chore(deps): bump the npm_and_yarn group across 2 directories with 12 updates #1145
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the npm_and_yarn group with 7 updates in the /build_scripts/npm_macos directory: | Package | From | To | | --- | --- | --- | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `5.1.6` | | [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `22.14.13` | `24.9.1` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `3.0.0` | `3.0.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.8` | `1.15.5` | | [got](https://github.com/sindresorhus/got) | `9.6.0` | `` | | [git-authors-cli](https://github.com/Kikobeats/git-authors-cli) | `1.0.37` | `1.0.49` | Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `minimatch` from 3.0.4 to 5.1.6 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v5.1.6) Updates `electron-builder` from 22.14.13 to 24.9.1 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-builder/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/v24.9.1/packages/electron-builder) Updates `ansi-regex` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v3.0.0...v3.0.1) Updates `ejs` from 3.1.6 to 3.1.9 - [Release notes](https://github.com/mde/ejs/releases) - [Commits](mde/ejs@v3.1.6...v3.1.9) Updates `follow-redirects` from 1.14.8 to 1.15.5 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.15.5) Removes `got` Updates `git-authors-cli` from 1.0.37 to 1.0.49 - [Release notes](https://github.com/Kikobeats/git-authors-cli/releases) - [Changelog](https://github.com/Kikobeats/git-authors-cli/blob/master/CHANGELOG.md) - [Commits](Kikobeats/git-authors-cli@v1.0.37...v1.0.49) Updates `json5` from 2.2.0 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.0...v2.2.3) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `plist` from 3.0.4 to 3.1.0 - [Release notes](https://github.com/TooTallNate/node-plist/releases) - [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md) - [Commits](https://github.com/TooTallNate/node-plist/commits) Updates `yargs-parser` from 20.2.9 to 21.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@yargs-parser-v20.2.9...yargs-parser-v21.1.1) --- updated-dependencies: - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: electron-builder dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: ansi-regex dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: ejs dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: got dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: git-authors-cli dependency-type: direct:production dependency-group: npm_and_yarn-security-group - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: plist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/electron-builder@22.14.13, npm/git-authors-cli@1.0.37 |
|
Superseded by #1150. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/build_scripts/npm_macos/npm_and_yarn-security-group-d4eed93f0d
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the /build_scripts/npm_macos directory:
5.7.15.7.23.0.45.1.622.14.1324.9.13.0.03.0.11.14.81.15.59.6.01.0.371.0.49Updates
semverfrom 5.7.1 to 5.7.2Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
f8cc313chore: release 5.7.22f8fd41fix: better handling of whitespace (#585)deb5ad5chore:@npmcli/template-oss@4.16.0Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Updates
minimatchfrom 3.0.4 to 5.1.6Changelog
Sourced from minimatch's changelog.
... (truncated)
Commits
3e216b95.1.64d0b7f5Detect leading dots in extglob subpatterns95568265.1.5919c856Count closing parens when closing excess open parens8d5cd74publish legacy v5 version857a6315.1.4d2c654dDo not apply magic unnecessarily for nocase5878cf2chore: add copyright year to license9b42a9c5.1.349ae7a2Fix end-anchoring of negative extglobsUpdates
electron-builderfrom 22.14.13 to 24.9.1Release notes
Sourced from electron-builder's releases.
... (truncated)
Changelog
Sourced from electron-builder's changelog.
... (truncated)
Commits
7ec7ac8chore(deploy): Release v24.9.1 (#7888)abf52eachore(deploy): Release v24.9.0 (#7876)4791c83chore(deploy): Release v24.8.1 (electron-updater@6.1.7) (#7847)4c9b829chore(deploy): Release 24.8.0 (electron-updater@6.1.6) (#7825)2ca6212chore(deploy): Release v24.7.0 (#7796)562870echore(deploy): Release v24.6.5 (electron-updater@6.1.5) (#7751)dcb6310chore(deploy): Release v24.6.4 (#7708)9ad852achore(deploy): Release 24.6.3 (#7686)53d78abchore(deploy): Release 24.6.2 (electron-updater@6.1.4) (#7678)59da388fix import to use out instead of srcUpdates
ansi-regexfrom 3.0.0 to 3.0.1Commits
f545bdb3.0.1c57d4c2fix a few old XO issues for backport419250fFix potential ReDoS (#37)Updates
ejsfrom 3.1.6 to 3.1.9Release notes
Sourced from ejs's releases.
Commits
aed0124Version 3.1.97083793Updated dev deps87f1da6Merge pull request #707 from mde/dependabot/npm_and_yarn/minimatch-3.1.2e41a914Removed old changelog, please rely on git log9ea36baMerge pull request #719 from jportner/frozen-prototype-fix181a537Fall back to assignment, update test58bc2ebChange approach to shadowing "toString" property for escapeXML76c9c61Bump minimatch from 3.0.4 to 3.1.2f818bceMerge pull request #706 from mde/dependabot/npm_and_yarn/flat-and-mocha-5.0.20fca863Bump flat and mochaUpdates
follow-redirectsfrom 1.14.8 to 1.15.5Commits
b1677ceRelease version 1.15.5 of the npm package.d8914f7Preserve fragment in responseUrl.6585820Release version 1.15.4 of the npm package.7a6567eDisallow bracketed hostnames.05629afPrefer native URL instead of deprecated url.parse.1cba8e8Prefer native URL instead of legacy url.resolve.72bc2a4Simplify _processResponse error handling.3d42aecAdd bracket tests.bcbb096Do not directly set Error properties.192dbe7Release version 1.15.3 of the npm package.Removes
gotUpdates
git-authors-clifrom 1.0.37 to 1.0.49Release notes
Sourced from git-authors-cli's releases.
Changelog
Sourced from git-authors-cli's changelog.
Commits
41e7aa7chore(release): 1.0.495289c88build: tweaks67ac845chore(release): 1.0.4896b92farefactor: use tinyspawn63e7493chore(release): 1.0.47ff16f06refactor: avoid exists-file7727df2chore(release): 1.0.464014eb8refactor: drop update-notifier40bb226chore(release): 1.0.451588999build: tweaksUpdates
json5from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
minimistfrom 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2v1.2.8a026794Merge tag 'v0.2.3'c0b2661v0.2.363b8fee[Fix] Fix long option followed by single dash (#17)72239e6[Tests] Remove duplicate test (#12)34b0f1c[eslint] fix indentation3226afa[Dev Deps] add missingnpmignoredev dep098873c[Dev Deps] update@ljharb/eslint-config,aud9ec4d27[Fix] Fix long option followed by single dashba92fe6[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
plistfrom 3.0.4 to 3.1.0Changelog
Sourced from plist's changelog.
Commits
Updates
yargs-parserfrom 20.2.9 to 21.1.1Release notes
Sourced from yargs-parser's releases.
Changelog
Sourced from yargs-parser's changelog.
Commits
3aba24cchore(main): release yargs-parser 21.1.1 (#455)d69f9c3fix(typescript): ignore .cts files during publish (#454)90067a0chore(main): release yargs-parser 21.1.0 (#446)d07bcdbfix: node version check now uses process.versions.node (#450)c0c6079chore(deps): update dependency puppeteer to v16 (#451)a89259ffeat: allow the browser build to be imported (#443)c474bc1fix(halt-at-non-option): prevent known args from being parsed when "unknown-o...fd30238chore(deps): update dependency serve to v14 (#449)a072f9achore(deps): update dependency puppeteer to v15 (#444)4f1060bfix: parse options ending with 3+ hyphens (#434)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.