Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump cross-spawn, patch-package and react-scripts in /viewer #1608

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 18, 2024

Bumps cross-spawn to 7.0.6 and updates ancestor dependencies cross-spawn, patch-package and react-scripts. These dependencies need to be updated together.

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates patch-package from 6.2.2 to 8.0.0

Release notes

Sourced from patch-package's releases.

v8.0.0

  • Add support for multiple patch files for a single package. (@​ds300) #474

Breaking

I removed some really old legacy filename handling stuff so it's technically a breaking change.

v7.0.0

7.0.0

Breaking changes

  • Bump yaml to fix security issue. Required bumping minimum node version from 8 to 14. (contribution from @​mayank99 in #463)

Other changes

v6.5.1

Special thanks to @​orta again for putting this release together.

ds300/patch-package@v6.5.0...v6.5.1

v6.5.0

  • fix runIntegrationTest 120d85d
  • update README 6b2ec57
  • Merge pull request #345 from mvargeson/mvargeson/issue-314/error-on-warn 86ed9f6
  • Merge pull request #422 from Serjobas/patch-1 fe6138b
  • Update LICENSE 4afe391
  • Update outdated LICENSE year 9e30dc4
  • Merge pull request #301 from bill2004158/bill2004158-fix-new-line-for-windows 9ab4e66
  • Merge pull request #359 from MHekert/tests/getPackageVersion 745757d
  • Merge pull request #331 from orta/no_dt 639b9c8
  • Merge pull request #402 from jimmyltsinn/master 1486859
  • Merge pull request #390 from milahu/patch-2 63bc500
  • Update README.md 6fc78ff
  • Merge pull request #395 from tye-singwa/fix/git-diff-prefixes e16546c
  • Merge pull request #363 from maman/feature/add-yarn-berry-compatibility bb628da
  • Merge pull request #412 from tapanprakasht/master 7c87e05
  • Apply suggestions from code review b80d96a
  • Merge pull request #389 from stianjensen/bump-chalk 896827d

... (truncated)

Changelog

Sourced from patch-package's changelog.

8.0.0

  • Add support for multiple patch files for a single package. #474

Breaking Changes

  • Removed support for some very old legacy filename format stuff (pre-2019).

7.0.2

7.0.1

Breaking changes

  • Bump yaml to fix security issue. Required bumping minimum node version from 8 to 14. (contribution from @​mayank99 in #463)

Other changes

6.5.1

Special thanks to @​orta again for putting this release together.

6.5.0

Special thanks to @​orta for stepping in to get this release out.

... (truncated)

Commits

Updates react-scripts from 3.4.1 to 5.0.1

Changelog

Sourced from react-scripts's changelog.

3.4.4 (2020-10-20)

v3.4.4 release bumps resolve-url-loader to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.3 to 3.4.4

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

3.4.3 (2020-08-12)

v3.4.3 release bumps terser-webpack-plugin to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.2 to 3.4.3

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

3.4.2 (2020-08-11)

v3.4.2 release bumps webpack-dev-server to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
react-scripts [> 3.4.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) to 7.0.6 and updates ancestor dependencies [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [patch-package](https://github.com/ds300/patch-package) and [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts). These dependencies need to be updated together.


Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `patch-package` from 6.2.2 to 8.0.0
- [Release notes](https://github.com/ds300/patch-package/releases)
- [Changelog](https://github.com/ds300/patch-package/blob/master/CHANGELOG.md)
- [Commits](ds300/patch-package@v6.2.2...v8.0.0)

Updates `react-scripts` from 3.4.1 to 5.0.1
- [Release notes](https://github.com/facebook/create-react-app/releases)
- [Changelog](https://github.com/facebook/create-react-app/blob/main/CHANGELOG-3.x.md)
- [Commits](https://github.com/facebook/create-react-app/commits/[email protected]/packages/react-scripts)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
- dependency-name: patch-package
  dependency-type: direct:production
- dependency-name: react-scripts
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants