Open renovate[bot] opened 1 year ago
socket-security[bot]
commented
7 months ago 👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎
This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.
socket-security[bot]
commented
1 month ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/semantic-release@24.2.0 | environment, network Transitive: eval, filesystem, shell, unsafe | +205 |
31.9 MB | semantic-release-bot |
🚮 Removed packages: npm/semantic-release@21.1.2
This PR contains the following updates:
21.1.2->24.2.0Release Notes
semantic-release/semantic-release (semantic-release)
### [`v24.2.0`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v24.2.0) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v24.1.3...v24.2.0) ##### Features - clarify branch existence requirement in error messages ([#3462](https://redirect.github.com/semantic-release/semantic-release/issues/3462)) ([05a2ea9](https://redirect.github.com/semantic-release/semantic-release/commit/05a2ea9a060e6508abf92087e8c8cc4a7a85604f)) ### [`v24.1.3`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v24.1.3) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v24.1.2...v24.1.3) ##### Bug Fixes - **branch-naming:** prevent non-range versions from being identified as maintenance branches ([07f2672](https://redirect.github.com/semantic-release/semantic-release/commit/07f2672e25626b7f8c7329216496bfa962b3c6e9)) ### [`v24.1.2`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v24.1.2) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v24.1.1...v24.1.2) ##### Bug Fixes - **deps:** update `@semantic-release/github` to `v11.0.0` ([#3460](https://redirect.github.com/semantic-release/semantic-release/issues/3460)) ([43df51b](https://redirect.github.com/semantic-release/semantic-release/commit/43df51b79ec9c8716b737804486b375459ea177e)) ### [`v24.1.1`](https://redirect.github.com/semantic-release/semantic-release/compare/v24.1.0...v24.1.1) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v24.1.0...v24.1.1) ### [`v24.1.0`](https://redirect.github.com/semantic-release/semantic-release/compare/v24.0.0...bcc663ccf02165bae93e278cf230919e53a97ee7) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v24.0.0...v24.1.0) ### [`v24.0.0`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v24.0.0) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.1.1...v24.0.0) ##### Bug Fixes - **deps:** upgraded to the beta of the commit-analyzer plugin ([dfc3d91](https://redirect.github.com/semantic-release/semantic-release/commit/dfc3d9110ece8f4a1b72e209e3efce4c67a4902f)) - **deps:** upgraded to the beta of the release-notes-generator plugin ([4a4cd92](https://redirect.github.com/semantic-release/semantic-release/commit/4a4cd92097e73dc1defc514347c673d84e1b6a9e)) ##### BREAKING CHANGES - **deps:** the commit-analyzer plugin now expects to be used with the latest major versions of conventional-changelog packages. if you are installing any of these packages in addition to semantic-release, be sure to update them as well - **deps:** the release-notes-generator plugin now expects to be used with the latest major versions of conventional-changelog packages. if you are installing any of these packages in addition to semantic-release, be sure to update them as well ### [`v23.1.1`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.1.0...73bcd0bcdb98322c5c5224ffb55960de114c3fd1) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.1.0...v23.1.1) ### [`v23.1.0`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.8...3a18bf8677657ab7a88f9d57f49e12b7726c4a19) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.8...v23.1.0) ### [`v23.0.8`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v23.0.8) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.7...v23.0.8) ##### Bug Fixes - **deps:** rename read-pkg-up -> read-package-up ([4980cba](https://redirect.github.com/semantic-release/semantic-release/commit/4980cba57169048ae1cd6ba869170da980b30fe3)) - **deps:** rename read-pkg-up -> read-package-up ([#3249](https://redirect.github.com/semantic-release/semantic-release/issues/3249)) ([95a8b9e](https://redirect.github.com/semantic-release/semantic-release/commit/95a8b9e0988f2d8eb157251e98e4660e359137c1)) ### [`v23.0.7`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.6...v23.0.7) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.6...v23.0.7) ### [`v23.0.6`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v23.0.6) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.5...v23.0.6) ##### Bug Fixes - **deps:** update dependency [@semantic-release/release-notes-generator](https://redirect.github.com/semantic-release/release-notes-generator) to v13 ([#3237](https://redirect.github.com/semantic-release/semantic-release/issues/3237)) ([b7e08fc](https://redirect.github.com/semantic-release/semantic-release/commit/b7e08fc6068154713487dbf6817c8fc356319d6f)) ### [`v23.0.5`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.4...29458a0ebb14bc7691d69cf78a08a847c88789bb) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.4...v23.0.5) ### [`v23.0.4`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.3...7a50c8a1a9a14d25fb54b1ea087914fb836b04be) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.3...v23.0.4) ### [`v23.0.3`](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.2...96d5aeb4b657429ff8f272aaf38e1775079e7c24) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.2...v23.0.3) ### [`v23.0.2`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v23.0.2) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.1...v23.0.2) ##### Bug Fixes - **deps:** update dependency marked to v12 ([#3176](https://redirect.github.com/semantic-release/semantic-release/issues/3176)) ([38105f5](https://redirect.github.com/semantic-release/semantic-release/commit/38105f5bc8ac280d8fb726097962bb357bfc5dac)) ### [`v23.0.1`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v23.0.1) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v23.0.0...v23.0.1) ##### Bug Fixes - **deps:** update dependency marked-terminal to v7 ([9faded8](https://redirect.github.com/semantic-release/semantic-release/commit/9faded8d50bd056374f79d0a1385dc9f140a85de)) ### [`v23.0.0`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v23.0.0) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.12...v23.0.0) ##### Bug Fixes - **deps:** update dependency cosmiconfig to v9 ([#3105](https://redirect.github.com/semantic-release/semantic-release/issues/3105)) ([07dde04](https://redirect.github.com/semantic-release/semantic-release/commit/07dde042bbdd4a407dbf7f7a5b8ab2d11abdb8c3)) - **deps:** update dependency marked to v11 ([#3079](https://redirect.github.com/semantic-release/semantic-release/issues/3079)) ([6d2a6f1](https://redirect.github.com/semantic-release/semantic-release/commit/6d2a6f1aa658cfdfa905f19a4c54f38ebdfc94ef)) - **deps:** upgraded to the latest version of env-ci ([0d0ed9d](https://redirect.github.com/semantic-release/semantic-release/commit/0d0ed9d08a26ed5e146fcba5a58d760f7a1ebd02)) - use one note reference per tag to prevent conflicts ([#2085](https://redirect.github.com/semantic-release/semantic-release/issues/2085)) ([020ea7d](https://redirect.github.com/semantic-release/semantic-release/commit/020ea7d7d5aa6c123fe4c97754b6b1b36c0a8e2c)) ##### Features - **node-versions:** dropped support for node v18 and raised the minimum for v20 ([2904832](https://redirect.github.com/semantic-release/semantic-release/commit/2904832967c9160d3e293ce4be7a12aef0318a95)), closes [/github.com/semantic-release/gitlab/pull/647#discussion_r1423131205](https://redirect.github.com//github.com/semantic-release/gitlab/pull/647/issues/discussion_r1423131205) ##### BREAKING CHANGES - **deps:** woodpecker ci users need to upgrade to v1.0.0 or higher to remain supported. see https://github.com/semantic-release/env-ci/releases/tag/v11.0.0 for more information - **node-versions:** support for node v18 has been dropped and the minimum for v20 is now v20.8.1 related to [https://github.com/semantic-release/semantic-release/discussions/3088](https://redirect.github.com/semantic-release/semantic-release/discussions/3088) - **deps:** if using `release.config.js` as the name of your config file, it needs to be moved to a `.config/` directory. see https://github.com/cosmiconfig/cosmiconfig/releases/tag/v9.0.0 for more detail ### [`v22.0.12`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.12) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.11...v22.0.12) ##### Bug Fixes - Revert "fix(deps): update dependency cosmiconfig to v9" ([#3104](https://redirect.github.com/semantic-release/semantic-release/issues/3104)) ([f6f1bf1](https://redirect.github.com/semantic-release/semantic-release/commit/f6f1bf167c883193be539127afe39b88c5aac330)) ### [`v22.0.11`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.11) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.10...v22.0.11) ##### Bug Fixes - **deps:** update dependency cosmiconfig to v9 ([b38cd2e](https://redirect.github.com/semantic-release/semantic-release/commit/b38cd2e44e95c9fb16b29285833ee2f3460b7265)) ### [`v22.0.10`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.10) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.9...v22.0.10) ##### Bug Fixes - revert updating cosmiconfig to v9 ([88efead](https://redirect.github.com/semantic-release/semantic-release/commit/88efeadac96f93003ffa7050d8452ddb44d566bb)) ### [`v22.0.9`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.9) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.8...v22.0.9) ##### Bug Fixes - **deps:** update dependency cosmiconfig to v9 ([#3072](https://redirect.github.com/semantic-release/semantic-release/issues/3072)) ([8b0dbd2](https://redirect.github.com/semantic-release/semantic-release/commit/8b0dbd28054328f8ce3999b813b750c180036447)) ### [`v22.0.8`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.8) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.7...v22.0.8) ##### Bug Fixes - support windows absolute extends ([#3062](https://redirect.github.com/semantic-release/semantic-release/issues/3062)) ([0d06f62](https://redirect.github.com/semantic-release/semantic-release/commit/0d06f62411ca2f8bc0f4367bf2e0ec22c4cb77dc)) ### [`v22.0.7`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.7) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.6...v22.0.7) ##### Bug Fixes - **deps:** update dependency read-pkg-up to v11 ([#3047](https://redirect.github.com/semantic-release/semantic-release/issues/3047)) ([f09e55f](https://redirect.github.com/semantic-release/semantic-release/commit/f09e55f39f8fcafb516bddeb0be63fb30763d3ac)) ##### Features - support extending ESM configuration files ([#3036](https://redirect.github.com/semantic-release/semantic-release/pull/3037))([6900865](https://redirect.github.com/semantic-release/semantic-release/commit/6900865324c4eae56c06f01bde9a5ae2f3690917)) ### [`v22.0.6`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.6) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.5...v22.0.6) ##### Bug Fixes - **deps:** update dependency figures to v6 ([#3033](https://redirect.github.com/semantic-release/semantic-release/issues/3033)) ([305674d](https://redirect.github.com/semantic-release/semantic-release/commit/305674d1dbb23120f32ccab278f78961bff05750)) ### [`v22.0.5`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.5) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.4...v22.0.5) ##### Bug Fixes - **deps:** update dependency env-ci to v10 ([#2983](https://redirect.github.com/semantic-release/semantic-release/issues/2983)) ([e759493](https://redirect.github.com/semantic-release/semantic-release/commit/e759493e074650748fc3bbef9e640db413b52d56)) ### [`v22.0.4`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.4) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.3...v22.0.4) ##### Bug Fixes - **deps:** update dependency marked to v9 ([#2947](https://redirect.github.com/semantic-release/semantic-release/issues/2947)) ([84f2ee9](https://redirect.github.com/semantic-release/semantic-release/commit/84f2ee9374c4da1a8b2b2dd30ea3ccdbac030a4b)) ### [`v22.0.3`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.3) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.2...v22.0.3) ##### Bug Fixes - **exports:** removed the `exports` definition for the time being ([561e2d6](https://redirect.github.com/semantic-release/semantic-release/commit/561e2d648d59c6a5f4d7df7a6e16aa37aeeee6fb)), closes [#2968](https://redirect.github.com/semantic-release/semantic-release/issues/2968). see [https://github.com/semantic-release/semantic-release/issues/2978](https://redirect.github.com/semantic-release/semantic-release/issues/2978) for more information. ### [`v22.0.2`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.2) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.1...v22.0.2) ##### Bug Fixes - **deps:** update dependency marked-terminal to v6 ([8a7befe](https://redirect.github.com/semantic-release/semantic-release/commit/8a7befe96ba619a465b42d73e1d68c7b19945647)) ### [`v22.0.1`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.1) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v22.0.0...v22.0.1) ##### Bug Fixes - **deps:** upgraded `release-notes-generator` and `commit-analyzer` plugins to stable versions ([041e4f7](https://redirect.github.com/semantic-release/semantic-release/commit/041e4f7e3779d5a62c36e0cecb55740df590489c)), closes [#2934](https://redirect.github.com/semantic-release/semantic-release/issues/2934) ### [`v22.0.0`](https://redirect.github.com/semantic-release/semantic-release/releases/tag/v22.0.0) [Compare Source](https://redirect.github.com/semantic-release/semantic-release/compare/v21.1.2...v22.0.0) ##### Bug Fixes - **deps:** updated to the latest beta of the commit analyzer plugin ([03a687b](https://redirect.github.com/semantic-release/semantic-release/commit/03a687b3ea862f06cc5f8a721827296718640fd1)) - **deps:** updated to the latest betas of the commit-analyzer and release-notes-generator plugins ([de8e4e0](https://redirect.github.com/semantic-release/semantic-release/commit/de8e4e05e9f20c1ac073e08e5dd340aadc2ba70e)) - **deps:** upgraded to the latest version of the npm plugin with npm v10 ([a23b718](https://redirect.github.com/semantic-release/semantic-release/commit/a23b71890b0638d41e52c41ffbd8d37f421fda6b)) ##### Features - **conventional-changelog-presets:** supported new preset format ([07a79ea](https://redirect.github.com/semantic-release/semantic-release/commit/07a79ea7e9588f3c4175b4c7196370819cae8a56)) - defined exports for the package ([72ab317](https://redirect.github.com/semantic-release/semantic-release/commit/72ab317bb0c6333c643f457f5658c318b78e4740)) - **node-versions:** raised the minimum node v20 requirement to v20.6 ([e623cc6](https://redirect.github.com/semantic-release/semantic-release/commit/e623cc642ae2a2dba0d439494ba700366bd86dd3)) - **node-versions:** raised the minimum required node version to v18.17 and dropped v19 support ([b9f294d](https://redirect.github.com/semantic-release/semantic-release/commit/b9f294d179b2792882c19206b64eb484bb0c1cef)) - **node-versions:** raised the minimum supported node version w/in the v20 range to v20.6.1 ([b93bef4](https://redirect.github.com/semantic-release/semantic-release/commit/b93bef4eea9baf3a94f41def4efb2f2af19cddf6)) ##### BREAKING CHANGES - **node-versions:** the minimum supported version for the v20 range of node has been raised slightly to v20.6.1 to avoid a known node bug - **node-versions:** the minimum supported node version in the v20 major range is now v20.6 - **node-versions:** node v18.17 is now the minimum supported node version and support for v19 has been dropped - exports prevents access to internal files, but they arent intended for public use anyway - **conventional-changelog-presets:** the new preset format is a breaking change when compared to the previous preset format. updating to support the new format means that the old preset format is no longer supported. update your preset to the latest version to maintain compatibility. this is also important if you are using a preset outside of the list of official conventional-changelog presets since your preset will need to be updated to export async functions to match the expected preset signature.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.