search

advanced-security / spdx-dependency-submission-action

MIT License
12 stars 3 forks source link

chore: bump the development-dependencies group across 1 directory with 3 updates #37

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 6 months ago

Bumps the development-dependencies group with 3 updates in the / directory: eslint, @vercel/ncc and jest.

Updates eslint from 8.40.0 to 9.4.0

Release notes

Sourced from eslint's releases.

v9.4.0

Features

  • 89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)

Bug Fixes

  • f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)
  • 7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)
  • 389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)
  • 70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

Documentation

  • d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)
  • 525fdff docs: fix components files (#18519) (Tanuj Kanti)
  • 80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)
  • f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)

Chores

  • 010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)
  • 5e1b5dc chore: package.json update for @​eslint/js release (Jenkins)
  • 594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)

v9.3.0

Features

  • b32153c feat: add overrides.namedExports to func-style rule (#18444) (Percy Ma)
  • b67eba4 feat: add restrictedNamedExportsPattern to no-restricted-exports (#18431) (Akul Srivastava)
  • 069aa68 feat: add option allowEscape to no-misleading-character-class rule (#18208) (Francesco Trotta)
  • 05ef92d feat: deprecate multiline-comment-style & line-comment-position (#18435) (唯然)
  • db0b174 feat: add enforceForInnerExpressions option to no-extra-boolean-cast (#18222) (Kirk Waiblinger)

Bug Fixes

  • 8db0eff fix: Improve config error messages (#18457) (Nicholas C. Zakas)
  • 5c28d9a fix: don't remove comments between key and value in object-shorthand (#18442) (Kuba Jastrzębski)
  • 39fb0ee fix: object-shorthand loses type parameters when auto-fixing (#18438) (dalaoshu)
  • 37eba48 fix: don't crash when fs.readFile returns promise from another realm (#18416) (Milos Djermanovic)

Documentation

  • ceada8c docs: explain how to use "tsc waiting" label (#18466) (Francesco Trotta)
  • 62e686c docs: Add troubleshooting info for plugin compatibility (#18451) (Nicholas C. Zakas)
  • e17e1c0 docs: Update README (GitHub Actions Bot)
  • 2465a1e docs: Update README (GitHub Actions Bot)
  • d23574c docs: Clarify usage of no-unreachable with TypeScript (#18445) (benj-dobs)
  • 1db9bae docs: Fix typos (#18443) (Frieder Bluemle)
  • 7065196 docs: Update README (GitHub Actions Bot)
  • 04e7c6e docs: update deprecation notice of no-return-await (#18433) (Tanuj Kanti)
  • e763512 docs: Link global ignores section in config object property list (#18430) (MaoShizhong)
  • ac7f718 docs: reflect release of v9 in config migration guide (#18412) (Peter Briggs)
  • 0de0909 docs: fix grammar in configuration file resolution (#18419) (Mike McCready)

Chores

  • 58e2719 chore: update dependencies for v9.3.0 release (#18469) (Francesco Trotta)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.4.0 - May 31, 2024

  • 010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)
  • 5e1b5dc chore: package.json update for @​eslint/js release (Jenkins)
  • d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)
  • 594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)
  • 525fdff docs: fix components files (#18519) (Tanuj Kanti)
  • 89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)
  • 80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)
  • f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)
  • 7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)
  • f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)
  • 389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)
  • 70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

v9.3.0 - May 17, 2024

  • 58e2719 chore: update dependencies for v9.3.0 release (#18469) (Francesco Trotta)
  • b681ecb chore: package.json update for @​eslint/js release (Jenkins)
  • 8db0eff fix: Improve config error messages (#18457) (Nicholas C. Zakas)
  • ceada8c docs: explain how to use "tsc waiting" label (#18466) (Francesco Trotta)
  • b32153c feat: add overrides.namedExports to func-style rule (#18444) (Percy Ma)
  • 06f1d1c chore: update dependency @​humanwhocodes/retry to ^0.3.0 (#18463) (renovate[bot])
  • 5c28d9a fix: don't remove comments between key and value in object-shorthand (#18442) (Kuba Jastrzębski)
  • 62e686c docs: Add troubleshooting info for plugin compatibility (#18451) (Nicholas C. Zakas)
  • e17e1c0 docs: Update README (GitHub Actions Bot)
  • 39fb0ee fix: object-shorthand loses type parameters when auto-fixing (#18438) (dalaoshu)
  • b67eba4 feat: add restrictedNamedExportsPattern to no-restricted-exports (#18431) (Akul Srivastava)
  • 2465a1e docs: Update README (GitHub Actions Bot)
  • d23574c docs: Clarify usage of no-unreachable with TypeScript (#18445) (benj-dobs)
  • 1db9bae docs: Fix typos (#18443) (Frieder Bluemle)
  • 069aa68 feat: add option allowEscape to no-misleading-character-class rule (#18208) (Francesco Trotta)
  • 7065196 docs: Update README (GitHub Actions Bot)
  • 05ef92d feat: deprecate multiline-comment-style & line-comment-position (#18435) (唯然)
  • a63ed72 refactor: Use node: protocol for built-in Node.js modules (#18434) (Milos Djermanovic)
  • 04e7c6e docs: update deprecation notice of no-return-await (#18433) (Tanuj Kanti)
  • e763512 docs: Link global ignores section in config object property list (#18430) (MaoShizhong)
  • 37eba48 fix: don't crash when fs.readFile returns promise from another realm (#18416) (Milos Djermanovic)
  • 040700a chore: update dependency markdownlint-cli to ^0.40.0 (#18425) (renovate[bot])
  • f47847c chore: update actions/stale action to v9 (#18426) (renovate[bot])
  • c18ad25 chore: update actions/upload-artifact action to v4 (#18427) (renovate[bot])
  • 27e3060 chore: Disable documentation label (#18423) (Nicholas C. Zakas)
  • ac7f718 docs: reflect release of v9 in config migration guide (#18412) (Peter Briggs)
  • db0b174 feat: add enforceForInnerExpressions option to no-extra-boolean-cast (#18222) (Kirk Waiblinger)
  • 0de0909 docs: fix grammar in configuration file resolution (#18419) (Mike McCready)

v9.2.0 - May 3, 2024

  • b346605 chore: upgrade @​eslint/js@​9.2.0 (#18413) (Milos Djermanovic)
  • c4c18e0 chore: package.json update for @​eslint/js release (Jenkins)

... (truncated)

Commits


Updates @vercel/ncc from 0.36.1 to 0.38.1

Release notes

Sourced from @​vercel/ncc's releases.

0.38.1

0.38.1 (2023-10-18)

Bug Fixes

0.38.0

0.38.0 (2023-09-06)

Features

0.37.0

0.37.0 (2023-09-06)

Features

  • add support for TypeScript 5.0's array extends in tsconfig (#1105) (f898f8e)
Commits
  • ce5984e fix: sourcemap sources removes webpack path (#1122)
  • f9c1153 chore(deps): Bump amannn/action-semantic-pull-request from 5.2.0 to 5.3.0 (#1...
  • 0bc78fe chore(deps-dev): Bump isomorphic-unfetch from 3.1.0 to 4.0.2 (#1116)
  • 5796c1f chore(deps): Bump word-wrap from 1.2.3 to 1.2.4 (#1094)
  • e2779f4 feat: Log minification error when --debug (#1102)
  • 4a9d97c chore(deps): Bump protobufjs from 6.11.3 to 6.11.4 (#1103)
  • ca70272 chore(deps): bump cookiejar from 2.1.2 to 2.1.4 (#1031)
  • c366ead chore(deps): Bump apollo-server-core from 2.22.1 to 2.26.2 (#1108)
  • f898f8e feat: add support for TypeScript 5.0's array extends in tsconfig (#1105)
  • 2a1437b chore(deps-dev): Bump mongoose from 5.13.15 to 5.13.20 (#1093)
  • Additional commits viewable in compare view


Updates jest from 29.4.2 to 29.7.0

Release notes

Sourced from jest's releases.

v29.7.0

Features

  • [create-jest] Add npm init / yarn create initialiser for Jest projects (#14465)
  • [jest-validate] Allow deprecation warnings for unknown options (#14499)

Fixes

  • [jest-resolver] Replace unmatched capture groups in moduleNameMapper with empty string instead of undefined (#14507)
  • [jest-snapshot] Allow for strings as well as template literals in inline snapshots (#14465)
  • [@jest/test-sequencer] Calculate test runtime if perStats.duration is missing (#14473)

Performance

  • [@jest/create-cache-key-function] Cache access of NODE_ENV and BABEL_ENV (#14455)

Chore & Maintenance

  • [jest-cli] Move internal config initialisation logic to the create-jest package (#14465)

New Contributors

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.4...v29.7.0

v29.6.4

Fixes

  • [jest-core] Fix typo in scheduleAndRun performance marker (#14434)
  • [jest-environment-node] Make sure atob and btoa are writeable in Node 20 (#14446)
  • [jest-worker] Additional error wrapper for parentPort.postMessage to fix unhandled DataCloneError. (#14437)

New Contributors

Full Changelog: https://github.com/jestjs/jest/compare/v29.6.3...v29.6.4

v29.6.3

Fixes

  • [expect, @jest/expect-utils] ObjectContaining support symbol as key (#14414)
  • [expect] Remove @types/node from dependencies (#14385)
  • [jest-core] Use workers in watch mode by default to avoid crashes (#14059 & #14085).
  • [jest-reporters] Update istanbul-lib-instrument dependency to v6. (#14401)
  • [jest-mock] Revert #13692 as it was a breaking change (#14429)
  • [jest-mock] Revert #13866 as it was a breaking change (#14429)

... (truncated)

Changelog

Sourced from jest's changelog.

29.7.0

Features

  • [create-jest] Add npm init / yarn create initialiser for Jest projects (#14465)
  • [jest-validate] Allow deprecation warnings for unknown options (#14499)

Fixes

  • [jest-resolver] Replace unmatched capture groups in moduleNameMapper with empty string instead of undefined (#14507)
  • [jest-snapshot] Allow for strings as well as template literals in inline snapshots (#14465)
  • [@jest/test-sequencer] Calculate test runtime if perStats.duration is missing (#14473)

Performance

  • [@jest/create-cache-key-function] Cache access of NODE_ENV and BABEL_ENV (#14455)

Chore & Maintenance

  • [jest-cli] Move internal config initialisation logic to the create-jest package (#14465)

29.6.4

Fixes

  • [jest-core] Fix typo in scheduleAndRun performance marker (#14434)
  • [jest-environment-node] Make sure atob and btoa are writeable in Node 20 (#14446)
  • [jest-worker] Additional error wrapper for parentPort.postMessage to fix unhandled DataCloneError. (#14437)

29.6.3

Fixes

  • [expect, @jest/expect-utils] ObjectContaining support sumbol as key (#14414)
  • [expect] Remove @types/node from dependencies (#14385)
  • [jest-core] Use workers in watch mode by default to avoid crashes (#14059 & #14085).
  • [jest-reporters] Update istanbul-lib-instrument dependency to v6. (#14401)
  • [jest-mock] Revert #13692 as it was a breaking change (#14429)
  • [jest-mock] Revert #13866 as it was a breaking change (#14429)
  • [jest-mock] Revert #13867 as it was a breaking change (#14429)
  • [@jest/reporters] Marks Reporter's hooks as optional (#14433)
  • [jest-runtime] Fix dynamic ESM import module bug when loaded module through jest.isolateModulesAsync (#14397)

Chore & Maintenance

  • [jest-changed-files, jest-circus, jest-console, @jest/core, @jest/runtime, @jest/transform] Use invariant and notEmpty from jest-util rather than own internal (#14366)

29.6.2

Fixes

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 6 months ago

Dependabot tried to add @lseppala, @courtneycl and @advanced-security/oss-maintainers as reviewers to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/advanced-security/spdx-dependency-submission-action/pulls/37/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the advanced-security/spdx-dependency-submission-action repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request
dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.