Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #83

Merged
merged 1 commit into from
Apr 9, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 25, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/generator (source) ^7.23.6 -> ^7.24.4 age adoption passing confidence
@babel/parser (source) ^7.24.1 -> ^7.24.4 age adoption passing confidence
@sxzz/eslint-config ^3.8.6 -> ^3.9.0 age adoption passing confidence
@types/node (source) ^20.11.29 -> ^20.12.6 age adoption passing confidence
pnpm (source) 8.15.5 -> 8.15.6 age adoption passing confidence
rollup (source) ^4.13.0 -> ^4.14.1 age adoption passing confidence
tsx ^4.7.1 -> ^4.7.2 age adoption passing confidence
typescript (source) ^5.4.2 -> ^5.4.4 age adoption passing confidence
unplugin ^1.10.0 -> ^1.10.1 age adoption passing confidence
vite (source) ^5.1.6 -> ^5.2.8 age adoption passing confidence

Release Notes

babel/babel (@​babel/generator)

v7.24.4

Compare Source

👓 Spec Compliance
🐛 Bug Fix
babel/babel (@​babel/parser)

v7.24.4

Compare Source

v7.24.4 (2024-04-03)

Thanks @​Dunqing, @​luiscubal, and @​samualtnorman for your first PRs!

👓 Spec Compliance
🐛 Bug Fix
Committers: 7
sxzz/eslint-config (@​sxzz/eslint-config)

v3.9.0

Compare Source

Minor Changes

  • Replace eslint-plugin-i with eslint-plugin-import-x for supporting ESLint v9.

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v3.8.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
pnpm/pnpm (pnpm)

v8.15.6

Compare Source

Patch Changes

  • The exit code of the child process should be preserved on pnpm run #​7817.
  • When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #​7813.
  • Add --ignore-scripts argument to prune command #​7836.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

rollup/rollup (rollup)

v4.14.1

Compare Source

2024-04-07

Bug Fixes
  • Show better error when running on musl Linux where the musl build is not supported (#​5454)
Pull Requests

v4.14.0

Compare Source

2024-04-03

Features
  • Display error causes in Rollup CLI (#​5422)
  • Add basic support for explicit resource management via "using" and "await using" (#​5423)
Pull Requests

v4.13.2

Compare Source

2024-03-28

Bug Fixes
  • Ensure accessing module info is cached after the build phase for improved performance (#​5438)
  • Support powerpc64le CPUs (#​5350)
Pull Requests

v4.13.1

Compare Source

2024-03-27

Bug Fixes
  • Add new linux-s390x-gnu native binary package (#​5346)
Pull Requests
privatenumber/tsx (tsx)

v4.7.2

Compare Source

Microsoft/TypeScript (typescript)

v5.4.4: TypeScript 5.4.4

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

v5.4.3: TypeScript 5.4.3

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

unjs/unplugin (unplugin)

v1.10.1

Compare Source

Bug Fixes
  • esbuild: sourcemaps in transform result can be a string (#​377) (4382fa2)
  • webpack,rspack: incorrect assumption about the current working directory in webpack and rspack (#​374) (b0ec0e0)
vitejs/vite (vite)

v5.2.8

Compare Source

v5.2.7

Compare Source

v5.2.6

Compare Source

v5.2.5

Compare Source

v5.2.4

v5.2.3

v5.2.2

v5.2.1

v5.2.0

v5.1.7

Compare Source

Please refer to CHANGELOG.md for details.


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

stackblitz bot commented Mar 25, 2024

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 9028e8e to 24f739e Compare April 3, 2024 14:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from c12066b to d56f8fe Compare April 8, 2024 06:40
Copy link

socket-security bot commented Apr 8, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Potential typo squat npm/eslint-plugin-import-x@0.5.0

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/eslint-plugin-import-x@0.5.0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d56f8fe to 5551c6b Compare April 9, 2024 07:37
@sxzz sxzz merged commit 5553f2c into main Apr 9, 2024
6 of 7 checks passed
@sxzz sxzz deleted the renovate/all-minor-patch branch April 9, 2024 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant