Bump the dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates in the /backend directory:

Package	From	To
axios	1.7.2	1.7.7
cheerio	1.0.0-rc.12	1.0.0
winston	3.13.0	3.14.2
@types/node	20.14.2	22.5.2
typescript	5.4.5	5.5.4

Updates axios from 1.7.2 to 1.7.7

Release notes

Sourced from axios's releases.

Release v1.7.7

Release notes:

Bug Fixes

• fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
• http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

• Rishi556
• Dmitriy Mozgovoy

Release v1.7.6

Release notes:

Bug Fixes

• fetch: fix content length calculation for FormData payload; (#6524) (085f568)
• fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

• Dmitriy Mozgovoy
• Jacques Germishuys
• kuroino721

Release v1.7.5

Release notes:

Bug Fixes

• adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
• core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
• core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
• fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

• Dmitriy Mozgovoy
• Antonin Bas
• Hans Otto Wirtz

Release v1.7.4

Release notes:

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

• Lev Pachmanov

... (truncated)

Changelog

Sourced from axios's changelog.

1.7.7 (2024-08-31)

Bug Fixes

• fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
• http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

• Rishi556
• Dmitriy Mozgovoy

1.7.6 (2024-08-30)

Bug Fixes

• fetch: fix content length calculation for FormData payload; (#6524) (085f568)
• fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

• Dmitriy Mozgovoy
• Jacques Germishuys
• kuroino721

1.7.5 (2024-08-23)

Bug Fixes

• adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
• core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
• core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
• fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

• Dmitriy Mozgovoy
• Antonin Bas
• Hans Otto Wirtz

1.7.4 (2024-08-13)

Bug Fixes

• sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

... (truncated)

Commits

• 5b8a826 chore(release): v1.7.7 (#6585)
• 364993f fix(http): fixed support for IPv6 literal strings in url (#5731)
• d198085 fix(fetch): fix stream handling in Safari by fallback to using a stream reade...
• d584fcf chore(release): v1.7.6 (#6583)
• bc03c6c chore(examples): fix module import (#6575)
• df9889b fix(fetch): optimize signals composing logic; (#6582)
• ee208cf chore(sponsor): update sponsor block (#6576)
• 085f568 fix(fetch): fix content length calculation for FormData payload; (#6524)
• 59cd6b0 chore(release): v1.7.5 (#6574)
• 6700a8a fix(core): add the missed implementation of AxiosError#status property; (#6573)
• Additional commits viewable in compare view

Updates cheerio from 1.0.0-rc.12 to 1.0.0

Release notes

Sourced from cheerio's releases.

v1.0.0

Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes

• The minimum NodeJS version is now 18.17 or higher cheeriojs/cheerio#3959

• Import paths were simplified. For example, use cheerio/slim instead of cheerio/lib/slim. cheeriojs/cheerio#3970

• The deprecated default Cheerio instance and static methods were removed. cheeriojs/cheerio#3974

  Before, it was possible to write code like this:

  import cheerio, { html } from 'cheerio';
  html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS

  Make sure to always load documents first:

  import * as cheerio from 'cheerio';
  cheerio.load('<test></test>').html();

• Node types previously re-exported by Cheerio must now be imported directly from (domhandler)(https://github.com/fb55/domhandler). cheeriojs/cheerio#3969

• htmlparser2 options now reside exclusively under the xml key (cheeriojs/cheerio#2916):

  const $ = cheerio.load('<html>', {
    xml: {
      withStartIndices: true,
    },
  });

New Features

• Add functions to load buffers, streams & URLs in NodeJS by @​fb55 in cheeriojs/cheerio#2857
• Add extract method by @​fb55 in cheeriojs/cheerio#2750

Fixes

• Allow imports of cheerio/utils by @​blixt in cheeriojs/cheerio#2601
• Allow empty string in data, and simplify by @​fb55 in cheeriojs/cheerio#2818

... (truncated)

Commits

• 50b5d5c 1.0.0
• eea2fec fix(eslint): Disable misfiring lint rule
• e60f659 chore(package): Update published files
• 4fe3e7b chore(docs): Add 1.0 Announcement Post (#3984)
• 944553b build(deps): bump docusaurus-plugin-typedoc in /website (#3983)
• e34967e build(deps-dev): bump tsx from 4.16.5 to 4.17.0 (#3982)
• eb7122b chore(traversing): Add test case for lowerCaseTags (#3981)
• b824ba8 fix(website): Fix ReactLiveScope examples (#3980)
• 08ebee5 build(deps-dev): bump eslint-plugin-jsdoc from 49.0.0 to 50.0.0 (#3979)
• bf5f44c build(deps-dev): bump eslint-plugin-jsdoc from 48.11.0 to 49.0.0 (#3976)
• Additional commits viewable in compare view

Updates winston from 3.13.0 to 3.14.2

Release notes

Sourced from winston's releases.

v3.14.2

• Move initialization to constructor (#2503) 2458ba6

winstonjs/winston@v3.14.1...v3.14.2

v3.14.1

• Save a reference to console methods in console transport (#2498) e82752f
• Add forceConsole to ConsoleTransportOptions (#2496) 4ff0538
• Bump mocha from 10.6.0 to 10.7.0 (#2489) 62acaad
• Update readme with forceConsole info (#2493) b2b79af

winstonjs/winston@v3.14.0...v3.14.1

v3.14.0

• Add option forceConsole (#2276) b2098fd
• Set _rotate false on emit 'rotate' false (#2457) 1719275
• Bump @​babel/core from 7.24.7 to 7.24.9 (#2485) d2859f3
• Bump @​babel/preset-env from 7.24.7 to 7.24.8 (#2487) 71e4bb1
• fix: readme (#2488) 0cb8c7c

winstonjs/winston@v3.13.1...v3.14.0

v3.13.1

• revert to rimraf 5.0.1, last known version to work with node 18 for now 1b3a500
• Merge branch 'master' of github.com:winstonjs/winston b56117e
• Update dependencies a5853b5
• Bump @​types/node from 20.12.7 to 20.14.10 (#2483) 93b52ac
• Bump mocha from 10.3.0 to 10.6.0 (#2484) 33611c9
• Bump @​babel/preset-env from 7.24.0 to 7.24.7 (#2475) 4aa6550
• Update minimum version logform (#2472) 7f5f014
• Add Parseable transport (#2466) debf4fa
• chore(docs): Update w/ MySQL transport (#2456) d567c57
• fix typo at test/unit/winston/transports/http.test.js (#2453) 1d5d527
• Bump @​babel/cli from 7.23.9 to 7.24.5 (#2454) d89a34e
• Bump @​types/node from 20.11.29 to 20.12.7 (#2448) 947fa79
• Bump @​babel/core from 7.24.0 to 7.24.5 (#2455) 8c58d0a

winstonjs/winston@v3.13.0...v3.13.1

Commits

• 51a4551 3.14.2
• 2458ba6 Move initialization to constructor (#2503)
• b270c4e 3.14.1
• e82752f Save a reference to console methods in console transport (#2498)
• 4ff0538 Add forceConsole to ConsoleTransportOptions (#2496)
• 62acaad Bump mocha from 10.6.0 to 10.7.0 (#2489)
• b2b79af Update readme with forceConsole info (#2493)
• c4a15ec 3.14.0
• b2098fd Add option forceConsole (#2276)
• 1719275 Set _rotate false on emit 'rotate' false (#2457)
• Additional commits viewable in compare view

Updates @types/node from 20.14.2 to 22.5.2

Commits

• See full diff in compare view

Updates typescript from 5.4.5 to 5.5.4

Release notes

Sourced from typescript's releases.

TypeScript 5.5.4

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for TypeScript v5.5.4 (Stable).
• fixed issues query for TypeScript v5.5.3 (Stable).
• fixed issues query for TypeScript v5.5.2 (Stable).
• fixed issues query for TypeScript v5.5.1 (RC).
• fixed issues query for TypeScript v5.5.0 (Beta).

Downloads are available on:

• npm
• NuGet package (soon!)

TypeScript 5.5.3

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for TypeScript v5.5.3 (Stable).
• fixed issues query for TypeScript v5.5.2 (Stable).
• fixed issues query for TypeScript v5.5.1 (RC).
• fixed issues query for TypeScript v5.5.0 (Beta).

Downloads are available on:

• npm
• NuGet package

TypeScript 5.5

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for TypeScript v5.5.2 (Stable).
• fixed issues query for TypeScript v5.5.1 (RC).
• fixed issues query for TypeScript v5.5.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.5 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 5.5.0 (Beta).

... (truncated)

Commits

• c8a7d58 Bump version to 5.5.4 and LKG
• c0ded04 🤖 Pick PR #58771 (Allow references to the global Symb...) into release-5.5 (#...
• 5ba41e2 🤖 Pick PR #59208 (Write non-missing undefined on mapp...) into release-5.5 (#...
• b075332 🤖 Pick PR #59337 (Allow declarationMap to be emitted ...) into release-5.5 (#...
• 9dd6f91 Cherry-pick "Stop using latest Node in CI" to release-5.5 (#59348)
• bf0ddaf 🤖 Pick PR #59070 (Delay the calculation of common sou...) into release-5.5 (#...
• a44e2d9 🤖 Pick PR #59160 (Fixed crash on authored import type...) into release-5.5 (#...
• f35206d 🤖 Pick PR #59325 (Don't skip markLinkedReferences on ...) into release-5.5 (#...
• 1109550 Fix baselines on release-5.5 (#59330)
• 8794318 🤖 Pick PR #59215 (Fix codefix crash on circular alias...) into release-5.5 (#...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions