Automattic / Co-Authors-Plus

Multiple bylines and Guest Authors for WordPress
https://wordpress.org/plugins/co-authors-plus/
GNU General Public License v2.0
290 stars 205 forks source link

Bump node-fetch and @wordpress/scripts #866

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 2 years ago

Bumps node-fetch and @wordpress/scripts. These dependencies needed to be updated together. Updates node-fetch from 2.6.5 to 2.6.7

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

v2.6.6

What's Changed

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

Commits


Updates @wordpress/scripts from 20.0.0 to 24.0.0

Changelog

Sourced from @​wordpress/scripts's changelog.

24.0.0 (2022-08-24)

Breaking Change

  • Increase the minimum Node.js version to 14 and minimum npm version to 6.14.4 (#43141).
  • The bundled @wordpress/eslint-plugin package got updated to the new major version and the default linting for Jest unit tests is now handled in the default config in this package (#43272).

Bug Fix

  • Packages: Replace is-plain-obj with is-plain-object (#43511).

23.7.2 (2022-08-17)

Bug Fix

  • Jest Preset: Improve is-plain-obj transformation ignore (#43271).

23.7.1 (2022-08-12)

Bug Fix

  • Jest Preset: Ignore is-plain-obj transformation (#43179).

23.6.0 (2022-07-27)

Bug Fix

  • Fix the incorrect exit error code when status missing in webpack call for build and start commands (#42396).

23.3.0 (2022-06-15)

Enhancements

  • The bundled wp-prettier dependency has been upgraded from 2.2.1 to 2.6.2 (#40542).

23.2.0 (2022-06-01)

Bug Fix

  • Fix incorrect handling in plugin-zip for root-level files and some specific platform conditions (#41439).

23.1.0 (2022-05-18)

New Feature

  • Enable by default code formatting for JSON files in the format command (#40994). You can opt-out of this behavior by providing a custom file matcher, example: wp-scripts format src/**/*.js.
  • Support tsx files in viewScript, script, editorScript (#41068).

Bug Fixes

... (truncated)

Commits
  • 171b87c chore(release): publish
  • b820929 Update changelog files
  • 4bc7458 Merge changes published in the Gutenberg plugin "release/14.0" branch
  • b5b9cf3 chore(release): publish
  • be84548 Update changelog files
  • 31244eb Jest Preset: Improve is-plain-obj transformation ignore (#43271)
  • e79de3d chore(release): publish
  • cab63ea Jest Preset: Ignore is-plain-obj transformation (#43179)
  • 9b2e84a chore(release): publish
  • eba6de6 Merge changes published in the Gutenberg plugin "release/13.9" branch
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by gutenbergplugin, a new releaser for @​wordpress/scripts since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Automattic/Co-Authors-Plus/network/alerts).