chore(deps): update dependency dependency-cruiser to v16.5.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dependency-cruiser	16.3.1 -> 16.5.0

---

Release Notes

sverweij/dependency-cruiser (dependency-cruiser)

v16.5.0

Compare Source

✨ features

• 802ff6f feat(cli): expands the info displayed in --info (#​959)

📖 documentation

• 1ca77ec doc(FAQ): corrects a typo
• 8269857 doc(cli): clarify when using --max-depth is a good idea (never, that's when 😄)

👷 maintenance

• 9453f20 build(npm): updates external dependencies

v16.4.2

Compare Source

👷 maintenance

• 4314428 refactor: uses explicit exports over default where possible (#​956)
• 6d1b8bb build(npm): updates external dependencies + minor refactor

🧹 chores

• c7802df chore(ci): adds repo check to provenance publishing
• 76da16f chore(npm): updates external devDependencies

v16.4.1

Compare Source

🐛 fixes

• e414c0a fix(extract): ignore entries in 'workspaces' arrays that aren't strings (instead of throwing) (#​955) - thanks to @​asfaltboy for raising the issue that led to this fix

🧹 chores

Things not influencing the built & distributed artifact:

• 75f946f chore(doc): removes a few @​ts-expect-errors now typescript has caught up with some new features
• b2cd13d/ bb215ae chore(npm): updates external devDependencies
• 079f7d8 chore(ci): cache based on the lockfile, now we use it

v16.4.0

Compare Source

✨ features

• 0335910 feat(cli): adds --affected command line option (#​952)
  This doesn't really add a new capability to dependency-cruiser, but an existing one more convenient to use (--affected == --reaches "$(npx watskeburt main)"; --affected develop == --reaches "$(npx watskeburt develop)")
• e43c1aa fix(extract): extends list of source that could be transformed with babel with modern ones

👷 maintenance

• 77ebcc9 build(npm): makes 3rd party dependency requirements more lenient
  dependency-cruiser now uses carets for specifying 3rd party dependencies. It's an experiment; it puts some trust in third party maintainers to not make breaking changes in minor or patch releases in exchange for a potentially smaller installed footprint because the likelihood a 3rd party dependency is already present in node_modules increases.
• dbdf686/ 2930a4e build(npm): updates external dependencies

🧹 chores

Things not influencing the built & distributed artifact:

• 860ea1a Revert "Reapply "fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2""
  The bug is fixed in later versions, and now it is more likely the runner that makes the reproducible release artifact actually picks that later version. 🤞
• 818157d chore(ci): some more windows baby-sitting
• 15cbef2 chore: converts own config to javascript (#​951)

v16.3.10

Compare Source

👷 maintenance

• 24b40be refactor: replaces lodash (#​950)
  this cuts back dependency-cruiser's install size with >1Mb
• 018ea49 build(npm): updates external dependencies
• d3b0994 refactor(test): simplifies is-same-violation unit tests
• 580fc77 chore: adds kubotak-is to contributors in package manifest

v16.3.9

Compare Source

✨ features

• 72373ea feat: support svelte 4 (#​948) - thanks to @​kubotak-is for both doing the research and making the pull request that made this work!

👷 maintenance

• 30b5148 build(npm): updates external dependencies
• 1ee4e42 chore: removes some additional references to/ uses of lodash
• 615134a fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2, where npm clean-install bought the farm

v16.3.7

Compare Source

👷 maintenance

• daa550c build(npm): updates external dependencies
• dc4f183 chore(npm): removes unused devDependency shx
• 6e618ce refactor: removes 3rd party dependency 'wrap-ansi' (#​946)

v16.3.6

Compare Source

👷 maintenance

• 78810ce refactor: replaces chalk with picocolors (#​945)
• 03c34a6 refactor: replaces lodash' flattenDeep, isEmpty, reject, omit, merge with native alternatives (#​944)
• d6884ae build(npm): updates external dependencies

v16.3.5

Compare Source

🐛 fixes

• 8196c9e fix(extract/transpile): transpile script setup with vue 2 (#​942) (thanks to @​ferdynator for the clear & complete pull request!)

v16.3.4

Compare Source

This release is one in a series of efforts to reduce the number dependency-cruiser's 3rd party dependencies where it reduces maintenance, decreases total download size and/ or increases run speed.

👷 maintenance

• f6b6d19 refactor: removes 3rd party dependency 'semver-try-require' (#​939)
• c8f7fa1 refactor: removes 3rd party dependency 'indent-string' (#​940)
• 838b3e8 refactor: removes 3rd party dependency 'figures' (#​941)
• af27535 build(npm): updates external dependencies
• eac0d63 refactor(init): replaces runtime wordwrap on feedback with a static wordwrap
• bbd3abb chore: removes accidentally committed file

v16.3.3

Compare Source

🐛 fixes

• de34d42 fix(enrich/summarize): also configure experimentalStats to be in the summary (so the caching algorithme can pick it up as well)
• 8617939 chore: makes generated .mjs schemas smaller (#​934)

📖 documentation

• 6f6bef5 doc(FAQ): copy update
• 46d1c3f chore(schema): corrects a typo
• 4a5dcd0 doc(options-reference): corrects a typo

👷 maintenance

• 34e3795 build(npm): updates external dependencies
• 079e3fe chore(ci): makes husky config [email protected] compliant

v16.3.2

Compare Source

🐛 fixes

• 54a7f42 fix(config-util): adds utility that extracts dependency-cruiser options from a dependency-cruiser config (#​933) - thanks to @​AdrienLeblanc for reporting this issue.

👷 maintenance

• 7e74a4e build(npm): update external dependencies
• add4856 chore(ci): also run on node 22
• 712c5be refactor: cleans up some of the regular expressions

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	Transitive: environment, eval, filesystem, unsafe	+45	4.97 MB	foureightone, sverweij

🚮 Removed packages: npm/[email protected]

View full report↗︎

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud