ThalKod / discord-clone

A "Discord clone" with Socket.io, Node.js & MongoDB... Create channel, invite other people to your channel, chat with everyone...
MIT License
153 stars 81 forks source link

Bump npm from 6.1.0 to 6.2.0 #36

Closed dependabot-preview[bot] closed 6 years ago

dependabot-preview[bot] commented 6 years ago

Bumps npm from 6.1.0 to 6.2.0.

Release notes *Sourced from [npm's releases](https://github.com/npm/cli/releases).* > ## v6.2.0 > In case you missed it, [we moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We look forward to seeing future PRs landing in [npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with you all in [npm.community](https://npm.community). Go check it out! > > This final release of `npm@6.2.0` includes a couple of features that weren't quite ready on time but that we'd still like to include. Enjoy! > > ### FEATURES > > * [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) [#20554](https://github-redirect.dependabot.com/npm/npm/pull/20554) add support for --parseable output ([[**luislobo**](https://github.com/luislobo)](https://github.com/luislobo)) > * [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) [#12697](https://github-redirect.dependabot.com/npm/npm/pull/12697) Add new `sign-git-commit` config to control whether the git commit itself gets signed, or just the tag (which is the default). ([[**tribou**](https://github.com/tribou)](https://github.com/tribou)) > > ### FIXES > > * [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) [#19418](https://github-redirect.dependabot.com/npm/npm/pull/19418) Do not use `SET` to fetch the env in git-bash or Cygwin. ([[**gucong3000**](https://github.com/gucong3000)](https://github.com/gucong3000)) > > ### DEPENDENCY BUMPS > > * [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) `request@2.81.0`: Downgraded to allow better deduplication. This does introduce a bunch of `hoek`-related audit reports, but they don't affect npm itself so we consider it safe. We'll upgrade `request` again once `node-gyp` unpins it. ([[**simov**](https://github.com/simov)](https://github.com/simov)) > * [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) `node-gyp@3.7.0` ([[**MylesBorins**](https://github.com/MylesBorins)](https://github.com/MylesBorins)) > * [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With this dependency bump, we've removed `lodash` from our tree, which cut back tarball size by another 300kb. ([[**Turbo87**](https://github.com/Turbo87)](https://github.com/Turbo87)) > * [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) `npm-audit-report@1.3.1` ([[**zkat**](https://github.com/zkat)](https://github.com/zkat)) > * [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) Add `cli-table3` to bundleDeps. ([[**iarna**](https://github.com/iarna)](https://github.com/iarna)) > * [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) Make `standard` happy. ([[**iarna**](https://github.com/iarna)](https://github.com/iarna)) > > ### DOCS > > * [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631) [#21165](https://github-redirect.dependabot.com/npm/npm/pull/21165) Fix some markdown formatting in npm-disputes.md. ([[**hchiam**](https://github.com/hchiam)](https://github.com/hchiam)) > * [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171) [#20920](https://github-redirect.dependabot.com/npm/npm/pull/20920) Explicitly state that republishing an unpublished package requires a 72h waiting period. ([[**gmattie**](https://github.com/gmattie)](https://github.com/gmattie)) > * [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) Replace references to the old repo or issue tracker. We're at npm/cli now! ([[**zkat**](https://github.com/zkat)](https://github.com/zkat))
Changelog *Sourced from [npm's changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md).* > ## v6.2.0 (2018-07-13): > > In case you missed it, [we > moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We > look forward to seeing future PRs landing in > [npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with > you all in [npm.community](https://npm.community). Go check it out! > > This final release of `npm@6.2.0` includes a couple of features that weren't > quite ready on time but that we'd still like to include. Enjoy! > > ### FEATURES > > * [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) > [#20554](https://github-redirect.dependabot.com/npm/npm/pull/20554) > add support for --parseable output > ([[**luislobo**](https://github.com/luislobo)](https://github.com/luislobo)) > * [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) > [#12697](https://github-redirect.dependabot.com/npm/npm/pull/12697) > Add new `sign-git-commit` config to control whether the git commit itself gets > signed, or just the tag (which is the default). > ([[**tribou**](https://github.com/tribou)](https://github.com/tribou)) > > ### FIXES > > * [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) > [#19418](https://github-redirect.dependabot.com/npm/npm/pull/19418) > Do not use `SET` to fetch the env in git-bash or Cygwin. > ([[**gucong3000**](https://github.com/gucong3000)](https://github.com/gucong3000)) > > ### DEPENDENCY BUMPS > > * [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) > `request@2.81.0`: Downgraded to allow better deduplication. This does > introduce a bunch of `hoek`-related audit reports, but they don't affect npm > itself so we consider it safe. We'll upgrade `request` again once `node-gyp` > unpins it. > ([[**simov**](https://github.com/simov)](https://github.com/simov)) > * [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) > `node-gyp@3.7.0` > ([[**MylesBorins**](https://github.com/MylesBorins)](https://github.com/MylesBorins)) > * [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) > `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With > this dependency bump, we've removed `lodash` from our tree, which cut back > tarball size by another 300kb. > ([[**Turbo87**](https://github.com/Turbo87)](https://github.com/Turbo87)) > * [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) > `npm-audit-report@1.3.1` > ([[**zkat**](https://github.com/zkat)](https://github.com/zkat)) > * [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) > ... (truncated)
Commits - [`ab3c62a`](https://github.com/npm/cli/commit/ab3c62aa83375a7d4a21e396129ae5679ee86646) 6.2.0 - [`0cfe801`](https://github.com/npm/cli/commit/0cfe801756803f9ddb19f079aaf6010a3e6e57bc) update AUTHORS - [`890c132`](https://github.com/npm/cli/commit/890c132e5cba12803c26fd3e1acd63883fa0c62f) doc: update changelog for npm@6.2.0 - [`7a08a9b`](https://github.com/npm/cli/commit/7a08a9b344a1363cc96ee989d7640252db065653) empty - [`322d9c2`](https://github.com/npm/cli/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) chore: Make standard happy - [`4231a0a`](https://github.com/npm/cli/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) meta: Add cli-table3 to bundledeps - [`f0a372b`](https://github.com/npm/cli/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) docs: replace references to the old repo or issue tracker ([#5](https://github-redirect.dependabot.com/npm/cli/issues/5)) - [`4c32413`](https://github.com/npm/cli/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) run-script: Do not use SET to fetch the env in git-bash or cygwin - [`7984206`](https://github.com/npm/cli/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) version: Add new sign-git-commit config ([#12697](https://github-redirect.dependabot.com/npm/cli/issues/12697)) - [`244b183`](https://github.com/npm/cli/commit/244b18380ee55950b13c293722771130dbad70de) audit: add support for --parseable output ([#20554](https://github-redirect.dependabot.com/npm/cli/issues/20554)) - Additional commits viewable in [compare view](https://github.com/npm/cli/compare/v6.1.0...v6.2.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.