build(deps): bump the npm-dependencies group with 12 updates#377
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the npm-dependencies group with 12 updates#377dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the npm-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [@cyclonedx/cyclonedx-library](https://github.com/CycloneDX/cyclonedx-javascript-library) | `6.13.1` | `9.4.1` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.3.4` | `5.3.5` | | [packageurl-js](https://github.com/package-url/packageurl-js) | `1.0.2` | `2.0.1` | | [yargs](https://github.com/yargs/yargs) | `17.7.2` | `18.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.31` | `25.2.2` | | [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` | | [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.0` | | [mocha](https://github.com/mochajs/mocha) | `10.8.2` | `11.7.5` | | [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.12.9` | | [sinon](https://github.com/sinonjs/sinon) | `15.2.0` | `21.0.1` | | [sinon-chai](https://github.com/chaijs/sinon-chai) | `3.7.0` | `4.0.1` | | [which](https://github.com/npm/node-which) | `5.0.0` | `6.0.0` | Updates `@cyclonedx/cyclonedx-library` from 6.13.1 to 9.4.1 - [Release notes](https://github.com/CycloneDX/cyclonedx-javascript-library/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-javascript-library/blob/main/HISTORY.md) - [Commits](CycloneDX/cyclonedx-javascript-library@v6.13.1...v9.4.1) Updates `fast-xml-parser` from 5.3.4 to 5.3.5 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.3.4...v5.3.5) Updates `packageurl-js` from 1.0.2 to 2.0.1 - [Changelog](https://github.com/package-url/packageurl-js/blob/master/CHANGELOG.md) - [Commits](package-url/packageurl-js@v1.0.2...v2.0.1) Updates `yargs` from 17.7.2 to 18.0.0 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v17.7.2...v18.0.0) Updates `@types/node` from 20.19.31 to 25.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `chai` from 4.5.0 to 6.2.2 - [Release notes](https://github.com/chaijs/chai/releases) - [Changelog](https://github.com/chaijs/chai/blob/main/History.md) - [Commits](chaijs/chai@v4.5.0...v6.2.2) Updates `eslint` from 8.57.1 to 10.0.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.0.0) Updates `mocha` from 10.8.2 to 11.7.5 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md) - [Commits](mochajs/mocha@v10.8.2...v11.7.5) Updates `msw` from 2.12.7 to 2.12.9 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.7...v2.12.9) Updates `sinon` from 15.2.0 to 21.0.1 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v15.2.0...v21.0.1) Updates `sinon-chai` from 3.7.0 to 4.0.1 - [Release notes](https://github.com/chaijs/sinon-chai/releases) - [Changelog](https://github.com/chaijs/sinon-chai/blob/master/CHANGELOG.md) - [Commits](chaijs/sinon-chai@3.7.0...4.0.1) Updates `which` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/npm/node-which/releases) - [Changelog](https://github.com/npm/node-which/blob/main/CHANGELOG.md) - [Commits](npm/node-which@v5.0.0...v6.0.0) --- updated-dependencies: - dependency-name: "@cyclonedx/cyclonedx-library" dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: fast-xml-parser dependency-version: 5.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: packageurl-js dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: yargs dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 25.2.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: chai dependency-version: 6.2.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: mocha dependency-version: 11.7.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: msw dependency-version: 2.12.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: sinon dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: sinon-chai dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: which dependency-version: 6.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-dependencies group with 12 updates:
6.13.19.4.15.3.45.3.51.0.22.0.117.7.218.0.020.19.3125.2.24.5.06.2.28.57.110.0.010.8.211.7.52.12.72.12.915.2.021.0.13.7.04.0.15.0.06.0.0Updates
@cyclonedx/cyclonedx-libraryfrom 6.13.1 to 9.4.1Release notes
Sourced from
@cyclonedx/cyclonedx-library's releases.... (truncated)
Changelog
Sourced from
@cyclonedx/cyclonedx-library's changelog.... (truncated)
Commits
1315d659.4.1d124458fix: 6.4.0 deprecated types (#1351)ded3f6b9.4.0781fdf99.3.0ea8f1f3feat: Moved non‑standard implementations to Contrib area (#1343)8c36d6cdocs4b0373echore(deps): bump knip from 5.70.2 to 5.71.0 in /tools/test-dependencies (#1349)84a70fdchore: fix dependabot cfgee7fb13docs743dcf9chore(deps): bump the eslint group across 1 directory with 4 updates (#1341)Updates
fast-xml-parserfrom 5.3.4 to 5.3.5Release notes
Sourced from fast-xml-parser's releases.
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
fe9a852update strnum and release detail943ef0efix: Escape regex char in entity nameddcd0acEscape regex char in entity name341b582Add missing exports to fxp commonjs types (#782)Updates
packageurl-jsfrom 1.0.2 to 2.0.1Changelog
Sourced from packageurl-js's changelog.
Commits
cd1eb4bchore: bump to v2.0.1 (#77)f7dccd6fix: error on decode with meaningful message07b818bfix: only decode in parseStringc2f576fbump to v2.0.0 (#74)b5660a5Merge pull request #73 from package-url/jdalton/sync400de0cMerge pull request #72 from package-url/dependabot/npm_and_yarn/braces-3.0.3b6c8ce8fix: correct package-url.d.ts readonly type casing96822affix: correct param name typosf81a6befix: use encodeQualifierValue for qualifierKey and qualifierValueff590d2feat: encode qualifiers with URLSearchParamsUpdates
yargsfrom 17.7.2 to 18.0.0Changelog
Sourced from yargs's changelog.
Commits
0bc7255chore(main): release 18.0.0 (#2325)639130dfix(deps): update dependency yargs-parser to v22 (#2470)200e1aafix: allows ESM modules commands to be extensible using visit option (#2468)888db19fix: parser-configuration should work well with generated completion script (...3a40a78fix: addDirectory do not support absolute command dir (#2465)90e9ecadocs: remove to old slack channel (#2466)0dd8fe4fix(zsh): completion no longer requires double tab when using autoloaded27eec18feat: commandDir now works with ESM files (#2461)f9c72a7docs: update examples to run from examples folder (#2463)e02c91bfeat(zsh): Add default completion as fallback (#2331)Updates
@types/nodefrom 20.19.31 to 25.2.2Commits
Updates
chaifrom 4.5.0 to 6.2.2Release notes
Sourced from chai's releases.
... (truncated)
Commits
814172dchore(deps): update dependency esbuild to v0.27.2 (#1759)b38c22bchore: add legal-comments=none option (#1756)180d4ccchore(deps): update dependencies to v9.39.2 (#1757)678cd00chore(deps): update dependencies (#1755)c8fb100chore(deps): update dependency prettier to v3.7.3 (#1754)d63c74echore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 (#1751)243bf86fix: avoid BigInt literal in closeTo for runtime compat (#1748)d8b0395chore(deps): update actions/checkout action to v6 (#1749)7e1e247build(deps): bump glob from 10.4.5 to 10.5.0 (#1747)b25e5d8chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 (#1746)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chai since your current version.
Updates
eslintfrom 8.57.1 to 10.0.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
4e6c4ac10.0.0ddd8a22Build: changelog update for 10.0.0bff9091feat: handleArray.fromAsyncinarray-callback-return(#20457)1ece282chore: ignore/docs/v9.xin link checker (#20452)034e139ci: add type integration test for@html-eslint/eslint-plugin(#20345)f3fbc2fchore: set@eslint/jsversion to 10.0.0 to skip releasing it (#20466)e978ddadocs: Update README4cecf83docs: Update READMEc79f0abdocs: Update READMEafc0681chore: remove scopeManager.addGlobals patch for typescript-eslint parser (#20...Updates
mochafrom 10.8.2 to 11.7.5Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
9a6a5dbchore(v11.x): release 11.7.5 (#5523)8b21b38chore: run tests on PRs for ...Description has been truncated