Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps dependency-cruiser from 17.3.5 to 17.3.7.

Release notes

Sourced from dependency-cruiser's releases.

v17.3.7

🐛 fixes

  • a0955cd3 fix(analyze): also analyzes dependents when --reaches or --focus are the only reason to do so - thanks @​drewcpage for raising the issue that led to this fix!

👷 maintenance

  • 1289ed68 build(npm): updates external dependencies
  • d993ebdc refactor(config-utl): de-anonymize the one remaining anonymous function export
  • 817b8706 refactor: renames code in the analysis step to 'analyze'

🧹 chores

  • 67d16af4 chore: adds an override to prevent a transitive dependency from emitting annoying messages while our tests are running
  • 4af00554 chore(npm): updates external devDependencies
  • e166a58e chore(ci): moves workflow permissions to individual jobs
  • c6e7a856 chore(codeql): excludes generated validation code from scrutiny

v17.3.6

🐛 fixes

  • cd6fe3af fix(report/dot): makes the dot 'flat' reporter respect collapse patterns

🧑‍🏭 refactoring

  • d58c78ad/ e884b1e1/ 58c01d1d/ refactor: replace memoize with internal Maps (#1040)
  • 464388c0 refactor(cache): uses more appropriate Set for remembering which cache contexts were initialized
  • a4a7a807 refactor(report/teamcity): passes the flowId instead of memoizing it

📖 documentation

  • 9ca0ab0b doc: various updates to type annotations
  • f3648f61 doc(cli): refreshes the documentation of the configuration scaffolding template
  • 1b12e61a doc(cli): documents the 'ndjson' logging/ progress format
  • cd52da95 doc(cli): updates progress performance-log sample
  • 54becb36 doc(report/teamcity): uses same filename pattern for typedefs as used elsewhere in the src tree

👷 maintenance

  • 64d42f95 chore(npm): updates external devDependencies
  • a3a41f16 chore: tweaks dependency-cruiser configuration
  • f924f5c5 chore(LICENSE): 2026
  • 0a82fc36 chore(main): logs the 'report from cache' step as part of the 'report' step
  • 60981148 chore(ci): uses content based cache strategy as it's faster for our self-scan
  • f9b8565e chore(ci): updates known violations
  • 120cc755 chore(progress): adds runId and user & system totals to the ndjson listener output
Commits
  • c9ed5f1 17.3.7
  • 1289ed6 build(npm): updates external dependencies
  • a0955cd fix(analyze): also analyzes dependents when --reaches or --focus are the only...
  • d993ebd refactor(config-utl): de-anonymize the one remaining anonymous function export
  • 67d16af chore: adds an override to prevent a ransitive dependency from emitting annoy...
  • 4af0055 chore(npm): updates external devDependencies
  • 817b870 refactor: renames code in the analysis step to 'analyze'
  • e166a58 chore(ci): moves workflow permissions to individual jobs
  • c6e7a85 chore(codeql): excludes generated validation code from scrutiny
  • 6372494 17.3.6
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) from 17.3.5 to 17.3.7.
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v17.3.5...v17.3.7)

---
updated-dependencies:
- dependency-name: dependency-cruiser
  dependency-version: 17.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 1, 2026
@github-actions github-actions bot enabled auto-merge (squash) February 1, 2026 01:02
@github-actions github-actions bot merged commit cfed5f6 into main Feb 1, 2026
3 checks passed
@github-actions github-actions bot deleted the dependabot-npm_and_yarn-main-dependency-cruiser-17.3.7 branch February 1, 2026 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants