deps(example): Bump the dependencies group across 1 directory with 12 updates #898
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the dependencies group with 12 updates in the /examples/sveltekit directory: | Package | From | To | | --- | --- | --- | | [@sveltejs/adapter-auto](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-auto) | `3.2.0` | `3.2.1` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.5.9` | `2.5.10` | | [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `3.1.0` | `3.1.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.9.0` | `7.12.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.9.0` | `7.12.0` | | [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte) | `2.39.0` | `2.39.2` | | [prettier](https://github.com/prettier/prettier) | `3.2.5` | `3.3.1` | | [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) | `3.2.3` | `3.2.4` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `4.2.17` | `4.2.18` | | [svelte-check](https://github.com/sveltejs/language-tools) | `3.7.1` | `3.8.0` | | [tslib](https://github.com/Microsoft/tslib) | `2.6.2` | `2.6.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.2.11` | `5.2.13` | Updates `@sveltejs/adapter-auto` from 3.2.0 to 3.2.1 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-auto/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/adapter-auto) Updates `@sveltejs/kit` from 2.5.9 to 2.5.10 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit) Updates `@sveltejs/vite-plugin-svelte` from 3.1.0 to 3.1.1 - [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/@sveltejs/[email protected]/packages/vite-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/[email protected]/packages/vite-plugin-svelte) Updates `@typescript-eslint/eslint-plugin` from 7.9.0 to 7.12.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.12.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.9.0 to 7.12.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v7.12.0/packages/parser) Updates `eslint-plugin-svelte` from 2.39.0 to 2.39.2 - [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases) - [Commits](https://github.com/sveltejs/eslint-plugin-svelte/compare/[email protected]) Updates `prettier` from 3.2.5 to 3.3.1 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.2.5...3.3.1) Updates `prettier-plugin-svelte` from 3.2.3 to 3.2.4 - [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/master/CHANGELOG.md) - [Commits](sveltejs/prettier-plugin-svelte@v3.2.3...v3.2.4) Updates `svelte` from 4.2.17 to 4.2.18 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte) Updates `svelte-check` from 3.7.1 to 3.8.0 - [Release notes](https://github.com/sveltejs/language-tools/releases) - [Commits](sveltejs/language-tools@svelte-check-3.7.1...svelte-check-3.8.0) Updates `tslib` from 2.6.2 to 2.6.3 - [Release notes](https://github.com/Microsoft/tslib/releases) - [Commits](microsoft/tslib@v2.6.2...v2.6.3) Updates `vite` from 5.2.11 to 5.2.13 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.2.13/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.2.13/packages/vite) --- updated-dependencies: - dependency-name: "@sveltejs/adapter-auto" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@sveltejs/kit" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@sveltejs/vite-plugin-svelte" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint-plugin-svelte dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: prettier-plugin-svelte dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: svelte dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: svelte-check dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tslib dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: vite dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
Merging to
|
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. What is shell access?This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code. Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. What is network access?This module accesses the network. Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
|
|
Superseded by #921. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/examples/sveltekit/dependencies-451a251ca5
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 12 updates in the /examples/sveltekit directory:
3.2.03.2.12.5.92.5.103.1.03.1.17.9.07.12.07.9.07.12.02.39.02.39.23.2.53.3.13.2.33.2.44.2.174.2.183.7.13.8.02.6.22.6.35.2.115.2.13Updates
@sveltejs/adapter-autofrom 3.2.0 to 3.2.1Release notes
Sourced from
@sveltejs/adapter-auto's releases.Changelog
Sourced from
@sveltejs/adapter-auto's changelog.Commits
b0116ffVersion Packages (#12230)16cd900fix: bump import-meta-resolve (#12240)Updates
@sveltejs/kitfrom 2.5.9 to 2.5.10Release notes
Sourced from
@sveltejs/kit's releases.Changelog
Sourced from
@sveltejs/kit's changelog.Commits
b0116ffVersion Packages (#12230)16cd900fix: bump import-meta-resolve (#12240)460d452fix: exclude server files from optimizeDeps.entries (#12242)Updates
@sveltejs/vite-plugin-sveltefrom 3.1.0 to 3.1.1Release notes
Sourced from
@sveltejs/vite-plugin-svelte's releases.Changelog
Sourced from
@sveltejs/vite-plugin-svelte's changelog.Commits
9515421Version Packages (#923)722f8ffchore: backport fixes (#917)6c59572chore(deps): update all non-major dependencies (#885)Updates
@typescript-eslint/eslint-pluginfrom 7.9.0 to 7.12.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.... (truncated)
Commits
7e93b28chore(release): publish 7.12.0d0adcf1docs: clarify what require-await does (#9200)04990d5feat(eslint-plugin): [no-floating-promises] add option 'allowForKnownSafeProm...ad85249docs: mention related ESLint rules in no-unused-vars page (#9198)e80a8d6docs: improve description for no-dynamic-delete (#9195)9f92b30docs: explicitly mention unbound-method limitation with thisArg (#9197)08a9448docs: add example with PascalCase function components (#9196)5ca7f6efeat(rule-tester): portcheckDuplicateTestCasesfrom ESLint (#9026)a9dd526fix(eslint-plugin): [member-ordering] also TSMethodSignature can be get/set (...2619c3bfix(eslint-plugin): [return-await] clean up in-try-catch detection and make a...Updates
@typescript-eslint/parserfrom 7.9.0 to 7.12.0Release notes
Sourced from
@typescript-eslint/parser's releases.... (truncated)
Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
7e93b28chore(release): publish 7.12.02bbf656fix(types): correct typing ParserOptions (#9202)e360541chore(release): publish 7.11.0c18226echore(release): publish 7.10.0Updates
eslint-plugin-sveltefrom 2.39.0 to 2.39.2Release notes
Sourced from eslint-plugin-svelte's releases.
Commits
d3b36f2chore: release eslint-plugin-svelte (#776)0e85ebafix: README is not publish (#775)2a92602chore: release eslint-plugin-svelte (#774)8e568c4chore: fix packages/eslint-plugin-svelte/tools/lib/changesets-util.tsc9f361echore: fix version script0ecab95fix: false positive for kebab-case with svelte v5 in `svelte/no-unused-svelte...13cf65cchore(deps): update dependency svelte to v5.0.0-next.152d11f282fix: GHPages workflowbcc658echore(deps): update dependency svelte to v5.0.0-next.151 (#769)eeacb5cchore(deps): update dependency markdown-it-anchor to v9 (#760)Updates
prettierfrom 3.2.5 to 3.3.1Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
92cbd33Release 3.3.1446a86eUpdate execa to v9efc3d05Avoid line breaks in import attributes (#16349)4a5b26fUsewhile (true)instead offor (;;)(#16354)1c43973Only add version to.git-blame-ignore-revswhen files changed (#16352)ab65eb4chore(deps): update dependency eslint-plugin-react to v7.34.2 (#16353)86268ebchore(deps): update eslint related dependencies (major) (#16208)ddce4fbMove import attribute unquote test to a separate directory (#16350)450b178PrintAtHeadnode from glimmer viaprint()(#16346)b94811fFixstripTrailingHardline(#16347)Updates
prettier-plugin-sveltefrom 3.2.3 to 3.2.4Changelog
Sourced from prettier-plugin-svelte's changelog.
Commits
f57f888chore: release 3.2.4268c26dfix: adjust regex5516102chore: check types in ci (#437)Updates
sveltefrom 4.2.17 to 4.2.18Release notes
Sourced from svelte's releases.
Changelog
Sourced from svelte's changelog.
Commits
230916fVersion Packages (#11925)dbe6057chore: speed up regex (#11922)Updates
svelte-checkfrom 3.7.1 to 3.8.0Release notes
Sourced from svelte-check's releases.
Commits
2478212feat: Svelte 5 component class/function interop (#2380)15a4aabfix: don't debounce document symbol request (#2382)6e57bcefeat: syntax highlight for svelte code block in mdx (#2381)cf00f03fix: use correct semantic tokens for$propstypes (#2379)7409890fix: component import quick-fix with "did you mean" diagnostics (#2373)3147c81feat: allowasexpressions for bindable props (#2372)80622dffix: allow for whitespace in snippets declaration (#2366)Updates
tslibfrom 2.6.2 to 2.6.3Release notes
Sourced from tslib's releases.
Commits
a280d4b2.6.3983d81b'await using' normative changes (#258)54cd71cBump the github-actions group with 3 updates (#253)298efd9Bump the github-actions group with 1 update (#242)e8b4418Bump the github-actions group with 1 update (#241)ae8c5c3Bump the github-actions group with 2 updates (#240)2b38d87JSDoc typo on__exportStar. (#221)8466326Bump the github-actions group with 1 update (#233)a57d986Bump the github-actions group with 1 update (#230)2bf5a06Bump the github-actions group with 2 updates (#228)Updates
vitefrom 5.2.11 to 5.2.13Changelog
Sourced from vite's changelog.
Commits
51bf7earelease: v5.2.13e6913d1fix: backport to 5.2 (#17411)bed3faarelease: v5.2.125a45745chore(deps): remove unused deps (#17329)15a6ebbfix(css): only use files the current bundle contains (#16684)f0fb987fix(optimizer): log dependencies added by plugins (#16729)8f16765chore: move to eslint flat config (#16743)8e4e932fix(css): handle lightningcss compiled css in Deno (#17301)4a89766fix(deps): update all non-major dependencies (#17321)6a085d0fix(hmr): normalize the path info (#14255)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions