Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 30, 2022

Bumps moment-timezone and forest-express-sequelize. These dependencies needed to be updated together.
Updates moment-timezone from 0.5.27 to 0.5.37

Release notes

Sourced from moment-timezone's releases.

Release 0.5.34

  • Updated data to IANA TZDB 2021e

Release 0.5.33

  • Updated data to IANA TZDB 2021a

Release 0.5.32

  • Updated data to IANA TZDB 2020d

Release 0.5.31

Fixed Travis builds for Node.js 4 and 6

Release 0.5.28

0.5.29 2020-02-21

Merged pull request #410 from @​adgrace:

  • Added a method moment.tz.zonesForCountry(country_code) which returns all timezones for the country
  • Added a method moment.tz(timezone_id).countries() to get countries for some time zone
  • Added a method moment.tz.countries() to get all country codes
  • And as you know moment.tz.names() already exists
Changelog

Sourced from moment-timezone's changelog.

0.5.37 2022.08-25

0.5.36 2022.08-25

  • IANA TZDB 2022c
  • improvements/fixes to data pipeline

0.5.35 2022-08-23

Thanks to the OpenSSF Alpha-Omega project for reporting these!

0.5.34 2020-11-10

  • Updated data to IANA TZDB 2021e

0.5.33 2020-11-15

  • Updated data to IANA TZDB 2021a

0.5.32 2020-11-14

  • Updated data to IANA TZDB 2020d

0.5.31 2020-05-16

  • Fixed Travis builds for Node.js 4 and 6

0.5.30 2020-05-16

  • Updated data to IANA TZDB 2020a
  • Fixed typescript definitions

NOTE: You might need to un-install @​types/moment-timezone. Check moment/moment-timezone#858 for more info

0.5.29 2020-05-16

0.5.28 2020-02-21

Merged pull request #410 from @​adgrace:

  • Added a method moment.tz.zonesForCountry(country_code) which returns all timezones for the country
  • Added a method moment.tz(timezone_id).countries() to get countries for some time zone
  • Added a method moment.tz.countries() to get all country codes
  • And as you know moment.tz.zones() already exists
Commits
  • ffe6f34 Add changelog for 0.5.37
  • 450ca63 Bump version to 0.5.37
  • 95f1a9b Build moment-timezone 0.5.36
  • abba28c Add changelog for 0.5.36
  • ac6de03 Bump version to 0.5.36
  • 7a5cadf tests: Fix country tests for 2022c
  • 6754c75 data: generate 2022c data+tests
  • f74a364 bugfix: Wipe tests/zones before generation
  • e850f9f grunt: do not bundle zone and contry tests
  • f13e22b data: automatically create data/*/VERSION.json for latest
  • Additional commits viewable in compare view

Updates forest-express-sequelize from 5.2.0 to 5.7.0

Changelog

Sourced from forest-express-sequelize's changelog.

RELEASE 5.7.0 - 2020-01-22

Added

  • Has Many Relationships - Enable sorting on belongsTo relationship columns in related data.

Fixed

  • Technical - Ensure that all databases are initialized before running CI tests.
  • Segment Live Query - Fix issue where an incorrect live query causes the server to crash.
  • Login - Make the login error messages brought up to the end client through toasts more accurate.
  • Schema - Schemas having fields with escaped characters are now properly saved as valid JSON.
  • Security - Patch set-value dependency vulnerability.
  • Security - Patch tree-kill devDependency vulnerability.

RELEASE 5.6.0 - 2020-01-14

Added

  • Sessions - Distinguish "CORS configuration issue" and "Server down" scenarios in case of liana login error.

Fixed

  • Initialization - Filter out test files when requiring models (__tests__/*, *.spec.js, *.spec.ts, *.test.js or *.test.ts).

RELEASE 5.5.0 - 2020-01-02

Added

  • Technical - Add SonarJS linter for complexity issues.

Changed

  • Smart Collections - Do not insert Smart Collections unless they contain at least one declared field.

Fixed

  • Intercom Integration - Better handling of automated messages.

RELEASE 5.4.1 - 2019-12-11

Changed

  • Technical - Upgrade ESLint rules.
  • Technical - Ensure that all files follow the ESLint rules.

Fixed

  • Logger - Improve formatting, add stack if present, do not display error messages twice.
  • Smart actions - Ignore smart actions that do not have a name (display a warning).
  • Export - Fix export on related data.

RELEASE 5.4.0 - 2019-11-29

Added

  • Smart Relationship/Collection - Expose a serializer to simplify the serialization.

Changed

  • Technical - Rename .env.example file.

Fixed

  • Technical - Add vs code workspace to gitignore.

RELEASE 5.3.0 - 2019-11-26

... (truncated)

Commits
  • 4228349 Release 5.7.0
  • d91371a [*] Security - Patch sequelize devDependency vulnerability
  • 2394131 [*] Security - Patch tree-kill devDependency vulnerability
  • 83bae4b [*] Security - Patch set-value dependency vulnerability
  • 821fd5d [-] Upgrade forest-express to the latest version
  • c6a66b5 [*] Segment Live Query - Fix issue where an incorrect live query causes the s...
  • 69ecf18 [*] Technical - Ensure that all databases are initialized before running test...
  • b2ad14e [*] Has Many Relationships - Fix sorting on hasMany fields in related data (#...
  • b0c0a44 Release 5.6.0
  • ff5094b [+] Sessions - Distinguish "CORS configuration issue" and "Server down" scena...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [moment-timezone](https://github.com/moment/moment-timezone) and [forest-express-sequelize](https://github.com/ForestAdmin/forest-express-sequelize). These dependencies needed to be updated together.

Updates `moment-timezone` from 0.5.27 to 0.5.37
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.27...0.5.37)

Updates `forest-express-sequelize` from 5.2.0 to 5.7.0
- [Release notes](https://github.com/ForestAdmin/forest-express-sequelize/releases)
- [Changelog](https://github.com/ForestAdmin/forest-express-sequelize/blob/main/CHANGELOG.md)
- [Commits](ForestAdmin/forest-express-sequelize@v5.2.0...v5.7.0)

---
updated-dependencies:
- dependency-name: moment-timezone
  dependency-type: indirect
- dependency-name: forest-express-sequelize
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant