Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps-dev): bump the dev-deps group across 1 directory with 9 updates #155

Closed
wants to merge 1 commit into from
Closed

chore(deps-dev): bump the dev-deps group across 1 directory with 9 updates #155

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Oct 28, 2024 •
edited
Loading

Bumps the dev-deps group with 9 updates in the / directory:

Package From To
@biomejs/biome 1.9.3 1.9.4
@moonrepo/cli 1.28.3 1.29.3
@vitest/coverage-v8 2.1.2 2.1.3
publint 0.2.11 0.2.12
vitest 2.1.2 2.1.3
@astrojs/starlight 0.28.2 0.28.3
@astrojs/ts-plugin 1.10.2 1.10.4
rollup 4.24.0 4.24.2
vite 5.4.8 5.4.10

Updates @biomejs/biome from 1.9.3 to 1.9.4

Release notes

Sourced from @​biomejs/biome's releases.

CLI v1.9.4

Analyzer

Bug fixes

  • Improved the message for unused suppression comments. Contributed by @​dyc3

  • Fix #4228, where the rule a11y/noInteractiveElementToNoninteractiveRole incorrectly reports a role for non-interactive elements. Contributed by @​eryue0220

  • noSuspiciousSemicolonInJsx now catches suspicious semicolons in React fragments. Contributed by @​vasucp1207

CLI

Enhancements

  • The --summary reporter now reports parsing diagnostics too. Contributed by @​ematipico

  • Improved performance of GritQL queries by roughly 25-30%. Contributed by @​arendjr

Configuration

Bug fixes

  • Fix an issue where the JSON schema marked lint rules options as mandatory. Contributed by @​ematipico

Formatter

Bug fixes

  • Fix #4121. Respect line width when printing multiline strings. Contributed by @​ah-yu

Linter

New features

Bug Fixes

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

v1.9.4 (2024-10-17)

Analyzer

Bug fixes

  • Implement GraphQL suppression action. Contributed by @​vohoanglong0107

  • Improved the message for unused suppression comments. Contributed by @​dyc3

  • Fix #4228, where the rule a11y/noInteractiveElementToNoninteractiveRole incorrectly reports a role for non-interactive elements. Contributed by @​eryue0220

  • noSuspiciousSemicolonInJsx now catches suspicious semicolons in React fragments. Contributed by @​vasucp1207

  • The syntax rule noTypeOnlyImportAttributes now ignores .cts files (#4361).

    Since TypeScript 5.3, type-only imports can be associated to an import attribute in CommonJS-enabled files. See the TypeScript docs.

    The following code is no longer reported as a syntax error:

    import type { TypeFromRequire } from "pkg" with {
    "resolution-mode": "require"
};

    Note that this is only allowed in files ending with the cts extension.

    Contributed by @​Conaclos

CLI

Enhancements

  • The --summary reporter now reports parsing diagnostics too. Contributed by @​ematipico

  • Improved performance of GritQL queries by roughly 25-30%. Contributed by @​arendjr

Configuration

Bug fixes

  • Fix an issue where the JSON schema marked lint rules options as mandatory. Contributed by @​ematipico

Editors

Formatter

Bug fixes

... (truncated)

Commits

Updates @moonrepo/cli from 1.28.3 to 1.29.3

Release notes

Sourced from @​moonrepo/cli's releases.

v1.29.3

🐞 Fixes

  • Fixed an issue running npx commands (primarily through lockfile deduping).

v1.29.2

🚀 Updates

  • Removed the warning around .env files not existing in certain environments.

🐞 Fixes

  • Fixed an issue where the task option timeout would apply to the overall run, and not for each attempt when using the retryCount option.

⚙️ Internal

  • Updated Rust to v1.82.

v1.29.1

🚀 Updates

  • Added a new task option merge, that defines the same strategy for all applicable fields. Can be overridden with mergeX task options.
  • Added a moon setting to .moon/toolchain.yml, which can be used to customize the update check process.

🐞 Fixes

  • Fixed moon query projects including dependency projects by default. Can be controlled with --upstream.
  • Fixed moon query projects regex patterns not working when used in conjunction with affected.
  • Fixed Bash-based hooks being generated with the wrong path separators on Windows.
  • Fixed an issue where an inherited task with merge strategy "replace" will accidentally remove task args, deps, and env in inheriting tasks.
  • Fixed an issue where token variables and environment variables used within task args together would not be replaced correctly.

v1.29.0

🚀 Updates

  • Implemented a new affected project tracker that is more accurate and more powerful.
    • Can now control the depth of upstream (dependencies) and downstream (dependents).
    • Affected information now logs more information and is included in reports/JSON.
    • Added --upstream and --downstream options to moon query projects.
    • Coming soon for affected tasks as well!
  • Implemented experimental support for a new configuration language, Pkl!
    • Pkl is programmable, allowing for variables, loops, conditionals, and more.
  • Added a new task option, cacheLifetime, that controls how long a task will be cached for.
  • Added a new task merge strategy, preserve, that preserves the original inherited value.

... (truncated)

Changelog

Sourced from @​moonrepo/cli's changelog.

1.29.3

🐞 Fixes

  • Fixed an issue running npx commands (primarily through lockfile deduping).

1.29.2

🚀 Updates

  • Removed the warning around .env files not existing in certain environments.

🐞 Fixes

  • Fixed an issue where the task option timeout would apply to the overall run, and not for each attempt when using the retryCount option.

⚙️ Internal

  • Updated Rust to v1.82.

1.29.1

🚀 Updates

  • Added a new task option merge, that defines the same strategy for all applicable fields. Can be overridden with mergeX task options.
  • Added a moon setting to .moon/toolchain.yml, which can be used to customize the update check process.

🐞 Fixes

  • Fixed moon query projects including dependency projects by default. Can be controlled with --upstream.
  • Fixed moon query projects regex patterns not working when used in conjunction with affected.
  • Fixed Bash-based hooks being generated with the wrong path separators on Windows.
  • Fixed an issue where an inherited task with merge strategy "replace" will accidentally remove task args, deps, and env in inheriting tasks.
  • Fixed an issue where token variables and environment variables used within task args together would not be replaced correctly.

1.29.0

🚀 Updates

  • Implemented a new affected project tracker that is more accurate and more powerful.
    • Can now control the depth of upstream (dependencies) and downstream (dependents).
    • Affected information now logs more information and is included in reports/JSON.
    • Added --upstream and --downstream options to moon query projects.
    • Coming soon for affected tasks as well!

... (truncated)

Commits

Updates @vitest/coverage-v8 from 2.1.2 to 2.1.3

Release notes

Sourced from @​vitest/coverage-v8's releases.

v2.1.3

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates publint from 0.2.11 to 0.2.12

Release notes

Sourced from publint's releases.

v0.2.12

Features

  • If the package publishes a license file, but the "license" field is not set in package.json, a suggestion will now be shown to add the field (bluwy/publint#111)

Bug fixes

  • In the "repostory" field, string shorthands with nested paths like gitlab:org/user/repo is now considered valid (bluwy/publint#113)

Site

Full Changelog: bluwy/publint@v0.2.11...v0.2.12

Commits

Updates vitest from 2.1.2 to 2.1.3

Release notes

Sourced from vitest's releases.

v2.1.3

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 4c03a0d chore: release v2.1.3
  • 70baaaa fix(vitest): use fast-glob instead of tinyglobby in Vitest (#6688)
  • 19d64e2 fix(vitest): always inline setup files (#6689)
  • 47dde76 fix(vitest): show rollup error details as test error (#6686)
  • 7155cee refactor(coverage): move re-usable parts to base provider (#6665)
  • 7a0de0a perf: reuse full name in reported tasks, update generator types (#6666)
  • 8bef5d2 fix(browser): not.toBeInTheDocument works with locators API (#6634)
  • 9ece395 fix(vitest): fix \<empty line> logs when interleaving console.log/error (#...
  • 000459a fix(vitest): deprecate old task types and node-reliant types (#6632)
  • 946d8bb fix(vitest): don't hang with maxConcurrency 0 (#6627)
  • Additional commits viewable in compare view

Updates @astrojs/starlight from 0.28.2 to 0.28.3

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.28.3

Patch Changes

Changelog

Sourced from @​astrojs/starlight's changelog.

0.28.3

Patch Changes

Commits

Updates @astrojs/ts-plugin from 1.10.2 to 1.10.4

Release notes

Sourced from @​astrojs/ts-plugin's releases.

@​astrojs/ts-plugin@​1.10.4

Patch Changes

  • 128cf11: Improves performance when using TS 5.6. Performance is still degraded compared to 5.5, but should at least be usable.
  • Updated dependencies [128cf11]
    • @​astrojs/yaml2ts@​0.2.2

@​astrojs/ts-plugin@​1.10.3

Patch Changes

  • 8673fa5: Fixes certain cases where content schemas would not be reloaded properly when they were updated
Changelog

Sourced from @​astrojs/ts-plugin's changelog.

1.10.4

Patch Changes

  • 128cf11: Improves performance when using TS 5.6. Performance is still degraded compared to 5.5, but should at least be usable.
  • Updated dependencies [128cf11]
    • @​astrojs/yaml2ts@​0.2.2

1.10.3

Patch Changes

  • 8673fa5: Fixes certain cases where content schemas would not be reloaded properly when they were updated
Commits

Updates rollup from 4.24.0 to 4.24.2

Release notes

Sourced from rollup's releases.

v4.24.2

4.24.2

2024-10-27

Bug Fixes

  • Add missing build dependency (#5705)

Pull Requests

  • #5705: Fix "Couldn't find package" error when installing rollup using yarn (@​tagattie)

v4.24.1

4.24.1

2024-10-27

Bug Fixes

  • Support running Rollup natively on FreeBSD (#5698)

Pull Requests

Changelog

Sourced from rollup's changelog.

4.24.2

2024-10-27

Bug Fixes

  • Add missing build dependency (#5705)

Pull Requests

  • #5705: Fix "Couldn't find package" error when installing rollup using yarn (@​tagattie)

4.24.1

2024-10-27

Bug Fixes

  • Support running Rollup natively on FreeBSD (#5698)

Pull Requests

Commits
  • 32d0e7d 4.24.2
  • 85226fd Fix "Couldn't find package" error when installing rollup using yarn (#5705)
  • 88a54d8 4.24.1
  • b9ff676 Add support for FreeBSD (x64 and arm64) (#5698)
  • 9048a4f chore(deps): lock file maintenance minor/patch updates (#5696)
  • 028e47c fix(deps): update swc monorepo (major) (#5695)
  • 9ac8891 chore(deps): lock file maintenance minor/patch updates (#5692)
  • 29cd524 chore(deps): update dependency eslint-plugin-unicorn to v56 (#5691)
  • 366e4d0 chore(deps): update dependency @​inquirer/prompts to v7 (#5690)
  • 5d91210 chore(deps): lock file maintenance minor/patch updates (#5689)
  • See full diff in compare view

Updates vite from 5.4.8 to 5.4.10

Release notes

Sourced from vite's releases.

v5.4.10

Please refer to CHANGELOG.md for details.

v5.4.9

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.10 (2024-10-23)

  • fix: backport #18367,augment hash for CSS files to prevent chromium erroring by loading previous fil (7d1a3bc), closes #18367 #18412

5.4.9 (2024-10-14)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-deps group across 1 directory with 9 up…
3be1937 
…dates

Bumps the dev-deps group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `1.9.3` | `1.9.4` |
| [@moonrepo/cli](https://github.com/moonrepo/moon/tree/HEAD/packages/cli) | `1.28.3` | `1.29.3` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `2.1.2` | `2.1.3` |
| [publint](https://github.com/bluwy/publint/tree/HEAD/pkg) | `0.2.11` | `0.2.12` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.2` | `2.1.3` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.28.2` | `0.28.3` |
| [@astrojs/ts-plugin](https://github.com/withastro/language-tools/tree/HEAD/packages/ts-plugin) | `1.10.2` | `1.10.4` |
| [rollup](https://github.com/rollup/rollup) | `4.24.0` | `4.24.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.8` | `5.4.10` |



Updates `@biomejs/biome` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/cli/v1.9.4/packages/@biomejs/biome)

Updates `@moonrepo/cli` from 1.28.3 to 1.29.3
- [Release notes](https://github.com/moonrepo/moon/releases)
- [Changelog](https://github.com/moonrepo/moon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moonrepo/moon/commits/@moonrepo/[email protected]/packages/cli)

Updates `@vitest/coverage-v8` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.3/packages/coverage-v8)

Updates `publint` from 0.2.11 to 0.2.12
- [Release notes](https://github.com/bluwy/publint/releases)
- [Commits](https://github.com/bluwy/publint/commits/v0.2.12/pkg)

Updates `vitest` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.3/packages/vitest)

Updates `@astrojs/starlight` from 0.28.2 to 0.28.3
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/[email protected]/packages/starlight)

Updates `@astrojs/ts-plugin` from 1.10.2 to 1.10.4
- [Release notes](https://github.com/withastro/language-tools/releases)
- [Changelog](https://github.com/withastro/language-tools/blob/main/packages/ts-plugin/CHANGELOG.md)
- [Commits](https://github.com/withastro/language-tools/commits/@astrojs/[email protected]/packages/ts-plugin)

Updates `rollup` from 4.24.0 to 4.24.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.24.0...v4.24.2)

Updates `vite` from 5.4.8 to 5.4.10
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.10/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.10/packages/vite)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@moonrepo/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: "@vitest/coverage-v8"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: publint
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@astrojs/starlight"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@astrojs/ts-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 28, 2024
@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@astrojs/[email protected] Transitive: environment, eval, filesystem, network, shell +234 28.9 MB fredkschott, matthewp, natemoo-re
npm/@astrojs/[email protected] Transitive: environment, filesystem +11 6.68 MB fredkschott
npm/@biomejs/[email protected] None 0 210 kB conaclos, dominionl, ematipico, ...1 more
npm/@moonrepo/[email protected] environment, filesystem Transitive: shell +1 32.1 kB milesj
npm/@vitest/[email protected] Transitive: environment, filesystem, shell +63 10.7 MB vitestbot
npm/[email protected] Transitive: environment, filesystem +16 327 kB bluwy
npm/[email protected] None +1 2.62 MB eventualbuddha, lukastaegert, rich_harris, ...2 more
npm/[email protected] Transitive: environment, filesystem, network, shell +5 3.77 MB antfu, patak, soda, ...2 more
npm/[email protected] environment, eval Transitive: filesystem, shell, unsafe +31 4.19 MB vitestbot

🚮 Removed packages: npm/@astrojs/[email protected], npm/@astrojs/[email protected], npm/@biomejs/[email protected], npm/@moonrepo/[email protected], npm/@vitest/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

@dependabot Dependabot
Copy link
Author

dependabot bot commented on behalf of github Nov 2, 2024

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Nov 2, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-deps-5099b06ba5 branch November 2, 2024 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants