chris48s / v8r

✔️ A command-line JSON, YAML and TOML validator that's on your wavelength
https://chris48s.github.io/v8r/
MIT License
29 stars 5 forks source link

Bump cosmiconfig from 8.1.0 to 8.1.3 #292

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps cosmiconfig from 8.1.0 to 8.1.3.

Changelog

Sourced from cosmiconfig's changelog.

8.1.3

  • Fixed: existence of meta config breaking default loaders

8.1.2

  • Fixed: generation of TypeScript types going to the wrong output path

8.1.1

  • Fixed: meta config overriding original options completely (now merges correctly)
Commits
  • dee5198 8.1.3
  • a181b86 update changelog
  • 71051b3 remove mergeLoaders option (always merge loaders)
  • a003583 update changelog for 8.1.2
  • 49b1586 8.1.2
  • 22b4ea1 fix types build
  • 193cb57 8.1.1
  • 17f5edc merge cosmiconfig options from meta config file into original options rather ...
  • dacce13 Merge pull request #294 from beerose/migrate-to-vitest
  • e1194d5 properly resolve imports with typescript
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
codecov-commenter commented 1 year ago

Codecov Report

Merging #292 (47fafb6) into main (c6e55f6) will not change coverage. The diff coverage is n/a.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##             main     #292   +/-   ##
=======================================
  Coverage   95.32%   95.32%           
=======================================
  Files          11       11           
  Lines         792      792           
  Branches      180      180           
=======================================
  Hits          755      755           
  Misses         36       36           
  Partials        1        1           

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more

chris48s commented 1 year ago

@dependabot rebase

socket-security[bot] commented 1 year ago

New dependency changes detected. Learn more about Socket for GitHub ↗︎


👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

⬆️ Updated Package Version Diff Added Capability Access +/- Transitive Count Publisher
cosmiconfig@8.1.3 8.1.0...8.1.3 None +0/-0 d-fischer