Bump concurrently from 8.2.2 to 9.0.1

[dependabot]

Bumps concurrently from 8.2.2 to 9.0.1.

Release notes

Sourced from concurrently's releases.

v9.0.1

What's Changed

• Don't set up more than 1 abort signal listener by @​gustavohenke in open-cli-tools/concurrently#503

Full Changelog: open-cli-tools/concurrently@v9.0.0...v9.0.1

v9.0.0

💥 Breaking Changes

• Dropped support for Node.js < 18.0.0. Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.

• The concurrently and default exports are now the same - #399 It's reasonable to expect that import { concurrently } from 'concurrently' would work the same as import concurrently from 'concurrently', however this has not been the case. The former used to be an unconfigured version of concurrently, lacking all features that you'd get from the CLI, which was seen as a "footgun". Both are now the same function.

  If you'd like to access the unconfigured function, use import { createConcurrently } from 'concurrently' instead.

✨ New Features

• Exponential back-off support for process restarting - #265, #462 Use --restart-after exponential. Restarts happen at 2^N seconds.
• Add prefix padding via new --pad-prefix flag - #166, #417, #495
• Specify teardown commands via new --teardown flag - #472, #500
• Expand node:<script> commands to node --run <script> - #475
• [API only] Inter-Process Communication (ipc) - #498
• [API only] Make it possible to use no colors at all - #466
• [API only] Add a state field to Command - #455

🐛 Bug Fixes

• Fix importing concurrently in ESM package - #454, #456, #494
• Make sure concurrently doesn't resolve when manually restarting commands through API - #463, #464
• Abort commands not running when max processes < N - #433, #452, #460
• Fix warning coming from spawn-command when running in Node 22 - #407, #477, #479, #492
• Make --raw and --hide compatible - #394, #486
• Ensure prefix is written when logging without a trailing LF - #467

Other Changes

• --help no longer shows examples due to there being too many. Refer to https://github.com/open-cli-tools/concurrently/tree/v9.0.0/docs instead, or to the node_modules/concurrently/docs directory in your project.
• Improve examples of --passthrough-arguments - #490
• Replace date-fns with hand-rolled date formatting - #436, #443 This should make installing concurrently faster.

New Contributors

• @​odeadglaz made their first contribution in open-cli-tools/concurrently#464
• @​mitchhentgesspotify made their first contribution in open-cli-tools/concurrently#474
• @​mark-monteiro made their first contribution in open-cli-tools/concurrently#480
• @​PoQuatre made their first contribution in open-cli-tools/concurrently#486

Full Changelog: open-cli-tools/concurrently@v8.2.2...v9.0.0

Commits

• 79b3290 9.0.1
• 041520b Don't set up more than 1 abort signal listener (#503)
• a7a5894 9.0.0
• 758ee7f tests: update smoke tests lockfile
• 710ee55 Replace date-fns for hand-rolled date formatting
• fe7b69c deps: update @​types/node to 18.x.x too
• fd2d140 Bump minimum Node version to 18
• 37f98b2 deps: update several dev dependencies
• 1b5df3a deps: update everything eslint
• 7fc4803 Make it possible to use no colors at all through API
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Preview (prod) → https://242-prod.portfolio-preview.trapti.tech/
Preview (dev) → https://242-dev.portfolio-preview.trapti.tech/

[nokhnaton]

concurrently どこに使ってるのかわかんなかったので、誰か知見ある人いれば教えてほしいです。
もしもう使ってないなら依存から外して良さそう

[Pugma]

前は npm run dev の際に prism のモックサーバーを立てるために使ってたんですが、prism に脆弱性があったので一時的に抜いてる状態です
これに関してはまだ最終的な対応は考え中なので、今のところは残しておいていいかな、と思っています

[nokhnaton]

それなら良さそうです!
言っていた脆弱性がこれなら、もうすでに修正されてるみたいなので、入れ直してもいい気もします:thumbsup:
GHSA-3949-f494-cm99

[nokhnaton]

あ、これ違うprism見てるな