New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump semver from 5.7.1 to 7.3.5 #9754

Closed

dependabot wants to merge 1 commit into next from dependabot/npm_and_yarn/semver-7.3.5

Contributor

dependabot bot commented on behalf of github Jul 12, 2021 •

edited

Bumps semver from 5.7.1 to 7.3.5.

Changelog

Sourced from semver's changelog.

changes log

7.3.0

Add subset(r1, r2) method to determine if r1 range is entirely contained by r2 range.

7.2.3

Fix handling of includePrelease mode where version ranges like 1.0.0 - 2.0.0 would include 3.0.0-pre and not 1.0.0-pre.

7.2.2

Fix bug where 2.0.0-pre would be included in ^1.0.0 if includePrerelease was set to true.

7.2.0

Add simplifyRange method to attempt to generate a more human-readable range expression that is equivalent to a supplied range, for a given set of versions.

7.1.2

Remove fancy lazy-loading logic, as it was causing problems for webpack users.

7.1.0

Add require('semver/preload') to load the entire module without using lazy getter methods.

7.0.0

Refactor module into separate files for better tree-shaking

Drop support for very old node versions, use const/let, => functions, and classes.

6.3.0

Expose the token enum on the exports

6.2.0

Coerce numbers to strings when passed to semver.coerce()

Add rtl option to coerce from right to left

6.1.3

... (truncated)

Commits

e79ac3a 7.3.5
0ce87d6 Correctly handle prereleases/ANY ranges in subset
15ed208 fix(subset): check any as superset
093b40f 7.3.4
93ff028 use modern lru-cache, not legacy
984a8d5 7.3.3
703ec39 Add lru-cache dep
2d01126 MinVersion failing for '^2.16.2 ^2.16' alike range
a7acc5d spelling: satisfies
e6f7919 spelling: intersection
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot bot added the dependencies label

Contributor Author

dependabot bot commented on behalf of github Jul 12, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 7 月 10 日 - 2021 年 7 月 17 日) #9810

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 4 times, most recently from a6b07ad to 02e9414 Compare

July 22, 2021 02:19

Contributor Author

dependabot bot commented on behalf of github Jul 22, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 7 月 17 日 - 2021 年 7 月 24 日) #9882

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from fa269f7 to 0f90b8f Compare

July 30, 2021 11:09

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 7 月 24 日 - 2021 年 7 月 31 日) #9942

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from 9005cfb to 4cd9b98 Compare

August 2, 2021 09:27

Contributor Author

dependabot bot commented on behalf of github Aug 3, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from d580e07 to ac5823d Compare

August 6, 2021 16:15

Contributor Author

dependabot bot commented on behalf of github Aug 12, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch from ac5823d to 7d541d6 Compare

August 13, 2021 05:55

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 8 月 7 日 - 2021 年 8 月 14 日) #10048

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 3 times, most recently from c2f7994 to e04f2c8 Compare

August 20, 2021 11:31

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 8 月 14 日 - 2021 年 8 月 21 日) #10099

Closed

Contributor Author

dependabot bot commented on behalf of github Aug 25, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment

Contributor Author

dependabot bot commented on behalf of github Aug 27, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 8 月 21 日 - 2021 年 8 月 28 日) #10138

Closed

Contributor Author

dependabot bot commented on behalf of github Sep 3, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment

Contributor Author

dependabot bot commented on behalf of github Sep 7, 2021

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

taro-bot2 bot mentioned this pull request

项目周报 (2021 年 9 月 4 日 - 2021 年 9 月 11 日) #10270

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 7 times, most recently from b06dcf9 to 23d646d Compare

February 19, 2022 07:25

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from 786160b to c1b84fa Compare

February 28, 2022 10:46

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 6 times, most recently from d4f543a to dc49079 Compare

March 7, 2022 08:44

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from 3660fc9 to ead0212 Compare

March 14, 2022 09:03

taro-bot2 bot mentioned this pull request

项目周报 (2022 年 3 月 12 日 - 2022 年 3 月 19 日) #11477

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 2 times, most recently from a18246d to 65a4853 Compare

March 24, 2022 06:05

taro-bot2 bot mentioned this pull request

项目周报 (2022 年 3 月 19 日 - 2022 年 3 月 26 日) #11513

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch 3 times, most recently from e910896 to 031a807 Compare

March 30, 2022 03:42

taro-bot2 bot mentioned this pull request

项目周报 (2022 年 3 月 26 日 - 2022 年 4 月 2 日) #11561

Closed


          chore(deps): bump semver from 5.7.1 to 7.3.5

6cb7ccb

Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 7.3.5.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/master/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v7.3.5)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot force-pushed the dependabot/npm_and_yarn/semver-7.3.5 branch from 031a807 to 6cb7ccb Compare

April 6, 2022 06:41

Contributor Author

dependabot bot commented on behalf of github Apr 6, 2022

Superseded by #11586.

dependabot bot closed this

dependabot bot deleted the dependabot/npm_and_yarn/semver-7.3.5 branch

April 6, 2022 21:28

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment