Closed renovate[bot] closed 3 months ago
This PR contains the following updates:
^13.6.0
^17.0.0
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
^13.6.0
->^17.0.0
Release Notes
npm/pacote (pacote)
### [`v17.0.6`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1706-2024-01-16) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.5...v17.0.6) ##### Dependencies - [`0a5920f`](https://togithub.com/npm/pacote/commit/0a5920f8f8c5907b62ec0f80d11b4c3b9df24a18) [#343](https://togithub.com/npm/pacote/pull/343) bump sigstore from 2.0.0 to 2.2.0 ([#343](https://togithub.com/npm/pacote/issues/343)) ([@bdehamer](https://togithub.com/bdehamer)) ##### Chores - [`6fd23ad`](https://togithub.com/npm/pacote/commit/6fd23ad232035edc3624e74d4558ee18ce562bdd) [#342](https://togithub.com/npm/pacote/pull/342) postinstall for dependabot template-oss PR ([@lukekarrys](https://togithub.com/lukekarrys)) - [`c3b398a`](https://togithub.com/npm/pacote/commit/c3b398a4c646e1e202cb6f42ce846a81f4e5ddb5) [#342](https://togithub.com/npm/pacote/pull/342) bump [@npmcli/template-oss](https://togithub.com/npmcli/template-oss) from 4.21.1 to 4.21.3 ([@dependabot](https://togithub.com/dependabot)\[bot]) - [`4557919`](https://togithub.com/npm/pacote/commit/45579193a63fb7547c696ddd6bd17dd0b29ed989) [#337](https://togithub.com/npm/pacote/pull/337) postinstall for dependabot template-oss PR ([@lukekarrys](https://togithub.com/lukekarrys)) - [`c7e293c`](https://togithub.com/npm/pacote/commit/c7e293c98c9cad47e96572d5e1321b77d26c4bb9) [#337](https://togithub.com/npm/pacote/pull/337) bump [@npmcli/template-oss](https://togithub.com/npmcli/template-oss) from 4.19.0 to 4.21.1 ([@dependabot](https://togithub.com/dependabot)\[bot]) ### [`v17.0.5`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1705-2023-12-01) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.4...v17.0.5) ##### Bug Fixes - [`0c96b9e`](https://togithub.com/npm/pacote/commit/0c96b9e825806441e043fbf97f167be3e9f5479d) [#338](https://togithub.com/npm/pacote/pull/338) bug to support rotated keys in signature/attestation audit ([#338](https://togithub.com/npm/pacote/issues/338)) ([@feelepxyz](https://togithub.com/feelepxyz)) ### [`v17.0.4`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1704-2023-08-30) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.3...v17.0.4) ##### Dependencies - [`ba8f790`](https://togithub.com/npm/pacote/commit/ba8f790ca27c753921d5cef08512705b50de12e8) [#309](https://togithub.com/npm/pacote/pull/309) bump [@npmcli/promise-spawn](https://togithub.com/npmcli/promise-spawn) from 6.0.2 to 7.0.0 - [`2c0d3ae`](https://togithub.com/npm/pacote/commit/2c0d3ae6beaffcc849bebb1a45d6ba46cf3ce433) [#308](https://togithub.com/npm/pacote/pull/308) bump [@npmcli/run-script](https://togithub.com/npmcli/run-script) from 6.0.2 to 7.0.0 ### [`v17.0.3`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1703-2023-08-24) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.2...v17.0.3) ##### Dependencies - [`ace7c28`](https://togithub.com/npm/pacote/commit/ace7c283c424b12ec18c9b412515fe750538f0d9) [#305](https://togithub.com/npm/pacote/pull/305) bump npm-packlist from 7.0.4 to 8.0.0 ### [`v17.0.2`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1702-2023-08-18) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.1...v17.0.2) ##### Dependencies - [`c3b892d`](https://togithub.com/npm/pacote/commit/c3b892db8b889e43d8f385ee1171e2e36a5b32eb) [#303](https://togithub.com/npm/pacote/pull/303) bump sigstore from 1.3.0 to 2.0.0 ### [`v17.0.1`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1701-2023-08-15) [Compare Source](https://togithub.com/npm/pacote/compare/v17.0.0...v17.0.1) ##### Dependencies - [`6ddae13`](https://togithub.com/npm/pacote/commit/6ddae13dd4cd346255221077d13fa534ed924f63) [#302](https://togithub.com/npm/pacote/pull/302) bump npm-registry-fetch from 15.0.0 to 16.0.0 - [`42bf787`](https://togithub.com/npm/pacote/commit/42bf787be1af58050edd38ab599bb74021b88dbf) [#300](https://togithub.com/npm/pacote/pull/300) bump npm-pick-manifest from 8.0.2 to 9.0.0 ### [`v17.0.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1700-2023-08-15) [Compare Source](https://togithub.com/npm/pacote/compare/v16.0.0...v17.0.0) ##### ⚠️ BREAKING CHANGES - support for node <=16.13 has been removed ##### Bug Fixes - [`2db2fb5`](https://togithub.com/npm/pacote/commit/2db2fb520b54a3a486c92f141a86c31910a5fa73) [#296](https://togithub.com/npm/pacote/pull/296) drop node 16.13.x support ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Dependencies - [`e9e964b`](https://togithub.com/npm/pacote/commit/e9e964b5facbf4eb1229ec17e9da3ebeaffc7fe0) [#299](https://togithub.com/npm/pacote/pull/299) bump read-package-json from 6.0.4 to 7.0.0 - [`5d26500`](https://togithub.com/npm/pacote/commit/5d26500d32bc379a26c42b7e107c9bb28dac5389) [#298](https://togithub.com/npm/pacote/pull/298) bump npm-package-arg from 10.1.0 to 11.0.0 - [`d13bb9c`](https://togithub.com/npm/pacote/commit/d13bb9c5f174f38c419bb9701efe1bd9eef27a91) [#294](https://togithub.com/npm/pacote/pull/294) bump [@npmcli/git](https://togithub.com/npmcli/git) from 4.1.0 to 5.0.0 - [`7a25e39`](https://togithub.com/npm/pacote/commit/7a25e396b6ca6a54da9724726e1da4fdd5a95ea5) [#293](https://togithub.com/npm/pacote/pull/293) bump cacache from 17.1.4 to 18.0.0 ### [`v16.0.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1600-2023-07-28) [Compare Source](https://togithub.com/npm/pacote/compare/v15.2.0...v16.0.0) ##### ⚠️ BREAKING CHANGES - the underlying fetch module now uses `@npmcli/agent`. Backwards compatibility should be fully implemented but due to the scope of this change it was made a breaking change out of an abundance of caution. - support for node 14 has been removed ##### Bug Fixes - [`73b6297`](https://togithub.com/npm/pacote/commit/73b62976054951b683a5c4c5f511d39f818641e4) [#290](https://togithub.com/npm/pacote/pull/290) drop node14 support ([#290](https://togithub.com/npm/pacote/issues/290)) ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`8dc6a32`](https://togithub.com/npm/pacote/commit/8dc6a32a22d76028f9802fbe8920ec0911d3981a) bump minipass from 5.0.0 to 7.0.2 - [`7cebf19`](https://togithub.com/npm/pacote/commit/7cebf194afb45e6aa8d44150b94984c75a3a5e08) bump npm-registry-fetch from 14.0.5 to 15.0.0 ### [`v15.2.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1520-2023-05-03) [Compare Source](https://togithub.com/npm/pacote/compare/v15.1.3...v15.2.0) ##### Features - [`3307ad9`](https://togithub.com/npm/pacote/commit/3307ad9c1600b6a60b2250c2239240ac41fc7b07) [#278](https://togithub.com/npm/pacote/pull/278) configurable TUF cache dir ([#278](https://togithub.com/npm/pacote/issues/278)) ([@bdehamer](https://togithub.com/bdehamer)) ### [`v15.1.3`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1513-2023-04-27) [Compare Source](https://togithub.com/npm/pacote/compare/v15.1.2...v15.1.3) ##### Dependencies - [`c99db13`](https://togithub.com/npm/pacote/commit/c99db13ef65d44ad94a87d3cd54c7a1d79ca07e3) [#271](https://togithub.com/npm/pacote/pull/271) bump minipass from 4.2.7 to 5.0.0 ([#271](https://togithub.com/npm/pacote/issues/271)) ### [`v15.1.2`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1512-2023-04-20) [Compare Source](https://togithub.com/npm/pacote/compare/v15.1.1...v15.1.2) ##### Documentation - [`43363dd`](https://togithub.com/npm/pacote/commit/43363dd5d3002d16297b20d3fa3c29c25b177402) [#266](https://togithub.com/npm/pacote/pull/266) update dist details ([#266](https://togithub.com/npm/pacote/issues/266)) ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`d5cb3df`](https://togithub.com/npm/pacote/commit/d5cb3dfbe5838aaa48bc8937681b0a9addcfae47) [#276](https://togithub.com/npm/pacote/pull/276) `sigstore@1.3.0` ([#276](https://togithub.com/npm/pacote/issues/276)) - [`c231986`](https://togithub.com/npm/pacote/commit/c231986cd7a473f79add65b433e43bd7a5f9f25f) [#267](https://togithub.com/npm/pacote/pull/267) sigstore@^1.1.0 ### [`v15.1.1`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1511-2023-02-21) [Compare Source](https://togithub.com/npm/pacote/compare/v15.1.0...v15.1.1) ##### Bug Fixes - [`8f4e39c`](https://togithub.com/npm/pacote/commit/8f4e39c72e41c8a307db2cff4e7cf9f6e630e3e2) [#261](https://togithub.com/npm/pacote/pull/261) always ignore ownership from tar headers ([#261](https://togithub.com/npm/pacote/issues/261)) ([@nlf](https://togithub.com/nlf)) ### [`v15.1.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1510-2023-02-13) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.8...v15.1.0) ##### Features - [`2916b72`](https://togithub.com/npm/pacote/commit/2916b725c3c2bdd661874ad1c54eefd10398bc46) [#259](https://togithub.com/npm/pacote/pull/259) verifyAttestations to registry.manifest ([@feelepxyz](https://togithub.com/feelepxyz), [@bdehamer](https://togithub.com/bdehamer)) ##### Dependencies - [`f0bd19b`](https://togithub.com/npm/pacote/commit/f0bd19b425be18a007538aa8cb6b55b0afc35cbe) add sigstore 1.0.0 ### [`v15.0.8`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1508-2022-12-14) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.7...v15.0.8) ##### Dependencies - [`40aa6fe`](https://togithub.com/npm/pacote/commit/40aa6fe9055f3fe673fda7032c7da8958d3f574d) [#253](https://togithub.com/npm/pacote/pull/253) bump fs-minipass from 2.1.0 to 3.0.0 ### [`v15.0.7`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1507-2022-12-07) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.6...v15.0.7) ##### Dependencies - [`a734d61`](https://togithub.com/npm/pacote/commit/a734d61379c3b5690ad2e10d382dc5486b93266b) [#250](https://togithub.com/npm/pacote/pull/250) bump minipass from 3.3.6 to 4.0.0 ### [`v15.0.6`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1506-2022-11-02) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.5...v15.0.6) ##### Dependencies - [`dbbda43`](https://togithub.com/npm/pacote/commit/dbbda43a22fdbbc3a9c09273beaf316c0de3d4aa) [#246](https://togithub.com/npm/pacote/pull/246) `@npmcli/run-script@6.0.0` ### [`v15.0.5`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1505-2022-11-01) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.4...v15.0.5) ##### Dependencies - [`63797a8`](https://togithub.com/npm/pacote/commit/63797a8cb64b6979dcc9f4fd59cdf5fd5d7d65ad) [#244](https://togithub.com/npm/pacote/pull/244) bump [@npmcli/promise-spawn](https://togithub.com/npmcli/promise-spawn) from 5.0.0 to 6.0.1 ([#244](https://togithub.com/npm/pacote/issues/244)) ### [`v15.0.4`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1504-2022-10-26) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.3...v15.0.4) ##### Dependencies - [`854fad1`](https://togithub.com/npm/pacote/commit/854fad16afe96737abe0f6a4583aef2b962929f1) [#239](https://togithub.com/npm/pacote/pull/239) bump [@npmcli/promise-spawn](https://togithub.com/npmcli/promise-spawn) from 4.0.0 to 5.0.0 ([#239](https://togithub.com/npm/pacote/issues/239)) ### [`v15.0.3`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1503-2022-10-19) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.2...v15.0.3) ##### Dependencies - [`2a95ddb`](https://togithub.com/npm/pacote/commit/2a95ddbbf9f859140e3d4225a3404c16bcb6b785) [#235](https://togithub.com/npm/pacote/pull/235) bump [@npmcli/installed-package-contents](https://togithub.com/npmcli/installed-package-contents) ([#235](https://togithub.com/npm/pacote/issues/235)) ### [`v15.0.2`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1502-2022-10-18) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.1...v15.0.2) ##### Bug Fixes - [`95f9cd5`](https://togithub.com/npm/pacote/commit/95f9cd514d9ab5b1fc0605de7fed76e6f467fbd2) handle new npm-package-arg semantics ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`2ed4d22`](https://togithub.com/npm/pacote/commit/2ed4d22ee7a489f05eaacae3ce30619ef455de71) `npm-package-arg@10.0.0` ### [`v15.0.1`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1501-2022-10-17) [Compare Source](https://togithub.com/npm/pacote/compare/v15.0.0...v15.0.1) ##### Dependencies - [`74821c2`](https://togithub.com/npm/pacote/commit/74821c26a19e025c5eeb24a6dacb20bc9cb7dfcc) [#229](https://togithub.com/npm/pacote/pull/229) bump [@npmcli/run-script](https://togithub.com/npmcli/run-script) from 4.2.1 to 5.0.0 ([#229](https://togithub.com/npm/pacote/issues/229)) - [`a9844d0`](https://togithub.com/npm/pacote/commit/a9844d047c4c8633e9caab25e69143b737880fe4) [#226](https://togithub.com/npm/pacote/pull/226) bump [@npmcli/promise-spawn](https://togithub.com/npmcli/promise-spawn) from 3.0.0 to 4.0.0 ([#226](https://togithub.com/npm/pacote/issues/226)) - [`1058177`](https://togithub.com/npm/pacote/commit/1058177e43cd9b8af8cdb097b8efe403b45a70d3) [#227](https://togithub.com/npm/pacote/pull/227) bump read-package-json from 5.0.2 to 6.0.0 - [`0f5ef8a`](https://togithub.com/npm/pacote/commit/0f5ef8afb359bf461c2b3a6b0fb6cb983a58a83f) [#228](https://togithub.com/npm/pacote/pull/228) bump [@npmcli/installed-package-contents](https://togithub.com/npmcli/installed-package-contents) from 1.0.7 to 2.0.0 - [`7e3b4b5`](https://togithub.com/npm/pacote/commit/7e3b4b5e4cb48a5304ac850d9cc66c9aee046b41) [#220](https://togithub.com/npm/pacote/pull/220) bump ssri from 9.0.1 to 10.0.0 - [`4e7536d`](https://togithub.com/npm/pacote/commit/4e7536d3dc3c2cd5db2defbe5b5d0e2e2e686dfd) [#222](https://togithub.com/npm/pacote/pull/222) bump [@npmcli/git](https://togithub.com/npmcli/git) from 3.0.2 to 4.0.0 - [`3bc7550`](https://togithub.com/npm/pacote/commit/3bc75501972833f707ffac4219ef57ed43e51e77) [#223](https://togithub.com/npm/pacote/pull/223) bump npm-pick-manifest from 7.0.2 to 8.0.0 - [`41fab27`](https://togithub.com/npm/pacote/commit/41fab27f1d42d78fc2e46e271461c5a066cb170d) [#224](https://togithub.com/npm/pacote/pull/224) bump proc-log from 2.0.1 to 3.0.0 - [`4abf24a`](https://togithub.com/npm/pacote/commit/4abf24ac8bdf698a9fcbf085e629d6f4e0981f1e) [#218](https://togithub.com/npm/pacote/pull/218) bump npm-registry-fetch from 13.3.1 to 14.0.0 ([#218](https://togithub.com/npm/pacote/issues/218)) ### [`v15.0.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1500-2022-10-13) [Compare Source](https://togithub.com/npm/pacote/compare/v14.0.0...v15.0.0) ##### ⚠️ BREAKING CHANGES - this package no longer attempts to change file ownership automatically ##### Features - [`43ae022`](https://togithub.com/npm/pacote/commit/43ae02203f04fd597a6d73f0a8bb4e639986e62e) [#216](https://togithub.com/npm/pacote/pull/216) do not alter file ownership ([#216](https://togithub.com/npm/pacote/issues/216)) ([@nlf](https://togithub.com/nlf)) ##### Dependencies - [`2ac3980`](https://togithub.com/npm/pacote/commit/2ac39808b135987eb9e1f0200212c64cbf77973c) [#213](https://togithub.com/npm/pacote/pull/213) bump read-package-json-fast from 2.0.3 to 3.0.0 ### [`v14.0.0`](https://togithub.com/npm/pacote/blob/HEAD/CHANGELOG.md#1400-2022-10-05) [Compare Source](https://togithub.com/npm/pacote/compare/v13.6.2...v14.0.0) ##### Features - [`ee16f1f`](https://togithub.com/npm/pacote/commit/ee16f1f44a8a3510b8ac8c49f207d3e01d1db96e) [#207](https://togithub.com/npm/pacote/pull/207) set as release ([@fritzy](https://togithub.com/fritzy))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.