From 33891bcadabdd225499de56b6fb6a7fe8f6ec6af Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 25 Nov 2023 16:45:36 +0000 Subject: [PATCH 1/4] chore(deps-dev): bump the typescript group with 1 update Bumps the typescript group with 1 update: [typescript](https://github.com/Microsoft/TypeScript). - [Release notes](https://github.com/Microsoft/TypeScript/releases) - [Commits](https://github.com/Microsoft/TypeScript/compare/v5.2.2...v5.3.2) --- updated-dependencies: - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor dependency-group: typescript ... Signed-off-by: dependabot[bot] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index db085015b..d18c4faad 100644 --- a/package.json +++ b/package.json @@ -70,7 +70,7 @@ "jest": "29.7.0", "jest-junit": "16.0.0", "npm-run-all": "^4.1.5", - "typescript": "5.2.2" + "typescript": "5.3.2" }, "type": "commonjs", "engines": { From 1e1918d66bac2d50fb789a3b35a089b231502483 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 1 Dec 2023 15:15:27 +0100 Subject: [PATCH 2/4] Update package.json Signed-off-by: Jan Kowalleck --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index d18c4faad..8903ce8d6 100644 --- a/package.json +++ b/package.json @@ -58,7 +58,7 @@ "xmlbuilder2": "^3.0.2" }, "devDependencies": { - "@types/node": "ts5.2", + "@types/node": "ts5.3", "@types/normalize-package-data": "^2.4.1", "eslint": "8.54.0", "eslint-config-standard": "17.1.0", From d09cbb38bf4d5f1a74d83dc8662cad65f3b58e50 Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 1 Dec 2023 16:15:26 +0100 Subject: [PATCH 3/4] docs Signed-off-by: Jan Kowalleck --- HISTORY.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/HISTORY.md b/HISTORY.md index e78b20f6d..bd2bed87a 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -9,11 +9,14 @@ All notable changes to this project will be documented in this file. * Docs * Fixed typos (via [#1123]) * Style - * Applied latest code standards (via [#1124]) + * Applied latest code standards (via [#1124]) +* Build + * Use _TypeScript_ `v5.3.2` now, was `v5.2.2` (via [#1125]) [#1122]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1122 [#1123]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1123 [#1124]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1124 +[#1125]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1125 ## 1.14.2 - 2023-11-06 From 827c6014091f222adf4539a8bc4a24ba83534d1a Mon Sep 17 00:00:00 2001 From: Jan Kowalleck Date: Fri, 1 Dec 2023 16:17:55 +0100 Subject: [PATCH 4/4] chore: revisit dependabot config Signed-off-by: Jan Kowalleck --- .github/dependabot.yml | 21 +++++---------------- 1 file changed, 5 insertions(+), 16 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6c10ec0a2..c0ba78a7f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,4 +1,4 @@ -# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates +# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: @@ -15,22 +15,17 @@ updates: prefix: 'chore' ## prefix maximum string length of 15 include: 'scope' open-pull-requests-limit: 999 + ignore: + - dependency-name: "@types/node" + # version is like `ts.X.Y` -- need to maintain manually groups: cyclonedx: patterns: - '@cyclonedx/*' - spdx: - patterns: - - 'spdx-*' - - '@types/spdx-*' - ajv: - patterns: - - 'ajv' - - 'ajv-*' typescript: patterns: - 'typescript' - - '@types/node' + - '@types/*' - 'typedoc' - 'typedoc-*' - '@microsoft/tsdoc' @@ -54,12 +49,6 @@ updates: - 'babel-jest' - '@types/jest' - '@types/jest*' - babel: - patterns: - - 'babel' - - '@babel/*' - - 'babel-*' - - '@types/babel*' - package-ecosystem: 'github-actions' directory: '/' schedule: