chore(deps-dev): bump @changesets/cli from 2.27.1 to 2.27.7

dependabot[bot] commented 5 months ago

Bumps @changesets/cli from 2.27.1 to 2.27.7.

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.27.7

Patch Changes

#1047 d108fa6 Thanks @patzick! - Fixed a crash that could occur when depending on a tagged version of another workspace package.

#1400 dd6e5bb Thanks @Andarist! - Fixed a crash that prevented the CLI from running in a scenario when a workspace depends on the root workspace

Updated dependencies [d108fa6, dd6e5bb, dd6e5bb]:

@changesets/apply-release-plan@7.0.4

@changesets/config@3.0.2

@changesets/get-dependents-graph@2.1.1

@changesets/assemble-release-plan@6.0.3

@changesets/get-release-plan@4.0.3

@changesets/cli@2.27.6

Patch Changes

#1392 f295b3e Thanks @bluwy! - Replace meow dependency with mri to reduce the number of transitive dependencies

#1390 6a3452e Thanks @bluwy! - Display changeset status --verbose in list form and remove tty-table dependency

@changesets/cli@2.27.5

Patch Changes

#1370 5e9d33a Thanks @Andarist! - Fixed a regression that caused changeset version to fail on packages having a dev dependency on a skipped package.

Updated dependencies [5e9d33a]:

@changesets/get-dependents-graph@2.1.0

@changesets/assemble-release-plan@6.0.2

@changesets/config@3.0.1

@changesets/get-release-plan@4.0.2

@changesets/apply-release-plan@7.0.3

@changesets/cli@2.27.4

Patch Changes

#1361 954a16a Thanks @jakebailey! - Version 2.25.0 introduced the privatePackage configuration option with default { version: false, tag: false }; due to a bug, these options were not respected in all commands, leading to commands like changeset tag still tagging private packages. This has been fixed, and all packages now respect this option.

#1369 d729d8c Thanks @Andarist! - changeset tag should now correctly skip tags that exist on the remote

Updated dependencies [954a16a]:

@changesets/assemble-release-plan@6.0.1

@changesets/apply-release-plan@7.0.2

@changesets/get-release-plan@4.0.1

@changesets/cli@2.27.3

Patch Changes

#1357 18c966a Thanks @Andarist! - Fixed an issue with changeset status executed without since argument. It should now correctly use the configured base branch as the default value.

... (truncated)

Commits

b593756 Version Packages (#1398)
d83e458 Update changelog for privatePackage fix (#1402)
dd6e5bb Fixed a crash when root workspace has dependents (#1400)
d108fa6 Fixed a crash when using tag versions of workspace packages (#1047)
a832b64 fix typo in automating-changesets.md (#1155)
b036aae Version Packages (#1393)
6a3452e Remove tty-table dependency (#1390)
f295b3e Replace meow with mri (#1392)
761b2d3 update yarn.lock file for breakword@1.0.6 (#1372)
fcfb0f8 Add FUNDING.json
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

changeset-bot[bot] commented 5 months ago

⚠️ No Changeset found

Latest commit: f923e892c8ff8409b46662c766b049d85df93f1c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security[bot] commented 5 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@changesets/cli@2.27.7	environment, filesystem, shell Transitive: eval, unsafe	`+71`	15.5 MB	changesets-release-bot
npm/plop@4.0.1	environment, unsafe Transitive: filesystem, shell	`+111`	7.12 MB	crutchcorn

🚮 Removed packages: npm/@changesets/cli@2.27.1

View full report↗︎

dependabot[bot] commented 2 months ago

Superseded by #213.

TheSoftwareHouse / react-starter-boilerplate