socket-security[bot]
commented
2 weeks ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/npm-run-all2@7.0.1 | environment, filesystem Transitive: shell | +16 |
457 kB | bret |
🚮 Removed packages: npm/npm-run-all2@6.2.6
Bumps npm-run-all2 from 6.2.6 to 7.0.1.
Release notes
Sourced from npm-run-all2's releases.
Changelog
Sourced from npm-run-all2's changelog.
Commits
43bfd547.0.1b2e849bRevert engine range bump back to Node 181a2f0a17.0.0b300a1fMerge remote-tracking branch 'origin/dependabot/npm_and_yarn/minimatch-10.0.1'4be26c5Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/which-5.0.0'3f28b19Merge pull request #158 from bcomnes/fix-undefined-throwb0f342ePrevent a throw when looking up undefined resultsc661ffcMerge pull request #156 from bcomnes/rm-rf-rimrafb667e23Upgrade: Bump which from 3.0.1 to 5.0.0c989293Upgrade: Bump minimatch from 9.0.5 to 10.0.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show