Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump contentful-sdk-core from 7.1.0 to 8.1.1 #552

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2023

Bumps contentful-sdk-core from 7.1.0 to 8.1.1.

Release notes

Sourced from contentful-sdk-core's releases.

v8.1.1

8.1.1 (2023-11-14)

Bug Fixes

  • axios: csrf vulnerability (8f6047a)

v8.1.0

8.1.0 (2023-07-19)

Bug Fixes

v8.0.0

8.0.0 (2023-07-17)

Bug Fixes

  • header object always transforms to string (db52a08)

  • Merge pull request #362 from contentful/feat/bump-axios-to-1.x (b746440), closes #362

Features

  • major axios version bump to 1.x [NONE] (1f65dc7)

BREAKING CHANGES

  • bump axios to 1.x
Commits
  • fb27285 Merge pull request #403 from mfulton26/axios/csrf-fix
  • 8f6047a fix(axios): csrf vulnerability
  • b014b84 Merge pull request #370 from contentful/fix/types
  • d9a4f4a fix: remove custom params serializer
  • 9f31d20 feat: fix types
  • b746440 Merge pull request #362 from contentful/feat/bump-axios-to-1.x
  • db52a08 fix: header object always transforms to string
  • 1f65dc7 feat: major axios version bump to 1.x [NONE]
  • f7a56cd chore: Update README.md
  • 2eebe76 Merge pull request #361 from contentful/chore/node-18
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner November 15, 2023 00:16
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 15, 2023
@contentful-automation contentful-automation bot enabled auto-merge (squash) November 15, 2023 00:16
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch 6 times, most recently from fd73f9a to 4bd082d Compare November 17, 2023 00:54
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch 14 times, most recently from 7ebb024 to 557639a Compare November 24, 2023 00:20
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch from 557639a to 930117b Compare November 27, 2023 01:32
@dependabot dependabot bot requested a review from a team as a code owner November 27, 2023 01:32
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch from 930117b to 6f6fa2e Compare November 27, 2023 01:36
Bumps [contentful-sdk-core](https://github.com/contentful/contentful-sdk-core) from 7.1.0 to 8.1.1.
- [Release notes](https://github.com/contentful/contentful-sdk-core/releases)
- [Commits](contentful/contentful-sdk-core@v7.1.0...v8.1.1)

---
updated-dependencies:
- dependency-name: contentful-sdk-core
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch from 6f6fa2e to 88daed3 Compare November 28, 2023 00:30
ruderngespra added a commit to contentful/contentful-sdk-core that referenced this pull request Nov 29, 2023
We reintroduce the `paramsSerializer` (again) after removing it
[here](#370).

This is to unblock [the axios bump in
contentful-merge](contentful/contentful-merge#462)
or the skd-core bump [as
such](contentful/contentful-merge#552). We saw
that tests were failing because the query set together
[here](https://github.com/contentful/contentful-merge/blob/main/src/engine/create-changeset/tasks/create-fetch-partial-entities-task.ts#L43)
can not properly be handled by the API anymore and instead runs into

`error: InvalidQuery: The query you sent was invalid. Probably a filter
or ordering specification is not applicable to the type of a field.`

Tested locally on `contentful.js` and `contentful-merge`
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 29, 2023

Looks like contentful-sdk-core is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Nov 29, 2023
auto-merge was automatically disabled November 29, 2023 14:10

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/contentful-sdk-core-8.1.1 branch November 29, 2023 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants