@samitouri / QOS-React-1 / commits / a79b55df74

Bump browserify-sign from 4.0.4 to 4.2.2 in /fixtures/packaging/browserify/prod (#27599)

Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.0.4 to 4.2.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md">browserify-sign's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.1...v4.2.2">v4.2.2</a> - 2023-10-25</h2> <h3>Fixed</h3> <ul> <li>[Tests] log when openssl doesn't support cipher <a href="https://redirect.github.com/browserify/browserify-sign/issues/37"><code>[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>Only apps should have lockfiles <a href="https://github.com/browserify/browserify-sign/commit/09a89959393b3c89fedd4f7f3bafa4fec44371d7"><code>09a8995</code></a></li> <li>[eslint] switch to eslint <a href="https://github.com/browserify/browserify-sign/commit/83fe46374b819e959d56d2c0b931308f7451a664"><code>83fe463</code></a></li> <li>[meta] add <code>npmignore</code> and <code>auto-changelog</code> <a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a></li> <li>[meta] fix package.json indentation <a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a></li> <li>[Tests] migrate from travis to github actions <a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a></li> <li>[Fix] <code>sign</code>: throw on unsupported padding scheme <a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a></li> <li>[Fix] properly check the upper bound for DSA signatures <a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a></li> <li>[Tests] handle openSSL not supporting a scheme <a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a></li> <li>[Deps] update <code>bn.js</code>, <code>browserify-rsa</code>, <code>elliptic</code>, <code>parse-asn1</code>, <code>readable-stream</code>, <code>safe-buffer</code> <a href="https://github.com/browserify/browserify-sign/commit/a67d0eb4ffceabb366b69da69ce9a223e9d5e96b"><code>a67d0eb</code></a></li> <li>[Dev Deps] update <code>nyc</code>, <code>standard</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/cc5350b96702fcba930e0662cf763844fd2f59bf"><code>cc5350b</code></a></li> <li>[Tests] always run coverage; downgrade <code>nyc</code> <a href="https://github.com/browserify/browserify-sign/commit/75ce1d5c49a6591dd13422016c07f8f9cae13371"><code>75ce1d5</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a></li> <li>[Tests] add <code>npm run posttest</code> <a href="https://github.com/browserify/browserify-sign/commit/75dd8fd6ce56eb37b12e30807e5f913867b21733"><code>75dd8fd</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a></li> <li>[Tests] skip unsupported schemes <a href="https://github.com/browserify/browserify-sign/commit/703c83ea72db2f45714fe749c6f04b05243ca9a8"><code>703c83e</code></a></li> <li>[Tests] node &lt; 6 lacks array <code>includes</code> <a href="https://github.com/browserify/browserify-sign/commit/3aa43cfbc1fdde8481bcdd3bff581574159b869a"><code>3aa43cf</code></a></li> <li>[Dev Deps] fix eslint range <a href="https://github.com/browserify/browserify-sign/commit/98d4e0d7ff18871b0ca07415f758a610ccf8ebbe"><code>98d4e0d</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.0...v4.2.1">v4.2.1</a> - 2020-08-04</h2> <h3>Merged</h3> <ul> <li>bump elliptic <a href="https://redirect.github.com/browserify/browserify-sign/pull/58"><code>[#58](https://github.com/crypto-browserify/browserify-sign/issues/58)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.1.0...v4.2.0">v4.2.0</a> - 2020-05-18</h2> <h3>Merged</h3> <ul> <li>switch to safe buffer <a href="https://redirect.github.com/browserify/browserify-sign/pull/53"><code>[#53](https://github.com/crypto-browserify/browserify-sign/issues/53)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.0.4...v4.1.0">v4.1.0</a> - 2020-05-05</h2> <h3>Merged</h3> <ul> <li>update deps, modernise usage, use readable-stream <a href="https://redirect.github.com/browserify/browserify-sign/pull/49"><code>[#49](https://github.com/crypto-browserify/browserify-sign/issues/49)</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserify/browserify-sign/commit/4af5a90bf8acd9e76e5671dc0497f6ba71968a2c"><code>4af5a90</code></a> v4.2.2</li> <li><a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a> [Dev Deps] update <code>tape</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a> [Fix] properly check the upper bound for DSA signatures</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a> [meta] fix package.json indentation</li> <li><a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a> [meta] add <code>safe-publish-latest</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a> [meta] add <code>npmignore</code> and <code>auto-changelog</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a> [Fix] <code>sign</code>: throw on unsupported padding scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/5f6fb1755917851a40249db7d834da4265ed5950"><code>5f6fb17</code></a> [Tests] log when openssl doesn't support cipher</li> <li><a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a> [Tests] handle openSSL not supporting a scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a> [Tests] migrate from travis to github actions</li> <li>Additional commits viewable in <a href="https://github.com/crypto-browserify/browserify-sign/compare/v4.0.4...v4.2.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for browserify-sign since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=browserify-sign&package-manager=npm_and_yarn&previous-version=4.0.4&new-version=4.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/react/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Nov 1, 2023 at 15:19 UTC a79b55df7468f07724da2c81ef1280c65ea6bc76
1 file changed +114 -15
fixtures/packaging/browserify/prod/yarn.lock
+114 -15
@@ -21,6 +21,15 @@ asn1.js@^4.0.0:
21 inherits "^2.0.1"
22 minimalistic-assert "^1.0.0"
23
24 +asn1.js@^5.2.0:
25 + version "5.4.1"
26 + resolved "https://registry.yarnpkg.com/asn1.js/-/asn1.js-5.4.1.tgz#11a980b84ebb91781ce35b0fdc2ee294e3783f07"
27 + dependencies:
28 + bn.js "^4.0.0"
29 + inherits "^2.0.1"
30 + minimalistic-assert "^1.0.0"
31 + safer-buffer "^2.1.0"
32 +
33 assert@^1.4.0:
34 version "1.4.1"
35 resolved "https://registry.yarnpkg.com/assert/-/assert-1.4.1.tgz#99912d591836b5a6f5b345c0f07eefc08fc65d91"
@@ -41,10 +50,18 @@ base64-js@^1.0.2:
50 version "1.2.1"
51 resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.2.1.tgz#a91947da1f4a516ea38e5b4ec0ec3773675e0886"
52
44 -bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.1.1, bn.js@^4.4.0:
53 +bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.4.0:
54 version "4.11.8"
55 resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.11.8.tgz#2cde09eb5ee341f484746bb0309b3253b1b1442f"
56
57 +bn.js@^4.11.9:
58 + version "4.12.0"
59 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.12.0.tgz#775b3f278efbb9718eec7361f483fb36fbbfea88"
60 +
61 +bn.js@^5.0.0, bn.js@^5.2.1:
62 + version "5.2.1"
63 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-5.2.1.tgz#0bc527a6a0d18d0aa8d5b0538ce4a77dccfa7b70"
64 +
65 brace-expansion@^1.1.7:
66 version "1.1.8"
67 resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.8.tgz#c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
@@ -52,7 +69,7 @@ brace-expansion@^1.1.7:
69 balanced-match "^1.0.0"
70 concat-map "0.0.1"
71
55 -brorand@^1.0.1:
72 +brorand@^1.0.1, brorand@^1.1.0:
73 version "1.1.0"
74 resolved "https://registry.yarnpkg.com/brorand/-/brorand-1.1.0.tgz#12c25efe40a45e3c323eb8675a0a0ce57b22371f"
75
@@ -106,17 +123,26 @@ browserify-rsa@^4.0.0:
123 bn.js "^4.1.0"
124 randombytes "^2.0.1"
125
109 -browserify-sign@^4.0.0:
110 - version "4.0.4"
111 - resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.0.4.tgz#aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
126 +browserify-rsa@^4.1.0:
127 + version "4.1.0"
128 + resolved "https://registry.yarnpkg.com/browserify-rsa/-/browserify-rsa-4.1.0.tgz#b2fd06b5b75ae297f7ce2dc651f918f5be158c8d"
129 dependencies:
113 - bn.js "^4.1.1"
114 - browserify-rsa "^4.0.0"
115 - create-hash "^1.1.0"
116 - create-hmac "^1.1.2"
117 - elliptic "^6.0.0"
118 - inherits "^2.0.1"
119 - parse-asn1 "^5.0.0"
130 + bn.js "^5.0.0"
131 + randombytes "^2.0.1"
132 +
133 +browserify-sign@^4.0.0:
134 + version "4.2.2"
135 + resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.2.2.tgz#e78d4b69816d6e3dd1c747e64e9947f9ad79bc7e"
136 + dependencies:
137 + bn.js "^5.2.1"
138 + browserify-rsa "^4.1.0"
139 + create-hash "^1.2.0"
140 + create-hmac "^1.1.7"
141 + elliptic "^6.5.4"
142 + inherits "^2.0.4"
143 + parse-asn1 "^5.1.6"
144 + readable-stream "^3.6.2"
145 + safe-buffer "^5.2.1"
146
147 browserify-zlib@~0.1.2:
148 version "0.1.4"
@@ -258,7 +284,17 @@ create-hash@^1.1.0, create-hash@^1.1.2:
284 ripemd160 "^2.0.0"
285 sha.js "^2.4.0"
286
261 -create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
287 +create-hash@^1.2.0:
288 + version "1.2.0"
289 + resolved "https://registry.yarnpkg.com/create-hash/-/create-hash-1.2.0.tgz#889078af11a63756bcfb59bd221996be3a9ef196"
290 + dependencies:
291 + cipher-base "^1.0.1"
292 + inherits "^2.0.1"
293 + md5.js "^1.3.4"
294 + ripemd160 "^2.0.1"
295 + sha.js "^2.4.0"
296 +
297 +create-hmac@^1.1.0, create-hmac@^1.1.4:
298 version "1.1.6"
299 resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.6.tgz#acb9e221a4e17bdb076e90657c42b93e3726cf06"
300 dependencies:
@@ -269,6 +305,17 @@ create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
305 safe-buffer "^5.0.1"
306 sha.js "^2.4.8"
307
308 +create-hmac@^1.1.7:
309 + version "1.1.7"
310 + resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.7.tgz#69170c78b3ab957147b2b8b04572e47ead2243ff"
311 + dependencies:
312 + cipher-base "^1.0.3"
313 + create-hash "^1.1.0"
314 + inherits "^2.0.1"
315 + ripemd160 "^2.0.0"
316 + safe-buffer "^5.0.1"
317 + sha.js "^2.4.8"
318 +
319 crypto-browserify@^3.0.0:
320 version "3.11.1"
321 resolved "https://registry.yarnpkg.com/crypto-browserify/-/crypto-browserify-3.11.1.tgz#948945efc6757a400d6e5e5af47194d10064279f"
@@ -345,6 +392,18 @@ elliptic@^6.0.0:
392 minimalistic-assert "^1.0.0"
393 minimalistic-crypto-utils "^1.0.0"
394
395 +elliptic@^6.5.4:
396 + version "6.5.4"
397 + resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.4.tgz#da37cebd31e79a1367e941b592ed1fbebd58abbb"
398 + dependencies:
399 + bn.js "^4.11.9"
400 + brorand "^1.1.0"
401 + hash.js "^1.0.0"
402 + hmac-drbg "^1.0.1"
403 + inherits "^2.0.4"
404 + minimalistic-assert "^1.0.1"
405 + minimalistic-crypto-utils "^1.0.1"
406 +
407 envify@^4.0.0:
408 version "4.1.0"
409 resolved "https://registry.yarnpkg.com/envify/-/envify-4.1.0.tgz#f39ad3db9d6801b4e6b478b61028d3f0b6819f7e"
@@ -412,7 +471,7 @@ hash.js@^1.0.0, hash.js@^1.0.3:
471 inherits "^2.0.3"
472 minimalistic-assert "^1.0.0"
473
415 -hmac-drbg@^1.0.0:
474 +hmac-drbg@^1.0.0, hmac-drbg@^1.0.1:
475 version "1.0.1"
476 resolved "https://registry.yarnpkg.com/hmac-drbg/-/hmac-drbg-1.0.1.tgz#d2745701025a6c775a6c545793ed502fc0c649a1"
477 dependencies:
@@ -451,6 +510,10 @@ inherits@2.0.1:
510 version "2.0.1"
511 resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
512
513 +inherits@^2.0.4:
514 + version "2.0.4"
515 + resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
516 +
517 inline-source-map@~0.6.0:
518 version "0.6.2"
519 resolved "https://registry.yarnpkg.com/inline-source-map/-/inline-source-map-0.6.2.tgz#f9393471c18a79d1724f863fa38b586370ade2a5"
@@ -532,6 +595,10 @@ minimalistic-assert@^1.0.0:
595 version "1.0.0"
596 resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz#702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
597
598 +minimalistic-assert@^1.0.1:
599 + version "1.0.1"
600 + resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz#2e194de044626d4a10e7f7fbc00ce73e83e4d5c7"
601 +
602 minimalistic-crypto-utils@^1.0.0, minimalistic-crypto-utils@^1.0.1:
603 version "1.0.1"
604 resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
@@ -596,6 +663,16 @@ parse-asn1@^5.0.0:
663 evp_bytestokey "^1.0.0"
664 pbkdf2 "^3.0.3"
665
666 +parse-asn1@^5.1.6:
667 + version "5.1.6"
668 + resolved "https://registry.yarnpkg.com/parse-asn1/-/parse-asn1-5.1.6.tgz#385080a3ec13cb62a62d39409cb3e88844cdaed4"
669 + dependencies:
670 + asn1.js "^5.2.0"
671 + browserify-aes "^1.0.0"
672 + evp_bytestokey "^1.0.0"
673 + pbkdf2 "^3.0.3"
674 + safe-buffer "^5.1.1"
675 +
676 path-browserify@~0.0.0:
677 version "0.0.0"
678 resolved "https://registry.yarnpkg.com/path-browserify/-/path-browserify-0.0.0.tgz#a0b870729aae214005b7d5032ec2cbbb0fb4451a"
@@ -680,6 +757,14 @@ readable-stream@^2.0.2, readable-stream@^2.1.5, readable-stream@^2.2.6:
757 string_decoder "~1.0.3"
758 util-deprecate "~1.0.1"
759
760 +readable-stream@^3.6.2:
761 + version "3.6.2"
762 + resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.2.tgz#56a9b36ea965c00c5a93ef31eb111a0f11056967"
763 + dependencies:
764 + inherits "^2.0.3"
765 + string_decoder "^1.1.1"
766 + util-deprecate "^1.0.1"
767 +
768 readable-stream@~2.0.0:
769 version "2.0.6"
770 resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.0.6.tgz#8f90341e68a53ccc928788dacfcd11b36eb9b78e"
@@ -712,6 +797,14 @@ safe-buffer@^5.0.1, safe-buffer@^5.1.0, safe-buffer@^5.1.1, safe-buffer@~5.1.0,
797 version "5.1.1"
798 resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.1.tgz#893312af69b2123def71f57889001671eeb2c853"
799
800 +safe-buffer@^5.2.1, safe-buffer@~5.2.0:
801 + version "5.2.1"
802 + resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
803 +
804 +safer-buffer@^2.1.0:
805 + version "2.1.2"
806 + resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
807 +
808 sha.js@^2.4.0, sha.js@^2.4.8, sha.js@~2.4.4:
809 version "2.4.9"
810 resolved "https://registry.yarnpkg.com/sha.js/-/sha.js-2.4.9.tgz#98f64880474b74f4a38b8da9d3c0f2d104633e7d"
@@ -765,6 +858,12 @@ stream-splicer@^2.0.0:
858 inherits "^2.0.1"
859 readable-stream "^2.0.2"
860
861 +string_decoder@^1.1.1:
862 + version "1.3.0"
863 + resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
864 + dependencies:
865 + safe-buffer "~5.2.0"
866 +
867 string_decoder@~0.10.0, string_decoder@~0.10.x:
868 version "0.10.31"
869 resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
@@ -827,7 +926,7 @@ url@~0.11.0:
926 punycode "1.3.2"
927 querystring "0.2.0"
928
830 -util-deprecate@~1.0.1:
929 +util-deprecate@^1.0.1, util-deprecate@~1.0.1:
930 version "1.0.2"
931 resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
932