deps(example): bump the dependencies group across 1 directory with 10 updates #2915
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the dependencies group with 10 updates in the /examples/nestjs-graphql directory: | Package | From | To | | --- | --- | --- | | [@nestjs/apollo](https://github.com/nestjs/graphql) | `12.2.2` | `13.0.1` | | [@nestjs/config](https://github.com/nestjs/config) | `3.3.0` | `4.0.0` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `10.4.15` | `11.0.3` | | [@nestjs/graphql](https://github.com/nestjs/graphql) | `12.2.2` | `13.0.1` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `10.4.15` | `11.0.3` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `10.4.9` | `11.0.0` | | [@nestjs/schematics](https://github.com/nestjs/schematics) | `10.2.3` | `11.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.20.0` | `8.21.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.20.0` | `8.21.0` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.2` | `5.2.3` | Updates `@nestjs/apollo` from 12.2.2 to 13.0.1 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v12.2.2...v13.0.1) Updates `@nestjs/config` from 3.3.0 to 4.0.0 - [Release notes](https://github.com/nestjs/config/releases) - [Changelog](https://github.com/nestjs/config/blob/master/.release-it.json) - [Commits](nestjs/config@3.3.0...4.0.0) Updates `@nestjs/core` from 10.4.15 to 11.0.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.0.3/packages/core) Updates `@nestjs/graphql` from 12.2.2 to 13.0.1 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v12.2.2...v13.0.1) Updates `@nestjs/platform-express` from 10.4.15 to 11.0.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.0.3/packages/platform-express) Updates `@nestjs/cli` from 10.4.9 to 11.0.0 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Changelog](https://github.com/nestjs/nest-cli/blob/master/.release-it.json) - [Commits](nestjs/nest-cli@10.4.9...11.0.0) Updates `@nestjs/schematics` from 10.2.3 to 11.0.0 - [Release notes](https://github.com/nestjs/schematics/releases) - [Changelog](https://github.com/nestjs/schematics/blob/master/.release-it.json) - [Commits](nestjs/schematics@10.2.3...11.0.0) Updates `@typescript-eslint/eslint-plugin` from 8.20.0 to 8.21.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.21.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.20.0 to 8.21.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.21.0/packages/parser) Updates `eslint-plugin-prettier` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.2.2...v5.2.3) --- updated-dependencies: - dependency-name: "@nestjs/apollo" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/config" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/core" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/graphql" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/platform-express" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/cli" dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/schematics" dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint-plugin-prettier dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Merging to
|
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is new author?A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package. Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights. What is unstable ownership?A new collaborator has begun publishing package versions. Package stability and security risk may be elevated. Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm. What is shell access?This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code. Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. What is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. What is network access?This module accesses the network. Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
|
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting |
Bumps the dependencies group with 10 updates in the /examples/nestjs-graphql directory:
12.2.213.0.13.3.04.0.010.4.1511.0.312.2.213.0.110.4.1511.0.310.4.911.0.010.2.311.0.08.20.08.21.08.20.08.21.05.2.25.2.3Updates
@nestjs/apollofrom 12.2.2 to 13.0.1Release notes
Sourced from
@nestjs/apollo's releases.Commits
4706ad2v13.0.1f2d5c63chore: update mixed up deps6b3b90fchore: update linter tsconfig root dir82d28fcv13.0.00a39884chore: upgrade depsb0368d1Merge pull request #3425 from nestjs/renovate/fast-glob-3.x25d39cfMerge pull request #3402 from nikeee/master09027f8Merge pull request #3431 from nestjs/renovate/graphql-ws-5.x3b5f8aeMerge pull request #3335 from nestjs/renovate/fastify-5.x6698db4Merge pull request #3428 from nestjs/renovate/graphql-tools-monorepoUpdates
@nestjs/configfrom 3.3.0 to 4.0.0Release notes
Sourced from
@nestjs/config's releases.Commits
163a4a8chore(): release v4.0.0c2eaf04chore: update config attributes to more self descriptive namesce18cb8Merge branch 'master' into next49c13fctest: update integration test to use new dotenv-expand optsa1225dbchore: upgrade eslint, update deps, ci setup1c54ddeMerge pull request #1919 from foxadb/refactor-missing-return-types6411b7dMerge pull request #1925 from nestjs/renovate/major-nest-monorepoe9c8727Merge pull request #1883 from nestjs/feat/skip-predefined-change-order94852a5chore(deps): update dependency lint-staged to v15.4.1 (#1926)49eec57chore(deps): update dependency lint-staged to v15.4.0 (#1924)Updates
@nestjs/corefrom 10.4.15 to 11.0.3Release notes
Sourced from
@nestjs/core's releases.... (truncated)
Commits
cbebdd2chore(@nestjs) publish v11.0.3 releasefca5ebbchore(@nestjs) publish v11.0.2 release0f617d4chore(@nestjs) publish v11.0.1 released6b9feefix: normalize middle wildcards, call path-to-regexp early1299888chore: update readmee19b586chore(@nestjs) publish v11.0.0 release95654f9chore: update package.json6791b6cstyle: address lint errorsdb2a9b5chore: resolve conflictsa24ef96chore(deps): Update opencollective to 0.4.1 under new scopeUpdates
@nestjs/graphqlfrom 12.2.2 to 13.0.1Release notes
Sourced from
@nestjs/graphql's releases.Commits
4706ad2v13.0.1f2d5c63chore: update mixed up deps6b3b90fchore: update linter tsconfig root dir82d28fcv13.0.00a39884chore: upgrade depsb0368d1Merge pull request #3425 from nestjs/renovate/fast-glob-3.x25d39cfMerge pull request #3402 from nikeee/master09027f8Merge pull request #3431 from nestjs/renovate/graphql-ws-5.x3b5f8aeMerge pull request #3335 from nestjs/renovate/fastify-5.x6698db4Merge pull request #3428 from nestjs/renovate/graphql-tools-monorepoUpdates
@nestjs/platform-expressfrom 10.4.15 to 11.0.3Release notes
Sourced from
@nestjs/platform-express's releases.... (truncated)
Commits
cbebdd2chore(@nestjs) publish v11.0.3 release5eaae5ffix(platform): add missing path-to-regexp dependency #14461fca5ebbchore(@nestjs) publish v11.0.2 release9aa2a43fix: use express body-parser reexports0f617d4chore(@nestjs) publish v11.0.1 released6b9feefix: normalize middle wildcards, call path-to-regexp early1299888chore: update readmee19b586chore(@nestjs) publish v11.0.0 release224e0ddchore: upgrade multer95654f9chore: update package.jsonUpdates
@nestjs/clifrom 10.4.9 to 11.0.0Release notes
Sourced from
@nestjs/cli's releases.Commits
6932655chore(): release v11.0.0fd63b3fMerge pull request #2879 from nestjs/renovate/angular-cli-monorepo5879bcbchore(deps): update dependency@swc/coreto v1.10.8 (#2880)b21f806fix(deps): update angular-cli monorepo to v19.1.27c86190Merge pull request #2878 from nestjs/renovate/inquirer-prompts-7.x2b1c2fafix(deps): update dependency@inquirer/promptsto v79baa082chore: resolve conflicts654a1f8chore: update chokidard6ba3faMerge pull request #2877 from nestjs/renovate/ansis-3.x0289f2aMerge pull request #2876 from nestjs/renovate/inquirer-prompts-5.xUpdates
@nestjs/schematicsfrom 10.2.3 to 11.0.0Release notes
Sourced from
@nestjs/schematics's releases.Commits
67a5356chore: resolve conflicts94a3ba8chore: update schematics package.json files641f8cechore(deps): update dependency@commitlint/clito v19.6.1 (#1962)2aad221chore(deps): update dependency eslint to v9.17.0 (#1961)9c9d318chore(deps): update dependency nodemon to v3.1.9 (#1960)1cce577chore(deps): update dependency@types/nodeto v22.10.2 (#1959)000626cchore(deps): update typescript-eslint monorepo to v8.18.0 (#1958)a0efb93chore(deps): update dependency prettier to v3.4.2 (#1955)190ff42chore(deps): update typescript-eslint monorepo to v8.17.0 (#1954)4809572chore(deps): update dependency eslint to v9.16.0 (#1953)Updates
@typescript-eslint/eslint-pluginfrom 8.20.0 to 8.21.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.Commits
79af426chore(release): publish 8.21.0609a78ftest(eslint-plugin): adjust tests to verifyno-unnecessary-type-assertiond...fb4ca72fix(eslint-plugin): [no-duplicate-enum-values] handle template literal (#10675)1895948fix(eslint-plugin): [no-base-to-string] don't crash for recursive array or tu...74f1c5afix(eslint-plugin): [no-for-in-array] report on any type which may be an arra...916b989fix(eslint-plugin): check JSX spread elements for misused spread usage (#10653)31be053chore: fix failing test on master70f3092docs: [no-misused-spread] fix sample code (#10659)a157fd4chore: standardized on inline named exports (mostly) (#10596)3dbcc19fix(eslint-plugin): [no-unnecessary-type-arguments] handle type args on jsx (...Updates
@typescript-eslint/parserfrom 8.20.0 to 8.21.0Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
79af426chore(release): publish 8.21.0a157fd4chore: standardized on inline named exports (mostly) (#10596)Updates
eslint-plugin-prettierfrom 5.2.2 to 5.2.3Release notes
Sourced from eslint-plugin-prettier's releases.
Changelog
Sourced from eslint-plugin-prettier's changelog.
Commits
6fd7ba1chore: release eslint-plugin-prettier (#704)190d6f9build(deps): Bump synckit from 0.9.1 to 0.9.2 (#705)9cf6a01build(deps-dev): Bump svelte from 4.2.8 to 4.2.19 (#677)9c6141fchore: add plugin name to flat recommended config (#703)35a5cd0chore: bupm eslint-plugin-comments (#702)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions