Open renovate[bot] opened 10 months ago
Hey! Changelogs info seems to be missing or might be in incorrect format. Please use the below template in PR description to ensure Changelogg can detect your changes:
- (tag) changelog_text
or
```
- tag: changelog_text
```
**OR**
You can add tag in PR header or while doing a commit too
```
(tag) PR header
```
or
```
tag: PR header
```
Valid tags: **added** / **feat**, **changed**, **deprecated**, **fixed** / **fix**, **removed**, **security**, **build**, **ci**, **chore**, **docs**, **perf**, **refactor**, **revert**, **style**, **test**
Thanks!
For more info, check out [changelogg docs](https://docs.changelogg.io/)
Pull request by bot. No need to analyze
Thanks for opening an issue! Make sure you've followed CONTRIBUTING.md.
Is your PR ready for review and processing? Mark the PR ready by including #pr-ready
in a comment.
If you still have work to do, even after marking this ready. Put the PR on hold by including #pr-onhold
in a comment.
Thanks for the PR!
This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged.
Removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: lint-staged@10.5.4
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎
To accept the risk, merge this PR and you will not be notified again.
Issue | Package | Version | Note | Source |
---|---|---|---|---|
Bin script shell injection | npm | 6.14.12 |
|
This package re-exports a well known shell command via an npm bin script. This is possibly a supply chain attack
Packages should not export bin scripts which conflict with well known shell commands
Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.
If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
@SocketSecurity ignore npm@6.14.12
This PR contains the following updates:
^10.1.6
->^15.0.0
Release Notes
okonet/lint-staged (lint-staged)
### [`v15.2.7`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1527) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.6...v15.2.7) ##### Patch Changes - [#1440](https://togithub.com/lint-staged/lint-staged/pull/1440) [`a51be80`](https://togithub.com/lint-staged/lint-staged/commit/a51be804b63307ac7af3c82f4cb2d43dbe92daac) Thanks [@iiroj](https://togithub.com/iiroj)! - In the previous version the native `git rev-parse --show-toplevel` command was taken into use for resolving the current git repo root. This version drops the `--path-format=absolute` option to support earlier git versions since it's also the default behavior. If you are still having trouble, please try upgrading `git` to the latest version. ### [`v15.2.6`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1526) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.5...v15.2.6) ##### Patch Changes - [#1433](https://togithub.com/lint-staged/lint-staged/pull/1433) [`119adb2`](https://togithub.com/lint-staged/lint-staged/commit/119adb29854cabddbfcf0469d7c8a0126184a5d4) Thanks [@iiroj](https://togithub.com/iiroj)! - Use native "git rev-parse" commands to determine git repo root directory and the .git config directory, instead of using custom logic. This hopefully makes path resolution more robust on non-POSIX systems. ### [`v15.2.5`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1525) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.4...v15.2.5) ##### Patch Changes - [#1424](https://togithub.com/lint-staged/lint-staged/pull/1424) [`31a1f95`](https://togithub.com/lint-staged/lint-staged/commit/31a1f9548ea8202bc5bd718076711f747396e3ca) Thanks [@iiroj](https://togithub.com/iiroj)! - Allow approximately equivalent versions of direct dependencies by using the "~" character in the version ranges. This means a more recent patch version of a dependency is allowed if available. - [#1423](https://togithub.com/lint-staged/lint-staged/pull/1423) [`91abea0`](https://togithub.com/lint-staged/lint-staged/commit/91abea0d298154d92113ba34bae4020704e22918) Thanks [@iiroj](https://togithub.com/iiroj)! - Improve error logging when failing to read or parse a configuration file - [#1424](https://togithub.com/lint-staged/lint-staged/pull/1424) [`ee43f15`](https://togithub.com/lint-staged/lint-staged/commit/ee43f154097753dd5448766f792387e60e0ea453) Thanks [@iiroj](https://togithub.com/iiroj)! - Upgrade micromatch@4.0.7 ### [`v15.2.4`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1524) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.2...v15.2.4) ##### Patch Changes - [`4f4537a`](https://togithub.com/lint-staged/lint-staged/commit/4f4537a75ebfba816826f6f67a325dbc7f25908a) Thanks [@iiroj](https://togithub.com/iiroj)! - Fix release issue with previous version; update dependencies ### [`v15.2.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1522) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.1...v15.2.2) ##### Patch Changes - [#1391](https://togithub.com/lint-staged/lint-staged/pull/1391) [`fdcdad4`](https://togithub.com/lint-staged/lint-staged/commit/fdcdad42ff96fea3c05598e378d3c44ad4a51bde) Thanks [@iiroj](https://togithub.com/iiroj)! - *Lint-staged* no longer tries to load configuration from files that are not checked out. This might happen when using sparse-checkout. ### [`v15.2.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1521) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.2.0...v15.2.1) ##### Patch Changes - [#1387](https://togithub.com/lint-staged/lint-staged/pull/1387) [`e4023f6`](https://togithub.com/lint-staged/lint-staged/commit/e4023f687616dcf4816545b8eefbcce50e255c9c) Thanks [@iiroj](https://togithub.com/iiroj)! - Ignore stdin of spawned commands so that they don't get stuck waiting. Until now, *lint-staged* has used the default settings to spawn linter commands. This means the `stdin` of the spawned commands has accepted input, and essentially gotten stuck waiting. Now the `stdin` is ignored and commands will no longer get stuck. If you relied on this behavior, please open a new issue and describe how; the behavior has not been intended. ### [`v15.2.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1520) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.1.0...v15.2.0) ##### Minor Changes - [#1371](https://togithub.com/lint-staged/lint-staged/pull/1371) [`f3378be`](https://togithub.com/lint-staged/lint-staged/commit/f3378be894fb84800341800b1e4f6f8bc8dfd904) Thanks [@iiroj](https://togithub.com/iiroj)! - Using the `--no-stash` flag no longer discards all unstaged changes to partially staged files, which resulted in inadvertent data loss. This fix is available with a new flag `--no-hide-partially-staged` that is automatically enabled when `--no-stash` is used. ##### Patch Changes - [#1362](https://togithub.com/lint-staged/lint-staged/pull/1362) [`17bc480`](https://togithub.com/lint-staged/lint-staged/commit/17bc480c0f8767407a87527931558de8d1d1551d) Thanks [@antonk52](https://togithub.com/antonk52)! - update lilconfig@3.0.0 - [#1368](https://togithub.com/lint-staged/lint-staged/pull/1368) [`7c55ca9`](https://togithub.com/lint-staged/lint-staged/commit/7c55ca9f410043016e8b33b3b523b9b7e764acf4) Thanks [@iiroj](https://togithub.com/iiroj)! - Update most dependencies - [#1368](https://togithub.com/lint-staged/lint-staged/pull/1368) [`777d4e9`](https://togithub.com/lint-staged/lint-staged/commit/777d4e976852af4c181ffbe055f3531343349695) Thanks [@iiroj](https://togithub.com/iiroj)! - To improve performance, only use `lilconfig` when searching for config files outside the git repo. In the regular case, *lint-staged* finds the config files from the Git index and loads them directly. - [#1373](https://togithub.com/lint-staged/lint-staged/pull/1373) [`85eb0dd`](https://togithub.com/lint-staged/lint-staged/commit/85eb0ddab1eba0c0bcc8cc109e17dc2bbb3d044e) Thanks [@iiroj](https://togithub.com/iiroj)! - When determining git directory, use `fs.realpath()` only for symlinks. It looks like `fs.realpath()` changes some Windows mapped network filepaths unexpectedly, causing issues. ### [`v15.1.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1510) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.0.2...v15.1.0) ##### Minor Changes - [#1344](https://togithub.com/lint-staged/lint-staged/pull/1344) [`0423311`](https://togithub.com/lint-staged/lint-staged/commit/04233115a5e25d6fa7d357cbe9d42173ae8a1acf) Thanks [@danielbayley](https://togithub.com/danielbayley)! - Add support for loading configuration from `package.yaml` and `package.yml` files, supported by `pnpm`. ##### Patch Changes - [#1355](https://togithub.com/lint-staged/lint-staged/pull/1355) [`105d901`](https://togithub.com/lint-staged/lint-staged/commit/105d9012fc92fca549987816406450075cf255f3) Thanks [@iiroj](https://togithub.com/iiroj)! - Suppress some warnings when using the "--quiet" flag ### [`v15.0.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1502) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.0.1...v15.0.2) ##### Patch Changes - [#1339](https://togithub.com/lint-staged/lint-staged/pull/1339) [`8e82364`](https://togithub.com/lint-staged/lint-staged/commit/8e82364dd89155e96de574cfb38a94d28b8635af) Thanks [@iiroj](https://togithub.com/iiroj)! - Update dependencies, including listr2@7.0.2 to fix an upstream issue affecting lint-staged. ### [`v15.0.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1501) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v15.0.0...v15.0.1) ##### Patch Changes - [#1217](https://togithub.com/lint-staged/lint-staged/pull/1217) [`d2e6f8b`](https://togithub.com/lint-staged/lint-staged/commit/d2e6f8b1e1cd84ba6eb2f3f6a7f650c882987041) Thanks [@louneskmt](https://togithub.com/louneskmt)! - Previously it was possible for a function task to mutate the list of staged files passed to the function, and accidentally affect the generation of other tasks. This is now fixed by passing a copy of the original file list instead. ### [`v15.0.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1500) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v14.0.1...v15.0.0) ##### Major Changes - [#1322](https://togithub.com/okonet/lint-staged/pull/1322) [`66b93aa`](https://togithub.com/okonet/lint-staged/commit/66b93aac870d155ca81302b2574617da99409ca7) Thanks [@iiroj](https://togithub.com/iiroj)! - **Require at least Node.js 18.12.0** This release drops support for Node.js 16, which is EOL after 2023-09-11. Please upgrade your Node.js to the latest version. Additionally, all dependencies have been updated to their latest versions. ### [`v14.0.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1401---21-Aug-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v14.0.0...v14.0.1) ##### Bug Fixes - fix reading config from stdin, introduced in v14.0.0 ([#1317](https://togithub.com/okonet/lint-staged/issues/1317)) ([fc3bfea](https://togithub.com/okonet/lint-staged/commit/fc3bfeabae29b65f99b6911a989b0b41d3d1128e)) ### [`v14.0.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1400---13-Aug-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.3.0...v14.0.0) ##### Features - drop support for Node.js 14 ([#1312](https://togithub.com/okonet/lint-staged/issues/1312)) ([9da8777](https://togithub.com/okonet/lint-staged/commit/9da877711a7547b9122c6af91683fb2a2f398184)) ##### BREAKING CHANGES - Please upgrade your Node.js version to at least `16.14.0`. ### [`v13.3.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1330---13-Aug-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.2.3...v13.3.0) ##### Bug Fixes - **dependencies:** update most dependencies ([7443870](https://togithub.com/okonet/lint-staged/commit/7443870b2c24ead8613295cbfa1fe80f96167e1c)) - detect duplicate redundant braces in pattern ([d895aa8](https://togithub.com/okonet/lint-staged/commit/d895aa8382b769f841c6bdc52ba59755bb0ed28b)) ##### Features - **dependencies:** update `listr2@6.6.0` ([09844ca](https://togithub.com/okonet/lint-staged/commit/09844ca3f6b99feba8f3c0ea10e60a6e6df511ad)) ### [`v13.2.3`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1323---28-Jun-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.2.2...v13.2.3) ##### Bug Fixes - the `--diff` option implies `--no-stash` ([66a716d](https://togithub.com/okonet/lint-staged/commit/66a716d5a32c49f03b9a34350fec1b2411bada17)) ### [`v13.2.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1322---26-Apr-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.2.1...v13.2.2) ##### Bug Fixes - **dependencies:** update `yaml@2.2.2` (GHSA-f9xv-q969-pqx4) ([#1290](https://togithub.com/okonet/lint-staged/issues/1290)) ([cf691aa](https://togithub.com/okonet/lint-staged/commit/cf691aa188719d9479ceaeffbffe814594fdb65f)) ### [`v13.2.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1321---07-Apr-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.2.0...v13.2.1) ##### Bug Fixes - ignore "package.json" as config file when it's invalid JSON ([#1281](https://togithub.com/okonet/lint-staged/issues/1281)) ([e7ed6f7](https://togithub.com/okonet/lint-staged/commit/e7ed6f741d2ea0f084b06f3e1ac3d1d57fadf737)) ### [`v13.2.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1320---10-Mar-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/c01d9524f6bcec8180e6f870f0c86ae3f77ab76a...v13.2.0) ##### Bug Fixes - **dependencies:** replace `colorette` with `chalk` for better color support detection ([f598725](https://togithub.com/okonet/lint-staged/commit/f5987252ae59537727a93373b59ab47bc2651a2f)) - use index-based stash references for improved MSYS2 compatibility ([#1270](https://togithub.com/okonet/lint-staged/issues/1270)) ([60fcd99](https://togithub.com/okonet/lint-staged/commit/60fcd99451b88336a05ebbe71cda8909d2733ad7)) ##### Features - version bump only ([#1275](https://togithub.com/okonet/lint-staged/issues/1275)) ([05fb382](https://togithub.com/okonet/lint-staged/commit/05fb3829faa5437276d98450c34699fecfc8c1c8)) ### [`v13.1.4`](https://togithub.com/okonet/lint-staged/compare/da6da00654248c34e4f7ce94f61d68ee46f177a1...c01d9524f6bcec8180e6f870f0c86ae3f77ab76a) [Compare Source](https://togithub.com/okonet/lint-staged/compare/da6da00654248c34e4f7ce94f61d68ee46f177a1...c01d9524f6bcec8180e6f870f0c86ae3f77ab76a) ### [`v13.1.3`](https://togithub.com/okonet/lint-staged/compare/v13.1.2...da6da00654248c34e4f7ce94f61d68ee46f177a1) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.1.2...da6da00654248c34e4f7ce94f61d68ee46f177a1) ### [`v13.1.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1312---13-Feb-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.1.1...v13.1.2) ##### Bug Fixes - disable stash by default when using diff option ([#1259](https://togithub.com/okonet/lint-staged/issues/1259)) ([142c6f2](https://togithub.com/okonet/lint-staged/commit/142c6f225087207ec4c63b7847795857d567ce40)) ### [`v13.1.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1311---07-Feb-2023) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.1.0...v13.1.1) ##### Bug Fixes - allow re-enabling `--stash` when using the `--diff` option ([99390c3](https://togithub.com/okonet/lint-staged/commit/99390c31a856154e380f04d5c3603d2e6428f1e5)) ### [`v13.1.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1310---04-Dec-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.0.4...v13.1.0) ##### Features - expose cli entrance from "lint-staged/bin" ([#1237](https://togithub.com/okonet/lint-staged/issues/1237)) ([eabf1d2](https://togithub.com/okonet/lint-staged/commit/eabf1d217d8bd2559b1087c92b5ec9b15b8ffa7e)) ### [`v13.0.4`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1304---25-Nov-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.0.3...v13.0.4) ##### Bug Fixes - **deps:** update all dependencies ([336f3b5](https://togithub.com/okonet/lint-staged/commit/336f3b513a8b36579165b2e6fb6e7059b988fe84)) - **deps:** update all dependencies ([ec995e5](https://togithub.com/okonet/lint-staged/commit/ec995e53fb173f2863cb3cc08a92ffa9252dc25d)) ### [`v13.0.3`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1303---24-Jun-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.0.2...v13.0.3) ##### Bug Fixes - correctly handle git stash when using MSYS2 ([#1178](https://togithub.com/okonet/lint-staged/issues/1178)) ([0d627a5](https://togithub.com/okonet/lint-staged/commit/0d627a52846d63cd6fc6018a8d7779ef454a99b2)) ### [`v13.0.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1302---16-Jun-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.0.1...v13.0.2) ##### Bug Fixes - use new `--diff` and `--diff-filter` options when checking task modifications ([1a5a66a](https://togithub.com/okonet/lint-staged/commit/1a5a66a9574e2a8b857bd62545a6f2a6da5811aa)) ### [`v13.0.1`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1301---08-Jun-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v13.0.0...v13.0.1) ##### Bug Fixes - correct spelling of "0 files" ([f27f1d4](https://togithub.com/okonet/lint-staged/commit/f27f1d45ea20904e81dda155a802b2eb07d50942)) - suppress error from `process.kill` when killing tasks on failure ([f2c6bdd](https://togithub.com/okonet/lint-staged/commit/f2c6bdd9114a8d5ba8473cc647ef55a6ee5664e1)) - **deps:** update pidtree@^0.6.0 to fix screen size error in WSL ([1a77e42](https://togithub.com/okonet/lint-staged/commit/1a77e4224a273bbc192b654d0a0120187e850a61)) - ignore "No matching pid found" error ([cb8a432](https://togithub.com/okonet/lint-staged/commit/cb8a4328eddbc99a0806276f68b55f6c5ecb3d8a)) - prevent possible race condition when killing tasks on failure ([bc92aff](https://togithub.com/okonet/lint-staged/commit/bc92aff5fdb6293045c556326df3c0529e59b7e3)) ##### Performance Improvements - use `EventsEmitter` instead of `setInterval` for killing tasks on failure ([c508b46](https://togithub.com/okonet/lint-staged/commit/c508b46a153970114495d3f7fef05d45df0f2e10)) ### [`v13.0.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1300---01-Jun-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v12.5.0...v13.0.0) ##### Bug Fixes - **deps:** update `execa@^6.1.0` ([659c85c](https://togithub.com/okonet/lint-staged/commit/659c85c5cd4c4040a505bbe9fddbe7d416ac15c8)) - **deps:** update `yaml@^2.1.1` ([2750a3d](https://togithub.com/okonet/lint-staged/commit/2750a3d9d909fd834b95da752f0f6800340922b7)) ##### Features - remove support for Node.js 12 ([5fb6df9](https://togithub.com/okonet/lint-staged/commit/5fb6df94ccd6de6f5fdd743474c094ff366cc671)) ##### BREAKING CHANGES - `lint-staged` will no longer support Node.js 12, which is EOL since 30 April 2022 ### [`v12.5.0`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#v1250---31-May-2022) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v12.4.3...v12.5.0) ##### Bug Fixes - include all files when using `--configConfiguration
📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.