janbiasi / rollup-plugin-sbom

Create SBOMs in CycloneDX format for your Vite or Rollup projects with ease
MIT License
4 stars 1 forks source link

fix: bump the npm group across 1 directory with 16 updates #81

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the npm group with 16 updates in the / directory:

Package From To
@cyclonedx/cyclonedx-library 6.5.1 6.10.0
normalize-package-data 6.0.0 6.0.1
@commitlint/cli 19.2.2 19.3.0
@types/node 20.12.7 20.14.2
@typescript-eslint/eslint-plugin 6.12.0 7.12.0
@typescript-eslint/parser 6.12.0 7.12.0
@vitest/coverage-v8 1.5.0 1.6.0
ajv 8.12.0 8.16.0
eslint 8.54.0 9.4.0
fast-xml-parser 4.3.6 4.4.0
lint-staged 15.2.2 15.2.5
prettier 3.2.5 3.3.1
rollup 4.14.3 4.18.0
semantic-release 23.0.8 24.0.0
vitest 1.5.0 1.6.0
@vitejs/plugin-react 4.2.0 4.3.1

Updates @cyclonedx/cyclonedx-library from 6.5.1 to 6.10.0

Release notes

Sourced from @​cyclonedx/cyclonedx-library's releases.

6.10.0

Changed

  • Existing Serialize.XmlSerializer.serialize() for Node.js may throw Serialize.MissingOptionalDependencyError (via #1084)
    This is considered a non-breaking change, as the docs always told that any Error may be thrown.
  • Improved the verbose error messages when a functionality failed due to absence of optional/pluggable dependency.

Added

  • New class Serialize.MissingOptionalDependencyError (via #1084)

Misc

  • Refactored functionality around optional/pluggable dependencies (via #1083, #1084)
    This was done in preparation for #1079.

#1079: CycloneDX/cyclonedx-javascript-library#1079 #1083: CycloneDX/cyclonedx-javascript-library#1083 #1084: CycloneDX/cyclonedx-javascript-library#1084


What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.9.5...v6.10.0

6.9.5

Maintenance release.

Chore

  • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078


What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.9.0...v6.9.5

6.9.4-beta.0

No release notes provided.

6.9.3-beta.1

No release notes provided.

6.9.3-beta.0

... (truncated)

Changelog

Sourced from @​cyclonedx/cyclonedx-library's changelog.

6.10.0 -- 2024-06-06

  • Changed
    • Existing Serialize.XmlSerializer.serialize() for Node.js may throw Serialize.MissingOptionalDependencyError (via #1084)
      This is considered a non-breaking change, as the docs always told that any Error may be thrown.
    • Improved the verbose error messages when a functionality failed due to absence of optional/pluggable dependency.
  • Added
    • New class Serialize.MissingOptionalDependencyError (via #1084)
  • Misc
    • Refactored functionality around optional/pluggable dependencies (via #1083, #1084)
      This was done in preparation for #1079.

#1079: CycloneDX/cyclonedx-javascript-library#1079 #1083: CycloneDX/cyclonedx-javascript-library#1083 #1084: CycloneDX/cyclonedx-javascript-library#1084

6.9.5 -- 2024-05-23

Maintenance release.

  • Chore
    • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078

6.9.0 -- 2024-05-23

  • Changed
    • Updated SPDX license list to v3.24.0 (via #1077)

#1077: CycloneDX/cyclonedx-javascript-library#1077

6.8.2 -- 2024-05-21

  • Fixed
    • Added Factories.PackageUrlFactory's generic type's default back in (via #1076)

#1076: CycloneDX/cyclonedx-javascript-library#1076

6.8.1 -- 2024-05-21

  • Fixed
    • Hardened Factories.FromNodePackageJson.PackageUrlFactory's default package repository detection (#1073 via #1074)

#1073: CycloneDX/cyclonedx-javascript-library#1073 #1074: CycloneDX/cyclonedx-javascript-library#1074

6.8.0 -- 2024-05-14

... (truncated)

Commits


Updates normalize-package-data from 6.0.0 to 6.0.1

Release notes

Sourced from normalize-package-data's releases.

v6.0.1

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Changelog

Sourced from normalize-package-data's changelog.

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Commits
  • 335a295 chore: release 6.0.1 (#219)
  • 27688b4 fix(linting): no-unused-vars
  • 02de832 chore: postinstall for dependabot template-oss PR
  • 3c74f51 chore: bump @​npmcli/template-oss to 4.22.0
  • c367107 chore: postinstall for dependabot template-oss PR
  • f6b1f8c chore: bump @​npmcli/template-oss from 4.21.3 to 4.21.4
  • c5b90cd docs(readme): fix broken badge URL (#214)
  • d3bfe73 chore: postinstall for dependabot template-oss PR
  • a80c4a4 chore: bump @​npmcli/template-oss from 4.21.1 to 4.21.3
  • 5c121d5 chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view


Updates @commitlint/cli from 19.2.2 to 19.3.0

Release notes

Sourced from @​commitlint/cli's releases.

v19.3.0

19.3.0 (2024-04-23)

Features

Chore

New Contributors

Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v19.2.2...v19.3.0

Changelog

Sourced from @​commitlint/cli's changelog.

19.3.0 (2024-04-23)

Note: Version bump only for package @​commitlint/cli

Commits


Updates @types/node from 20.12.7 to 20.14.2

Commits


Updates @typescript-eslint/eslint-plugin from 6.12.0 to 7.12.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v7.12.0

7.12.0 (2024-06-03)

🚀 Features

  • eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals) (#8821)
  • eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises' (#9186)
  • rule-tester: check for parsing errors in suggestion fixes (#9052)
  • rule-tester: port checkDuplicateTestCases from ESLint (#9026)

🩹 Fixes

  • no-useless-template-expression -> no-unnecessary-template-expression (#9174)
  • eslint-plugin: [no-unnecessary-type-assertion] combine template literal check with const variable check (#8820)
  • eslint-plugin: [dot-notation] fix false positive when accessing private/protected property with optional chaining (#8851)
  • eslint-plugin: [explicit-member-accessibility] refine report locations (#8869)
  • eslint-plugin: [no-unnecessary-type-assertion] declares are always defined, so always check declares (#8901)
  • eslint-plugin: [prefer-literal-enum-member] allow using member it self on allowBitwiseExpressions (#9114)
  • eslint-plugin: [return-await] clean up in-try-catch detection and make autofixes safe (#9031)
  • eslint-plugin: [member-ordering] also TSMethodSignature can be get/set (#9193)
  • types: correct typing ParserOptions (#9202)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.11.0

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment (#9081)

🩹 Fixes

  • ast-spec: add EmptyStatement to Statement (#8892)
  • eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions (#8826)
  • typescript-estree: truncate number of files printed by the maximum file error (#9127)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

7.12.0 (2024-06-03)

🚀 Features

  • eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals)

  • rule-tester: check for parsing errors in suggestion fixes

  • rule-tester: port checkDuplicateTestCases from ESLint

  • eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises'

🩹 Fixes

  • no-useless-template-expression -> no-unnecessary-template-expression

  • eslint-plugin: [no-unnecessary-type-assertion] combine template literal check with const variable check

  • eslint-plugin: [dot-notation] fix false positive when accessing private/protected property with optional chaining

  • eslint-plugin: [explicit-member-accessibility] refine report locations

  • eslint-plugin: [no-unnecessary-type-assertion] declares are always defined, so always check declares

  • eslint-plugin: [prefer-literal-enum-member] allow using member it self on allowBitwiseExpressions

  • eslint-plugin: [return-await] clean up in-try-catch detection and make autofixes safe

  • eslint-plugin: [member-ordering] also TSMethodSignature can be get/set

❤️ Thank You

  • Abraham Guo
  • Han Yeong-woo
  • Joshua Chen
  • Kim Sang Du
  • Kirk Waiblinger
  • YeonJuan

You can read about our versioning strategy and releases on our website.

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment

... (truncated)

Commits
  • 7e93b28 chore(release): publish 7.12.0
  • d0adcf1 docs: clarify what require-await does (#9200)
  • 04990d5 feat(eslint-plugin): [no-floating-promises] add option 'allowForKnownSafeProm...
  • ad85249 docs: mention related ESLint rules in no-unused-vars page (#9198)
  • e80a8d6 docs: improve description for no-dynamic-delete (#9195)
  • 9f92b30 docs: explicitly mention unbound-method limitation with thisArg (#9197)
  • 08a9448 docs: add example with PascalCase function components (#9196)
  • 5ca7f6e feat(rule-tester): port checkDuplicateTestCases from ESLint (#9026)
  • a9dd526 fix(eslint-plugin): [member-ordering] also TSMethodSignature can be get/set (...
  • 2619c3b fix(eslint-plugin): [return-await] clean up in-try-catch detection and make a...
  • Additional commits viewable in compare view


Updates @typescript-eslint/parser from 6.12.0 to 7.12.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v7.12.0

7.12.0 (2024-06-03)

🚀 Features

  • eslint-plugin: [no-useless-template-literals] rename to no-useless-template-expression (deprecate no-useless-template-literals) (#8821)
  • eslint-plugin: [no-floating-promises] add option 'allowForKnownSafePromises' (#9186)
  • rule-tester: check for parsing errors in suggestion fixes (#9052)
  • rule-tester: port checkDuplicateTestCases from ESLint (#9026)

🩹 Fixes

  • no-useless-template-expression -> no-unnecessary-template-expression (#9174)
  • eslint-plugin: [no-unnecessary-type-assertion] combine template literal check with const variable check (#8820)
  • eslint-plugin: [dot-notation] fix false positive when accessing private/protected property with optional chaining (#8851)
  • eslint-plugin: [explicit-member-accessibility] refine report locations (#8869)
  • eslint-plugin: [no-unnecessary-type-assertion] declares are always defined, so always check declares (#8901)
  • eslint-plugin: [prefer-literal-enum-member] allow using member it self on allowBitwiseExpressions (#9114)
  • eslint-plugin: [return-await] clean up in-try-catch detection and make autofixes safe (#9031)
  • eslint-plugin: [member-ordering] also TSMethodSignature can be get/set (#9193)
  • types: correct typing ParserOptions (#9202)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.11.0

7.11.0 (2024-05-27)

🚀 Features

  • eslint-plugin: deprecate prefer-ts-expect-error in favor of ban-ts-comment (#9081)

🩹 Fixes

  • ast-spec: add EmptyStatement to Statement (#8892)
  • eslint-plugin: [consistent-type-assertions] prevent syntax errors on arrow functions (#8826)
  • typescript-estree: truncate number of files printed by the maximum file error (#9127)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

7.12.0 (2024-06-03)

🩹 Fixes

  • types: correct typing ParserOptions

❤️ Thank You

  • Abraham Guo
  • Han Yeong-woo
  • Joshua Chen
  • Kim Sang Du
  • Kirk Waiblinger
  • YeonJuan

You can read about our versioning strategy and releases on our website.

7.11.0 (2024-05-27)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.10.0 (2024-05-20)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.9.0 (2024-05-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.8.0 (2024-04-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.7.1 (2024-04-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.7.0 (2024-04-15)

... (truncated)

Commits


Updates @vitest/coverage-v8 from 1.5.0 to 1.6.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v1.6.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v1.5.3

   🐞 Bug Fixes

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

    View changes on GitHub

v1.5.1

   🚀 Features

... (truncated)

Commits
  • 6b29f3d chore: release v1.6.0
  • c9883f3 fix(coverage): apply vite-node's wrapper only to executed files (#5642)
  • a52964b chore: release v1.5.3
  • 81f57f4 chore: release v1.5.2
  • 1be4510 chore: release v1.5.1
  • 80265b4 fix(coverage): thresholds to compare files relative to root (#5574)
  • ea3c16e fix(coverage): prevent crash when cleanOnRerun is disabled (#5540)
  • See full diff in compare view


Updates ajv from 8.12.0 to 8.16.0

Release notes

Sourced from ajv's releases.

v8.16.0

What's Changed

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.15.0...v8.16.0

v8.15.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.14.0...v8.15.0

v8.14.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.13.0...v8.14.0

v8.13.0

  • add named exports
  • update dependencies
  • update node.js
Commits


Updates eslint from 8.54.0 to 9.4.0

Release notes

Sourced from eslint's releases.

v9.4.0

Features

  • 89a4a0a feat: ignore IIFE's in the no-loop-func rule (#17528) (Nitin Kumar)

Bug Fixes

  • f6534d1 fix: skip processor code blocks that match only universal patterns (#18507) (Milos Djermanovic)
  • 7226ebd fix: allow implicit undefined return in no-constructor-return (#18515) (Ali Rezvani)
  • 389744b fix: use @eslint/config-inspector@latest (#18483) (唯然)
  • 70118a5 fix: func-style false positive with arrow functions and super (#18473) (Milos Djermanovic)

Documentation

  • d7ab6f5 docs: update theme when when prefers-color-scheme changes (#18510) (Nitin Kumar)
  • 525fdff docs: fix components files (#18519) (Tanuj Kanti)
  • 80747d2 docs: refactor prefer-destructuring rule (#18472) (Tanuj Kanti)
  • f06e0b5 docs: clarify func-style (#18477) (Cameron Steffen)

Chores

  • 010dd2e chore: upgrade to @eslint/js@9.4.0 (#18534) (Francesco Trotta)
  • 5e1b5dc chore: package.json update for @​eslint/js release (Jenkins)
  • 594145f refactor: switch to @eslint/config-array (#18527) (Francesco Trotta)

v9.3.0

Features

  • b32153c feat: add overrides.namedExports to func-style rule (#18444) (Percy Ma)
  • b67eba4 feat: add restrictedNamedExportsPattern to no-restricted-exports (#18431) (Akul Srivastava)
  • 069aa68 feat: add option allowEscape to no-misleading-character-class rule (#18208) (Francesco Trotta)
  • 05ef92d feat: deprecate multiline-comment-style & line-comment-position (#18435) (唯然)
  • db0b174 feat: add enforceForInnerExpressions option to no-extra-boolean-cast (#18222) (Kirk Waiblinger)

Bug Fixes