Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the npm_and_yarn group group with 3 updates #1619

Open
wants to merge 2 commits into
base: dev
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 5, 2024

Bumps the npm_and_yarn group group with 3 updates: @commitlint/cli, semantic-release and core-js-compat.

Updates @commitlint/cli from 13.1.0 to 19.0.3

Release notes

Sourced from @​commitlint/cli's releases.

v19.0.3

19.0.3 (2024-02-28)

Bug Fixes

Full Changelog: conventional-changelog/commitlint@v19.0.2...v19.0.3

v19.0.2

19.0.2 (2024-02-28)

Bug Fixes

Full Changelog: conventional-changelog/commitlint@v19.0.1...v19.0.2

v19.0.1

19.0.1 (2024-02-27)

Bug Fixes

Full Changelog: conventional-changelog/commitlint@v19.0.0...v19.0.1

v19.0.0

Full Changelog: conventional-changelog/commitlint@v18.6.2...v19.0.0 19.0.0 (2024-02-27)

Features

Docs

v18.6.2

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

19.0.3 (2024-02-28)

Note: Version bump only for package @​commitlint/cli

19.0.2 (2024-02-28)

Note: Version bump only for package @​commitlint/cli

19.0.1 (2024-02-27)

Bug Fixes

  • drop resolve-from, resolve-global and import-fresh, resolve global packages correctly (#3939) (8793c63), closes #3938

19.0.0 (2024-02-27)

Reverts

  • Revert "chore!: minimum node version v20" (2816783)

BREAKING CHANGES

  • migrate to pure ESM

  • feat: migrate to pure ESM

  • chore: update snapshot

  • fix: load parserPreset with another await

  • test: migrate to vitest

... (truncated)

Commits

Updates semantic-release from 19.0.3 to 23.0.2

Release notes

Sourced from semantic-release's releases.

v23.0.2

23.0.2 (2024-02-07)

Bug Fixes

v23.0.1

23.0.1 (2024-02-06)

Bug Fixes

  • deps: update dependency marked-terminal to v7 (9faded8)

v23.0.0

23.0.0 (2024-01-12)

Bug Fixes

  • deps: update dependency cosmiconfig to v9 (#3105) (07dde04)
  • deps: update dependency marked to v11 (#3079) (6d2a6f1)
  • deps: upgraded to the latest version of env-ci (0d0ed9d)
  • use one note reference per tag to prevent conflicts (#2085) (020ea7d)

Features

BREAKING CHANGES

related to semantic-release/semantic-release#3088

v23.0.0-beta.5

23.0.0-beta.5 (2024-01-05)

Bug Fixes

... (truncated)

Commits
  • 38105f5 fix(deps): update dependency marked to v12 (#3176)
  • 7fb784f ci(action): update actions/upload-artifact action to v4.3.1 (#3181)
  • e3245f3 ci(action): update actions/setup-node action to v4.0.2 (#3184)
  • 28bcc1d chore(deps): update dependency prettier to v3.2.5 (#3177)
  • 9faded8 fix(deps): update dependency marked-terminal to v7
  • fccab39 chore(deps): lock file maintenance (#3179)
  • 6be2280 chore(deps): update dependency got to v14.2.0 (#3175)
  • 518b47d chore(deps): update dependency npm-run-all2 to v6.1.2 (#3171)
  • c6c01aa ci(action): update github/codeql-action action to v3.24.0 (#3173)
  • ee4f99f chore(deps): update dependency ava to v6.1.1 (#3168)
  • Additional commits viewable in compare view

Updates core-js-compat from 3.20.3 to 3.36.0

Changelog

Sourced from core-js-compat's changelog.

3.36.0 - 2024.02.14
3.35.1 - 2024.01.21
3.35.0 - 2023.12.29

... (truncated)

Commits
  • 77123c4 3.36.0
  • a3d51ed fix dependencies loading for modules from ArrayBuffer.prototype.transfer an...
  • 0774eb9 mark Symbol.metadata as supported from Deno 1.40.4
  • 4c51d71 move ArrayBuffer.prototype.transfer and friends to stable ES
  • 918d4e2 add Safari 17.4 compat data
  • 794a736 new Set methods fixed and marked as supported from V8 ~ Chrome 123
  • 6a8dab0 update Electron 30 compat data mapping
  • a2ee3f1 update deno 1.40 compat data mapping: the released 1.40.0 uses v8 12.1
  • b636648 update dependencies
  • 1899904 note that deno 1.40 still uses v8 12.0
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

TimotheeMalard and others added 2 commits March 5, 2024 12:00
Bumps the npm_and_yarn group group with 3 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli), [semantic-release](https://github.com/semantic-release/semantic-release) and [core-js-compat](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js-compat).


Updates `@commitlint/cli` from 13.1.0 to 19.0.3
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.0.3/@commitlint/cli)

Updates `semantic-release` from 19.0.3 to 23.0.2
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.3...v23.0.2)

Updates `core-js-compat` from 3.20.3 to 3.36.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.36.0/packages/core-js-compat)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
- dependency-name: semantic-release
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
- dependency-name: core-js-compat
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript labels Mar 5, 2024
Copy link

sonarcloud bot commented Mar 5, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@commitlint/[email protected] Transitive: environment, eval, filesystem, shell, unsafe +94 72.5 MB escapedcat
npm/[email protected] eval Transitive: unsafe +4 1.53 MB esp
npm/[email protected] environment Transitive: filesystem, shell +13 221 kB ehmicky
npm/[email protected] environment, network Transitive: filesystem, shell, unsafe +55 66.6 MB semantic-release-bot
npm/[email protected] None 0 9.87 kB bcoe

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@commitlint/[email protected], npm/@commitlint/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant