search

CVEProject / cve-services

This repo contains the source for the CVE Services API.
Creative Commons Zero v1.0 Universal
150 stars 70 forks source link

Bump vue-template-compiler and depcheck #1259

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 3 months ago

Removes vue-template-compiler. It's no longer used after updating ancestor dependency depcheck. These dependencies need to be updated together.

Removes vue-template-compiler

Updates depcheck from 0.9.2 to 1.4.7

Release notes

Sourced from depcheck's releases.

1.4.7

What's Changed

New Contributors

Full Changelog: https://github.com/depcheck/depcheck/compare/v1.4.6...v1.4.7

1.4.6

v1.4.6 (2023-09-11)

Full Changelog

Closed issues:

  • Add explicitResourceManagement to default TS babel config #833
  • Flag to make logs readable and less verbose #759

Merged pull requests:

  • Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
  • Support projects field in jest configuration #831 (dobesv)
  • Handle scoped package bin with default name #830 (dobesv)
  • feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
  • fix(sass): don't detect transitive dependencies #827 (miluoshi)
  • feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
  • fix(storybook): parse package names out of addons array #825 (miluoshi)

v.1.4.5

See changes in 1.4.4

1.4.4

v1.4.4 (2023-08-21)

Full Changelog

Fixed bugs:

  • Next.js webpack configuration detection failed #805
  • Breaks when using satisfies operator in TypeScript #768
  • Unable to analyze next.config.js in a ESM package #762
  • Suddenly stopped working #750
  • mjs and cjs extensions not detected by default #733
  • Unexpected token '.' #715
  • Depcheck started returning incorrect unused dependencies without any changes #687

... (truncated)

Changelog

Sourced from depcheck's changelog.

v1.4.7 (2023-10-17)

Full Changelog

Fixed bugs:

  • False positive missing dependency with SCSS files on Windows #838
  • A dynamic import with template string literal is not found by depcheck #779

Merged pull requests:

v1.4.6 (2023-09-11)

Full Changelog

Closed issues:

  • Add explicitResourceManagement to default TS babel config #833
  • Flag to make logs readable and less verbose #759

Merged pull requests:

  • Add explicitResourceManagement to TypeScript babel settings #834 (jtbandes)
  • Support projects field in jest configuration #831 (dobesv)
  • Handle scoped package bin with default name #830 (dobesv)
  • feat: add --quiet flag to suppress No depcheck issue messages #829 (openam)
  • fix(sass): don't detect transitive dependencies #827 (miluoshi)
  • feat(tsconfig): support tsconfig.json files with comments #826 (miluoshi)
  • fix(storybook): parse package names out of addons array #825 (miluoshi)

v1.4.5 (2023-08-21)

Full Changelog

v1.4.4 (2023-08-21)

Full Changelog

Fixed bugs:

  • Next.js webpack configuration detection failed #805
  • Missing = Using #794
  • Breaks when using satisfies operator in TypeScript #768
  • Unable to analyze next.config.js in a ESM package #762
  • Suddenly stopped working #750

... (truncated)

Commits
  • b180e2e Merge pull request #843 from legobeat/deps-babel
  • e64e59b bump babel packages to latest
  • b83d38b Merge pull request #836 from dobesv/import-mappings
  • af34e35 Support package.json subpath imports
  • 23b78f0 Merge pull request #835 from seansfkelley/quiet-empty-line
  • 28d8026 --quiet: don't print an empty line if nothing to report
  • 87c35db Merge pull request #801 from legobeat/chore-bump-deps
  • 71faa85 deps: minimatch@^3.0.7->^7.4.6
  • bef30f7 deps: minor/patch bumps
  • 586fd2d apply npm dedupe
  • Additional commits viewable in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/CVEProject/cve-services/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

david-rocca commented 1 month ago

@dependabot rebase