chore(deps): update dependency lerna to v5 - autoclosed #136

mend-for-github-com · 2023-01-26T16:36:14Z

This PR contains the following updates:

Package	Type	Update	Change
lerna (source)	devDependencies	major	`^3.13.4` -> `^5.0.0`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
Critical	9.8	CVE-2020-7677	#110
Critical	9.8	CVE-2020-7788	#31
Critical	9.8	CVE-2021-23369	#41
Critical	9.8	CVE-2021-23383	#44
Critical	9.8	CVE-2021-44906	#97
Critical	9.8	CVE-2022-2216	#106
Critical	9.8	CVE-2022-37598	#123
Critical	9.1	CVE-2022-2900	#118
High	8.6	CVE-2021-37701	#69
High	8.6	CVE-2021-37712	#72
High	8.6	CVE-2021-37713	#75
High	8.1	CVE-2021-32803	#68
High	8.1	CVE-2021-32804	#67
High	7.5	CVE-2020-28469	#57
High	7.5	CVE-2021-27290	#42
High	7.5	CVE-2021-33623	#58
High	7.5	CVE-2021-33623	#58
High	7.5	CVE-2021-3807	#74
High	7.5	CVE-2022-0722	#107
High	7.5	CVE-2022-25881	#138
High	7.5	WS-2022-0237	#114
High	7.5	WS-2022-0238	#115
High	7.3	CVE-2020-8116	#33
High	7.3	CVE-2020-8116	#33
High	7.3	CVE-2022-0624	#103

Release Notes

lerna/lerna (lerna)

`v5.5.2`

Compare Source

Note: Version bump only for package lerna

`v5.5.1`

Compare Source

Bug Fixes

run: exclude dependencies with --scope when nx.json is not present (#3316) (99a13a9)

`v5.5.0`

Compare Source

Features

pnpm workspaces support (#3284) (1b18dbe)
repair: add lerna repair command (#3302) (aae1a2b)

Reverts

Revert "feat(repair): add lerna repair command" (#3313) (d261112), closes #3313 #3302

5.4.3 (2022-08-16)

Note: Version bump only for package lerna

5.4.2 (2022-08-14)

Note: Version bump only for package lerna

5.4.1 (2022-08-12)

Note: Version bump only for package lerna

`v5.4.3`

Compare Source

Note: Version bump only for package lerna

`v5.4.2`

Compare Source

Note: Version bump only for package lerna

`v5.4.1`

Compare Source

Note: Version bump only for package lerna

`v5.4.0`

Compare Source

Bug Fixes

core: update nx version range base to latest (#3283) (241cdde)

`v5.3.0`

Compare Source

Features

publish: include all dependencies in package graph by default, allow no-sort (#3263) (3b0c79c)

`v5.2.0`

Compare Source

Features

add json schema for lerna.json (#3229) (5075eae)
init: default useNx and useWorkspaces to true for new lerna workspaces (#3255) (a0e83e5)

5.1.8 (2022-07-07)

Note: Version bump only for package lerna

5.1.7 (2022-07-06)

Note: Version bump only for package lerna

5.1.6 (2022-06-24)

Note: Version bump only for package lerna

5.1.5 (2022-06-24)

Note: Version bump only for package lerna

5.1.4 (2022-06-15)

Note: Version bump only for package lerna

5.1.3 (2022-06-15)

Note: Version bump only for package lerna

5.1.2 (2022-06-13)

Bug Fixes

update all transitive inclusions of ansi-regex (#3166) (56eaa15)

5.1.1 (2022-06-09)

Bug Fixes

allow maintenance LTS node 14 engines starting at 14.15.0 (#3161) (72305e4)

`v5.1.8`

Compare Source

Note: Version bump only for package lerna

`v5.1.7`

Compare Source

Note: Version bump only for package lerna

`v5.1.6`

Compare Source

Note: Version bump only for package lerna

`v5.1.5`

Compare Source

Note: Version bump only for package lerna

`v5.1.4`

Compare Source

Note: Version bump only for package lerna

`v5.1.3`

Compare Source

Note: Version bump only for package lerna

`v5.1.2`

Compare Source

Bug Fixes

update all transitive inclusions of ansi-regex (#3166) (56eaa15)

`v5.1.1`

Compare Source

Bug Fixes

allow maintenance LTS node 14 engines starting at 14.15.0 (#3161) (72305e4)

`v5.1.0`

Compare Source

Note: Version bump only for package lerna

`v5.0.0`

Compare Source

Note: Version bump only for package lerna

`v4.0.0`

Compare Source

Features

Consume named exports of sibling modules (63499e3)
deps: import-local@^3.0.2 (e0e74d4)
Drop support for Node v6.x & v8.x (ff4bb4d)

BREAKING CHANGES

Node v6.x & v8.x are no longer supported. Please upgrade to the latest LTS release.

Here's the gnarly one-liner I used to make these changes:

npx lerna exec --concurrency 1 --stream -- 'json -I -f package.json -e '"'"'this.engines=this.engines||{};this.engines.node=">= 10.18.0"'"'"

(requires npm i -g json beforehand)

3.22.1 (2020-06-09)

Note: Version bump only for package lerna

`v3.22.1`

Compare Source

Note: Version bump only for package lerna

`v3.22.0`

Compare Source

Note: Version bump only for package lerna

`v3.21.0`

Compare Source

Note: Version bump only for package lerna

3.20.2 (2020-01-02)

Note: Version bump only for package lerna

3.20.1 (2019-12-29)

Note: Version bump only for package lerna

If you want to rebase/retry this PR, check this box

mend-for-github-com · 2023-01-26T16:36:16Z

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

lerna notice cli v3.22.1
lerna info versioning independent
lerna info Bootstrapping 6 packages
lerna info Installing external dependencies
lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only exited 1 in '@davinci/mongoose'
lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only stderr:
npm WARN old lockfile 
npm WARN old lockfile The package-lock.json file was created with an old version of npm,
npm WARN old lockfile so supplemental metadata must be fetched from the registry.
npm WARN old lockfile 
npm WARN old lockfile This is a one-time fix-up, please be patient...
npm WARN old lockfile 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: @davinci/[email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/mongoose
npm ERR!   dev mongoose@"5.7.5" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer mongoose@"^6.6.2" from @davinci/[email protected]
npm ERR! node_modules/@davinci/core
npm ERR!   peer @davinci/core@"^1.0.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2023-01-26T16_36_08_352Z-debug-0.log

lerna ERR! npm install --ignore-scripts --ignore-scripts --no-audit --package-lock-only exited 1 in '@davinci/mongoose'

chore(deps): update dependency lerna to v5

df94d76

mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Jan 26, 2023

mend-for-github-com bot changed the title ~~chore(deps): update dependency lerna to v5~~ chore(deps): update dependency lerna to v5 - autoclosed Mar 12, 2023

mend-for-github-com bot closed this Mar 12, 2023

mend-for-github-com bot deleted the whitesource-remediate/lerna-5.x branch March 12, 2023 12:57

mend-for-github-com bot changed the title ~~chore(deps): update dependency lerna to v5 - autoclosed~~ chore(deps): update dependency lerna to v5 Mar 13, 2023

mend-for-github-com bot restored the whitesource-remediate/lerna-5.x branch March 13, 2023 15:05

mend-for-github-com bot reopened this Mar 13, 2023

mend-for-github-com bot changed the title ~~chore(deps): update dependency lerna to v5~~ chore(deps): update dependency lerna to v5 - autoclosed Mar 27, 2023

mend-for-github-com bot closed this Mar 27, 2023

mend-for-github-com bot deleted the whitesource-remediate/lerna-5.x branch March 27, 2023 03:36

mend-for-github-com bot changed the title ~~chore(deps): update dependency lerna to v5 - autoclosed~~ chore(deps): update dependency lerna to v5 Mar 31, 2023

mend-for-github-com bot reopened this Mar 31, 2023

mend-for-github-com bot restored the whitesource-remediate/lerna-5.x branch March 31, 2023 05:03

mend-for-github-com bot changed the title ~~chore(deps): update dependency lerna to v5~~ chore(deps): update dependency lerna to v5 - autoclosed Feb 29, 2024

mend-for-github-com bot closed this Feb 29, 2024

mend-for-github-com bot deleted the whitesource-remediate/lerna-5.x branch February 29, 2024 18:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency lerna to v5 - autoclosed #136

chore(deps): update dependency lerna to v5 - autoclosed #136

mend-for-github-com bot commented Jan 26, 2023 •

edited

Loading

mend-for-github-com bot commented Jan 26, 2023

chore(deps): update dependency lerna to v5 - autoclosed #136

chore(deps): update dependency lerna to v5 - autoclosed #136

Conversation

mend-for-github-com bot commented Jan 26, 2023 • edited Loading

Release Notes

Bug Fixes

Features

Reverts

5.4.3 (2022-08-16)

5.4.2 (2022-08-14)

5.4.1 (2022-08-12)

Bug Fixes

Features

Features

5.1.8 (2022-07-07)

5.1.7 (2022-07-06)

5.1.6 (2022-06-24)

5.1.5 (2022-06-24)

5.1.4 (2022-06-15)

5.1.3 (2022-06-15)

5.1.2 (2022-06-13)

Bug Fixes

5.1.1 (2022-06-09)

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

3.22.1 (2020-06-09)

3.20.2 (2020-01-02)

3.20.1 (2019-12-29)

mend-for-github-com bot commented Jan 26, 2023

⚠ Artifact update problem

File name: package-lock.json

mend-for-github-com bot commented Jan 26, 2023 •

edited

Loading