Closed dependabot[bot] closed 1 year ago
Merging #292 (47fafb6) into main (c6e55f6) will not change coverage. The diff coverage is
n/a
.
:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more
@@ Coverage Diff @@
## main #292 +/- ##
=======================================
Coverage 95.32% 95.32%
=======================================
Files 11 11
Lines 792 792
Branches 180 180
=======================================
Hits 755 755
Misses 36 36
Partials 1 1
:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more
@dependabot rebase
New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
---|---|---|---|---|
cosmiconfig@8.1.3 | 8.1.0...8.1.3 | None | +0/-0 |
d-fischer |
Bumps cosmiconfig from 8.1.0 to 8.1.3.
Changelog
Sourced from cosmiconfig's changelog.
Commits
dee5198
8.1.3a181b86
update changelog71051b3
remove mergeLoaders option (always merge loaders)a003583
update changelog for 8.1.249b1586
8.1.222b4ea1
fix types build193cb57
8.1.117f5edc
merge cosmiconfig options from meta config file into original options rather ...dacce13
Merge pull request #294 from beerose/migrate-to-viteste1194d5
properly resolve imports with typescriptYou can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)