Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies to enable Greenkeeper 🌴 #253

Closed
wants to merge 3 commits into from

Conversation

greenkeeper[bot]
Copy link

@greenkeeper greenkeeper bot commented Oct 13, 2018

Let’s get started with automated dependency management for ember-cli-eslint 💪

🔒 Greenkeeper has found a yarn.lock file in this repository. Greenkeeper supports lockfile updates for public packages. If you use private packages in your repository, please use greenkeeper-lockfile to make sure these can get updated as well.

This pull request updates all your dependencies to their latest version. Having them all up to date really is the best starting point for keeping up with new releases. Greenkeeper will look out for further dependency updates and make sure to handle them in isolation and in real-time, but only after you merge this pull request.

Important: Greenkeeper will only start watching this repository’s dependency updates after you merge this initial pull request.


💥 Tests on this branch are failing. Here’s how to proceed.

To solve the issue, first find out which of the dependency’s updates is causing the problem. Then fix your code to accomodate the changes in the updated dependency. next-update is a really handy tool to help you with this.

Then push your changes to this branch and merge it.

🏷 How to check the status of this repository

Greenkeeper adds a badge to your README which indicates the status of this repository.

This is what your badge looks like right now 👉 Greenkeeper badge

🙈 How to ignore certain dependencies

You may have good reasons for not wanting to update to a certain dependency right now. In this case, you can change the dependency’s version string in the package.json file back to whatever you prefer.

To make sure Greenkeeper doesn’t nag you again on the next update, add a greenkeeper.ignore field to your package.json, containing a list of dependencies you don’t want to update.

// package.json
{
  
  "greenkeeper": {
    "ignore": [
      "package-names",
      "you-want-me-to-ignore"
    ]
  }
}
👩‍💻 How to update this pull request
  # Change into your repository’s directory
  git fetch --all
  git checkout greenkeeper/initial
  npm install-test
  # Adapt your code until everything works again
  git commit -m 'chore: adapt code to updated dependencies'
  git push https://github.com/ember-cli/ember-cli-eslint.git greenkeeper/initial
✨ How do dependency updates work with Greenkeeper?

After you merge this pull request, Greenkeeper will create a new branch whenever a dependency is updated, with the new version applied. The branch creation should trigger your testing services and check whether your code still works with the new dependency version. Depending on the the results of these tests Greenkeeper will try to open meaningful and helpful pull requests and issues, so your dependencies remain working and up-to-date.

-  "underscore": "^1.6.0"
+  "underscore": "^1.7.0"

The above example shows an in-range update. 1.7.0 is included in the old ^1.6.0 range, because of the caret ^ character .
When the test services report success Greenkeeper will silently delete the branch again, because no action needs to be taken – everything is fine.

However, should the tests fail, Greenkeeper will create an issue to inform you about the problem immediately.

This way, you’ll never be surprised by a dependency breaking your code. As long as everything still works, Greenkeeper will stay out of your way, and as soon as something goes wrong, you’ll be the first to know.

-  "lodash": "^3.0.0"
+  "lodash": "^4.0.0"

In this example, the new version 4.0.0 is not included in the old ^3.0.0 range.
For version updates like these – let’s call them “out of range” updates – you’ll receive a pull request.

This means that you no longer need to check for new versions manually – Greenkeeper will keep you up to date automatically.

These pull requests not only serve as reminders to update: If you have solid tests and good coverage, and the pull requests passes those tests, you can very likely just merge it and release a new version of your software straight away :shipit:

To get a better idea of which ranges apply to which releases, check out the extremely useful semver calculator provided by npm.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.


Good luck with your project and see you soon ✨

Your Greenkeeper bot 🌴

@Turbo87
Copy link
Member

Turbo87 commented Oct 13, 2018

Nope, you're done

@Turbo87 Turbo87 closed this Oct 13, 2018
@Turbo87 Turbo87 deleted the greenkeeper/initial branch October 13, 2018 12:51
Turbo87 pushed a commit that referenced this pull request Oct 16, 2018
Bumps [testdouble](https://github.com/testdouble/testdouble.js) from 3.2.2 to 3.8.2.
<details>
<summary>Changelog</summary>

*Sourced from [testdouble's changelog](https://github.com/testdouble/testdouble.js/blob/master/CHANGELOG.md).*

> # Change Log
> 
> ## [v3.8.1](https://github.com/testdouble/testdouble.js/tree/v3.8.1) (2018-05-05)
> [Full Changelog](testdouble/testdouble.js@v3.8.0...v3.8.1)
> 
> **Implemented enhancements:**
> 
> - Better verification messages [\#161](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/161)
> 
> **Closed issues:**
> 
> - Trouble replacing ES6 classes [\#365](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/365)
> - You have a global leak: `\_\_core-js\_shared\_\_` [\#364](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/364)
> - testdouble causes bluebird to emit Unhandled rejection [\#168](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/168)
> - Should style API of chai.js doesn't always work on test doubles since 1.6.2 [\#134](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/134)
> 
> ## [v3.8.0](https://github.com/testdouble/testdouble.js/tree/v3.8.0) (2018-04-29)
> [Full Changelog](testdouble/testdouble.js@v3.7.0...v3.8.0)
> 
> **Implemented enhancements:**
> 
> - Improve td.replace error message for incorrect module path [\#355](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/355)
> 
> **Closed issues:**
> 
> - td.verify\(object.function\(new Class\("param"\)\)\) not asserting "param" [\#362](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/362)
> - How to Stub a Chained Function [\#360](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/360)
> - Critical dependency: the request of a dependency is an expression? [\#354](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/354)
> 
> **Merged pull requests:**
> 
> - Better missing module message for td.replace\(\) [\#363](https://github-redirect.dependabot.com/testdouble/testdouble.js/pull/363) ([searls](https://github.com/searls))
> 
> ## [v3.7.0](https://github.com/testdouble/testdouble.js/tree/v3.7.0) (2018-03-31)
> [Full Changelog](testdouble/testdouble.js@v3.6.0...v3.7.0)
> 
> **Closed issues:**
> 
> - Compare dates when using td.matchers.contains [\#358](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/358)
> - verifiable thenThrow [\#288](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/288)
> - docs: simple page that lists the entire API [\#253](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/253)
> - Planning Discussion for a move to TypeScript  [\#252](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/252)
> - More support for ES Modules [\#246](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/246)
> - Consider using \_.isObjectLike rather than \_.isPlainObject within td.object [\#224](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/224)
> 
> **Merged pull requests:**
> 
> - Enhance contains for edge cases, make nesting behave consistently [\#359](https://github-redirect.dependabot.com/testdouble/testdouble.js/pull/359) ([searls](https://github.com/searls))
> 
> ## [v3.6.0](https://github.com/testdouble/testdouble.js/tree/v3.6.0) (2018-03-24)
></table> ... (truncated)
</details>
<details>
<summary>Commits</summary>

- [`a6e4103`](testdouble/testdouble.js@a6e4103) 3.8.2
- [`7b222ae`](testdouble/testdouble.js@7b222ae) Merge pull request [#386](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/386) from testdouble/upgrade-things
- [`1e77fb1`](testdouble/testdouble.js@1e77fb1) upgrade example deps
- [`25cf41e`](testdouble/testdouble.js@25cf41e) upgrade deps
- [`20785c7`](testdouble/testdouble.js@20785c7) clear stupid jasmine warnings
- [`5659f33`](testdouble/testdouble.js@5659f33) standard --fix
- [`3e03d23`](testdouble/testdouble.js@3e03d23) upgrade everything
- [`1bbf695`](testdouble/testdouble.js@1bbf695) Merge pull request [#369](https://github-redirect.dependabot.com/testdouble/testdouble.js/issues/369) from jackjennings/patch-1
- [`952d852`](testdouble/testdouble.js@952d852) Fix method name typo in README example
- [`a9216e3`](testdouble/testdouble.js@a9216e3) Adding an AKA td.js b/c our google rank for "td.js" is bad
- Additional commits viewable in [compare view](testdouble/testdouble.js@v3.2.2...v3.8.2)
</details>
<br />

[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=testdouble&package-manager=npm_and_yarn&previous-version=3.2.2&new-version=3.8.2)](https://dependabot.com/compatibility-score.html?dependency-name=testdouble&package-manager=npm_and_yarn&previous-version=3.2.2&new-version=3.8.2)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

Dependabot will **not** automatically merge this PR because it includes a minor update to a development dependency.

---

**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

</details>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant