From 146ac8793028d64fe9cd8cb0dab96cbfca8bc933 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Sep 2023 13:52:35 -0700 Subject: [PATCH] [JS] bump (deps): Bump the production group in /js with 5 updates (#583) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #minor Bumps the production group in /js with 5 updates: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.4.0` | `1.5.0` | | [yaml](https://github.com/eemeli/yaml) | `2.3.1` | `2.3.2` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.1` | `9.0.2` | | [@types/jsonwebtoken](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsonwebtoken) | `9.0.2` | `9.0.3` | | [@microsoft/teamsfx](https://github.com/OfficeDev/TeamsFx) | `2.2.2` | `2.3.0` | Updates `axios` from 1.4.0 to 1.5.0
Release notes

Sourced from axios's releases.

Release v1.5.0

Release notes:

Bug Fixes

Features

Contributors to this release

Changelog

Sourced from axios's changelog.

1.5.0 (2023-08-26)

Bug Fixes

Features

Contributors to this release

Commits

Updates `yaml` from 2.3.1 to 2.3.2
Release notes

Sourced from yaml's releases.

v2.3.2

Commits

Updates `jsonwebtoken` from 9.0.1 to 9.0.2
Changelog

Sourced from jsonwebtoken's changelog.

9.0.2 - 2023-08-30

Commits
Maintainer changes

This version was pushed to npm by charlesrea, a new releaser for jsonwebtoken since your current version.


Updates `@types/jsonwebtoken` from 9.0.2 to 9.0.3
Commits

Updates `@microsoft/teamsfx` from 2.2.2 to 2.3.0
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- js/package.json | 2 +- js/packages/teams-ai/package.json | 8 +- .../package.json | 2 +- .../package.json | 2 +- js/samples/04.ai.a.teamsChefBot/package.json | 2 +- .../package.json | 2 +- js/samples/05.chatModeration/package.json | 6 +- js/yarn.lock | 94 +++++++++++++------ 8 files changed, 76 insertions(+), 42 deletions(-) diff --git a/js/package.json b/js/package.json index f22181346..21cea77e6 100644 --- a/js/package.json +++ b/js/package.json @@ -24,7 +24,7 @@ "@azure/ms-rest-js": "2.7.0", "@microsoft/api-extractor": "^7.15.1", "@standardlabs/is-private": "^1.0.1", - "@types/jsonwebtoken": "9.0.2", + "@types/jsonwebtoken": "9.0.3", "@types/lodash": "^4.14.196", "@types/mocha": "^10.0.1", "@types/sinon": "^10.0.16", diff --git a/js/packages/teams-ai/package.json b/js/packages/teams-ai/package.json index 91e0fcf7b..9aa6c56fd 100644 --- a/js/packages/teams-ai/package.json +++ b/js/packages/teams-ai/package.json @@ -22,20 +22,20 @@ "main": "./lib/index.js", "types": "./lib/index.d.ts", "dependencies": { - "axios": "^1.4.0", + "axios": "^1.5.0", "botbuilder": "^4.20.0", "botbuilder-dialogs": "^4.20.0", "gpt-3-encoder": "^1.1.4", - "yaml": "^2.2.2" + "yaml": "^2.3.2" }, "resolutions": { "follow-redirects": "^1.15.0" }, "devDependencies": { - "@types/jsonwebtoken": "^9.0.2", + "@types/jsonwebtoken": "^9.0.3", "@types/node": "^20.6.2", "eslint": "^8.42.0", - "jsonwebtoken": "^9.0.0", + "jsonwebtoken": "^9.0.2", "typescript": "^5.1.6", "@types/mocha": "^10.0.1", "@types/assert": "^1.5.6", diff --git a/js/samples/02.messageExtensions.a.searchCommand/package.json b/js/samples/02.messageExtensions.a.searchCommand/package.json index 9a23fa5f2..4dc2f19c1 100644 --- a/js/samples/02.messageExtensions.a.searchCommand/package.json +++ b/js/samples/02.messageExtensions.a.searchCommand/package.json @@ -24,7 +24,7 @@ "dotenv": "^16.3.1", "replace": "~1.2.0", "restify": "~11.1.0", - "axios": "^1.3.2" + "axios": "^1.5.0" }, "devDependencies": { "@types/dotenv": "6.1.1", diff --git a/js/samples/03.adaptiveCards.a.typeAheadBot/package.json b/js/samples/03.adaptiveCards.a.typeAheadBot/package.json index 86966cabf..549982138 100644 --- a/js/samples/03.adaptiveCards.a.typeAheadBot/package.json +++ b/js/samples/03.adaptiveCards.a.typeAheadBot/package.json @@ -24,7 +24,7 @@ "dotenv": "^16.3.1", "replace": "~1.2.0", "restify": "~11.1.0", - "axios": "^1.3.2" + "axios": "^1.5.0" }, "devDependencies": { "@types/dotenv": "6.1.1", diff --git a/js/samples/04.ai.a.teamsChefBot/package.json b/js/samples/04.ai.a.teamsChefBot/package.json index 4e38cd922..847b4db05 100644 --- a/js/samples/04.ai.a.teamsChefBot/package.json +++ b/js/samples/04.ai.a.teamsChefBot/package.json @@ -21,7 +21,7 @@ }, "dependencies": { "@microsoft/teams-ai": "~0.1.0-preview.2", - "@microsoft/teamsfx": "^2.2.0", + "@microsoft/teamsfx": "^2.3.0", "botbuilder": "^4.20.0", "dotenv": "^16.3.1", "replace": "~1.2.0", diff --git a/js/samples/04.ai.d.chainedActions.listBot/package.json b/js/samples/04.ai.d.chainedActions.listBot/package.json index 7a67d357b..88c9661e5 100644 --- a/js/samples/04.ai.d.chainedActions.listBot/package.json +++ b/js/samples/04.ai.d.chainedActions.listBot/package.json @@ -26,7 +26,7 @@ "restify": "~11.1.0" }, "devDependencies": { - "@types/jsonwebtoken": "^9.0.2", + "@types/jsonwebtoken": "^9.0.3", "@types/restify": "8.5.7", "nodemon": "~1.19.4", "shx": "^0.3.4", diff --git a/js/samples/05.chatModeration/package.json b/js/samples/05.chatModeration/package.json index fdb1b37c3..2949a99b8 100644 --- a/js/samples/05.chatModeration/package.json +++ b/js/samples/05.chatModeration/package.json @@ -20,16 +20,16 @@ }, "dependencies": { "@microsoft/teams-ai": "~0.1.0-preview.2", - "axios": "^1.4.0", + "axios": "^1.5.0", "botbuilder": "^4.20.0", "dotenv": "^16.3.1", - "jsonwebtoken": "^9.0.0", + "jsonwebtoken": "^9.0.2", "replace": "~1.2.0", "restify": "~11.1.0" }, "devDependencies": { "@types/dotenv": "6.1.1", - "@types/jsonwebtoken": "^9.0.2", + "@types/jsonwebtoken": "^9.0.3", "@types/restify": "8.5.7", "env-cmd": "^10.1.0", "nodemon": "~1.19.4", diff --git a/js/yarn.lock b/js/yarn.lock index 7b1e83d21..2b35e5e4d 100644 --- a/js/yarn.lock +++ b/js/yarn.lock @@ -761,10 +761,10 @@ resolved "https://registry.yarnpkg.com/@microsoft/recognizers-text/-/recognizers-text-1.1.4.tgz#264530f748b2cad3fac54d53538f88ad2bf99b7e" integrity sha512-hlSVXcaX5i8JcjuUJpVxmy2Z/GxvFXarF0KVySCFop57wNEnrLWMHe4I4DjP866G19VyIKRw+vPA32pkGhZgTg== -"@microsoft/teamsfx@^2.2.0": - version "2.2.2" - resolved "https://registry.yarnpkg.com/@microsoft/teamsfx/-/teamsfx-2.2.2.tgz#f059708a2221387d4207354305af399254d4d869" - integrity sha512-HYAEX7Fau4xMVcD22MK90gMuREPj3hYuvrSbmggWTwPMS+62dSmOxrZUHnpchVpBpUpPAGaElWsxFDRQ+NTtiw== +"@microsoft/teamsfx@^2.3.0": + version "2.3.0" + resolved "https://registry.yarnpkg.com/@microsoft/teamsfx/-/teamsfx-2.3.0.tgz#a9139e53f0d03be4ae7341102c33cd79b2bb9533" + integrity sha512-cxJwZxD/CbzEQawY4CQ40fkcHXX16et2txcdu1yIM9S5TGt6ievMP9M1VmjerqVEujNDMSJadWzzf72ib5TvEw== dependencies: "@azure/identity" "^2.0.1" "@azure/msal-browser" "^2.21.0" @@ -1063,10 +1063,10 @@ resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee" integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ== -"@types/jsonwebtoken@9.0.2", "@types/jsonwebtoken@^9.0.2": - version "9.0.2" - resolved "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz#9eeb56c76dd555039be2a3972218de5bd3b8d83e" - integrity sha512-drE6uz7QBKq1fYqqoFKTDRdFCPHd5TCub75BM+D+cMx7NU9hUz7SESLfC2fSCXVFMO5Yj8sOWHuGqPgjc+fz0Q== +"@types/jsonwebtoken@9.0.3", "@types/jsonwebtoken@^9.0.3": + version "9.0.3" + resolved "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz#1f22283b8e1f933af9e195d720798b64b399d84c" + integrity sha512-b0jGiOgHtZ2jqdPgPnP6WLCXZk1T8p06A/vPGzUvxpFGgKMbjXJDjC5m52ErqBnIuWZFgGoIJyRdeG5AyreJjA== dependencies: "@types/node" "*" @@ -1911,10 +1911,10 @@ axios@^0.27.2: follow-redirects "^1.14.9" form-data "^4.0.0" -axios@^1.3.2, axios@^1.3.4, axios@^1.4.0: - version "1.4.0" - resolved "https://registry.yarnpkg.com/axios/-/axios-1.4.0.tgz#38a7bf1224cd308de271146038b551d725f0be1f" - integrity sha512-S4XCWMEmzvo64T9GfvQDOXgYRDJ/wsSZc7Jvdgx5u1sd0JwsuPLqb3SYmusag+edF6ziyMensPVqLTSc1PiSEA== +axios@^1.3.4, axios@^1.5.0: + version "1.5.0" + resolved "https://registry.yarnpkg.com/axios/-/axios-1.5.0.tgz#f02e4af823e2e46a9768cfc74691fdd0517ea267" + integrity sha512-D4DdjDo5CY50Qms0qGQTTw6Q44jl7zRwY7bthds06pUGfChBCTcQs+N743eFWGEd6pRTMd6A+I87aWyFV5wiZQ== dependencies: follow-redirects "^1.15.0" form-data "^4.0.0" @@ -5699,15 +5699,21 @@ jsonparse@^1.2.0: resolved "https://registry.yarnpkg.com/jsonparse/-/jsonparse-1.3.1.tgz#3f4dae4a91fac315f71062f8521cc239f1366280" integrity sha512-POQXvpdL69+CluYsillJ7SUhKvytYjW9vG/GKpnf+xP8UWgYEM/RaMzHHofbALDiKbbP1W8UEYmgGl39WkPZsg== -jsonwebtoken@^9.0.0: - version "9.0.1" - resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-9.0.1.tgz#81d8c901c112c24e497a55daf6b2be1225b40145" - integrity sha512-K8wx7eJ5TPvEjuiVSkv167EVboBDv9PZdDoF7BgeQnBLVvZWW9clr2PsQHVJDTKaEIH5JBIwHujGcHp7GgI2eg== +jsonwebtoken@^9.0.0, jsonwebtoken@^9.0.2: + version "9.0.2" + resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz#65ff91f4abef1784697d40952bb1998c504caaf3" + integrity sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ== dependencies: jws "^3.2.2" - lodash "^4.17.21" + lodash.includes "^4.3.0" + lodash.isboolean "^3.0.3" + lodash.isinteger "^4.0.4" + lodash.isnumber "^3.0.3" + lodash.isplainobject "^4.0.6" + lodash.isstring "^4.0.1" + lodash.once "^4.0.0" ms "^2.1.1" - semver "^7.3.8" + semver "^7.5.4" jspath@^0.4.0: version "0.4.0" @@ -5884,11 +5890,41 @@ lodash.get@^4.4.2: resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99" integrity sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ== +lodash.includes@^4.3.0: + version "4.3.0" + resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f" + integrity sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w== + +lodash.isboolean@^3.0.3: + version "3.0.3" + resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6" + integrity sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg== + lodash.isequal@^4.5.0: version "4.5.0" resolved "https://registry.yarnpkg.com/lodash.isequal/-/lodash.isequal-4.5.0.tgz#415c4478f2bcc30120c22ce10ed3226f7d3e18e0" integrity sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ== +lodash.isinteger@^4.0.4: + version "4.0.4" + resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343" + integrity sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA== + +lodash.isnumber@^3.0.3: + version "3.0.3" + resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc" + integrity sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw== + +lodash.isplainobject@^4.0.6: + version "4.0.6" + resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb" + integrity sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA== + +lodash.isstring@^4.0.1: + version "4.0.1" + resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451" + integrity sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw== + lodash.last@^3.0.0: version "3.0.0" resolved "https://registry.yarnpkg.com/lodash.last/-/lodash.last-3.0.0.tgz#242f663112dd4c6e63728c60a3c909d1bdadbd4c" @@ -5909,6 +5945,11 @@ lodash.merge@^4.6.2: resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a" integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ== +lodash.once@^4.0.0: + version "4.1.1" + resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac" + integrity sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg== + lodash.sortby@^4.7.0: version "4.7.0" resolved "https://registry.yarnpkg.com/lodash.sortby/-/lodash.sortby-4.7.0.tgz#edd14c824e2cc9c1e0b0a1b42bb5210516a42438" @@ -6241,14 +6282,7 @@ mkdirp-classic@^0.5.2: resolved "https://registry.yarnpkg.com/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz#fa10c9115cc6d8865be221ba47ee9bed78601113" integrity sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A== -mkdirp@0.5.4: - version "0.5.4" - resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.4.tgz#fd01504a6797ec5c9be81ff43d204961ed64a512" - integrity sha512-iG9AK/dJLtJ0XNgTuDbSyNS3zECqDlAhnQW4CsNxBG3LQJBbHmRX1egw39DmtOdCAqY+dKXV+sgPgilNWUKMVw== - dependencies: - minimist "^1.2.5" - -mkdirp@^0.5.1, mkdirp@~0.5.1: +mkdirp@^0.5.1: version "0.5.6" resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.6.tgz#7def03d2432dcae4ba1d611445c48396062255f6" integrity sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw== @@ -9438,10 +9472,10 @@ yaml@^1.10.0: resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.2.tgz#2301c5ffbf12b467de8da2333a459e29e7920e4b" integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg== -yaml@^2.2.2: - version "2.3.1" - resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.3.1.tgz#02fe0975d23cd441242aa7204e09fc28ac2ac33b" - integrity sha512-2eHWfjaoXgTBC2jNM1LRef62VQa0umtvRiDSk6HSzW7RvS5YtkabJrwYLLEKWBc8a5U2PTSCs+dJjUTJdlHsWQ== +yaml@^2.3.2: + version "2.3.2" + resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.3.2.tgz#f522db4313c671a0ca963a75670f1c12ea909144" + integrity sha512-N/lyzTPaJasoDmfV7YTrYCI0G/3ivm/9wdG0aHuheKowWQwGTsK0Eoiw6utmzAnI6pkJa0DUVygvp3spqqEKXg== yargs-parser@20.2.4: version "20.2.4"