Closed dependabot[bot] closed 7 months ago
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|
🚮 Removed packages: npm/@commitlint/cli@13.1.0, npm/eslint-plugin-typescript-sort-keys@2.1.0, npm/eslint-plugin-unused-imports@1.1.5, npm/fast-check@2.23.0
Superseded by #1616.
Bumps semver to 7.6.0 and updates ancestor dependencies semver, @commitlint/cli, semantic-release and core-js-compat. These dependencies need to be updated together.
Updates
semver
from 7.3.5 to 7.6.0Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
377f709
chore: release 7.6.0 (#661)a7ab13a
feat: preserve pre-release and build parts of a version on coerce (#671)816c7b2
chore: postinstall for dependabot template-oss PR0bd24d9
chore: bump@npmcli/template-oss
from 4.21.1 to 4.21.3e521932
chore: postinstall for dependabot template-oss PR8873991
chore: chore: chore: postinstall for dependabot template-oss PRf317dc8
chore: bump@npmcli/template-oss
from 4.19.0 to 4.21.07303db1
chore: add clean() test for build metadata (#658)6240d75
chore: add missing quotes in README.md (#656)14d263f
chore: postinstall for dependabot template-oss PRMaintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
@commitlint/cli
from 13.1.0 to 19.0.3Release notes
Sourced from
@commitlint/cli
's releases.... (truncated)
Changelog
Sourced from
@commitlint/cli
's changelog.... (truncated)
Commits
9b4ac34
v19.0.3e538924
v19.0.29351b8e
v19.0.18793c63
fix: dropresolve-from
,resolve-global
andimport-fresh
, resolve global...f1ff121
v19.0.0868983c
docs: use vitepress (#3921)42d90f2
chore: bump ESM only packages and minor version packages (#3927)2816783
Revert "chore!: minimum node version v20"a909634
chore!: minimum node version v203423735
feat!: migrate to pure ESM (#3850)Updates
semantic-release
from 19.0.3 to 23.0.2Release notes
Sourced from semantic-release's releases.
... (truncated)
Commits
38105f5
fix(deps): update dependency marked to v12 (#3176)7fb784f
ci(action): update actions/upload-artifact action to v4.3.1 (#3181)e3245f3
ci(action): update actions/setup-node action to v4.0.2 (#3184)28bcc1d
chore(deps): update dependency prettier to v3.2.5 (#3177)9faded8
fix(deps): update dependency marked-terminal to v7fccab39
chore(deps): lock file maintenance (#3179)6be2280
chore(deps): update dependency got to v14.2.0 (#3175)518b47d
chore(deps): update dependency npm-run-all2 to v6.1.2 (#3171)c6c01aa
ci(action): update github/codeql-action action to v3.24.0 (#3173)ee4f99f
chore(deps): update dependency ava to v6.1.1 (#3168)Updates
core-js-compat
from 3.20.3 to 3.36.0Changelog
Sourced from core-js-compat's changelog.
... (truncated)
Commits
77123c4
3.36.0a3d51ed
fix dependencies loading for modules fromArrayBuffer.prototype.transfer
an...0774eb9
markSymbol.metadata
as supported from Deno 1.40.44c51d71
moveArrayBuffer.prototype.transfer
and friends to stable ES918d4e2
add Safari 17.4 compat data794a736
newSet
methods fixed and marked as supported from V8 ~ Chrome 1236a8dab0
update Electron 30 compat data mappinga2ee3f1
update deno 1.40 compat data mapping: the released 1.40.0 uses v8 12.1b636648
update dependencies1899904
note that deno 1.40 still uses v8 12.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show