Skip to content

Bump async, sharedb and portfinder - #115

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-f8ffef6f98
Open

Bump async, sharedb and portfinder#115
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-f8ffef6f98

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps async to 3.2.6 and updates ancestor dependencies async, sharedb and portfinder. These dependencies need to be updated together.

Updates async from 2.6.2 to 3.2.6

Changelog

Sourced from async's changelog.

v3.2.5

  • Ensure Error objects such as AggregateError are propagated without modification (#1920)

v3.2.4

  • Fix a bug in priorityQueue where it didn't wait for the result. (#1725)
  • Fix a bug where unshiftAsync was included in priorityQueue. (#1790)

v3.2.3

  • Fix bugs in comment parsing in autoInject. (#1767, #1780)

v3.2.2

  • Fix potential prototype pollution exploit

v3.2.1

v3.2.0

  • Fix a bug in Safari related to overwriting func.name
  • Remove built-in browserify configuration (#1653)
  • Varios doc fixes (#1688, #1703, #1704)

v3.1.1

  • Allow redefining name property on wrapped functions.

v3.1.0

  • Added q.pushAsync and q.unshiftAsync, analagous to q.push and q.unshift, except they always do not accept a callback, and reject if processing the task errors. (#1659)
  • Promises returned from q.push and q.unshift when a callback is not passed now resolve even if an error ocurred. (#1659)
  • Fixed a parsing bug in autoInject with complicated function bodies (#1663)
  • Added ES6+ configuration for Browserify bundlers (#1653)
  • Various doc fixes (#1664, #1658, #1665, #1652)

v3.0.1

Bug fixes

  • Fixed a regression where arrays passed to queue and cargo would be completely flattened. (#1645)
  • Clarified Async's browser support (#1643)

v3.0.0

The async/await release!

There are a lot of new features and subtle breaking changes in this major version, but the biggest feature is that most Async methods return a Promise if you omit the callback, meaning you can await them from within an async function.

</tr></table>

... (truncated)

Commits
  • 85fb18f Version 3.2.6
  • 8c0c941 Update built files
  • 5f756b4 Fix ReDoS (#1980)
  • 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
  • 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
  • 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
  • afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
  • 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
  • 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
  • f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
  • Additional commits viewable in compare view

Updates sharedb from 1.0.0-beta.23 to 6.0.1

Release notes

Sourced from sharedb's releases.

v6.0.1

v6.0.0

  • Drop Node.js v20 from test matrix; add v26
  • share/sharedb#709 — Fix fetching snapshot by timestamp if timestamp after current, and ops have been TTLed (@​alecgibson)

v5.2.2

v5.2.1

v5.2.0

v5.1.1

v5.1.0

v5.0.4

v5.0.3

v5.0.2

v5.0.1

v5.0.0

  • BREAKING: Drop Node.js v16 support
  • share/sharedb#652 — Allow deleting ops in MemoryDb

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Changelog

Sourced from sharedb's changelog.

v2.0

Breaking changes

  • Drop Node.js v10 support

v1.0-beta

Breaking changes

  • Add options argument to all public database adapter methods that read or write from snapshots or ops.

  • DB methods that get snapshots or ops no longer return metadata unless {metadata: true} option is passed.

  • Replace source argument with options in doc methods. Use options.source instead.

  • Backend streams now write objects intead of strings.

  • MemoryDB.prototype._querySync now returns {snapshots: ..., extra: ...} instead of just an array of snapshots.

Non-breaking changes

  • Add options argument to backend.submit.

  • Add error codes to all errors.

  • Add 'updated' event on queries which fires on all query result changes.

  • In clients, wrap errors in Error objects to they get passed through event emitters.

  • Sanitize stack traces when sending errors to client, but log them on the server.

v0.11.37

Beginning of changelog.

If you're upgrading from ShareJS 0.7 or earlier, take a look at the ShareJS upgrade guide.

Commits
  • 56615cd 6.0.1
  • d40284a Merge pull request #714 from share/fix-remote-doc-presence-prototype-mutation
  • 78a0df8 🐛 Assign presence handlers to RemoteDocPresence prototype
  • 754ffdf Merge pull request #713 from share/dependabot/npm_and_yarn/sinon-22.0.0
  • f2c3b0a Bump sinon from 21.1.2 to 22.0.0
  • 4457e8e Merge pull request #712 from share/add-dependabot-npm
  • 5544f7a 👷‍♀️ Tell Dependabot to also bump npm dependencies
  • 1894df4 Merge pull request #710 from share/dependabot/github_actions/actions/checkout-7
  • d886d54 Bump actions/checkout from 6 to 7
  • dbdb5bc Merge pull request #711 from share/dependabot/bundler/docs/concurrent-ruby-1.3.7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by alecgibson, a new releaser for sharedb since your current version.


Updates portfinder from 1.0.20 to 1.0.38

Release notes

Sourced from portfinder's releases.

v1.0.38

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.37...v1.0.38

v1.0.37

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.36...v1.0.37

v1.0.36

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.35...v1.0.36

v1.0.35

What's Changed

Full Changelog: http-party/node-portfinder@v1.0.34...v1.0.35

v1.0.34

What's Changed

New Contributors

Full Changelog: http-party/node-portfinder@v1.0.33...v1.0.34

v1.0.33

What's Changed

... (truncated)

Commits
  • 072d5fd Release v1.0.38
  • 29e88af Merge pull request #182 from MasterOdin/fix-package-json-author
  • c3dcbc1 Fix author field format in package.json
  • f317e11 Release v1.0.37
  • 2110ec1 Merge pull request #180 from MasterOdin/fix-error-thorws
  • e0081a0 Release v1.0.36
  • 6634e09 Return callback error vs throwing
  • 0f01a6f Merge pull request #179 from MasterOdin/feat-socket-promise
  • f4e9d55 Add promise return for getSocket
  • 29e4173 Merge pull request #177 from http-party/fix-start-port-external-api
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump async, sharedb and portfinder
cdd0590 
Bumps [async](https://github.com/caolan/async) to 3.2.6 and updates ancestor dependencies [async](https://github.com/caolan/async), [sharedb](https://github.com/share/sharedb) and [portfinder](https://github.com/http-party/node-portfinder). These dependencies need to be updated together.


Updates `async` from 2.6.2 to 3.2.6
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/master/CHANGELOG.md)
- [Commits](caolan/async@v2.6.2...v3.2.6)

Updates `sharedb` from 1.0.0-beta.23 to 6.0.1
- [Release notes](https://github.com/share/sharedb/releases)
- [Changelog](https://github.com/share/sharedb/blob/master/CHANGELOG.md)
- [Commits](share/sharedb@v1.0.0-beta.23...v6.0.1)

Updates `portfinder` from 1.0.20 to 1.0.38
- [Release notes](https://github.com/http-party/node-portfinder/releases)
- [Commits](http-party/node-portfinder@v1.0.20...v1.0.38)

---
updated-dependencies:
- dependency-name: async
  dependency-version: 3.2.6
  dependency-type: indirect
- dependency-name: sharedb
  dependency-version: 6.0.1
  dependency-type: direct:production
- dependency-name: portfinder
  dependency-version: 1.0.38
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants