search

brownplt / code.pyret.org

Website for serving Pyret to folks.
Other
24 stars 44 forks source link

Bump semver and heroku #543

Open dependabot[bot] opened 1 month ago

dependabot[bot] commented 1 month ago

Bumps semver to 6.3.1 and updates ancestor dependency heroku. These dependencies need to be updated together.

Updates semver from 5.6.0 to 6.3.1

Release notes

Sourced from semver's releases.

v6.3.1

6.3.1 (2023-07-10)

Bug Fixes

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

6.3.1 (2023-07-10)

Bug Fixes

6.2.0

  • Coerce numbers to strings when passed to semver.coerce()
  • Add rtl option to coerce from right to left

6.1.3

  • Handle X-ranges properly in includePrerelease mode

6.1.2

  • Do not throw when testing invalid version strings

6.1.1

  • Add options support for semver.coerce()
  • Handle undefined version passed to Range.test

6.1.0

  • Add semver.compareBuild function
  • Support * in semver.intersects

6.0

  • Fix intersects logic.

    This is technically a bug fix, but since it is also a change to behavior that may require users updating their code, it is marked as a major version increment.

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates heroku from 7.69.1 to 8.11.5

Release notes

Sourced from heroku's releases.

v8.11.5

  • c5128a7fb chore(auth): update warning copy (#2842)
  • 49c52d0ee fix: add quotation marks around public key in sign/deb script (#2849)
  • c8fa03362 chore: update opentelemetry/instrumentation to 0.50.0 and improve integration test runs (#2834)

v8.11.4

  • 697df3830 chore(telemetry): add environment variable to optionally disable telemetry (#2810)

v8.11.3

  • 33f8aac63 fix(authorizations): surface api warnings in temporary fix (#2804)
  • 381575fba Bump heroku-color (#2797)

v8.11.2

  • 8257348f6 Update description of auth topic (#2792)
  • 3432d7e96 rename vars to secrets (#2790)
  • 4ddead432 chore(auth): update warning message for auth:token (#2750)
  • 2a72431b0 add ChangeManagement environment to CTC check (#2789)
  • d6a201e7b chore(ci) Add ctc check to release and pre-release workflows (#2765)
  • be8d0b61d chore(deps): bump inquirer and @​types/inquirer (#2766)
  • c3d2ea9cc chore(deps-dev): bump standard from 12.0.1 to 17.1.0 (#2701)
  • 95023079c chore(deps): bump semver from 5.6.0 to 7.6.0 (#2619)
  • 89c3169ef fix(workflow): update version output (#2747)
  • 69e04eb91 Update mocha and timeout (#2748)

v8.11.1

  • e0457f217 Remove semver from resolutions & reinstate in /cli package.json (#2743)
  • 853b94f3f fix(ps): update larger dyno checking (#2741)
  • 450aa64a8 chore: remove snyk files and upgrade and resolve dependencies (#2736)

v8.11.0

  • 32e97bb0a Update pg:upgrade description (#2729)
  • 6313a26e1 Update test-installed-cli workflow (#2723)
  • 7428df014 chore(W-15263489): improve unit test performance (#2716)
  • d23407c0e bug(local): Ignore env specification when it's not a file (#2698)
  • 20665ff4c Update apps & pipelines in test installation workflow to fix errors (#2714)
  • de144efeb chore: add initial workflow for updating devcenter documentation (#2703)
  • 3c70a9fc7 Update test_release script (#2704)
  • 748e71c10 fix(workflow): remove fig command & update workflow (#2686)
  • efec0951b fix(cli): use uuid rather than addon name for pg:credentials (#2042)
  • 3c74d2a35 chore: fix spelling (#2694)
  • 728262c44 Update depcheck to 1.4.7 (#2684)
  • d6d15c349 chore: fix empty stampy workflow (#2626)
  • fd574ca03 Switch from --rebase to --ff-only (#2680)
  • 2a4ab7952 Increase network timeout for integration tests (#2682)
  • 62975a001 chore(deps): bump debug and @​types/debug (#2562)
  • 17605c37f chore(deps): bump debug from 4.1.1 to 4.3.1 in /packages/cli (#2544)
  • 536b2ecdf fix(workflow): update fig autocomplete workflow (#2679)
  • 7105fb6b8 feat(workflow): add fig autocomplete workflow (#2666)
  • c062c5909 feat(pg:upgrade): support essential dbs (#2637)
  • bffd99861 Update Mocha to 8.4.0 (#2652)

... (truncated)

Changelog

Sourced from heroku's changelog.

8.11.5 (2024-04-30)

Note: Version bump only for package heroku

8.11.4 (2024-04-16)

Note: Version bump only for package heroku

8.11.3 (2024-04-15)

Bug Fixes

  • authorizations: surface api warnings in temporary fix (#2804) (33f8aac)

8.11.2 (2024-04-10)

Note: Version bump only for package heroku

8.11.1 (2024-03-25)

Note: Version bump only for package heroku

8.11.0 (2024-03-20)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by heroku-front-end, a new releaser for heroku since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/brownplt/code.pyret.org/network/alerts).