socket-security[bot]
commented
3 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/dependency-cruiser@16.4.2 | Transitive: environment, eval, filesystem, unsafe | +45 |
4.96 MB | sverweij |
🚮 Removed packages: npm/dependency-cruiser@16.3.1
sonarcloud[bot]
This PR contains the following updates:
16.3.1->16.4.2Release Notes
sverweij/dependency-cruiser (dependency-cruiser)
### [`v16.4.2`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.4.2) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.4.1...v16.4.2) #### 👷 maintenance - [`4314428`](https://redirect.github.com/sverweij/dependency-cruiser/commit/43144280) refactor: uses explicit exports over default where possible ([#956](https://redirect.github.com/sverweij/dependency-cruiser/issues/956)) - [`6d1b8bb`](https://redirect.github.com/sverweij/dependency-cruiser/commit/6d1b8bb7) build(npm): updates external dependencies + minor refactor #### 🧹 chores - [`c7802df`](https://redirect.github.com/sverweij/dependency-cruiser/commit/c7802df9) chore(ci): adds repo check to provenance publishing - [`76da16f`](https://redirect.github.com/sverweij/dependency-cruiser/commit/76da16f0) chore(npm): updates external devDependencies ### [`v16.4.1`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.4.1) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.4.0...v16.4.1) #### 🐛 fixes - [`e414c0a`](https://redirect.github.com/sverweij/dependency-cruiser/commit/e414c0ad) fix(extract): ignore entries in 'workspaces' arrays that aren't strings (instead of throwing) ([#955](https://redirect.github.com/sverweij/dependency-cruiser/issues/955)) - thanks to [@asfaltboy](https://redirect.github.com/asfaltboy) for raising the issue that led to this fix #### 🧹 chores Things not influencing the built & distributed artifact: - [`75f946f`](https://redirect.github.com/sverweij/dependency-cruiser/commit/75f946fa) chore(doc): removes a few [@ts-expect-errors](https://redirect.github.com/ts-expect-errors) now typescript has caught up with some new features - [`b2cd13d`](https://redirect.github.com/sverweij/dependency-cruiser/commit/b2cd13d9)/ [`bb215ae`](https://redirect.github.com/sverweij/dependency-cruiser/commit/bb215ae5) chore(npm): updates external devDependencies - [`079f7d8`](https://redirect.github.com/sverweij/dependency-cruiser/commit/079f7d87) chore(ci): cache based on the lockfile, now we use it ### [`v16.4.0`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.4.0) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.10...v16.4.0) #### ✨ features - [`0335910`](https://redirect.github.com/sverweij/dependency-cruiser/commit/0335910e) feat(cli): adds `--affected` command line option ([#952](https://redirect.github.com/sverweij/dependency-cruiser/issues/952)) This doesn't really add a new capability to dependency-cruiser, but an existing one more convenient to use (`--affected` == `--reaches "$(npx watskeburt main)"`; `--affected develop` == `--reaches "$(npx watskeburt develop)"`) - [`e43c1aa`](https://redirect.github.com/sverweij/dependency-cruiser/commit/e43c1aa8) fix(extract): extends list of source that could be transformed with babel with modern ones #### 👷 maintenance - [`77ebcc9`](https://redirect.github.com/sverweij/dependency-cruiser/commit/77ebcc91) build(npm): makes 3rd party dependency requirements more lenient dependency-cruiser now uses carets for specifying 3rd party dependencies. It's an experiment; it puts some trust in third party maintainers to not make breaking changes in minor or patch releases in exchange for a potentially smaller installed footprint because the likelihood a 3rd party dependency is already present in node_modules increases. - [`dbdf686`](https://redirect.github.com/sverweij/dependency-cruiser/commit/dbdf6861)/ [`2930a4e`](https://redirect.github.com/sverweij/dependency-cruiser/commit/2930a4e6) build(npm): updates external dependencies #### 🧹 chores Things not influencing the built & distributed artifact: - [`860ea1a`](https://redirect.github.com/sverweij/dependency-cruiser/commit/860ea1a1) Revert "Reapply "fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2"" The bug is fixed in later versions, and now it is more likely the runner that makes the reproducible release artifact actually picks that later version. 🤞 - [`818157d`](https://redirect.github.com/sverweij/dependency-cruiser/commit/818157d9) chore(ci): some more windows baby-sitting - [`15cbef2`](https://redirect.github.com/sverweij/dependency-cruiser/commit/15cbef28) chore: converts own config to javascript ([#951](https://redirect.github.com/sverweij/dependency-cruiser/issues/951)) ### [`v16.3.10`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.10) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.9...v16.3.10) #### 👷 maintenance - [`24b40be`](https://redirect.github.com/sverweij/dependency-cruiser/commit/24b40be8) refactor: replaces lodash ([#950](https://redirect.github.com/sverweij/dependency-cruiser/issues/950)) this cuts back dependency-cruiser's install size with >1Mb - [`018ea49`](https://redirect.github.com/sverweij/dependency-cruiser/commit/018ea495) build(npm): updates external dependencies - [`d3b0994`](https://redirect.github.com/sverweij/dependency-cruiser/commit/d3b0994a) refactor(test): simplifies is-same-violation unit tests - [`580fc77`](https://redirect.github.com/sverweij/dependency-cruiser/commit/580fc776) chore: adds kubotak-is to contributors in package manifest ### [`v16.3.9`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.9) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.7...v16.3.9) #### ✨ features - [`72373ea`](https://redirect.github.com/sverweij/dependency-cruiser/commit/72373ea9) feat: support svelte 4 ([#948](https://redirect.github.com/sverweij/dependency-cruiser/issues/948)) - thanks to [@kubotak-is](https://redirect.github.com/kubotak-is) for both doing the research and making the pull request that made this work! #### 👷 maintenance - [`30b5148`](https://redirect.github.com/sverweij/dependency-cruiser/commit/30b51482) build(npm): updates external dependencies - [`1ee4e42`](https://redirect.github.com/sverweij/dependency-cruiser/commit/1ee4e42d) chore: removes some additional references to/ uses of lodash - [`615134a`](https://redirect.github.com/sverweij/dependency-cruiser/commit/615134ac) fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2, where `npm clean-install` bought the farm ### [`v16.3.7`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.7) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.6...v16.3.7) ##### 👷 maintenance - [`daa550c`](https://redirect.github.com/sverweij/dependency-cruiser/commit/daa550ce) build(npm): updates external dependencies - [`dc4f183`](https://redirect.github.com/sverweij/dependency-cruiser/commit/dc4f1836) chore(npm): removes unused devDependency shx - [`6e618ce`](https://redirect.github.com/sverweij/dependency-cruiser/commit/6e618ce3) refactor: removes 3rd party dependency 'wrap-ansi' ([#946](https://redirect.github.com/sverweij/dependency-cruiser/issues/946)) ### [`v16.3.6`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.6) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.5...v16.3.6) #### 👷 maintenance - [`78810ce`](https://redirect.github.com/sverweij/dependency-cruiser/commit/78810cec) refactor: replaces chalk with picocolors ([#945](https://redirect.github.com/sverweij/dependency-cruiser/issues/945)) - [`03c34a6`](https://redirect.github.com/sverweij/dependency-cruiser/commit/03c34a6b) refactor: replaces lodash' flattenDeep, isEmpty, reject, omit, merge with native alternatives ([#944](https://redirect.github.com/sverweij/dependency-cruiser/issues/944)) - [`d6884ae`](https://redirect.github.com/sverweij/dependency-cruiser/commit/d6884ae0) build(npm): updates external dependencies ### [`v16.3.5`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.5) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.4...v16.3.5) #### 🐛 fixes - [`8196c9e`](https://redirect.github.com/sverweij/dependency-cruiser/commit/8196c9e5) fix(extract/transpile): transpile script setup with vue 2 ([#942](https://redirect.github.com/sverweij/dependency-cruiser/issues/942)) (thanks to [@ferdynator](https://redirect.github.com/ferdynator) for the clear & complete pull request!) ### [`v16.3.4`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.4) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.3...v16.3.4) This release is one in a series of efforts to reduce the number dependency-cruiser's 3rd party dependencies where it reduces maintenance, decreases total download size and/ or increases run speed. #### 👷 maintenance - [`f6b6d19`](https://redirect.github.com/sverweij/dependency-cruiser/commit/f6b6d192) refactor: removes 3rd party dependency 'semver-try-require' ([#939](https://redirect.github.com/sverweij/dependency-cruiser/issues/939)) - [`c8f7fa1`](https://redirect.github.com/sverweij/dependency-cruiser/commit/c8f7fa14) refactor: removes 3rd party dependency 'indent-string' ([#940](https://redirect.github.com/sverweij/dependency-cruiser/issues/940)) - [`838b3e8`](https://redirect.github.com/sverweij/dependency-cruiser/commit/838b3e85) refactor: removes 3rd party dependency 'figures' ([#941](https://redirect.github.com/sverweij/dependency-cruiser/issues/941)) - [`af27535`](https://redirect.github.com/sverweij/dependency-cruiser/commit/af275359) build(npm): updates external dependencies - [`eac0d63`](https://redirect.github.com/sverweij/dependency-cruiser/commit/eac0d63d) refactor(init): replaces runtime wordwrap on feedback with a static wordwrap - [`bbd3abb`](https://redirect.github.com/sverweij/dependency-cruiser/commit/bbd3abba) chore: removes accidentally committed file ### [`v16.3.3`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.3) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.2...v16.3.3) #### 🐛 fixes - [`de34d42`](https://redirect.github.com/sverweij/dependency-cruiser/commit/de34d42a) fix(enrich/summarize): also configure experimentalStats to be in the summary (so the caching algorithme can pick it up as well) - [`8617939`](https://redirect.github.com/sverweij/dependency-cruiser/commit/86179394) chore: makes generated .mjs schemas smaller ([#934](https://redirect.github.com/sverweij/dependency-cruiser/issues/934)) #### 📖 documentation - [`6f6bef5`](https://redirect.github.com/sverweij/dependency-cruiser/commit/6f6bef5f) doc(FAQ): copy update - [`46d1c3f`](https://redirect.github.com/sverweij/dependency-cruiser/commit/46d1c3f4) chore(schema): corrects a typo - [`4a5dcd0`](https://redirect.github.com/sverweij/dependency-cruiser/commit/4a5dcd09) doc(options-reference): corrects a typo #### 👷 maintenance - [`34e3795`](https://redirect.github.com/sverweij/dependency-cruiser/commit/34e37952) build(npm): updates external dependencies - [`079e3fe`](https://redirect.github.com/sverweij/dependency-cruiser/commit/079e3fea) chore(ci): makes husky config husky@9.x compliant ### [`v16.3.2`](https://redirect.github.com/sverweij/dependency-cruiser/releases/tag/v16.3.2) [Compare Source](https://redirect.github.com/sverweij/dependency-cruiser/compare/v16.3.1...v16.3.2) #### 🐛 fixes - [`54a7f42`](https://redirect.github.com/sverweij/dependency-cruiser/commit/54a7f423) fix(config-util): adds utility that extracts dependency-cruiser options from a dependency-cruiser config ([#933](https://redirect.github.com/sverweij/dependency-cruiser/issues/933)) - thanks to [@AdrienLeblanc](https://redirect.github.com/AdrienLeblanc) for reporting this issue. #### 👷 maintenance - [`7e74a4e`](https://redirect.github.com/sverweij/dependency-cruiser/commit/7e74a4eb) build(npm): update external dependencies - [`add4856`](https://redirect.github.com/sverweij/dependency-cruiser/commit/add48568) chore(ci): also run on node 22 - [`712c5be`](https://redirect.github.com/sverweij/dependency-cruiser/commit/712c5bef) refactor: cleans up some of the regular expressionsConfiguration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.