Open renovate[bot] opened 1 year ago
This PR contains the following updates:
1.52.0
1.58.12
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
This PR contains the following updates:
1.52.0->1.58.12Release Notes
snyk/nodejs-lockfile-parser (snyk-nodejs-lockfile-parser)
### [`v1.58.12`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.12) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.11...v1.58.12) ##### Bug Fixes - handle pnpm empty lockfiles ([45d6de9](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/45d6de95d5ce30f71fa3d8194065aaa6be5037c6)) ### [`v1.58.11`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.11) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.10...v1.58.11) ##### Bug Fixes - removed optional params from extract top level deps ([c0a049b](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/c0a049bb135a35262143f6728ebae6550edfa001)) ### [`v1.58.10`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.10) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.9...v1.58.10) ##### Bug Fixes - fixed dev deps ref and added more debug logs ([4dd003a](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/4dd003a562bec8e1042383992078907545649339)) ### [`v1.58.9`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.9) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.8...v1.58.9) ##### Bug Fixes - fail early for top level deps out of sync pnpm and updated tests ([f3f5193](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/f3f5193c744243fae0e2efa3d64188829300c2eb)) ### [`v1.58.8`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.8) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.7...v1.58.8) ##### Bug Fixes - \[OSM-1996] support pnpm packages aliases ([d42528b](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/d42528b6ceb7da23d92de5cd4cb7ed4b0f27e58f)) ### [`v1.58.7`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.7) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.6...v1.58.7) ##### Bug Fixes - small change for new version release ([d6bc4d3](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/d6bc4d314e840e91e73cee0b37ebc836838e8d37)) ### [`v1.58.6`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.6) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.5...v1.58.6) ##### Bug Fixes - debug log for undefined version ([c7bd821](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/c7bd8216712a22aceca720b5f449cce1b10ff0c7)) ### [`v1.58.5`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.5) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.4...v1.58.5) ##### Bug Fixes - ignore optional deps if not installed ([928e2f2](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/928e2f2b5d85e12e372d98d7bffa3980d024307d)) ### [`v1.58.4`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.4) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.3...v1.58.4) ##### Bug Fixes - \[OSM-1122] handle projects cycles in workspace ([9e5db13](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/9e5db138c0c975a34689613b0a56a0c5d25375ed)) - \[OSM-1923] added test for catalogs feature in pnpm 9 ([4fd3db3](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/4fd3db3c0296f3e6d11d11f08f532ebf22e372b2)) - remove duplicate includePeerDeps ([261fb3a](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/261fb3a2e072c03676c7cfe03ac399814a574b6d)) ### [`v1.58.3`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.3) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.2...v1.58.3) ##### Bug Fixes - \[OSM-1079] support the parsing of transitive peer deps - if they are installed ([d77a36d](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/d77a36d2c406655908c6abf0462e7d9d9aca9d9d)) ### [`v1.58.2`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.2) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.1...v1.58.2) ##### Bug Fixes - \[OSM-1924] send peerDeps option ([2eb6337](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/2eb63378780c05d7205e1fd998767d23742fab10)) ### [`v1.58.1`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.1) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.58.0...v1.58.1) ##### Bug Fixes - add info debug log and format test fixtures ([96ce653](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/96ce653399b3c8cb4129cb58d211e2b1a4e7b52b)) ### [`v1.58.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.58.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.57.0...v1.58.0) ##### Features - \[OSM-1122] improve workspaces parsing ([63aef6c](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/63aef6c791fa9347e04ef7791a59bf432da6f169)) ### [`v1.57.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.57.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.56.2...v1.57.0) ##### Features - add prodsec/security_scans ([d0bffa1](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/d0bffa1188a6a1a5792cedfb14e9c36fbf59e8a5)) ### [`v1.56.2`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.56.2) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.56.1...v1.56.2) ##### Bug Fixes - adding a new release ([#232](https://redirect.github.com/snyk/nodejs-lockfile-parser/issues/232)) ([71b33a3](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/71b33a3a6646a9be941e49e8713f90364a0d2bc1)) ### [`v1.56.1`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.56.1) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.56.0...v1.56.1) ##### Bug Fixes - add release config ([56f1104](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/56f1104a3af358c16d86ffd40ac149c5cf30c6bd)) - adding housekeeping ([#227](https://redirect.github.com/snyk/nodejs-lockfile-parser/issues/227)) ([f906a8b](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/f906a8b15dbd51901b556be257f60f3adc3bc755)) - fix cross refs on multiple levels ([eb24b57](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/eb24b57d20639b01f7088a9c03e9fce072192558)) - fixed main branch name in circleci config ([06a7f6f](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/06a7f6f5dde7717669692b3c23d5be422dbed24f)) ### [`v1.56.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.56.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.55.0...v1.56.0) ##### Features - added support for pnpm lockfiles v9 ([da40be3](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/da40be3a432df3579a10a7ef88d6806c0784c359)) ### [`v1.55.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.55.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.54.0...v1.55.0) ##### Features - expose getPnpmParser functionality at the top level ([515e78e](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/515e78ed40dc99a64f7ad56fa32dad0c4a47e655)) ### [`v1.54.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.54.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.53.3...v1.54.0) ##### Features - normalize pnpm importers on parse ([0d8a77d](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/0d8a77db588aa9e5d4cc5a558f89c51ab143894f)) ### [`v1.53.3`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.53.3) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.53.2...v1.53.3) ##### Bug Fixes - avoid redos by replacing regex with string split ([1f63d42](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/1f63d420c7560840563c26cbc9cb82a701a1a8c0)) ### [`v1.53.2`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.53.2) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.53.1...v1.53.2) ##### Bug Fixes - fixed possible missing fields and dev/optional deps ([dc40d04](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/dc40d045fc8000987ed196e8e7e020bcb129c468)) ### [`v1.53.1`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.53.1) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.53.0...v1.53.1) ##### Bug Fixes - pnpm workspaces should return everything if config file empty ([bcbc059](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/bcbc05969d8605354fe26d3314ebef131877cddb)) ### [`v1.53.0`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.53.0) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.11...v1.53.0) ##### Features - \[OSM-1024] pnpm dep graph builder ([384a1f7](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/384a1f7598dcadfdd9637ca9cd3de371ef3b04e8)) ### [`v1.52.11`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.11) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.10...v1.52.11) ##### Bug Fixes - stop hard failures on npm dist-tags ([2501435](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/25014356467aecfbd90db804b0b06ca50d3682af)) ### [`v1.52.10`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.10) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.9...v1.52.10) ##### Bug Fixes - resolve npm scoped versions ([0793a88](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/0793a88bc5ee092d32ef7f254b4692553e7cf3ea)) ### [`v1.52.9`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.9) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.8...v1.52.9) ##### Bug Fixes - allow overrides with version specs ([3f5926c](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/3f5926cc6e80273fc7b3bb50ebac02e28eeb8a24)) ### [`v1.52.8`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.8) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.7...v1.52.8) ##### Bug Fixes - more accurately resolves deps of overrides ([4be31c5](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/4be31c5836f338ffefc478d27dde62780f3f5975)) ### [`v1.52.7`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.7) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.6...v1.52.7) ##### Bug Fixes - start supporting overrides in a non destructive way - npm lock v2 ([9658c6d](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/9658c6d5c4c8312c5ddf7a869ad44dbd9edbaf37)) ### [`v1.52.6`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.6) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.5...v1.52.6) ##### Bug Fixes - stop assumption that local pkgs are in workspaces ([9db7dff](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/9db7dff215de18311c9cc92c7a4e108de33d9667)) ### [`v1.52.5`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.5) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.4...v1.52.5) ##### Bug Fixes - correct nested pkg resolution ([d7e087c](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/d7e087c31dea2b964f4a9b42884ed9eed19b4df0)) ### [`v1.52.4`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.4) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.3...v1.52.4) ##### Bug Fixes - correctly pick npm-lock-v2 pkg version parsing lockfile ([891789a](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/891789aba05d6f1beec13955050169bce66ab089)) ### [`v1.52.3`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.3) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.2...v1.52.3) ##### Bug Fixes - parse of package-lock with nested packages ([98edb54](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/98edb5462b38945004091d9359420a06783bc802)) ### [`v1.52.2`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.2) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.1...v1.52.2) ##### Bug Fixes - run all tests for npm lock v2 ([29ef12d](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/29ef12d737bcfdcb785b373ba378363bd1fa7c1b)) ### [`v1.52.1`](https://redirect.github.com/snyk/nodejs-lockfile-parser/releases/tag/v1.52.1) [Compare Source](https://redirect.github.com/snyk/nodejs-lockfile-parser/compare/v1.52.0...v1.52.1) ##### Bug Fixes - correct bundled deps behaviour and add fixture ([be500ff](https://redirect.github.com/snyk/nodejs-lockfile-parser/commit/be500ffa314076ac0d725bac6fd46e270801228b))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.