socket-security[bot]
commented
3 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@commitlint/cli@19.2.1 | Transitive: environment, eval, filesystem, shell, unsafe | +118 |
10.4 MB | escapedcat |
| npm/@commitlint/config-conventional@19.1.0 | Transitive: filesystem | +8 |
3.75 MB | escapedcat |
| npm/@typescript-eslint/eslint-plugin@7.4.0 | Transitive: environment, filesystem | +46 |
7.68 MB | jameshenry |
| npm/@typescript-eslint/parser@7.4.0 | Transitive: environment, filesystem | +38 |
2.91 MB | jameshenry |
| npm/adm-zip@0.5.12 | filesystem | 0 |
104 kB | cthackers |
| npm/typescript@5.4.3 | None | 0 |
32.4 MB | typescript-bot |
🚮 Removed packages: npm/@commitlint/cli@19.0.3, npm/@commitlint/config-conventional@19.0.3, npm/@typescript-eslint/eslint-plugin@7.1.0, npm/@typescript-eslint/parser@7.1.0, npm/adm-zip@0.5.10, npm/typescript@5.3.3
dependabot[bot]
Bumps the dev-dependencies group with 6 updates:
19.0.319.2.119.0.319.1.07.1.07.4.07.1.07.4.00.5.100.5.125.3.35.4.3Updates
@commitlint/clifrom 19.0.3 to 19.2.1Release notes
Sourced from
@commitlint/cli's releases.... (truncated)
Changelog
Sourced from
@commitlint/cli's changelog.Commits
172cb52v19.2.1f91d539Fix regression when using --last flag (#3982)a64b417v19.2.099f4f3ffeat(cli): introduce new --last flag, to stop recommending HEAD~1 (#3916)8d7a3d5v19.1.0Updates
@commitlint/config-conventionalfrom 19.0.3 to 19.1.0Release notes
Sourced from
@commitlint/config-conventional's releases.Changelog
Sourced from
@commitlint/config-conventional's changelog.Commits
8d7a3d5v19.1.059bc204Chore/v18 patch merge (#3969)Updates
@typescript-eslint/eslint-pluginfrom 7.1.0 to 7.4.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.... (truncated)
Commits
5d24691chore(release): publish 7.4.0029fc0bfeat(eslint-plugin): deprecate no-throw-literal and add a renamed only-throw-...2a62a40fix(eslint-plugin): [no-unnecessary-type-assertion] avoid remove const castin...990ec22docs: fix example of binding unbound method (#8754)a08554afeat(eslint-plugin): [no-unnecessary-type-arguments] handle tagged templates ...2018f91fix(eslint-plugin): [prefer-optional-chain] properly disambiguate between `bo...56358a6fix(eslint-plugin): [prefer-optional-chain] address multipart nullish checks ...532ae8bdocs: fix typo in switch-exhaustiveness-check (#8768)e408b93feat(eslint-plugin): [consistent-type-imports] ignore files with decorators, ...c787fe4docs: restrict-template-expressions - remove mention of numbers being allowed...Updates
@typescript-eslint/parserfrom 7.1.0 to 7.4.0Release notes
Sourced from
@typescript-eslint/parser's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/parser's changelog.... (truncated)
Commits
5d24691chore(release): publish 7.4.0e408b93feat(eslint-plugin): [consistent-type-imports] ignore files with decorators, ...5995614chore(release): publish 7.3.14cf8ec7chore(release): publish 7.3.0883f220fix: correctengines.nodeconstraints inpackage.json(#8671)95cf139chore(release): publish 7.2.088b7463chore(release): publish 7.1.1Updates
adm-zipfrom 0.5.10 to 0.5.12Release notes
Sourced from adm-zip's releases.
Commits
bd83f19Fixed extraction bug4a684a2Updated package version71a1035Merge pull request #437 from Autokaka/mastera366095Merge pull request #449 from yfdyh000/pr-fixExtrad95c063Merge pull request #451 from likev/patch-1a8f7168Merge pull request #457 from Santa77/master54c3817Merge pull request #472 from 10bitFX/info-zip-password1bfa3bbAdditional test for Info-Zip generated ZipCrypto encrypted file. Relates to I...e1cddb3Add support for Info-Zip password check spec for ZipCrypto. (Uses high byte o...10242c3Merge pull request #469 from kibertoad/chore/gaUpdates
typescriptfrom 5.3.3 to 5.4.3Release notes
Sourced from typescript's releases.
... (truncated)
Commits
6ea273cUpdate LKGcd06f92🤖 Pick PR #57853 (Revert PR 56161) into release-5.4 (#57854)ca8e720Update LKG010b188release-5.4: Revert PR 56087 (#57850)fc7006cUpdate LKGb45a418🤖 Pick PR #57801 (Distribute mapped types over array/...) into release-5.4 (#...609560fBump version to 5.4.3 and LKGf42605f🤖 Pick PR #57746 (Revert "Defer processing of nested ...) into release-5.4 (#...485c7c5Revert "Allow (non-assert) type predicates to narrow by discriminant"… (#57795)7f11456🤖 Pick PR #57751 (Exclude generic string-like types f...) into release-5.4 (#...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show