Bump the npm_and_yarn group across 1 directories with 3 updates #2

dependabot · 2024-03-01T15:51:21Z

Bumps the npm_and_yarn group with 3 updates in the / directory: minimist, nanoid and mocha.

Updates minimist from 1.2.5 to 1.2.8

Changelog

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates nanoid from 3.1.25 to 3.3.1

Changelog

Sourced from nanoid's changelog.

3.3.1

Reduced package size.

3.3

Added size argument to function from customAlphabet (by Stefan Sundin).

3.2

Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

Reduced async exports size (by Artyom Arutyunyan).

Moved from Jest to uvu (by Vitaly Baev).

3.1.31

Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

Reduced npm package size.

3.1.28

Reduced npm package size.

3.1.27

Cleaned dependencies from development tools.

3.1.26

Improved performance (by Eitan Har-Shoshanim).

Reduced npm package size.

Commits

ec6f809 Release 3.3.1 version
c7d8578 Update dependencies
05b2596 Remove old tests
368a6e7 Remove process.env.NODE_ENV
ee7dee3 Remove @napi-rs/uuid to fix CI
defe20f Try to fix CI
ee85121 Try to fix CI
c7f4219 Sync English and Russian docs
f74a41d Release 3.3 version
9c09cdc Fix coverage config
Additional commits viewable in compare view

Updates mocha from 9.1.3 to 9.2.2

Release notes

Sourced from mocha's releases.

v9.2.2

9.2.2 / 2022-03-11

Please also note our announcements.

🐛 Fixes

#4842: Loading of reporter throws wrong error (@juergba)

#4839: dry-run: prevent potential call-stack crash (@juergba)

🔩 Other

#4843: Update production dependencies (@juergba)

v9.2.1

9.2.1 / 2022-02-19

Please also note our announcements.

🐛 Fixes

#4832: Loading of config files throws wrong error (@juergba)

#4799: Reporter: configurable maxDiffSize reporter-option (@norla)

v9.2.0

9.2.0 / 2022-01-24

Please also note our announcements.

🎉 Enhancements

#4813: Parallel: assign each worker a worker-id (@forty)

🔩 Other

#4818: Update production dependencies (@juergba)

v9.1.4

9.1.4 / 2022-01-14

Please also note our announcements.

🐛 Fixes

#4807: import throws wrong error if loader is used (@giltayar)

🔩 Other

... (truncated)

Changelog

Sourced from mocha's changelog.

9.2.2 / 2022-03-11

🐛 Fixes

#4842: Loading of reporter throws wrong error (@juergba)

#4839: dry-run: prevent potential call-stack crash (@juergba)

🔩 Other

#4843: Update production dependencies (@juergba)

9.2.1 / 2022-02-19

🐛 Fixes

#4832: Loading of config files throws wrong error (@juergba)

#4799: Reporter: configurable maxDiffSize reporter-option (@norla)

9.2.0 / 2022-01-24

🎉 Enhancements

#4813: Parallel: assign each worker a worker-id (@forty)

🔩 Other

#4818: Update production dependencies (@juergba)

9.1.4 / 2022-01-14

🐛 Fixes

#4807: import throws wrong error if loader is used (@giltayar)

🔩 Other

#4777: Add Node v17 to CI test matrix (@outsideris)

Commits

24b5243 build(v9.2.2): release
22a1560 build(v9.2.2): update CHANGELOG [ci skip]
632e602 chore: update dependencies (#4843)
241964b fix: wrong error thrown while loading reporter (#4842)
22f9306 fix(dry-run): potential call-stack crash with 'dry-run' option (#4839)
547ffd7 build(v9.2.1): release
ca7432a build(v9.2.1): update CHANGELOG [ci skip]
86305cf fix: wrong error thrown while loading config files (#4832)
11c4560 fix: configurable max diff size (#4799)
509938d doc: fix to show sponsors in narrow view (#4793)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 3 updates in the / directory: [minimist](https://github.com/minimistjs/minimist), [nanoid](https://github.com/ai/nanoid) and [mocha](https://github.com/mochajs/mocha). Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `nanoid` from 3.1.25 to 3.3.1 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.25...3.3.1) Updates `mocha` from 9.1.3 to 9.2.2 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md) - [Commits](mochajs/mocha@v9.1.3...v9.2.2) --- updated-dependencies: - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn-security-group - dependency-name: mocha dependency-type: direct:development dependency-group: npm_and_yarn-security-group ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 1, 2024

xuanzhi33 merged commit 9abd053 into master Mar 1, 2024

dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-security-group-1e88f0e3aa branch March 1, 2024 16:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directories with 3 updates #2

Bump the npm_and_yarn group across 1 directories with 3 updates #2

dependabot bot commented on behalf of github Mar 1, 2024

Bump the npm_and_yarn group across 1 directories with 3 updates #2

Bump the npm_and_yarn group across 1 directories with 3 updates #2

Conversation

dependabot bot commented on behalf of github Mar 1, 2024

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

v1.2.7 - 2022-10-10

Commits

3.3.1

3.3

3.2

3.1.32

3.1.31

3.1.30

3.1.29

3.1.28

3.1.27

3.1.26

v9.2.2

9.2.2 / 2022-03-11

🐛 Fixes

🔩 Other

v9.2.1

9.2.1 / 2022-02-19

🐛 Fixes

v9.2.0

9.2.0 / 2022-01-24

🎉 Enhancements

🔩 Other

v9.1.4

9.1.4 / 2022-01-14

🐛 Fixes

🔩 Other

9.2.2 / 2022-03-11

🐛 Fixes

🔩 Other

9.2.1 / 2022-02-19

🐛 Fixes

9.2.0 / 2022-01-24

🎉 Enhancements

🔩 Other

9.1.4 / 2022-01-14

🐛 Fixes

🔩 Other