search

github / codeql-action

Actions for running CodeQL analysis
MIT License
1.12k stars 310 forks source link

Bump the npm group with 5 updates #2291

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the npm group with 5 updates:

Package From To
@octokit/types 13.4.1 13.5.0
semver 7.6.0 7.6.2
@ava/typescript 4.1.0 5.0.0
@typescript-eslint/eslint-plugin 7.8.0 7.9.0
@typescript-eslint/parser 7.8.0 7.9.0

Updates @octokit/types from 13.4.1 to 13.5.0

Release notes

Sourced from @​octokit/types's releases.

v13.5.0

13.5.0 (2024-04-29)

Features

  • add Copilot operations, bump openapi-types version (#638) (69c7f34)
Commits
  • 69c7f34 feat: add Copilot operations, bump openapi-types version (#638)
  • e1d788a ci(action): update actions/checkout digest to 0ad4b8f (#637)
  • 29884bd chore(deps): update dependency json-schema-to-typescript to v14 (#634)
  • 52aaab7 build(deps): lock file maintenance
  • 27d52a8 ci(action): update actions/checkout digest to 1d96c77 (#636)
  • See full diff in compare view


Updates semver from 7.6.0 to 7.6.2

Release notes

Sourced from semver's releases.

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

Changelog

Sourced from semver's changelog.

7.6.2 (2024-05-09)

Bug Fixes

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

Commits
  • eb1380b chore: release 7.6.2 (#714)
  • 6466ba9 fix(lru): use map.delete() directly (#713)
  • d777418 chore: release 7.6.1 (#706)
  • 988a8de deps: uninstall lru-cache (#709)
  • 5feeb7f chore: postinstall for dependabot template-oss PR
  • dd09b60 chore: bump @​npmcli/template-oss to 4.22.0
  • c570a34 fix(linting): no-unused-vars
  • ad8ff11 fix: use internal cache implementation
  • 3fabe4d deps: remove lru-cache
  • ec49cdc chore: chore: chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view


Updates @ava/typescript from 4.1.0 to 5.0.0

Release notes

Sourced from @​ava/typescript's releases.

v5.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/avajs/typescript/compare/v4.1.0...v5.0.0

Commits
  • 851ecc3 5.0.0
  • 55472d8 Include Node.js 22 in supported engines and test matrix
  • 672714f Update dependencies
  • 56e3b15 Upgrade XO and apply fixes
  • 1ae15b2 Restrict compatibility to AVA 6
  • 41d8c6b Upgrade actions
  • bfd7dfa Target same Node.js versions as AVA 6
  • c3d1833 Include Node.js 21 in supported engines and test matrix
  • See full diff in compare view


Updates @typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v7.9.0

7.9.0 (2024-05-13)

🚀 Features

  • rule-tester: check for missing placeholder data in the message (#9039)

🩹 Fixes

  • do not pass tsconfig canonical file name to typescript API to get program details for config file (#9042)
  • eslint-plugin: [explicit-function-return-types] fix false positive on default parameters (#9045)

❤️ Thank You

  • Kirk Waiblinger
  • Sheetal Nandi
  • Vinccool96

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

7.9.0 (2024-05-13)

🩹 Fixes

  • eslint-plugin: [explicit-function-return-types] fix false positive on default parameters

❤️ Thank You

  • Kirk Waiblinger
  • Sheetal Nandi
  • Vinccool96

You can read about our versioning strategy and releases on our website.

Commits
  • 77fc366 chore(release): publish 7.9.0
  • f53fece chore: add knip (#8192)
  • 8acb8d4 fix(eslint-plugin): [explicit-function-return-types] fix false positive on de...
  • d696ea2 docs(eslint-plugin): fix several 404 URLs (#9064)
  • 37a41d9 docs: fix broken link to import/no-duplicates on no-duplicate-imports pag...
  • ab92621 docs: correct its/it's spelling (#9048)
  • f248e68 docs: [no-floating-promises] remove ugly commas (#9034)
  • 6e1241b docs: fix no-unnecessary-boolean-literal-compare example (#8981)
  • See full diff in compare view


Updates @typescript-eslint/parser from 7.8.0 to 7.9.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v7.9.0

7.9.0 (2024-05-13)

🚀 Features

  • rule-tester: check for missing placeholder data in the message (#9039)

🩹 Fixes

  • do not pass tsconfig canonical file name to typescript API to get program details for config file (#9042)
  • eslint-plugin: [explicit-function-return-types] fix false positive on default parameters (#9045)

❤️ Thank You

  • Kirk Waiblinger
  • Sheetal Nandi
  • Vinccool96

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

7.9.0 (2024-05-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | @octokit/types | [< 7, > 6.21.1] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 3 months ago

Pushed a commit to update the checked-in dependencies. Please mark the PR as ready for review to trigger PR checks.

angelapwen commented 3 months ago

It looks like we have some ava compatibility issues here: cc @nickfyson as 🛡️ if you have time to look into this 😄

github-actions[bot] commented 3 months ago

Pushed a commit to update the checked-in dependencies. Please mark the PR as ready for review to trigger PR checks.

nickfyson commented 3 months ago

@dependabot ignore @ava/typescript major version

nickfyson commented 3 months ago

@dependabot recreate

dependabot[bot] commented 3 months ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot[bot] commented 3 months ago

OK, I won't notify you about version 5.x.x of @ava/typescript again, unless you unignore it.

henrymercer commented 3 months ago

@dependabot recreate

dependabot[bot] commented 3 months ago

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

dependabot[bot] commented 3 months ago

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

nickfyson commented 3 months ago

@dependabot reopen

dependabot[bot] commented 3 months ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

nickfyson commented 3 months ago

@dependabot reopen

henrymercer commented 3 months ago

@dependabot ignore @ava/typescript major version

dependabot[bot] commented 3 months ago

OK, I won't notify you about version 5.x.x of @ava/typescript again, unless you unignore it.

henrymercer commented 3 months ago

Can't upgrade @ava/typescript to v5 until CodeQL Action v2 is end of life and we can drop support for Node 16.

dependabot[bot] commented 3 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.