Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Bumps the npm-dependencies group with 12 updates in the / directory:

Package From To
@actions/github 5.1.1 6.0.0
cross-fetch 3.1.5 4.0.0
dotenv 16.0.3 16.4.7
tar 6.2.1 7.4.3
yaml 2.2.2 2.6.1
@babel/preset-env 7.25.4 7.26.0
@babel/preset-typescript 7.24.7 7.26.0
@vercel/ncc 0.36.1 0.38.3
eslint 8.46.0 9.17.0
jest 29.5.0 29.7.0
@types/jest 29.5.1 29.5.14
ts-jest 29.1.0 29.2.5

Updates @actions/github from 5.1.1 to 6.0.0

Changelog

Sourced from @​actions/github's changelog.

6.0.0

  • Support the latest Octokit in @​actions/github #1553
    • Drop support of NodeJS v14, v16
Commits

Updates cross-fetch from 3.1.5 to 4.0.0

Release notes

Sourced from cross-fetch's releases.

v4.0.0

What's Changed

BREAKING CHANGES

  • Dropped support for Node 10 and 12. (Note: cross-fetch will likely continue working on those versions, but specs tests are not running on those Node versions and no support will be provided if issues come up.)
  • Please check implementation conflicts in the Fetch API tests.

FEATURES

  • Added support for Node 18 and 20.
  • Added support for Service and Cloudflare Workers (Fixes #69, #78, #148) by prioritizing native code over third-party implementation. Fetch API test suite now running against node-fetch, whatwg-fetch, native browser and native node fetch.
  • Upgraded whatwg-fetch to 3.6.2. Please refer to whatwg-fetch release notes between 3.0.0 and 3.6.2 for features and bug fixes.
  • fetch.ponyfill is set to true when custom implementation is used. This improves debuggability.

v3.1.8

What's Changed

  • Restored caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: lquixada/cross-fetch@v3.1.7...v3.1.8

v3.1.7

What's Changed

  • Updated node-fetch version to 2.6.12

Full Changelog: lquixada/cross-fetch@v3.1.6...v3.1.7

v3.1.6

What's Changed

  • Updated node-fetch version to 2.6.11
  • Added caret range to node-fetch version for automatic feature and fix updates.

Full Changelog: lquixada/cross-fetch@v3.1.5...v3.1.6

Changelog

Sourced from cross-fetch's changelog.

4.0.0 (2023-07-03)

Commits
  • 748a312 chore(release): 4.0.0
  • dc7a7e8 chore: improved inline comment on publish script
  • a89e3ce chore: renamed release target to version
  • 058c8ff chore: updated dev dependencies minor versions
  • 71bd113 chore: updated dev dependencies patch versions
  • 5b8eee6 chore: dedupped make release target
  • 762ae72 chore: restored caret range on node-fetch dependency
  • b6c073a chore: fixed README's Table of Content
  • 30581ca chore: added workers feature support on README
  • 3594c29 chore: renamed bin/release to bin/publish
  • Additional commits viewable in compare view

Updates dotenv from 16.0.3 to 16.4.7

Changelog

Sourced from dotenv's changelog.

16.4.7 (2024-12-03)

Changed

  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #848

16.4.6 (2024-12-02)

Changed

  • Clean up stale dev dependencies #847
  • Various README updates clarifying usage and alternative solutions using dotenvx

16.4.5 (2024-02-19)

Changed

  • 🐞 Fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #814

16.4.4 (2024-02-13)

Changed

  • 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #812

16.4.3 (2024-02-12)

Changed

  • Fixed processing of multiple files in options.path #805

16.4.2 (2024-02-10)

Changed

16.4.1 (2024-01-24)

  • Patch support for array as path option #797

16.4.0 (2024-01-23)

  • Add error.code to error messages around .env.vault decryption handling #795
  • Add ability to find .env.vault file when filename(s) passed as an array #784

16.3.2 (2024-01-18)

Added

... (truncated)

Commits

Updates tar from 6.2.1 to 7.4.3

Changelog

Sourced from tar's changelog.

Changelog

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively deep folders.

6.1

  • remove dead link to benchmarks (#313) (@​yetzt)
  • add examples/explanation of using tar.t (@​isaacs)
  • ensure close event is emited after stream has ended (@​webark)

... (truncated)

Commits

Updates yaml from 2.2.2 to 2.6.1

Release notes

Sourced from yaml's releases.

v2.6.1

  • Do not strip :00 seconds from !!timestamp values (#578, with thanks to @​qraynaud)
  • Tighten regexp for JSON !!bool (#587, with thanks to @​vra5107)
  • Default to literal block scalar if folded would overflow (#585)

v2.6.0

  • Use a proper tag for !!merge << keys (#580)
  • Add stringKeys parse option (#581)
  • Stringify a Document as a Document (#576)
  • Add sponsorship by Manifest

v2.5.1

  • Include range in flow sequence pair maps (#573)

v2.5.0

  • Add --indent option to CLI tool (#559, with thanks to @​danielbayley)
  • Require newline in all cases for props on block sequence (#557)
  • Always reset indentation in lexer on ... (#558)
  • Ignore minContentWidth if greater than lineWidth (#562)
  • Drop unused Collection.maxFlowStringSingleLineLength (#522, #421)

v2.4.5

  • Improve tab handling (#553, yaml-test-suite tests DK95 & Y79Y)

v2.4.4

With special thanks to @​RedCMD for finding and reporting all of the following:

  • Allow comment after top-level block scalar with explicit indent indicator (#547)
  • Allow tab as indent for line comments before nodes (#548)
  • Do not allow tab before block collection (#549)
  • In flow collections, allow []{} immediately after : with plain key (#550)
  • Require indentation for ? explicit-key contents (#551)
  • Require indentation from block scalar header & flow collections in mapping values (#553)

v2.4.3

  • Improve error when parsing a non-string value (#459)
  • Do not parse -.NaN or +.nan as NaN (#546)
  • Support # within %TAG prefixes with trailing #comments
  • Check for non-node complex keys when stringifying with simpleKeys (#541)

v2.4.2

  • Restrict YAML 1.1 boolean strings to their explicit capitalization (#530)
  • Add sponsorship by Scipress (#536)

v2.4.1

  • cst: Do not drop trailing newline after line comment in block-map if followed by unindented block-seq value (#525)
  • Stringify flow collection comments in parent (#528)
  • Do not skip folding lines after the first in indented block scalars (#529)

v2.4.0

... (truncated)

Commits

Updates @babel/preset-env from 7.25.4 to 7.26.0

Release notes

Sourced from @​babel/preset-env's releases.

v7.26.0 (2024-10-25)

Thanks @​timofei-iatsenko for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/10/25/7.26.0.

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

Committers: 5

v7.25.9 (2024-10-22)

... (truncated)

Changelog

Sourced from @​babel/preset-env's changelog.

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9 (2024-10-22)

🐛 Bug Fix

  • babel-parser, babel-template, babel-types
  • babel-helper-compilation-targets, babel-preset-env
  • Other

🏠 Internal

  • babel-helper-transform-fixture-test-runner

... (truncated)

Commits

Updates @babel/preset-typescript from 7.24.7 to 7.26.0

Release notes

Sourced from @​babel/preset-typescript's releases.

v7.26.0 (2024-10-25)

Thanks @​timofei-iatsenko for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/10/25/7.26.0.

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

Committers: 5

v7.25.9 (2024-10-22)

... (truncated)

Changelog

Sourced from @​babel/preset-typescript's changelog.

v7.26.0 (2024-10-25)

🚀 New Feature

  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser

🐛 Bug Fix

💅 Polish

  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone

🏠 Internal

🏃‍♀️ Performance

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9 (2024-10-22)

🐛 Bug Fix

  • babel-parser, babel-template, babel-types
  • babel-helper-compilation-targets, babel-preset-env
  • Other

🏠 Internal

  • babel-helper-transform-fixture-test-runner

... (truncated)

Commits

Updates @vercel/ncc from 0.36.1 to 0.38.3

Release notes

Sourced from @​vercel/ncc's releases.

0.38.3

0.38.3 (2024-11-15)

Bug Fixes

  • add missing --asset-builds to cli help message (#1228) (84f8c52)

0.38.2

0.38.2 (2024-09-23)

Bug Fixes

Huge thanks to @​theoludwig 🎉

0.38.1

0.38.1 (2023-10-18)

Bug Fixes

0.38.0

0.38.0 (2023-09-06)

Features

0.37.0

0.37.0 (2023-09-06)

Features

  • add support for TypeScript 5.0's array extends in tsconfig (#1105) (f898f8e)
Commits
  • 84f8c52 fix: add missing --asset-builds to cli help message (#1228)
  • 0ff93c6 chore(deps): Bump elliptic from 6.5.7 to 6.6.0 (#1223)
  • ae5bf16 chore(deps): Bump amannn/action-semantic-pull-request from 5.3.0 to 5.5.3 (#1...
  • 738a2bf chore(deps-dev): Bump axios from 0.21.4 to 1.7.7 (#1209)
  • 158a1fd fix(deps): update webpack to v5.94.0, terser to v5.33.0 (#1213)
  • c1c9c65 chore(deps): Bump fast-xml-parser from 4.2.7 to 4.5.0 (#1219)
  • 6ef9a48 chore(deps-dev): Bump express from 4.18.2 to 4.20.0 (#1214)
  • 9e7451b ci: ignore failing test on macOS + run in band test-coverage (#1216)
  • b2a325d chore(ci): drop node@16 from ci (#1164)
  • 3c68358 chore(deps): Bump crypto-js from 4.1.1 to 4.2.0 (#1130)
  • Additional commits viewable in compare view

Updates eslint from 8.46.0 to 9.17.0

Release notes

Sourced from eslint's releases.

v9.17.0

Features

  • eed91d1 feat: add suggestions to no-unused-vars (#18352) (Tanuj Kanti)

Bug Fixes

  • 67d683d fix: fix crash when message.fix is nullish (#19168) (ntnyq)
  • c618707 fix: ignore vars with non-identifier references in no-useless-assignment (#19200) (YeonJuan)

Documentation

  • 3c22d2a docs: update yoda to Yoda in yoda.md for consistency (#19230) (루밀LuMir)
  • e0a2203 docs: add missing backticks to no-sequences (#19233) (루밀LuMir)
  • 4cc4881 docs: Update README (GitHub Actions Bot)
  • 3db6fdf docs: [no-await-in-loop] expand on benefits and inapplicability (#19211) (Kirk Waiblinger)
  • bf2a4f6 docs: add missing backticks to func-style (#19227) (루밀LuMir)
  • ba098bd docs: add missing header to prefer-spread (#19224) (루밀LuMir)
  • b607ae6 docs: update description of no-param-reassign (#19220) (루밀LuMir)
  • 1eb424d docs: add missing backticks to prefer-destructuring (#19223) (루밀LuMir)
  • 85998d1 docs: add missing backticks to no-unneeded-ternary (#19222) (루밀LuMir)
  • b75b32c docs: add missing backticks to no-new-func (#19219) (루밀LuMir)
  • a7700bc docs: add missing backticks to id-length (#19217) (루밀LuMir)
  • e2bb429 docs: add missing backticks to complexity.md (#19214) (루밀LuMir)
  • 045d716 docs: add missing ) to id-denylist (#19213) (루밀LuMir)
  • 7fe4114 docs: Update README (GitHub Actions Bot)
  • c743ba6 docs: add CSS language to no-restricted-syntax (#19208) (Milos Djermanovic)
  • 1416d70 docs: add missing backticks to eqeqeq (#19207) (루밀LuMir)
  • b950c1b docs: add missing backticks to prefer-object-spread (#19206) (루밀LuMir)
  • 8a941cb docs: update docs and description of require-unicode-regexp (#19205) (루밀LuMir)
  • cbab228 docs: Update README (GitHub Actions Bot)
  • f2257ce docs: update comments and description of no-script-url (#19203) (루밀LuMir)
  • 365f0f4 docs: add missing backtick to default-case-last (#19202) (루밀LuMir)
  • e6b84f5 docs: add missing punctuation in document (#19161) (루밀LuMir)
  • c88708e docs: replace quote with backtick in description of for-direction (#19199) (루밀LuMir)
  • a76f233 docs: use higher contrast color tokens for code comments (#19187) (Josh Goldberg ✨)
  • db19502 docs: Update README (GitHub Actions Bot)

Chores

Bumps the npm-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.0` |
| [cross-fetch](https://github.com/lquixada/cross-fetch) | `3.1.5` | `4.0.0` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.0.3` | `16.4.7` |
| [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.4.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.2.2` | `2.6.1` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.25.4` | `7.26.0` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.24.7` | `7.26.0` |
| [@vercel/ncc](https://github.com/vercel/ncc) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint) | `8.46.0` | `9.17.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.5.0` | `29.7.0` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.1` | `29.5.14` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.1.0` | `29.2.5` |



Updates `@actions/github` from 5.1.1 to 6.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `cross-fetch` from 3.1.5 to 4.0.0
- [Release notes](https://github.com/lquixada/cross-fetch/releases)
- [Changelog](https://github.com/lquixada/cross-fetch/blob/v4.x/CHANGELOG.md)
- [Commits](lquixada/cross-fetch@v3.1.5...v4.0.0)

Updates `dotenv` from 16.0.3 to 16.4.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.0.3...v16.4.7)

Updates `tar` from 6.2.1 to 7.4.3
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.4.3)

Updates `yaml` from 2.2.2 to 2.6.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.2.2...v2.6.1)

Updates `@babel/preset-env` from 7.25.4 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-env)

Updates `@babel/preset-typescript` from 7.24.7 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-typescript)

Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](vercel/ncc@0.36.1...0.38.3)

Updates `eslint` from 8.46.0 to 9.17.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.46.0...v9.17.0)

Updates `jest` from 29.5.0 to 29.7.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest)

Updates `@types/jest` from 29.5.1 to 29.5.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `ts-jest` from 29.1.0 to 29.2.5
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.1.0...v29.2.5)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: cross-fetch
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: dotenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: tar
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@babel/preset-env"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@babel/preset-typescript"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team as code owners December 16, 2024 13:18
@dependabot dependabot bot removed the request for review from a team December 16, 2024 13:18
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 16, 2024
@dependabot dependabot bot requested review from ctcampbell and felickz December 16, 2024 13:18
@dependabot dependabot bot added the javascript Pull requests that update Javascript code label Dec 16, 2024
@dependabot dependabot bot requested a review from adrienpessu December 16, 2024 13:18
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 23, 2024

Superseded by #88.

@dependabot dependabot bot closed this Dec 23, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm-dependencies-45387deba3 branch December 23, 2024 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants