Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update devdependencies #2782

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 8, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@unlazy/nuxt (source) ^0.11.2 -> ^0.11.3 age adoption passing confidence
@unocss/eslint-config (source) ^0.58.9 -> ^0.61.0 age adoption passing confidence
@vue/test-utils 2.4.5 -> 2.4.6 age adoption passing confidence
bumpp ^9.4.0 -> ^9.4.1 age adoption passing confidence
eslint-plugin-format ^0.1.0 -> ^0.1.1 age adoption passing confidence
lint-staged ^15.2.2 -> ^15.2.7 age adoption passing confidence
nuxt (source) ^3.11.2 -> ^3.12.1 age adoption passing confidence
sharp (source, changelog) ^0.33.3 -> ^0.33.4 age adoption passing confidence
tsx ^4.7.2 -> ^4.15.2 age adoption passing confidence

Release Notes

johannschopplich/unlazy (@​unlazy/nuxt)

v0.11.3

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
unocss/unocss (@​unocss/eslint-config)

v0.61.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.60.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.60.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
  • preset-mini: Improve performance of resolveBreakpoints  -  by @​antfu (05d90)
    View changes on GitHub

v0.60.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.60.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.60.0

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.59.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.59.3

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.59.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.59.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v0.59.0

Compare Source

   🚨 Breaking Changes
   🐞 Bug Fixes
    View changes on GitHub
vuejs/test-utils (@​vue/test-utils)

v2.4.6

Compare Source

What's Changed

New Contributors

Full Changelog: vuejs/test-utils@v2.4.5...v2.4.6

antfu/bumpp (bumpp)

v9.4.1

Compare Source

antfu/eslint-plugin-format (eslint-plugin-format)

v0.1.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
okonet/lint-staged (lint-staged)

v15.2.7

Compare Source

Patch Changes
  • #​1440 a51be80 Thanks @​iiroj! - In the previous version the native git rev-parse --show-toplevel command was taken into use for resolving the current git repo root. This version drops the --path-format=absolute option to support earlier git versions since it's also the default behavior. If you are still having trouble, please try upgrading git to the latest version.

v15.2.6

Compare Source

Patch Changes
  • #​1433 119adb2 Thanks @​iiroj! - Use native "git rev-parse" commands to determine git repo root directory and the .git config directory, instead of using custom logic. This hopefully makes path resolution more robust on non-POSIX systems.

v15.2.5

Compare Source

Patch Changes
  • #​1424 31a1f95 Thanks @​iiroj! - Allow approximately equivalent versions of direct dependencies by using the "~" character in the version ranges. This means a more recent patch version of a dependency is allowed if available.

  • #​1423 91abea0 Thanks @​iiroj! - Improve error logging when failing to read or parse a configuration file

  • #​1424 ee43f15 Thanks @​iiroj! - Upgrade micromatch@4.0.7

v15.2.4

Compare Source

Patch Changes
  • 4f4537a Thanks @​iiroj! - Fix release issue with previous version; update dependencies
nuxt/nuxt (nuxt)

v3.12.1

Compare Source

v3.12.0

Compare Source

lovell/sharp (sharp)

v0.33.4

Compare Source

privatenumber/tsx (tsx)

v4.15.2

Compare Source

Bug Fixes
  • esm: resolve implicit extension in package subpath (7e1fe22)

This release is also available on:

v4.15.1

Compare Source

v4.15.0

Compare Source

Features

This release is also available on:

v4.14.1

Compare Source

Bug Fixes
  • cjs: only hide transformers when namespaced (9e647a5)

This release is also available on:

v4.14.0

Compare Source

Features
  • resolve .js → .ts in package.json exports & main (4503421)

This release is also available on:

v4.13.3

Compare Source

Bug Fixes
  • cjs: resolve directory import relative to parent (#​42) (02d3856)
  • esm: cjs interop to support decorators (807f467)
  • esm: resolve .ts extension in imports map (89621bf)

This release is also available on:

v4.13.2

Compare Source

Bug Fixes
  • esm: ignore transforming .js files with CJS syntax (#​40) (87a7683)

This release is also available on:

v4.13.1

Compare Source

Bug Fixes
  • esm/api: tsImport() to parse CJS exports (0a78bfd)

This release is also available on:

v4.13.0

Compare Source

Features
  • cjs/api: register() to support namespace (#​35) (c703300)
  • esm/api: tsImport() to support loading CommonJS files (0eb4e91)

This release is also available on:

v4.12.1

Compare Source

Bug Fixes
  • esm: resolve implicit ts paths in packages (de900a1)

This release is also available on:

v4.12.0

Compare Source

Bug Fixes
Features
Performance Improvements
  • esm: only try extensions if file path (72d0896)

This release is also available on:

v4.11.2

Compare Source

Bug Fixes

This release is also available on:

v4.11.1

Compare Source

Bug Fixes
  • cjs/api: resolve correct module and types when imported (#​566) (5e70105)

This release is also available on:

v4.11.0

Compare Source

Bug Fixes
  • only error on invalid tsconfig if explicitly passed in (#​30) (b6bf39b)
Features
  • esm api: configurable tsconfig (3f42ae3)

This release is also available on:

v4.10.5

Compare Source

Bug Fixes

This release is also available on:

v4.10.4

Compare Source

v4.10.3

Compare Source

Performance Improvements
  • skip parsing if import( is not found in minified code (5cdd50b)

This release is also available on:

v4.10.2

Compare Source

v4.10.1

Compare Source

v4.10.0

Compare Source

Features
  • esm api: register to return a namespaced import() method (53bb4aa)

This release is also available on:

v4.9.5

Compare Source

v4.9.4

Compare Source

Bug Fixes
  • tsImport: import module from commonjs (48f0a75)

This release is also available on:

v4.9.3

Compare Source

Bug Fixes

This release is also available on:

v4.9.2

Compare Source

Bug Fixes

This release is also available on:

v4.9.1

Compare Source

v4.9.0

Compare Source

v4.8.2

Compare Source

Bug Fixes
  • types: cjs/api to use .d.cts (4b1f03c)

This release is also available on:

v4.8.1

Compare Source

v4.8.0

Compare Source

v4.7.3

Compare Source

Bug Fixes
  • support TS resolution in JS files when allowJs is set (#​535) (081853e)

This release is also available on:


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Apr 8, 2024
Copy link

stackblitz bot commented Apr 8, 2024

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

Copy link

netlify bot commented Apr 8, 2024

Deploy Preview for elk-docs failed.

Name Link
🔨 Latest commit f128fde
🔍 Latest deploy log https://app.netlify.com/sites/elk-docs/deploys/6669ecedb8297f0008dc3ad7

Copy link

netlify bot commented Apr 8, 2024

Deploy Preview for elk-zone failed.

Name Link
🔨 Latest commit f128fde
🔍 Latest deploy log https://app.netlify.com/sites/elk-zone/deploys/6669ecedb5f2fd0008d3c24f

Copy link

socket-security bot commented Apr 8, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Telemetry npm/@nuxt/telemetry@2.5.4
  • Note: Can be disabled by setting the environment variable NUXT_TELEMETRY_DISABLED=1
  • orphan: npm/@nuxt/telemetry@2.5.4
Telemetry npm/@nuxt/telemetry@2.5.3
  • Note: Can be disabled by setting the environment variable NUXT_TELEMETRY_DISABLED=1
Install scripts npm/sharp@0.33.3
  • Install script: install
  • Source: node install/check
Install scripts npm/simple-git-hooks@2.11.1
  • Install script: postinstall
  • Source: node ./postinstall.js
Install scripts npm/vue-demi@0.14.8
  • Install script: postinstall
  • Source: node -e "try{require('./scripts/postinstall.js')}catch(e){}"

View full report↗︎

Next steps

What is telemetry?

This package contains telemetry which tracks how it is used.

Most telemetry comes with settings to disable it. Consider disabling telemetry if you do not want to be tracked.

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/@nuxt/telemetry@2.5.4
  • @SocketSecurity ignore npm/@nuxt/telemetry@2.5.3
  • @SocketSecurity ignore npm/sharp@0.33.3
  • @SocketSecurity ignore npm/simple-git-hooks@2.11.1
  • @SocketSecurity ignore npm/vue-demi@0.14.8

@renovate renovate bot force-pushed the renovate/devdependencies branch 5 times, most recently from 458a17a to 349da43 Compare April 18, 2024 12:54
@renovate renovate bot force-pushed the renovate/devdependencies branch 5 times, most recently from 54fd745 to a6776b8 Compare May 1, 2024 09:48
@renovate renovate bot force-pushed the renovate/devdependencies branch 5 times, most recently from bdf9fd2 to 15142bd Compare May 9, 2024 01:30
@renovate renovate bot force-pushed the renovate/devdependencies branch 8 times, most recently from 70341d5 to b8b9b1c Compare May 17, 2024 06:38
@renovate renovate bot force-pushed the renovate/devdependencies branch from b8b9b1c to 90041f6 Compare May 18, 2024 09:23
@renovate renovate bot force-pushed the renovate/devdependencies branch 4 times, most recently from 8620164 to 1abe91c Compare May 25, 2024 13:12
@renovate renovate bot force-pushed the renovate/devdependencies branch 4 times, most recently from fbe6270 to 212f697 Compare June 3, 2024 04:35
@renovate renovate bot force-pushed the renovate/devdependencies branch 14 times, most recently from 21de658 to f90115c Compare June 11, 2024 22:45
@renovate renovate bot force-pushed the renovate/devdependencies branch from f90115c to f128fde Compare June 12, 2024 18:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: dependencies Pull requests that adds/updates a dependency
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants