chore(deps): bump the npm_and_yarn group across 12 directories with 22 updates #18

dependabot · 2025-01-15T22:39:07Z

Bumps the npm_and_yarn group with 13 updates in the / directory:

Package	From	To
axios	`0.21.4`	`0.28.0`
express	`4.19.2`	`4.20.0`
qs	`6.12.1`	`6.12.2`
vite	`4.5.3`	`4.5.5`
nanoid	`4.0.2`	`5.0.9`
postcss	`8.4.38`	`8.5.1`
rollup	`3.29.4`	`3.29.5`
@grpc/grpc-js	`1.11.2`	`1.12.5`
braces	`3.0.2`	`3.0.3`
dompurify	`2.5.6`	`2.5.8`
dset	`3.1.3`	`3.1.4`
micromatch	`4.0.5`	`4.0.8`
ws	`7.5.9`	`7.5.10`

Bumps the npm_and_yarn group with 1 update in the /packages/cli/create-medusa-app directory: nanoid.
Bumps the npm_and_yarn group with 1 update in the /packages/design-system/toolbox directory: axios.
Bumps the npm_and_yarn group with 1 update in the /packages/medusa-telemetry directory: axios.
Bumps the npm_and_yarn group with 1 update in the /packages/medusa-test-utils directory: axios.
Bumps the npm_and_yarn group with 15 updates in the /www directory:

Package	From	To
nanoid	`3.3.7`	`3.3.8`
postcss	`8.4.27`	`8.4.31`
rollup	`2.79.1`	`2.79.2`
@grpc/grpc-js	`1.10.1`	`1.12.5`
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
dompurify	`3.0.9`	`3.2.3`
micromatch	`4.0.5`	`4.0.8`
tar	`6.2.0`	`6.2.1`
tough-cookie	`4.1.3`	`4.1.4`
ws	`7.5.9`	`7.5.10`
next	`15.0.4`	`15.1.2`
mermaid	`10.9.0`	`10.9.3`
@eslint/plugin-kit	`0.2.1`	`0.2.5`
katex	`0.16.9`	`0.16.20`

Bumps the npm_and_yarn group with 2 updates in the /www/apps/api-reference directory: postcss and next.
Bumps the npm_and_yarn group with 1 update in the /www/apps/book directory: next.
Bumps the npm_and_yarn group with 1 update in the /www/apps/resources directory: next.
Bumps the npm_and_yarn group with 2 updates in the /www/apps/ui directory: postcss and next.
Bumps the npm_and_yarn group with 1 update in the /www/apps/user-guide directory: next.
Bumps the npm_and_yarn group with 7 updates in the /www/utils directory:

Package	From	To
braces	`3.0.2`	`3.0.3`
cross-spawn	`7.0.3`	`7.0.6`
dset	`3.1.3`	`3.1.4`
micromatch	`4.0.5`	`4.0.8`
minimatch	`9.0.3`	`10.0.1`
@eslint/plugin-kit	`0.2.3`	`0.2.5`
undici	`5.28.0`	`5.28.4`

Updates axios from 0.21.4 to 0.28.0

Release notes

Sourced from axios's releases.

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

Fixed timeout error message for HTTP 4738

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 #4728

Adding types for progress event callbacks #4675

Fixed max body length defaults #4731

Added data URL support for node.js (#4725)

Added isCancel type assert (#4293)

Added the ability for the url-encoded-form serializer to respect the formSerializer config (#4721)

Add string[] to AxiosRequestHeaders type (#4322)

Allow type definition for axios instance methods (#4224)

Fixed AxiosError stack capturing; (#4718)

Fixed AxiosError status code type; (#4717)

Adding Canceler parameters config and request (#4711)

fix(types): allow to specify partial default headers for instance creation (#4185)

Added blob to the list of protocols supported by the browser (#4678)

Fixing Z_BUF_ERROR when no content (#4701)

Fixed race condition on immediate requests cancellation (#4261)

Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance axios/axios#4248

Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)

Fix TS definition for AxiosRequestTransformer (#4201)

Use type alias instead of interface for AxiosPromise (#4505)

Include request and config when creating a CanceledError instance (#4659)

Added generic TS types for the exposed toFormData helper (#4668)

Optimized the code that checks cancellation (#4587)

Replaced webpack with rollup (#4596)

Added stack trace to AxiosError (#4624)

Updated AxiosError.config to be optional in the type definition (#4665)

Removed incorrect argument for NetworkError constructor (#4656)

v0.27.2

Fixes and Functionality:

Fixed FormData posting in browser environment by reverting #3785 (#4640)

Enhanced protocol parsing implementation (#4639)

Fixed bundle size

v0.27.1

Fixes and Functionality:

Removed import of url module in browser build due to huge size overhead and builds being broken (#4594)

Bumped follow-redirects to ^1.14.9 (#4615)

... (truncated)

Changelog

Sourced from axios's changelog.

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

Fixed timeout error message for HTTP 4738

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 #4728

Adding types for progress event callbacks #4675

Fixed max body length defaults #4731

Added data URL support for node.js (#4725)

Added isCancel type assert (#4293)

Added the ability for the url-encoded-form serializer to respect the formSerializer config (#4721)

Add string[] to AxiosRequestHeaders type (#4322)

Allow type definition for axios instance methods (#4224)

Fixed AxiosError stack capturing; (#4718)

Fixed AxiosError status code type; (#4717)

Adding Canceler parameters config and request (#4711)

fix(types): allow to specify partial default headers for instance creation (#4185)

Added blob to the list of protocols supported by the browser (#4678)

Fixing Z_BUF_ERROR when no content (#4701)

Fixed race condition on immediate requests cancellation (#4261)

Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance axios/axios#4248

Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)

Fix TS definition for AxiosRequestTransformer (#4201)

Use type alias instead of interface for AxiosPromise (#4505)

Include request and config when creating a CanceledError instance (#4659)

Added generic TS types for the exposed toFormData helper (#4668)

Optimized the code that checks cancellation (#4587)

Replaced webpack with rollup (#4596)

Added stack trace to AxiosError (#4624)

Updated AxiosError.config to be optional in the type definition (#4665)

Removed incorrect argument for NetworkError constructor (#4656)

0.27.2 (April 27, 2022)

Fixes and Functionality:

Fixed FormData posting in browser environment by reverting #3785 (#4640)

Enhanced protocol parsing implementation (#4639)

Fixed bundle size

0.27.1 (April 26, 2022)

... (truncated)

Commits

3b7635a [Release] v0.28.0 (#6211)
27c0076 feat(backport): added ability for paramsSerializer to handle function; (#6227)
80c3d74 chore(ci): backported publish action; (#6224)
2755df5 fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to ...
880b42e docs: Fix a typo in README
c4bf0a4 Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
1e2679f fix: [Types] Type of header in AxiosRequestConfig / for Axios.create is incor...
80b546c fix: loosing request header (#4858) (#4871)
6acb5ef feat: brower platform add data protocol. (#4814)
bbb2264 fix(typing): axios response headers can be undefined (#4813)
Additional commits viewable in compare view

Updates express from 4.19.2 to 4.20.0

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

deps: encodeurl@~2.0.0 by @blakeembrey in expressjs/express#5569

skip QUERY method test by @jonchurch in expressjs/express#5628

ignore ETAG query test on 21 and 22, reuse skip util by @jonchurch in expressjs/express#5639

add support Node.js@22 in the CI by @mertcanaltin in expressjs/express#5627

doc: add table of contents, tc/triager lists to readme by @mertcanaltin in expressjs/express#5619

List and sort all projects, add captains by @blakeembrey in expressjs/express#5653

docs: add @UlisesGascon as captain for cookie-parser by @UlisesGascon in expressjs/express#5666

✨ bring back query tests for node 21 by @ctcpip in expressjs/express#5690

[v4] Deprecate res.clearCookie accepting options.maxAge and options.expires by @jonchurch in expressjs/express#5672

skip QUERY tests for Node 21 only, still not supported by @jonchurch in expressjs/express#5695

📝 update people, add ctcpip to TC by @ctcpip in expressjs/express#5683

remove minor version pinning from ci by @jonchurch in expressjs/express#5722

Fix link variable use in attribution section of CODE OF CONDUCT by @IamLizu in expressjs/express#5762

Replace Appveyor windows testing with GHA by @jonchurch in expressjs/express#5599

Add OSSF Scorecard badge by @UlisesGascon in expressjs/express#5436

update scorecard link by @bjohansebas in expressjs/express#5814

Nominate @IamLizu to the triage team by @UlisesGascon in expressjs/express#5836

deps: [email protected] by @blakeembrey in expressjs/express#5603

docs: specify new instructions for question and discuss by @IamLizu in expressjs/express#5835

4.x: Upgrade merge-descriptors dependency by @RobinTail in expressjs/express#5781

[email protected] by @blakeembrey in expressjs/express#5902

New Contributors

@marco-ippolito made their first contribution in expressjs/express#5565

@inigomarquinez made their first contribution in expressjs/express#5590

@mertcanaltin made their first contribution in expressjs/express#5627

@ctcpip made their first contribution in expressjs/express#5690

@bjohansebas made their first contribution in expressjs/express#5814

Full Changelog: expressjs/express@4.19.1...4.20.0

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

deps: [email protected]

Remove link renderization in html while redirecting

deps: [email protected]

Remove link renderization in html while redirecting

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: [email protected]

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

Commits

21df421 4.20.0
4c9ddc1 feat: upgrade to [email protected]
9ebe5d5 feat: upgrade to [email protected] (#5928)
ec4a01b feat: upgrade to [email protected] (#5926)
54271f6 fix: don't render redirect values in anchor href
125bb74 [email protected] (#5902)
2a980ad [email protected] (#5781)
a3e7e05 docs: specify new instructions for question and discuss
c5addb9 deps: [email protected] (#5603)
e35380a docs: add @IamLizu to the triage team (#5836)
Additional commits viewable in compare view

Updates qs from 6.12.1 to 6.12.2

Changelog

Sourced from qs's changelog.

6.12.2

[Fix] parse: parse encoded square brackets (#506)

[readme] add CII best practices badge

Commits

d0dff11 v6.12.2
f0b8d03 [Dev Deps] update @ljharb/eslint-config, object-inspect, tape
81835ff [Fix]: parse: parse encoded square brackets
db47dcc [readme] add CII best practices badge
See full diff in compare view

Updates vite from 4.5.3 to 4.5.5

Release notes

Sourced from vite's releases.

v4.5.5

Please refer to CHANGELOG.md for details.

v4.5.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115) (e812716), closes #18115

fix: backport #18112, fs raw query (b901438), closes #18112

Commits

f1d8845 release: v4.5.5
2466c08 release: v4.5.4
e812716 fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115)
b901438 fix: backport #18112, fs raw query
See full diff in compare view

Updates nanoid from 4.0.2 to 5.0.9

Release notes

Sourced from nanoid's releases.

5.0.9

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

5.0.8

Reduced customAlphabet size (by @kirillgroshkov).

5.0.7

Fixed Parcel support (by @WilhelmYakunin).

5.0.6

Fixed React Native support.

Changelog

Sourced from nanoid's changelog.

5.0.9

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

5.0.8

Reduced customAlphabet size (by @kirillgroshkov).

5.0.7

Fixed Parcel support (by @WilhelmYakunin).

5.0.6

Fixed React Native support.

5.0.5

Make browser’s version faster by increasing size a little (by Samuel Elgozi).

5.0.4

Fixed CLI docs (by @ilyaboka).

5.0.3

Fixed CLI docs (by Chris Schmich).

5.0.2

Fixed webcrypto import (by Divyansh Singh).

5.0.1

Fixed Node.js 18 support.

5.0

Moved Node.js version to Web Crypto API.

Removed async API since Web Crypto API has only sync version.

Removed Node.js 14 and 16 support.

Commits

65a38ac Release 5.0.9 version
b00d120 Merge after 3.3.8 release
3044cd5 Release 3.3.8 version
cdc3edc Update size limit
4fe3495 Update size limit
d643045 Fix pool pollution, infinite loop (#510)
0daa00f Additional fixes and tests for #508 (#509)
313a14e Update dependencies
eb2db95 Fix size limit and linting
9da8f60 Fix pool pollution, infinite loop (#508)
Additional commits viewable in compare view

Updates postcss from 8.4.38 to 8.5.1

Release notes

Sourced from postcss's releases.

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

Commits

7b02c75 Release 8.5.1 version
4c15339 Update dependencies
7efe91e Improve backwards compat for Input#document (#2000)
6873270 Release 8.5 version
4223bb9 Fix 80 columns limit
80e2401 Add Input#document (#1996)
6f86879 Update dependencies
85cbbec Fix pnpm version on CI
76caa57 Update dependencies
46ff246 Move to pnpm 10
Additional commits viewable in compare view

Updates rollup from 3.29.4 to 3.29.5

Release notes

Sourced from rollup's releases.

v3.29.5

3.29.5

2024-09-21

Bug Fixes

Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

#5671: Fix DOM Clobbering CVE (@lukastaegert)

Changelog

Sourced from rollup's changelog.

3.29.5

2024-09-21

Bug Fixes

Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

#5671: Fix DOM Clobbering CVE (@lukastaegert)

4.22.4

2024-09-21

Bug Fixes

Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

#5670: refactor: Use object.prototype to check for reserved properties (@YuHyeonWook)

#5671: Fix DOM Clobbering CVE (@lukastaegert)

4.22.3

2024-09-21

Bug Fixes

Ensure that mutations in modules without side effects are observed while properly handling transitive dependencies (#5669)

Pull Requests

#5669: Ensure impure dependencies of pure modules are added (@lukastaegert)

4.22.2

2024-09-20

Bug Fixes

Revert fix for side effect free modules until other issues are investigated (#5667)

Pull Requests

#5667: Partially revert #5658 and re-apply #5644 (@lukastaegert)

4.22.1

... (truncated)

Commits

dfd233d 3.29.5
2ef77c0 Fix DOM Clobbering CVE
See full diff in compare view

Updates @grpc/grpc-js from 1.11.2 to 1.12.5

Release notes

Sourced from @grpc/grpc-js's releases.

@grpc/grpc-js 1.12.5

Prioritize HTTP status errors over message decoding errors (#2873)

@grpc/grpc-js 1.12.4

Prioritize reporting UNAVAILABLE status when handing connection drops (#2862)

@grpc/grpc-js 1.12.3

Report UNAVAILABLE if possible when handling connection drops (#2861)

@grpc/grpc-js 1.12.2

Use util.promisify instead of fs/promises for Node 12 compatibility (#2838)

@grpc/grpc-js 1.12.1

Port bugfixes from 1.11.x into 1.12.x (#2836)

@grpc/grpc-js-xds 1.12.0

Enable dualstack socket support by default in xDS clients (#2832)

@grpc/grpc-js 1.12.0

Changelog

Provide the method_name for the CallCredentials callback generateMetadata (#2814 contributed by @becoded)

Add an optional rejectUnauthorized field to the VerifyOptions interface, which can be passed as an argument to credentials.createSsl and createFromSecureContext (#2812 contributed by @vinothsa4891)

Experimental API changes

Added:

CaCertificateUpdate

CaCertificateUpdateListener

IdentityCertificateUpdate

IdentityCertificateUpdateListener

CertificateProvider

FileWatcherCertificateProvider

FileWatcherCertificateProviderConfig

createCertificateProviderChannelCredentials

createCertificateProviderServerCredentials

Modified:

LoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.

ChannelControlHelper#createSubchannel: Now takes an additional argument of type ChannelCredentials | null. This should be passed along if overriding this function.

LeafLoadBalancer: The constructor now takes an additional argument of type ChannelCredentials.

@grpc/grpc-js 1.11.3

Ensure the client queries the name resolver again after connections drop while using the round_robin load balancing policy (#2825)

Commits

bae98b3 Merge pull request #2873 from murgatroid99/grpc-js_http_error_resource_exhaus...
63d9717 grpc-js: Prioritize HTTP status errors over message decoding errors
e9359ef Merge pull request #2862 from murgatroid99/grpc-js_connection_drop_reporting_...
5e3b0fb grpc-js: Improve event sequencing when handling connection drops
a524d15 Merge pull request #2861 from murgatroid99/grpc-js_handle_socket_close
848e00e grpc-js: Restore socket disconnect handling
f0c58f7 Merge pull request #2858 from murgatroid99/grpc-js-xds_update_node_types_1.12
bc749ac grpc-js-xds: Update @types/node and update code for compatibility
b6fbfa3 Merge pull request #2850 from murgatroid99/grpc-js_cert_refresh_1.12
2ed62c1 grpc-js{,-xds}: Renew self-signed certificates used in tests
Additional commits viewable in compare view

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates dompurify from 2.5.6 to 2.5.8

Release notes

Sourced from dompurify's releases.

DOMPurify 2.5.8

Fixed two conditional sanitizer bypasses discovered by @parrot409 and @Slonser

Updated the attribute clobbering checks to prevent future bypasses, thanks @parrot409

DOMPurify 2.5.7

Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa

Removed the foreignObject element from the list of HTML entry-points, thanks @masatokinugawa

Commits

ee992fc test: Updated a custom element test for IE11 on Windows 10
8b68e9e test: Trying to work around a false alert in IE11 Win 8.1
0d770cd chore: Preparing 2.5.8 release
9cd4f11 fix: Added same attribute clobbering check for 2.x branch
f7120a3 fix: Fixed two conditional bypasses discovered by @parrot409 and @Slonser
193eef2 Update README.md
f7712e4 Update README.md
1bb377b Update README.md
71683cb chore: Preparing 2.5.7 release
See full diff in compare view

Updates dset from 3.1.3 to 3.1.4

Commits

05b1ec0 3.1.4
16d6154 fix: prevent proto assignment via implicit string
See full diff in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

this is basically v4.0.5, with some README updates

it is vulnerable to CVE-2024-4067

Updated braces to v3.0.3 to avoid CVE-2024-4068

does NOT break API compatibility

[4.0.6] - 2024-05-21

Added hasBraces to check if a pattern contains braces.

Fixes CVE-2024-4067

BREAKS API COMPATIBILITY

Should be labeled as a major release, but it's not.

Commits

8bd704e 4.0.8
a0e6841 run verb to generate README documentation
4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
814f5f7 lint
67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
113f2e3 fix: CVE numbers in CHANGELOG
d9dbd9a feat: updated CHANGELOG
2ab1315 fix: use actions/setup-node@v4
1406ea3 feat: rework test to work on macos with node 10,12 and 14
Additional commits viewable in compare view

Updates ws from 7.5.9 to 7.5.10

Release notes

Sourced from ws's releases.

7.5.10

Bug fixes

Backported e55e5106 to the 7.x release line (22c28763).

Commits

d962d70 [dist] 7.5.10
22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
See full diff in compare view

Updates nanoid from 4.0.2 to 5.0.9

Release notes

Sourced from nanoid's releases.

5.0.9

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

5.0.8

Reduced customAlphabet size (by @kirillgroshkov).

5.0.7

Fixed Parcel support (by @WilhelmYakunin).

5.0.6

Fixed React Native support.

Changelog

Sourced from nanoid's changelog.

5.0.9

Fixed a way to break Nano ID by passing non-integer size (by @myndzi).

5.0.8

Reduced customAlphabet size (by @kirillgroshkov).

5.0.7

Fixed Parce...
Description has been truncated

…2 updates Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.21.4` | `0.28.0` | | [express](https://github.com/expressjs/express) | `4.19.2` | `4.20.0` | | [qs](https://github.com/ljharb/qs) | `6.12.1` | `6.12.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `4.5.3` | `4.5.5` | | [nanoid](https://github.com/ai/nanoid) | `4.0.2` | `5.0.9` | | [postcss](https://github.com/postcss/postcss) | `8.4.38` | `8.5.1` | | [rollup](https://github.com/rollup/rollup) | `3.29.4` | `3.29.5` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.11.2` | `1.12.5` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [dompurify](https://github.com/cure53/DOMPurify) | `2.5.6` | `2.5.8` | | [dset](https://github.com/lukeed/dset) | `3.1.3` | `3.1.4` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | Bumps the npm_and_yarn group with 1 update in the /packages/cli/create-medusa-app directory: [nanoid](https://github.com/ai/nanoid). Bumps the npm_and_yarn group with 1 update in the /packages/design-system/toolbox directory: [axios](https://github.com/axios/axios). Bumps the npm_and_yarn group with 1 update in the /packages/medusa-telemetry directory: [axios](https://github.com/axios/axios). Bumps the npm_and_yarn group with 1 update in the /packages/medusa-test-utils directory: [axios](https://github.com/axios/axios). Bumps the npm_and_yarn group with 15 updates in the /www directory: | Package | From | To | | --- | --- | --- | | [nanoid](https://github.com/ai/nanoid) | `3.3.7` | `3.3.8` | | [postcss](https://github.com/postcss/postcss) | `8.4.27` | `8.4.31` | | [rollup](https://github.com/rollup/rollup) | `2.79.1` | `2.79.2` | | [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.10.1` | `1.12.5` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.0.9` | `3.2.3` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [tar](https://github.com/isaacs/node-tar) | `6.2.0` | `6.2.1` | | [tough-cookie](https://github.com/salesforce/tough-cookie) | `4.1.3` | `4.1.4` | | [ws](https://github.com/websockets/ws) | `7.5.9` | `7.5.10` | | [next](https://github.com/vercel/next.js) | `15.0.4` | `15.1.2` | | [mermaid](https://github.com/mermaid-js/mermaid) | `10.9.0` | `10.9.3` | | [@eslint/plugin-kit](https://github.com/eslint/rewrite) | `0.2.1` | `0.2.5` | | [katex](https://github.com/KaTeX/KaTeX) | `0.16.9` | `0.16.20` | Bumps the npm_and_yarn group with 2 updates in the /www/apps/api-reference directory: [postcss](https://github.com/postcss/postcss) and [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /www/apps/book directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /www/apps/resources directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 2 updates in the /www/apps/ui directory: [postcss](https://github.com/postcss/postcss) and [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /www/apps/user-guide directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 7 updates in the /www/utils directory: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [dset](https://github.com/lukeed/dset) | `3.1.3` | `3.1.4` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` | | [minimatch](https://github.com/isaacs/minimatch) | `9.0.3` | `10.0.1` | | [@eslint/plugin-kit](https://github.com/eslint/rewrite) | `0.2.3` | `0.2.5` | | [undici](https://github.com/nodejs/undici) | `5.28.0` | `5.28.4` | Updates `axios` from 0.21.4 to 0.28.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v0.28.0) Updates `express` from 4.19.2 to 4.20.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.19.2...4.20.0) Updates `qs` from 6.12.1 to 6.12.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.12.1...v6.12.2) Updates `vite` from 4.5.3 to 4.5.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.5/packages/vite) Updates `nanoid` from 4.0.2 to 5.0.9 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@4.0.2...5.0.9) Updates `postcss` from 8.4.38 to 8.5.1 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.5.1) Updates `rollup` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v3.29.5) Updates `@grpc/grpc-js` from 1.11.2 to 1.12.5 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `dompurify` from 2.5.6 to 2.5.8 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@2.5.6...2.5.8) Updates `dset` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/lukeed/dset/releases) - [Commits](lukeed/dset@v3.1.3...v3.1.4) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `nanoid` from 4.0.2 to 5.0.9 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@4.0.2...5.0.9) Updates `axios` from 0.24.0 to 1.7.9 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v0.28.0) Updates `axios` from 0.21.4 to 1.7.9 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v0.28.0) Updates `axios` from 0.21.4 to 1.7.9 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.28.0/CHANGELOG.md) - [Commits](axios/axios@v0.21.4...v0.28.0) Updates `nanoid` from 3.3.7 to 3.3.8 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@4.0.2...5.0.9) Updates `postcss` from 8.4.27 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.5.1) Updates `rollup` from 2.79.1 to 2.79.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v3.29.4...v3.29.5) Updates `@grpc/grpc-js` from 1.10.1 to 1.12.5 - [Release notes](https://github.com/grpc/grpc-node/releases) - [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected]) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `dompurify` from 3.0.9 to 3.2.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@2.5.6...2.5.8) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `tar` from 6.2.0 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.0...v6.2.1) Updates `tough-cookie` from 4.1.3 to 4.1.4 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v4.1.3...v4.1.4) Updates `ws` from 7.5.9 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.5.9...7.5.10) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `mermaid` from 10.9.0 to 10.9.3 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Changelog](https://github.com/mermaid-js/mermaid/blob/develop/CHANGELOG.md) - [Commits](mermaid-js/mermaid@v10.9.0...v10.9.3) Updates `@eslint/plugin-kit` from 0.2.1 to 0.2.5 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/release-please-config.json) - [Commits](eslint/rewrite@plugin-kit-v0.2.1...plugin-kit-v0.2.5) Updates `katex` from 0.16.9 to 0.16.20 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.9...v0.16.20) Updates `postcss` from 8.4.27 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.5.1) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `postcss` from 8.4.27 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.38...8.5.1) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `next` from 15.0.4 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.0.4...v15.1.2) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `dset` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/lukeed/dset/releases) - [Commits](lukeed/dset@v3.1.3...v3.1.4) Updates `micromatch` from 4.0.5 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.5...4.0.8) Updates `minimatch` from 9.0.3 to 10.0.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v9.0.3...v10.0.1) Updates `@eslint/plugin-kit` from 0.2.3 to 0.2.5 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/release-please-config.json) - [Commits](eslint/rewrite@plugin-kit-v0.2.1...plugin-kit-v0.2.5) Updates `undici` from 5.28.0 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.0...v5.28.4) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: qs dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dset dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: axios dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@grpc/grpc-js" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dompurify dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: mermaid dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@eslint/plugin-kit" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: katex dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dset dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@eslint/plugin-kit" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 15, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm_and_yarn group across 12 directories with 22 updates #18

chore(deps): bump the npm_and_yarn group across 12 directories with 22 updates #18

dependabot bot commented on behalf of github Jan 15, 2025

chore(deps): bump the npm_and_yarn group across 12 directories with 22 updates #18

Are you sure you want to change the base?

chore(deps): bump the npm_and_yarn group across 12 directories with 22 updates #18

Conversation

dependabot bot commented on behalf of github Jan 15, 2025

Release v0.28.0

Release notes:

Bug Fixes

Backports from v1.x:

v0.27.2

v0.27.1

Fixes and Functionality:

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

Backports from v1.x:

0.27.2 (April 27, 2022)

0.27.1 (April 26, 2022)

4.20.0

What's Changed

Important

Other Changes

New Contributors

4.20.0 / 2024-09-10

6.12.2

v4.5.5

v4.5.4

4.5.5 (2024-09-16)

4.5.4 (2024-09-16)

5.0.9

5.0.8

5.0.7

5.0.6

5.0.9

5.0.8

5.0.7

5.0.6

5.0.5

5.0.4

5.0.3

5.0.2

5.0.1

5.0

8.5.1

8.5 “Duke Alloces”

Thanks to Sponsors

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.5.1

8.5 “Duke Alloces”

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

8.4.39

v3.29.5

3.29.5

Bug Fixes

Pull Requests

3.29.5

Bug Fixes

Pull Requests

4.22.4

Bug Fixes

Pull Requests

4.22.3

Bug Fixes

Pull Requests

4.22.2

Bug Fixes

`@grpc/grpc-js` 1.12.5

`@grpc/grpc-js` 1.12.4

`@grpc/grpc-js` 1.12.3

`@grpc/grpc-js` 1.12.2

`@grpc/grpc-js` 1.12.1

`@grpc/grpc-js-xds` 1.12.0

`@grpc/grpc-js` 1.12.0

`@grpc/grpc-js` 1.11.3