot (@​babel-bot)
• Bill Collins (@​mrginglymus)
• Glenn Willen (@​gwillen)
• Huáng Jùnliàng (@​JLHwung)
• @​liuxingbaoyu

v7.28.3 (2025-08-14)

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  • #17363 Do not save last yield in call in temp var (@​nicolo-ribaudo)

📝 Documentation

• #17448 move eslint-{parser,plugin} docs to the website (@​JLHwung)

🏠 Internal

• #17454 Enable type checking for scripts and babel-worker.cjs (@​JLHwung)

🔬 Output optimization

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  • #17444 Optimize do expression output (@​JLHwung)

Committers: 5

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Jam Balaya (@​JamBalaya56562)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• easrng (@​easrng)

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

v7.28.4 (2025-09-05)

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #17474 Switch to @​jridgewell/remapping (@​mrginglymus)

v7.28.3 (2025-08-14)

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  • #17363 Do not save last yield in call in temp var (@​nicolo-ribaudo)

📝 Documentation

• #17448 move eslint-{parser,plugin} docs to the website (@​JLHwung)

🏠 Internal

• #17454 Enable type checking for scripts and babel-worker.cjs (@​JLHwung)

🔬 Output optimization

• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  • #17444 Optimize do expression output (@​JLHwung)

v7.28.2 (2025-07-24)

🐛 Bug Fix

• babel-types
  • #17445 [babel 7] Make operator param in t.tsTypeOperator optional (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • #17441 fix: regeneratorDefine compatibility with es5 strict mode (@​liuxingbaoyu)

v7.28.1 (2025-07-12)

🐛 Bug Fix

• babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator
  • #17426 fix: regenerator correctly handles throw outside of try (@​liuxingbaoyu)

📝 Documentation

• babel-types
  • #17422 Add missing FunctionParameter docs (@​JLHwung)

... (truncated)

Commits

• 35055e3 v7.28.4
• 18d88b8 Improve @​babel/core typings (#17471)
• ef155f5 v7.28.3
• 741cbd2 chore: fix various typos across codebase (#17476)
• cac0ff4 v7.28.2
• f743094 fix: regeneratorDefine compatibility with es5 strict mode (#17441)
• baa4cb8 v7.27.6
• fdbf1b3 fix: finally causes unexpected return value (#17366)
• 7d06930 v7.27.4
• 5b9468d Reduce regenerator size more (#17287)
• Additional commits viewable in compare view

Updates @babel/traverse from 7.22.10 to 7.28.5

Release notes

Sourced from @​babel/traverse's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #17494 Type checking babel-types scripts (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #17490 Faster finding of locations in buildCodeFrameError (@​liuxingbaoyu)

Committers: 8

• Babel Bot (@​babel-bot)
• Byeongho Yoo (@​youthfulhps)
• Huáng Jùnliàng (@​JLHwung)
• Hyeon Dokko (@​CO0Ki3)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​Olexandr88
• @​liuxingbaoyu
• fisker Cheung (@​fisker)

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

• babel-parser
  • #17446 Allow Runtime Errors for Function Call Assignment Targets (@​liuxingbaoyu)
• babel-helper-validator-identifier
  • #17501 fix: update identifier to unicode 17 (@​fisker)

🐛 Bug Fix

• babel-plugin-proposal-destructuring-private
  • #17534 Allow mixing private destructuring and rest (@​CO0Ki3)
• babel-parser
  • #17521 Improve @babel/parser error typing (@​JLHwung)
  • #17491 fix: improve ts-only declaration parsing (@​JLHwung)
• babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • #17519 fix: rest correctly returns plain array (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@​JLHwung)
• babel-traverse
  • #17504 fix: ensure scope.push register in anonymous fn (@​JLHwung)

🏠 Internal

• babel-types
  • #17494 Type checking babel-types scripts (@​JLHwung)

🏃‍♀️ Performance

• babel-core
  • #17490 Faster finding of locations in buildCodeFrameError (@​liuxingbaoyu)

v7.28.4 (2025-09-05)

🏠 Internal

• babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • #17493 Update Jest to v30.1.1 (@​JLHwung)
• babel-plugin-transform-regenerator
  • #17455 chore: Clean up transform-regenerator (@​liuxingbaoyu)
• babel-core
  • #17474 Switch to @​jridgewell/remapping (@​mrginglymus)

v7.28.3 (2025-08-14)

👓 Spec Compliance

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  • #17443 [static blocks] Do not inject new static fields after static code (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-parser
  • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@​easrng)
  • #17478 fix(parser): stop subscript parsing on async arrow (@​JLHwung)

💅 Polish

• babel-plugin-transform-regenerator, babel-plugin-transform-runtime

... (truncated)

Commits

• 61647ae v7.28.5
• e579cb0 Enable strictNullChecks for traverse (#17499)
• 7385eae [Babel 8] Improve scope information collection performance (#17043)
• 26bc651 [Babel 8] Better node type definitions for computed (#17500)
• e626523 Fix JSXIdentifier handling in isReferencedIdentifier (#17503)
• 19c9126 fix: ensure scope.push register in anonymous fn (#17504)
• 35055e3 v7.28.4
• b41f8cd Update Jest to v30.1.1 (#17493)
• 22493b6 Improve @​babel/traverse typings (#17485)
• 18d88b8 Improve @​babel/core typings (#17471)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/traverse since your current version.

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

• pkg: publish on tag 1.x c460dbd
• fmt ccb8ac6
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

---

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

• 44f33b4 1.1.12
• c460dbd pkg: publish on tag 1.x
• ccb8ac6 fmt
• c3c73c8 Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)
• See full diff in compare view

Updates dset from 3.1.2 to 3.1.4

Release notes

Sourced from dset's releases.

v3.1.3

Patches

• Add "types" export conditions for TypeScript "nodenext"/"node16" resolution: #40 Thank you @​Akkuma

---

Full Changelog: lukeed/dset@v3.1.2...v3.1.3

Commits

• 05b1ec0 3.1.4
• 16d6154 fix: prevent proto assignment via implicit string
• 48f14a1 3.1.3
• aca90fb chore: add "types" conditions for TS "nodenext" resolution (#40)
• See full diff in compare view

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

• Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

• Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

• Types are now exported as yaml.types.XXX.
• Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

• Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

• Check migration guide to see details for all breaking changes.
• Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
• Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
• yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
• yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
• !!binary now always mapped to Uint8Array on load.
• Reduced nesting of /lib folder.
• Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
• dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
• Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
• Code snippet created in exceptions now contains multiple lines with line numbers.
• dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
• dump() with skipInvalid=true now serializes invalid items in collections as null.
• Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
• Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

• Added .mjs (es modules) support.
• Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
• Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

• 9963d36 3.14.2 released
• 10d3c8e dist rebuild
• 5278870 fix prototype pollution in merge (<<) (#731)
• See full diff in compare view

Updates nanoid from 3.3.6 to 3.3.11

Release notes

Sourced from nanoid's releases.

3.3.11

• Fixed React Native support.

3.3.10

• Fixed React Native support (by @​steida).

3.3.9

• Reduced npm package size.

Changelog

Sourced from nanoid's changelog.

3.3.11

• Fixed React Native support.

3.3.10

• Fixed React Native support (by @​steida).

3.3.9

• Reduced npm package size.

3.3.8

• Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

3.3.7

• Fixed node16 TypeScript support (by Saadi Myftija).

Commits

• 37289ce Release 3.3.11 version
• 23690b7 Fix CI

[github-actions]

Differences Found

⚠️ 15 packages or licenses were added.

Expand

License	Package
Apache-2.0	@img/sharp-linux-ppc64
Apache-2.0	@img/sharp-linux-riscv64
Apache-2.0	@img/sharp-win32-arm64
LGPL-3.0-or-later	@img/sharp-libvips-linux-ppc64
LGPL-3.0-or-later	@img/sharp-libvips-linux-riscv64
LGPL-3.0-or-later	@img/sharp-win32-arm64
MIT	@esbuild/openharmony-arm64
MIT	@img/colour
MIT	@rollup/rollup-linux-loong64-gnu
MIT	@rollup/rollup-openharmony-arm64
MIT	@rollup/rollup-win32-x64-gnu
MIT	@standard-schema/spec
MIT	@types/deep-eql
MIT	acorn-import-phases
MIT	obug

Summary

Expand

License Name	Package Count	Packages
0BSD	1	Packages tslib
AFL-2.1	1	Packages json-schema
Apache 2.0	1	Packages @mailchimp/mailchimp_marketing
CC-BY-3.0	1	Packages spdx-exceptions
MIT (http://mootools.net/license.txt)	1	Packages slick
MIT-0	1	Packages nodemailer
Public Domain	1	Packages jsonify
Python-2.0	1	Packages argparse
SEE LICENSE IN LICENSE	1	Packages spawndamnit
WTFPL	1	Packages utf8-byte-length
CC-BY-4.0	2	Packages @saleor/macaw-ui caniuse-lite
CC0-1.0	3	Packages language-subtag-registry spdx-license-ids type-fest
Unlicense	3	Packages @zxing/text-encoding big-integer tweetnacl
<<missing>>	5	Packages busboy cycle example-nextjs-sequra eyes streamsearch
BlueOak-1.0.0	5	Packages chownr jackspeak package-json-from-dist path-scurry yallist
MPL-2.0	12	Packages axe-core lightningcss lightningcss-darwin-arm64 lightningcss-darwin-x64 lightningcss-freebsd-x64 lightningcss-linux-arm-gnueabihf lightningcss-linux-arm64-gnu lightningcss-linux-arm64-musl lightningcss-linux-x64-gnu lightningcss-linux-x64-musl lightningcss-win32-arm64-msvc lightningcss-win32-x64-msvc
LGPL-3.0-or-later	14	Packages @img/sharp-libvips-darwin-arm64 @img/sharp-libvips-darwin-x64 @img/sharp-libvips-linux-arm @img/sharp-libvips-linux-arm64 @img/sharp-libvips-linux-ppc64 @img/sharp-libvips-linux-riscv64 @img/sharp-libvips-linux-s390x @img/sharp-libvips-linux-x64 @img/sharp-libvips-linuxmusl-arm64 @img/sharp-libvips-linuxmusl-x64 @img/sharp-wasm32 @img/sharp-win32-arm64 @img/sharp-win32-ia32 @img/sharp-win32-x64
BSD-2-Clause	25	Packages @typescript-eslint/parser @typescript-eslint/typescript-estree cheerio-select css-select css-what damerau-levenshtein domelementtype domhandler domutils dotenv entities escodegen eslint-scope espree esprima esrecurse estraverse esutils glob-to-regexp normalize-package-data And 5 more...
BSD-3-Clause	30	Packages @humanwhocodes/object-schema @saleor/app-sdk @saleor/auth-sdk @saleor/eslint-plugin-saleor-app @sentry/cli @xtuc/ieee754 abab asn1js bcrypt-pbkdf diff esquery exenv hoist-non-react-statics hyphenate-style-name ieee754 immutable istanbul-lib-coverage istanbul-lib-report istanbul-lib-source-maps istanbul-reports And 10 more...
ISC	71	Packages @isaacs/cliui @isaacs/fs-minipass @saleor/app-sdk @saleor/json-schema-compiler @ungap/structured-clone abbrev anymatch ast-types-flow authorizenet boolbase cli-color cli-width cliui d electron-to-chromium es5-ext es6-symbol es6-weak-map eslint-import-resolver-typescript ext And 51 more...
Apache-2.0	79	Packages @ampproject/remapping @humanwhocodes/config-array @humanwhocodes/module-importer @img/sharp-darwin-arm64 @img/sharp-darwin-x64 @img/sharp-linux-arm @img/sharp-linux-arm64 @img/sharp-linux-ppc64 @img/sharp-linux-riscv64 @img/sharp-linux-s390x @img/sharp-linux-x64 @img/sharp-linuxmusl-arm64 @img/sharp-linuxmusl-x64 @img/sharp-wasm32 @img/sharp-win32-arm64 @img/sharp-win32-ia32 @img/sharp-win32-x64 @opentelemetry/api @opentelemetry/semantic-conventions @pollyjs/adapter And 59 more...
MIT	1442	Packages @0no-co/graphql.web @aashutoshrathi/word-wrap @adobe/css-tools @alloc/quick-lru @apidevtools/json-schema-ref-parser @apollo/client @ardatan/relay-compiler @ardatan/sync-fetch @babel/code-frame @babel/compat-data @babel/core @babel/generator @babel/helper-annotate-as-pure @babel/helper-compilation-targets @babel/helper-create-class-features-plugin @babel/helper-environment-visitor @babel/helper-function-name @babel/helper-globals @babel/helper-member-expression-to-functions @babel/helper-module-imports And 1422 more...

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.