chore(deps-dev): bump the dev-deps group across 1 directory with 6 updates #181
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…dates Bumps the dev-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@moonrepo/cli](https://github.com/moonrepo/moon/tree/HEAD/packages/cli) | `1.29.3` | `1.30.6` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `2.1.4` | `2.1.8` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.4` | `2.1.8` | | [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.28.5` | `0.30.3` | | [rollup](https://github.com/rollup/rollup) | `4.24.3` | `4.29.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.10` | `6.0.6` | Updates `@moonrepo/cli` from 1.29.3 to 1.30.6 - [Release notes](https://github.com/moonrepo/moon/releases) - [Changelog](https://github.com/moonrepo/moon/blob/master/CHANGELOG.md) - [Commits](https://github.com/moonrepo/moon/commits/@moonrepo/[email protected]/packages/cli) Updates `@vitest/coverage-v8` from 2.1.4 to 2.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.8/packages/coverage-v8) Updates `vitest` from 2.1.4 to 2.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.8/packages/vitest) Updates `@astrojs/starlight` from 0.28.5 to 0.30.3 - [Release notes](https://github.com/withastro/starlight/releases) - [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md) - [Commits](https://github.com/withastro/starlight/commits/@astrojs/[email protected]/packages/starlight) Updates `rollup` from 4.24.3 to 4.29.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.24.3...v4.29.1) Updates `vite` from 5.4.10 to 6.0.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.0.6/packages/vite) --- updated-dependencies: - dependency-name: "@moonrepo/cli" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-deps - dependency-name: "@vitest/coverage-v8" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-deps - dependency-name: vitest dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-deps - dependency-name: "@astrojs/starlight" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-deps - dependency-name: rollup dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-deps - dependency-name: vite dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-deps ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@astrojs/[email protected], npm/@moonrepo/[email protected], npm/@vitest/[email protected], npm/[email protected], npm/[email protected], npm/[email protected] |
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is a typosquat?Package name is similar to other popular packages and may not be the package you want. Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
|
Superseded by #185. |
Bumps the dev-deps group with 6 updates in the / directory:
1.29.31.30.62.1.42.1.82.1.42.1.80.28.50.30.34.24.34.29.15.4.106.0.6Updates
@moonrepo/clifrom 1.29.3 to 1.30.6Release notes
Sourced from
@moonrepo/cli's releases.... (truncated)
Changelog
Sourced from
@moonrepo/cli's changelog.... (truncated)
Commits
62bf614Releasee4babb9Release717e6e9Release7a2933cReleasededbffdRelease5d36b4cRelease3856bb8Releaseac8fa57ReleaseUpdates
@vitest/coverage-v8from 2.1.4 to 2.1.8Release notes
Sourced from
@vitest/coverage-v8's releases.... (truncated)
Commits
d69cc75bump: 2.1.881ed45bchore: release v2.1.7b936702bump: 2.1.632f23b9chore: release v2.1.50ad2cdcchore(deps): update all non-major dependencies (#6890)Updates
vitestfrom 2.1.4 to 2.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
d69cc75bump: 2.1.892f7a2afix: support Node 2181ed45bchore: release v2.1.7fbe5c39fix: revert support for Vite 6b936702bump: 2.1.632f23b9chore: release v2.1.5417bdb4fix(browser): init browsers eagerly when tests are running (#6876)93b67c2fix: throw an error and a warning if.poll,.element,.rejects/`.resolv...9a0c93dfix(browser): stop the browser rpc when the pool is closed (#6858)251893bchore: setresolve.mainFieldsandresolve.conditionsfor SSR environment ...Updates
@astrojs/starlightfrom 0.28.5 to 0.30.3Release notes
Sourced from
@astrojs/starlight's releases.... (truncated)
Changelog
Sourced from
@astrojs/starlight's changelog.... (truncated)
Commits
30a37d3[ci] release (#2718)e54ebd5Adds icon for phone (#2726)02d7ac6Add farcaster to social links (#2724)ec4b851Fix language selector invalid value (#2635)c5fcbb3Fix list item spacing bug on Firefox (#2717)4fd272b[ci] release (#2703)fd16470Fix site title focus ring (#2704)02d16f3Fix issue with user-defined autogenerated sidebar groups (#2702)0e419cc[ci] release (#2689)5c6996cFix autogenerated sidebar issue (#2688)Updates
rollupfrom 4.24.3 to 4.29.1Release notes
Sourced from rollup's releases.
... (truncated)
Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
5d377784.29.186e1f43fix: do not optimize the literal value if the cache is deoptimized (#5771)f116952Remove unnecessary lifetimes (#5769)dadd4884.29.0a4b78ebfix(deps): lock file maintenance minor/patch updates (#5767)d52f00dfix: introduce UnknownFalsyValue for enhancing if statement tree-shaking (#5763)65c8901chore(deps): update dependency@rollup/plugin-node-resolveto v16 (#5766)7a8ac46docs: add utf-8 encoding to JSON file reading (#5759)31f1670fix(deps): lock file maintenance minor/patch updates (#5760)e60fb1c4.28.1Updates
vitefrom 5.4.10 to 6.0.6Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
5c2b4a0release: v6.0.69290d85fix(css): show correct error when unknown placeholder is used for CSS modules...afff05cfix(css): resolve style tags in HTML files correctly for lightningcss (#19001)