deps(example): bump the dependencies group across 1 directory with 9 updates #2948
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…updates Bumps the dependencies group with 9 updates in the /examples/nestjs-launchdarkly directory: | Package | From | To | | --- | --- | --- | | [@launchdarkly/node-server-sdk](https://github.com/launchdarkly/js-core) | `9.7.2` | `9.7.3` | | [@nestjs/config](https://github.com/nestjs/config) | `3.3.0` | `4.0.0` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `10.4.15` | `11.0.4` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `10.4.15` | `11.0.4` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `10.4.9` | `11.0.2` | | [@nestjs/schematics](https://github.com/nestjs/schematics) | `10.2.3` | `11.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.20.0` | `8.21.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.20.0` | `8.21.0` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.2.2` | `5.2.3` | Updates `@launchdarkly/node-server-sdk` from 9.7.2 to 9.7.3 - [Release notes](https://github.com/launchdarkly/js-core/releases) - [Changelog](https://github.com/launchdarkly/js-core/blob/main/release-please-config.json) - [Commits](launchdarkly/js-core@node-server-sdk-v9.7.2...node-server-sdk-v9.7.3) Updates `@nestjs/config` from 3.3.0 to 4.0.0 - [Release notes](https://github.com/nestjs/config/releases) - [Changelog](https://github.com/nestjs/config/blob/master/.release-it.json) - [Commits](nestjs/config@3.3.0...4.0.0) Updates `@nestjs/core` from 10.4.15 to 11.0.4 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.0.4/packages/core) Updates `@nestjs/platform-express` from 10.4.15 to 11.0.4 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.0.4/packages/platform-express) Updates `@nestjs/cli` from 10.4.9 to 11.0.2 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Changelog](https://github.com/nestjs/nest-cli/blob/master/.release-it.json) - [Commits](nestjs/nest-cli@10.4.9...11.0.2) Updates `@nestjs/schematics` from 10.2.3 to 11.0.0 - [Release notes](https://github.com/nestjs/schematics/releases) - [Changelog](https://github.com/nestjs/schematics/blob/master/.release-it.json) - [Commits](nestjs/schematics@10.2.3...11.0.0) Updates `@typescript-eslint/eslint-plugin` from 8.20.0 to 8.21.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.21.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.20.0 to 8.21.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.21.0/packages/parser) Updates `eslint-plugin-prettier` from 5.2.2 to 5.2.3 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.2.2...v5.2.3) --- updated-dependencies: - dependency-name: "@launchdarkly/node-server-sdk" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@nestjs/config" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/core" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/platform-express" dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/cli" dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@nestjs/schematics" dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint-plugin-prettier dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Merging to
|
|
New dependencies detected. Learn more about Socket for GitHub ↗︎
|
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is new author?A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package. Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights. What is unstable ownership?A new collaborator has begun publishing package versions. Package stability and security risk may be elevated. Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm. What is shell access?This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code. Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. What is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
|
Superseded by #2972. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/examples/nestjs-launchdarkly/dependencies-1ff66e4078
branch
Bumps the dependencies group with 9 updates in the /examples/nestjs-launchdarkly directory:
9.7.29.7.33.3.04.0.010.4.1511.0.410.4.1511.0.410.4.911.0.210.2.311.0.08.20.08.21.08.20.08.21.05.2.25.2.3Updates
@launchdarkly/node-server-sdkfrom 9.7.2 to 9.7.3Release notes
Sourced from
@launchdarkly/node-server-sdk's releases.Commits
1ff96cechore: release main (#721)5cffb2bfeat: Add the ability to filter errors. (#743)833f4cefix: Fix breadcrumb filter option parsing. (#742)14ecdb3feat: Make browser-telemetry specific inspector type. (#741)68a3b87feat: Add singleton support for browser-telemetry. (#739)320c07dfeat: Add support for the session init event. (#738)2ef1486feat: Add basic logging support for browser-telemetry. (#736)5c327a1feat: Add support for breadcrumb filtering. (#733)bc4a994chore: Port TraceKit tests. (#731)c2a87b1feat: Enable source maps with inlined sources for browser SDK. (#734)Updates
@nestjs/configfrom 3.3.0 to 4.0.0Release notes
Sourced from
@nestjs/config's releases.Commits
163a4a8chore(): release v4.0.0c2eaf04chore: update config attributes to more self descriptive namesce18cb8Merge branch 'master' into next49c13fctest: update integration test to use new dotenv-expand optsa1225dbchore: upgrade eslint, update deps, ci setup1c54ddeMerge pull request #1919 from foxadb/refactor-missing-return-types6411b7dMerge pull request #1925 from nestjs/renovate/major-nest-monorepoe9c8727Merge pull request #1883 from nestjs/feat/skip-predefined-change-order94852a5chore(deps): update dependency lint-staged to v15.4.1 (#1926)49eec57chore(deps): update dependency lint-staged to v15.4.0 (#1924)Updates
@nestjs/corefrom 10.4.15 to 11.0.4Release notes
Sourced from
@nestjs/core's releases.... (truncated)
Commits
02045b7chore(@nestjs) publish v11.0.4 releasecbebdd2chore(@nestjs) publish v11.0.3 releasefca5ebbchore(@nestjs) publish v11.0.2 release0f617d4chore(@nestjs) publish v11.0.1 released6b9feefix: normalize middle wildcards, call path-to-regexp early1299888chore: update readmee19b586chore(@nestjs) publish v11.0.0 release95654f9chore: update package.json6791b6cstyle: address lint errorsdb2a9b5chore: resolve conflictsUpdates
@nestjs/platform-expressfrom 10.4.15 to 11.0.4Release notes
Sourced from
@nestjs/platform-express's releases.... (truncated)
Commits
02045b7chore(@nestjs) publish v11.0.4 releasecbebdd2chore(@nestjs) publish v11.0.3 release5eaae5ffix(platform): add missing path-to-regexp dependency #14461fca5ebbchore(@nestjs) publish v11.0.2 release9aa2a43fix: use express body-parser reexports0f617d4chore(@nestjs) publish v11.0.1 released6b9feefix: normalize middle wildcards, call path-to-regexp early1299888chore: update readmee19b586chore(@nestjs) publish v11.0.0 release224e0ddchore: upgrade multerUpdates
@nestjs/clifrom 10.4.9 to 11.0.2Release notes
Sourced from
@nestjs/cli's releases.Commits
3ed23a6chore(): release v11.0.262efd59Merge branch 'master' of https://github.com/nestjs/nest-cli8aaa9dffix: swc compiler does not watch files2184a9echore(deps): update dependency@swc/coreto v1.10.9 (#2884)6d6d2d6Merge pull request #2881 from nestjs/renovate/angular-cli-monorepo2fa2079chore(): release v11.0.1043c663Merge branch 'master' of https://github.com/nestjs/nest-clibd96064fix: pass matched paths to chokidar watcher (watchAssets)da46251chore(deps): update typescript-eslint monorepo to v8.21.0 (#2882)837bdf7fix(deps): update angular-cli monorepo to v19.1.3Updates
@nestjs/schematicsfrom 10.2.3 to 11.0.0Release notes
Sourced from
@nestjs/schematics's releases.Commits
67a5356chore: resolve conflicts94a3ba8chore: update schematics package.json files641f8cechore(deps): update dependency@commitlint/clito v19.6.1 (#1962)2aad221chore(deps): update dependency eslint to v9.17.0 (#1961)9c9d318chore(deps): update dependency nodemon to v3.1.9 (#1960)1cce577chore(deps): update dependency@types/nodeto v22.10.2 (#1959)000626cchore(deps): update typescript-eslint monorepo to v8.18.0 (#1958)a0efb93chore(deps): update dependency prettier to v3.4.2 (#1955)190ff42chore(deps): update typescript-eslint monorepo to v8.17.0 (#1954)4809572chore(deps): update dependency eslint to v9.16.0 (#1953)Updates
@typescript-eslint/eslint-pluginfrom 8.20.0 to 8.21.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.Commits
79af426chore(release): publish 8.21.0609a78ftest(eslint-plugin): adjust tests to verifyno-unnecessary-type-assertiond...fb4ca72fix(eslint-plugin): [no-duplicate-enum-values] handle template literal (#10675)1895948fix(eslint-plugin): [no-base-to-string] don't crash for recursive array or tu...74f1c5afix(eslint-plugin): [no-for-in-array] report on any type which may be an arra...916b989fix(eslint-plugin): check JSX spread elements for misused spread usage (#10653)31be053chore: fix failing test on master70f3092docs: [no-misused-spread] fix sample code (#10659)a157fd4chore: standardized on inline named exports (mostly) (#10596)3dbcc19fix(eslint-plugin): [no-unnecessary-type-arguments] handle type args on jsx (...Updates
@typescript-eslint/parserfrom 8.20.0 to 8.21.0Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
79af426chore(release): publish 8.21.0a157fd4chore: standardized on inline named exports (mostly) (#10596)Updates
eslint-plugin-prettierfrom 5.2.2 to 5.2.3Release notes
Sourced from eslint-plugin-prettier's releases.
Changelog
Sourced from eslint-plugin-prettier's changelog.
Commits
6fd7ba1chore: release eslint-plugin-prettier (#704)190d6f9build(deps): Bump synckit from 0.9.1 to 0.9.2 (#705)9cf6a01build(deps-dev): Bump svelte from 4.2.8 to 4.2.19 (#677)9c6141fchore: add plugin name to flat recommended config (#703)35a5cd0chore: bupm eslint-plugin-comments (#702)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions