NewFuture / miniprogram-network

Redefine the Network API of Wechat MiniProgram (小程序网络库)
https://miniprogram-network.newfuture.cc
Apache License 2.0
113 stars 11 forks source link

build(deps): bump glob-parent and lerna #59

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps glob-parent and lerna. These dependencies needed to be updated together. Updates glob-parent from 3.1.0 to 5.1.2

Release notes

Sourced from glob-parent's releases.

v5.1.2

Bug Fixes

v5.1.1

Bug Fixes

v5.1.0

Features

  • add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

v5.0.0

⚠ BREAKING CHANGES

  • Drop support for node <6 & bump dependencies

Miscellaneous Chores

  • Drop support for node <6 & bump dependencies (896c0c0)

v4.0.0

⚠ BREAKING CHANGES

  • question marks are valid path characters on Windows so avoid flagging as a glob when alone
  • Update is-glob dependency

Features

  • hoist regexps and strings for performance gains (4a80667)
  • question marks are valid path characters on Windows so avoid flagging as a glob when alone (2a551dd)
  • Update is-glob dependency (e41fcd8)
Changelog

Sourced from glob-parent's changelog.

5.1.2 (2021-03-06)

Bug Fixes

6.0.2 (2021-09-29)

Bug Fixes

6.0.1 (2021-07-20)

Bug Fixes

  • Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a)

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

  • Correct mishandled escaped path separators (#34)
  • upgrade scaffold, dropping node <10 support

Bug Fixes

  • Correct mishandled escaped path separators (#34) (32f6d52), closes #32

Miscellaneous Chores

  • upgrade scaffold, dropping node <10 support (e83d0c5)

5.1.1 (2021-01-27)

Bug Fixes

5.1.0 (2021-01-27)

Features

  • add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

5.0.0 (2021-01-27)

⚠ BREAKING CHANGES

  • Drop support for node <6 & bump dependencies

... (truncated)

Commits
  • eb2c439 chore: update changelog
  • 12bcb6c chore: release 5.1.2
  • f923116 fix: eliminate ReDoS (#36)
  • 0b014a7 chore: add JSDoc returns information (#33)
  • 2b24ebd chore: generate initial changelog
  • 9b6e874 chore: release 5.1.1
  • 749c35e ci: try wrapping the JOB_ID in a string
  • 5d39def ci: attempt to switch to published coveralls
  • 0b5b37f ci: put the npm step back in for only Windows
  • 473f5d8 ci: update azure build images
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by phated, a new releaser for glob-parent since your current version.


Updates lerna from 3.22.1 to 5.5.1

Release notes

Sourced from lerna's releases.

v5.5.1

5.5.1 (2022-09-09)

Bug Fixes

  • core: prevent validation error in version/publish with workspace: prefix (#3322) (746ce33)
  • run: exclude dependencies with --scope when nx.json is not present (#3316) (99a13a9)

v5.5.0

5.5.0 (2022-08-31)

Bug Fixes

  • version: only update existing lockfile deps (#3308) (f5c8480)

Features

v5.4.3

5.4.3 (2022-08-16)

Bug Fixes

  • version: ignore npm lifecycle scripts on package lock update (#3295) (1ba2b8a)

v5.4.2

5.4.2 (2022-08-14)

Bug Fixes

  • version: update package-lock at the root if it exists (#3290) (7f62bab)

v5.4.1

5.4.1 (2022-08-12)

Bug Fixes

v5.4.0

... (truncated)

Changelog

Sourced from lerna's changelog.

5.5.1 (2022-09-09)

Bug Fixes

  • run: exclude dependencies with --scope when nx.json is not present (#3316) (99a13a9)

5.5.0 (2022-08-31)

Features

Reverts

5.4.3 (2022-08-16)

Note: Version bump only for package lerna

5.4.2 (2022-08-14)

Note: Version bump only for package lerna

5.4.1 (2022-08-12)

Note: Version bump only for package lerna

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jameshenry, a new releaser for lerna since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/NewFuture/miniprogram-network/network/alerts).