search

jtimberlake / serverless-artillery

Combine serverless with artillery and you get serverless-artillery for instant, cheap, and easy performance testing at scale.
Apache License 2.0
0 stars 0 forks source link

chore(deps): update dependency np to v8 #162

Open mend-for-github-com[bot] opened 4 months ago

mend-for-github-com[bot] commented 4 months ago

This PR contains the following updates:

Package Type Update Change
np devDependencies major ^5.1.3 -> ^8.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2021-33502 #85
High 7.5 CVE-2021-33623 #136
High 7.5 CVE-2021-3807 #135
High 7.5 CVE-2022-25881 #143

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2021-3807 #135
High 7.5 CVE-2022-25883 #160
High 7.3 CVE-2020-8116 #17

Release Notes

sindresorhus/np (np) ### [`v8.0.0`](https://togithub.com/sindresorhus/np/releases/tag/v8.0.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.7.0...v8.0.0) ##### Breaking - Require Node.js 16 ([#​683](https://togithub.com/sindresorhus/np/issues/683)) [`72879e0`](https://togithub.com/sindresorhus/np/commit/72879e0) ##### Improvements - Add 2FA support for npm version 9+ ([#​693](https://togithub.com/sindresorhus/np/issues/693)) [`9cb4bfd`](https://togithub.com/sindresorhus/np/commit/9cb4bfd) - Improve startup time ([#​688](https://togithub.com/sindresorhus/np/issues/688)) [`eba203f`](https://togithub.com/sindresorhus/np/commit/eba203f) - Improve the reliability of detecting which files will be included in the package ([#​682](https://togithub.com/sindresorhus/np/issues/682)) [`a6ce792`](https://togithub.com/sindresorhus/np/commit/a6ce792) - Add check for new dependencies ([#​681](https://togithub.com/sindresorhus/np/issues/681)) [`6867fb9`](https://togithub.com/sindresorhus/np/commit/6867fb9) ### [`v7.7.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.7.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.6.4...v7.7.0) - Show new version in non-interactive mode ([#​679](https://togithub.com/sindresorhus/np/issues/679)) [`a0a17fd`](https://togithub.com/sindresorhus/np/commit/a0a17fd) ### [`v7.6.4`](https://togithub.com/sindresorhus/np/releases/tag/v7.6.4) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.6.3...v7.6.4) - Fix UI prompt for new publicly scoped packages ([#​677](https://togithub.com/sindresorhus/np/issues/677)) [`e71f691`](https://togithub.com/sindresorhus/np/commit/e71f691) ### [`v7.6.3`](https://togithub.com/sindresorhus/np/releases/tag/v7.6.3) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.6.2...v7.6.3) - Fix npm 9 compatibility ([#​666](https://togithub.com/sindresorhus/np/issues/666)) [`0f5dd33`](https://togithub.com/sindresorhus/np/commit/0f5dd33) ### [`v7.6.2`](https://togithub.com/sindresorhus/np/releases/tag/v7.6.2) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.6.1...v7.6.2) - Work around npm bug with error reporting ([#​645](https://togithub.com/sindresorhus/np/issues/645)) [`6c871f9`](https://togithub.com/sindresorhus/np/commit/6c871f9) ### [`v7.6.1`](https://togithub.com/sindresorhus/np/releases/tag/v7.6.1) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.6.0...v7.6.1) - Fix error "glob pattern string required" ([#​616](https://togithub.com/sindresorhus/np/issues/616)) [`9cff6da`](https://togithub.com/sindresorhus/np/commit/9cff6da) - Fix "pattern is too long" error when running `np` ([#​633](https://togithub.com/sindresorhus/np/issues/633)) [`20117a4`](https://togithub.com/sindresorhus/np/commit/20117a4) ### [`v7.6.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.6.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.5.0...v7.6.0) - Fix files prompt when no new or unpublished files can be found ([#​625](https://togithub.com/sindresorhus/np/issues/625)) [`5d2377f`](https://togithub.com/sindresorhus/np/commit/5d2377f) - Fix `--message` flag help description ([#​623](https://togithub.com/sindresorhus/np/issues/623)) [`dddd07c`](https://togithub.com/sindresorhus/np/commit/dddd07c) ### [`v7.5.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.5.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.4.0...v7.5.0) - Fix showing files added since the last release ([#​595](https://togithub.com/sindresorhus/np/issues/595)) [`626aed6`](https://togithub.com/sindresorhus/np/commit/626aed6) ### [`v7.4.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.4.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.3.0...v7.4.0) - Add support for custom commit message ([#​597](https://togithub.com/sindresorhus/np/issues/597)) [`65a674e`](https://togithub.com/sindresorhus/np/commit/65a674e) - Fix `--release-draft-only` flag ([#​594](https://togithub.com/sindresorhus/np/issues/594)) [`add5bd9`](https://togithub.com/sindresorhus/np/commit/add5bd9) ### [`v7.3.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.3.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.2.0...v7.3.0) - Support `.cjs` file ending for config file locations ([#​596](https://togithub.com/sindresorhus/np/issues/596)) [`b49b20f`](https://togithub.com/sindresorhus/np/commit/b49b20f) ### [`v7.2.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.2.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.1.0...v7.2.0) - Check if `yarn.lock` is ignored before throwing error ([#​582](https://togithub.com/sindresorhus/np/issues/582)) [`c76987a`](https://togithub.com/sindresorhus/np/commit/c76987a) - Make commit log relative to release branch ([#​580](https://togithub.com/sindresorhus/np/issues/580)) [`8f812e0`](https://togithub.com/sindresorhus/np/commit/8f812e0) - Fix confusing prompt with empty file list ([#​589](https://togithub.com/sindresorhus/np/issues/589)) [`ca3d830`](https://togithub.com/sindresorhus/np/commit/ca3d830) ### [`v7.1.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.1.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v7.0.0...v7.1.0) - Add `--release-draft-only` flag ([#​578](https://togithub.com/sindresorhus/np/issues/578)) [`316bed2`](https://togithub.com/sindresorhus/np/commit/316bed2) - Handle long path names in the "show files added since last release" feature ([#​579](https://togithub.com/sindresorhus/np/issues/579)) [`3466903`](https://togithub.com/sindresorhus/np/commit/3466903) - Show prompt only in interactive mode ([#​583](https://togithub.com/sindresorhus/np/issues/583)) [`4ae26d9`](https://togithub.com/sindresorhus/np/commit/4ae26d9) ### [`v7.0.0`](https://togithub.com/sindresorhus/np/releases/tag/v7.0.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.5.0...v7.0.0) ##### Breaking - Prefer local install ([#​572](https://togithub.com/sindresorhus/np/issues/572)) [`0cff2b4`](https://togithub.com/sindresorhus/np/commit/0cff2b4) If you run the global `np` command, it will now defer to the local `np` if any. This is important when you use config and other things which might change across `np` versions. This is unlikely to be a breaking change for most people, but it's a major version to me safe. ##### Improvements - Show files added since the last release and not part of the package ([#​456](https://togithub.com/sindresorhus/np/issues/456)) [`08a2c06`](https://togithub.com/sindresorhus/np/commit/08a2c06) ##### Fixes - Fix error when Yarn cannot find test script ([#​567](https://togithub.com/sindresorhus/np/issues/567)) [`c77e191`](https://togithub.com/sindresorhus/np/commit/c77e191) ### [`v6.5.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.5.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.4.0...v6.5.0) - Create release draft even when pushing to protected branches failed ([#​560](https://togithub.com/sindresorhus/np/issues/560)) [`3fc1e77`](https://togithub.com/sindresorhus/np/commit/3fc1e77) ### [`v6.4.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.4.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.3.2...v6.4.0) - Add `--test-script` flag to run custom tests before publish ([#​557](https://togithub.com/sindresorhus/np/issues/557)) [`0c46a2f`](https://togithub.com/sindresorhus/np/commit/0c46a2f) - Add support for `--no-2fa` flag ([#​559](https://togithub.com/sindresorhus/np/issues/559)) [`0638d27`](https://togithub.com/sindresorhus/np/commit/0638d27) - Add support for specifying release branch ([#​558](https://togithub.com/sindresorhus/np/issues/558)) [`b8b1976`](https://togithub.com/sindresorhus/np/commit/b8b1976) ### [`v6.3.2`](https://togithub.com/sindresorhus/np/releases/tag/v6.3.2) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.3.1...v6.3.2) - Regression fix for tag not being taken when specified in CLI ([#​555](https://togithub.com/sindresorhus/np/issues/555)) [`f29295d`](https://togithub.com/sindresorhus/np/commit/f29295d) ### [`v6.3.1`](https://togithub.com/sindresorhus/np/releases/tag/v6.3.1) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.3.0...v6.3.1) - Fix a regression from 6.3.0 ([#​552](https://togithub.com/sindresorhus/np/issues/552)) [`59edfe6`](https://togithub.com/sindresorhus/np/commit/59edfe6) ### [`v6.3.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.3.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.5...v6.3.0) - Fix specifying a custom version via UI ([#​546](https://togithub.com/sindresorhus/np/issues/546)) [`6b68244`](https://togithub.com/sindresorhus/np/commit/6b68244) - Respect `preId` in `.npmrc` for release tags ([#​547](https://togithub.com/sindresorhus/np/issues/547)) [`aebd8ab`](https://togithub.com/sindresorhus/np/commit/aebd8ab) ### [`v6.2.5`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.5) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.4...v6.2.5) - Update npm-name dependency ([#​545](https://togithub.com/sindresorhus/np/issues/545)) [`e2cedde`](https://togithub.com/sindresorhus/np/commit/e2cedde) ### [`v6.2.4`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.4) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.3...v6.2.4) - Fix `releaseDraft` setting not working when set from config not CLI ([#​540](https://togithub.com/sindresorhus/np/issues/540)) [`81b0001`](https://togithub.com/sindresorhus/np/commit/81b0001) ### [`v6.2.3`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.3) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.2...v6.2.3) - Fix 2FA prompt when the package exists ([#​505](https://togithub.com/sindresorhus/np/issues/505)) [`4a32039`](https://togithub.com/sindresorhus/np/commit/4a32039) ### [`v6.2.2`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.2) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.1...v6.2.2) - Avoid scoped repo message for private registries ([#​529](https://togithub.com/sindresorhus/np/issues/529)) [`a1d96c1`](https://togithub.com/sindresorhus/np/commit/a1d96c1) ### [`v6.2.1`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.1) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.2.0...v6.2.1) - Fix scoped repo prompt showing even if package has already been published ([#​524](https://togithub.com/sindresorhus/np/issues/524)) [`1cf7d78`](https://togithub.com/sindresorhus/np/commit/1cf7d78) - Correctly detect if np is not run in a package ([#​512](https://togithub.com/sindresorhus/np/issues/512)) [`b5a7dcf`](https://togithub.com/sindresorhus/np/commit/b5a7dcf) ### [`v6.2.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.2.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.1.0...v6.2.0) - Allow explicit private publish to prevent public publish prompt ([#​497](https://togithub.com/sindresorhus/np/issues/497)) [`08b52a2`](https://togithub.com/sindresorhus/np/commit/08b52a2) - Add preview mode ([#​399](https://togithub.com/sindresorhus/np/issues/399)) [`5f52e81`](https://togithub.com/sindresorhus/np/commit/5f52e81) ### [`v6.1.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.1.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v6.0.0...v6.1.0) - Auto-submit 2FA ([#​493](https://togithub.com/sindresorhus/np/issues/493)) [`d589d46`](https://togithub.com/sindresorhus/np/commit/d589d46) - Escape HTML in release note commit messages ([#​500](https://togithub.com/sindresorhus/np/issues/500)) [`05bb791`](https://togithub.com/sindresorhus/np/commit/05bb791) ### [`v6.0.0`](https://togithub.com/sindresorhus/np/releases/tag/v6.0.0) [Compare Source](https://togithub.com/sindresorhus/np/compare/v5.2.1...v6.0.0) ##### Breaking - Require Node.js 10 [`818ff4b`](https://togithub.com/sindresorhus/np/commit/818ff4b) ##### Enhancements - Show registry URL before publishing ([#​485](https://togithub.com/sindresorhus/np/issues/485)) [`6bf85df`](https://togithub.com/sindresorhus/np/commit/6bf85df) - Allow publishing if availability check fails ([#​490](https://togithub.com/sindresorhus/np/issues/490)) [`ccdb8a5`](https://togithub.com/sindresorhus/np/commit/ccdb8a5) - Publish non-private subdirectories when root is private ([#​483](https://togithub.com/sindresorhus/np/issues/483)) [`607e5c1`](https://togithub.com/sindresorhus/np/commit/607e5c1) - Enforce matching engines on npm install ([#​481](https://togithub.com/sindresorhus/np/issues/481)) [`b14dbc9`](https://togithub.com/sindresorhus/np/commit/b14dbc9) ##### Fixes - Fix checking collaborators when publishing to external registry ([#​491](https://togithub.com/sindresorhus/np/issues/491)) [`4ad4146`](https://togithub.com/sindresorhus/np/commit/4ad4146) ##### Docs - Document support for GitHub Packages [`91ba1ef`](https://togithub.com/sindresorhus/np/commit/91ba1ef) ### [`v5.2.1`](https://togithub.com/sindresorhus/np/releases/tag/v5.2.1) [Compare Source](https://togithub.com/sindresorhus/np/compare/v5.1.3...v5.2.1) - Don't check `"files"` in package.json or `.npmignore` if private package or not publishing ([#​472](https://togithub.com/sindresorhus/np/issues/472)) [`000ddcf`](https://togithub.com/sindresorhus/np/commit/000ddcf) - Don't ask for tag if `--no-publish` ([#​473](https://togithub.com/sindresorhus/np/issues/473)) [`23524b5`](https://togithub.com/sindresorhus/np/commit/23524b5) - Check package name availability in custom registry ([#​429](https://togithub.com/sindresorhus/np/issues/429)) [`8360cb6`](https://togithub.com/sindresorhus/np/commit/8360cb6) - Fix incorrectly showing "Aborted!" message on successful publish ([#​471](https://togithub.com/sindresorhus/np/issues/471)) [`e53cbe8`](https://togithub.com/sindresorhus/np/commit/e53cbe8)