diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d0ea5f5b23..48c8ec2f03 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -75,7 +75,7 @@ jobs: - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - name: Initialize CodeQL - uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9 + uses: github/codeql-action/init@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10 with: config: | paths: @@ -91,7 +91,7 @@ jobs: queries: +security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9 + uses: github/codeql-action/analyze@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10 with: category: "/language:javascript-typescript" diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 08e0233e83..26d260eba8 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -68,7 +68,7 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9 + uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10 if: github.repository == 'nuxt/nuxt' && success() with: sarif_file: results.sarif diff --git a/package.json b/package.json index 89158cf6e9..878b1bdd42 100644 --- a/package.json +++ b/package.json @@ -96,7 +96,7 @@ "sherif": "1.0.0", "std-env": "3.7.0", "tinyexec": "0.3.0", - "tinyglobby": "0.2.6", + "tinyglobby": "0.2.7", "typescript": "5.6.2", "ufo": "1.5.4", "vitest": "2.1.1", diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json index e030e0ce73..31f1d9ed54 100644 --- a/packages/nuxt/package.json +++ b/packages/nuxt/package.json @@ -107,7 +107,7 @@ "semver": "^7.6.3", "std-env": "^3.7.0", "strip-literal": "^2.1.0", - "tinyglobby": "0.2.6", + "tinyglobby": "0.2.7", "ufo": "^1.5.4", "ultrahtml": "^1.5.3", "uncrypto": "^0.1.3", diff --git a/packages/ui-templates/package.json b/packages/ui-templates/package.json index c95768a304..4a1a6ddb12 100644 --- a/packages/ui-templates/package.json +++ b/packages/ui-templates/package.json @@ -30,7 +30,7 @@ "prettier": "3.3.3", "scule": "1.3.0", "tinyexec": "0.3.0", - "tinyglobby": "0.2.6", + "tinyglobby": "0.2.7", "unocss": "0.63.1", "vite": "5.4.8" } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 360e7f5cb7..4832904d7c 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -153,8 +153,8 @@ importers: specifier: 0.3.0 version: 0.3.0 tinyglobby: - specifier: 0.2.6 - version: 0.2.6 + specifier: 0.2.7 + version: 0.2.7 typescript: specifier: 5.6.2 version: 5.6.2 @@ -418,8 +418,8 @@ importers: specifier: ^2.1.0 version: 2.1.0 tinyglobby: - specifier: 0.2.6 - version: 0.2.6 + specifier: 0.2.7 + version: 0.2.7 ufo: specifier: 1.5.4 version: 1.5.4 @@ -654,8 +654,8 @@ importers: specifier: 0.3.0 version: 0.3.0 tinyglobby: - specifier: 0.2.6 - version: 0.2.6 + specifier: 0.2.7 + version: 0.2.7 unocss: specifier: 0.63.1 version: 0.63.1(postcss@8.4.47)(rollup@4.22.5)(vite@5.4.8(@types/node@20.16.10)(sass@1.78.0)(terser@5.32.0)) @@ -4382,8 +4382,8 @@ packages: fastq@1.17.1: resolution: {integrity: sha512-sRVD3lWVIXWg6By68ZN7vho9a1pQcN/WBFaAAsDDFzlJjvoGx0P8z7V1t72grFJfJhu3YPZBuu25f7Kaw2jN1w==} - fdir@6.3.0: - resolution: {integrity: sha512-QOnuT+BOtivR77wYvCWHfGt9s4Pz1VIMbD463vegT5MLqNXy8rYFT/lPVEqf/bhYeT6qmqrNHhsX+rWwe3rOCQ==} + fdir@6.4.0: + resolution: {integrity: sha512-3oB133prH1o4j/L5lLW7uOCF1PlD+/It2L0eL/iAqWMB91RBbqTewABqxhj0ibBd90EEmWZq7ntIWzVaWcXTGQ==} peerDependencies: picomatch: ^3 || ^4 peerDependenciesMeta: @@ -4626,9 +4626,6 @@ packages: resolution: {integrity: sha512-O1Ld7Dr+nqPnmGpdhzLmMTQ4vAsD+rHwMm1NLUmoUFFymBOMKxCCrtDxqdBRYXdeEPEi3SyoR4TizJLQrnKBNA==} engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0} - h3-nightly@2.0.0-1718872656.6765a6e: - resolution: {integrity: sha512-LQ8hHOIzk+agD1p0K7UosByKuzDAKGLTnYsP0syV/XMr9E7pWmoaDSWkGdWjtLR9O3hinNqrXU1NW0kTmhiSag==} - h3@1.12.0: resolution: {integrity: sha512-Zi/CcNeWBXDrFNlV0hUBJQR9F7a96RjMeAZweW/ZWkR9fuXrMcvKnSA63f/zZ9l0GgQOZDVHGvXivNN9PWOwhA==} @@ -6908,8 +6905,8 @@ packages: tinyexec@0.3.0: resolution: {integrity: sha512-tVGE0mVJPGb0chKhqmsoosjsS+qUnJVGJpZgsHYQcGoPlG3B51R3PouqTgEGH2Dc9jjFyOqOpix6ZHNMXp1FZg==} - tinyglobby@0.2.6: - resolution: {integrity: sha512-NbBoFBpqfcgd1tCiO8Lkfdk+xrA7mlLR9zgvZcZWQQwU63XAfUePyd6wZBaU93Hqw347lHnwFzttAkemHzzz4g==} + tinyglobby@0.2.7: + resolution: {integrity: sha512-qFWYeNxBQxrOTRHvGjlRdBamy8JFqu6c0bwRru9leE+q8J72tLtlT0L3v+2T7fbLXN7FGzDNBhXkWiJqHUHD9g==} engines: {node: '>=12.0.0'} tinypool@0.8.4: @@ -8582,7 +8579,7 @@ snapshots: semver: 7.6.3 simple-git: 3.27.0 sirv: 2.0.4 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 unimport: 3.13.1(rollup@4.22.5)(webpack-sources@3.2.3) vite: 5.4.8(@types/node@20.16.10)(sass@1.78.0)(terser@5.32.0) vite-plugin-inspect: 0.8.7(@nuxt/kit@packages+kit)(rollup@4.22.5)(vite@5.4.8(@types/node@20.16.10)(sass@1.78.0)(terser@5.32.0)) @@ -8650,7 +8647,7 @@ snapshots: '@vueuse/core': 11.1.0(vue@3.5.10(typescript@5.6.2)) consola: 3.2.3 defu: 6.1.4 - h3: h3-nightly@2.0.0-1718872656.6765a6e + h3: 1.12.0 magic-string: 0.30.11 mlly: 1.7.1 ofetch: 1.4.0 @@ -9528,7 +9525,7 @@ snapshots: magic-string: 0.30.11 pathe: 1.1.2 perfect-debounce: 1.0.0 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 transitivePeerDependencies: - rollup - supports-color @@ -9547,7 +9544,7 @@ snapshots: magic-string: 0.30.11 pathe: 1.1.2 perfect-debounce: 1.0.0 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 transitivePeerDependencies: - rollup - supports-color @@ -9622,7 +9619,7 @@ snapshots: '@unocss/rule-utils': 0.62.4 css-tree: 2.3.1 postcss: 8.4.47 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 transitivePeerDependencies: - supports-color @@ -9633,7 +9630,7 @@ snapshots: '@unocss/rule-utils': 0.63.1 css-tree: 3.0.0 postcss: 8.4.47 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 transitivePeerDependencies: - supports-color @@ -9786,7 +9783,7 @@ snapshots: '@unocss/inspector': 0.62.4 chokidar: 3.6.0 magic-string: 0.30.11 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 vite: 5.4.8(@types/node@20.16.10)(sass@1.78.0)(terser@5.32.0) transitivePeerDependencies: - rollup @@ -9801,7 +9798,7 @@ snapshots: '@unocss/inspector': 0.63.1 chokidar: 3.6.0 magic-string: 0.30.11 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 vite: 5.4.8(@types/node@20.16.10)(sass@1.78.0)(terser@5.32.0) transitivePeerDependencies: - rollup @@ -9815,7 +9812,7 @@ snapshots: '@unocss/core': 0.62.4 chokidar: 3.6.0 magic-string: 0.30.11 - tinyglobby: 0.2.6 + tinyglobby: 0.2.7 unplugin: 1.14.1(webpack-sources@3.2.3) webpack: 5.95.0(esbuild@0.24.0) webpack-sources: 3.2.3 @@ -11550,7 +11547,7 @@ snapshots: dependencies: reusify: 1.0.4 - fdir@6.3.0(picomatch@4.0.2): + fdir@6.4.0(picomatch@4.0.2): optionalDependencies: picomatch: 4.0.2 @@ -11818,21 +11815,6 @@ snapshots: dependencies: duplexer: 0.1.2 - h3-nightly@2.0.0-1718872656.6765a6e: - dependencies: - cookie-es: 1.2.2 - crossws: 0.2.4 - defu: 6.1.4 - destr: 2.0.3 - iron-webcrypto: 1.2.1 - ohash: 1.1.4 - radix3: 1.1.2 - ufo: 1.5.4 - uncrypto: 0.1.3 - unenv: 1.10.0 - transitivePeerDependencies: - - uWebSockets.js - h3@1.12.0: dependencies: cookie-es: 1.2.2 @@ -14496,9 +14478,9 @@ snapshots: tinyexec@0.3.0: {} - tinyglobby@0.2.6: + tinyglobby@0.2.7: dependencies: - fdir: 6.3.0(picomatch@4.0.2) + fdir: 6.4.0(picomatch@4.0.2) picomatch: 4.0.2 tinypool@0.8.4: {}