janbiasi / rollup-plugin-sbom

Create SBOMs in CycloneDX format for your Vite or Rollup projects with ease
MIT License
4 stars 1 forks source link

fix: bump the npm group across 1 directory with 16 updates #79

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 1 month ago

Bumps the npm group with 16 updates in the / directory:

Package From To
@cyclonedx/cyclonedx-library 6.5.1 6.9.5
normalize-package-data 6.0.0 6.0.1
@commitlint/cli 19.2.2 19.3.0
@types/node 20.12.7 20.14.0
@typescript-eslint/eslint-plugin 6.12.0 7.11.0
@typescript-eslint/parser 6.12.0 7.11.0
@vitest/coverage-v8 1.5.0 1.6.0
ajv 8.12.0 8.14.0
eslint 8.54.0 9.4.0
fast-xml-parser 4.3.6 4.4.0
lint-staged 15.2.2 15.2.5
prettier 3.2.5 3.3.0
rollup 4.14.3 4.18.0
semantic-release 23.0.8 24.0.0
vitest 1.5.0 1.6.0
@vitejs/plugin-react 4.2.0 4.3.0

Updates @cyclonedx/cyclonedx-library from 6.5.1 to 6.9.5

Release notes

Sourced from @​cyclonedx/cyclonedx-library's releases.

6.9.5

Maintenance release.

Chore

  • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078


What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.9.0...v6.9.5

6.9.4-beta.0

No release notes provided.

6.9.3-beta.1

No release notes provided.

6.9.3-beta.0

No release notes provided.

6.9.2-beta.0

No release notes provided.

6.9.0

Changed

  • Updated SPDX license list to v3.24.0 (via #1077)

#1077: CycloneDX/cyclonedx-javascript-library#1077


What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.8.2...v6.9.0

6.8.2

Fixed

  • Added Factories.PackageUrlFactory's generic type's default back in (via #1076)

#1076: CycloneDX/cyclonedx-javascript-library#1076


... (truncated)

Changelog

Sourced from @​cyclonedx/cyclonedx-library's changelog.

6.9.5 -- 2024-05-23

Maintenance release.

  • Chore
    • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078

6.9.0 -- 2024-05-23

  • Changed
    • Updated SPDX license list to v3.24.0 (via #1077)

#1077: CycloneDX/cyclonedx-javascript-library#1077

6.8.2 -- 2024-05-21

  • Fixed
    • Added Factories.PackageUrlFactory's generic type's default back in (via #1076)

#1076: CycloneDX/cyclonedx-javascript-library#1076

6.8.1 -- 2024-05-21

  • Fixed
    • Hardened Factories.FromNodePackageJson.PackageUrlFactory's default package repository detection (#1073 via #1074)

#1073: CycloneDX/cyclonedx-javascript-library#1073 #1074: CycloneDX/cyclonedx-javascript-library#1074

6.8.0 -- 2024-05-14

  • Added
    • Explicitly export own first-level submodules via package manifest (via #1066)
      When used with bundlers/packers downstream, this might enable better tree shaking due to scoped imports.
  • Refactor
    • Ease internal tree shaking (via #1066)

#1066: CycloneDX/cyclonedx-javascript-library#1066

6.7.2 -- 2024-05-07

  • Changed
    • The provided XML validation capabilities were explicitly hardened (via #1064; concerns #1061)
      This is considered a security measure concerning XML external entity (XXE) injection.

#1061: CycloneDX/cyclonedx-javascript-library#1061 #1064: CycloneDX/cyclonedx-javascript-library#1064

... (truncated)

Commits


Updates normalize-package-data from 6.0.0 to 6.0.1

Release notes

Sourced from normalize-package-data's releases.

v6.0.1

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Changelog

Sourced from normalize-package-data's changelog.

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Commits
  • 335a295 chore: release 6.0.1 (#219)
  • 27688b4 fix(linting): no-unused-vars
  • 02de832 chore: postinstall for dependabot template-oss PR
  • 3c74f51 chore: bump @​npmcli/template-oss to 4.22.0
  • c367107 chore: postinstall for dependabot template-oss PR
  • f6b1f8c chore: bump @​npmcli/template-oss from 4.21.3 to 4.21.4
  • c5b90cd docs(readme): fix broken badge URL (#214)
  • d3bfe73 chore: postinstall for dependabot template-oss PR
  • a80c4a4 chore: bump @​npmcli/template-oss from 4.21.1 to 4.21.3
  • 5c121d5 chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view


Updates @commitlint/cli from 19.2.2 to 19.3.0

Release notes

Sourced from @​commitlint/cli's releases.

v19.3.0

19.3.0 (2024-04-23)

Features

Chore

New Contributors

Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v19.2.2...v19.3.0

Changelog

Sourced from @​commitlint/cli's changelog.

19.3.0 (2024-04-23)

Note: Version bump only for package @​commitlint/cli

Commits


Updates @types/node from 20.12.7 to 20.14.0

Commits


Updates @typescript-eslint/eslint-plugin from 6.12.0 to 7.11.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v7.11.0

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment (#9081)

🩹 Fixes

  • ast-spec: add EmptyStatement to Statement (#8892)
  • eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions (#8826)
  • typescript-estree: truncate number of files printed by the maximum file error (#9127)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.10.0

7.10.0 (2024-05-20)

🚀 Features

  • eslint-plugin: [sort-type-constituents] support case sensitive sorting (#8760)

🩹 Fixes

  • eslint-plugin: [prefer-regexp-exec] fix heuristic to check whether regex may contain global flag (#8764)
  • typescript-estree: don't add in-project files to defaultProjectMatchedFiles (#9097)
  • utils: remove function form type from flat config files and ignores (#9111)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.9.0

7.9.0 (2024-05-13)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment

🩹 Fixes

  • eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions

❤️ Thank You

  • Abraham Guo
  • auvred
  • Dom Armstrong
  • Kirk Waiblinger

You can read about our versioning strategy and releases on our website.

7.10.0 (2024-05-20)

🚀 Features

  • eslint-plugin: [sort-type-constituents] support case sensitive sorting

🩹 Fixes

  • eslint-plugin: [prefer-regexp-exec] fix heuristic to check whether regex may contain global flag

❤️ Thank You

  • auvred
  • Emanuel Hoogeveen
  • jsfm01
  • Kirk Waiblinger

You can read about our versioning strategy and releases on our website.

7.9.0 (2024-05-13)

🩹 Fixes

  • eslint-plugin: [explicit-function-return-types] fix false positive on default parameters

... (truncated)

Commits
  • e360541 chore(release): publish 7.11.0
  • b230385 feat(eslint-plugin): deprecate prefer-ts-expect-error in favor of ban-ts-comm...
  • 3461f45 test(eslint-plugin): [consistent-type-assertions] add missing output: null ...
  • 342b873 fix(eslint-plugin): [consistent-type-assertions] prevent syntax errors on arr...
  • b5ce43b chore(eslint-plugin): replaced map/reduce with flatMap in normalizedOptions i...
  • c18226e chore(release): publish 7.10.0
  • 8d92ba8 docs: [no-floating-promises] fix capitalization typo (#9118)
  • d951d83 fix(eslint-plugin): [prefer-regexp-exec] fix heuristic to check whether regex...
  • 987a96e feat(eslint-plugin): [sort-type-constituents] support case sensitive sorting ...
  • 77fc366 chore(release): publish 7.9.0
  • Additional commits viewable in compare view


Updates @typescript-eslint/parser from 6.12.0 to 7.11.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v7.11.0

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment (#9081)

🩹 Fixes

  • ast-spec: add EmptyStatement to Statement (#8892)
  • eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions (#8826)
  • typescript-estree: truncate number of files printed by the maximum file error (#9127)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.10.0

7.10.0 (2024-05-20)

🚀 Features

  • eslint-plugin: [sort-type-constituents] support case sensitive sorting (#8760)

🩹 Fixes

  • eslint-plugin: [prefer-regexp-exec] fix heuristic to check whether regex may contain global flag (#8764)
  • typescript-estree: don't add in-project files to defaultProjectMatchedFiles (#9097)
  • utils: remove function form type from flat config files and ignores (#9111)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.9.0

7.9.0 (2024-05-13)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

7.11.0 (2024-05-27)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.10.0 (2024-05-20)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.9.0 (2024-05-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.8.0 (2024-04-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.7.1 (2024-04-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.7.0 (2024-04-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.6.0 (2024-04-08)

🚀 Features

  • bump npm dependency ranges

❤️ Thank You

  • Abraham Guo
  • auvred
  • Brad Zacher

... (truncated)

Commits


Updates @vitest/coverage-v8 from 1.5.0 to 1.6.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v1.6.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v1.5.3

   🐞 Bug Fixes

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

    View changes on GitHub

v1.5.1

   🚀 Features

... (truncated)

Commits
  • 6b29f3d chore: release v1.6.0
  • c9883f3 fix(coverage): apply vite-node's wrapper only to executed files (#5642)
  • a52964b chore: release v1.5.3
  • 81f57f4 chore: release v1.5.2
  • 1be4510 chore: release v1.5.1
  • 80265b4 fix(coverage): thresholds to compare files relative to root (#5574)
  • ea3c16e fix(coverage): prevent crash when cleanOnRerun is disabled (#5540)
  • See full diff in compare view


Updates ajv from 8.12.0 to 8.14.0

Release notes

Sourced from ajv's releases.

v8.14.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.13.0...v8.14.0

v8.13.0

  • add named exports
  • update dependencies
  • update node.js
Commits


Updates eslint from 8.54.0 to 9.4.0

Release notes

Sourced from eslint's releases.

v9.4.0

Features

  • 89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)

Bug Fixes

  • f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)
  • 7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)
  • 389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)
  • 70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

Documentation

  • d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)
  • 525fdff docs: fix components files (#18519) (Tanuj Kanti)
  • 80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)
  • f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)

Chores

  • 010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)
  • 5e1b5dc chore: package.json update for @​eslint/js release (Jenkins)
  • 594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)

v9.3.0

Features

  • b32153c feat: add overrides.namedExports to func-style rule (#18444) (Percy Ma)
  • b67eba4 feat: add restrictedNamedExportsPattern to no-restricted-exports (#18431) (Akul Srivastava)
  • 069aa68 feat: add option allowEscape to no-misleading-character-class rule (#18208) (Francesco Trotta)
  • 05ef92d feat: deprecate multiline-comment-style & line-comment-position (#18435) (唯然)
  • db0b174 feat: add enforceForInnerExpressions option to no-extra-boolean-cast (#18222) (Kirk Waiblinger)

Bug Fixes

  • 8db0eff fix: Improve config error messages (#18457) (Nicholas C. Zakas)
  • 5c28d9a fix: don't remove comments between key and value in object-shorthand (#18442) (Kuba Jastrzębski)
  • 39fb0ee fix: object-shorthand loses type parameters when auto-fixing (#18438) (dalaoshu)
  • 37eba48 fix: don't crash when fs.readFile returns promise from another realm (#18416) (Milos Djermanovic)

Documentation

  • ceada8c docs: explain how to use "tsc waiting" label (#18466) (Francesco Trotta)
  • 62e686c docs: Add troubleshooting info for plugin compatibility (#18451) (Nicholas C. Zakas)
  • e17e1c0 docs: Update README (GitHub Actions Bot)
  • 2465a1e docs: Update README (GitHub Actions Bot)
  • d23574c docs: Clarify usage of no-unreachable with TypeScript (#18445) (benj-dobs)
  • 1db9bae docs: Fix typos (#18443) (Frieder Bluemle)
  • 7065196 docs: Update README (GitHub Actions Bot)
  • 04e7c6e docs: update deprecation notice of no-return-await (#18433) (Tanuj Kanti)
  • e763512 docs: Link global ignores section in config object property list (#18430) (MaoShizhong)
  • ac7f718 docs: reflect release of v9 in config migration guide (#18412) (Peter Briggs)
  • 0de0909 docs: fix grammar in configuration file resolution (#18419) (Mike McCready)

Chores

  • 58e2719 chore: update dependencies for v9.3.0 release (#18469) (Francesco Trotta)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.4.0 - May 31, 2024

  • 010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)
  • 5e1b5dc chore: package.json update for @​eslint/js release (Jenkins)
  • d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)
  • 594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)
  • 525fdff docs: fix components files (#18519) (Tanuj Kanti)
  • 89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)
  • 80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)
  • f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)
  • 7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)
  • f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)
  • 389744b fix: use @eslint/config-inspector@latest (
    dependabot[bot] commented 3 weeks ago

    Superseded by #81.