Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps-dev): Bump yarn-audit-fix from 9.3.1 to 10.1.1 in /website #4340

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2025

Bumps yarn-audit-fix from 9.3.1 to 10.1.1.

Release notes

Sourced from yarn-audit-fix's releases.

v10.1.1

10.1.1 (2024-11-29)

Fixes & improvements

  • fix: up deps to fix cross-spawn vuln (faafdeb)

v10.1.0

10.1.0 (2024-10-26)

Features

  • feat: use "exclude" and "ignore" CLI options when running yarn npm audit command (015a4b9)
  • feat: support multi-value CLI options (2664c66)

v10.0.9

10.0.9 (2024-08-21)

Fixes & improvements

  • fix(deps): update dependency commander to v12 (3fe23a1)

v10.0.8

10.0.8 (2024-08-06)

Fixes & improvements

  • fix: apply object key sort to npm view deps output (#336) (106229b)
  • fix: set shell true to handle sec fix for windows (#335) (6a29f1c)

v10.0.7

10.0.7 (2023-11-23)

Fixes & improvements

  • fix(deps): update dependency commander to v11 (1cd29fa)

v10.0.6

10.0.6 (2023-11-22)

Fixes & improvements

  • refactor: use os.temp() instead of find-cache-dir (85776a0)
  • fix: rm find-up and pkg-dir from deps to bring back nodejs 16 support (5ac29c1)

v10.0.5

10.0.5 (2023-11-16)

Fixes & improvements

  • fix(deps): update dependency find-up to v7 (284fb63)

v10.0.4

10.0.4 (2023-11-04)

Fixes & improvements

  • fix(deps): update dependency pkg-dir to v8 (9b5feac)

... (truncated)

Changelog

Sourced from yarn-audit-fix's changelog.

10.1.1 (2024-11-29)

Fixes & improvements

  • fix: up deps to fix cross-spawn vuln (faafdeb)

10.1.0 (2024-10-26)

Features

  • feat: use "exclude" and "ignore" CLI options when running yarn npm audit command (015a4b9)
  • feat: support multi-value CLI options (2664c66)

10.0.9 (2024-08-21)

Fixes & improvements

  • fix(deps): update dependency commander to v12 (3fe23a1)

10.0.8 (2024-08-06)

Fixes & improvements

  • fix: apply object key sort to npm view deps output (#336) (106229b)
  • fix: set shell true to handle sec fix for windows (#335) (6a29f1c)

10.0.7 (2023-11-23)

Fixes & improvements

  • fix(deps): update dependency commander to v11 (1cd29fa)

10.0.6 (2023-11-22)

Fixes & improvements

  • refactor: use os.temp() instead of find-cache-dir (85776a0)
  • fix: rm find-up and pkg-dir from deps to bring back nodejs 16 support (5ac29c1)

10.0.5 (2023-11-16)

Fixes & improvements

  • fix(deps): update dependency find-up to v7 (284fb63)

10.0.4 (2023-11-04)

Fixes & improvements

  • fix(deps): update dependency pkg-dir to v8 (9b5feac)

10.0.3 (2023-11-02)

Fixes & improvements

10.0.2 (2023-11-02)

... (truncated)

Commits
  • 1eb2220 chore(release): 10.1.1 [skip ci]
  • faafdeb fix: up deps to fix cross-spawn vuln
  • 4cb6d77 chore(deps): update dependency typedoc to ^0.27.0 (#349)
  • 5f5faec chore(deps): update dependency typescript to v5.7.2 (#348)
  • e45dd6a chore: add a test file to ignored linter list following PR feedback
  • 351b8bb chore: fix automatic linter command
  • 08ed706 chore: resolve unused variables linter warning
  • a94635a chore: remove duplicate strings from test to resolve sonarjs linter error
  • 9448312 chore: fix automatic linter command
  • 35d4c9a chore(release): 10.1.0 [skip ci]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2025
@erikgb
Copy link
Contributor

erikgb commented Jan 1, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/yarn-audit-fix-10.1.1 branch from b86e313 to 50743a7 Compare January 1, 2025 17:32
Bumps [yarn-audit-fix](https://github.com/antongolub/yarn-audit-fix) from 9.3.1 to 10.1.1.
- [Release notes](https://github.com/antongolub/yarn-audit-fix/releases)
- [Changelog](https://github.com/antongolub/yarn-audit-fix/blob/master/CHANGELOG.md)
- [Commits](antongolub/yarn-audit-fix@v9.3.1...v10.1.1)

---
updated-dependencies:
- dependency-name: yarn-audit-fix
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/website/yarn-audit-fix-10.1.1 branch from 50743a7 to bacd394 Compare January 1, 2025 17:47
@casibbald casibbald merged commit 5b488c2 into main Jan 1, 2025
18 checks passed
@casibbald casibbald deleted the dependabot/npm_and_yarn/website/yarn-audit-fix-10.1.1 branch January 1, 2025 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants