Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump lodash, coffee-coverage and gulp-prompt #34

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 22, 2023

Bumps lodash to 4.17.21 and updates ancestor dependencies lodash, coffee-coverage and gulp-prompt. These dependencies need to be updated together.

Updates lodash from 4.17.11 to 4.17.21

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
  • 3469357 Prevent command injection through _.template's variable option
  • ded9bc6 Bump to v4.17.20.
  • 63150ef Documentation fixes.
  • 00f0f62 test.js: Remove trailing comma.
  • 846e434 Temporarily use a custom fork of lodash-cli.
  • 5d046f3 Re-enable Travis tests on 4.17 branch.
  • aa816b3 Remove /npm-package.
  • d7fbc52 Bump to v4.17.19
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.


Updates coffee-coverage from 0.7.0 to 3.0.1

Changelog

Sourced from coffee-coverage's changelog.

coffee-coverage Changelog

v3.0.0

  • This version works with CoffeeScript v2

v2.0.0

  • Add support for nyc.

v1.0.2

v1.0.0

  • #71: Accept globs as excludes Many thanks to dbartholomae for this much requested feature. Note that excludes will still match if they are prefixes (so you can still use /node_modules to eliminate everything in the /node_modules folder), but you can also use globs here.
Commits
  • 2ea49e3 3.0.1
  • 9c12a6c ci: Don't run test with specific coffeescript.
  • 74b1c81 ci: Get rid of extra travis build.
  • e35c623 fix(security): Upgrade all the things!
  • 9822685 ci: Add semantic-release support.
  • e80b5ba Update HOWTO-jscoverage.md
  • 8ad561c Update HOWTO-jscoverage.md
  • 5f68c17 Update HOWTO-jscoverage.md
  • e9557cd Update .travis.yml
  • 6d4cb9f Merge pull request #91 from etamponi/master
  • Additional commits viewable in compare view

Updates gulp-prompt from 0.1.2 to 1.2.0

Release notes

Sourced from gulp-prompt's releases.

Removed let dependency

Issue #55 identified an issue with not enforcing strict mode. As the let keyword was only used in two locations I decided to revert this back to var so it was consistent with the rest of the code. I have also published a new version on npm

Pre-Production Release

Note: This release did not follow the correct naming convention so I generated a new release

Moving the version up to 1.0 since it has been in production for several years now and has no open issues. We will keep maintain the project and will do our best to fix issues as they come up.

Production Release

Moving the version up to 1.0 since it has been in production for several years now and has no open issues. We will keep maintain the project and will do our best to fix issues as they come up.

Chain Prompts

Added in the ability to chain prompts together so that the developers can do more complex prompts. Have a look at the Readme file and examples directory for detailed examples

v-0.4.1

Added Lodash templating #8 for messaging and an example gulp file for issue #22

v-0.3.0

This is the first release for version 0.3.0. This release includes some code maintenance fixes. The main issues addressed are as follows:

  1. Adding unit testing to the main project
  2. Adding eslint to monitor the code quality moving forward
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [lodash](https://github.com/lodash/lodash) to 4.17.21 and updates ancestor dependencies [lodash](https://github.com/lodash/lodash), [coffee-coverage](https://github.com/benbria/coffee-coverage) and [gulp-prompt](https://github.com/Freyskeyd/gulp-prompt). These dependencies need to be updated together.


Updates `lodash` from 4.17.11 to 4.17.21
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.11...4.17.21)

Updates `coffee-coverage` from 0.7.0 to 3.0.1
- [Release notes](https://github.com/benbria/coffee-coverage/releases)
- [Changelog](https://github.com/benbria/coffee-coverage/blob/master/CHANGELOG.md)
- [Commits](benbria/coffee-coverage@v0.7.0...v3.0.1)

Updates `gulp-prompt` from 0.1.2 to 1.2.0
- [Release notes](https://github.com/Freyskeyd/gulp-prompt/releases)
- [Changelog](https://github.com/Freyskeyd/gulp-prompt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Freyskeyd/gulp-prompt/commits)

---
updated-dependencies:
- dependency-name: lodash
  dependency-type: indirect
- dependency-name: coffee-coverage
  dependency-type: direct:development
- dependency-name: gulp-prompt
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants