Closed dependabot[bot] closed 7 months ago
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/cosmiconfig@9.0.0 | filesystem Transitive: environment, unsafe | +23 |
895 kB | d-fischer |
🚮 Removed packages: npm/cosmiconfig@8.3.6
@dependabot rebase
All modified and coverable lines are covered by tests :white_check_mark:
Comparison is base (
10b335d
) 95.75% compared to head (79247bc
) 95.75%.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
@dependabot rebase
Bumps cosmiconfig from 8.3.6 to 9.0.0.
Changelog
Sourced from cosmiconfig's changelog.
Commits
006fc0b
9.0.0d4de473
update changelog for new version8bf59fc
make changelog leaner again0555009
chore: remove release-please5839d5e
9.0.0-alpha.37fcf489
chore: update lock fileb8b412f
chore: remove unnecessary dev packagesbb3ebba
chore: replace path-type package with own utility functions76d26bd
9.0.0-alpha.2559ed70
feat: load config from package.yamlYou can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show