Bump dependency-cruiser from 12.12.2 to 13.0.0

[dependabot]

Bumps dependency-cruiser from 12.12.2 to 13.0.0.

Release notes

Sourced from dependency-cruiser's releases.

v13.0.0

To keep dependency-cruiser future proof (and sweeter to use) it was necessary to make some breaking changes in v13.

Most of the breaking changes impact only the API/ library. We've worked hard to avoid it, but some affect the CLI as well.

Summary

• Improvements
  • Support for ESM in dependency-cruiser, babel and webpack configurations
  • No need to pass --config anymore
  • dot reporters: dynamic dependencies show up as dotted lines
  • Performance improvements
• Breaking changes
  • breaking for both CLI and API
    • BREAKING: Dropped support for node 14
    • BREAKING: Dropped support for yarn 1 plug'n play
    • BREAKING: Not passing --config now means 'use default configuration file'
    • BREAKING: For glob patterns on windows use forward slashes
  • breaking: API only
    • BREAKING: API is ESM only
    • BREAKING: API is async
    • BREAKING: cruise signature change

🔏 shasum of the package as published on npmjs: 4ece1a93c4e954f30350cbb99fd62497cb705e51

Improvements

Support for ESM in dependency-cruiser, babel and webpack configurations

As dependency-cruiser itself is now written in ESM, it can now also read .dependency-cruiser, babel and webpack configurations in ESM, so you can write them in more modern JavaScript if you want to. Previously supported formats (commonjs, json5 etc) remain supported

No need to pass --config anymore

In previous versions, even when you had a dependency-cruiser configuration with one of the default names, you still need to pass --config on the command line to tell it to use that configuration. As of version 13 this is not necessary anymore. Otherwise, the --config option still work as it did before.

If you want to run the dependency-cruiser CLI without a configuration file you'll have to explicitly pass it --no-config.

Let me know if you do! I'm interested in these use cases.

dot reporters: dynamic dependencies show up as dotted lines

This was already possible - in v13, we've made it the default as it proved useful to distinguish dynamic imports from regular ones. See #801 for details.

Performance improvements

... (truncated)

Commits

• 07762eb 13.0.0
• 5a62d73 chore(lint): disables exports-last rule
• a5c2bb5 feature(progress): some more tweaks to the usability of the performance-log
• 9329ae4 build(npm): updates external dependencies
• faaadea chore: replaces references to the develop branch with main
• 145527d doc(cache): adds tsdoc & checks on it
• cfb8254 chore: replaces references to the master branch with develop
• 56fd111 chore(ci): removes v13 as integration branch and adds main
• b092d70 fix(types): adds mainFields and mainFiles to the enhancedResolveOptions in IC...
• 4556fe3 fix(enrich): adds used tsconfig to options used + adds it & babelConfig, webp...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
dependency-cruiser@13.0.0	12.12.2...13.0.0	None	+20/-1	sverweij