Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weโ€™ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #11

Merged
merged 1 commit into from May 29, 2023
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 29, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/core (source) ^7.21.8 -> ^7.22.1 age adoption passing confidence
@types/babel__core (source) ^7.20.0 -> ^7.20.1 age adoption passing confidence
pnpm (source) 8.5.1 -> 8.6.0 age adoption passing confidence
vite (source) ^4.3.8 -> ^4.3.9 age adoption passing confidence

Release Notes

babel/babel

v7.22.1

Compare Source

๐Ÿ› Bug Fix

v7.22.0

Compare Source

๐Ÿš€ New Feature
  • babel-parser, babel-plugin-transform-typescript
  • babel-compat-data, babel-core, babel-plugin-proposal-unicode-sets-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-standalone
  • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-plugin-proposal-import-attributes-to-assertions
  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-generator, babel-parser, babel-traverse, babel-types
  • babel-core, babel-helper-create-regexp-features-plugin, babel-parser
  • babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
๐Ÿ’… Polish
  • babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-jsx, babel-traverse, babel-types
๐Ÿ  Internal
  • babel-parser
  • babel-compat-data, babel-helper-transform-fixture-test-runner, babel-node, babel-plugin-proposal-decorators, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-async-generator-functions, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-dynamic-import, babel-plugin-proposal-export-namespace-from, babel-plugin-proposal-function-sent, babel-plugin-proposal-json-strings, babel-plugin-proposal-logical-assignment-operators, babel-plugin-proposal-nullish-coalescing-operator, babel-plugin-proposal-numeric-separator, babel-plugin-proposal-object-rest-spread, babel-plugin-proposal-optional-catch-binding, babel-plugin-proposal-optional-chaining, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-proposal-unicode-property-regex, babel-preset-env, babel-standalone
pnpm/pnpm

v8.6.0

Compare Source

Minor Changes

  • Some settings influence the structure of the lockfile, so we cannot reuse the lockfile if those settings change. As a result, we need to store such settings in the lockfile. This way we will know with which settings the lockfile has been created.

    A new field will now be present in the lockfile: settings. It will store the values of two settings: autoInstallPeers and excludeLinksFromLockfile. If someone tries to perform a frozen-lockfile installation and their active settings don't match the ones in the lockfile, then an error message will be thrown.

    The lockfile format version is bumped from v6.0 to v6.1.

    Related PR: #โ€‹6557
    Related issue: #โ€‹6312

  • A new setting, exclude-links-from-lockfile, is now supported. When enabled, specifiers of local linked dependencies won't be duplicated in the lockfile.

    This setting was primarily added for use by Bit CLI, which links core aspects to node_modules from external directories. As such, the locations may vary across different machines, resulting in the generation of lockfiles with differing locations.

Patch Changes

  • Don't print "Lockfile is up-to-date" message before finishing all the lockfile checks #โ€‹6544.
  • When updating dependencies, preserve the range prefix in aliased dependencies. So npm:foo@1.0.0 becomes npm:foo@1.1.0.
  • Print a meaningful error when a project referenced by the workspace: protocol is not found in the workspace #โ€‹4477.
  • pnpm rebuild should not fail when node-linker is set to hoisted and there are skipped optional dependencies #โ€‹6553.
  • Peers resolution should not fail when a linked in dependency resolves a peer dependency.
  • Build projects in a workspace in correct order #โ€‹6568.

Our Gold Sponsors

Our Silver Sponsors

vitejs/vite

v4.3.9

Compare Source


Configuration

๐Ÿ“… Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

๐Ÿšฆ Automerge: Disabled by config. Please merge this manually once you are satisfied.

โ™ป Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

๐Ÿ‘ป Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub โ†—๏ธŽ


๐Ÿ‘ No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary
Issue Status
Install scripts โœ… 0 issues
Native code โœ… 0 issues
Bin script shell injection โœ… 0 issues
Unresolved require โœ… 0 issues
Invalid package.json โœ… 0 issues
HTTP dependency โœ… 0 issues
Git dependency โœ… 0 issues
Potential typo squat โœ… 0 issues
Known Malware โœ… 0 issues
Telemetry โœ… 0 issues
Protestware/Troll package โœ… 0 issues

๐Ÿ“Š Modified Dependency Overview:

๐Ÿšฎ Removed packages: @sxzz/eslint-config@2.4.6, @types/babel__core@7.20.0, @vue/babel-plugin-jsx@1.1.1, @vue/babel-preset-jsx@1.4.0, tsup@6.7.0

@sxzz sxzz merged commit 7d7171e into main May 29, 2023
6 checks passed
@sxzz sxzz deleted the renovate/all-minor-patch branch May 29, 2023 07:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant