npm (master)(deps): bump the production-dependencies group across 1 directory with 2 updates

[dependabot]

Updates the requirements on rimraf and tempfile to permit the latest version.
Updates rimraf to 6.1.3

Changelog

Sourced from rimraf's changelog.

6.1

• Move to native fs/promises usage instead of promisifying manually.

6.0

• Drop support for nodes before v20
• Add --version to CLI

5.0

• No default export, only named exports

4.4

• Provide Dirent or Stats object as second argument to filter

4.3

• Return boolean indicating whether the path was fully removed
• Add filter option
• bin: add --verbose, -v to print files as they are deleted
• bin: add --no-verbose, -V to not print files as they are deleted
• bin: add -i --interactive to be prompted on each deletion
• bin: add -I --no-interactive to not be prompted on each deletion
• 4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

• Brought back glob support, using the new and improved glob v9

v4.1

• Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.
• Accept and ignore -rf and -fr arguments to the bin.

v4.0

• Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.
• Accept array of paths or single path.
• Windows performance and reliability improved.
• All strategies separated into explicitly exported methods.
• Drop support for Node.js below version 14
• rewrite in TypeScript

... (truncated)

Commits

• f738c78 6.1.3
• a164a85 update deps
• 4635ba7 update deps
• 509c53f limit ci workflow permissions
• 68ce04f formatting
• 37680c5 add warning to not pass untrusted input to this method ever
• 786563d remove contributing doc, already covered by .github repo
• dbeef73 contributing
• 84d27af update workflows and standard project junk
• See full diff in compare view

Updates tempfile from 5.0.0 to 6.0.1

Release notes

Sourced from tempfile's releases.

v6.0.1

• Stricter option validation 07abd94

---

sindresorhus/tempfile@v6.0.0...v6.0.1

v6.0.0

Breaking

• Require Node.js 20 135f7ef

---

sindresorhus/tempfile@v5.0.0...v6.0.0

Commits

• ac7a2bb 6.0.1
• 07abd94 Stricter option validation
• f653871 6.0.0
• 135f7ef Require Node.js 20
• See full diff in compare view

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 8c5f9fa.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

package.json

Package	Version	License	Issue Type
rimraf	^6.1.3	Null	Unknown License
tempfile	^6.0.1	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/rimraf	^6.1.3	Unknown	Unknown
npm/tempfile	^6.0.1	Unknown	Unknown

Scanned Files

• package.json

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tempfile@​5.0.0 ⏵ 6.0.1

View full report