Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build(deps): bump the production-dependencies group across 1 directory with 8 updates #1693

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2025

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
@types/node 22.10.2 22.10.5
@types/proj4 2.5.5 2.5.6
concurrently 9.1.0 9.1.2
cron 3.3.1 3.3.2
flat-cache 6.1.4 6.1.5
sanitize-html 2.13.1 2.14.0
sass 1.83.0 1.83.1
@rollup/rollup-linux-x64-gnu 4.28.1 4.30.0

Updates @types/node from 22.10.2 to 22.10.5

Commits

Updates @types/proj4 from 2.5.5 to 2.5.6

Commits

Updates concurrently from 9.1.0 to 9.1.2

Release notes

Sourced from concurrently's releases.

v9.1.2

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v9.1.1...v9.1.2

v9.1.1

What's Changed

Full Changelog: open-cli-tools/concurrently@v9.1.0...v9.1.1

Commits

Updates cron from 3.3.1 to 3.3.2

Release notes

Sourced from cron's releases.

v3.3.2

3.3.2 (2024-12-30)

🐛 Bug Fixes

⚙️ Continuous Integrations

  • action: update marocchino/sticky-pull-request-comment action to v2.9.0 (#930) (1e7bce9)
  • renovate: pin GitHub action digests to semver (#926) (6541167)

♻️ Chores

v3.3.2-beta.1

3.3.2-beta.1 (2024-12-27)

🐛 Bug Fixes

⚙️ Continuous Integrations

  • action: update marocchino/sticky-pull-request-comment action to v2.9.0 (#930) (1e7bce9)
  • renovate: pin GitHub action digests to semver (#926) (6541167)

♻️ Chores

Changelog

Sourced from cron's changelog.

3.3.2 (2024-12-30)

🐛 Bug Fixes

⚙️ Continuous Integrations

  • action: update marocchino/sticky-pull-request-comment action to v2.9.0 (#930) (1e7bce9)
  • renovate: pin GitHub action digests to semver (#926) (6541167)

♻️ Chores

Commits
  • 7ed34cb Release v3.3.2 [skip ci]
  • efb8df5 fix: fix infinite loop on expressions resolving only inside a DST forward jum...
  • 70c3339 chore(deps): lock file maintenance
  • dfcbd3c chore(deps): pin dependencies (#915)
  • afad454 chore(deps): lock file maintenance
  • 93c9373 chore(deps): update dependency @​semantic-release/release-notes-generator to v...
  • 7999427 chore(deps): update dependency @​commitlint/cli to v19.6.1
  • 1e7bce9 ci(action): update marocchino/sticky-pull-request-comment action to v2.9.0 (#...
  • b1dbf69 chore(deps): lock file maintenance
  • 6541167 ci(renovate): pin GitHub action digests to semver (#926)
  • Additional commits viewable in compare view

Updates flat-cache from 6.1.4 to 6.1.5

Commits

Updates sanitize-html from 2.13.1 to 2.14.0

Changelog

Sourced from sanitize-html's changelog.

2.14.0 (2024-12-18)

  • Fix adding text with transformTags in cases where it originally had no text child elements. Thanks to f0x.
Commits
  • 1a11f7c eslint
  • 4ae37d9 Merge pull request #687 from apostrophecms/release-2.14.0
  • af62944 release 2.14.0
  • d50f36f Merge pull request #684 from f0x52/transform-new-text1
  • 19e9532 changelog entry
  • de2aefb add testcase for transforming text inside empty tags
  • 98b4900 still add text added by transformation when tag is discarded
  • See full diff in compare view

Updates sass from 1.83.0 to 1.83.1

Release notes

Sourced from sass's releases.

Dart Sass 1.83.1

To install Sass 1.83.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.83.1

  • Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

Commits
  • 3d3e925 Fix --quiet-deps for @content blocks (#2474)
  • 777708c Include deprecation IDs in deprecation messages (#2475)
  • f5c385d Support the latest DartDoc (#2472)
  • fb55782 Bump bufbuild/buf-setup-action from 1.47.2 to 1.48.0 in /.github/util/initial...
  • ea7ea57 Bump dart_style from 2.3.7 to 3.0.0 (#2459)
  • 6f4584c Avoid a broken Dartdoc release (#2469)
  • f0f605a Merge pull request #2457 from sass/include
  • bc39d0c Add support for the @include rule
  • bf50fad Explicitly annotate GenericAtRule as having optional nodes
  • See full diff in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.28.1 to 4.30.0

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.30.0

4.30.0

2025-01-06

Features

  • Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

v4.29.2

4.29.2

2025-01-05

Bug Fixes

  • Keep import attributes when using dynamic ESM import() expressions from CommonJS (#5781)

Pull Requests

v4.29.1

4.29.1

2024-12-21

Bug Fixes

  • Fix crash from deoptimized logical expressions (#5771)

Pull Requests

v4.29.0

4.29.0

2024-12-20

Features

... (truncated)

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.30.0

2025-01-06

Features

  • Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

4.29.2

2025-01-05

Bug Fixes

  • Keep import attributes when using dynamic ESM import() expressions from CommonJS (#5781)

Pull Requests

4.29.1

2024-12-21

Bug Fixes

  • Fix crash from deoptimized logical expressions (#5771)

Pull Requests

4.29.0

2024-12-20

Features

  • Treat objects as truthy and always check second argument to better simplify logical expressions (#5763)

Pull Requests

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.10.2` | `22.10.5` |
| [@types/proj4](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/proj4) | `2.5.5` | `2.5.6` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.1.0` | `9.1.2` |
| [cron](https://github.com/kelektiv/node-cron) | `3.3.1` | `3.3.2` |
| [flat-cache](https://github.com/jaredwray/cacheable/tree/HEAD/packages/flat-cache) | `6.1.4` | `6.1.5` |
| [sanitize-html](https://github.com/apostrophecms/sanitize-html) | `2.13.1` | `2.14.0` |
| [sass](https://github.com/sass/dart-sass) | `1.83.0` | `1.83.1` |
| [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.28.1` | `4.30.0` |



Updates `@types/node` from 22.10.2 to 22.10.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/proj4` from 2.5.5 to 2.5.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/proj4)

Updates `concurrently` from 9.1.0 to 9.1.2
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.1.0...v9.1.2)

Updates `cron` from 3.3.1 to 3.3.2
- [Release notes](https://github.com/kelektiv/node-cron/releases)
- [Changelog](https://github.com/kelektiv/node-cron/blob/main/CHANGELOG.md)
- [Commits](kelektiv/node-cron@v3.3.1...v3.3.2)

Updates `flat-cache` from 6.1.4 to 6.1.5
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/flat-cache)

Updates `sanitize-html` from 2.13.1 to 2.14.0
- [Changelog](https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md)
- [Commits](apostrophecms/sanitize-html@2.13.1...2.14.0)

Updates `sass` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.83.0...1.83.1)

Updates `@rollup/rollup-linux-x64-gnu` from 4.28.1 to 4.30.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.28.1...v4.30.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/proj4"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: concurrently
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cron
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: flat-cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: sanitize-html
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sass
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 6, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 7, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-a0730564c6 branch January 7, 2025 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Development

Successfully merging this pull request may close these issues.

1 participant