build: update all non-major dependencies #21334

renovate · 2021-07-13T06:49:13Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@bazel/bazelisk	`1.9.0` -> `1.10.0`
@typescript-eslint/eslint-plugin	`4.28.2` -> `4.28.3`
@typescript-eslint/parser	`4.28.2` -> `4.28.3`
css-loader	`5.2.6` -> `5.2.7`
inquirer	`8.1.1` -> `8.1.2`
license-webpack-plugin	`2.3.19` -> `2.3.20`
style-loader	`3.0.0` -> `3.1.0`
verdaccio (source)	`5.1.1` -> `5.1.2`

Release Notes

bazelbuild/bazelisk

`v1.10.0`

Compare Source

This release contains the following major changes:

#248: No longer get incompatible flags from GitHub
#252: Make the HTTP user agent configurable
#253: Bump github.com/bazelbuild/rules_go from 0.27.0 to 0.28.0

typescript-eslint/typescript-eslint

`v4.28.3`

Compare Source

Note: Version bump only for package @typescript-eslint/parser

webpack-contrib/css-loader

`v5.2.7`

Compare Source

SBoudrias/Inquirer.js

`v8.1.2`

Compare Source

Fix bug on rawList prompt
Bump dependencies

xz64/license-webpack-plugin

`v2.3.20`

Compare Source

Fixed

Fixed an issue where dependent and cached modules' licenses were not being added

webpack-contrib/style-loader

`v3.1.0`

Compare Source

Features

allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

reduce runtime (#519) (8a26186)
reduce runtime when you use custom options (#520) (21c80c8)

verdaccio/verdaccio

`v5.1.2`

Compare Source

@@ -0,0 +1,2048 @@

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.1.2 (2021-07-14)

Bug Fixes

remove token experiment flag (#2332) (2924054)
update dependencies (#2291) (b421ed8)
update dependencies (#2303) (4fe8ddf)
update dependencies (#2333) (7180338)
update docker base image node 14.17.1 (#2314) (b8f711a)
update docker base image node 14.17.3 (2bc5908)

5.1.1 (2021-06-12)

Bug Fixes

add logger fatal if fails on startup (#2288) (558dd3f), closes #2287
improve get headers from request #2190 (#2271) (38ca095)

5.1.0 (2021-05-24)

Features

implement search v1 endpoint (#2256) (251bd95)
tarball url redirect (#1688) (78d04cf)
update Node.js docker image 14.17.0 (#2247) (4ed7286)

Bug Fixes

restore using local path web logo (#2270) (8434cc5)
update core dependencies (#2269) (1e4c900)

5.0.4 (2021-04-28)

Bug Fixes

scoped query support (#2208) (01c5d2c)

5.0.3 (2021-04-27)

Bug Fixes

update @verdaccio/ui-theme (#2207) (ced47d5)

5.0.2 (2021-04-27)

Bug Fixes

incorrect sanity check for theme plugin (#2205) (d8b62cf)

5.0.1 (2021-04-10)

Bug Fixes

logo and favicon configuration (#2180) (782dd1c)

5.0.0 (2021-04-09)

Features

prepare release for v5 (#2175) (82c5c4e)

5.0.0-alpha.7 (2021-04-08)

Bug Fixes

ui readme missing css (#2174) (f49ca06)
Upgrade Node from 14.16 to 14.16.1 for security fixes (#2172) (6ab3163), closes /github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#14

5.0.0-alpha.6 (2021-04-06)

5.0.0-alpha.5 (2021-04-03)

5.0.0-alpha.4 (2021-04-03)

Features

clipanion as cli (#2160) (be2f612)

5.0.0-alpha.3 (2021-04-02)

Features

custom protocol header (#2156) (9c80399)

5.0.0-alpha.2 (2021-03-31)

Bug Fixes

using correctly logging levels (#2153) (5b6be2a)

5.0.0-alpha.1 (2021-03-30)

Features

replace bunyan by pino.js (#2148) (ee97dcb)

5.0.0-alpha.0 (2021-03-29)

⚠ BREAKING CHANGES

npm token support revisited and enabled by default (#2145)
drop node 8 and node 10 (#2142)

Features

drop node 8 and node 10 (#2142) (43f7043)
improve url_prefix behavior (#2122) (15bb350)
npm token support revisited and enabled by default (#2145) (8cc6393)
upgrade to commander v7 (#2143) (3a1f608)

4.12.0 (2021-03-17)

Features

handle kill signals nicely (#2130) (7b6fbae)

4.11.3 (2021-03-06)

Bug Fixes

update dependencies (#2115) (4206572)

4.11.2 (2021-03-04)

Bug Fixes

upgrade handlebars from 4.7.6 to 4.7.7 (#2114) (1e6fa60)

4.11.1 (2021-02-25)

Bug Fixes

upgrade Node from 14.15 to 14.16 for security fixes (#2104) (156342b)

4.11.0 (2021-01-20)

Features

enable keep alive (#2067) (4d152ca)
skip log static content from web (#2027) (39376be), closes #2026
update @verdaccio/ui-theme (#2026) (2ea17ce)
update UI theme (#2065) (936aa30)

Bug Fixes

update dependencies (#2066) (f005b37)
update docker base image node 14.15.14 (#2049) (76e035e)

4.10.0 (2020-12-06)

Features

enable keep alive on configuration by default (#2014) (9171f25)
Set bytesin log as optional (#2013) (e2f7bb2)

Bug Fixes

doubled request logs in node.js >= 11 (#2012) (1e59b6a)

4.9.1 (2020-11-28)

Bug Fixes

fix missing readme on npm7 (#2010) (f4a85af)

4.9.0 (2020-11-22)

Features

migrate yarn 1 to yarn 2 (#1962) (1ece11c)
update docker base image to node 14.15.0 (#1992) (f901749)

Bug Fixes

buffer deprecated warnings (#1993) (4feaf24)
check author if lastest is not found (#1994) (185babc)
package.json & yarn.lock to reduce vulnerabilities (#1910) (cb5a8a7)
update dependencies (#1965) (1443b73)
update dependencies (#1991) (ef51294)
update dependencies, docker base and build deps (#2007) (6eef015)
deps: bump @verdaccio/ui-theme from 1.12.1 to 1.13.1 (#1961) (f7aad33)
update Dockerfile to Node v12.18.4 (#1945) (b409c01)

4.8.1 (2020-08-06)

Bug Fixes

package.json & yarn.lock to reduce vulnerabilities (#1879) (7c50d87)
package.json & yarn.lock to reduce vulnerabilities (#1889) (5e94478)
update readme library (#1892) (f75ad87)
upgrade docker base image nodejs (#1895) (261eab5)

4.8.0 (2020-07-16)

Features

deps: bump @verdaccio/ui-theme from 1.11.0 to 1.12.0 (#1872) (0348bf6)
ca certificate is optional for https configuration (#1853) (912482a)

Bug Fixes

package.json & yarn.lock to reduce vulnerabilities (#1876) (e374a62)
revert move bodyParse to the upper level (#1841) (#1877) (844267c)
update dependencies (#1878) (3c48670)

4.7.2 (2020-06-26)

Bug Fixes

package.json & yarn.lock to reduce vulnerabilities (#1863) (b559d75)

4.7.1 (2020-06-22)

Bug Fixes

move search v1 endpoint as experimental (#1850) (0bfdeaa)

4.7.0 (2020-06-20)

Features

npm deprecation support (#1842) (80ade97)
restore Node 8 support (#1832) (56b677a)
update ui add new languages (#1849) (4d01831)
update verdaccio plugins and dependencies (#1838) (03c7feb)

Bug Fixes

[Snyk] upgrade @verdaccio/streams from 9.4.0 to 9.5.0 (#1819) (1e2159a)
move bodyParse to the upper level (#1841) (67c31b6)
updated nodejs version to fix vulnerability in 12.x https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/ (#1836) (aee69a9)
upgrade mkdirp from 1.0.3 to 1.0.4 (#1782) (50f6c71)

4.6.2 (2020-05-01)

Bug Fixes

avoid access to sidebar without login (#1794) (c2e0e1e)
update core dependencies (#1790) (f9e7f86)

4.6.1 (2020-04-27)

Bug Fixes

improve token validation (#1784) (416d41f)

4.6.0 (2020-04-24)

Features

add dark mode on and chinese translation for web (#1765) (4a81262)
update @verdaccio/ui-theme @1.5.0 (#1780) (656ec55)
update docker node to 12.16.2 (#1776) (61faa33)

Bug Fixes

fatal exception and crash when log rotate signal event is called (#1774) (1a9a12e), closes #1709
incorrect primary_color crash the ui (#1771) (d689260)
upgrade async from 3.1.1 to 3.2.0 (#1756) (3ec8d13)
upgrade dayjs from 1.8.20 to 1.8.21 (#1759) (ebae410)
upgrade dayjs from 1.8.21 to 1.8.22 (b2d00e4)

4.5.1 (2020-03-14)

Bug Fixes

update docs to support minimum node v10 (#1753) (17c3324)

4.5.0 (2020-03-14)

Features

i18n on web (#1750) (c493b31)
add support for new search endpoint(#1732) (9ac307a)

Bug Fixes

adding Content-Type to response in GET /-/all (#1697) (#1728) (3aaa048)
package.json & yarn.lock to reduce vulnerabilities (#1746) (3c49777)
update @verdaccio/readme @9.3.2 (#1745) (9213526)
update acorn@7.1.1 (#1739) (1968fa8)
update dependencies security warnings (#1748) (1e664bd)
upgrade dayjs from 1.8.19 to 1.8.20 (#1721) (6849ef9)
upgrade handlebars from 4.7.2 to 4.7.3 (#1726) (11fed6d)
upgrade mkdirp from 1.0.0 to 1.0.3 (#1747) (981efa5)
upgrade semver from 7.1.2 to 7.1.3 (#1735) (64e2543)

4.4.4 (2020-02-26)

Bug Fixes

tarball urls for web/package (fix #1714) (#1716) (70a93da)
upgrade @verdaccio/local-storage from 9.0.0 to 9.3.0 (#1717) (1f3f8cd)
upgrade semver from 7.1.1 to 7.1.2 (#1719) (c3e931e)

4.4.3 (2020-02-19)

Bug Fixes

update @verdaccio/ui-theme @0.3.13 (#1710) (d94f838)
upgrade async from 3.1.0 to 3.1.1 (#1708) (a32e431)
upgrade dayjs from 1.8.17 to 1.8.19 (#1700) (5320b13)
upgrade handlebars from 4.5.3 to 4.7.2 (#1699) (8c2e58b)
upgrade lockfile-lint from 2.0.1 to 2.2.0 (#1698) (17ddf3e)
use https to resolve mixed content errors (#1674) (fd6c649)

4.4.2 (2020-01-11)

Bug Fixes

use hasProxyTo to find correct uplink for tarballs (#1644) (19d9fc2), closes #1642 #1642
deps: bump @verdaccio/local-storage from 8.5.0 to 9.0.0 (7b67bea), closes #1663 #1639
deps: bump @verdaccio/ui-theme from 0.3.10 to 0.3.11 (#1657) (9a2fd81)
deps: bump @verdaccio/ui-theme from 0.3.11 to 0.3.12 (#1657) (#1665) (aac6709)
updated combine url fix method (#1647) (4f43347)

4.4.1 (2020-01-03)

Bug Fixes

prevent issue with leading hyphen in package name - fixes #1429 (#1636) (f89bf27)
warning due ui dependecy (#1638) (fbc87fc)

4.4.0 (2019-12-15)

Bug Fixes

search api will not set magic date header when return array (#1598) (158de3f)

Features

bumb up docker to node 12 (#1622) (287ed3f)
update @verdaccio/ui-theme @0.3.9 (#1623) (1b4a5dc)

4.3.5 (2019-11-21)

Bug Fixes

changed the exit code for info flag (#1537) (cbea2ed)
package.json to reduce vulnerabilities (#1552) (cd8228b)
package.json to reduce vulnerabilities (#1577) (e459881)
package.json to reduce vulnerabilities (#1583) (2f3ba93)

4.3.4 (2019-10-23)

Bug Fixes

minor grammatical tweak (#1513) (35f816b)
minor typos, formatting, and docs (#1512) (549f474)
security vulnerability at readme in dompurify dep (#1532) (2ac7770)

4.3.3 (2019-10-03)

Bug Fixes

allow add to request agentOptions (#1506) (65d6a93)

4.3.2 (2019-10-02)

Bug Fixes

comment out experiments from configuration files (#1505) (3438b75)
fixing the lint issues (#1503) (02aee3a)
fixing typos in comments (#1504) (72314e4)

4.3.1 (2019-10-01)

Bug Fixes

remove jwt from default config (#1499) (e9616f9)
remove jwt from docker config (#1500) (bc6b084)

4.3.0 (2019-09-30)

Bug Fixes

package.json to reduce vulnerabilities (#1474) (b1cd070)

Features

browse web package version (#1457) (d5303f4)
ensure every log file has at least one record (#1414) (962d5d5)
npm token command support (#1427) (dbf2017)
docker: Node.js update to 10.16.3 (#1473) (e081a58)

4.2.2 (2019-08-25)

Bug Fixes

mkdir failed and ec2 infinitely re-launch (342d284)
update @verdaccio/ui-theme @0.2.3 (#1451)
use test + mkdir for strict dir check (9006146)

4.2.1 (2019-08-10)

Bug Fixes

fixed user creation endpoint to properly import groups (50e115f)
remove stub type definition for handlebars (de8dc43)
unpublish and add or remove star collision (#1434) (c264f94)
deps: add missing prod dependency (849f5bc)

4.2.0 (2019-07-29)

Bug Fixes

security: add secrets baseline (2b218ce)
allows pkg names that start with dash (e319435), closes /github.com/rlidwka/sinopia/commit/9f662a69e19a15dd90f568fc3a3ebf65b33cbd80#diff-50e3aa130a4f97a42ee2cf111c7b1d9
upgrade to 1.0.2 which solves the docker issue (aa8f1d3)

Build System

deps: bump lodash.template from 4.4.0 to 4.5.0 (#1384) (b453681)
fix semver missing type on build with docker (12b60f6)
update issue templates for use info new flag (#1377) (495bb0a)

Features

add new prop to audit middleware (d93e76b)
convert project to typescript (#1374) (66f4197)
docker image bump to node.js 10.16 (802c796)
plugins can throw http status codes (3c53997)
prevent secrets from leaking to source control (9ef6808)
update to @verdaccio/ui-theme @0.2.2 (9dd1c8f)

Tests

add unit test for parser logger strings (3beb57f)

4.1.0 (2019-07-08)

Features

parse YAML/JSON/JS config file (#1258) (95d134b)
plugin support to filter packages (b9ffac5), closes #818
chore: Included provision to show up local environment information (#1365) (eb6bf51), closes #1364

Tests

increase usage of constants (2f3ec2c)
fix broken test for validate parameters (4bf6b3b)
relocate api spec test (8786a37)
relocate helpers (d052bce)
relocate notification test (596c727)
relocate plugin storage (e7400ce)
relocate spec test (b4c42c1)
relocate test (3929633)
relocate unit test (ca2e23c)
relocate unit test cli, proxy, utils (b1eb7c6)

4.0.4 (2019-06-20)

Bug Fixes

correctly check the keepAliveTimeout value, fixes #1352 (#1353) (a92bd5f)

4.0.3 (2019-06-14)

Bug Fixes

api: return 503 to npm/yarn on uplink connection timeout (#1331) (eb7a8e3), closes #1328 #720 #1328 #720

4.0.2 (2019-06-13)

Bug Fixes

correctly check if the proxy setting evaluates to false (#1336) (df834f4)
update dependencies (e581634), closes #1339
update security policy details (#1342) (ddcd89d)
api: force authenticate on login (#1347) (85c1bd1)
ui: failed to load all packages after login (192fb77)

4.0.1 (2019-05-28)

Bug Fixes

web: fix sidebar tarball protocol (#1326) (de04463), closes #1320

4.0.0 (2019-05-26)

Bug Fixes

add missing pkg version and name on start up (8cf3966)
update @verdaccio/ui-theme:0.1.7 (8e48eea)
warning text is hard to read when running under root (3ac038f)

Features

create security policy (#1322) (0e9f23d)
prepare release v4 (#1307) (b9506d6)
update readme v4 (#1312) (7686417)

4.0.0-beta.10 (2019-05-20)

Bug Fixes

add missing pkg version and name on start up (8cf3966)

4.0.0-beta.9 (2019-05-20)

Bug Fixes

update @verdaccio/ui-theme:0.1.7 (8e48eea)

Features

update readme v4 (#1312) (7686417)

4.0.0-beta.8 (2019-05-07)

Bug Fixes

update lock file (3c69132)

4.0.0-beta.7 (2019-05-07)

4.0.0-beta.6 (2019-05-07)

Bug Fixes

routing is aware of reverse proxy directory #1297 (01f8da6)

4.0.0-beta.5 (2019-04-30)

Bug Fixes

remove unused dependencies #1292 (f48b23f)

Features

add some security headers for web UI (#1295) @juanpicado (615db0a)

4.0.0-beta.4 (2019-04-29)

Features

replace chalk with kleur (#1289) @DanielRuf (ff71640)

4.0.0-beta.3 (2019-04-28)

Bug Fixes

logo field in configuration cannot use the local file (56c70d4)
ui: version rendering issue (40679aa)

4.0.0-beta.2 (2019-04-26)

Features

accept web.primary_color as config option and inject into webui (#1282) (9f8a054)

4.0.0-beta.1 (2019-04-16)

Bug Fixes

all static files are captured by the router (86a6e5e)

4.0.0-beta.0 (2019-04-15)

Bug Fixes

package.json to reduce vulnerabilities (#1276) (fbe9409)
update @verdaccio/ui-theme @0.0.13 (8760e18)
update docker node to latest lts version (a5be22b)

4.0.0-alpha.7 (2019-04-06)

Bug Fixes

package.json to reduce vulnerabilities (d99053e)

Features

theme as plugin (#1252) (c3c6202)

4.0.0-alpha.6 (2019-03-30)

Bug Fixes

add new enpoind that allow download tarballs according the standard (87203f2)
add not found if package is missing (4da21c1)
husky commitlint not work, replace invalid test (84be869)
potential issue on sign new jwt tokens (265849e), closes /github.com/auth0/node-jsonwebtoken/issues/326#issuecomment-288124020

Features

add star and unstar api for 4.x (1ab7c50)
add stars api (75c0e1e)
engines and npm upgraded to v8 and v5 (89b0efe)

4.0.0-alpha.5 (2019-03-04)

Bug Fixes

#1191 overrides existing package to 0 bytes file (783fbce)
applied jsx-max-depth (d940da4)
applied prefer-const ([4962e36](https://togi

Configuration

📅 Schedule: "after 10pm every weekday,before 4am every weekday,every weekend" in timezone America/Tijuana.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

angular-automatic-lock-bot · 2021-08-14T08:02:48Z

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}

renovate bot added action: merge The PR is ready for merge by the caretaker target: minor This PR is targeted for the next minor release labels Jul 13, 2021

google-cla bot added the cla: yes label Jul 13, 2021

alan-agius4 approved these changes Jul 13, 2021

View reviewed changes

alan-agius4 linked an issue Jul 13, 2021 that may be closed by this pull request

extract licenses does not include all licenses #21309

Closed

15 tasks

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 08b5f1c to 2589a9b Compare July 14, 2021 15:45

build: update all non-major dependencies

650c57e

renovate bot force-pushed the renovate/all-minor-patch branch from 2589a9b to 650c57e Compare July 14, 2021 19:07

josephperrott merged commit 13e57de into master Jul 14, 2021

renovate bot deleted the renovate/all-minor-patch branch July 14, 2021 20:18

angular-automatic-lock-bot bot locked and limited conversation to collaborators Aug 14, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: update all non-major dependencies #21334

build: update all non-major dependencies #21334

renovate bot commented Jul 13, 2021 •

edited

angular-automatic-lock-bot bot commented Aug 14, 2021

build: update all non-major dependencies #21334

build: update all non-major dependencies #21334

Conversation

renovate bot commented Jul 13, 2021 • edited

Release Notes

v1.10.0

v4.28.3

v5.2.7

v8.1.2

v2.3.20

Fixed

v3.1.0

Features

Bug Fixes

v5.1.2

Changelog

5.1.2 (2021-07-14)

Bug Fixes

5.1.1 (2021-06-12)

Bug Fixes

5.1.0 (2021-05-24)

Features

Bug Fixes

5.0.4 (2021-04-28)

Bug Fixes

5.0.3 (2021-04-27)

Bug Fixes

5.0.2 (2021-04-27)

Bug Fixes

5.0.1 (2021-04-10)

Bug Fixes

5.0.0 (2021-04-09)

Features

5.0.0-alpha.7 (2021-04-08)

Bug Fixes

5.0.0-alpha.6 (2021-04-06)

5.0.0-alpha.5 (2021-04-03)

5.0.0-alpha.4 (2021-04-03)

Features

5.0.0-alpha.3 (2021-04-02)

Features

5.0.0-alpha.2 (2021-03-31)

Bug Fixes

5.0.0-alpha.1 (2021-03-30)

Features

5.0.0-alpha.0 (2021-03-29)

⚠ BREAKING CHANGES

Features

4.12.0 (2021-03-17)

Features

4.11.3 (2021-03-06)

Bug Fixes

4.11.2 (2021-03-04)

Bug Fixes

4.11.1 (2021-02-25)

Bug Fixes

4.11.0 (2021-01-20)

Features

Bug Fixes

4.10.0 (2020-12-06)

Features

Bug Fixes

4.9.1 (2020-11-28)

Bug Fixes

4.9.0 (2020-11-22)

Features

Bug Fixes

4.8.1 (2020-08-06)

Bug Fixes

4.8.0 (2020-07-16)

Features

Bug Fixes

4.7.2 (2020-06-26)

Bug Fixes

4.7.1 (2020-06-22)

Bug Fixes

4.7.0 (2020-06-20)

Features

Bug Fixes

4.6.2 (2020-05-01)

renovate bot commented Jul 13, 2021 •

edited

`v1.10.0`

`v4.28.3`

`v5.2.7`

`v8.1.2`

`v2.3.20`

`v3.1.0`

`v5.1.2`