build(deps-dev): bump the app-development-dependencies group with 10 updates #510

dependabot · 2023-11-15T16:34:25Z

Bumps the app-development-dependencies group with 10 updates:

Package	From	To
commitizen	`4.2.6`	`4.3.0`
lerna	`7.3.0`	`7.4.2`
rollup-plugin-typescript2	`0.27.3`	`0.36.0`
typescript	`4.9.4`	`4.9.5`
wait-on	`7.0.1`	`7.2.0`
nodemon	`2.0.20`	`2.0.22`
@types/lodash.debounce	`4.0.7`	`4.0.9`
@types/node-notifier	`8.0.2`	`8.0.5`
electron	`18.1.0`	`18.3.15`
regenerator-runtime	`0.13.11`	`0.14.0`

Updates commitizen from 4.2.6 to 4.3.0

Release notes

Sourced from commitizen's releases.

v4.3.0

4.3.0 (2023-01-19)

Features

init: add pnpm support (#915) (c1f4142), closes #893 #858

Commits

c1f4142 feat(init): add pnpm support (#915)
87138d3 chore(deps) Update all non-major dependencies
See full diff in compare view

Updates lerna from 7.3.0 to 7.4.2

Release notes

Sourced from lerna's releases.

v7.4.2

7.4.2 (2023-10-27)

Bug Fixes

version: support changelog-presets using async factory funcs (#3873) (bb5e7d7)

v7.4.1

7.4.1 (2023-10-18)

7.4.0 contained a malformed dist directory, please bump to 7.4.1 for the correct artifacts

v7.4.0

7.4.0 (2023-10-17)

Bug Fixes

version: update lock files after the version hook (#3849) (7e30a31)

Features

version: add json option (#3858) (86f22f4)

version: add option to force version update (#3852) (914dd96)

v7.3.1

7.3.1 (2023-10-10)

Bug Fixes

core: update package engines.node to correctly include only >=16 (#3861) (0674555)

Changelog

Sourced from lerna's changelog.

7.4.2 (2023-10-27)

Bug Fixes

version: support changelog-presets using async factory funcs (#3873) (bb5e7d7)

7.4.1 (2023-10-18)

Note: Version bump only for package lerna

7.4.0 (2023-10-17)

Features

version: add json option (#3858) (86f22f4)

version: add option to force version update (#3852) (914dd96)

7.3.1 (2023-10-10)

Bug Fixes

core: update package engines.node to correctly include only >=16 (#3861) (0674555)

Commits

5effc09 chore(misc): publish 7.4.2
bb5e7d7 fix(version): support changelog-presets using async factory funcs (#3873)
04772e6 chore(misc): publish 7.4.1
1abb93a chore(misc): publish 7.4.0
af23df5 chore(diff): use import instead of require for bundling diff command (#3847)
86f22f4 feat(version): add json option (#3858)
914dd96 feat(version): add option to force version update (#3852)
f09e00a chore(misc): publish 7.3.1
0674555 fix(core): update package engines.node to correctly include only >=16 (#3861)
See full diff in compare view

Updates rollup-plugin-typescript2 from 0.27.3 to 0.36.0

Release notes

Sourced from rollup-plugin-typescript2's releases.

0.36.0

Features/bugfixes

support newer moduleResolution kinds, update build to TS 5.x by @ezolenko in ezolenko/rollup-plugin-typescript2#453

fix: hardcode declaration extension check by @agilgur5 in ezolenko/rollup-plugin-typescript2#456

Internal (testing, refactors)

github: mark dist/* as generated code by @agilgur5 in ezolenko/rollup-plugin-typescript2#457

deps: auto-update semver via npm audit fix by @agilgur5 in ezolenko/rollup-plugin-typescript2#459

switching from tslint (deprecated) to eslint by @ezolenko in ezolenko/rollup-plugin-typescript2#463

Full Changelog: ezolenko/rollup-plugin-typescript2@0.35.0...0.36.0

0.35.0

Features

Support module: "ES2022" by @ezolenko in ezolenko/rollup-plugin-typescript2#450

Support cts/mts file types by @ezolenko in ezolenko/rollup-plugin-typescript2#451

Bugfixes

Disable cache in watch mode by @ezolenko in ezolenko/rollup-plugin-typescript2#452

Full Changelog: ezolenko/rollup-plugin-typescript2@0.34.1...0.35.0

0.34.1

Bugfixes

fix: don't error out while catching a buildStart error by @agilgur5 in ezolenko/rollup-plugin-typescript2#422

This fixes an initialization regression in 0.34.0 where users saw TypeError: Cannot read property 'done' of undefined instead of their actual initialization error, such as a tsconfig issue (such as with ezolenko/rollup-plugin-typescript2#421)

fix: add compatibility checks w/ semver by @agilgur5 in ezolenko/rollup-plugin-typescript2#424

0.34.0 introduced a type-only fix that relied on Rollup 2.60.0+ and would (accidentally) error out on older versions of Rollup. This fix handles it gracefully with a clear warning message instead and skips that check when using an older version of Rollup (i.e. partly backward-compatible).

This also adds an error if peerDependencies minimum versions have not been met

fix: don't resolve filtered files by @agilgur5 in ezolenko/rollup-plugin-typescript2#428

This fixes a regression from 0.33.0 that could cause rpt2 to (accidentally) resolve files that should have been filtered out by the plugin include/exclude (such as with ezolenko/rollup-plugin-typescript2#427)

Internal (testing, refactors)

clean(deps): remove unused @types/resolve by @agilgur5 in ezolenko/rollup-plugin-typescript2#423

test: increase no-errors integration timeout to 20s by @agilgur5 in ezolenko/rollup-plugin-typescript2#425

Full Changelog: ezolenko/rollup-plugin-typescript2@0.34.0...0.34.1

0.34.0

Bugfixes

fix: handle all type-only imports by piping TS imports by @agilgur5 in #406

If you have ever had issues with some files not being type-checked or not generating declarations, this should conclusively fix all such issues. This type of issue used to occur if you had a type-only / interface-only / emit-less file, i.e. a file with only TS types and interfaces that would produce no JS.

For instance: #211, #298, #409, etc

NOTE: This requires Rollup version 2.60.0+ as it requires the use of this.load

... (truncated)

Commits

e9ede1d - build
592ed5c switching from tslint (deprecated) to eslint (#463)
fc85376 - build version
ce2038d support newer moduleResolution kinds
b43001e deps: auto-update semver via npm audit fix (#459)
976dadb fix: hardcode declaration extension check (#456)
61c7392 github: mark dist/* as generated code (#457)
68017ae Adding node 20.x to unit test environments
31f61f7 - build for 0.35.0
bb78363 - fix for unittest
Additional commits viewable in compare view

Updates typescript from 4.9.4 to 4.9.5

Release notes

Sourced from typescript's releases.

TypeScript 4.9.5

For release notes, check out the release announcement.

Downloads are available on:

npm

NuGet package

Changes:

69e88ef5513a81acf69ec78f4af1f927da0d0584 Port ignore deprecations to 4.9 (#52419)

daf4e817a18def96b70ac34703b158ff0e6d58df Port timestamp fix to 4.9 (#52426)

Commits

ccf3d3c Bump version to '4.9.5' and LKG.
69e88ef Port ignore deprecations to 4.9 (#52419)
daf4e81 Port timestamp fix to 4.9 (#52426)
See full diff in compare view

Updates wait-on from 7.0.1 to 7.2.0

Release notes

Sourced from wait-on's releases.

v7.2.0

Update axios from 0.27.2 to latest 1.6.1 which fixes security vulnerability CVE-2023-45857.

Thanks @AndrewMax for the PR #147 and also for those that confirmed it.

v7.1.0

Update dependencies.

Add ability to specify timeout, httpTimeout, and tcpTimeout with a unit (ms, m, s, h), defaults to ms if not specified. Thanks @ntkoopman

Commits

a10322f 7.2.0
fc27d1b Merge branch 'AndrewMax-amaks/fix/axios-1.6.0'
a71be27 chore: bump Axios to 1.6.1
69092f4 fix: update axios to 1.6.0 to fix CVE-2023-45857
aefc49e 7.1.0
0ec371e update semver
96b0e33 Merge pull request #144 from jeffbski/update-deps-2023-11-02
18a9b6c major dep updates
f4c99ae patch and minor dep updates
b9ec579 Merge branch 'ntkoopman-interval'
Additional commits viewable in compare view

Updates nodemon from 2.0.20 to 2.0.22

Release notes

Sourced from nodemon's releases.

v2.0.22

2.0.22 (2023-03-22)

Bug Fixes

remove ts mapping if loader present (f7816e4), closes #2083

v2.0.21

2.0.21 (2023-03-02)

Bug Fixes

remove ts mapping if loader present (1468397), closes #2083

Commits

c971fdc Merge branch 'main' of github.com:remy/nodemon
b9679a2 chore: supporters
f7816e4 fix: remove ts mapping if loader present
9f3ffdb One more fix
abc8522 Get rid of spawning shell windows if nodemon is started without console.
b11ddd1 Merge branch 'main' of github.com:remy/nodemon
204af11 chore: missing supporters
1468397 fix: remove ts mapping if loader present
26b1f0f chore: add conventional commit check
adaafa1 One more fix
Additional commits viewable in compare view

Updates @types/lodash.debounce from 4.0.7 to 4.0.9

Commits

See full diff in compare view

Updates @types/node-notifier from 8.0.2 to 8.0.5

Commits

See full diff in compare view

Updates electron from 18.1.0 to 18.3.15

Commits

7dd731d Bump v18.3.15
a055c64 chore: cherry-pick 3eca8ad6b0b5 from libaom (#35827)
56f94fa chore: cherry-pick a66438897056 from pdfium (#35788)
d5c04c9 chore: cherry-pick 7f0bb5197ed1 from pdfium (#35792)
a01dbea Bump v18.3.14
6066a82 chore: cherry-pick 3704cf78f471 from v8 (#35775)
27b009b chore: cherry-pick 9b5207569882 from chromium (#35546)
9a39c5b chore: cherry-pick 497f077a1d46 from pdfium (#35790)
d506004 Revert "Bump v18.3.14"
711a40f Bump v18.3.14
Additional commits viewable in compare view

Updates regenerator-runtime from 0.13.11 to 0.14.0

Commits

30771b7 Bump regenerator-runtime version to 0.14.0.
d3bac38 Runtime: yield* should throw if not iterable (#636)
b3bf1a9 Add Node.js v20 to test rotation.
ffd1de9 Bump internal dependencies on transform package.
bad2990 Bump regenerator-transform version to 0.15.2.
c467f23 Bump semver from 7.3.8 to 7.5.2 (#681)
59f1601 Bump @babel/runtime from 7.20.1 to 7.22.5 (#677)
b278ff3 Bump @babel/plugin-transform-parameters from 7.20.3 to 7.22.5 (#676)
b2bf94e Bump @babel/parser from 7.20.3 to 7.22.5 (#675)
a0e61c6 Bump @babel/types from 7.20.2 to 7.22.5 (#674)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…updates Bumps the app-development-dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [commitizen](https://github.com/commitizen/cz-cli) | `4.2.6` | `4.3.0` | | [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `7.3.0` | `7.4.2` | | [rollup-plugin-typescript2](https://github.com/ezolenko/rollup-plugin-typescript2) | `0.27.3` | `0.36.0` | | [typescript](https://github.com/Microsoft/TypeScript) | `4.9.4` | `4.9.5` | | [wait-on](https://github.com/jeffbski/wait-on) | `7.0.1` | `7.2.0` | | [nodemon](https://github.com/remy/nodemon) | `2.0.20` | `2.0.22` | | [@types/lodash.debounce](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash.debounce) | `4.0.7` | `4.0.9` | | [@types/node-notifier](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node-notifier) | `8.0.2` | `8.0.5` | | [electron](https://github.com/electron/electron) | `18.1.0` | `18.3.15` | | [regenerator-runtime](https://github.com/facebook/regenerator) | `0.13.11` | `0.14.0` | Updates `commitizen` from 4.2.6 to 4.3.0 - [Release notes](https://github.com/commitizen/cz-cli/releases) - [Commits](commitizen/cz-cli@v4.2.6...v4.3.0) Updates `lerna` from 7.3.0 to 7.4.2 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v7.4.2/packages/lerna) Updates `rollup-plugin-typescript2` from 0.27.3 to 0.36.0 - [Release notes](https://github.com/ezolenko/rollup-plugin-typescript2/releases) - [Changelog](https://github.com/ezolenko/rollup-plugin-typescript2/blob/master/CHANGELOG.md) - [Commits](ezolenko/rollup-plugin-typescript2@0.27.3...0.36.0) Updates `typescript` from 4.9.4 to 4.9.5 - [Release notes](https://github.com/Microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v4.9.4...v4.9.5) Updates `wait-on` from 7.0.1 to 7.2.0 - [Release notes](https://github.com/jeffbski/wait-on/releases) - [Commits](jeffbski/wait-on@v7.0.1...v7.2.0) Updates `nodemon` from 2.0.20 to 2.0.22 - [Release notes](https://github.com/remy/nodemon/releases) - [Commits](remy/nodemon@v2.0.20...v2.0.22) Updates `@types/lodash.debounce` from 4.0.7 to 4.0.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash.debounce) Updates `@types/node-notifier` from 8.0.2 to 8.0.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node-notifier) Updates `electron` from 18.1.0 to 18.3.15 - [Release notes](https://github.com/electron/electron/releases) - [Changelog](https://github.com/electron/electron/blob/main/docs/breaking-changes.md) - [Commits](electron/electron@v18.1.0...v18.3.15) Updates `regenerator-runtime` from 0.13.11 to 0.14.0 - [Release notes](https://github.com/facebook/regenerator/releases) - [Commits](https://github.com/facebook/regenerator/compare/[email protected]@0.14.0) --- updated-dependencies: - dependency-name: commitizen dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies - dependency-name: lerna dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies - dependency-name: rollup-plugin-typescript2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-patch dependency-group: app-development-dependencies - dependency-name: wait-on dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies - dependency-name: nodemon dependency-type: direct:development update-type: version-update:semver-patch dependency-group: app-development-dependencies - dependency-name: "@types/lodash.debounce" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: app-development-dependencies - dependency-name: "@types/node-notifier" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: app-development-dependencies - dependency-name: electron dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies - dependency-name: regenerator-runtime dependency-type: direct:development update-type: version-update:semver-minor dependency-group: app-development-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2023-12-18T16:21:28Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 15, 2023

dependabot bot force-pushed the dependabot/npm_and_yarn/app-development-dependencies-0cded618f1 branch 4 times, most recently from 0d97ce5 to 397078d Compare November 23, 2023 17:09

dependabot bot force-pushed the dependabot/npm_and_yarn/app-development-dependencies-0cded618f1 branch from 397078d to 7bf942e Compare November 24, 2023 16:22

dependabot bot force-pushed the dependabot/npm_and_yarn/app-development-dependencies-0cded618f1 branch from 7bf942e to 256464d Compare December 12, 2023 16:25

dependabot bot closed this Dec 18, 2023

dependabot bot deleted the dependabot/npm_and_yarn/app-development-dependencies-0cded618f1 branch December 18, 2023 16:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps-dev): bump the app-development-dependencies group with 10 updates #510

build(deps-dev): bump the app-development-dependencies group with 10 updates #510

dependabot bot commented on behalf of github Nov 15, 2023 •

edited

Loading

dependabot bot commented on behalf of github Dec 18, 2023

build(deps-dev): bump the app-development-dependencies group with 10 updates #510

build(deps-dev): bump the app-development-dependencies group with 10 updates #510

Conversation

dependabot bot commented on behalf of github Nov 15, 2023 • edited Loading

v4.3.0

4.3.0 (2023-01-19)

Features

v7.4.2

7.4.2 (2023-10-27)

Bug Fixes

v7.4.1

7.4.1 (2023-10-18)

v7.4.0

7.4.0 (2023-10-17)

Bug Fixes

Features

v7.3.1

7.3.1 (2023-10-10)

Bug Fixes

7.4.2 (2023-10-27)

Bug Fixes

7.4.1 (2023-10-18)

7.4.0 (2023-10-17)

Features

7.3.1 (2023-10-10)

Bug Fixes

0.36.0

Features/bugfixes

Internal (testing, refactors)

0.35.0

Features

Bugfixes

0.34.1

Bugfixes

Internal (testing, refactors)

0.34.0

Bugfixes

TypeScript 4.9.5

Changes:

v7.2.0

v7.1.0

v2.0.22

2.0.22 (2023-03-22)

Bug Fixes

v2.0.21

2.0.21 (2023-03-02)

Bug Fixes

dependabot bot commented on behalf of github Dec 18, 2023

dependabot bot commented on behalf of github Nov 15, 2023 •

edited

Loading