Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump superagent and spotify-web-api-node #7

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 19, 2023

Bumps superagent to 6.1.0 and updates ancestor dependency spotify-web-api-node. These dependencies need to be updated together.

Updates superagent from 2.3.0 to 6.1.0

Release notes

Sourced from superagent's releases.

v6.1.0

  • fix: use qs to serialize form data in browser (#1591) aa43b3d
  • Create FUNDING.yml f817806
  • docs: updated docs, set to master branch 6a31af9
  • chore: updated docs 484f890

ladjs/superagent@v6.0.0...v6.1.0

v6.0.0

  • fix: bump deps, fixed linting, specific retry approach d68907b
  • fix: fixed content-type case-sensitivity (closes #1572) 44fadf9
  • Add mention of bearer auth to docs (#1583) e88a13f
  • Update jQuery in tail.html (#1582) a009ace
  • Revert "Improve .retry() method functionality with delays and prevent calling on successful request (#1527)" 74641bb
  • fix: fixed lint, yarnlock 0c4f96f
  • Improve .retry() method functionality with delays and prevent calling on successful request (#1527) 62eae78
  • fix: fixed travis f8ea331
  • removed extra should from test description (#1581) cc34638

ladjs/superagent@v5.3.1...v6.0.0

v5.3.1

  • Revert "fix: allow unset to prevent some defaults (#1560)" b411b66

ladjs/superagent@v5.3.0...v5.3.1

v5.3.0

  • chore: bump deps 5f7f7ff
  • fix: fixed package.json version per #1564 c067457
  • feature: Support port overrides in connect() (#1564) 7a25f3e
  • fix: ensure node retries happen when using .then syntax (#1487) (#1543) 77bcb11
  • fix: allow unset to prevent some defaults (#1560) afd20c1
  • fix: attach cookies to agent after plugin is used (#1556) 4babc5d
  • fix: a typo in docs (#1549) 5d729bb

ladjs/superagent@v5.2.2...v5.3.0

v5.2.2

  • Fix URI encoding (#1539) c7a10e2
  • Revert "feat: add secure cookie override to agent" (#1537) 40424e6
  • feat: add secure cookie override to agent (#1515) 737697f

ladjs/superagent@v5.2.1...v5.2.2

v5.2.1

  • fix: fixed .buffer prototype in client issue (closes #1517) 639ce2c

ladjs/superagent@v5.2.0...v5.2.1

v5.2.0

... (truncated)

Changelog

Sourced from superagent's changelog.

This HISTORY log is deprecated

Please see GitHub releases page for the current changelog.

4.1.0 (2018-12-26)

  • .connect() IP/DNS override option (Kornel)
  • .trustLocalhost() option for allowing broken HTTPS on localhost
  • .abort() used with promises rejects the promise.

4.0.0 (2018-11-17)

Breaking changes

  • Node.js v4 has reached it's end of life, so we no longer support it. It's v6+ or later. We recommend Node.js 10.
  • We now use ES6 in the browser code, too.
    • If you're using Browserify or Webpack to package code for Internet Explorer, you will also have to use Babel.
    • The pre-built node_modules/superagent.js is still ES5-compatible.
  • .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead.
  • In Node, responses with unknown MIME type are buffered by default. To get old behavior, if you use custom unbuffered parsers, add .buffer(false) to requests or set superagent.buffer[yourMimeType] = false.
  • Invalid uses of .pipe() throw.

Minor changes

  • Throw if req.abort().end() is called
  • Throw if using unsupported mix of send and field
  • Reject .end() promise on all error events (Kornel Lesiński)
  • Set https.servername from the Host header (Kornel Lesiński)
  • Leave backticks unencoded in query strings where possible (Ethan Resnick)
  • Update node-mime to 2.x (Alexey Kucherenko)
  • Allow default buffer settings based on response-type (shrey)
  • response.buffered is more accurate.

3.8.3 (2018-04-29)

  • Add flags for 201 & 422 responses (Nikhil Fadnis)
  • Emit progress event while uploading Node Buffer via send method (Sergey Akhalkov)
  • Fixed setting correct cookies for redirects (Damien Clark)
  • Replace .catch with ['catch'] for IE9 Support (Miguel Stevens)

3.8.2 (2017-12-09)

  • Fixed handling of exceptions thrown from callbacks
  • Stricter matching of +json MIME types.

3.8.1 (2017-11-08)

  • Clear authorization header on cross-domain redirect

... (truncated)

Commits

Updates spotify-web-api-node from 2.5.0 to 5.0.2

Release notes

Sourced from spotify-web-api-node's releases.

v5.0.2

  • Fix #349: Transfer playback options parameter is optional.

v5.0.1

v5.0.0

No release notes provided.

v4.0.0

v3.1.1

  • Modernized stack for a better developer experience. Integrated prettier and jest. This simplifies the amount of dev dependencies.
  • Improved calls to save and remove saved tracks by adding a key as specified in the Spotify docs (See PR). Thanks to @​yanniz0r and @​adcar for bringing it up.

v3.1.0

v3.0.0

New features

Documentation

  • Added documentation in the README for getMyCurrentPlaybackState(). Thanks @​PanMan for your PR!

Internals

  • @​brodin realized we there was a lot of duplicated code and refactored it in a great PR.
Changelog

Sourced from spotify-web-api-node's changelog.

5.0.2 (Jan 2021)

  • Fix: Make transferMyPlayback not require the options object, since it should be optional. Thanks for the heads-up @​Simber1!

5.0.1 (Jan 2021)

  • Fix error handling in the HTTP client. Thanks @​yamadapc!
  • This package can currently not be built on Node 15 on Linux, due to a dependency not being available yet. Issue can be followed on the node-canvas issue tracker. In the mean time, Travis CI will run on earlier versions of Node.

5.0.0 (Oct 2020)

  • BREAKING CHANGES.
    • Arguments for some API methods have changed, causing incorrect behaviour using argument order from version 4.x. See the README.md for examples of how the methods can be used.

      • Create Playlist (createPlaylist) method no longer accepts a userId string as its first argument.
      • Transfer A User's Playback (transferMyPlayback) method takes a deviceIds array as its first argument.
      • Skip to Previous (skipToPrevious) method takes an options object as its first argument.
      • Skip to Next (skipToNext) method takes an options object as its first argument.
      • Set Repeat Mode on the Current User's Playback (setRepeat) method takes a state string as its first argument.
      • Set Shuffle Mode on the Current User's Playback (setShuffle) method takes a state string as its first argument.

      Cheers @​marinacrachi for the createPlaylist update.

    • Removed legacy support for not passing an options object while providing a callback method. This was only supported on a few of the older endpoints, and could lead to tricky bugs. The affected endpoints are getTrack, getTracks, getAlbum, getAlbums, and createPlaylist. Again, check the README.md for examples on how these methods can be used if needed.

    • Removed options argument for retrieving an access token using the Client Credentials flow, clientCredentialsGrant.

    • API errors come in five different flavours.

      • WebapiRegularError - For errors returned by most API endpoints.
      • WebapiPlayerError - For errors returned by the Player API. These contain a bit more information.
      • WebapiAuthenticationError - For errors related to authentication.
      • WebapiError - For errors that come from the Web API that didn't fit into one of the above.
      • TimeoutError - For network timeout errors.

      More importantly, errors now contain the response body, headers, and status code. One side-effect of this is that rate limited requests can be handled by checking the Retry-After header. Thanks for the PRs @​kauffecup, @​lantelyes, @​dkliemsch, and @​erezny.

      Much appreciated @​konstantinjdobler for updates to the Player API errors.

  • Added support for Implicit Grant flow - Thanks @​gaganza, @​reblws and @​noahp78!
  • Starts or Resumes the Current User's Playback (play) method now supports the position_ms option. Thanks @​alqubo, @​koflin, @​DoctorFishy. Thanks @​carmilso for general improvements to the Player API methods.
  • Binding for Add an Item to the User's Playback Queue endpoint added. Thanks @​thattomperson and @​AriciducaZagaria!
  • Binding for all Shows and Episodes endpoints. Thanks a lot @​andyruwruw!
  • Documentation updates to keep up to date with ES6, thanks @​dandv! Other documentation improvements by @​terensu-desu, and examples by @​dersimn. Thanks!
  • Bumped dependencies to resolve critical security issues.
  • Finally, hat off to @​dersimn. Thanks for collecting all of the lingering PRs and merging them into a working and up-to-date fork. You really stepped up.

Likely more changes coming before release to npm, which will happen shortly.

4.0.0 (14 Sep 2018)

  • Modified functions that operate on playlists to drop the user id parameter. This is a breaking change. PR
  • Updated superagent to fix a security warning PR
  • Fixed a bug by which an empty user was not handled properly in getUserPlaylists(). PR

3.1.1 (29 Apr 2018)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [superagent](https://github.com/ladjs/superagent) to 6.1.0 and updates ancestor dependency [spotify-web-api-node](https://github.com/thelinmichael/spotify-web-api-node). These dependencies need to be updated together.


Updates `superagent` from 2.3.0 to 6.1.0
- [Release notes](https://github.com/ladjs/superagent/releases)
- [Changelog](https://github.com/ladjs/superagent/blob/master/HISTORY.md)
- [Commits](ladjs/superagent@v2.3.0...v6.1.0)

Updates `spotify-web-api-node` from 2.5.0 to 5.0.2
- [Release notes](https://github.com/thelinmichael/spotify-web-api-node/releases)
- [Changelog](https://github.com/thelinmichael/spotify-web-api-node/blob/master/CHANGELOG.md)
- [Commits](thelinmichael/spotify-web-api-node@v2.5.0...v5.0.2)

---
updated-dependencies:
- dependency-name: superagent
  dependency-type: indirect
- dependency-name: spotify-web-api-node
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants