Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: bump the dev-dependencies group across 1 directory with 10 updates #68

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2024

Bumps the dev-dependencies group with 10 updates in the / directory:

Package From To
@commitlint/cli 19.3.0 19.5.0
@commitlint/config-conventional 19.2.2 19.5.0
c8 9.1.0 10.1.2
eslint 8.57.0 9.10.0
esmock 2.6.4 2.6.7
husky 8.0.3 9.1.6
markdownlint-cli2 0.13.0 0.14.0
semantic-release 22.0.12 24.1.1
sinon 17.0.1 19.0.2
standard 17.1.0 17.1.2

Updates @commitlint/cli from 19.3.0 to 19.5.0

Release notes

Sourced from @​commitlint/cli's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

Full Changelog: conventional-changelog/commitlint@v19.4.1...v19.5.0

v19.4.1

19.4.1 (2024-08-28)

Bug Fixes

New Contributors

Full Changelog: conventional-changelog/commitlint@v19.4.0...v19.4.1

v19.4.0

Features

Chore & Docs

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

19.5.0 (2024-09-11)

Features

19.4.1 (2024-08-28)

Note: Version bump only for package @​commitlint/cli

19.4.0 (2024-08-07)

Features

Commits

Updates @commitlint/config-conventional from 19.2.2 to 19.5.0

Release notes

Sourced from @​commitlint/config-conventional's releases.

v19.5.0

19.5.0 (2024-09-11)

Features

Chore

New Contributors

Full Changelog: conventional-changelog/commitlint@v19.4.1...v19.5.0

v19.4.1

19.4.1 (2024-08-28)

Bug Fixes

New Contributors

Full Changelog: conventional-changelog/commitlint@v19.4.0...v19.4.1

v19.4.0

Features

Chore & Docs

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

19.5.0 (2024-09-11)

Note: Version bump only for package @​commitlint/config-conventional

19.4.1 (2024-08-28)

Note: Version bump only for package @​commitlint/config-conventional

Commits

Updates c8 from 9.1.0 to 10.1.2

Release notes

Sourced from c8's releases.

v10.1.2

10.1.2 (2024-06-13)

Bug Fixes

  • deps: make monocart-coverage-reports an optional with meta defined (3b91fda)

v10.1.1

10.1.1 (2024-06-11)

Bug Fixes

  • stop installing monocart-coverage-reports (#535) (13979a7)

v10.1.0

10.1.0 (2024-06-11)

Features

v10.0.0

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

  • deps: Node 18 is now the minimum supported Node.js version

Bug Fixes

  • deps: update test-exclude with new glob / minimatch (#531) (e33cf30)
Changelog

Sourced from c8's changelog.

10.1.2 (2024-06-13)

Bug Fixes

  • deps: make monocart-coverage-reports an optional with meta defined (3b91fda)

10.1.1 (2024-06-11)

Bug Fixes

  • stop installing monocart-coverage-reports (#535) (13979a7)

10.1.0 (2024-06-11)

Features

10.0.0 (2024-06-10)

⚠ BREAKING CHANGES

  • deps: Node 18 is now the minimum supported Node.js version

Bug Fixes

  • deps: update test-exclude with new glob / minimatch (#531) (e33cf30)
Commits
  • ff146b4 chore(main): release 10.1.2 (#538)
  • 3b91fda fix(deps): make monocart-coverage-reports an optional with meta defined
  • e3560e1 chore(main): release 10.1.1 (#536)
  • 13979a7 fix: stop installing monocart-coverage-reports (#535)
  • 15ac690 chore(main): release 10.1.0 (#533)
  • 96e869f build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#534)
  • 2e5e297 feat: add experimental monocart reports (#521)
  • dc38051 chore(main): release 10.0.0 (#532)
  • e33cf30 fix(deps)!: update test-exclude with new glob / minimatch (#531)
  • 1eeeaeb doc(CONTRIBUTING): remove dead link, update broken link (#526)
  • Additional commits viewable in compare view

Updates eslint from 8.57.0 to 9.10.0

Release notes

Sourced from eslint's releases.

v9.10.0

Features

  • 301b90d feat: Add types (#18854) (Nicholas C. Zakas)
  • bcf0df5 feat: limit namespace import identifier in id-length rule (#18849) (ChaedongIm)
  • 45c18e1 feat: add requireFlag option to require-unicode-regexp rule (#18836) (Brett Zamir)
  • 183b459 feat: add error message for duplicate flags in no-invalid-regexp (#18837) (Tanuj Kanti)
  • c69b406 feat: report duplicate allowed flags in no-invalid-regexp (#18754) (Tanuj Kanti)

Documentation

  • bee0e7a docs: update README (#18865) (Milos Djermanovic)
  • 5d80b59 docs: specify that ruleId can be null in custom formatter docs (#18857) (Milos Djermanovic)
  • 156b1c3 docs: Update README (GitHub Actions Bot)
  • f6fdef9 docs: Update README (GitHub Actions Bot)
  • a20c870 docs: Update README (GitHub Actions Bot)
  • 90e699b docs: Update README (GitHub Actions Bot)

Chores

  • 24c3ff7 chore: upgrade to @​eslint/js@​9.10.0 (#18866) (Francesco Trotta)
  • 1ebdde1 chore: package.json update for @​eslint/js release (Jenkins)
  • e8fc5bd chore: update dependency @​eslint/core to ^0.5.0 (#18848) (renovate[bot])
  • 343f992 refactor: don't use node.value when removing unused directives (#18835) (Milos Djermanovic)
  • 3db18b0 refactor: Extract FileContext into class (#18831) (Nicholas C. Zakas)
  • 931d650 refactor: Use @​eslint/plugin-kit (#18822) (Nicholas C. Zakas)
  • ed5cf0c chore: update dependency @​eslint/json to ^0.4.0 (#18829) (Milos Djermanovic)
  • d1f0831 chore: added missing ids (#18817) (Strek)
  • ec92813 refactor: Config class (#18763) (Nicholas C. Zakas)

v9.9.1

Bug Fixes

  • 9bde90c fix: add logic to handle fixTypes in lintText() (#18736) (Amaresh S M)

Documentation

  • 4840930 docs: Update README with version support and clean up content (#18804) (Nicholas C. Zakas)
  • f61f40d docs: Update globals examples (#18805) (Nicholas C. Zakas)
  • 241fcea docs: Use and define languages (#18795) (Nicholas C. Zakas)
  • 5dbdd63 docs: eslint-plugin-markdown -> @​eslint/markdown (#18797) (Nicholas C. Zakas)
  • c6c8ddd docs: update links to eslint-visitor-keys repo (#18796) (Francesco Trotta)
  • f981d05 docs: Update README (GitHub Actions Bot)
  • b516974 docs: update links to eslint/js repo (#18781) (Francesco Trotta)
  • fb7a3f5 docs: update note for package managers (#18779) (Jay)

Chores

  • b0c34d0 chore: upgrade to @​eslint/js@​9.9.1 (#18809) (Francesco Trotta)
  • cd5a0da chore: package.json update for @​eslint/js release (Jenkins)
  • e112642 refactor: Extract parsing logic from Linter (#18790) (Nicholas C. Zakas)
  • 0f68a85 chore: use eslint-plugin-yml on yaml files only (#18801) (Milos Djermanovic)
  • f8d1b3c chore: update dependencies for browser tests (#18794) (Christian Bromann)
  • aed2624 chore: update dependency @​eslint/config-array to ^0.18.0 (#18788) (renovate[bot])
  • 5c29128 chore: update dependency @​eslint/core to ^0.4.0 (#18789) (renovate[bot])
  • 5d66fb2 chore: migrate linting workflow to use trunk check meta-linter (#18643) (Chris Clearwater)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.10.0 - September 6, 2024

  • 24c3ff7 chore: upgrade to @​eslint/js@​9.10.0 (#18866) (Francesco Trotta)
  • 1ebdde1 chore: package.json update for @​eslint/js release (Jenkins)
  • 301b90d feat: Add types (#18854) (Nicholas C. Zakas)
  • bee0e7a docs: update README (#18865) (Milos Djermanovic)
  • bcf0df5 feat: limit namespace import identifier in id-length rule (#18849) (ChaedongIm)
  • 45c18e1 feat: add requireFlag option to require-unicode-regexp rule (#18836) (Brett Zamir)
  • 5d80b59 docs: specify that ruleId can be null in custom formatter docs (#18857) (Milos Djermanovic)
  • 156b1c3 docs: Update README (GitHub Actions Bot)
  • e8fc5bd chore: update dependency @​eslint/core to ^0.5.0 (#18848) (renovate[bot])
  • 343f992 refactor: don't use node.value when removing unused directives (#18835) (Milos Djermanovic)
  • 183b459 feat: add error message for duplicate flags in no-invalid-regexp (#18837) (Tanuj Kanti)
  • f6fdef9 docs: Update README (GitHub Actions Bot)
  • c69b406 feat: report duplicate allowed flags in no-invalid-regexp (#18754) (Tanuj Kanti)
  • a20c870 docs: Update README (GitHub Actions Bot)
  • 90e699b docs: Update README (GitHub Actions Bot)
  • 3db18b0 refactor: Extract FileContext into class (#18831) (Nicholas C. Zakas)
  • 931d650 refactor: Use @​eslint/plugin-kit (#18822) (Nicholas C. Zakas)
  • ed5cf0c chore: update dependency @​eslint/json to ^0.4.0 (#18829) (Milos Djermanovic)
  • d1f0831 chore: added missing ids (#18817) (Strek)
  • ec92813 refactor: Config class (#18763) (Nicholas C. Zakas)

v9.9.1 - August 23, 2024

  • b0c34d0 chore: upgrade to @​eslint/js@​9.9.1 (#18809) (Francesco Trotta)
  • cd5a0da chore: package.json update for @​eslint/js release (Jenkins)
  • 4840930 docs: Update README with version support and clean up content (#18804) (Nicholas C. Zakas)
  • f61f40d docs: Update globals examples (#18805) (Nicholas C. Zakas)
  • e112642 refactor: Extract parsing logic from Linter (#18790) (Nicholas C. Zakas)
  • 241fcea docs: Use and define languages (#18795) (Nicholas C. Zakas)
  • 0f68a85 chore: use eslint-plugin-yml on yaml files only (#18801) (Milos Djermanovic)
  • 5dbdd63 docs: eslint-plugin-markdown -> @​eslint/markdown (#18797) (Nicholas C. Zakas)
  • c6c8ddd docs: update links to eslint-visitor-keys repo (#18796) (Francesco Trotta)
  • f8d1b3c chore: update dependencies for browser tests (#18794) (Christian Bromann)
  • aed2624 chore: update dependency @​eslint/config-array to ^0.18.0 (#18788) (renovate[bot])
  • 5c29128 chore: update dependency @​eslint/core to ^0.4.0 (#18789) (renovate[bot])
  • 5d66fb2 chore: migrate linting workflow to use trunk check meta-linter (#18643) (Chris Clearwater)
  • f981d05 docs: Update README (GitHub Actions Bot)
  • b516974 docs: update links to eslint/js repo (#18781) (Francesco Trotta)
  • fb7a3f5 docs: update note for package managers (#18779) (Jay)
  • bf96855 chore: add ids to github issue templates (#18775) (Strek)
  • 9bde90c fix: add logic to handle fixTypes in lintText() (#18736) (Amaresh S M)

v9.9.0 - August 9, 2024

... (truncated)

Commits

Updates esmock from 2.6.4 to 2.6.7

Release notes

Sourced from esmock's releases.

add swc tests

add swc tests and remove swc caution from README thanks @​Brooooooklyn

migrate eslint 9 add tsx tests,

add node v22 to test matrix

add node 22 to ci test pipeline and use with { type: 'json' } import syntax for node >= 20,

Changelog

Sourced from esmock's changelog.

changelog

... (truncated)

Commits
  • 253eec5 Merge pull request #309 from iambumblehead/attempt-enable-swc-tests
  • 4c58d6c update test to use esmock, to pass lint, to give credit
  • 493997f use latest swc to resolve errors
  • 3dd8fad tests-swc dependencies add @​swc/core and typescript, update @​swc-node/register
  • c8f956f add tests-swc to package.json test sequence
  • 0fa673f mv tests-FAIL-swc tests-swc
  • a16a6fb Merge pull request #308 from iambumblehead/increment-version-number
  • ccc6aee increment version number
  • b4567a5 Merge pull request #307 from iambumblehead/enable-swc-tests
  • 6b0907c update tsconfig.json
  • Additional commits viewable in compare view

Updates husky from 8.0.3 to 9.1.6

Release notes

Sourced from husky's releases.

v9.1.6

What's Changed

New Contributors

Full Changelog: typicode/husky@v9.1.5...v9.1.6

v9.1.5

What's Changed

New Contributors

Full Changelog: typicode/husky@v9.1.4...v9.1.5

v9.1.4

  • Improve deprecation notice

v9.1.3

  • fix: better handle space in PATH

v9.1.2

Show a message instead of automatically removing deprecated code.

This only concerns projects that still have the following code in their hooks:

- #!/usr/bin/env sh # <- This is deprecated, remove it
- . "$(dirname -- "$0")/_/husky.sh"  # <- This is deprecated, remove it
Rest of your hook code

Hooks with these lines will fail in v10.0.0

v9.1.1

Super saiyan god dog! It's over 9.0.0!

What's new

You can now run package commands directly, no need for npx or equivalents.

... (truncated)

Commits

Updates markdownlint-cli2 from 0.13.0 to 0.14.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.14.0

  • Handle -- parameter per POSIX convention
  • Add support for glob to gitignore configuration
  • Update dependencies (including markdownlint)
Commits
  • da711fa Put "gitignore" in a code span to avoid being reported as a spelling error.
  • bf34521 Update to version 0.14.0.
  • 284bb81 Update version of all formatters (to pick up changes to package.json, etc.) a...
  • 5f5f1c2 Add simple 100% test coverage for fs-virtual.js.
  • 1e6a84a Fix FsVirtual on Windows due to path.resolve converting "/" into "C:".
  • d66d6b8 Handle "--" parameter per POSIX Utility Conventions 12.2 Guideline 10.
  • caa46d0 Add @​stylistic/eslint-plugin to ESLint configuration.
  • 37bde15 Add support for glob expression to gitignore configuration (fixes #365).
  • 48a1cd4 Update tests to account for new markdownlint library version.
  • 39c6feb Bump markdownlint from 0.34.0 to 0.35.0
  • Additional commits viewable in compare view

Updates semantic-release from 22.0.12 to 24.1.1

Release notes

Sourced from semantic-release's releases.

v24.1.1

24.1.1 (2024-09-11)

Bug Fixes

  • deps: update dependency hosted-git-info to v8 (#3436) (ab10ac1)

v24.1.0

24.1.0 (2024-08-17)

Features

  • add warn type to global context.logger (#3423) (

…ates

Bumps the dev-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `19.3.0` | `19.5.0` |
| [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `19.2.2` | `19.5.0` |
| [c8](https://github.com/bcoe/c8) | `9.1.0` | `10.1.2` |
| [eslint](https://github.com/eslint/eslint) | `8.57.0` | `9.10.0` |
| [esmock](https://github.com/iambumblehead/esmock) | `2.6.4` | `2.6.7` |
| [husky](https://github.com/typicode/husky) | `8.0.3` | `9.1.6` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.13.0` | `0.14.0` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `22.0.12` | `24.1.1` |
| [sinon](https://github.com/sinonjs/sinon) | `17.0.1` | `19.0.2` |
| [standard](https://github.com/standard/standard) | `17.1.0` | `17.1.2` |



Updates `@commitlint/cli` from 19.3.0 to 19.5.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/cli)

Updates `@commitlint/config-conventional` from 19.2.2 to 19.5.0
- [Release notes](https://github.com/conventional-changelog/commitlint/releases)
- [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/commitlint/commits/v19.5.0/@commitlint/config-conventional)

Updates `c8` from 9.1.0 to 10.1.2
- [Release notes](https://github.com/bcoe/c8/releases)
- [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md)
- [Commits](bcoe/c8@v9.1.0...v10.1.2)

Updates `eslint` from 8.57.0 to 9.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.57.0...v9.10.0)

Updates `esmock` from 2.6.4 to 2.6.7
- [Release notes](https://github.com/iambumblehead/esmock/releases)
- [Changelog](https://github.com/iambumblehead/esmock/blob/main/CHANGELOG.md)
- [Commits](iambumblehead/esmock@v2.6.4...v2.6.7)

Updates `husky` from 8.0.3 to 9.1.6
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](typicode/husky@v8.0.3...v9.1.6)

Updates `markdownlint-cli2` from 0.13.0 to 0.14.0
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.13.0...v0.14.0)

Updates `semantic-release` from 22.0.12 to 24.1.1
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v22.0.12...v24.1.1)

Updates `sinon` from 17.0.1 to 19.0.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v17.0.1...v19.0.2)

Updates `standard` from 17.1.0 to 17.1.2
- [Release notes](https://github.com/standard/standard/releases)
- [Changelog](https://github.com/standard/standard/blob/master/CHANGELOG.md)
- [Commits](standard/standard@v17.1.0...v17.1.2)

---
updated-dependencies:
- dependency-name: "@commitlint/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@commitlint/config-conventional"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: c8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: esmock
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: markdownlint-cli2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: semantic-release
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: standard
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 16, 2024
Copy link

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Obfuscated code npm/[email protected] ⚠︎

View full report↗︎

Next steps

What is obfuscated code?

Obfuscated files are intentionally packed to hide their behavior. This could be a sign of malware.

Packages should not obfuscate their code. Consider not using packages with obfuscated code

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 23, 2024

Superseded by #69.

@dependabot dependabot bot closed this Sep 23, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-dependencies-8bab16bc5c branch September 23, 2024 06:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants