Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2025

Bumps the npm_and_yarn group with 1 update in the / directory: @babel/helpers.
Bumps the npm_and_yarn group with 2 updates in the /example directory: @babel/helpers and axios.
Bumps the npm_and_yarn group with 2 updates in the /example/e2e directory: axios and appium.
Bumps the npm_and_yarn group with 1 update in the /sandboxes/IntercomExpo directory: @babel/helpers.
Bumps the npm_and_yarn group with 2 updates in the /sandboxes/NotificationsSandbox directory: @babel/helpers and @babel/runtime.

Updates @babel/helpers from 7.24.5 to 7.26.10

Release notes

Sourced from @​babel/helpers's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol

... (truncated)

Commits

Updates @babel/helpers from 7.24.6 to 7.26.10

Release notes

Sourced from @​babel/helpers's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol

... (truncated)

Commits

Updates axios from 1.7.9 to 1.8.3

Release notes

Sourced from axios's releases.

Release v1.8.3

Release notes:

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

Release v1.8.2

Release notes:

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

Release v1.8.1

Release notes:

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

Release v1.8.0

Release notes:

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Reverts

... (truncated)

Changelog

Sourced from axios's changelog.

1.8.3 (2025-03-10)

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

1.8.0 (2025-02-25)

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

... (truncated)

Commits
  • 39ec206 chore(release): v1.8.3 (#6819)
  • 10fa70e fix: add missing type for allowAbsoluteUrls (#6818)
  • 7821ef9 docs: update readme to include bun install (#6811)
  • ec159e5 fix(xhr/fetch): pass allowAbsoluteUrls to buildFullPath in xhr and `fet...
  • a9f7689 chore(release): v1.8.2 (#6812)
  • fb8eec2 fix(http-adapter): add allowAbsoluteUrls to path building (#6810)
  • 9812045 chore(sponsor): update sponsor block (#6804)
  • 72acf75 chore(sponsor): update sponsor block (#6794)
  • 2e64afd chore(release): v1.8.1 (#6800)
  • 36a5a62 fix(utils): move generateString to platform utils to avoid importing crypto...
  • Additional commits viewable in compare view

Updates axios from 1.7.9 to 1.8.2

Release notes

Sourced from axios's releases.

Release v1.8.3

Release notes:

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

Release v1.8.2

Release notes:

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

Release v1.8.1

Release notes:

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

Release v1.8.0

Release notes:

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

Reverts

... (truncated)

Changelog

Sourced from axios's changelog.

1.8.3 (2025-03-10)

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes

  • http-adapter: add allowAbsoluteUrls to path building (#6810) (fb8eec2)

Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes

  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#6789) (36a5a62)

Contributors to this release

1.8.0 (2025-02-25)

Bug Fixes

  • examples: application crashed when navigating examples in browser (#5938) (1260ded)
  • missing word in SUPPORT_QUESTION.yml (#6757) (1f890b1)
  • utils: replace getRandomValues with crypto module (#6788) (23a25af)

Features

... (truncated)

Commits
  • 39ec206 chore(release): v1.8.3 (#6819)
  • 10fa70e fix: add missing type for allowAbsoluteUrls (#6818)
  • 7821ef9 docs: update readme to include bun install (#6811)
  • ec159e5 fix(xhr/fetch): pass allowAbsoluteUrls to buildFullPath in xhr and `fet...
  • a9f7689 chore(release): v1.8.2 (#6812)
  • fb8eec2 fix(http-adapter): add allowAbsoluteUrls to path building (#6810)
  • 9812045 chore(sponsor): update sponsor block (#6804)
  • 72acf75 chore(sponsor): update sponsor block (#6794)
  • 2e64afd chore(release): v1.8.1 (#6800)
  • 36a5a62 fix(utils): move generateString to platform utils to avoid importing crypto...
  • Additional commits viewable in compare view

Updates appium from 2.14.1 to 2.17.0

Release notes

Sourced from appium's releases.

appium@2.17.0

2.17.0 (2025-03-11)

Features

  • images-plugin: supports image elements included in actions. (#21055) (0c50504)

appium@2.16.2

2.16.2 (2025-02-20)

Note: Version bump only for package appium

appium@2.16.1

2.16.1 (2025-02-20)

Note: Version bump only for package appium

appium@2.16.0

2.16.0 (2025-02-19)

Features

  • Add /appium/extensions API to list available extensions (#20931) (a6b6077)
  • add /appium/sessions, /session/:sessionId/appium/capabilities and deprecated marks will be removed in the future (#20936) (eeb59ca)
  • Add BiDi commands to the listCommands API output (#20925) (2635dcb)
  • appium: Add a command line parameter to configure HTTP server request timeout (#21003) (eb1b156)
  • base-driver: Add an API to list commands (#20914) (059f1cb)

Bug Fixes

  • appium: add await for async function (#20974) (21e2aab)
  • appium: Wait for upstream web socket to open before sending data to it (#20953) (3cfe3af)
  • execute-driver-plugin: update dependency webdriverio to v9.5.3 (#20895) (8741474)
  • execute-driver-plugin: update dependency webdriverio to v9.5.4 (#20898) (7f91d5c)
  • execute-driver-plugin: update dependency webdriverio to v9.5.7 (#20903) (c60fdc8)
  • execute-driver-plugin: update dependency webdriverio to v9.7.0 (#20930) (5780982)
  • execute-driver-plugin: update dependency webdriverio to v9.7.1 (#20934) (50fa5d6)
  • execute-driver-plugin: update dependency webdriverio to v9.7.2 (#20944) (f5e0819)
  • execute-driver-plugin: update dependency webdriverio to v9.8.0 (#20964) (ce32226)
  • execute-driver-plugin: update dependency webdriverio to v9.9.0 (#20994) (b3c877f)
  • execute-driver-plugin: update dependency webdriverio to v9.9.1 (#20996) (c6a080f)
  • execute-driver-plugin: update dependency webdriverio to v9.9.3 (#21005) (686a630)
  • support: update dependency semver to v7.7.0 (#20948) (81ebd75)
  • support: update dependency semver to v7.7.1 (#20961) (4c08944)
  • types: update dependency type-fest to v4.32.0 (#20900) (fbc8530)
  • types: update dependency type-fest to v4.33.0 (#20923) (2409d32)
  • types: update dependency type-fest to v4.34.1 (#20971) (0a7490e)

... (truncated)

Changelog

Sourced from appium's changelog.

2.17.0 (2025-03-11)

Features

  • images-plugin: supports image elements included in actions. (#21055) (0c50504)

2.16.2 (2025-02-20)

Note: Version bump only for package appium

2.16.1 (2025-02-20)

Note: Version bump only for package appium

2.16.0 (2025-02-19)

Features

  • Add /appium/extensions API to list available extensions (#20931) (a6b6077)
  • add /appium/sessions, /session/:sessionId/appium/capabilities and deprecated marks will be removed in the future (#20936) (eeb59ca)
  • Add BiDi commands to the listCommands API output (#20925) (2635dcb)
  • appium: Add a command line parameter to configure HTTP server request timeout (#21003) (eb1b156)
  • base-driver: Add an API to list commands (#20914) (059f1cb)

Bug Fixes

  • appium: add await for async function (#20974) (21e2aab)
  • appium: Wait for upstream web socket to open before sending data to it (#20953) (3cfe3af)
  • execute-driver-plugin: update dependency webdriverio to v9.5.3 (#20895) (8741474)
  • execute-driver-plugin: update dependency webdriverio to v9.5.4 (#20898) (7f91d5c)
  • execute-driver-plugin: update dependency webdriverio to v9.5.7 (#20903) (c60fdc8)
  • execute-driver-plugin: update dependency webdriverio to v9.7.0 (#20930) (5780982)
  • execute-driver-plugin: update dependency webdriverio to v9.7.1 (#20934) (50fa5d6)
  • execute-driver-plugin: update dependency webdriverio to v9.7.2 (#20944) (f5e0819)
  • execute-driver-plugin: update dependency webdriverio to v9.8.0 (#20964) (ce32226)
  • execute-driver-plugin: update dependency webdriverio to v9.9.0 (#20994) (b3c877f)
  • execute-driver-plugin: update dependency webdriverio to v9.9.1 (#20996) (c6a080f)

... (truncated)

Commits
  • 7c05f5c chore: publish
  • f9b51ec docs: add storage-plugin documentation (#21096)
  • ef3d781 docs(appium): fix a broken character that caused incorrect rendering of mkdoc...
  • c6d5383 chore(support): update dependency axios to v1.8.2 (#21080)
  • 053c105 chore(types): update dependency type-fest to v4.37.0 (#21073)
  • 0c50504 feat(images-plugin): supports image elements included in actions. (#21055)
  • 97c4d05 chore(support): update dependency teen_process to v2.3.1 (#21058)
  • c4d8ab4 chore(types): update dependency type-fest to v4.36.0 (#21059)
  • dcd6b8f chore(support): update dependency axios to v1.8.1 (#21049)
  • c8ad6c0 chore(execute-driver-plugin): update dependency webdriverio to v9.10.1 (#21048)
  • Additional commits viewable in compare view

Updates @babel/helpers from 7.26.0 to 7.26.10

Release notes

Sourced from @​babel/helpers's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone
    • #17158 Avoid warnings...

      Description has been truncated

Bumps the npm_and_yarn group with 1 update in the / directory: [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers).
Bumps the npm_and_yarn group with 2 updates in the /example directory: [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) and [axios](https://github.com/axios/axios).
Bumps the npm_and_yarn group with 2 updates in the /example/e2e directory: [axios](https://github.com/axios/axios) and [appium](https://github.com/appium/appium/tree/HEAD/packages/appium).
Bumps the npm_and_yarn group with 1 update in the /sandboxes/IntercomExpo directory: [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers).
Bumps the npm_and_yarn group with 2 updates in the /sandboxes/NotificationsSandbox directory: [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) and [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime).


Updates `@babel/helpers` from 7.24.5 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-helpers)

Updates `@babel/helpers` from 7.24.6 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-helpers)

Updates `axios` from 1.7.9 to 1.8.3
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.9...v1.8.3)

Updates `axios` from 1.7.9 to 1.8.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.9...v1.8.3)

Updates `appium` from 2.14.1 to 2.17.0
- [Release notes](https://github.com/appium/appium/releases)
- [Changelog](https://github.com/appium/appium/blob/master/packages/appium/CHANGELOG.md)
- [Commits](https://github.com/appium/appium/commits/appium@2.17.0/packages/appium)

Updates `@babel/helpers` from 7.26.0 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-helpers)

Updates `@babel/helpers` from 7.26.0 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-helpers)

Updates `@babel/runtime` from 7.26.0 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime)

---
updated-dependencies:
- dependency-name: "@babel/helpers"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/helpers"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: appium
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/helpers"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/helpers"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 12, 2025
@github-management-service github-management-service requested a review from a team March 12, 2025 10:06
@socket-security
Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/appium@2.14.12.17.0 Transitive: eval, network +374 237 MB jlipps

🚮 Removed packages: npm/@babel/runtime@7.26.0

View full report↗︎

@socket-security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/typescript@5.8.2
  • License: CC-BY-4.0 (package/ThirdPartyNoticeText.txt)
  • License: W3C-20150513 (package/ThirdPartyNoticeText.txt)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/typescript@5.8.2

@github-management-service github-management-service merged commit 9edc41b into main Mar 12, 2025
8 checks passed
@github-management-service github-management-service deleted the dependabot/npm_and_yarn/npm_and_yarn-bb2b521eaf branch March 12, 2025 11:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

alert-severity-MODERATE dependabot-automerged dependabot-semver-unknown dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code team-messenger

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants