Bump the npm_and_yarn group across 8 directories with 47 updates

[dependabot]

update

[IamGuiSantos]

This pull request primarily updates the versions of various dependencies across multiple package.json and package-lock.json files in the codebase. The most significant changes include updates to the axios and @pact-foundation/pact-node packages, as well as removal of certain dependencies like minimatch and lodash from package-lock.json.

[IamGuiSantos]

Updates to axios:

• nodejs/axios/reactapp/package.json: Updated axios from version 0.28.0 to 1.6.8.
• nodejs/errorhandling/package.json: Updated axios from version 0.26.1 to 1.6.8.
• nodejs/url-shortener/urlfrontend/package.json: Updated axios from version 0.28.0 to 1.6.8.

Updates to pact project:

• pact/pact-angular/package.json: Updated protractor from version 5.1.2 to 5.4.4 and @pact-foundation/pact-node from 6.21.5 to 10.18.0.
• pact/pact-node-messages/package.json: Updated mocha from version 5.2.0 to 10.4.0.

Removal of unused dependencies from pact-react-consumer:

• pact/pact-react-consumer/package-lock.json: Removed unused dependencies such as minimatch, lodash, and updated axios from version 0.28.0 to 1.6.8. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23]

[IamGuiSantos]

This pull request primarily includes updates to various dependencies across multiple package.json and package-lock.json files. The most significant changes are updates to the axios and protractor versions in several package.json files, and numerous changes to package-lock.json files, including removal of minimatch and lodash dependencies in some places and updates to their versions in others.

[IamGuiSantos]

Dependency Updates:

• Upgraded axios to version 1.6.8 in nodejs/axios/reactapp/package.json, nodejs/errorhandling/package.json, and nodejs/url-shortener/urlfrontend/package.json [1] [2] [3].
• Upgraded protractor to version 5.4.4 and @pact-foundation/pact-node to version 10.18.0 in pact/pact-angular/package.json.
• Upgraded mocha to version 10.4.0 in pact/pact-node-messages/package.json.

Package Lock Cleanup:

• Removed multiple instances of the minimatch dependency from pact/pact-react-consumer/package-lock.json [1] [2] [3] [4] [5] [6] [7].
• Removed lodash dependency in several places within pact/pact-react-consumer/package-lock.json [1] [2] [3] [4].
• Upgraded mkdirp to version 0.5.6 and node-fetch to version 2.6.7 in pact/pact-react-consumer/package-lock.json [1] [2].

[IamGuiSantos]

Dependency Updates

• Updated axios to version ^1.6.8 in multiple package.json files:

  • nodejs/axios/reactapp/package.json
  • nodejs/errorhandling/package.json
  • nodejs/url-shortener/urlfrontend/package.json
  • pact/pact-react-consumer/package-lock.json

• Updated other dependencies:

  • protractor to ~5.4.4 and @pact-foundation/pact-node to 10.18.0 in pact/pact-angular/package.json
  • mocha to ^10.4.0 in pact/pact-node-messages/package.json
  • node-fetch to 2.6.7 in pact/pact-react-consumer/package-lock.json

Cleanup and Removal of Unused Dependencies

• Removed unused dependencies and redundant entries from package-lock.json:
  • Removed multiple instances of minimatch [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]
  • Removed multiple instances of lodash [1] [2] [3] [4]
  • Removed minimist [1] [2]

These updates help maintain the security and stability of the project by ensuring dependencies are up-to-date and removing unnecessary packages.

[IamGuiSantos]

This pull request includes several updates to dependencies across multiple package.json and package-lock.json files. The primary changes involve upgrading the axios library and other dependencies to their latest versions. Additionally, there are removals of redundant dependencies and updates to several other libraries.

[IamGuiSantos]

Dependency Updates:

• nodejs/axios/reactapp/package.json: Updated axios from ^0.28.0 to ^1.6.8.
• nodejs/errorhandling/package.json: Updated axios from ^0.26.1 to ^1.6.8.
• nodejs/url-shortener/urlfrontend/package.json: Updated axios from ^0.28.0 to ^1.6.8.
• pact/pact-angular/package.json: Updated protractor from ~5.1.2 to ~5.4.4 and @pact-foundation/pact-node from 6.21.5 to 10.18.0.
• pact/pact-node-messages/package.json: Updated mocha from ^5.2.0 to ^10.4.0.

package-lock.json Cleanup:

• pact/pact-react-consumer/package-lock.json: Removed multiple redundant entries including minimatch, lodash, combined-stream, and form-data. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21]

These changes ensure that the projects are using the latest versions of dependencies and help maintain clean and efficient package-lock.json files.

[IamGuiSantos]

This pull request includes several updates to package dependencies across multiple projects, focusing on upgrading axios and other dependencies to their latest versions for improved security and performance.

[IamGuiSantos]

Dependency Updates:

• Updated axios to version 1.6.8 in nodejs/axios/reactapp/package.json, nodejs/errorhandling/package.json, nodejs/url-shortener/urlfrontend/package.json, and pact/pact-react-consumer/package-lock.json. [1] [2] [3] [4]

• Updated protractor from ~5.1.2 to ~5.4.4 and @pact-foundation/pact-node from 6.21.5 to 10.18.0 in pact/pact-angular/package.json.

• Updated mocha from ^5.2.0 to ^10.4.0 in pact/pact-node-messages/package.json.

Dependency Cleanup:

• Removed multiple instances of minimatch and lodash dependencies from pact/pact-react-consumer/package-lock.json as they were either redundant or outdated. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16]

• Updated node-fetch from 2.2.1 to 2.6.7 in pact/pact-react-consumer/package-lock.json and added necessary dependencies.

These updates help ensure that the projects use the latest versions of dependencies, improving security and compatibility.

[IamGuiSantos]

Documentação do Pull Request #127
Título
Bump the npm_and_yarn group across 8 directories with 47 updates

Descrição
Este pull request visa atualizar várias dependências npm em 8 diretórios diferentes do projeto. A atualização principal inclui a atualização do pacote "axios" para a versão "^1.6.8".

Detalhes do PR
Autor: dependabot[bot]
Criado em: 8 de maio de 2024
Atualizado em: 23 de agosto de 2024
Estado: Aberto
Rótulos: dependencies, javascript
Arquivos Modificados: 15
Adições: 16,717 linhas
Deleções: 34,010 linhas
Comentários: 9
Commits: 1
Mudanças Principais
Atualização da dependência "axios" para "^1.6.8".
Outras 46 atualizações de pacotes npm em 8 diretórios diferentes.
Estado de Merge
Mergeável: Não (estado dirty)
Merge commit SHA: 14b14f3
Links Importantes
Link para o Pull Request
Notas Adicionais
O PR foi criado pelo Dependabot para automatizar a atualização de dependências.
O estado atual do PR indica que ele não é mergeável devido a conflitos que precisam ser resolvidos.
Para mais detalhes, acesse o PR #127.

[IamGuiSantos]

This pull request includes several dependency updates across multiple package.json and package-lock.json files to ensure the packages are up-to-date and secure. The most significant changes involve updating the axios library to a newer version and removing redundant dependencies.

Dependency Updates:

• Updated axios to version 1.6.8 in multiple package.json files:

  • nodejs/axios/reactapp/package.json
  • nodejs/errorhandling/package.json
  • nodejs/url-shortener/urlfrontend/package.json
  • pact/pact-react-consumer/package-lock.json

• Updated other dependencies in pact/pact-angular/package.json:

  • protractor to ~5.4.4
  • @pact-foundation/pact-node to 10.18.0

• Updated mocha to version 10.4.0 in pact/pact-node-messages/package.json

• Removed redundant dependencies and updated versions in pact/pact-react-consumer/package-lock.json:

  • Removed multiple instances of minimatch [1] [2] [3] [4]
  • Updated lodash to version 4.17.21 [1] [2]
  • Updated node-fetch to version 2.6.7

[Copilot]

Copilot reviewed 6 out of 15 changed files in this pull request and generated no suggestions.

Files not reviewed (9)

• nodejs/axios/reactapp/package.json: Language not supported
• nodejs/errorhandling/package.json: Language not supported
• nodejs/url-shortener/urlfrontend/package.json: Language not supported
• pact/pact-angular/package.json: Language not supported
• pact/pact-node-messages/package.json: Language not supported
• pact/pact-react-consumer/package-lock.json: Language not supported
• pact/pact-react-consumer/package.json: Language not supported
• spring-boot/cors/configuring-cors-with-spring/cors-app/package.json: Language not supported
• spring-boot/thymeleaf-vue/client/package.json: Language not supported

Tip: Turn on automatic Copilot reviews for this repository to get quick feedback on every pull request. Learn more

[IamGuiSantos]

This pull request includes several dependency updates across multiple package.json and package-lock.json files to ensure the use of the latest versions and improve security and stability.

Dependency Updates:

• Updated axios to version ^1.6.8 in nodejs/axios/reactapp/package.json, nodejs/errorhandling/package.json, and nodejs/url-shortener/urlfrontend/package.json. [1] [2] [3]
• Updated protractor to version ~5.4.4 and @pact-foundation/pact-node to version 10.18.0 in pact/pact-angular/package.json.
• Updated mocha to version ^10.4.0 in pact/pact-node-messages/package.json.

Package Lock File Cleanups:

• Removed redundant minimatch dependencies in pact/pact-react-consumer/package-lock.json. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15]
• Updated lodash to version 4.17.21 in pact/pact-react-consumer/package-lock.json. [1] [2] [3] [4]
• Updated node-fetch to version 2.6.7 and added dependencies for whatwg-url, tr46, and webidl-conversions in pact/pact-react-consumer/package-lock.json.
• Updated mkdirp to version 0.5.6 and its dependency minimist to version 1.2.8 in pact/pact-react-consumer/package-lock.json.