chore: bump the production-dependencies group with 12 updates #1292

dependabot · 2023-10-27T13:26:05Z

Bumps the production-dependencies group with 12 updates:

Package	From	To
@aws-sdk/credential-provider-node	`3.418.0`	`3.437.0`
chai	`4.3.8`	`4.3.10`
@types/chai	`4.3.6`	`4.3.9`
webpack	`5.88.2`	`5.89.0`
ts-loader	`9.4.4`	`9.5.0`
@types/stream-to-promise	`2.2.1`	`2.2.3`
@types/yargs	`17.0.24`	`17.0.29`
@aws-crypto/supports-web-crypto	`5.1.0`	`5.2.0`
@aws-sdk/client-kms	`3.418.0`	`3.437.0`
@types/yauzl	`2.10.0`	`2.10.2`
@types/duplexify	`3.6.2`	`3.6.3`
@aws-crypto/random-source-browser	`5.1.0`	`5.2.0`

Updates @aws-sdk/credential-provider-node from 3.418.0 to 3.437.0

Release notes

Sourced from @aws-sdk/credential-provider-node's releases.

v3.437.0

3.437.0(2023-10-26)

New Features

clients: update client endpoints as of 2023-10-26 (dead611e)

client-network-firewall: Network Firewall now supports inspection of outbound SSL/TLS traffic. (3686e694)

client-sagemaker: Amazon Sagemaker Autopilot now supports Text Generation jobs. (fd8ca903)

client-ec2: Launching GetSecurityGroupsForVpc API. This API gets security groups that can be associated by the AWS account making the request with network interfaces in the specified VPC. (0bc9a39b)

client-transfer: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. (6bd64020)

client-appstream: This release introduces multi-session fleets, allowing customers to provision more than one user session on a single fleet instance. (8e3c2483)

client-opensearch: You can specify ipv4 or dualstack IPAddressType for cluster endpoints. If you specify IPAddressType as dualstack, the new endpoint will be visible under the 'EndpointV2' parameter and will support IPv4 and IPv6 requests. Whereas, the 'Endpoint' will continue to serve IPv4 requests. (a9637b16)

client-redshift: Add Redshift APIs GetResourcePolicy, DeleteResourcePolicy, PutResourcePolicy and DescribeInboundIntegrations for the new Amazon Redshift Zero-ETL integration feature, which can be used to control data ingress into Redshift namespace, and view inbound integrations. (f0791f13)

client-sns: Message Archiving and Replay is now supported in Amazon SNS for FIFO topics. (10014a81)

client-ssm-sap: AWS Systems Manager for SAP added support for registration and discovery of SAP ABAP applications (6a156d7d)

Bug Fixes

signature-v4-crt: remove dynamic imports (!) (#5225) (89f97b5c)

For list of updated packages, view updated-packages.md in assets-3.437.0.zip

v3.436.0

3.436.0(2023-10-25)

Chores

add Node.js 14.x version deprecation warning (#5413) (e630f250)

New Features

client-groundstation: This release will allow KMS alias names to be used when creating Mission Profiles (54499b46)

client-iam: Updates to GetAccessKeyLastUsed action to replace NoSuchEntity error with AccessDeniedException error. (6154aab5)

client-connectcases: Increase maximum length of CommentBody to 3000, and increase maximum length of StringValue to 1500 (6e15ab26)

For list of updated packages, view updated-packages.md in assets-3.436.0.zip

v3.435.0

3.435.0(2023-10-24)

Chores

run dependency check on commit hook (#5412) (8a65e9f0)

sync models files (#5405) (94681880)

... (truncated)

Changelog

Sourced from @aws-sdk/credential-provider-node's changelog.

3.437.0 (2023-10-26)

Note: Version bump only for package @aws-sdk/credential-provider-node

3.436.0 (2023-10-25)

Note: Version bump only for package @aws-sdk/credential-provider-node

3.435.0 (2023-10-24)

Note: Version bump only for package @aws-sdk/credential-provider-node

3.433.0 (2023-10-20)

Bug Fixes

codegen: use partial record for enum keyed types (#5391) (70c2107)

3.431.0 (2023-10-18)

Note: Version bump only for package @aws-sdk/credential-provider-node

3.430.0 (2023-10-17)

Note: Version bump only for package @aws-sdk/credential-provider-node

... (truncated)

Commits

373e006 Publish v3.437.0
e0f2d91 Publish v3.436.0
563ea41 Publish v3.435.0
7a37464 Publish v3.433.0
70c2107 fix(codegen): use partial record for enum keyed types (#5391)
ba83d46 Publish v3.431.0
64eacb7 Publish v3.430.0
42dd3c5 Publish v3.429.0
9d462ed Publish v3.428.0
1ccfce1 chore(clients): support reading ini subsections and get entire config in conf...
Additional commits viewable in compare view

Updates chai from 4.3.8 to 4.3.10

Release notes

Sourced from chai's releases.

v4.3.10

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

upgrade all dependencies by @keithamus in chaijs/chai#1540

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

v4.3.9

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

Commits

744a16e 4.3.10
0ccd823 upgrade all dependencies (#1540)
923d0a4 4.3.9
1a0f887 make
a141e57 upgrade deps
See full diff in compare view

Updates @types/chai from 4.3.6 to 4.3.9

Commits

See full diff in compare view

Updates webpack from 5.88.2 to 5.89.0

Release notes

Sourced from webpack's releases.

v5.89.0

New Features

Make CommonJS import preserve chained expressions by @bworline in webpack/webpack#17718

Dependencies & Maintenance

chore(deps-dev): bump @types/node from 20.3.1 to 20.4.8 by @dependabot in webpack/webpack#17568

docs: add example for stats detailed output by @ersachin3112 in webpack/webpack#17420

docs: add example for stats normal output by @ersachin3112 in webpack/webpack#17426

chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 by @dependabot in webpack/webpack#17539

chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2 by @dependabot in webpack/webpack#17536

chore(deps-dev): bump @types/node from 20.4.8 to 20.4.9 by @dependabot in webpack/webpack#17583

chore(deps-dev): bump less from 4.1.3 to 4.2.0 by @dependabot in webpack/webpack#17580

chore(deps): bump semver from 5.7.1 to 5.7.2 by @dependabot in webpack/webpack#17483

chore(deps-dev): bump simple-git from 3.19.0 to 3.19.1 by @dependabot in webpack/webpack#17427

chore(deps-dev): bump @types/node from 20.4.9 to 20.6.0 by @dependabot in webpack/webpack#17666

Full Changelog: webpack/webpack@v5.88.2...v5.89.0

Commits

8766092 5.89.0
21c80e4 Merge pull request #17718 from bworline/require-preserve-chains
b14922c Refactor shared code
dc66572 update types
d36804e update types
d4e8485 initial
1f13ff9 Merge pull request #17666 from webpack/dependabot/npm_and_yarn/types/node-20.6.0
f00e6e2 chore(deps-dev): bump @types/node from 20.4.9 to 20.6.0
853bfda Merge pull request #17427 from webpack/dependabot/npm_and_yarn/simple-git-3.19.1
64707c9 Merge pull request #17483 from webpack/dependabot/npm_and_yarn/semver-5.7.2
Additional commits viewable in compare view

Updates ts-loader from 9.4.4 to 9.5.0

Release notes

Sourced from ts-loader's releases.

v9.5.0

Feature: map the input source map in case ts-loader is used in a loader pipeline - thanks @Ka0o0 and @bojanv55

Changelog

Sourced from ts-loader's changelog.

9.5.0

Feature: map the input source map in case ts-loader is used in a loader pipeline - thanks @Ka0o0 and @bojanv55

Commits

9315855 map input source map (#1626)
02c2069 update test pack to TS 5.2 (#1633)
See full diff in compare view

Updates @types/stream-to-promise from 2.2.1 to 2.2.3

Commits

See full diff in compare view

Updates @types/yargs from 17.0.24 to 17.0.29

Commits

See full diff in compare view

Updates @aws-crypto/supports-web-crypto from 5.1.0 to 5.2.0

Changelog

Sourced from @aws-crypto/supports-web-crypto's changelog.

5.2.0 (2023-10-16)

Features

support ESM artifacts in all packages (#752) (e930ffb)

Commits

c11b171 v5.2.0
e930ffb feat: support ESM artifacts in all packages (#752)
See full diff in compare view

Updates @aws-sdk/client-kms from 3.418.0 to 3.437.0

Release notes

Sourced from @aws-sdk/client-kms's releases.

v3.437.0

3.437.0(2023-10-26)

New Features

clients: update client endpoints as of 2023-10-26 (dead611e)

client-network-firewall: Network Firewall now supports inspection of outbound SSL/TLS traffic. (3686e694)

client-sagemaker: Amazon Sagemaker Autopilot now supports Text Generation jobs. (fd8ca903)

client-ec2: Launching GetSecurityGroupsForVpc API. This API gets security groups that can be associated by the AWS account making the request with network interfaces in the specified VPC. (0bc9a39b)

client-transfer: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. (6bd64020)

client-appstream: This release introduces multi-session fleets, allowing customers to provision more than one user session on a single fleet instance. (8e3c2483)

client-opensearch: You can specify ipv4 or dualstack IPAddressType for cluster endpoints. If you specify IPAddressType as dualstack, the new endpoint will be visible under the 'EndpointV2' parameter and will support IPv4 and IPv6 requests. Whereas, the 'Endpoint' will continue to serve IPv4 requests. (a9637b16)

client-redshift: Add Redshift APIs GetResourcePolicy, DeleteResourcePolicy, PutResourcePolicy and DescribeInboundIntegrations for the new Amazon Redshift Zero-ETL integration feature, which can be used to control data ingress into Redshift namespace, and view inbound integrations. (f0791f13)

client-sns: Message Archiving and Replay is now supported in Amazon SNS for FIFO topics. (10014a81)

client-ssm-sap: AWS Systems Manager for SAP added support for registration and discovery of SAP ABAP applications (6a156d7d)

Bug Fixes

signature-v4-crt: remove dynamic imports (!) (#5225) (89f97b5c)

For list of updated packages, view updated-packages.md in assets-3.437.0.zip

v3.436.0

3.436.0(2023-10-25)

Chores

add Node.js 14.x version deprecation warning (#5413) (e630f250)

New Features

client-groundstation: This release will allow KMS alias names to be used when creating Mission Profiles (54499b46)

client-iam: Updates to GetAccessKeyLastUsed action to replace NoSuchEntity error with AccessDeniedException error. (6154aab5)

client-connectcases: Increase maximum length of CommentBody to 3000, and increase maximum length of StringValue to 1500 (6e15ab26)

For list of updated packages, view updated-packages.md in assets-3.436.0.zip

v3.435.0

3.435.0(2023-10-24)

Chores

run dependency check on commit hook (#5412) (8a65e9f0)

sync models files (#5405) (94681880)

... (truncated)

Changelog

Sourced from @aws-sdk/client-kms's changelog.

3.437.0 (2023-10-26)

Note: Version bump only for package @aws-sdk/client-kms

3.436.0 (2023-10-25)

Note: Version bump only for package @aws-sdk/client-kms

3.435.0 (2023-10-24)

Note: Version bump only for package @aws-sdk/client-kms

3.433.0 (2023-10-20)

Bug Fixes

codegen: use partial record for enum keyed types (#5391) (70c2107)

3.431.0 (2023-10-18)

Note: Version bump only for package @aws-sdk/client-kms

3.430.0 (2023-10-17)

Note: Version bump only for package @aws-sdk/client-kms

... (truncated)

Commits

373e006 Publish v3.437.0
e0f2d91 Publish v3.436.0
e630f25 chore: add Node.js 14.x version deprecation warning (#5413)
563ea41 Publish v3.435.0
9468188 chore: sync models files (#5405)
7a37464 Publish v3.433.0
70c2107 fix(codegen): use partial record for enum keyed types (#5391)
ba83d46 Publish v3.431.0
64eacb7 Publish v3.430.0
9fa7bfe chore(codegen): codegen sync (#5371)
Additional commits viewable in compare view

Updates @types/yauzl from 2.10.0 to 2.10.2

Commits

See full diff in compare view

Updates @types/duplexify from 3.6.2 to 3.6.3

Commits

See full diff in compare view

Updates @aws-crypto/random-source-browser from 5.1.0 to 5.2.0

Changelog

Sourced from @aws-crypto/random-source-browser's changelog.

5.2.0 (2023-10-16)

Features

support ESM artifacts in all packages (#752) (e930ffb)

Commits

c11b171 v5.2.0
e930ffb feat: support ESM artifacts in all packages (#752)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [@aws-sdk/credential-provider-node](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-provider-node) | `3.418.0` | `3.437.0` | | [chai](https://github.com/chaijs/chai) | `4.3.8` | `4.3.10` | | [@types/chai](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chai) | `4.3.6` | `4.3.9` | | [webpack](https://github.com/webpack/webpack) | `5.88.2` | `5.89.0` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.4.4` | `9.5.0` | | [@types/stream-to-promise](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/stream-to-promise) | `2.2.1` | `2.2.3` | | [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.24` | `17.0.29` | | [@aws-crypto/supports-web-crypto](https://github.com/aws/aws-sdk-js-crypto-helpers) | `5.1.0` | `5.2.0` | | [@aws-sdk/client-kms](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-kms) | `3.418.0` | `3.437.0` | | [@types/yauzl](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yauzl) | `2.10.0` | `2.10.2` | | [@types/duplexify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/duplexify) | `3.6.2` | `3.6.3` | | [@aws-crypto/random-source-browser](https://github.com/aws/aws-sdk-js-crypto-helpers) | `5.1.0` | `5.2.0` | Updates `@aws-sdk/credential-provider-node` from 3.418.0 to 3.437.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-provider-node/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.437.0/packages/credential-provider-node) Updates `chai` from 4.3.8 to 4.3.10 - [Release notes](https://github.com/chaijs/chai/releases) - [Changelog](https://github.com/chaijs/chai/blob/4.x.x/History.md) - [Commits](chaijs/chai@v4.3.8...v4.3.10) Updates `@types/chai` from 4.3.6 to 4.3.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chai) Updates `webpack` from 5.88.2 to 5.89.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.88.2...v5.89.0) Updates `ts-loader` from 9.4.4 to 9.5.0 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.4.4...v9.5.0) Updates `@types/stream-to-promise` from 2.2.1 to 2.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/stream-to-promise) Updates `@types/yargs` from 17.0.24 to 17.0.29 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs) Updates `@aws-crypto/supports-web-crypto` from 5.1.0 to 5.2.0 - [Changelog](https://github.com/aws/aws-sdk-js-crypto-helpers/blob/master/CHANGELOG.md) - [Commits](aws/aws-sdk-js-crypto-helpers@v5.1.0...v5.2.0) Updates `@aws-sdk/client-kms` from 3.418.0 to 3.437.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-kms/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.437.0/clients/client-kms) Updates `@types/yauzl` from 2.10.0 to 2.10.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yauzl) Updates `@types/duplexify` from 3.6.2 to 3.6.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/duplexify) Updates `@aws-crypto/random-source-browser` from 5.1.0 to 5.2.0 - [Changelog](https://github.com/aws/aws-sdk-js-crypto-helpers/blob/master/CHANGELOG.md) - [Commits](aws/aws-sdk-js-crypto-helpers@v5.1.0...v5.2.0) --- updated-dependencies: - dependency-name: "@aws-sdk/credential-provider-node" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: chai dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@types/chai" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: webpack dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: ts-loader dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/stream-to-promise" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@types/yargs" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@aws-crypto/supports-web-crypto" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@aws-sdk/client-kms" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@types/yauzl" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@types/duplexify" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@aws-crypto/random-source-browser" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

…ncies-487f9e1968

dependabot · 2023-10-30T14:15:05Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot requested a review from a team as a code owner October 27, 2023 13:26

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 27, 2023

texastony approved these changes Oct 30, 2023

View reviewed changes

Merge branch 'master' into dependabot/npm_and_yarn/production-depende…

a0eaafe

…ncies-487f9e1968

texastony approved these changes Oct 30, 2023

View reviewed changes

dependabot bot closed this Oct 30, 2023

dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-487f9e1968 branch October 30, 2023 14:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump the production-dependencies group with 12 updates #1292

chore: bump the production-dependencies group with 12 updates #1292

dependabot bot commented on behalf of github Oct 27, 2023 •

edited

Loading

dependabot bot commented on behalf of github Oct 30, 2023

chore: bump the production-dependencies group with 12 updates #1292

chore: bump the production-dependencies group with 12 updates #1292

Conversation

dependabot bot commented on behalf of github Oct 27, 2023 • edited Loading

v3.437.0

3.437.0(2023-10-26)

New Features

Bug Fixes

v3.436.0

3.436.0(2023-10-25)

Chores

New Features

v3.435.0

3.435.0(2023-10-24)

Chores

3.437.0 (2023-10-26)

3.436.0 (2023-10-25)

3.435.0 (2023-10-24)

3.433.0 (2023-10-20)

Bug Fixes

3.431.0 (2023-10-18)

3.430.0 (2023-10-17)

v4.3.10

What's Changed

v4.3.9

v5.89.0

New Features

Dependencies & Maintenance

v9.5.0

9.5.0

5.2.0 (2023-10-16)

Features

v3.437.0

3.437.0(2023-10-26)

New Features

Bug Fixes

v3.436.0

3.436.0(2023-10-25)

Chores

New Features

v3.435.0

3.435.0(2023-10-24)

Chores

3.437.0 (2023-10-26)

3.436.0 (2023-10-25)

3.435.0 (2023-10-24)

3.433.0 (2023-10-20)

Bug Fixes

3.431.0 (2023-10-18)

3.430.0 (2023-10-17)

5.2.0 (2023-10-16)

Features

dependabot bot commented on behalf of github Oct 30, 2023

dependabot bot commented on behalf of github Oct 27, 2023 •

edited

Loading