Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump cross-spawn, @yarnpkg/core and @yarnpkg/shell in /yarn2-plugins/prune-dev-dependencies #1356

Merged
merged 2 commits into from
Dec 5, 2024
Merged

Bump cross-spawn, @yarnpkg/core and @yarnpkg/shell in /yarn2-plugins/prune-dev-dependencies #1356

merged 2 commits into from
Dec 5, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2024

Bumps cross-spawn to 7.0.6 and updates ancestor dependencies cross-spawn, @yarnpkg/core and @yarnpkg/shell. These dependencies need to be updated together.

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates @yarnpkg/core from 4.0.0-rc.26 to 4.1.6

Release notes

Sourced from @​yarnpkg/core's releases.

v4.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.1.0...@​yarnpkg/cli/4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.0.2...@​yarnpkg/cli/4.1.0

v4.0.2

What's Changed

... (truncated)

Changelog

Sourced from @​yarnpkg/core's changelog.

:::tip Yarn now accepts sponsors! Please take a look at our OpenCollective and GitHub Sponsors pages for more details. :::

Master

:::info Features in master can be tried out by running yarn set version from sources in your project. :::

  • Fixes preferInteractive forcing interactive mode in non-TTY environments.
  • node-modules linker now honors user-defined symlinks for <workspace>/node_modules directories
  • node-modules linker supports hoisting into inner workspaces that are parents of other workspaces
  • node-modules linker attemps to hoist tree more exhaustivel until nothing can be hoisted
  • node-modules linker uses aggregated count of peer and regular usages to decide hoisting priority, instead of preferring peer usages over regular as before, which should result in fewer duplicates

4.1.0

  • Tweaks -,--verbose in yarn workspaces foreach; -v will now only print the prefixes, -vv will be necessary to also print the timings.

  • Adds a new --json option to yarn run when called without script name

  • Fixes node-modules linker link: dependencies mistreatment as inner workspaces, when they point to a parent folder of a workspace

  • Fixes spurious "No candidates found" errors

  • Fixes missing executable permissions when using nodeLinker: pnpm

  • Fixes packages being incorrectly flagged as optional

  • Fixes cache key corruptions due to uncontrolled git merges

  • Fixes yarn version apply --all --dry-run making unexpected changes

  • Fixes yarn npm login when the remote registry is Verdaccio

4.0.1

  • Fixes creation of symlinks for node-modules linker when inner workspace depends on outer workspace
  • Fixes progress bars when the terminal is too large
  • Fixes crashes while running Yarn within Docker within GitHub Actions
  • Fixes yarn npm audit --ignore NUM which didn't apply to deprecations
  • Fixes yarn npm audit --json which didn't print the right output format
  • Fixes an incorrect type export in @yarnpkg/core
  • Implements back the yarn explain peer-requirements command

4.0.0

Major Changes

  • With Node.js 16's now being End of Life'd, we dropped support for Node.js versions lower than 18.12.

  • Some important defaults have changed:

    • yarn init and yarn set version will prefer using packageManager rather than yarnPath when possible (when they detect COREPACK_ROOT in your environment variables).

    • yarn init will no longer use zero-install by default. You still can enable it, but it should make it easier to start one-of projects without having to rewrite the configuration afterwards.

... (truncated)

Commits
  • 2fe7d63 Releasing 5 new packages
  • cc2f719 chore: unlock cross-spawn range (#6606)
  • f3962d5 Sync master with the changes from master
  • a38b314 Releasing 6 new packages
  • fe7c10a fix(fslib): handle symlinks to zip files (#6603)
  • 031b5da Sync master with the changes from master
  • b5baf9b Releasing 9 new packages
  • 3ad3052 fix(cli): Set COREPACK_ENABLE_AUTO_PIN=0 during local pack of github packages...
  • fb6d2d6 Sync master with the changes from master
  • 68e10d0 Releasing 6 new packages
  • Additional commits viewable in compare view

Updates @yarnpkg/shell from 4.0.0-rc.26 to 4.1.1

Release notes

Sourced from @​yarnpkg/shell's releases.

v4.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.1.0...@​yarnpkg/cli/4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/yarnpkg/berry/compare/@​yarnpkg/cli/4.0.2...@​yarnpkg/cli/4.1.0

v4.0.2

What's Changed

... (truncated)

Changelog

Sourced from @​yarnpkg/shell's changelog.

:::tip Yarn now accepts sponsors! Please take a look at our OpenCollective and GitHub Sponsors pages for more details. :::

Master

:::info Features in master can be tried out by running yarn set version from sources in your project. :::

  • Fixes preferInteractive forcing interactive mode in non-TTY environments.
  • node-modules linker now honors user-defined symlinks for <workspace>/node_modules directories
  • node-modules linker supports hoisting into inner workspaces that are parents of other workspaces
  • node-modules linker attemps to hoist tree more exhaustivel until nothing can be hoisted
  • node-modules linker uses aggregated count of peer and regular usages to decide hoisting priority, instead of preferring peer usages over regular as before, which should result in fewer duplicates

4.1.0

  • Tweaks -,--verbose in yarn workspaces foreach; -v will now only print the prefixes, -vv will be necessary to also print the timings.

  • Adds a new --json option to yarn run when called without script name

  • Fixes node-modules linker link: dependencies mistreatment as inner workspaces, when they point to a parent folder of a workspace

  • Fixes spurious "No candidates found" errors

  • Fixes missing executable permissions when using nodeLinker: pnpm

  • Fixes packages being incorrectly flagged as optional

  • Fixes cache key corruptions due to uncontrolled git merges

  • Fixes yarn version apply --all --dry-run making unexpected changes

  • Fixes yarn npm login when the remote registry is Verdaccio

4.0.1

  • Fixes creation of symlinks for node-modules linker when inner workspace depends on outer workspace
  • Fixes progress bars when the terminal is too large
  • Fixes crashes while running Yarn within Docker within GitHub Actions
  • Fixes yarn npm audit --ignore NUM which didn't apply to deprecations
  • Fixes yarn npm audit --json which didn't print the right output format
  • Fixes an incorrect type export in @yarnpkg/core
  • Implements back the yarn explain peer-requirements command

4.0.0

Major Changes

  • With Node.js 16's now being End of Life'd, we dropped support for Node.js versions lower than 18.12.

  • Some important defaults have changed:

    • yarn init and yarn set version will prefer using packageManager rather than yarnPath when possible (when they detect COREPACK_ROOT in your environment variables).

    • yarn init will no longer use zero-install by default. You still can enable it, but it should make it easier to start one-of projects without having to rewrite the configuration afterwards.

... (truncated)

Commits
  • 2fe7d63 Releasing 5 new packages
  • cc2f719 chore: unlock cross-spawn range (#6606)
  • fb6d2d6 Sync master with the changes from master
  • 68e10d0 Releasing 6 new packages
  • 10d16c3 feat(shell): add unset command (#6430)
  • 578d896 Sync master with the changes from master
  • bf24f59 Releasing 13 new packages
  • fd9b177 Sync master with the changes from master
  • 9a853e3 Releasing 13 new packages
  • d47d066 Revert "Sync master with the changes from cherry-pick/next-release"
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump cross-spawn, @yarnpkg/core and @yarnpkg/shell
dd1545f 
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) to 7.0.6 and updates ancestor dependencies [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [@yarnpkg/core](https://github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-core) and [@yarnpkg/shell](https://github.com/yarnpkg/berry/tree/HEAD/packages/yarnpkg-shell). These dependencies need to be updated together.


Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `@yarnpkg/core` from 4.0.0-rc.26 to 4.1.6
- [Release notes](https://github.com/yarnpkg/berry/releases)
- [Changelog](https://github.com/yarnpkg/berry/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yarnpkg/berry/commits/@yarnpkg/core/4.1.6/packages/yarnpkg-core)

Updates `@yarnpkg/shell` from 4.0.0-rc.26 to 4.1.1
- [Release notes](https://github.com/yarnpkg/berry/releases)
- [Changelog](https://github.com/yarnpkg/berry/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yarnpkg/berry/commits/@yarnpkg/shell/4.1.1/packages/yarnpkg-shell)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
- dependency-name: "@yarnpkg/core"
  dependency-type: direct:production
- dependency-name: "@yarnpkg/shell"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from colincasey as a code owner December 5, 2024 20:14
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 5, 2024
@colincasey colincasey requested a review from a team as a code owner December 5, 2024 20:26
@colincasey colincasey enabled auto-merge (squash) December 5, 2024 20:27
@colincasey colincasey added the skip changelog Changelog entry is not required - Skips changelog check label Dec 5, 2024
@colincasey colincasey merged commit 68a9983 into main Dec 5, 2024
11 of 12 checks passed
@colincasey colincasey deleted the dependabot/npm_and_yarn/yarn2-plugins/prune-dev-dependencies/multi-27c0fb74d1 branch December 5, 2024 20:56
@heroku-linguist heroku-linguist bot mentioned this pull request Dec 5, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@colincasey colincasey colincasey approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code skip changelog Changelog entry is not required - Skips changelog check
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@colincasey