yeoman / environment

Yeoman runtime environment
BSD 2-Clause "Simplified" License
128 stars 70 forks source link

Bump @npmcli/arborist from 4.3.1 to 5.0.6 #400

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps @npmcli/arborist from 4.3.1 to 5.0.6.

Release notes

Sourced from @​npmcli/arborist's releases.

arborist: v5.0.6

5.0.6 (2022-04-13)

Bug Fixes

  • arborist: dont skip adding advisories to audit based on name/range (aa4a4da), closes #4681
  • arborist: when reloading an edge, also refresh overrides (4d676e3)

arborist: v5.0.5

5.0.5 (2022-04-06)

Bug Fixes

Dependencies

arborist-v5.0.4

Bug Fixes

  • arborist: handle link nodes in old lockfiles correctly (6f9cb49)
  • arborist: identify and repair invalid nodes in the virtual tree (bd96ae4)
  • arborist: make sure resolveParent exists before checking props (18b8b94)
  • make sure we loadOverrides on the root node in loadVirtual() (99d8845)
  • only call npmlog progress methods if explicitly requested (#4644) (668ec7f), closes #3314

@​npmcli/arborist arborist-v5.0.3

Bug Fixes

  • arborist: _findMissingEdges missing dependency due to inconsistent path separators (#4261) (0e7511d)
  • arborist: save workspace version (#4578) (e9a2981)

Dependencies

... (truncated)

Changelog

Sourced from @​npmcli/arborist's changelog.

5.0.6 (2022-04-13)

Bug Fixes

  • arborist: dont skip adding advisories to audit based on name/range (aa4a4da), closes #4681
  • arborist: when reloading an edge, also refresh overrides (4d676e3)

5.0.5 (2022-04-06)

Bug Fixes

Dependencies

5.0.4 (2022-03-31)

Bug Fixes

  • arborist: handle link nodes in old lockfiles correctly (6f9cb49)
  • arborist: identify and repair invalid nodes in the virtual tree (bd96ae4)
  • arborist: make sure resolveParent exists before checking props (18b8b94)
  • make sure we loadOverrides on the root node in loadVirtual() (99d8845)
  • only call npmlog progress methods if explicitly requested (#4644) (668ec7f), closes #3314

5.0.3 (2022-03-17)

Bug Fixes

  • arborist: _findMissingEdges missing dependency due to inconsistent path separators (#4261) (0e7511d)
  • arborist: save workspace version (#4578) (e9a2981)

Dependencies

... (truncated)

Commits
  • 4a0e005 chore(latest): release arborist 5.0.6
  • aa4a4da fix(arborist): dont skip adding advisories to audit based on name/range
  • 4d676e3 fix(arborist): when reloading an edge, also refresh overrides
  • 0c76487 chore(arborist): update printable tree test to be a valid tree
  • 584b4ca chore(latest): release arborist 5.0.5
  • 304a238 chore: @​npmcli/template-oss@​3.3.2 (#4694)
  • 1ba7fcb chore: @​npmcli/template-oss@​3.3.1 (#4692)
  • b672745 chore: tap@16.0.1
  • a2781a3 deps: ssri@9.0.0
  • 0e87cac deps: @​npmcli/node-gyp@​2.0.0
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #402.