search

janbiasi / rollup-plugin-sbom

Create SBOMs in CycloneDX format for your Vite or Rollup projects with ease
MIT License
4 stars 1 forks source link

fix: bump the npm group across 1 directory with 17 updates #85

Closed dependabot[bot] closed 4 days ago

dependabot[bot] commented 1 week ago

Bumps the npm group with 17 updates in the / directory:

Package From To
@cyclonedx/cyclonedx-library 6.5.1 6.10.0
normalize-package-data 6.0.0 6.0.1
@commitlint/cli 19.2.2 19.3.0
@types/node 20.12.7 20.14.8
@typescript-eslint/eslint-plugin 6.12.0 7.13.1
@typescript-eslint/parser 6.12.0 7.13.1
@vitest/coverage-v8 1.5.0 1.6.0
ajv 8.12.0 8.16.0
eslint 8.54.0 9.5.0
fast-xml-parser 4.3.6 4.4.0
lint-staged 15.2.2 15.2.7
prettier 3.2.5 3.3.2
rollup 4.14.3 4.18.0
semantic-release 23.0.8 24.0.0
typescript 5.3.2 5.5.2
vitest 1.5.0 1.6.0
@vitejs/plugin-react 4.2.0 4.3.1

Updates @cyclonedx/cyclonedx-library from 6.5.1 to 6.10.0

Release notes

Sourced from @​cyclonedx/cyclonedx-library's releases.

6.10.0

Changed

  • Existing Serialize.XmlSerializer.serialize() for Node.js may throw Serialize.MissingOptionalDependencyError (via #1084)
    This is considered a non-breaking change, as the docs always told that any Error may be thrown.
  • Improved the verbose error messages when a functionality failed due to absence of optional/pluggable dependency.

Added

  • New class Serialize.MissingOptionalDependencyError (via #1084)

Misc

  • Refactored functionality around optional/pluggable dependencies (via #1083, #1084)
    This was done in preparation for #1079.

#1079: CycloneDX/cyclonedx-javascript-library#1079 #1083: CycloneDX/cyclonedx-javascript-library#1083 #1084: CycloneDX/cyclonedx-javascript-library#1084

What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.9.5...v6.10.0

6.9.5

Maintenance release.

Chore

  • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078

What's Changed

Full Changelog: https://github.com/CycloneDX/cyclonedx-javascript-library/compare/v6.9.0...v6.9.5

6.9.4-beta.0

No release notes provided.

6.9.3-beta.1

No release notes provided.

6.9.3-beta.0

... (truncated)

Changelog

Sourced from @​cyclonedx/cyclonedx-library's changelog.

6.10.0 -- 2024-06-06

  • Changed
    • Existing Serialize.XmlSerializer.serialize() for Node.js may throw Serialize.MissingOptionalDependencyError (via #1084)
      This is considered a non-breaking change, as the docs always told that any Error may be thrown.
    • Improved the verbose error messages when a functionality failed due to absence of optional/pluggable dependency.
  • Added
    • New class Serialize.MissingOptionalDependencyError (via #1084)
  • Misc
    • Refactored functionality around optional/pluggable dependencies (via #1083, #1084)
      This was done in preparation for #1079.

#1079: CycloneDX/cyclonedx-javascript-library#1079 #1083: CycloneDX/cyclonedx-javascript-library#1083 #1084: CycloneDX/cyclonedx-javascript-library#1084

6.9.5 -- 2024-05-23

Maintenance release.

  • Chore
    • The package will be published to GitHub package registry, too. (#1026 via #1078)

#1026: CycloneDX/cyclonedx-javascript-library#1026 #1078: CycloneDX/cyclonedx-javascript-library#1078

6.9.0 -- 2024-05-23

  • Changed
    • Updated SPDX license list to v3.24.0 (via #1077)

#1077: CycloneDX/cyclonedx-javascript-library#1077

6.8.2 -- 2024-05-21

  • Fixed
    • Added Factories.PackageUrlFactory's generic type's default back in (via #1076)

#1076: CycloneDX/cyclonedx-javascript-library#1076

6.8.1 -- 2024-05-21

  • Fixed
    • Hardened Factories.FromNodePackageJson.PackageUrlFactory's default package repository detection (#1073 via #1074)

#1073: CycloneDX/cyclonedx-javascript-library#1073 #1074: CycloneDX/cyclonedx-javascript-library#1074

6.8.0 -- 2024-05-14

... (truncated)

Commits


Updates normalize-package-data from 6.0.0 to 6.0.1

Release notes

Sourced from normalize-package-data's releases.

v6.0.1

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Changelog

Sourced from normalize-package-data's changelog.

6.0.1 (2024-05-04)

Bug Fixes

Documentation

Chores

Commits
  • 335a295 chore: release 6.0.1 (#219)
  • 27688b4 fix(linting): no-unused-vars
  • 02de832 chore: postinstall for dependabot template-oss PR
  • 3c74f51 chore: bump @​npmcli/template-oss to 4.22.0
  • c367107 chore: postinstall for dependabot template-oss PR
  • f6b1f8c chore: bump @​npmcli/template-oss from 4.21.3 to 4.21.4
  • c5b90cd docs(readme): fix broken badge URL (#214)
  • d3bfe73 chore: postinstall for dependabot template-oss PR
  • a80c4a4 chore: bump @​npmcli/template-oss from 4.21.1 to 4.21.3
  • 5c121d5 chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view


Updates @commitlint/cli from 19.2.2 to 19.3.0

Release notes

Sourced from @​commitlint/cli's releases.

v19.3.0

19.3.0 (2024-04-23)

Features

Chore

New Contributors

Full Changelog: https://github.com/conventional-changelog/commitlint/compare/v19.2.2...v19.3.0

Changelog

Sourced from @​commitlint/cli's changelog.

19.3.0 (2024-04-23)

Note: Version bump only for package @​commitlint/cli

Commits


Updates @types/node from 20.12.7 to 20.14.8

Commits


Updates @typescript-eslint/eslint-plugin from 6.12.0 to 7.13.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v7.13.1

7.13.1 (2024-06-17)

🩹 Fixes

  • eslint-plugin: [prefer-readonly] refine report locations (#8894)
  • eslint-plugin: [return-await] support explicit resource management (#9044)
  • eslint-plugin: [no-unsafe-member-access] differentiate a types-error any from a true any (#9291)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.13.0

7.13.0 (2024-06-10)

🚀 Features

  • eslint-plugin: [no-dynamic-delete] allow all string literals as index (#9280)
  • parser, typescript-estree: export withoutProjectParserOptions utility (#9233)
  • typescript-estree: require import = require() argument to be a string literal (#9226)
  • typescript-estree: forbid .body, .async, .generator on declare function (#9225)

🩹 Fixes

  • ast-spec: function-call-like callee should be Expression not LeftHandSideExpression (#9231)
  • eslint-plugin: [init-declarations] refine report locations (#8893)
  • eslint-plugin: [no-base-to-string] make error message more nuanced (#9281)
  • eslint-plugin: [no-unsafe-assignment] be more specific about error types (#8304)
  • eslint-plugin: [no-magic-numbers] fix implementation of the ignore option (#9167)
  • scope-manager: handle index signature in class (#9054)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.12.0

7.12.0 (2024-06-03)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

7.13.1 (2024-06-17)

🩹 Fixes

  • eslint-plugin: [prefer-readonly] refine report locations

  • eslint-plugin: [return-await] support explicit resource management

  • eslint-plugin: [no-unsafe-member-access] differentiate a types-error any from a true any

❤️ Thank You

  • Kirk Waiblinger
  • Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

7.13.0 (2024-06-10)

🚀 Features

  • typescript-estree: require import = require() argument to be a string literal

  • typescript-estree: forbid .body, .async, .generator on declare function

  • eslint-plugin: [no-dynamic-delete] allow all string literals as index

🩹 Fixes

  • ast-spec: function-call-like callee should be Expression not LeftHandSideExpression

  • scope-manager: handle index signature in class

  • eslint-plugin: [init-declarations] refine report locations

  • eslint-plugin: [no-base-to-string] make error message more nuanced

  • eslint-plugin: [no-unsafe-assignment] be more specific about error types

  • eslint-plugin: [no-magic-numbers] fix implementation of the ignore option

❤️ Thank You

  • Fotis Papadogeorgopoulos
  • Joshua Chen

... (truncated)

Commits
  • 1212a8f chore(release): publish 7.13.1
  • af34737 docs: improve return-await description about motivation (#9201)
  • bf48dc5 fix(eslint-plugin): [no-unsafe-member-access] differentiate a types-error any...
  • 33acc50 fix(eslint-plugin): [return-await] support explicit resource management (#9044)
  • 50ed604 fix(eslint-plugin): [prefer-readonly] refine report locations (#8894)
  • 8a178ed chore(release): publish 7.13.0
  • 63e53e2 chore(deps): update dependency prettier to v3.3.1 (#9308)
  • fb52f78 feat(eslint-plugin): [no-dynamic-delete] allow all string literals as index (...
  • ab2916c chore: enable eslint-plugin/no-property-in-node internally (#9261)
  • 629035f docs: mention rule scripts under Local Development (#9258)
  • Additional commits viewable in compare view


Updates @typescript-eslint/parser from 6.12.0 to 7.13.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v7.13.1

7.13.1 (2024-06-17)

🩹 Fixes

  • eslint-plugin: [prefer-readonly] refine report locations (#8894)
  • eslint-plugin: [return-await] support explicit resource management (#9044)
  • eslint-plugin: [no-unsafe-member-access] differentiate a types-error any from a true any (#9291)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.13.0

7.13.0 (2024-06-10)

🚀 Features

  • eslint-plugin: [no-dynamic-delete] allow all string literals as index (#9280)
  • parser, typescript-estree: export withoutProjectParserOptions utility (#9233)
  • typescript-estree: require import = require() argument to be a string literal (#9226)
  • typescript-estree: forbid .body, .async, .generator on declare function (#9225)

🩹 Fixes

  • ast-spec: function-call-like callee should be Expression not LeftHandSideExpression (#9231)
  • eslint-plugin: [init-declarations] refine report locations (#8893)
  • eslint-plugin: [no-base-to-string] make error message more nuanced (#9281)
  • eslint-plugin: [no-unsafe-assignment] be more specific about error types (#8304)
  • eslint-plugin: [no-magic-numbers] fix implementation of the ignore option (#9167)
  • scope-manager: handle index signature in class (#9054)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v7.12.0

7.12.0 (2024-06-03)

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

7.13.1 (2024-06-17)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

7.13.0 (2024-06-10)

🚀 Features

  • parser, typescript-estree: export withoutProjectParserOptions utility

❤️ Thank You

  • Fotis Papadogeorgopoulos
  • Joshua Chen
  • Kirk Waiblinger
  • Tobiloba Adedeji
  • Vinccool96
  • YeonJuan

You can read about our versioning strategy and releases on our website.

7.12.0 (2024-06-03)

🩹 Fixes

  • types: correct typing ParserOptions

❤️ Thank You

  • Abraham Guo
  • Han Yeong-woo
  • Joshua Chen
  • Kim Sang Du
  • Kirk Waiblinger
  • YeonJuan

You can read about our versioning strategy and releases on our website.

7.11.0 (2024-05-27)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits
  • 1212a8f chore(release): publish 7.13.1
  • 8a178ed chore(release): publish 7.13.0
  • c9a6dd9 feat(parser, typescript-estree): export withoutProjectParserOptions utility (...
  • 7e93b28 chore(release): publish 7.12.0
  • 2bbf656 fix(types): correct typing ParserOptions (#9202)
  • e360541 chore(release): publish 7.11.0
  • c18226e chore(release): publish 7.10.0
  • 77fc366 chore(release): publish 7.9.0
  • f53fece chore: add knip (#8192)
  • ee677f6 chore(release): publish 7.8.0
  • Additional commits viewable in compare view


Updates @vitest/coverage-v8 from 1.5.0 to 1.6.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v1.6.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v1.5.3

   🐞 Bug Fixes

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

    View changes on GitHub

v1.5.1

   🚀 Features

... (truncated)

Commits
  • 6b29f3d chore: release v1.6.0
  • c9883f3 fix(coverage): apply vite-node's wrapper only to executed files (#5642)
  • a52964b chore: release v1.5.3
  • 81f57f4 chore: release v1.5.2
  • 1be4510 chore: release v1.5.1
  • 80265b4 fix(coverage): thresholds to compare files relative to root (#5574)
  • ea3c16e fix(coverage): prevent crash when cleanOnRerun is disabled (#5540)
  • See full diff in compare view


Updates ajv from 8.12.0 to 8.16.0

Release notes

Sourced from ajv's releases.

v8.16.0

What's Changed

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.15.0...v8.16.0

v8.15.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.14.0...v8.15.0

v8.14.0

What's Changed

New Contributors

Full Changelog: https://github.com/ajv-validator/ajv/compare/v8.13.0...v8.14.0

v8.13.0

  • add named exports
  • update dependencies
  • update node.js
Commits


Updates eslint from 8.54.0 to 9.5.0

Release notes

Sourced from eslint's releases.

v9.5.0

Features

  • b2d256c feat: no-sparse-arrays report on "comma" instead of the whole array (#18579) (fisker Cheung)

Bug Fixes

  • 6880286 fix: treat * as a universal pattern (#18586) (Milos Djermanovic)
  • 7fbe211 fix: message template for all files ignored (#18564) (Milos Djermanovic)
  • 469cb36 fix: Don't lint the same file multiple times (#18552) (Milos Djermanovic)
  • 5cff638 fix: improve message for ignored files without a matching config (#18404) (Francesco Trotta)

Documentation

  • 455f7fd docs: add section about including .gitignore files (#18590) (Milos Djermanovic)
  • 721eafe docs: update info about universal files patterns (#18587) (Francesco Trotta)
  • 8127127 docs: Update README (GitHub Actions Bot)
  • 55c2a66 docs: Update README (GitHub Actions Bot)
  • eb76282 docs: Update README (GitHub Actions Bot)
  • ff6e96e docs: baseConfig and overrideConfig can be arrays (#18571) (Milos Djermanovic)
  • d2d83e0 docs: Add mention of eslint-transforms to v9 migration guide (#18566) (Nicholas C. Zakas)
  • 9ce6832 docs: add callout box for unintuitive behavior (#18567) (Ben McCann)
  • b8db99c docs: Add VS Code info to config migration guide (#18555) (Nicholas C. Zakas)
  • 518a35c docs: Mention config migrator (#18561) (Nicholas C. Zakas)
  • eb440fc docs: specifying files with arbitrary or no extension (#18539) (Francesco Trotta)
  • 38c159e docs: Provide example of reading package.json for plugins meta (#18530) (Nicholas C. Zakas)
  • d16a659 docs: add link to migration guide for --ext CLI option (#18537) (Milos Djermanovic)
  • 73408de docs: add link to configuration file docs before examples (#18535) (Milos Djermanovic)

Chores

  • f588160 chore: upgrade @​eslint/js@​9.5.0 (#18591) (Milos Djermanovic)
  • 5890841 chore: package.json update for @​eslint/js release (Jenkins)
  • e9f4ccd chore: remove unused eslint-disable directive (#18589) (Milos Djermanovic)
  • 4b23ffd refactor: Move JS parsing logic into JS language (#18448) (Nicholas C. Zakas)
  • 1495b93 chore: update WebdriverIO packages (#18558) (Christian Bromann)
  • cea7ede chore: add website donate link instead of opencollective (#18582) (Strek)
  • ec94880 chore: package.json update for eslint-config-eslint release (Jenkins)
  • 6912586 chore: extract formatting rules into separate config (
    dependabot[bot] commented 4 days ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.