@samitouri / QOS-React-1 / commits / c988756f95

Bump browserify-sign from 4.0.4 to 4.2.2 in /fixtures/packaging/browserify/dev (#27597)

Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.0.4 to 4.2.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md">browserify-sign's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.1...v4.2.2">v4.2.2</a> - 2023-10-25</h2> <h3>Fixed</h3> <ul> <li>[Tests] log when openssl doesn't support cipher <a href="https://redirect.github.com/browserify/browserify-sign/issues/37"><code>[#37](https://github.com/crypto-browserify/browserify-sign/issues/37)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>Only apps should have lockfiles <a href="https://github.com/browserify/browserify-sign/commit/09a89959393b3c89fedd4f7f3bafa4fec44371d7"><code>09a8995</code></a></li> <li>[eslint] switch to eslint <a href="https://github.com/browserify/browserify-sign/commit/83fe46374b819e959d56d2c0b931308f7451a664"><code>83fe463</code></a></li> <li>[meta] add <code>npmignore</code> and <code>auto-changelog</code> <a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a></li> <li>[meta] fix package.json indentation <a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a></li> <li>[Tests] migrate from travis to github actions <a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a></li> <li>[Fix] <code>sign</code>: throw on unsupported padding scheme <a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a></li> <li>[Fix] properly check the upper bound for DSA signatures <a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a></li> <li>[Tests] handle openSSL not supporting a scheme <a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a></li> <li>[Deps] update <code>bn.js</code>, <code>browserify-rsa</code>, <code>elliptic</code>, <code>parse-asn1</code>, <code>readable-stream</code>, <code>safe-buffer</code> <a href="https://github.com/browserify/browserify-sign/commit/a67d0eb4ffceabb366b69da69ce9a223e9d5e96b"><code>a67d0eb</code></a></li> <li>[Dev Deps] update <code>nyc</code>, <code>standard</code>, <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/cc5350b96702fcba930e0662cf763844fd2f59bf"><code>cc5350b</code></a></li> <li>[Tests] always run coverage; downgrade <code>nyc</code> <a href="https://github.com/browserify/browserify-sign/commit/75ce1d5c49a6591dd13422016c07f8f9cae13371"><code>75ce1d5</code></a></li> <li>[meta] add <code>safe-publish-latest</code> <a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a></li> <li>[Tests] add <code>npm run posttest</code> <a href="https://github.com/browserify/browserify-sign/commit/75dd8fd6ce56eb37b12e30807e5f913867b21733"><code>75dd8fd</code></a></li> <li>[Dev Deps] update <code>tape</code> <a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a></li> <li>[Tests] skip unsupported schemes <a href="https://github.com/browserify/browserify-sign/commit/703c83ea72db2f45714fe749c6f04b05243ca9a8"><code>703c83e</code></a></li> <li>[Tests] node &lt; 6 lacks array <code>includes</code> <a href="https://github.com/browserify/browserify-sign/commit/3aa43cfbc1fdde8481bcdd3bff581574159b869a"><code>3aa43cf</code></a></li> <li>[Dev Deps] fix eslint range <a href="https://github.com/browserify/browserify-sign/commit/98d4e0d7ff18871b0ca07415f758a610ccf8ebbe"><code>98d4e0d</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.2.0...v4.2.1">v4.2.1</a> - 2020-08-04</h2> <h3>Merged</h3> <ul> <li>bump elliptic <a href="https://redirect.github.com/browserify/browserify-sign/pull/58"><code>[#58](https://github.com/crypto-browserify/browserify-sign/issues/58)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.1.0...v4.2.0">v4.2.0</a> - 2020-05-18</h2> <h3>Merged</h3> <ul> <li>switch to safe buffer <a href="https://redirect.github.com/browserify/browserify-sign/pull/53"><code>[#53](https://github.com/crypto-browserify/browserify-sign/issues/53)</code></a></li> </ul> <h2><a href="https://github.com/browserify/browserify-sign/compare/v4.0.4...v4.1.0">v4.1.0</a> - 2020-05-05</h2> <h3>Merged</h3> <ul> <li>update deps, modernise usage, use readable-stream <a href="https://redirect.github.com/browserify/browserify-sign/pull/49"><code>[#49](https://github.com/crypto-browserify/browserify-sign/issues/49)</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserify/browserify-sign/commit/4af5a90bf8acd9e76e5671dc0497f6ba71968a2c"><code>4af5a90</code></a> v4.2.2</li> <li><a href="https://github.com/browserify/browserify-sign/commit/3aec0386dc8dfba8698be756ec770df863867c84"><code>3aec038</code></a> [Dev Deps] update <code>tape</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30"><code>85994cd</code></a> [Fix] properly check the upper bound for DSA signatures</li> <li><a href="https://github.com/browserify/browserify-sign/commit/9ac5a5eaaac8a11eb70ec2febd13745c8764ae02"><code>9ac5a5e</code></a> [meta] fix package.json indentation</li> <li><a href="https://github.com/browserify/browserify-sign/commit/dcf49ce85a1a66a6fb31689508d916d7894286a9"><code>dcf49ce</code></a> [meta] add <code>safe-publish-latest</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/44181838e7dcc4d5d0c568f74312ea28f0bcdfd5"><code>4418183</code></a> [meta] add <code>npmignore</code> and <code>auto-changelog</code></li> <li><a href="https://github.com/browserify/browserify-sign/commit/8767739a4516289568bcce9fed8a3b7e23478de9"><code>8767739</code></a> [Fix] <code>sign</code>: throw on unsupported padding scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/5f6fb1755917851a40249db7d834da4265ed5950"><code>5f6fb17</code></a> [Tests] log when openssl doesn't support cipher</li> <li><a href="https://github.com/browserify/browserify-sign/commit/f5f17c27f9824de40b5ce8ebd8502111203fd6af"><code>f5f17c2</code></a> [Tests] handle openSSL not supporting a scheme</li> <li><a href="https://github.com/browserify/browserify-sign/commit/d845d855def38e2085d5a21e447a48300f99fa60"><code>d845d85</code></a> [Tests] migrate from travis to github actions</li> <li>Additional commits viewable in <a href="https://github.com/crypto-browserify/browserify-sign/compare/v4.0.4...v4.2.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~ljharb">ljharb</a>, a new releaser for browserify-sign since your current version.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=browserify-sign&package-manager=npm_and_yarn&previous-version=4.0.4&new-version=4.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/react/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Nov 1, 2023 at 15:18 UTC c988756f95e0316a4f913227e108653f88574b2b
1 file changed +114 -15
fixtures/packaging/browserify/dev/yarn.lock
+114 -15
@@ -21,6 +21,15 @@ asn1.js@^4.0.0:
21 inherits "^2.0.1"
22 minimalistic-assert "^1.0.0"
23
24 +asn1.js@^5.2.0:
25 + version "5.4.1"
26 + resolved "https://registry.yarnpkg.com/asn1.js/-/asn1.js-5.4.1.tgz#11a980b84ebb91781ce35b0fdc2ee294e3783f07"
27 + dependencies:
28 + bn.js "^4.0.0"
29 + inherits "^2.0.1"
30 + minimalistic-assert "^1.0.0"
31 + safer-buffer "^2.1.0"
32 +
33 assert@^1.4.0:
34 version "1.4.1"
35 resolved "https://registry.yarnpkg.com/assert/-/assert-1.4.1.tgz#99912d591836b5a6f5b345c0f07eefc08fc65d91"
@@ -41,10 +50,18 @@ base64-js@^1.0.2:
50 version "1.2.1"
51 resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.2.1.tgz#a91947da1f4a516ea38e5b4ec0ec3773675e0886"
52
44 -bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.1.1, bn.js@^4.4.0:
53 +bn.js@^4.0.0, bn.js@^4.1.0, bn.js@^4.4.0:
54 version "4.11.8"
55 resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.11.8.tgz#2cde09eb5ee341f484746bb0309b3253b1b1442f"
56
57 +bn.js@^4.11.9:
58 + version "4.12.0"
59 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-4.12.0.tgz#775b3f278efbb9718eec7361f483fb36fbbfea88"
60 +
61 +bn.js@^5.0.0, bn.js@^5.2.1:
62 + version "5.2.1"
63 + resolved "https://registry.yarnpkg.com/bn.js/-/bn.js-5.2.1.tgz#0bc527a6a0d18d0aa8d5b0538ce4a77dccfa7b70"
64 +
65 brace-expansion@^1.1.7:
66 version "1.1.8"
67 resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.8.tgz#c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
@@ -52,7 +69,7 @@ brace-expansion@^1.1.7:
69 balanced-match "^1.0.0"
70 concat-map "0.0.1"
71
55 -brorand@^1.0.1:
72 +brorand@^1.0.1, brorand@^1.1.0:
73 version "1.1.0"
74 resolved "https://registry.yarnpkg.com/brorand/-/brorand-1.1.0.tgz#12c25efe40a45e3c323eb8675a0a0ce57b22371f"
75
@@ -106,17 +123,26 @@ browserify-rsa@^4.0.0:
123 bn.js "^4.1.0"
124 randombytes "^2.0.1"
125
109 -browserify-sign@^4.0.0:
110 - version "4.0.4"
111 - resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.0.4.tgz#aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
126 +browserify-rsa@^4.1.0:
127 + version "4.1.0"
128 + resolved "https://registry.yarnpkg.com/browserify-rsa/-/browserify-rsa-4.1.0.tgz#b2fd06b5b75ae297f7ce2dc651f918f5be158c8d"
129 dependencies:
113 - bn.js "^4.1.1"
114 - browserify-rsa "^4.0.0"
115 - create-hash "^1.1.0"
116 - create-hmac "^1.1.2"
117 - elliptic "^6.0.0"
118 - inherits "^2.0.1"
119 - parse-asn1 "^5.0.0"
130 + bn.js "^5.0.0"
131 + randombytes "^2.0.1"
132 +
133 +browserify-sign@^4.0.0:
134 + version "4.2.2"
135 + resolved "https://registry.yarnpkg.com/browserify-sign/-/browserify-sign-4.2.2.tgz#e78d4b69816d6e3dd1c747e64e9947f9ad79bc7e"
136 + dependencies:
137 + bn.js "^5.2.1"
138 + browserify-rsa "^4.1.0"
139 + create-hash "^1.2.0"
140 + create-hmac "^1.1.7"
141 + elliptic "^6.5.4"
142 + inherits "^2.0.4"
143 + parse-asn1 "^5.1.6"
144 + readable-stream "^3.6.2"
145 + safe-buffer "^5.2.1"
146
147 browserify-zlib@~0.1.2:
148 version "0.1.4"
@@ -258,7 +284,17 @@ create-hash@^1.1.0, create-hash@^1.1.2:
284 ripemd160 "^2.0.0"
285 sha.js "^2.4.0"
286
261 -create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
287 +create-hash@^1.2.0:
288 + version "1.2.0"
289 + resolved "https://registry.yarnpkg.com/create-hash/-/create-hash-1.2.0.tgz#889078af11a63756bcfb59bd221996be3a9ef196"
290 + dependencies:
291 + cipher-base "^1.0.1"
292 + inherits "^2.0.1"
293 + md5.js "^1.3.4"
294 + ripemd160 "^2.0.1"
295 + sha.js "^2.4.0"
296 +
297 +create-hmac@^1.1.0, create-hmac@^1.1.4:
298 version "1.1.6"
299 resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.6.tgz#acb9e221a4e17bdb076e90657c42b93e3726cf06"
300 dependencies:
@@ -269,6 +305,17 @@ create-hmac@^1.1.0, create-hmac@^1.1.2, create-hmac@^1.1.4:
305 safe-buffer "^5.0.1"
306 sha.js "^2.4.8"
307
308 +create-hmac@^1.1.7:
309 + version "1.1.7"
310 + resolved "https://registry.yarnpkg.com/create-hmac/-/create-hmac-1.1.7.tgz#69170c78b3ab957147b2b8b04572e47ead2243ff"
311 + dependencies:
312 + cipher-base "^1.0.3"
313 + create-hash "^1.1.0"
314 + inherits "^2.0.1"
315 + ripemd160 "^2.0.0"
316 + safe-buffer "^5.0.1"
317 + sha.js "^2.4.8"
318 +
319 crypto-browserify@^3.0.0:
320 version "3.11.1"
321 resolved "https://registry.yarnpkg.com/crypto-browserify/-/crypto-browserify-3.11.1.tgz#948945efc6757a400d6e5e5af47194d10064279f"
@@ -345,6 +392,18 @@ elliptic@^6.0.0:
392 minimalistic-assert "^1.0.0"
393 minimalistic-crypto-utils "^1.0.0"
394
395 +elliptic@^6.5.4:
396 + version "6.5.4"
397 + resolved "https://registry.yarnpkg.com/elliptic/-/elliptic-6.5.4.tgz#da37cebd31e79a1367e941b592ed1fbebd58abbb"
398 + dependencies:
399 + bn.js "^4.11.9"
400 + brorand "^1.1.0"
401 + hash.js "^1.0.0"
402 + hmac-drbg "^1.0.1"
403 + inherits "^2.0.4"
404 + minimalistic-assert "^1.0.1"
405 + minimalistic-crypto-utils "^1.0.1"
406 +
407 events@~1.1.0:
408 version "1.1.1"
409 resolved "https://registry.yarnpkg.com/events/-/events-1.1.1.tgz#9ebdb7635ad099c70dcc4c2a1f5004288e8bd924"
@@ -401,7 +460,7 @@ hash.js@^1.0.0, hash.js@^1.0.3:
460 inherits "^2.0.3"
461 minimalistic-assert "^1.0.0"
462
404 -hmac-drbg@^1.0.0:
463 +hmac-drbg@^1.0.0, hmac-drbg@^1.0.1:
464 version "1.0.1"
465 resolved "https://registry.yarnpkg.com/hmac-drbg/-/hmac-drbg-1.0.1.tgz#d2745701025a6c775a6c545793ed502fc0c649a1"
466 dependencies:
@@ -440,6 +499,10 @@ inherits@2.0.1:
499 version "2.0.1"
500 resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
501
502 +inherits@^2.0.4:
503 + version "2.0.4"
504 + resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.4.tgz#0fa2c64f932917c3433a0ded55363aae37416b7c"
505 +
506 inline-source-map@~0.6.0:
507 version "0.6.2"
508 resolved "https://registry.yarnpkg.com/inline-source-map/-/inline-source-map-0.6.2.tgz#f9393471c18a79d1724f863fa38b586370ade2a5"
@@ -521,6 +584,10 @@ minimalistic-assert@^1.0.0:
584 version "1.0.0"
585 resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz#702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
586
587 +minimalistic-assert@^1.0.1:
588 + version "1.0.1"
589 + resolved "https://registry.yarnpkg.com/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz#2e194de044626d4a10e7f7fbc00ce73e83e4d5c7"
590 +
591 minimalistic-crypto-utils@^1.0.0, minimalistic-crypto-utils@^1.0.1:
592 version "1.0.1"
593 resolved "https://registry.yarnpkg.com/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz#f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
@@ -585,6 +652,16 @@ parse-asn1@^5.0.0:
652 evp_bytestokey "^1.0.0"
653 pbkdf2 "^3.0.3"
654
655 +parse-asn1@^5.1.6:
656 + version "5.1.6"
657 + resolved "https://registry.yarnpkg.com/parse-asn1/-/parse-asn1-5.1.6.tgz#385080a3ec13cb62a62d39409cb3e88844cdaed4"
658 + dependencies:
659 + asn1.js "^5.2.0"
660 + browserify-aes "^1.0.0"
661 + evp_bytestokey "^1.0.0"
662 + pbkdf2 "^3.0.3"
663 + safe-buffer "^5.1.1"
664 +
665 path-browserify@~0.0.0:
666 version "0.0.0"
667 resolved "https://registry.yarnpkg.com/path-browserify/-/path-browserify-0.0.0.tgz#a0b870729aae214005b7d5032ec2cbbb0fb4451a"
@@ -669,6 +746,14 @@ readable-stream@^2.0.2, readable-stream@^2.1.5, readable-stream@^2.2.6:
746 string_decoder "~1.0.3"
747 util-deprecate "~1.0.1"
748
749 +readable-stream@^3.6.2:
750 + version "3.6.2"
751 + resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.6.2.tgz#56a9b36ea965c00c5a93ef31eb111a0f11056967"
752 + dependencies:
753 + inherits "^2.0.3"
754 + string_decoder "^1.1.1"
755 + util-deprecate "^1.0.1"
756 +
757 readable-stream@~2.0.0:
758 version "2.0.6"
759 resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.0.6.tgz#8f90341e68a53ccc928788dacfcd11b36eb9b78e"
@@ -701,6 +786,14 @@ safe-buffer@^5.0.1, safe-buffer@^5.1.0, safe-buffer@^5.1.1, safe-buffer@~5.1.0,
786 version "5.1.1"
787 resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.1.tgz#893312af69b2123def71f57889001671eeb2c853"
788
789 +safe-buffer@^5.2.1, safe-buffer@~5.2.0:
790 + version "5.2.1"
791 + resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.2.1.tgz#1eaf9fa9bdb1fdd4ec75f58f9cdb4e6b7827eec6"
792 +
793 +safer-buffer@^2.1.0:
794 + version "2.1.2"
795 + resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
796 +
797 sha.js@^2.4.0, sha.js@^2.4.8, sha.js@~2.4.4:
798 version "2.4.9"
799 resolved "https://registry.yarnpkg.com/sha.js/-/sha.js-2.4.9.tgz#98f64880474b74f4a38b8da9d3c0f2d104633e7d"
@@ -754,6 +847,12 @@ stream-splicer@^2.0.0:
847 inherits "^2.0.1"
848 readable-stream "^2.0.2"
849
850 +string_decoder@^1.1.1:
851 + version "1.3.0"
852 + resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.3.0.tgz#42f114594a46cf1a8e30b0a84f56c78c3edac21e"
853 + dependencies:
854 + safe-buffer "~5.2.0"
855 +
856 string_decoder@~0.10.0, string_decoder@~0.10.x:
857 version "0.10.31"
858 resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
@@ -816,7 +915,7 @@ url@~0.11.0:
915 punycode "1.3.2"
916 querystring "0.2.0"
917
819 -util-deprecate@~1.0.1:
918 +util-deprecate@^1.0.1, util-deprecate@~1.0.1:
919 version "1.0.2"
920 resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
921