Skip to content

Navigation Menu

Sign in
Sign up

Bump the npm_and_yarn group across 12 directories with 15 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
master from
dependabot/npm_and_yarn/npm_and_yarn-4aeb813b42
Open

Bump the npm_and_yarn group across 12 directories with 15 updates #87
dependabot[bot] wants to merge 1 commit into
master from
dependabot/npm_and_yarn/npm_and_yarn-4aeb813b42

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 4 updates in the / directory: ajv, brace-expansion, minimatch and underscore.
Bumps the npm_and_yarn group with 4 updates in the /aws-dotnet-rest-api-with-dynamodb/src/DotNetServerless.Lambda directory: brace-expansion, lodash, minimatch and path-to-regexp.
Bumps the npm_and_yarn group with 3 updates in the /aws-node-auth0-custom-authorizers-api directory: brace-expansion, lodash and minimatch.
Bumps the npm_and_yarn group with 4 updates in the /aws-node-github-check directory: brace-expansion, lodash, minimatch and bn.js.
Bumps the npm_and_yarn group with 2 updates in the /aws-node-heroku-postgres directory: path-to-regexp and axios.
Bumps the npm_and_yarn group with 5 updates in the /aws-node-oauth-dropbox-api directory:

Package From To
ajv 5.5.2 6.14.0
brace-expansion 1.1.11 1.1.14
bn.js 4.11.8 4.12.3
node-forge 0.7.5 removed
axios 0.19.2 removed

Bumps the npm_and_yarn group with 3 updates in the /aws-node-puppeteer directory: brace-expansion, lodash and minimatch.
Bumps the npm_and_yarn group with 1 update in the /aws-node-ses-receive-email-body directory: mailparser.
Bumps the npm_and_yarn group with 9 updates in the /aws-node-typescript-nest directory:

Package From To
ajv 6.6.1 6.14.0
brace-expansion 1.1.11 1.1.14
lodash 4.17.11 4.18.1
minimatch 3.0.4 3.1.5
path-to-regexp 0.1.7 8.4.2
@nestjs/core 5.5.0 11.1.19
bn.js 4.11.8 4.12.3
axios 0.18.0 removed
handlebars 4.0.12 4.7.9

Bumps the npm_and_yarn group with 5 updates in the /aws-node-vue-nuxt-ssr directory:

Package From To
ajv 5.5.2 removed
brace-expansion 1.1.11 1.1.14
minimatch 3.0.4 3.1.5
path-to-regexp 0.1.7 0.1.13
axios 0.18.0 1.15.0

Bumps the npm_and_yarn group with 3 updates in the /aws-python-pynamodb-s3-sigurl directory: brace-expansion, lodash and minimatch.
Bumps the npm_and_yarn group with 3 updates in the /aws-python-rest-api-with-pynamodb directory: brace-expansion, lodash and minimatch.

Updates ajv from 4.11.8 to 6.14.0

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@​issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@​sambauers, #1143) Option keywords to add custom keywords (@​franciscomorais, #1137) Types fixes (@​boenrobot, @​MattiAstedrone) Docs:

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @​cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @​not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

  • dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits
  • e3af0a7 6.14.0
  • b552ed6 add regExp option to address $data exploit via a regular expression (CVE-2025...
  • 72f2286 docs: update v7 info
  • 231e52b Merge pull request #1320 from philsturgeon/patch-1
  • d3475fc Add spectral, an AJV util from a sponsor
  • 413afe0 docs: v7.0.0-beta.3
  • 11e997b update readme for v7
  • fe59143 6.12.6
  • d580d3e Merge pull request #1298 from ajv-validator/fix-url
  • fd36389 fix: regular expression for "url" format
  • Additional commits viewable in compare view
Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Updates brace-expansion from 1.1.7 to 1.1.14

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
expand('file-{a..e..2}.jpg')
// => ['file-a.jpg', 'file-c.jpg', 'file-e.jpg']
expand('file{00..10..5}.jpg')
// => ['file00.jpg', 'file05.jpg', 'file10.jpg']
</tr></table>

... (truncated)

Commits

Updates lodash from 4.17.5 to 4.17.11

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates minimatch from 3.0.4 to 3.1.5

Commits

Removes underscore

Updates brace-expansion from 1.1.11 to 1.1.14

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
expand('file-{a..e..2}.jpg')
// => ['file-a.jpg', 'file-c.jpg', 'file-e.jpg']
expand('file{00..10..5}.jpg')
// => ['file00.jpg', 'file05.jpg', 'file10.jpg']
</tr></table>

... (truncated)

Commits

Updates lodash from 4.17.11 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates path-to-regexp from 0.1.7 to 0.1.13

Release notes

Sourced from path-to-regexp's releases.

0.1.13

Important

Full Changelog: pillarjs/path-to-regexp@v0.1.12...v.0.1.13

Fix backtracking (again)

Fixed

  • Improved backtracking protection for 0.1.x, will break some previously valid paths (see previous advisory: GHSA-9wv6-86v2-598j)

pillarjs/path-to-regexp@v0.1.11...v0.1.12

Error on bad input

Changed

  • Add error on bad input values 8f09549

pillarjs/path-to-regexp@v0.1.10...v0.1.11

Backtrack protection

Fixed

  • Add backtrack protection to parameters 29b96b4
    • This will break some edge cases but should improve performance

pillarjs/path-to-regexp@v0.1.9...v0.1.10

Support non-lookahead regex output

Added

  • Allow a non-lookahead regex (#312) c4272e4

component/path-to-regexp@v0.1.8...v0.1.9

Support named matching groups in RegExp

Added

  • Add support for named matching groups (#301) 114f62d

pillarjs/path-to-regexp@v0.1.7...v0.1.8

Changelog

Sourced from path-to-regexp's changelog.

0.1.13 / 2026年03月26日

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for path-to-regexp since your current version.


Updates brace-expansion from 1.1.11 to 1.1.14

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
expand('file-{a..e..2}.jpg')
// => ['file-a.jpg', 'file-c.jpg', 'file-e.jpg']
expand('file{00..10..5}.jpg')
// => ['file00.jpg', 'file05.jpg', 'file10.jpg']
</tr></table>

... (truncated)

Commits

Updates lodash from 4.17.5 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

  • Add security notice for _.template in threat model and API docs (#6099)
  • Document lower > upper behavior in _.random (#6115)
  • Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

Commits
  • cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
  • 75535f5 chore: prune stale advisory refs (#6170)
  • 62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
  • 59be2de release(minor): bump to 4.18.0 (#6161)
  • af63457 fix: broken tests for _.template 879aaa9
  • 1073a76 fix: linting issues
  • 879aaa9 fix: validate imports keys in _.template
  • fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
  • 18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
  • b819080 ci: add dist sync validation workflow (#6137)
  • Additional commits viewable in compare view

Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates brace-expansion from 1.1.11 to 1.1.14

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
expand('file-{a..e..2}.jpg')
// => ['file-a.jpg', 'file-c.jpg', 'file-e.jpg']
expand('file{00..10..5}.jpg')
// => ['file00.jpg', 'file05.jpg', 'file10.jpg']
</tr></table>

... (truncated)

Commits

Updates lodash from 4.17.11 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segment...

Description has been truncated

 

Bumps the npm_and_yarn group with 4 updates in the / directory: [ajv](https://github.com/ajv-validator/ajv), [brace-expansion](https://github.com/juliangruber/brace-expansion), [minimatch](https://github.com/isaacs/minimatch) and [underscore](https://github.com/jashkenas/underscore).
Bumps the npm_and_yarn group with 4 updates in the /aws-dotnet-rest-api-with-dynamodb/src/DotNetServerless.Lambda directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash), [minimatch](https://github.com/isaacs/minimatch) and [path-to-regexp](https://github.com/pillarjs/path-to-regexp).
Bumps the npm_and_yarn group with 3 updates in the /aws-node-auth0-custom-authorizers-api directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 4 updates in the /aws-node-github-check directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash), [minimatch](https://github.com/isaacs/minimatch) and [bn.js](https://github.com/indutny/bn.js).
Bumps the npm_and_yarn group with 2 updates in the /aws-node-heroku-postgres directory: [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 5 updates in the /aws-node-oauth-dropbox-api directory:
| Package | From | To |
| --- | --- | --- |
| [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `6.14.0` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.14` |
| [bn.js](https://github.com/indutny/bn.js) | `4.11.8` | `4.12.3` |
| [node-forge](https://github.com/digitalbazaar/forge) | `0.7.5` | `removed` |
| [axios](https://github.com/axios/axios) | `0.19.2` | `removed` |
Bumps the npm_and_yarn group with 3 updates in the /aws-node-puppeteer directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 1 update in the /aws-node-ses-receive-email-body directory: [mailparser](https://github.com/nodemailer/mailparser).
Bumps the npm_and_yarn group with 9 updates in the /aws-node-typescript-nest directory:
| Package | From | To |
| --- | --- | --- |
| [ajv](https://github.com/ajv-validator/ajv) | `6.6.1` | `6.14.0` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.14` |
| [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.18.1` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `8.4.2` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `5.5.0` | `11.1.19` |
| [bn.js](https://github.com/indutny/bn.js) | `4.11.8` | `4.12.3` |
| [axios](https://github.com/axios/axios) | `0.18.0` | `removed` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.12` | `4.7.9` |
Bumps the npm_and_yarn group with 5 updates in the /aws-node-vue-nuxt-ssr directory:
| Package | From | To |
| --- | --- | --- |
| [ajv](https://github.com/ajv-validator/ajv) | `5.5.2` | `removed` |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.14` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` |
| [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.7` | `0.1.13` |
| [axios](https://github.com/axios/axios) | `0.18.0` | `1.15.0` |
Bumps the npm_and_yarn group with 3 updates in the /aws-python-pynamodb-s3-sigurl directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 3 updates in the /aws-python-rest-api-with-pynamodb directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [lodash](https://github.com/lodash/lodash) and [minimatch](https://github.com/isaacs/minimatch).
Updates `ajv` from 4.11.8 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@4.11.8...v6.14.0)
Updates `brace-expansion` from 1.1.7 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.5 to 4.17.11
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Removes `underscore`
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.11 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `path-to-regexp` from 0.1.7 to 0.1.13
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v.0.1.13)
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.5 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.11 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `bn.js` from 4.11.8 to 4.12.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v4.11.8...v4.12.3)
Updates `path-to-regexp` from 0.1.7 to 0.1.13
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v.0.1.13)
Updates `axios` from 0.18.0 to 1.15.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.18.0...v1.15.0)
Updates `follow-redirects` from 1.6.0 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.6.0...v1.16.0)
Updates `ajv` from 5.5.2 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@4.11.8...v6.14.0)
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.10 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `bn.js` from 4.11.8 to 4.12.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v4.11.8...v4.12.3)
Removes `node-forge`
Removes `axios`
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.11 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `mailparser` from 2.8.1 to 3.9.8
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v2.8.1...v3.9.8)
Updates `ajv` from 6.6.1 to 6.14.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@4.11.8...v6.14.0)
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.11 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `path-to-regexp` from 0.1.7 to 8.4.2
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v.0.1.13)
Updates `@nestjs/core` from 5.5.0 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/core)
Updates `bn.js` from 4.11.8 to 4.12.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v4.11.8...v4.12.3)
Removes `axios`
Updates `@nestjs/core` from 5.5.0 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/core)
Updates `handlebars` from 4.0.12 to 4.7.9
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.0.12...v4.7.9)
Removes `ajv`
Updates `brace-expansion` from 1.1.11 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.10 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `path-to-regexp` from 0.1.7 to 0.1.13
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v.0.1.13)
Updates `tar` from 4.4.1 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v4.4.1...v7.5.13)
Updates `serialize-javascript` from 1.5.0 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v1.5.0...v7.0.5)
Updates `axios` from 0.18.0 to 1.15.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.18.0...v1.15.0)
Updates `follow-redirects` from 1.5.5 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.6.0...v1.16.0)
Updates `brace-expansion` from 1.1.8 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.4 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
Updates `brace-expansion` from 1.1.8 to 1.1.14
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.7...v1.1.14)
Updates `lodash` from 4.17.4 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.18.1)
Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)
---
updated-dependencies:
- dependency-name: ajv
 dependency-version: 6.14.0
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.17.11
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: underscore
 dependency-version: 
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
 dependency-version: 0.1.13
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: bn.js
 dependency-version: 4.12.3
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
 dependency-version: 0.1.13
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: axios
 dependency-version: 1.15.0
 dependency-type: direct:production
 dependency-group: npm_and_yarn
- dependency-name: follow-redirects
 dependency-version: 1.16.0
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: ajv
 dependency-version: 6.14.0
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: bn.js
 dependency-version: 4.12.3
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: node-forge
 dependency-version: 
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: axios
 dependency-version: 
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: mailparser
 dependency-version: 3.9.8
 dependency-type: direct:production
 dependency-group: npm_and_yarn
- dependency-name: ajv
 dependency-version: 6.14.0
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
 dependency-version: 8.4.2
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: "@nestjs/core"
 dependency-version: 11.1.19
 dependency-type: direct:production
 dependency-group: npm_and_yarn
- dependency-name: bn.js
 dependency-version: 4.12.3
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: axios
 dependency-version: 
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: "@nestjs/core"
 dependency-version: 11.1.19
 dependency-type: direct:production
 dependency-group: npm_and_yarn
- dependency-name: handlebars
 dependency-version: 4.7.9
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: ajv
 dependency-version: 
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
 dependency-version: 0.1.13
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: tar
 dependency-version: 7.5.13
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: serialize-javascript
 dependency-version: 7.0.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: axios
 dependency-version: 1.15.0
 dependency-type: direct:production
 dependency-group: npm_and_yarn
- dependency-name: follow-redirects
 dependency-version: 1.16.0
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: brace-expansion
 dependency-version: 1.1.14
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: lodash
 dependency-version: 4.18.1
 dependency-type: indirect
 dependency-group: npm_and_yarn
- dependency-name: minimatch
 dependency-version: 3.1.5
 dependency-type: indirect
 dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

AltStyle によって変換されたページ (->オリジナル) /