Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 3, 2022

Bumps csv-parse to 4.16.3 and updates ancestor dependency jsforce. These dependencies need to be updated together.

Updates csv-parse from 1.3.3 to 4.16.3

Changelog

Sourced from csv-parse's changelog.

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.3.0 (2022-07-10)

Features

  • ts module Node16 and type declaration to exports field (#341) (4b0283d)

5.2.2 (2022-07-01)

Bug Fixes

  • csv-parse: encoding detection with bom (#350) (fd75e66)

5.2.1 (2022-06-29)

Bug Fixes

  • csv-parse: rtrim encoding support (fix #349) (8bf52f0)

5.2.0 (2022-06-14)

Features

  • csv-parse: cast_date as a function (fix #342) (2807d29)

5.1.0 (2022-05-24)

Features

... (truncated)

Commits
  • 0fd5209 chore(release): publish
  • 2a44e91 chore: latest dependencies
  • 1ec2317 docs(csv-parse): new ltrim and rtrim samples
  • 8222676 docs(csv-parse): new cast_date sample
  • 5471985 fix(csv-parse): remove support for cast_date, no test
  • 6b34c28 chore(release): publish
  • ab76c84 chore: merge new changelog generation
  • 01cc7d0 chore(release): publish
  • b90cf12 chore: remove publish custom scripts
  • e622123 chore: generate all build files
  • Additional commits viewable in compare view

Updates jsforce from 1.9.1 to 1.11.0

Release notes

Sourced from jsforce's releases.

Release v1.11.0

No release notes provided.

Release v1.10.0

fix: serializing Apex REST request body into JSON (#946) fix: buffer compatibility with node 10 fix: support multiple conditions per field fix: csv-parse update from 4.6.3 to 4.10.1 to address vulnerabilities fix: lodash to 4.17.19 to fix Object Prototype Pollution Security vulnerability feat(conn): batch describe of sobjects and allows if-modified-since header on single describe

Release 1.9.3

  • Bump csv-parse to 4.6.3 for security issue (#930, #940)

Release 1.9.2

  • Upgrade vulnerable depending libs (e.g. lodash) (#904)
  • Tooling: Fix CRUD (#808)
  • Streaming: multiple ReplayExtension instances interfere (#814)
  • Fix recursive bug in CSV parsing (#826)
  • Fix upsert error in collection (#813)
Commits
  • 9cb317c Merge pull request #1197 from jsforce/mdonnalley/1.11.0
  • ecde5f5 chore: release 1.11.0
  • 2efa7d4 Merge pull request #1196 from jsforce/mdonnalley/bump-faye
  • 2090653 chore: bump faye to 1.4.0
  • 888edd0 Merge pull request #1099 from jsforce/fix-lodash-template-vnl
  • aa3dc90 add built files
  • 32931cd apply npm audit fix
  • 2eeb4c1 upgrade gulp-uglify
  • b8bae03 Merge pull request #1062 from moonejon/fixing-typo-elapsed
  • 41049e6 Merge branch 'master' into fixing-typo-elapsed
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by mdonnalley, a new releaser for jsforce since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) to 4.16.3 and updates ancestor dependency [jsforce](https://github.com/jsforce/jsforce). These dependencies need to be updated together.


Updates `csv-parse` from 1.3.3 to 4.16.3
- [Release notes](https://github.com/adaltas/node-csv/releases)
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@4.16.3/packages/csv-parse)

Updates `jsforce` from 1.9.1 to 1.11.0
- [Release notes](https://github.com/jsforce/jsforce/releases)
- [Changelog](https://github.com/jsforce/jsforce/blob/master/CHANGELOG.md)
- [Commits](jsforce/jsforce@1.9.1...1.11.0)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-type: indirect
- dependency-name: jsforce
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 3, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant