Skip to content

build(deps-dev): bump the semantic-release group across 1 directory with 3 updates - #505

Merged
awesomephant merged 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-0464ab9cfb
Aug 3, 2026
Merged

build(deps-dev): bump the semantic-release group across 1 directory with 3 updates#505
awesomephant merged 1 commit into
mainfrom
dependabot/npm_and_yarn/semantic-release-0464ab9cfb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the semantic-release group with 3 updates in the / directory: @semantic-release/changelog, @semantic-release/git and semantic-release.

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

  • Replaced xo with prettier with default configuration; following newly established convention
  • Replaced nyc with c8 for code coverage
  • Replaced lodash with lodash-es for proper esm support

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
  • 0563e5d chore(deps): update to the latest semantic-release version (#417)
  • e154214 feat: ES Module (#414)
  • 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
  • 1c48000 test: remove codecov (#399)
  • 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
  • 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
  • e7c79f8 chore(deps): update dependency nyc to v17 (#392)
  • 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
  • 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.


Updates @semantic-release/git from 10.0.1 to 11.0.1

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

  • deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

Other Notable Changes

  • @semantic-release/error ^3^4 (ESM-only)
  • aggregate-error ^3^5 (ESM-only, uses native AggregateError)
  • execa ^5^9 (ESM-only, named export)
  • p-reduce ^2^3 (ESM-only)
  • Removed CJS-only devDeps: clear-module, file-url, fs-extra, get-stream, nyc
  • Added c8 for coverage; bumped ava, sinon, tempy, semantic-release, prettier
  • Engine: ^22.22.2 || >= 24.15;
  • Scripts: nycc8, added pretest, removed test:ci

Related Issue

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

  • update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

... (truncated)

Commits
  • b39d5c6 fix(deps): update dependency execa to v10 (#564)
  • 9dd61f1 chore(deps): lock file maintenance (#470)
  • c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
  • b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
  • d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
  • 16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
  • 8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
  • e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
  • 4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
  • 7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.


Updates semantic-release from 25.0.5 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)
Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Aug 1, 2026
@dependabot dependabot Bot changed the title build(deps-dev): bump the semantic-release group with 3 updates build(deps-dev): bump the semantic-release group across 1 directory with 3 updates Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-0464ab9cfb branch from e8d9552 to 0edd997 Compare August 3, 2026 07:35
…ith 3 updates

Bumps the semantic-release group with 3 updates in the / directory: [@semantic-release/changelog](https://github.com/semantic-release/changelog), [@semantic-release/git](https://github.com/semantic-release/git) and [semantic-release](https://github.com/semantic-release/semantic-release).


Updates `@semantic-release/changelog` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.3...v7.0.0)

Updates `@semantic-release/git` from 10.0.1 to 11.0.1
- [Release notes](https://github.com/semantic-release/git/releases)
- [Commits](semantic-release/git@v10.0.1...v11.0.1)

Updates `semantic-release` from 25.0.5 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v25.0.5...v25.0.8)

---
updated-dependencies:
- dependency-name: "@semantic-release/changelog"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: semantic-release
- dependency-name: "@semantic-release/git"
  dependency-version: 11.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: semantic-release
- dependency-name: semantic-release
  dependency-version: 25.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: semantic-release
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-0464ab9cfb branch from 0edd997 to ed69a78 Compare August 3, 2026 07:41
@awesomephant
awesomephant merged commit e1c79e4 into main Aug 3, 2026
2 of 3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/semantic-release-0464ab9cfb branch August 3, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant