Skip to content

Bump the npm_and_yarn group across 1 directory with 14 updates #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the npm_and_yarn group across 1 directory with 14 updates #1

wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 16, 2025

Bumps the npm_and_yarn group with 10 updates in the / directory:

Package From To
moment 2.29.3 2.29.4
json5 2.2.1 2.2.3
@babel/traverse 7.18.5 7.27.1
@grpc/grpc-js 1.8.2 1.13.3
@hashgraph/sdk 2.28.0 2.64.5
braces 3.0.2 3.0.3
got 9.6.0 removed
nodemon 2.0.18 2.0.22
tough-cookie 4.0.0 4.1.4
word-wrap 1.2.3 1.2.5

Updates moment from 2.29.3 to 2.29.4

Changelog

Sourced from moment's changelog.

2.29.4

  • Release Jul 6, 2022
    • #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex
Commits

Updates json5 from 2.2.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates @babel/traverse from 7.18.5 to 7.27.1

Release notes

Sourced from @​babel/traverse's releases.

v7.27.1 (2025-04-30)

Thanks @​kermanx and @​woaitsAryan for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
    • #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
    • #17080 Fix start of TSParameterProperty (@​JLHwung)
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator

💅 Polish

  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

🏠 Internal

  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone
  • babel-register
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • All packages

... (truncated)

Changelog

Sourced from @​babel/traverse's changelog.

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
    • #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
    • #17080 Fix start of TSParameterProperty (@​JLHwung)
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator

💅 Polish

  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

🏠 Internal

  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone
  • Other
  • babel-register
  • babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Commits

Updates @grpc/grpc-js from 1.8.2 to 1.13.3

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.13.3

  • Disable Nagle's algorithm (#2936)
  • Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

  • Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

  • Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
  • Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)
  • Fix a bug that caused clients to incorrectly send retries if the feature was disabled by a channel option and a retry config was provided (#2927)

@​grpc/grpc-js-xds 1.13.0

@​grpc/grpc-js 1.13.0

Changelog

  • Add support for channel option grpc-node.flow_control_window to control HTTP/2 flow control window size (#2864 contributed by @​rickihastings)
  • Show meaningful error messages more consistently when requests fail (#2868)
  • Add support for CIDR blocks in no_proxyenvironment variable (#2876 contributed by @​melkouri)
  • Fix a bug that caused server interceptor sendMetadata methods to not be called if the server interceptor did not explicitly send metadata (#2897)
  • Fix IPv6-mapped IPv4 address parsing in channelz, and represent them as IPv4 addresses (#2909)

Experimental API changes

Added:

  • SecureConnector
  • SecureConnectResult
  • SUBCHANNEL_ARGS_EXCLUDE_KEY_PREFIX
  • Server#experimentalRegisterListenerToChannelz protected method
  • ServerexperimentalUnregisterListenerFromChannelz protected method
  • Server#experimentalCreateConnectionInjectorWithChannelzRef protected method

Modified:

  • LoadBalancer: Removed the ChannelCredentials constructor argument
  • LoadBalancer: Removed the ChannelOptions constructor argument
  • LoadBalancer#updateAddressList: Replaced the attributes argument with one of type ChannelOptions.
  • ChannelControlHelper#createSubchannel: Removed the ChannelCredentials argument
  • LeafLoadBalancer: Removed the ChannelCredentials constructor argument

@​grpc/grpc-js@​1.12.6

  • Allow garbage collection of IDLE channels (#2896)

@​grpc/grpc-js 1.12.5

... (truncated)

Commits
  • 863a81a Merge pull request #2940 from murgatroid99/grpc-js_1.13.3
  • 75a96ec grpc-js: Bump to 1.13.3
  • 07486d8 Merge pull request #2937 from murgatroid99/grpc-js_avoid_getDefaultSettings
  • 6f916c9 Merge pull request #2936 from murgatroid99/grpc-js_disable_nagle
  • 482006e grpc-js: Avoid calling http2.getDefaultSettings
  • 6168fe8 grpc-js: Disable Nagle's Algorithm
  • 9652680 Merge pull request #2933 from murgatroid99/grpc-js_channel_options_fix
  • bdcbdf4 grpc-js: Consistently reference the same options object in the channel constr...
  • b937786 Merge pull request #2928 from murgatroid99/grpc-js_1.13.1
  • 2bb7eae grpc-js: Bump to 1.13.1
  • Additional commits viewable in compare view

Updates @hashgraph/sdk from 2.28.0 to 2.64.5

Release notes

Sourced from @​hashgraph/sdk's releases.

v2.64.5

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.64.4...v2.64.5

v2.64.3

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.64.2...v2.64.3

v2.64.0-beta.1

What's Changed

Full Changelog: hiero-ledger/hiero-sdk-js@v2.63.0...v2.64.0-beta.1

v2.63.0

This release introduces various enhancements to the Hedera JavaScript SDK, including improved browser support, extended ECDSA functionality, better error handling, and internal optimizations.

Enhancements

  • UMD Browser Support: Added a UMD example demonstrating usage of the SDK in browser environments. #3028

  • PrivateKey Recovery ID Calculation: Added PrivateKey.getRecoveryId(r, s, message) method to enable recovery ID (v) calculation from raw ECDSA signature components. This addition allows developers to compute the recovery ID directly, enabling full support for signing and serializing Ethereum transactions (including EIP-155) within the SDK. It enhances compatibility with external Ethereum clients and tooling. #3021

  • Ethereum Address Example: Added an example demonstrating how to sign and recover Ethereum addresses using the Hedera SDK, Ethereum-style signature hashing (EIP-191), and the ecrecover contract. #3029

  • Dynamic Protobuf Generation: Implemented dynamic generation of RequestType.js and Status.js by parsing protobuf definitions. #3018

  • Improved Query Reliability: Enhanced reliability of getReceiptQuery and getRecordQuery, which are single-node requests. These queries now retry up to 10 times with a delay when encountering node-specific issues (e.g., "All nodes are unhealthy") to handle transient network or node health problems more gracefully. #3038

  • Internal Code Optimization: Extracted _makePaymentTransaction function used by both Query and CostQuery for initiating payment transactions. #3017

... (truncated)

Changelog

Sourced from @​hashgraph/sdk's changelog.

v2.64.5

Added

  • Support for HIP-1064 Daily Rewards For Active Nodes https://hips.hedera.com/hip/hip-1064 This HIP proposes a reward mechanism that will incentivize nodes to remain active on the network. #3099
    • NodeCreateTransaction declineReward: whether the node declines rewards
    • NodeCreateTransaction setDeclineReward: update whether the node declines reward
  • Added the x-user-agent header to all gRPC calls to enable SDK version tracking, following the approach outlined in #3089
  • Included examples that demonstrate proper error handling in realistic, real-world scenarios, including how to manage network connectivity issues when interacting with a single node. #3064

v2.64.0-beta.1

Added

  • Support for HIP-551 Batch Transaction https://hips.hedera.com/hip/hip-551 It defines a mechanism to execute batch transactions such that a series of transactions (HAPI calls) depending on each other can be rolled into one transaction that passes the ACID test (atomicity, consistency, isolation, and durability). #3039
    • New BatchTransaction struct that has a list of innerTransactions and innerTransactionIds.
    • New batchKey field in Transaction class that must sign the BatchTransaction
    • New batchify method that sets the batch key and marks a transaction as part of a batch transaction (inner transaction). The transaction is signed by the client of the operator and frozen.
  • Extend setKeyWithAlias funcs to support PublicKey. #3051
  • Enhancing the retry mechanism for the status code THROTTLED_AT_CONSENSUS using backoffs retry mechanism. #3065 #3076

v2.63.0

Added

  • Added a UMD example demonstrating usage of the SDK in browser environments #3028
  • Added PrivateKey.getRecoveryId(r, s, message) method to enable recovery ID (v) calculation from raw ECDSA signature components.
    This addition allows developers to compute the recovery ID directly, enabling full support for signing and serializing Ethereum transactions (including EIP-155) within the SDK. It enhances compatibility with external Ethereum clients and tooling. #3021
  • Added an example demonstrating how to sign and recover Ethereum addresses using the Hedera SDK, Ethereum-style signature hashing (EIP-191), and the ecrecover contract. #3029
  • Implemented dynamic generation of RequestType.js and Status.js by parsing protobuf definitions. #3018

Changed

  • Improved reliability of getReceiptQuery and getRecordQuery, which are single-node requests. These queries now retry up to 10 times with a delay when encountering node-specific issues (e.g., "All nodes are unhealthy") to handle transient network or node health problems more gracefully. #3038
  • Extracted _makePaymentTransaction function used by both Query and CostQuery for initiating payment transactions. The filename begins with an underscore to indicate it is not meant for public use and is placed in the queries folder to clearly indicate its internal scope. #3017
  • Fixed a bug in TopicUpdateTransaction related to the handling of feeExemptKeys and customFees properties when they are unset. Previously, the transaction would include empty arrays for these fields, unintentionally clearing existing values on the topic. This change ensures that unset properties are treated as null, preserving existing topic configurations.#3031
  • Updated README.md to reflect support for the UMD package #3028

Removed

  • MyHbarWallet gRPC web proxies #3053

v2.63.0-beta.1

Changed

Unlike elliptic, @​noble/curves automatically enforces a normalized s value in ECDSA signatures, aligning with best practices in cryptographic security. This ensures better interoperability while preventing malleability-related issues.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by hedera-eng-automation, a new releaser for @​hashgraph/sdk since your current version.


Updates braces from 3.0.2 to 3.0.3

Commits

Updates crypto-js from 4.1.1 to 4.2.0

Commits

Updates elliptic from 6.5.4 to 6.6.1

Commits

Removes got

Updates nodemon from 2.0.18 to 2.0.22

Release notes

Sourced from nodemon's releases.

v2.0.22

2.0.22 (2023-03-22)

Bug Fixes

  • remove ts mapping if loader present (f7816e4), closes #2083

v2.0.21

2.0.21 (2023-03-02)

Bug Fixes

  • remove ts mapping if loader present (1468397), closes #2083

v2.0.20

2.0.20 (2022-09-16)

Bug Fixes

  • remove postinstall script (e099e91)

v2.0.19

2.0.19 (2022-07-05)

Bug Fixes

Commits
  • c971fdc Merge branch 'main' of github.com:remy/nodemon
  • b9679a2 chore: supporters
  • f7816e4 fix: remove ts mapping if loader present
  • 9f3ffdb One more fix
  • abc8522 Get rid of spawning shell windows if nodemon is started without console.
  • b11ddd1 Merge branch 'main' of github.com:remy/nodemon
  • 204af11 chore: missing supporters
  • 1468397 fix: remove ts mapping if loader present
  • 26b1f0f chore: add conventional commit check
  • adaafa1 One more fix
  • Additional commits viewable in compare view

Updates protobufjs from 7.2.4 to 7.2.5

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.2.5

7.2.5 (2023-08-21)

Bug Fixes

Changelog

Sourced from protobufjs's changelog.

7.2.5 (2023-08-21)

Bug Fixes

Commits

Updates tough-cookie from 4.0.0 to 4.1.4

Release notes

Sourced from tough-cookie's releases.

v4.1.4

https://www.npmjs.com/package/tough-cookie/v/4.1.4

What's Changed

New Contributors

Full Changelog: salesforce/tough-cookie@v4.1.3...v4.1.4

4.1.3

Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the inspect utility is affected by this change, we felt this change was important enough to be pushed into the next patch.

4.1.2 -- Patch and Bugfix Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.1...v4.1.2

4.1.1

Patch Release

What's Changed

Full Changelog: salesforce/tough-cookie@v4.1.0...v4.1.1

4.1.0

v4.1.0

Minor release, focused mainly on resolving reported issues and some minor feature work.

What's Changed

@dependabot
Bump the npm_and_yarn group across 1 directory with 14 updates
bcdf4dc 
Bumps the npm_and_yarn group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [moment](https://github.com/moment/moment) | `2.29.3` | `2.29.4` |
| [json5](https://github.com/json5/json5) | `2.2.1` | `2.2.3` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.18.5` | `7.27.1` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.2` | `1.13.3` |
| [@hashgraph/sdk](https://github.com/hiero-ledger/hiero-sdk-js) | `2.28.0` | `2.64.5` |
| [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` |
| [got](https://github.com/sindresorhus/got) | `9.6.0` | `removed` |
| [nodemon](https://github.com/remy/nodemon) | `2.0.18` | `2.0.22` |
| [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.0.0` | `4.1.4` |
| [word-wrap](https://github.com/jonschlinkert/word-wrap) | `1.2.3` | `1.2.5` |



Updates `moment` from 2.29.3 to 2.29.4
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.3...2.29.4)

Updates `json5` from 2.2.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.1...v2.2.3)

Updates `@babel/traverse` from 7.18.5 to 7.27.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-traverse)

Updates `@grpc/grpc-js` from 1.8.2 to 1.13.3
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `@hashgraph/sdk` from 2.28.0 to 2.64.5
- [Release notes](https://github.com/hiero-ledger/hiero-sdk-js/releases)
- [Changelog](https://github.com/hiero-ledger/hiero-sdk-js/blob/main/CHANGELOG.md)
- [Commits](hiero-ledger/hiero-sdk-js@v2.28.0...v2.64.5)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `crypto-js` from 4.1.1 to 4.2.0
- [Commits](brix/crypto-js@4.1.1...4.2.0)

Updates `elliptic` from 6.5.4 to 6.6.1
- [Commits](indutny/elliptic@v6.5.4...v6.6.1)

Removes `got`

Updates `nodemon` from 2.0.18 to 2.0.22
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](remy/nodemon@v2.0.18...v2.0.22)

Updates `protobufjs` from 7.2.4 to 7.2.5
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.4...protobufjs-v7.2.5)

Updates `tough-cookie` from 4.0.0 to 4.1.4
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.0.0...v4.1.4)

Updates `word-wrap` from 1.2.3 to 1.2.5
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](jonschlinkert/word-wrap@1.2.3...1.2.5)

Updates `ws` from 7.5.8 to 6.2.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@7.5.8...6.2.3)

---
updated-dependencies:
- dependency-name: moment
  dependency-version: 2.29.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: json5
  dependency-version: 2.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-version: 7.27.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.13.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@hashgraph/sdk"
  dependency-version: 2.64.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: crypto-js
  dependency-version: 4.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: got
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: nodemon
  dependency-version: 2.0.22
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-version: 7.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tough-cookie
  dependency-version: 4.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: word-wrap
  dependency-version: 1.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 6.2.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants