Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the all group in /client with 6 updates #423

Merged
merged 1 commit into from
Jun 2, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2024

Bumps the all group in /client with 6 updates:

Package From To
@types/node 20.12.7 20.13.0
@vscode/test-electron 2.3.9 2.4.0
@vscode/vsce 2.26.0 2.26.1
glob 10.3.12 10.4.1
rimraf 5.0.5 5.0.7
vs-verification-toolbox c90fd1c eb09daf

Updates @types/node from 20.12.7 to 20.13.0

Commits

Updates @vscode/test-electron from 2.3.9 to 2.4.0

Changelog

Sourced from @​vscode/test-electron's changelog.

2.4.0 | 2024-05-24

  • Allow installing unreleased builds using an -unreleased suffix, such as insiders-unreleased.
  • Allow passing different data directories in runVSCodeCommand, using it for extension development.
  • Improve the appearance progress reporting.

2.3.10 | 2024-05-13

  • Add runVSCodeCommand method and workaround for Node CVE-2024-27980
Commits
  • 75003e1 2.4.0
  • 67845f3 Merge pull request #272 from microsoft/connor4312/update-and-spinners
  • 813ab3a chore: update dependencies, improve progress reporting appearence
  • 2d17e1e Merge pull request #270 from microsoft/connor4312/unreleased-builds
  • 50afe68 fix: improve flexibility of runVSCodeCommand
  • 021f593 feat: allow downloading unreleased versions via -unreleased suffix
  • 884a3c8 Merge pull request #269 from microsoft/connor4312/node-CVE-2024-27980
  • 68fb5fb 2.3.10
  • 3f7a3cc feat: runVSCodeCommand as workaround for CVE-2024-27980
  • 40ecedf Merge pull request #263 from microsoft/dependabot/npm_and_yarn/vite-2.9.18
  • Additional commits viewable in compare view

Updates @vscode/vsce from 2.26.0 to 2.26.1

Release notes

Sourced from @​vscode/vsce's releases.

v2.26.1

Changes:

Feature Requests:

  • #971: Validate nls strings on publish

Others:

  • #974: Validate NLS strings
  • #973: Fix nodejs breaking change CVE-2024-27980

This list of changes was auto generated.

v2.26.1-1

Changes:

Feature Requests:

  • #971: Validate nls strings on publish

Others:

  • #974: Validate NLS strings

This list of changes was auto generated.

v2.26.1-0

Changes:

  • #973: Fix nodejs breaking change CVE-2024-27980

This list of changes was auto generated.

Commits

Updates glob from 10.3.12 to 10.4.1

Changelog

Sourced from glob's changelog.

changeglob

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on Windows.

10.0.0

  • No default exports, only named exports

9.3.3

  • Upgraded minimatch to v8, adding support for any degree of nested extglob patterns.

9.3

  • Add aliases for methods. glob.sync, glob.stream, glob.stream.sync, etc.

9.2

  • Support using a custom fs object, which is passed to PathScurry
  • add maxDepth option
  • add stat option
  • add custom Ignore support

9.1

  • Bring back the root option, albeit with slightly different semantics than in v8 and before.
  • Support { absolute:false } option to explicitly always return

... (truncated)

Commits

Updates rimraf from 5.0.5 to 5.0.7

Commits

Updates vs-verification-toolbox from c90fd1c to eb09daf

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
glob [>= 9.a, < 10]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group in /client with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.12.7` | `20.13.0` |
| [@vscode/test-electron](https://github.com/Microsoft/vscode-test) | `2.3.9` | `2.4.0` |
| [@vscode/vsce](https://github.com/Microsoft/vsce) | `2.26.0` | `2.26.1` |
| [glob](https://github.com/isaacs/node-glob) | `10.3.12` | `10.4.1` |
| [rimraf](https://github.com/isaacs/rimraf) | `5.0.5` | `5.0.7` |
| [vs-verification-toolbox](https://github.com/viperproject/vs-verification-toolbox) | ``c90fd1c`` | ``eb09daf`` |


Updates `@types/node` from 20.12.7 to 20.13.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vscode/test-electron` from 2.3.9 to 2.4.0
- [Changelog](https://github.com/microsoft/vscode-test/blob/main/CHANGELOG.md)
- [Commits](microsoft/vscode-test@v2.3.9...v2.4.0)

Updates `@vscode/vsce` from 2.26.0 to 2.26.1
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](microsoft/vscode-vsce@v2.26.0...v2.26.1)

Updates `glob` from 10.3.12 to 10.4.1
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.3.12...v10.4.1)

Updates `rimraf` from 5.0.5 to 5.0.7
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v5.0.5...v5.0.7)

Updates `vs-verification-toolbox` from `c90fd1c` to `eb09daf`
- [Commits](viperproject/vs-verification-toolbox@c90fd1c...eb09daf)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vscode/test-electron"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@vscode/vsce"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: glob
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rimraf
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: vs-verification-toolbox
  dependency-type: direct:development
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 1, 2024
@ArquintL ArquintL added this pull request to the merge queue Jun 2, 2024
Merged via the queue into master with commit 8f41732 Jun 2, 2024
34 checks passed
@ArquintL ArquintL deleted the dependabot/npm_and_yarn/client/all-9ac5ba7a02 branch June 2, 2024 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant