Update all dependencies #143

renovate · 2024-05-01T01:54:35Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v4.1.3` -> `v4.1.7`
actions/setup-node	action	patch	`v4.0.2` -> `v4.0.3`
actions/upload-artifact	action	patch	`v4.3.2` -> `v4.3.4`
coverallsapp/github-action	action	digest	`c203f01` -> `643bc37`
eslint (source)	devDependencies	major	`^8.0.0` -> `^9.0.0`
eslint-plugin-jest	devDependencies	major	`^27.0.0` -> `^28.0.0`
github/codeql-action	action	patch	`v3.25.1` -> `v3.25.12`
ossf/scorecard-action	action	patch	`v2.3.1` -> `v2.3.3`
step-security/harden-runner	action	minor	`v2.7.0` -> `v2.8.1`
style-loader	devDependencies	major	`^3.3.0` -> `^4.0.0`

Release Notes

actions/checkout (actions/checkout)

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/actions/checkout/pull/1739
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/actions/checkout/pull/1697
Check out other refs/* by commit by @orhantoy in https://github.com/actions/checkout/pull/1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in https://github.com/actions/checkout/pull/1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in https://github.com/actions/checkout/pull/1732

actions/setup-node (actions/setup-node)

`v4.0.3`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v4.3.4`

Compare Source

What's Changed

Update @actions/artifact version, bump dependencies by @robherley in https://github.com/actions/upload-artifact/pull/584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

`v4.3.3`

Compare Source

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in https://github.com/actions/upload-artifact/pull/565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

eslint/eslint (eslint)

`v9.6.0`

Compare Source

`v9.5.0`

Compare Source

`v9.4.0`

Compare Source

`v9.3.0`

Compare Source

`v9.2.0`

Compare Source

`v9.1.1`

Compare Source

`v9.1.0`

Compare Source

`v9.0.0`

Compare Source

jest-community/eslint-plugin-jest (eslint-plugin-jest)

`v28.6.0`

Compare Source

Features

prefer-jest-mocked: add new rule (#1599) (4b6a4f2)
valid-expect: supporting automatically fixing adding async in some cases (#1579) (5b9b47e)

`v28.5.0`

Compare Source

Features

allow @typescript-eslint/utils v7 as a direct dependency (#1567) (1476f10)

`v28.4.0`

Compare Source

Features

valid-expect: supporting automatically fixing missing await in some cases (#1574) (a407098)

`v28.3.0`

Compare Source

Features

prefer importing jest globals for specific types (#1568) (c464ae3)

`v28.2.0`

Compare Source

Features

support providing aliases for @jest/globals package (#1543) (744d4f6)

28.1.1 (2024-04-06)

Bug Fixes

max-expects: properly reset counter when exiting a test case (#1550) (b4b7cbc)

`v28.1.1`

Compare Source

Bug Fixes

max-expects: properly reset counter when exiting a test case (#1550) (b4b7cbc)

`v28.1.0`

Compare Source

Features

add prefer-importing-jest-globals rule (#1490) (37478d8), closes #1101

`v28.0.0`

Compare Source

Bug Fixes

allow ESLint 9 as peer dependency (#1547) (3c5e167)
drop support for Node 19 (#1548) (c87e388)
no-large-snapshots: avoid instanceof RegExp check for ESLint v9 compatibility (#1542) (af4a9c9)

Features

drop support for @typescript-eslint/eslint-plugin v5 (#1530) (150e355)
drop support for Node v14 (#1527) (df5e580)
remove no-if rule (#1528) (f976fc8)
remove snapshot processor and flat/snapshot config (#1532) (98087f9)
upgrade @typescript-eslint/utils to v6 (#1508) (dc6e8cd)

BREAKING CHANGES

Node v19 is no longer supported
removed unneeded snapshot processor and flat/snapshot config
dropped support for @typescript-eslint/eslint-plugin v5
dropped support for Node v14
removed no-if in favor of no-conditional-in-test

github/codeql-action (github/codeql-action)

`v3.25.12`

Compare Source

`v3.25.11`

Compare Source

`v3.25.10`

Compare Source

`v3.25.9`

Compare Source

`v3.25.8`

Compare Source

`v3.25.7`

Compare Source

`v3.25.6`

Compare Source

`v3.25.5`

Compare Source

`v3.25.4`

Compare Source

`v3.25.3`

Compare Source

`v3.25.2`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.3`

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

📖 Move token discussion out of main README. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
📖 link to ossf/scorecard workflow instead of maintaining an example by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
📖 update api links to new scorecard.dev site by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

`v2.3.2`

Compare Source

step-security/harden-runner (step-security/harden-runner)

`v2.8.1`

Compare Source

What's Changed

Bug fix: Update isGitHubHosted implementation by @varunsh-coder in https://github.com/step-security/harden-runner/pull/425
The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.

Full Changelog: step-security/harden-runner@v2...v2.8.1

`v2.8.0`

Compare Source

What's Changed

Release v2.8.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:

File Monitoring Enhancements: Adds the capability to view the name and path of every file written during the build process.
Process Tracking Enhancements: Adds the capability to view process names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.

Full Changelog: step-security/harden-runner@v2...v2.8.0

`v2.7.1`

Compare Source

What's Changed

Release v2.7.1 by @varunsh-coder, @h0x0er, @ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1

webpack-contrib/style-loader (style-loader)

`v4.0.0`

Compare Source

⚠ BREAKING CHANGES

minimum supported webpack version is 5.27.0
minimum support Node.js version is 18.12.0
the insert option can only be a selector or the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform: function (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;

                document.head.appendChild(style);
              },
            },
          },
          "css-loader",
        ],
      },
    ],
  },
};

After:

insert-function.js

function insert(css, style) {
  var parent = options.target || document.head;

  parent.appendChild(element);
}

module.exports = insert;

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              insert: require.resolve("./insert.js"),
            },
          },
          "css-loader",
        ],
      },
    ],
  },
};

the styleTagTransform option can only be the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform: function (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;

                document.head.appendChild(style);
              },
            },
          },
          "css-loader",
        ],
      },
    ],
  },
};

After:

style-tag-transform-function.js

function styleTagTransform(css, style) {
  // Do something ...
  style.innerHTML = `${css}.modify{}\n`;

  document.head.appendChild(style);
}

module.exports = styleTagTransform;

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              styleTagTransform: require.resolve("./style-tag-transform-function.js"),
            },
          },
          "css-loader",
        ],
      },
    ],
  },
};

Bug Fixes

css experiments logic (#617) (8b9fc97)

3.3.3 (2023-05-19)

Bug Fixes

compatibility with built-in CSS support (#605) (9636f58)

3.3.2 (2023-03-13)

Bug Fixes

noop in environment without DOM API (#597) (03d3df3)

3.3.1 (2021-10-21)

Bug Fixes

small perf improvement (#544) (610524e)

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate bot force-pushed the renovate/all branch 4 times, most recently from 8d55f5e to 7ea089b Compare May 8, 2024 21:23

renovate bot force-pushed the renovate/all branch 3 times, most recently from 0a8bba8 to b9e4d46 Compare May 16, 2024 20:17

renovate bot force-pushed the renovate/all branch 2 times, most recently from 8155e33 to aef2015 Compare May 22, 2024 11:14

renovate bot force-pushed the renovate/all branch 2 times, most recently from 1bb0474 to fef3e24 Compare June 4, 2024 15:59

renovate bot force-pushed the renovate/all branch 4 times, most recently from de250d6 to 4c863f7 Compare June 13, 2024 19:18

renovate bot force-pushed the renovate/all branch from 4c863f7 to 6954677 Compare June 28, 2024 16:11

renovate bot force-pushed the renovate/all branch 2 times, most recently from 6e5fb52 to 3e3532d Compare July 9, 2024 16:58

Update all dependencies

b92aede

renovate bot force-pushed the renovate/all branch from 3e3532d to b92aede Compare July 12, 2024 11:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies #143

Update all dependencies #143

renovate bot commented May 1, 2024 •

edited

Loading

Update all dependencies #143

Are you sure you want to change the base?

Update all dependencies #143

Conversation

renovate bot commented May 1, 2024 • edited Loading

Release Notes

What's Changed

What's Changed

What's Changed

Features

Features

Features

Features

Features

28.1.1 (2024-04-06)

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

BREAKING CHANGES

What's Changed

Documentation

What's Changed

What's Changed

What's Changed

⚠ BREAKING CHANGES

Bug Fixes

3.3.3 (2023-05-19)

Bug Fixes

3.3.2 (2023-03-13)

Bug Fixes

3.3.1 (2021-10-21)

Bug Fixes

Configuration

renovate bot commented May 1, 2024 •

edited

Loading