Bump the npm_and_yarn group across 1 directory with 24 updates · Issue #1 · liamfoneill/stripe-billing-typographic

Bumps the npm_and_yarn group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.21.1` | `0.28.0` | | [express](https://github.com/expressjs/express) | `4.16.3` | `4.19.2` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `8.3.0` | `9.0.0` | | [knex](https://github.com/knex/knex) | `0.14.6` | `2.4.0` | | [sqlite3](https://github.com/TryGhost/node-sqlite3) | `5.0.2` | `5.1.5` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `3.0.1` | | [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.3` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [dot-prop](https://github.com/sindresorhus/dot-prop) | `4.2.0` | `4.2.1` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.9` | `1.2.13` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [got](https://github.com/sindresorhus/got) | `6.7.1` | `removed` | | [nodemon](https://github.com/remy/nodemon) | `1.18.7` | `3.1.0` | | [json5](https://github.com/json5/json5) | `0.5.1` | `removed` | | [rollup-plugin-vue](https://github.com/vuejs/rollup-plugin-vue) | `4.3.2` | `6.0.0` | Updates `axios` from 0.21.1 to 0.28.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>Release v0.28.0</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li>fix(security): fixed CVE-2023-45857 by backporting <code>withXSRFToken</code> option to v0.x (<a href="https://redirect.github.com/axios/axios/issues/6091">#6091</a>)</li> </ul> <h3>Backports from v1.x:</h3> <ul> <li>Allow null indexes on formSerializer and paramsSerializer v0.x (<a href="https://redirect.github.com/axios/axios/issues/4961">#4961</a>)</li> <li>Fixing content-type header repeated <a href="https://redirect.github.com/axios/axios/issues/4745">#4745</a></li> <li>Fixed timeout error message for HTTP 4738</li> <li>Added <code>axios.formToJSON</code> method (<a href="https://redirect.github.com/axios/axios/issues/4735">#4735</a>)</li> <li>URL params serializer (<a href="https://redirect.github.com/axios/axios/issues/4734">#4734</a>)</li> <li>Fixed toFormData Blob issue on node>v17 <a href="https://redirect.github.com/axios/axios/issues/4728">#4728</a></li> <li>Adding types for progress event callbacks <a href="https://redirect.github.com/axios/axios/issues/4675">#4675</a></li> <li>Fixed max body length defaults <a href="https://redirect.github.com/axios/axios/issues/4731">#4731</a></li> <li>Added data URL support for node.js (<a href="https://redirect.github.com/axios/axios/issues/4725">#4725</a>)</li> <li>Added isCancel type assert (<a href="https://redirect.github.com/axios/axios/issues/4293">#4293</a>)</li> <li>Added the ability for the <code>url-encoded-form</code> serializer to respect the <code>formSerializer</code> config (<a href="https://redirect.github.com/axios/axios/issues/4721">#4721</a>)</li> <li>Add <code>string[]</code> to <code>AxiosRequestHeaders</code> type (<a href="https://redirect.github.com/axios/axios/issues/4322">#4322</a>)</li> <li>Allow type definition for axios instance methods (<a href="https://redirect.github.com/axios/axios/issues/4224">#4224</a>)</li> <li>Fixed <code>AxiosError</code> stack capturing; (<a href="https://redirect.github.com/axios/axios/issues/4718">#4718</a>)</li> <li>Fixed <code>AxiosError</code> status code type; (<a href="https://redirect.github.com/axios/axios/issues/4717">#4717</a>)</li> <li>Adding Canceler parameters config and request (<a href="https://redirect.github.com/axios/axios/issues/4711">#4711</a>)</li> <li>fix(types): allow to specify partial default headers for instance creation (<a href="https://redirect.github.com/axios/axios/issues/4185">#4185</a>)</li> <li>Added <code>blob</code> to the list of protocols supported by the browser (<a href="https://redirect.github.com/axios/axios/issues/4678">#4678</a>)</li> <li>Fixing Z_BUF_ERROR when no content (<a href="https://redirect.github.com/axios/axios/issues/4701">#4701</a>)</li> <li>Fixed race condition on immediate requests cancellation (<a href="https://redirect.github.com/axios/axios/issues/4261">#4261</a>)</li> <li>Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance <a href="https://redirect.github.com/axios/axios/pull/4248">axios/axios#4248</a></li> <li>Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (<a href="https://redirect.github.com/axios/axios/issues/4229">#4229</a>)</li> <li>Fix TS definition for AxiosRequestTransformer (<a href="https://redirect.github.com/axios/axios/issues/4201">#4201</a>)</li> <li>Use type alias instead of interface for AxiosPromise (<a href="https://redirect.github.com/axios/axios/issues/4505">#4505</a>)</li> <li>Include request and config when creating a CanceledError instance (<a href="https://redirect.github.com/axios/axios/issues/4659">#4659</a>)</li> <li>Added generic TS types for the exposed toFormData helper (<a href="https://redirect.github.com/axios/axios/issues/4668">#4668</a>)</li> <li>Optimized the code that checks cancellation (<a href="https://redirect.github.com/axios/axios/issues/4587">#4587</a>)</li> <li>Replaced webpack with rollup (<a href="https://redirect.github.com/axios/axios/issues/4596">#4596</a>)</li> <li>Added stack trace to AxiosError (<a href="https://redirect.github.com/axios/axios/issues/4624">#4624</a>)</li> <li>Updated AxiosError.config to be optional in the type definition (<a href="https://redirect.github.com/axios/axios/issues/4665">#4665</a>)</li> <li>Removed incorrect argument for NetworkError constructor (<a href="https://redirect.github.com/axios/axios/issues/4656">#4656</a>)</li> </ul> <h2>v0.27.2</h2> <p>Fixes and Functionality:</p> <ul> <li>Fixed FormData posting in browser environment by reverting <a href="https://redirect.github.com/axios/axios/issues/3785">#3785</a> (<a href="https://redirect.github.com/axios/axios/pull/4640">#4640</a>)</li> <li>Enhanced protocol parsing implementation (<a href="https://redirect.github.com/axios/axios/pull/4639">#4639</a>)</li> <li>Fixed bundle size</li> </ul> <h2>v0.27.1</h2> <h3>Fixes and Functionality:</h3> <ul> <li>Removed import of url module in browser build due to huge size overhead and builds being broken (<a href="https://redirect.github.com/axios/axios/pull/4594">#4594</a>)</li> <li>Bumped follow-redirects to ^1.14.9 (<a href="https://redirect.github.com/axios/axios/pull/4615">#4615</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/axios/axios/compare/v0.27.2...v0.28.0">0.28.0</a> (2024-02-12)</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li>fix(security): fixed CVE-2023-45857 by backporting <code>withXSRFToken</code> option to v0.x (<a href="https://redirect.github.com/axios/axios/issues/6091">#6091</a>)</li> </ul> <h3>Backports from v1.x:</h3> <ul> <li>Allow null indexes on formSerializer and paramsSerializer v0.x (<a href="https://redirect.github.com/axios/axios/issues/4961">#4961</a>)</li> <li>Fixing content-type header repeated <a href="https://redirect.github.com/axios/axios/issues/4745">#4745</a></li> <li>Fixed timeout error message for HTTP 4738</li> <li>Added <code>axios.formToJSON</code> method (<a href="https://redirect.github.com/axios/axios/issues/4735">#4735</a>)</li> <li>URL params serializer (<a href="https://redirect.github.com/axios/axios/issues/4734">#4734</a>)</li> <li>Fixed toFormData Blob issue on node>v17 <a href="https://redirect.github.com/axios/axios/issues/4728">#4728</a></li> <li>Adding types for progress event callbacks <a href="https://redirect.github.com/axios/axios/issues/4675">#4675</a></li> <li>Fixed max body length defaults <a href="https://redirect.github.com/axios/axios/issues/4731">#4731</a></li> <li>Added data URL support for node.js (<a href="https://redirect.github.com/axios/axios/issues/4725">#4725</a>)</li> <li>Added isCancel type assert (<a href="https://redirect.github.com/axios/axios/issues/4293">#4293</a>)</li> <li>Added the ability for the <code>url-encoded-form</code> serializer to respect the <code>formSerializer</code> config (<a href="https://redirect.github.com/axios/axios/issues/4721">#4721</a>)</li> <li>Add <code>string[]</code> to <code>AxiosRequestHeaders</code> type (<a href="https://redirect.github.com/axios/axios/issues/4322">#4322</a>)</li> <li>Allow type definition for axios instance methods (<a href="https://redirect.github.com/axios/axios/issues/4224">#4224</a>)</li> <li>Fixed <code>AxiosError</code> stack capturing; (<a href="https://redirect.github.com/axios/axios/issues/4718">#4718</a>)</li> <li>Fixed <code>AxiosError</code> status code type; (<a href="https://redirect.github.com/axios/axios/issues/4717">#4717</a>)</li> <li>Adding Canceler parameters config and request (<a href="https://redirect.github.com/axios/axios/issues/4711">#4711</a>)</li> <li>fix(types): allow to specify partial default headers for instance creation (<a href="https://redirect.github.com/axios/axios/issues/4185">#4185</a>)</li> <li>Added <code>blob</code> to the list of protocols supported by the browser (<a href="https://redirect.github.com/axios/axios/issues/4678">#4678</a>)</li> <li>Fixing Z_BUF_ERROR when no content (<a href="https://redirect.github.com/axios/axios/issues/4701">#4701</a>)</li> <li>Fixed race condition on immediate requests cancellation (<a href="https://redirect.github.com/axios/axios/issues/4261">#4261</a>)</li> <li>Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance <a href="https://redirect.github.com/axios/axios/pull/4248">axios/axios#4248</a></li> <li>Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (<a href="https://redirect.github.com/axios/axios/issues/4229">#4229</a>)</li> <li>Fix TS definition for AxiosRequestTransformer (<a href="https://redirect.github.com/axios/axios/issues/4201">#4201</a>)</li> <li>Use type alias instead of interface for AxiosPromise (<a href="https://redirect.github.com/axios/axios/issues/4505">#4505</a>)</li> <li>Include request and config when creating a CanceledError instance (<a href="https://redirect.github.com/axios/axios/issues/4659">#4659</a>)</li> <li>Added generic TS types for the exposed toFormData helper (<a href="https://redirect.github.com/axios/axios/issues/4668">#4668</a>)</li> <li>Optimized the code that checks cancellation (<a href="https://redirect.github.com/axios/axios/issues/4587">#4587</a>)</li> <li>Replaced webpack with rollup (<a href="https://redirect.github.com/axios/axios/issues/4596">#4596</a>)</li> <li>Added stack trace to AxiosError (<a href="https://redirect.github.com/axios/axios/issues/4624">#4624</a>)</li> <li>Updated AxiosError.config to be optional in the type definition (<a href="https://redirect.github.com/axios/axios/issues/4665">#4665</a>)</li> <li>Removed incorrect argument for NetworkError constructor (<a href="https://redirect.github.com/axios/axios/issues/4656">#4656</a>)</li> </ul> <h2>0.27.2 (April 27, 2022)</h2> <p>Fixes and Functionality:</p> <ul> <li>Fixed FormData posting in browser environment by reverting <a href="https://redirect.github.com/axios/axios/issues/3785">#3785</a> (<a href="https://redirect.github.com/axios/axios/pull/4640">#4640</a>)</li> <li>Enhanced protocol parsing implementation (<a href="https://redirect.github.com/axios/axios/pull/4639">#4639</a>)</li> <li>Fixed bundle size</li> </ul> <h2>0.27.1 (April 26, 2022)</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/3b7635aefc842c05da0ec8c90e8bd09cb54616b8"><code>3b7635a</code></a> [Release] v0.28.0 (<a href="https://redirect.github.com/axios/axios/issues/6211">#6211</a>)</li> <li><a href="https://github.com/axios/axios/commit/27c007656d8d7ffe780248edc531949d744450b7"><code>27c0076</code></a> feat(backport): added ability for paramsSerializer to handle function; (<a href="https://redirect.github.com/axios/axios/issues/6227">#6227</a>)</li> <li><a href="https://github.com/axios/axios/commit/80c3d74544197e83ee268b24f9cc1428e04d766c"><code>80c3d74</code></a> chore(ci): backported publish action; (<a href="https://redirect.github.com/axios/axios/issues/6224">#6224</a>)</li> <li><a href="https://github.com/axios/axios/commit/2755df562b9c194fba6d8b609a383443f6a6e967"><code>2755df5</code></a> fix(security): fixed CVE-2023-45857 by backporting <code>withXSRFToken</code> option to ...</li> <li><a href="https://github.com/axios/axios/commit/880b42e2b8cdd467ce0c6ecd1cf522ef6ef65682"><code>880b42e</code></a> docs: Fix a typo in README</li> <li><a href="https://github.com/axios/axios/commit/c4bf0a4afcac9a49e9b58d3ea64570110cba34f8"><code>c4bf0a4</code></a> Allow null indexes on formSerializer and paramsSerializer v0.x (<a href="https://redirect.github.com/axios/axios/issues/4961">#4961</a>)</li> <li><a href="https://github.com/axios/axios/commit/1e2679f75b2030dd62c661e3292ab265c89497b8"><code>1e2679f</code></a> fix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...</li> <li><a href="https://github.com/axios/axios/commit/80b546c3f1982852aa0047dac5ddde38426e25cb"><code>80b546c</code></a> fix: loosing request header (<a href="https://redirect.github.com/axios/axios/issues/4858">#4858</a>) (<a href="https://redirect.github.com/axios/axios/issues/4871">#4871</a>)</li> <li><a href="https://github.com/axios/axios/commit/6acb5ef8ff127db65da85189b3ccaeb10b93121a"><code>6acb5ef</code></a> feat: brower platform add data protocol. (<a href="https://redirect.github.com/axios/axios/issues/4814">#4814</a>)</li> <li><a href="https://github.com/axios/axios/commit/bbb2264614befdce107449baa8a3102d9043a527"><code>bbb2264</code></a> fix(typing): axios response headers can be undefined (<a href="https://redirect.github.com/axios/axios/issues/4813">#4813</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v0.21.1...v0.28.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~jasonsaayman">jasonsaayman</a>, a new releaser for axios since your current version.</p> </details> <br /> Updates `express` from 4.16.3 to 4.19.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>4.19.2</h2> <h2>What's Changed</h2> <ul> <li><a href="https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94">Improved fix for open redirect allow list bypass</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.1...4.19.2">https://github.com/expressjs/express/compare/4.19.1...4.19.2</a></p> <h2>4.19.1</h2> <h2>What's Changed</h2> <ul> <li>Fix ci after location patch by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5552">expressjs/express#5552</a></li> <li>fixed un-edited version in history.md for 4.19.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5556">expressjs/express#5556</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.19.0...4.19.1">https://github.com/expressjs/express/compare/4.19.0...4.19.1</a></p> <h2>4.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix typo in release date by <a href="https://github.com/UlisesGascon"><code>@UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5527">expressjs/express#5527</a></li> <li>docs: nominating <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> to be project captian by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5511">expressjs/express#5511</a></li> <li>docs: loosen TC activity rules by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5510">expressjs/express#5510</a></li> <li>Add note on how to update docs for new release by <a href="https://github.com/crandmck"><code>@crandmck</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> <li><a href="https://redirect.github.com/expressjs/express/pull/5551/commits/660ccf5fa33dd0baab069e5c8ddd9ffe7d8bbff1">Prevent open redirect allow list bypass due to encodeurl</a></li> <li>Release 4.19.0 by <a href="https://github.com/wesleytodd"><code>@wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5551">expressjs/express#5551</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/crandmck"><code>@crandmck</code></a> made their first contribution in <a href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/4.18.3...4.19.0">https://github.com/expressjs/express/compare/4.18.3...4.19.0</a></p> <h2>4.18.3</h2> <h2>Main Changes</h2> <ul> <li>Fix routing requests without method</li> <li>deps: [email protected] <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: [email protected]</li> </ul> </li> </ul> <h2>Other Changes</h2> <ul> <li>Use https: protocol instead of deprecated git: protocol by <a href="https://github.com/vcsjones"><code>@vcsjones</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5032">expressjs/express#5032</a></li> <li>build: [email protected] and [email protected] by <a href="https://github.com/abenhamdine"><code>@abenhamdine</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5034">expressjs/express#5034</a></li> <li>ci: update actions/checkout to v3 by <a href="https://github.com/armujahid"><code>@armujahid</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5027">expressjs/express#5027</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5124">expressjs/express#5124</a></li> <li>Remove unused originalIndex from acceptParams by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5119">expressjs/express#5119</a></li> <li>Fixed typos by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5117">expressjs/express#5117</a></li> <li>examples: remove unused params by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5113">expressjs/express#5113</a></li> <li>fix: parameter str is not described in JSDoc by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5130">expressjs/express#5130</a></li> <li>fix: typos in History.md by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5131">expressjs/express#5131</a></li> <li>build : add [email protected] by <a href="https://github.com/abenhamdine"><code>@abenhamdine</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5028">expressjs/express#5028</a></li> <li>test: remove unused function arguments in params by <a href="https://github.com/raksbisht"><code>@raksbisht</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5137">expressjs/express#5137</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>4.19.2 / 2024-03-25</h1> <ul> <li>Improved fix for open redirect allow list bypass</li> </ul> <h1>4.19.1 / 2024-03-20</h1> <ul> <li>Allow passing non-strings to res.location with new encoding handling checks</li> </ul> <h1>4.19.0 / 2024-03-20</h1> <ul> <li>Prevent open redirect allow list bypass due to encodeurl</li> <li>deps: [email protected]</li> </ul> <h1>4.18.3 / 2024-02-29</h1> <ul> <li>Fix routing requests without method</li> <li>deps: [email protected] <ul> <li>Fix strict json error message on Node.js 19+</li> <li>deps: content-type@~1.0.5</li> <li>deps: [email protected]</li> </ul> </li> <li>deps: [email protected] <ul> <li>Add <code>partitioned</code> option</li> </ul> </li> </ul> <h1>4.18.2 / 2022-10-08</h1> <ul> <li>Fix regression routing a large stack in a single route</li> <li>deps: [email protected] <ul> <li>deps: [email protected]</li> <li>perf: remove unnecessary object clone</li> </ul> </li> <li>deps: [email protected]</li> </ul> <h1>4.18.1 / 2022-04-29</h1> <ul> <li>Fix hanging on large stack of sync routes</li> </ul> <h1>4.18.0 / 2022-04-25</h1> <ul> <li>Add "root" option to <code>res.download</code></li> <li>Allow <code>options</code> without <code>filename</code> in <code>res.download</code></li> <li>Deprecate string and non-integer arguments to <code>res.status</code></li> <li>Fix behavior of <code>null</code>/<code>undefined</code> as <code>maxAge</code> in <code>res.cookie</code></li> <li>Fix handling very large stacks of sync middleware</li> <li>Ignore <code>Object.prototype</code> values in settings through <code>app.set</code>/<code>app.get</code></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/04bc62787be974874bc1467b23606c36bc9779ba"><code>04bc627</code></a> 4.19.2</li> <li><a href="https://github.com/expressjs/express/commit/da4d763ff6ba9df6dbd8f1f0b1d05412dda934d5"><code>da4d763</code></a> Improved fix for open redirect allow list bypass</li> <li><a href="https://github.com/expressjs/express/commit/4f0f6cc67d531431c096ea006c2191b92931bbc3"><code>4f0f6cc</code></a> 4.19.1</li> <li><a href="https://github.com/expressjs/express/commit/a003cfab034fbadb1c78ae337ee8ab389adda217"><code>a003cfa</code></a> Allow passing non-strings to res.location with new encoding handling checks f...</li> <li><a href="https://github.com/expressjs/express/commit/a1fa90fcea7d8e844e1c9938ad095d62669c3abd"><code>a1fa90f</code></a> fixed un-edited version in history.md for 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/11f2b1db227fd42c2508c427032c1ec671b306be"><code>11f2b1d</code></a> build: fix build due to inconsistent supertest behavior in older versions</li> <li><a href="https://github.com/expressjs/express/commit/084e36506a18774f85206a65d8da04dc1107fc1b"><code>084e365</code></a> 4.19.0</li> <li><a href="https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd"><code>0867302</code></a> Prevent open redirect allow list bypass due to encodeurl</li> <li><a href="https://github.com/expressjs/express/commit/567c9c665d0de4c344b8e160146050770233783c"><code>567c9c6</code></a> Add note on how to update docs for new release (<a href="https://redirect.github.com/expressjs/express/issues/5541">#5541</a>)</li> <li><a href="https://github.com/expressjs/express/commit/69a4cf2819c4449ec6ea45649691fb43a528d5d1"><code>69a4cf2</code></a> deps: [email protected]</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.16.3...4.19.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~wesleytodd">wesleytodd</a>, a new releaser for express since your current version.</p> </details> <br /> Updates `follow-redirects` from 1.14.7 to 1.15.6 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/35a517c5861d79dc8bff7db8626013d20b711b06"><code>35a517c</code></a> Release version 1.15.6 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b"><code>c4f847f</code></a> Drop Proxy-Authorization across hosts.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/8526b4a1b2ab3a2e4044299377df623a661caa76"><code>8526b4a</code></a> Use GitHub for disclosure.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/b1677ce00110ee50dc5da576751d39b281fc4944"><code>b1677ce</code></a> Release version 1.15.5 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/d8914f7982403ea096b39bd594a00ee9d3b7e224"><code>d8914f7</code></a> Preserve fragment in responseUrl.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/65858205e59f1e23c9bf173348a7a7cbb8ac47f5"><code>6585820</code></a> Release version 1.15.4 of the npm package.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"><code>7a6567e</code></a> Disallow bracketed hostnames.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/05629af696588b90d64e738bc2e809a97a5f92fc"><code>05629af</code></a> Prefer native URL instead of deprecated url.parse.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/1cba8e85fa73f563a439fe460cf028688e4358df"><code>1cba8e8</code></a> Prefer native URL instead of legacy url.resolve.</li> <li><a href="https://github.com/follow-redirects/follow-redirects/commit/72bc2a4229bc18dc9fbd57c60579713e6264cb92"><code>72bc2a4</code></a> Simplify _processResponse error handling.</li> <li>Additional commits viewable in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.14.7...v1.15.6">compare view</a></li> </ul> </details> <br /> Updates `jsonwebtoken` from 8.3.0 to 9.0.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md">jsonwebtoken's changelog</a>.</em></p> <blockquote> <h2>9.0.0 - 2022-12-21</h2> <p><strong>Breaking changes: See <a href="https://github.com/auth0/node-jsonwebtoken/wiki/Migration-Notes:-v8-to-v9">Migration from v8 to v9</a></strong></p> <h3>Breaking changes</h3> <ul> <li>Removed support for Node versions 11 and below.</li> <li>The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]<a href="https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16">https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16</a>)</li> <li>RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]<a href="https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6">https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6</a>)</li> <li>Key types must be valid for the signing / verification algorithm</li> </ul> <h3>Security fixes</h3> <ul> <li>security: fixes <code>Arbitrary File Write via verify function</code> - CVE-2022-23529</li> <li>security: fixes <code>Insecure default algorithm in jwt.verify() could lead to signature validation bypass</code> - CVE-2022-23540</li> <li>security: fixes <code>Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC</code> - CVE-2022-23541</li> <li>security: fixes <code>Unrestricted key type could lead to legacy keys usage</code> - CVE-2022-23539</li> </ul> <h2>8.5.1 - 2019-03-18</h2> <h3>Bug fix</h3> <ul> <li>fix: ensure correct PS signing and verification (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/585">#585</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/e5874ae428ffc0465e6bd4e660f89f78b56a74a6">e5874ae428ffc0465e6bd4e660f89f78b56a74a6</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/585">#585</a></li> </ul> <h3>Docs</h3> <ul> <li>README: fix markdown for algorithms table (<a href="https://github.com/auth0/node-jsonwebtoken/commit/84e03ef70f9c44a3aef95a1dc122c8238854f683">84e03ef70f9c44a3aef95a1dc122c8238854f683</a>)</li> </ul> <h2>8.5.0 - 2019-02-20</h2> <h3>New Functionality</h3> <ul> <li>feat: add PS JWA support for applicable node versions (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/573">#573</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/eefb9d9c6eec54718fa6e41306bda84788df7bec">eefb9d9c6eec54718fa6e41306bda84788df7bec</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/573">#573</a></li> <li>Add complete option in jwt.verify (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/522">#522</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/8737789dd330cf9e7870f4df97fd52479adbac22">8737789dd330cf9e7870f4df97fd52479adbac22</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/522">#522</a></li> </ul> <h3>Test Improvements</h3> <ul> <li>Add tests for private claims in the payload (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/555">#555</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/5147852896755dc1291825e2e40556f964411fb2">5147852896755dc1291825e2e40556f964411fb2</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/555">#555</a></li> <li>Force use_strict during testing (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/577">#577</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/7b60c127ceade36c33ff33be066e435802001c94">7b60c127ceade36c33ff33be066e435802001c94</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/577">#577</a></li> <li>Refactor tests related to jti and jwtid (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/544">#544</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/7eebbc75ab89e01af5dacf2aae90fe05a13a1454">7eebbc75ab89e01af5dacf2aae90fe05a13a1454</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/544">#544</a></li> <li>ci: remove nsp from tests (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/569">#569</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/da8f55c3c7b4dd0bfc07a2df228500fdd050242a">da8f55c3c7b4dd0bfc07a2df228500fdd050242a</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/569">#569</a></li> </ul> <h3>Docs</h3> <ul> <li>Fix 'cert' token which isn't a cert (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/554">#554</a>) (<a href="https://github.com/auth0/node-jsonwebtoken/commit/0c24fe68cd2866cea6322016bf993cd897fefc98">0c24fe68cd2866cea6322016bf993cd897fefc98</a>), closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/554">#554</a></li> </ul> <h2>8.4.0 - 2018-11-14</h2> <h3>New Functionality</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3"><code>e1fa9dc</code></a> Merge pull request from GHSA-8cf7-32gw-wr33</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/5eaedbf2b01676d952336e73b4d2efba847d2d1b"><code>5eaedbf</code></a> chore(ci): remove github test actions job (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/861">#861</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/cd4163eb1407aab0b3148f91b0b9c26276b96c6b"><code>cd4163e</code></a> chore(ci): configure Github Actions jobs for Tests & Security Scanning (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/856">#856</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6"><code>ecdf6cc</code></a> fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16"><code>8345030</code></a> fix(sign&verify)!: Remove default <code>none</code> support from <code>sign</code> and <code>verify</code> met...</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/7e6a86b1c25e5fd05733c52c118848341aba1c4e"><code>7e6a86b</code></a> Upload OpsLevel YAML (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/849">#849</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/74d5719bd03993fcf71e3b176621f133eb6138c0"><code>74d5719</code></a> docs: update references vercel/ms references (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/770">#770</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/d71e383862fc735991fd2e759181480f066bf138"><code>d71e383</code></a> docs: document "invalid token" error</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/37650031fd0bac1a5b0d682bbfcf8c1705917aa9"><code>3765003</code></a> docs: fix spelling in README.md: Peak -> Peek (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/754">#754</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/a46097e962621ab2ba718d1da6025cdeba3597c8"><code>a46097e</code></a> docs: make decode impossible to discover before verify</li> <li>Additional commits viewable in <a href="https://github.com/auth0/node-jsonwebtoken/compare/v8.3.0...v9.0.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~julien.wollscheid">julien.wollscheid</a>, a new releaser for jsonwebtoken since your current version.</p> </details> <br /> Updates `knex` from 0.14.6 to 2.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/knex/knex/releases">knex's releases</a>.</em></p> <blockquote> <h2>2.4.0</h2> <h3>New features:</h3> <ul> <li>Support partial unique indexes <a href="https://redirect.github.com/knex/knex/issues/5316">#5316</a></li> <li>Make compiling SQL in error message optional <a href="https://redirect.github.com/knex/knex/issues/5282">#5282</a></li> </ul> <h3>Bug fixes</h3> <ul> <li>Insert array into json column <a href="https://redirect.github.com/knex/knex/issues/5321">#5321</a></li> <li>Fix unexpected max acquire-timeout <a href="https://redirect.github.com/knex/knex/issues/5377">#5377</a></li> <li>Fix: orWhereJson <a href="https://redirect.github.com/knex/knex/issues/5361">#5361</a></li> <li>MySQL: Add assertion for basic where clause not to be object or array <a href="https://redirect.github.com/knex/knex/issues/1227">#1227</a></li> <li>SQLite: Fix changing the default value of a boolean column in SQLite <a href="https://redirect.github.com/knex/knex/issues/5319">#5319</a></li> </ul> <h3>Typings:</h3> <ul> <li>add missing type for 'expirationChecker' on PgConnectionConfig <a href="https://redirect.github.com/knex/knex/issues/5334">#5334</a></li> </ul> <h2>2.3.0</h2> <h3>New features:</h3> <ul> <li>PostgreSQL: Explicit jsonb support for custom pg clients <a href="https://redirect.github.com/knex/knex/issues/5201">#5201</a></li> <li>SQLite: Support returning with sqlite3 and better-sqlite3 <a href="https://redirect.github.com/knex/knex/issues/5285">#5285</a></li> <li>MSSQL: Implement mapBinding mssql dialect option <a href="https://redirect.github.com/knex/knex/issues/5292">#5292</a></li> </ul> <h3>Typings:</h3> <ul> <li>Update types for TS 4.8 <a href="https://redirect.github.com/knex/knex/issues/5279">#5279</a></li> <li>Fix typo <a href="https://redirect.github.com/knex/knex/issues/5267">#5267</a></li> <li>Fix WhereJsonObject withCompositeTableType <a href="https://redirect.github.com/knex/knex/issues/5306">#5306</a></li> <li>Fix AnalyticFunction type <a href="https://redirect.github.com/knex/knex/issues/5304">#5304</a></li> <li>Infer specific column value type in aggregations <a href="https://redirect.github.com/knex/knex/issues/5297">#5297</a></li> </ul> <h2>2.2.0</h2> <h3>New features:</h3> <ul> <li>Inline primary key creation for postgres flavours <a href="https://redirect.github.com/knex/knex/issues/5233">#5233</a></li> <li>SQLite: Add warning for undefined connection file <a href="https://redirect.github.com/knex/knex/issues/5223">#5223</a></li> <li>MSSQL: Add JSON parameter support for connection <a href="https://redirect.github.com/knex/knex/issues/5200">#5200</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>PostgreSQL: add primaryKey option for uuid <a href="https://redirect.github.com/knex/knex/issues/5212">#5212</a></li> </ul> <h3>Typings:</h3> <ul> <li>Add promisable and better types <a href="https://redirect.github.com/knex/knex/issues/5222">#5222</a></li> <li>Update raw query bind parameter type <a href="https://redirect.github.com/knex/knex/issues/5208">#5208</a></li> </ul> <h1>2.1.0 - 26 May, 2022</h1>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/knex/knex/blob/master/CHANGELOG.md">knex's changelog</a>.</em></p> <blockquote> <h1>2.4.0 - 06 January, 2023</h1> <h3>New features:</h3> <ul> <li>Support partial unique indexes <a href="https://redirect.github.com/knex/knex/issues/5316">#5316</a></li> <li>Make compiling SQL in error message optional <a href="https://redirect.github.com/knex/knex/issues/5282">#5282</a></li> </ul> <h3>Bug fixes</h3> <ul> <li>Insert array into json column <a href="https://redirect.github.com/knex/knex/issues/5321">#5321</a></li> <li>Fix unexpected max acquire-timeout <a href="https://redirect.github.com/knex/knex/issues/5377">#5377</a></li> <li>Fix: orWhereJson <a href="https://redirect.github.com/knex/knex/issues/5361">#5361</a></li> <li>MySQL: Add assertion for basic where clause not to be object or array <a href="https://redirect.github.com/knex/knex/issues/1227">#1227</a></li> <li>SQLite: Fix changing the default value of a boolean column in SQLite <a href="https://redirect.github.com/knex/knex/issues/5319">#5319</a></li> </ul> <h3>Typings:</h3> <ul> <li>add missing type for 'expirationChecker' on PgConnectionConfig <a href="https://redirect.github.com/knex/knex/issues/5334">#5334</a></li> </ul> <h1>2.3.0 - 31 August, 2022</h1> <h3>New features:</h3> <ul> <li>PostgreSQL: Explicit jsonb support for custom pg clients <a href="https://redirect.github.com/knex/knex/issues/5201">#5201</a></li> <li>SQLite: Support returning with sqlite3 and better-sqlite3 <a href="https://redirect.github.com/knex/knex/issues/5285">#5285</a></li> <li>MSSQL: Implement mapBinding mssql dialect option <a href="https://redirect.github.com/knex/knex/issues/5292">#5292</a></li> </ul> <h3>Typings:</h3> <ul> <li>Update types for TS 4.8 <a href="https://redirect.github.com/knex/knex/issues/5279">#5279</a></li> <li>Fix typo <a href="https://redirect.github.com/knex/knex/issues/5267">#5267</a></li> <li>Fix WhereJsonObject withCompositeTableType <a href="https://redirect.github.com/knex/knex/issues/5306">#5306</a></li> <li>Fix AnalyticFunction type <a href="https://redirect.github.com/knex/knex/issues/5304">#5304</a></li> <li>Infer specific column value type in aggregations <a href="https://redirect.github.com/knex/knex/issues/5297">#5297</a></li> </ul> <h1>2.2.0 - 19 July, 2022</h1> <h3>New features:</h3> <ul> <li>Inline primary key creation for postgres flavours <a href="https://redirect.github.com/knex/knex/issues/5233">#5233</a></li> <li>SQLite: Add warning for undefined connection file <a href="https://redirect.github.com/knex/knex/issues/5223">#5223</a></li> <li>MSSQL: Add JSON parameter support for connection <a href="https://redirect.github.com/knex/knex/issues/5200">#5200</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>PostgreSQL: add primaryKey option for uuid <a href="https://redirect.github.com/knex/knex/issues/5212">#5212</a></li> </ul> <h3>Typings:</h3> <ul> <li>Add promisable and better types <a href="https://redirect.github.com/knex/knex/issues/5222">#5222</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/knex/knex/commit/3475d8166863d6c9535527cd541d7c894e21ea84"><code>3475d81</code></a> Prepare to release 2.4.0</li> <li><a href="https://github.com/knex/knex/commit/e97f92201a360f666e7df529fe5ff1cd1f7f9fcd"><code>e97f922</code></a> Bump tsd from 0.24.1 to 0.25.0 (<a href="https://redirect.github.com/knex/knex/issues/5396">#5396</a>)</li> <li><a href="https://github.com/knex/knex/commit/e145322da92749be7749f9ade5b5f5a66d6586a4"><code>e145322</code></a> 1227: add assertion for basic where clause values (<a href="https://redirect.github.com/knex/knex/issues/5417">#5417</a>)</li> <li><a href="https://github.com/knex/knex/commit/962bb0a635ed40a240021379521814b5bd36d438"><code>962bb0a</code></a> Bump sinon from 14.0.2 to 15.0.1 (<a href="https://redirect.github.com/knex/knex/issues/5413">#5413</a>)</li> <li><a href="https://github.com/knex/knex/commit/ab45314e70bc55a98de08d9c2bd7005bac146702"><code>ab45314</code></a> Add JSDoc (TS Flavour) to mjs stub file (<a href="https://redirect.github.com/knex/knex/issues/5390">#5390</a>)</li> <li><a href="https://github.com/knex/knex/commit/72bd1f7396b8472eb416a1eb8c8270737189b999"><code>72bd1f7</code></a> Fix: orWhereJson (<a href="https://redirect.github.com/knex/knex/issues/5361">#5361</a>)</li> <li><a href="https://github.com/knex/knex/commit/4fc939a17640fd1abf1a94d106b7836ae20c1d1e"><code>4fc939a</code></a> Fixes unexpected max acquire-timeout (<a href="https://redirect.github.com/knex/knex/issues/5377">#5377</a>)</li> <li><a href="https://github.com/knex/knex/commit/5c4837cd4f26d192527684a2d22ed2f0563060fe"><code>5c4837c</code></a> Fix lib/.gitignore path separator on Windows. (<a href="https://redirect.github.com/knex/knex/issues/5325">#5325</a>)</li> <li><a href="https://github.com/knex/knex/commit/7dbbd007014911b1f240fdf8cec8a191022eb6f7"><code>7dbbd00</code></a> Bump actions/setup-node from 3.4.1 to 3.5.1 (<a href="https://redirect.github.com/knex/knex/issues/5356">#5356</a>)</li> <li><a href="https://github.com/knex/knex/commit/d39051f4a56bbd4b2b48500f08198efddef5b94d"><code>d39051f</code></a> fix: add missing type for 'expirationChecker' on PgConnectionConfig (<a href="https://redirect.github.com/knex/knex/issues/5334">#5334</a>)</li> <li>Additional commits viewable in <a href="https://github.com/knex/knex/compare/0.14.6...2.4.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~kibertoad">kibertoad</a>, a new releaser for knex since your current version.</p> </details> <br /> Updates `sqlite3` from 5.0.2 to 5.1.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TryGhost/node-sqlite3/releases">sqlite3's releases</a>.</em></p> <blockquote> <h2>v5.1.5</h2> <h2>What's Changed</h2> <ul> <li>🔒 Fixed code execution vulnerability due to Object coercion by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a></li> <li>Updated bundled SQLite to v3.41.1 by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a></li> <li>Fixed rpath linker option when using a custom sqlite by <a href="https://github.com/jeromew"><code>@jeromew</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1654">TryGhost/node-sqlite3#1654</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5">https://github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5</a></p> <h2>v5.1.4</h2> <h2>What's Changed</h2> <ul> <li>Fixed glibc compatibility by downgrading CI to Ubuntu 20 by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1664">TryGhost/node-sqlite3#1664</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4">https://github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4</a></p> <h2>v5.1.3</h2> <h2>What's Changed</h2> <ul> <li>Updated bundled SQLite to v3.40.0 by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3">https://github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3</a></p> <h2>v5.1.2</h2> <h2>What's Changed</h2> <ul> <li>Updated bundled SQLite to v3.39.4 by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2">https://github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2</a></p> <h2>v5.1.1</h2> <h2>What's Changed</h2> <ul> <li>Added Darwin ARM64 binaries by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1594">TryGhost/node-sqlite3#1594</a></li> </ul> <p>A huge thanks to <a href="https://www.macstadium.com/">MacStadium</a> for providing an M1 Mac Mini so we can offer ARM64 binaries.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1">https://github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1</a></p> <h2>v5.1.0</h2> <p>✨ We're very excited to announce node-sqlite3's first minor release of v5, packed with features and improvements.</p> <p>If you encounter any problems, please open a detailed issue using the <a href="https://github.com/TryGhost/node-sqlite3/issues/new/choose">templates</a>.</p> <h2>What's Changed</h2> <ul> <li>Updated bundled SQLite to v3.39.3 by <a href="https://github.com/daniellockyer"><code>@daniellockyer</code></a></li> <li>Added ability to receive updates from <code>sqlite3_update_hook</code> by <a href="https://github.com/soukand"><code>@soukand</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1267">TryGhost/node-sqlite3#1267</a></li> <li>Added support for setting SQLite limits by <a href="https://github.com/paulfitz"><code>@paulfitz</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1548">TryGhost/node-sqlite3#1548</a></li> <li>Added library types file by <a href="https://github.com/bpasero"><code>@bpasero</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1527">TryGhost/node-sqlite3#1527</a></li> <li>Added <code>package-lock.json</code> to <code>.gitignore</code> by <a href="https://github.com/JoelEinbinder"><code>@JoelEinbinder</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1628">TryGhost/node-sqlite3#1628</a></li> <li>Fixed remaining method declarations by <a href="https://github.com/alexanderfloh"><code>@alexanderfloh</code></a> in <a href="https://redirect.github.com/TryGhost/node-sqlite3/pull/1633">TryGhost/node-sqlite3#1633</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/6a806f87903d778d520bce09f6e893752619383b"><code>6a806f8</code></a> v5.1.5</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/edb1934dd222ae55632e120d8f64552d5191c781"><code>edb1934</code></a> Fixed code execution vulnerability due to Object coercion</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/3a4888894dd0e0463d3bf4dc833fdcc995b614af"><code>3a48888</code></a> Updated bundled SQLite to v3.41.1</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/c1440bdaa47ffdda852ff576ac543114c4f0fb4b"><code>c1440bd</code></a> Fixed rpath linker option when using a custom sqlite (<a href="https://redirect.github.com/TryGhost/node-sqlite3/issues/1654">#1654</a>)</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/93affa425958f479150b699f08eb67af3e5b522c"><code>93affa4</code></a> Update microsoft/setup-msbuild action to v1.3</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/6f6318e929367ae05f395c5e0e5e4b09c62e87f4"><code>6f6318e</code></a> v5.1.4</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/aeafe2591d664fcf6c70e7ddadc7875c8f691a4d"><code>aeafe25</code></a> Revert "Renamed <code>master</code> references to <code>main</code>"</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/57ce2d4519d0fe1c801081389d20cc7f357cdc02"><code>57ce2d4</code></a> Fixed glib compatibility by downgrading to Ubuntu 20</li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/af8e567f25f9da7e0c14f90ede688efe56486ce4"><code>af8e567</code></a> Renamed <code>master</code> references to <code>main</code></li> <li><a href="https://github.com/TryGhost/node-sqlite3/commit/8fd18a392c4844288811330dddfcf171c18ed93f"><code>8fd18a3</code></a> Extracted function checking code into macro</li> <li>Additional commits viewable in <a href="https://github.com/TryGhost/node-sqlite3/compare/v5.0.2...v5.1.5">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~daniellockyer">daniellockyer</a>, a new releaser for sqlite3 since your current version.</p> </details> <br /> Updates `ansi-regex` from 3.0.0 to 3.0.1 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/chalk/ansi-regex/commit/f545bdb80048f527889eddb9ac1a851c6f2a2241"><code>f545bdb</code></a> 3.0.1</li> <li><a href="https://github.com/chalk/ansi-regex/commit/c57d4c2fdbe0357a0f6dd42d1160defdc9fffdf5"><code>c57d4c2</code></a> fix a few old XO issues for backport</li> <li><a href="https://github.com/chalk/ansi-regex/commit/419250fa510bf31b4cc672e76537a64f9332e1f1"><code>419250f</code></a> Fix potential ReDoS (<a href="https://redirect.github.com/chalk/ansi-regex/issues/37">#37</a>)</li> <li>See full diff in <a href="https://github.com/chalk/ansi-regex/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> Updates `qs` from 6.5.1 to 6.11.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.11.0</strong></h2> <ul> <li>[New] [Fix] <code>stringify</code>: revert 0e903c0; add <code>commaRoundTrip</code> option (<a href="https://redirect.github.com/ljharb/qs/issues/442">#442</a>)</li> <li>[readme] fix version badge</li> </ul> <h2><strong>6.10.5</strong></h2> <ul> <li>[Fix] <code>stringify</code>: with <code>arrayFormat: comma</code>, properly include an explicit <code>[]</code> on a single-item array (<a href="https://redirect.github.com/ljharb/qs/issues/434">#434</a>)</li> </ul> <h2><strong>6.10.4</strong></h2> <ul> <li>[Fix] <code>stringify</code>: with <code>arrayFormat: comma</code>, include an explicit <code>[]</code> on a single-item array (<a href="https://redirect.github.com/ljharb/qs/issues/441">#441</a>)</li> <li>[meta] use <code>npmignore</code> to autogenerate an npmignore file</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>has-symbol</code>, <code>object-inspect</code>, <code>tape</code></li> </ul> <h2><strong>6.10.3</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://redirect.github.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://redirect.github.com/ljharb/qs/issues/427">#427</a>)</li> <li>[actions] reuse common workflows</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>object-inspect</code>, <code>tape</code></li> </ul> <h2><strong>6.10.2</strong></h2> <ul> <li>[Fix] <code>stringify</code>: actually fix cyclic references (<a href="https://redirect.github.com/ljharb/qs/issues/426">#426</a>)</li> <li>[Fix] <code>stringify</code>: avoid encoding arrayformat comma when <code>encodeValuesOnly = true</code> (<a href="https://redirect.github.com/ljharb/qs/issues/424">#424</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] add note and links for coercing primitive values (<a href="https://redirect.github.com/ljharb/qs/issues/408">#408</a>)</li> <li>[actions] update codecov uploader</li> <li>[actions] update workflows</li> <li>[Tests] clean up stringify tests slightly</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>object-inspect</code>, <code>safe-publish-latest</code>, <code>tape</code></li> </ul> <h2><strong>6.10.1</strong></h2> <ul> <li>[Fix] <code>stringify</code>: avoid exception on repeated object values (<a href="https://redirect.github.com/ljharb/qs/issues/402">#402</a>)</li> </ul> <h2><strong>6.10.0</strong></h2> <ul> <li>[New] <code>stringify</code>: throw on cycles, instead of an infinite loop (<a href="https://redirect.github.com/ljharb/qs/issues/395">#395</a>, <a href="https://redirect.github.com/ljharb/qs/issues/394">#394</a>, <a href="https://redirect.github.com/ljharb/qs/issues/393">#393</a>)</li> <li>[New] <code>parse</code>: add <code>allowSparse</code> option for collapsing arrays with missing indices (<a href="https://redirect.github.com/ljharb/qs/issues/312">#312</a>)</li> <li>[meta] fix README.md (<a href="https://redirect.github.com/ljharb/qs/issues/399">#399</a>)</li> <li>[meta] only run <code>npm run dist</code> in publish, not install</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>has-symbols</code>, <code>tape</code></li> <li>[Tests] fix tests on node v0.6</li> <li>[Tests] use <code>ljharb/actions/node/install</code> instead of <code>ljharb/actions/node/run</code></li> <li>[Tests] Revert "[meta] ignore eclint transitive audit warning"</li> </ul> <h2><strong>6.9.7</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://redirect.github.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Fix] <code>stringify</code>: avoid encoding arrayformat comma when <code>encodeValuesOnly = true</code> (<a href="https://redirect.github.com/ljharb/qs/issues/424">#424</a>)</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://redirect.github.com/ljharb/qs/issues/427">#427</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] add note and links for coercing primitive values (<a href="https://redirect.github.com/ljharb/qs/issues/408">#408</a>)</li> <li>[Tests] clean up stringify tests slightly</li> <li>[meta] fix README.md (<a href="https://redirect.github.com/ljharb/qs/issues/399">#399</a>)</li> <li>Revert "[meta] ignore eclint transitive audit warning"</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/56763c12ec4fbf723333cbb32371cbd386c33cbb"><code>56763c1</code></a> v6.11.0</li> <li><a href="https://github.com/ljharb/qs/commit/ddd3e293b801df7a06cb7f2746462a6ca1dd3fb2"><code>ddd3e29</code></a> [readme] fix version badge</li> <li><a href="https://github.com/ljharb/qs/commit/c31347299f34afca90e8b5ff793eb4d0f77cfa56"><code>c313472</code></a> [New] [Fix] <code>stringify</code>: revert 0e903c0; add <code>commaRoundTrip</code> option</li> <li><a href="https://github.com/ljharb/qs/commit/95bc0185e157d400da4f43f1fcf1c7f008fd847e"><code>95bc018</code></a> v6.10.5</li> <li><a href="https://github.com/ljharb/qs/commit/0e903c0a9092618756b0962f1b80655ac0da436a"><code>0e903c0</code></a> [Fix] <code>stringify</code>: with <code>arrayFormat: comma</code>, properly include an explicit `[...</li> <li><a href="https://github.com/ljharb/qs/commit/ba9703c0340dfdeb73cb4387d6ab32c37768aa5b"><code>ba9703c</code></a> v6.10.4</li> <li><a href="https://github.com/ljharb/qs/commit/4e440195c7647f21c20bb76340774cb3a0cb6eac"><code>4e44019</code></a> [Fix] <code>stringify</code>: with <code>arrayFormat: comma</code>, include an explicit <code>[]</code> on a s...</li> <li><a href="https://github.com/ljharb/qs/commit/113b990ed23ae8d6f670eb879e16ed105cd9081b"><code>113b990</code></a> [Dev Deps] update <code>object-inspect</code></li> <li><a href="https://github.com/ljharb/qs/commit/c77f38f7174b9f10e8937e0f601fa1e6f0373b33"><code>c77f38f</code></a> [Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>has-symbol</code>, <code>tape</code></li> <li><a href="https://github.com/ljharb/qs/commit/2cf45b2dcd31a6d5c7fc16f33c7148fade0eef1e"><code>2cf45b2</code></a> [meta] use <code>npmignore</code> to autogenerate an npmignore file</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.5.1...v6.11.0">compare view</a></li> </ul> </details> <br /> Updates `browserify-sign` from 4.0.4 to 4.2.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md">browserify-sign's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.2...v4.2.3">v4.2.3</a> - 2024-03-05</h2> <h3>Commits</h3> <ul> <li>[patch] widen support to 0.12 <a href="https://github.com/browserify/browserify-sign/commit/9247adfd261ededfec1c036c9d8f36c4e9f87c0e"><code>9247adf</code></a></li> <li>[patch] drop minimum node support to v1 <a href="https://github.com/browserify/browserify-sign/commit/4d0ee49ae2dc238b877dce9aed7e23fb4cb5088d"><code>4d0ee49</code></a></li> <li>[Dev Deps] update <code>aud</code>, <code>npmignore</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/87f3a35a587b377da2c1987af8d41c57b5afe0a5"><code>87f3a35</code></a></li> <li>[actions] remove redundant finisher <a href="https://github.com/browserify/browserify-sign/commit/37a475856843b7d1b2403fdafac0024ba252e579"><code>37a4758</code></a></li> <li>[Deps] pin <code>hash-base</code> to ~3.0, due to a breaking change <a href="https://github.com/browserify/browserify-sign/commit/9e2bf122b70970cb92f69d53e963f18299f14d66"><code>9e2bf12</code></a></li> <li>[Deps] update <code>parse-asn1 [</code>f427270`](<a href="https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c">https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c</a>)</li> <li>[Deps] update <code>elliptic</code> <a href="https://github.com/browserify/browserify-sign/commit/fb261cea57f92b3d98bc4d8bc6228c43a5de2e91"><code>fb261ce</code></a></li> <li>[Deps] pin <code>elliptic</code> due to a breaking change <a href="https://github.com/browserify/browserify-sign/commit/168e16fcb54886a0281b0c983e1482a097042684"><code>168e16f</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.1...v4.2.2">v4.2.2</a> - 2023-10-25</h2> <h3>Fixed</h3> <ul> <li>[Tests] log when openssl doesn't support cipher <a href="https://redirect.github.com/browserify/browserify-sign/issues/37"><code>[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>Only apps should have lockfiles <a href="https://github.com/browserify/browserify-sign/commit/09a89959393b3c89fedd4f7f3bafa4fec44371d7"><code>09a8995</code></a></li> <li>[eslint] switch to eslint <a href="https://github.com/browserify/browserify-sign/commit/83fe46374b819e959d56d2c0b931308f7451a664"><code>83fe463</code></a></li> <li>[meta] add <code>npmignore</code> and <code>auto-changelog</code> <a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a></li> <li>[meta] fix package.json indentation <a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a></li> <li>[Tests] migrate from travis to github actions <a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a></li> <li>[Fix] <code>sign</code>: throw on unsupported padding scheme <a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a></li> <li>[Fix] properly check the upper bound for DSA signatures <a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a></li> <li>[Tests] handle openSSL not supporting a scheme <a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a></li> <li>[Deps] update <code>bn.js</code>, <code>browserify-rsa</code>, <code>elliptic</code>, <code>parse-asn1</code>, <code>readable-stream</code>, <code>safe-buffer</code> <a href="https://github.com/browserify/browserify-sign/commit/a67d0eb4ffceabb366b69da69ce9a223e9d5e96b"><code>a67d0eb</code></a></li> <li>[Dev Deps] update <code>nyc</code>, <code>standard</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/cc5350b96702fcba930e0662cf763844fd2f59bf"><code>cc5350b</code></a></li> <li>[Tests] always run coverage; downgrade <code>nyc</code> <a href="https://github.com/browserify/browserify-sign/commit/75ce1d5c49a6591dd13422016c07f8f9cae13371"><code>75ce1d5</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a></li> <li>[Tests] add <code>npm run posttest</code> <a href="https://github.com/browserify/browserify-sign/commit/75dd8fd6ce56eb37b12e30807e5f913867b21733"><code>75dd8fd</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a></li> <li>[Tests] skip unsupported schemes <a href="https://github.com/browserify/browserify-sign/commit/703c83ea72db2f45714fe749c6f04b05243ca9a8"><code>703c83e</code></a></li> <li>[Tests] node < 6 lacks array <code>includes</code> <a href="https://github.com/browserify/browserify-sign/commit/3aa43cfbc1fdde8481bcdd3bff581574159b869a"><code>3aa43cf</code></a></li> <li>[Dev Deps] fix eslint range <a href="https://github.com/browserify/browserify-sign/commit/98d4e0d7ff18871b0ca07415f758a610ccf8ebbe"><code>98d4e0d</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.0...v4.2.1">v4.2.1</a> - 2020-08-04</h2> <h3>Merged</h3> <ul> <li>bump elliptic <a href="https://redirect.github.com/browserify/browserify-sign/pull/58"><code>[#58](https://github.com/crypto-browserify/browserify-sign/issues/58)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.1.0...v4.2.0">v4.2.0</a> - 2020-05-18</h2> <h3>Merged</h3> <ul> <li>switch to safe buffer <a href="https://redirect.github.com/browserify/browserify-sign/pull/53"><code>[#53](https://github.com/crypto-browserify/browserify-sign/issues/53)</code></a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserify/browserify-sign/commit/bf2c3ec8fa046a52420ccd322186cc477d82165c"><code>bf2c3ec</code></a> v4.2.3</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9247adfd261ededfec1c036c9d8f36c4e9f87c0e"><code>9247adf</code></a> [patch] widen support to 0.12</li> <li><a href="https://github.com/browserify/browserify-sign/commit/f427270ac11dc6be29f87d7afb046c16376a5a9c"><code>f427270</code></a> [Deps] update `parse-asn1</li> <li><a href="https://github.com/browserify/browserify-sign/commit/87f3a35a587b377da2c1987af8d41c57b5afe0a5"><code>87f3a35</code></a> [Dev Deps] update <code>aud</code>, <code>npmignore</code>, <code>tape</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/fb261cea57f92b3d98bc4d8bc6228c43a5de2e91"><code>fb261ce</code></a> [Deps] update <code>elliptic</code></li> <li><a href="https://github.com/browserify/... _Description has been truncated_

Bump the npm_and_yarn group across 1 directory with 24 updates#1