@samitouri / QOS-React-1 / commits / 3eaa0c3871

Bump browserify-sign from 4.0.4 to 4.2.2 in /fixtures/packaging/brunch/dev (#27606)

Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.0.4 to 4.2.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md">browserify-sign's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.1...v4.2.2">v4.2.2</a> - 2023-10-25</h2> <h3>Fixed</h3> <ul> <li>[Tests] log when openssl doesn't support cipher <a href="https://redirect.github.com/browserify/browserify-sign/issues/37"><code>[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>Only apps should have lockfiles <a href="https://github.com/browserify/browserify-sign/commit/09a89959393b3c89fedd4f7f3bafa4fec44371d7"><code>09a8995</code></a></li> <li>[eslint] switch to eslint <a href="https://github.com/browserify/browserify-sign/commit/83fe46374b819e959d56d2c0b931308f7451a664"><code>83fe463</code></a></li> <li>[meta] add <code>npmignore</code> and <code>auto-changelog</code> <a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a></li> <li>[meta] fix package.json indentation <a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a></li> <li>[Tests] migrate from travis to github actions <a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a></li> <li>[Fix] <code>sign</code>: throw on unsupported padding scheme <a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a></li> <li>[Fix] properly check the upper bound for DSA signatures <a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a></li> <li>[Tests] handle openSSL not supporting a scheme <a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a></li> <li>[Deps] update <code>bn.js</code>, <code>browserify-rsa</code>, <code>elliptic</code>, <code>parse-asn1</code>, <code>readable-stream</code>, <code>safe-buffer</code> <a href="https://github.com/browserify/browserify-sign/commit/a67d0eb4ffceabb366b69da69ce9a223e9d5e96b"><code>a67d0eb</code></a></li> <li>[Dev Deps] update <code>nyc</code>, <code>standard</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/cc5350b96702fcba930e0662cf763844fd2f59bf"><code>cc5350b</code></a></li> <li>[Tests] always run coverage; downgrade <code>nyc</code> <a href="https://github.com/browserify/browserify-sign/commit/75ce1d5c49a6591dd13422016c07f8f9cae13371"><code>75ce1d5</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a></li> <li>[Tests] add <code>npm run posttest</code> <a href="https://github.com/browserify/browserify-sign/commit/75dd8fd6ce56eb37b12e30807e5f913867b21733"><code>75dd8fd</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a></li> <li>[Tests] skip unsupported schemes <a href="https://github.com/browserify/browserify-sign/commit/703c83ea72db2f45714fe749c6f04b05243ca9a8"><code>703c83e</code></a></li> <li>[Tests] node &lt; 6 lacks array <code>includes</code> <a href="https://github.com/browserify/browserify-sign/commit/3aa43cfbc1fdde8481bcdd3bff581574159b869a"><code>3aa43cf</code></a></li> <li>[Dev Deps] fix eslint range <a href="https://github.com/browserify/browserify-sign/commit/98d4e0d7ff18871b0ca07415f758a610ccf8ebbe"><code>98d4e0d</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.0...v4.2.1">v4.2.1</a> - 2020-08-04</h2> <h3>Merged</h3> <ul> <li>bump elliptic <a href="https://redirect.github.com/browserify/browserify-sign/pull/58"><code>[#58](https://github.com/crypto-browserify/browserify-sign/issues/58)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.1.0...v4.2.0">v4.2.0</a> - 2020-05-18</h2> <h3>Merged</h3> <ul> <li>switch to safe buffer <a href="https://redirect.github.com/browserify/browserify-sign/pull/53"><code>[#53](https://github.com/crypto-browserify/browserify-sign/issues/53)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.0.4...v4.1.0">v4.1.0</a> - 2020-05-05</h2> <h3>Merged</h3> <ul> <li>update deps, modernise usage, use readable-stream <a href="https://redirect.github.com/browserify/browserify-sign/pull/49"><code>[#49](https://github.com/crypto-browserify/browserify-sign/issues/49)</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserify/browserify-sign/commit/4af5a90bf8acd9e76e5671dc0497f6ba71968a2c"><code>4af5a90</code></a> v4.2.2</li> <li><a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a> [Dev Deps] update <code>tape</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a> [Fix] properly check the upper bound for DSA signatures</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a> [meta] fix package.json indentation</li> <li><a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a> [meta] add <code>safe-publish-latest</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a> [meta] add <code>npmignore</code> and <code>auto-changelog</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a> [Fix] <code>sign</code>: throw on unsupported padding scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/5f6fb1755917851a40249db7d834da4265ed5950"><code>5f6fb17</code></a> [Tests] log when openssl doesn't support cipher</li> <li><a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a> [Tests] handle openSSL not supporting a scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a> [Tests] migrate from travis to github actions</li> <li>Additional commits viewable in <a href="https://github.com/crypto-browserify/browserify-sign/compare/v4.0.4...v4.2.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for browserify-sign since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=browserify-sign&package-manager=npm_and_yarn&previous-version=4.0.4&new-version=4.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/react/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Nov 1, 2023 at 15:20 UTC 3eaa0c3871b63b6542a939d9c0e7040bf42b75b7
1 file changed +114 -15
fixtures/packaging/brunch/dev/yarn.lock
+114 -15
@@ -86,6 +86,15 @@ asn1.js@^4.0.0:
86 inherits "^2.0.1"
87 minimalistic-assert "^1.0.0"
88
89 +asn1.js@^5.2.0:
90 + version "5.4.1"
91 + resolved "https://registry.yarnpkg.com/asn1.js/-/asn1.js-5.4.1.tgz#11a980b84ebb91781ce35b0fdc2ee294e3783f07"
92 + dependencies:
93 + bn.js "^4.0.0"
94 + inherits "^2.0.1"
95 + minimalistic-assert "^1.0.0"
96 + safer-buffer "^2.1.0"
97 +
98 asn1@~0.2.3:
99 version "0.2.3"
100 resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.3.tgz#dac8787713c9966849fc8180777ebe9c1ddf3b86"
@@ -144,10 +153,18 @@ block-stream@*:
153 dependencies:
154 inherits "~2.0.0"
155
147 -bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.1.1, bn.js@^4.4.0:
156 +bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.4.0:
157 version "4.11.8"
158 resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.11.8.tgz#2cde09eb5ee341f484746bb0309b3253b1b1442f"
159
160 +bn.js@^4.11.9:
161 + version "4.12.0"
162 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.12.0.tgz#775b3f278efbb9718eec7361f483fb36fbbfea88"
163 +
164 +bn.js@^5.0.0, bn.js@^5.2.1:
165 + version "5.2.1"
166 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-5.2.1.tgz#0bc527a6a0d18d0aa8d5b0538ce4a77dccfa7b70"
167 +
168 body-parser@1.18.2:
169 version "1.18.2"
170 resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.18.2.tgz#87678a19d84b47d859b83199bd59bce222b10454"
@@ -194,7 +211,7 @@ braces@^1.8.2:
211 preserve "^0.2.0"
212 repeat-element "^1.1.2"
213
197 -brorand@^1.0.1:
214 +brorand@^1.0.1, brorand@^1.1.0:
215 version "1.1.0"
216 resolved "https://registry.yarnpkg.com/brorand/-/brorand-1.1.0.tgz#12c25efe40a45e3c323eb8675a0a0ce57b22371f"
217
@@ -238,17 +255,26 @@ browserify-rsa@^4.0.0:
255 bn.js "^4.1.0"
256 randombytes "^2.0.1"
257
241 -browserify-sign@^4.0.0:
242 - version "4.0.4"
243 - resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.0.4.tgz#aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
258 +browserify-rsa@^4.1.0:
259 + version "4.1.0"
260 + resolved "https://registry.yarnpkg.com/browserify-rsa/-/browserify-rsa-4.1.0.tgz#b2fd06b5b75ae297f7ce2dc651f918f5be158c8d"
261 dependencies:
245 - bn.js "^4.1.1"
246 - browserify-rsa "^4.0.0"
247 - create-hash "^1.1.0"
248 - create-hmac "^1.1.2"
249 - elliptic "^6.0.0"
250 - inherits "^2.0.1"
251 - parse-asn1 "^5.0.0"
262 + bn.js "^5.0.0"
263 + randombytes "^2.0.1"
264 +
265 +browserify-sign@^4.0.0:
266 + version "4.2.2"
267 + resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.2.2.tgz#e78d4b69816d6e3dd1c747e64e9947f9ad79bc7e"
268 + dependencies:
269 + bn.js "^5.2.1"
270 + browserify-rsa "^4.1.0"
271 + create-hash "^1.2.0"
272 + create-hmac "^1.1.7"
273 + elliptic "^6.5.4"
274 + inherits "^2.0.4"
275 + parse-asn1 "^5.1.6"
276 + readable-stream "^3.6.2"
277 + safe-buffer "^5.2.1"
278
279 brunch-skeletons@~0.1.4:
280 version "0.1.6"
@@ -429,7 +455,17 @@ create-hash@^1.1.0, create-hash@^1.1.2:
455 ripemd160 "^2.0.0"
456 sha.js "^2.4.0"
457
432 -create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
458 +create-hash@^1.2.0:
459 + version "1.2.0"
460 + resolved "https://registry.yarnpkg.com/create-hash/-/create-hash-1.2.0.tgz#889078af11a63756bcfb59bd221996be3a9ef196"
461 + dependencies:
462 + cipher-base "^1.0.1"
463 + inherits "^2.0.1"
464 + md5.js "^1.3.4"
465 + ripemd160 "^2.0.1"
466 + sha.js "^2.4.0"
467 +
468 +create-hmac@^1.1.0, create-hmac@^1.1.4:
469 version "1.1.6"
470 resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.6.tgz#acb9e221a4e17bdb076e90657c42b93e3726cf06"
471 dependencies:
@@ -440,6 +476,17 @@ create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
476 safe-buffer "^5.0.1"
477 sha.js "^2.4.8"
478
479 +create-hmac@^1.1.7:
480 + version "1.1.7"
481 + resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.7.tgz#69170c78b3ab957147b2b8b04572e47ead2243ff"
482 + dependencies:
483 + cipher-base "^1.0.3"
484 + create-hash "^1.1.0"
485 + inherits "^2.0.1"
486 + ripemd160 "^2.0.0"
487 + safe-buffer "^5.0.1"
488 + sha.js "^2.4.8"
489 +
490 cryptiles@2.x.x:
491 version "2.0.5"
492 resolved "https://registry.yarnpkg.com/cryptiles/-/cryptiles-2.0.5.tgz#3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
@@ -592,6 +639,18 @@ elliptic@^6.0.0:
639 minimalistic-assert "^1.0.0"
640 minimalistic-crypto-utils "^1.0.0"
641
642 +elliptic@^6.5.4:
643 + version "6.5.4"
644 + resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.4.tgz#da37cebd31e79a1367e941b592ed1fbebd58abbb"
645 + dependencies:
646 + bn.js "^4.11.9"
647 + brorand "^1.1.0"
648 + hash.js "^1.0.0"
649 + hmac-drbg "^1.0.1"
650 + inherits "^2.0.4"
651 + minimalistic-assert "^1.0.1"
652 + minimalistic-crypto-utils "^1.0.1"
653 +
654 encodeurl@~1.0.1:
655 version "1.0.1"
656 resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.1.tgz#79e3d58655346909fe6f0f45a5de68103b294d20"
@@ -958,7 +1017,7 @@ hawk@3.1.3, hawk@~3.1.3:
1017 hoek "2.x.x"
1018 sntp "1.x.x"
1019
961 -hmac-drbg@^1.0.0:
1020 +hmac-drbg@^1.0.0, hmac-drbg@^1.0.1:
1021 version "1.0.1"
1022 resolved "https://registry.yarnpkg.com/hmac-drbg/-/hmac-drbg-1.0.1.tgz#d2745701025a6c775a6c545793ed502fc0c649a1"
1023 dependencies:
@@ -1028,6 +1087,10 @@ inherits@2.0.1:
1087 version "2.0.1"
1088 resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
1089
1090 +inherits@^2.0.4:
1091 + version "2.0.4"
1092 + resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
1093 +
1094 ini@^1.3.4, ini@~1.3.0:
1095 version "1.3.4"
1096 resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.4.tgz#0537cb79daf59b59a1a517dff706c86ec039162e"
@@ -1293,6 +1356,10 @@ minimalistic-assert@^1.0.0:
1356 version "1.0.0"
1357 resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz#702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
1358
1359 +minimalistic-assert@^1.0.1:
1360 + version "1.0.1"
1361 + resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz#2e194de044626d4a10e7f7fbc00ce73e83e4d5c7"
1362 +
1363 minimalistic-crypto-utils@^1.0.0, minimalistic-crypto-utils@^1.0.1:
1364 version "1.0.1"
1365 resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
@@ -1488,6 +1555,16 @@ parse-asn1@^5.0.0:
1555 evp_bytestokey "^1.0.0"
1556 pbkdf2 "^3.0.3"
1557
1558 +parse-asn1@^5.1.6:
1559 + version "5.1.6"
1560 + resolved "https://registry.yarnpkg.com/parse-asn1/-/parse-asn1-5.1.6.tgz#385080a3ec13cb62a62d39409cb3e88844cdaed4"
1561 + dependencies:
1562 + asn1.js "^5.2.0"
1563 + browserify-aes "^1.0.0"
1564 + evp_bytestokey "^1.0.0"
1565 + pbkdf2 "^3.0.3"
1566 + safe-buffer "^5.1.1"
1567 +
1568 parse-glob@^3.0.4:
1569 version "3.0.4"
1570 resolved "https://registry.yarnpkg.com/parse-glob/-/parse-glob-3.0.4.tgz#b2c376cfb11f35513badd173ef0bb6e3a388391c"
@@ -1654,6 +1731,14 @@ readable-stream@^2.0.2, readable-stream@^2.0.6, readable-stream@^2.1.4:
1731 string_decoder "~1.0.3"
1732 util-deprecate "~1.0.1"
1733
1734 +readable-stream@^3.6.2:
1735 + version "3.6.2"
1736 + resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.2.tgz#56a9b36ea965c00c5a93ef31eb111a0f11056967"
1737 + dependencies:
1738 + inherits "^2.0.3"
1739 + string_decoder "^1.1.1"
1740 + util-deprecate "^1.0.1"
1741 +
1742 readable-stream@~2.0.5:
1743 version "2.0.6"
1744 resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.0.6.tgz#8f90341e68a53ccc928788dacfcd11b36eb9b78e"
@@ -1747,6 +1832,14 @@ safe-buffer@5.1.1, safe-buffer@^5.0.1, safe-buffer@^5.1.0, safe-buffer@^5.1.1, s
1832 version "5.1.1"
1833 resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.1.tgz#893312af69b2123def71f57889001671eeb2c853"
1834
1835 +safe-buffer@^5.2.1, safe-buffer@~5.2.0:
1836 + version "5.2.1"
1837 + resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
1838 +
1839 +safer-buffer@^2.1.0:
1840 + version "2.1.2"
1841 + resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
1842 +
1843 semver@^5.3.0:
1844 version "5.4.1"
1845 resolved "https://registry.yarnpkg.com/semver/-/semver-5.4.1.tgz#e059c09d8571f0540823733433505d3a2f00b18e"
@@ -1877,6 +1970,12 @@ string-width@^1.0.1, string-width@^1.0.2:
1970 is-fullwidth-code-point "^1.0.0"
1971 strip-ansi "^3.0.0"
1972
1973 +string_decoder@^1.1.1:
1974 + version "1.3.0"
1975 + resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
1976 + dependencies:
1977 + safe-buffer "~5.2.0"
1978 +
1979 string_decoder@~0.10.31, string_decoder@~0.10.x:
1980 version "0.10.31"
1981 resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
@@ -1998,7 +2097,7 @@ url@~0.11.0:
2097 punycode "1.3.2"
2098 querystring "0.2.0"
2099
2001 -util-deprecate@~1.0.1:
2100 +util-deprecate@^1.0.1, util-deprecate@~1.0.1:
2101 version "1.0.2"
2102 resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
2103