Skip to content

Bump metalsmith from 2.5.1 to 2.7.0#43

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/metalsmith-2.7.0
Open

Bump metalsmith from 2.5.1 to 2.7.0#43
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/metalsmith-2.7.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps metalsmith from 2.5.1 to 2.7.0.

Release notes

Sourced from metalsmith's releases.

Metalsmith 2.7.0

Added

  • #361 Added Metalsmith#statik getter/setter method for static files.
  • #403 Added Metalsmith#imports utility method
  • #380 Added metalsmith init [options] [source] [destination] CLI command to clone starters from subpaths in other git repo's
  • #409 Enabled clean(true) builds to overwrite Metalsmith#source.In the build method, the order of execution of metalsmith.read() and rm(metalsmith.destination()) is swapped logically fe0274b
  • Added metalsmith clean [-c|--config] [destination] CLI command to clean the build destination, or a specified directory 08c0da7
  • Added Metalsmith.version, decoupled CLI --version command from package.json 87edd34
  • CLI --env parameter synchronizes to process.env 5d99888
  • #397 Added support for metalsmith.yml|toml configs 52347d4

Removed

  • Drops support for Node < 16.0.0 (EOL: 2022-10-18) to support commander update e4bf5cc
  • Removed snapcraft.yml/metalsmith-migrated-plugins.js and postinstall script from npm pkg e32098e

Updated

  • Reworked readdir helper used in Metalsmith#read. Allows file.stats to be preloaded in ms.readFile to avoid needing to read stats twice. d8bd616
  • Dependencies: d1fd7db, e4bf5cc, , 5635a94
    • chokidar: 3.6.0 ▶︎ 4.0.3
    • commander: 10.0.1 ▶︎ 11.1.0
    • debug: 4.3.4 ▶︎ 4.4.3
    • js-yaml (subdependency of gray-matter): 3.14.1 ▶︎ 3.14.2

Fixed

  • Catches errors when inexistant DEBUG_LOG directory is specified cd3c36e
  • Fixes TS Chokidar.WatchOptions rename to ChokidarOptions 5635a94

#409: metalsmith/metalsmith#409 #403: metalsmith/metalsmith#403 #361: metalsmith/metalsmith#361 #380: metalsmith/metalsmith#380 #397: metalsmith/metalsmith#397

Metalsmith 2.6.3

Removed

  • Drops support for Node < 14.18.0 (4 minor, deprecated versions) to be able to use 'node:' protocol imports" b170cf0

Updated

  • Updated README.md code samples, links, and troubleshooting section
  • Dependencies: 774a164
    • chokidar: 3.5.3 ▶︎ 3.6.0

Fixed

... (truncated)

Changelog

Sourced from metalsmith's changelog.

[2.7.0] - 2026-02-06

Added

  • #361 Added Metalsmith#statik getter/setter method for static files.
  • #403 Added Metalsmith#imports utility method
  • #380 Added metalsmith init [options] [source] [destination] CLI command to clone starters from subpaths in other git repo's
  • #409 Enabled clean(true) builds to overwrite Metalsmith#source.In the build method, the order of execution of metalsmith.read() and rm(metalsmith.destination()) is swapped logically fe0274b
  • Added metalsmith clean [-c|--config] [destination] CLI command to clean the build destination, or a specified directory 08c0da7
  • Added Metalsmith.version, decoupled CLI --version command from package.json 87edd34
  • CLI --env parameter synchronizes to process.env 5d99888
  • #397 Added support for metalsmith.yml|toml configs 52347d4

Removed

  • Drops support for Node < 16.0.0 (EOL: 2022-10-18) to support commander update e4bf5cc
  • Removed snapcraft.yml/metalsmith-migrated-plugins.js and postinstall script from npm pkg e32098e

Updated

  • Reworked readdir helper used in Metalsmith#read. Allows file.stats to be preloaded in ms.readFile to avoid needing to read stats twice. d8bd616
  • Dependencies: d1fd7db, e4bf5cc, , 5635a94
    • chokidar: 3.6.0 ▶︎ 4.0.3
    • commander: 10.0.1 ▶︎ 11.1.0
    • debug: 4.3.4 ▶︎ 4.4.3
    • js-yaml (subdependency of gray-matter): 3.14.1 ▶︎ 3.14.2

Fixed

  • Catches errors when inexistant DEBUG_LOG directory is specified cd3c36e
  • Fixes TS Chokidar.WatchOptions rename to ChokidarOptions 5635a94

#409: metalsmith/metalsmith#409 #403: metalsmith/metalsmith#403 #361: metalsmith/metalsmith#361 #380: metalsmith/metalsmith#380 #397: metalsmith/metalsmith#397

[2.6.3] - 2024-03-05

Removed

  • Drops support for Node < 14.18.0 (4 minor versions) to be able to use 'node:' protocol imports" b170cf0

Updated

  • Updated README.md code samples, links, and troubleshooting section
  • Dependencies: 774a164
    • chokidar: 3.5.3 ▶︎ 3.6.0

... (truncated)

Commits
  • 308d329 Release 2.7.0
  • b207c39 Prepare v2.7.0: update Node.js support; write changelog; update TS source lin...
  • 06df398 Adds script to document method source code lines in TS
  • f178cb5 chore: remove accidentally installed pnpm
  • 9ae1d52 test: fix expected file permission
  • e32098e Removes snapcraft.yml/metalsmith-migrated-plugins.js from npm bundle, removes...
  • 42d532d dev: update devDependencies to latest; tweak eslint config
  • e4bf5cc Drops support for Node.js <16 (EOL 2022-10-18), updates commander 10.0.1 -> 1...
  • d1fd7db Updates debug 4.3.7 -> 4.4.3, js-yaml 3.14.1 -> 3.14.2
  • 08c0da7 Adds CLI 'metalsmith clean [--config <path>] [destination]' command
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [metalsmith](https://github.com/metalsmith/metalsmith) from 2.5.1 to 2.7.0.
- [Release notes](https://github.com/metalsmith/metalsmith/releases)
- [Changelog](https://github.com/metalsmith/metalsmith/blob/master/CHANGELOG.md)
- [Commits](metalsmith/metalsmith@v2.5.1...v2.7.0)

---
updated-dependencies:
- dependency-name: metalsmith
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants