Repository: facebook/react
Pull request: Bump ecstatic from 2.2.1 to 2.2.2 in /scripts/bench

Bumps [ecstatic](https://github.com/jfhbrook/node-ecstatic) from 2.2.1 to 2.2.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jfhbrook/node-ecstatic/blob/2.2.2/CHANGELOG.md">ecstatic's changelog</a>.</em></p>
<blockquote>
<p>2019/05/03 Version 2.2.2</p>
<ul>
<li>Backport redirects bugfix</li>
</ul>
<p>2017/06/06 Version 2.2.1</p>
<ul>
<li>Fix version number in CHANGELOG.md</li>
</ul>
<p>2017/06/06 Version 2.2.0</p>
<ul>
<li>Will now properly serve gzip files when defaulting the extension</li>
<li>Will fall back to serving non-gzip files if file with .gz extension is
missing the magic bytes</li>
<li>Updated he, url-join</li>
<li>Updated devDependencies</li>
<li>Added .npmrc</li>
<li>Added package-lock.json</li>
<li>Much improved documentation for the cli component</li>
</ul>
<p>2016/08/10 Version 2.1.0</p>
<ul>
<li>New, prettier showDir pages with icons!</li>
</ul>
<p>2016/08/09 Version 2.0.0</p>
<ul>
<li>No longer strip null bytes from uris before parsing. This avoids a regexp dos
attack. The stripping was to avoid a bug regarding c++ null terminated
strings shenanigans in some versions of node, but it <em>appears</em> fixed in LTS
versions of node.</li>
<li>When both showDir and autoIndex are turned off, do not redirect from /foo to
/foo/.</li>
<li>Add code coverage reports and codecov.io</li>
</ul>
<p>2015/05/10 Version 1.4.1</p>
<ul>
<li>Compare if-modified-since header against server-generated last-modified
header rather than raw mtime</li>
</ul>
<p>2015/12/22 Version 1.4.0</p>
<ul>
<li>Add ability to specify custom mimetypes via a JSON blob (on the CLI)</li>
<li>Started test suite around CLI options parsing</li>
<li>Workaround for egregious v8 bug around date parsing throwing during
modified-since checks</li>
</ul>
<p>2015/11/15 Version 1.3.1</p>
<ul>
<li>Add recent contributors to CONTRIBUTORS.md</li>
<li>Document showDotFiles in main options example</li>
</ul>
<p>2015/11/14 Version 1.3.0</p>
<ul>
<li>opts.showDotFiles allows hiding dot files</li>
</ul>
<p>2015/11/03 Version 1.2.0</p>
<ul>
<li>opts.cache supports function argument</li>
</ul>
<p>2015/10/03 Version 1.1.3</p>
<ul>
<li>Add CORS=false to defaults</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jfhbrook/node-ecstatic/commit/709c0f09a419ebb3419eeb969b4ba987dc3b547a"><code>709c0f0</code></a> Release 2.2.2</li>
<li><a href="https://github.com/jfhbrook/node-ecstatic/commit/4e2a944445727294421ded2f8549714d9b29d6f7"><code>4e2a944</code></a> Backport redirect vuln fix</li>
<li>See full diff in <a href="https://github.com/jfhbrook/node-ecstatic/compare/2.2.1...2.2.2">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~jfhbrook">jfhbrook</a>, a new releaser for ecstatic since your current version.</p>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ecstatic&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/react/network/alerts).

</details>

Changed files:
filename: scripts/bench/yarn.lock
patch: @@ -446,8 +446,9 @@ ecc-jsbn@~0.1.1:
     jsbn "~0.1.0"
 
 ecstatic@^2.0.0:
-  version "2.2.1"
-  resolved "https://registry.yarnpkg.com/ecstatic/-/ecstatic-2.2.1.tgz#b5087fad439dd9dd49d31e18131454817fe87769"
+  version "2.2.2"
+  resolved "https://registry.yarnpkg.com/ecstatic/-/ecstatic-2.2.2.tgz#1c7969b7a8893a04852e9373edeeb1d62809d393"
+  integrity sha512-F1g29y3I+abOS+M0AiK2O9R96AJ49Bc3kH696HtqnN+CL3YhpUnSzHNoUBQL03qDsN9Lr1XeKIxTqEH3BtiBgg==
   dependencies:
     he "^1.1.1"
     mime "^1.2.11"
@@ -640,8 +641,9 @@ hawk@~3.1.3:
     sntp "1.x.x"
 
 he@^1.1.1:
-  version "1.1.1"
-  resolved "https://registry.yarnpkg.com/he/-/he-1.1.1.tgz#93410fd21b009735151f8868c2f271f3427e23fd"
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f"
+  integrity sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==
 
 hoek@2.x.x:
   version "2.16.3"
@@ -988,8 +990,9 @@ mime-types@^2.1.12, mime-types@~2.1.7:
     mime-db "~1.29.0"
 
 mime@^1.2.11, mime@^1.3.6:
-  version "1.3.6"
-  resolved "https://registry.yarnpkg.com/mime/-/mime-1.3.6.tgz#591d84d3653a6b0b4a3b9df8de5aa8108e72e5e0"
+  version "1.6.0"
+  resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
+  integrity sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==
 
 mimic-fn@^1.0.0:
   version "1.2.0"
@@ -1007,9 +1010,9 @@ minimist@0.0.8:
   resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
 
 minimist@^1.1.0, minimist@^1.2.0, minimist@^1.2.3:
-  version "1.2.3"
-  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.3.tgz#3db5c0765545ab8637be71f333a104a965a9ca3f"
-  integrity sha512-+bMdgqjMN/Z77a6NlY/I3U5LlRDbnmaAk6lDveAPKwSpcPM4tKAuYsvYF8xjhOPXhOYGe/73vVLVez5PW+jqhw==
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602"
+  integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==
 
 minimist@~0.0.1:
   version "0.0.10"
@@ -1622,8 +1625,9 @@ update-notifier@^2.1.0:
     xdg-basedir "^3.0.0"
 
 url-join@^2.0.2:
-  version "2.0.2"
-  resolved "https://registry.yarnpkg.com/url-join/-/url-join-2.0.2.tgz#c072756967ad24b8b59e5741551caac78f50b8b7"
+  version "2.0.5"
+  resolved "https://registry.yarnpkg.com/url-join/-/url-join-2.0.5.tgz#5af22f18c052a000a48d7b82c5e9c2e2feeda728"
+  integrity sha1-WvIvGMBSoACkjXuCxenC4v7tpyg=
 
 url-parse-lax@^1.0.0:
   version "1.0.0"