build(deps): bump the npm-dependencies group across 1 directory with 12 updates#395
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the npm-dependencies group across 1 directory with 12 updates#395dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
…12 updates Bumps the npm-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@cyclonedx/cyclonedx-library](https://github.com/CycloneDX/cyclonedx-javascript-library) | `6.13.1` | `9.4.1` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.3.4` | `5.4.1` | | [packageurl-js](https://github.com/package-url/packageurl-js) | `1.0.2` | `2.0.1` | | [@trustify-da/trustify-da-api-model](https://github.com/guacsec/trustify-da-api-spec) | `2.0.3` | `2.0.7` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.31` | `25.3.2` | | [chai](https://github.com/chaijs/chai) | `4.5.0` | `6.2.2` | | [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.2` | | [mocha](https://github.com/mochajs/mocha) | `10.8.2` | `11.7.5` | | [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.12.10` | | [sinon](https://github.com/sinonjs/sinon) | `15.2.0` | `21.0.1` | | [sinon-chai](https://github.com/chaijs/sinon-chai) | `3.7.0` | `4.0.1` | | [which](https://github.com/npm/node-which) | `5.0.0` | `6.0.1` | Updates `@cyclonedx/cyclonedx-library` from 6.13.1 to 9.4.1 - [Release notes](https://github.com/CycloneDX/cyclonedx-javascript-library/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-javascript-library/blob/main/HISTORY.md) - [Commits](CycloneDX/cyclonedx-javascript-library@v6.13.1...v9.4.1) Updates `fast-xml-parser` from 5.3.4 to 5.4.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.3.4...v5.4.1) Updates `packageurl-js` from 1.0.2 to 2.0.1 - [Changelog](https://github.com/package-url/packageurl-js/blob/master/CHANGELOG.md) - [Commits](package-url/packageurl-js@v1.0.2...v2.0.1) Updates `@trustify-da/trustify-da-api-model` from 2.0.3 to 2.0.7 - [Release notes](https://github.com/guacsec/trustify-da-api-spec/releases) - [Commits](guacsec/trustify-da-api-spec@v2.0.3...v2.0.7) Updates `@types/node` from 20.19.31 to 25.3.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `chai` from 4.5.0 to 6.2.2 - [Release notes](https://github.com/chaijs/chai/releases) - [Changelog](https://github.com/chaijs/chai/blob/main/History.md) - [Commits](chaijs/chai@v4.5.0...v6.2.2) Updates `eslint` from 8.57.1 to 10.0.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.0.2) Updates `mocha` from 10.8.2 to 11.7.5 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md) - [Commits](mochajs/mocha@v10.8.2...v11.7.5) Updates `msw` from 2.12.7 to 2.12.10 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.7...v2.12.10) Updates `sinon` from 15.2.0 to 21.0.1 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v15.2.0...v21.0.1) Updates `sinon-chai` from 3.7.0 to 4.0.1 - [Release notes](https://github.com/chaijs/sinon-chai/releases) - [Changelog](https://github.com/chaijs/sinon-chai/blob/master/CHANGELOG.md) - [Commits](chaijs/sinon-chai@3.7.0...4.0.1) Updates `which` from 5.0.0 to 6.0.1 - [Release notes](https://github.com/npm/node-which/releases) - [Changelog](https://github.com/npm/node-which/blob/main/CHANGELOG.md) - [Commits](npm/node-which@v5.0.0...v6.0.1) --- updated-dependencies: - dependency-name: "@cyclonedx/cyclonedx-library" dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: fast-xml-parser dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: packageurl-js dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@trustify-da/trustify-da-api-model" dependency-version: 2.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 25.3.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: chai dependency-version: 6.2.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: mocha dependency-version: 11.7.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: msw dependency-version: 2.12.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: sinon dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: sinon-chai dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: which dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-dependencies group with 12 updates in the / directory:
6.13.19.4.15.3.45.4.11.0.22.0.12.0.32.0.720.19.3125.3.24.5.06.2.28.57.110.0.210.8.211.7.52.12.72.12.1015.2.021.0.13.7.04.0.15.0.06.0.1Updates
@cyclonedx/cyclonedx-libraryfrom 6.13.1 to 9.4.1Release notes
Sourced from
@cyclonedx/cyclonedx-library's releases.... (truncated)
Changelog
Sourced from
@cyclonedx/cyclonedx-library's changelog.... (truncated)
Commits
1315d659.4.1d124458fix: 6.4.0 deprecated types (#1351)ded3f6b9.4.0781fdf99.3.0ea8f1f3feat: Moved non‑standard implementations to Contrib area (#1343)8c36d6cdocs4b0373echore(deps): bump knip from 5.70.2 to 5.71.0 in /tools/test-dependencies (#1349)84a70fdchore: fix dependabot cfgee7fb13docs743dcf9chore(deps): bump the eslint group across 1 directory with 4 updates (#1341)Updates
fast-xml-parserfrom 5.3.4 to 5.4.1Release notes
Sourced from fast-xml-parser's releases.
... (truncated)
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
4e7ca80update release info36023b4fix (#785) unpairedTag node should not have tag contentb366026separate builder6f333a8update release infoc3ffbabsupport strictReservedNamesc692040update release info107e34cavoid{}to create an empty object60835a4support maxNestedTagsf55657cavoid direct call to hasOwnPropertyc13a961handle non-array input for XML builder when preserveOrder is trueUpdates
packageurl-jsfrom 1.0.2 to 2.0.1Changelog
Sourced from packageurl-js's changelog.
Commits
cd1eb4bchore: bump to v2.0.1 (#77)f7dccd6fix: error on decode with meaningful message07b818bfix: only decode in parseStringc2f576fbump to v2.0.0 (#74)b5660a5Merge pull request #73 from package-url/jdalton/sync400de0cMerge pull request #72 from package-url/dependabot/npm_and_yarn/braces-3.0.3b6c8ce8fix: correct package-url.d.ts readonly type casing96822affix: correct param name typosf81a6befix: use encodeQualifierValue for qualifierKey and qualifierValueff590d2feat: encode qualifiers with URLSearchParamsUpdates
@trustify-da/trustify-da-api-modelfrom 2.0.3 to 2.0.7Release notes
Sourced from
@trustify-da/trustify-da-api-model's releases.Commits
07b74debuild(release): release version 2.0.792e04bcMerge pull request #102 from guacsec/release/v2.0.592185f6Merge branch 'main' into release/v2.0.5c0e5cc6Merge pull request #103 from ruromero/fix/publish-releasec4999e2fix: version bump missing update-sourcesf54c1c8build(release): bump to next development version1d981c7build(release): release version 2.0.5817898bMerge pull request #101 from ruromero/fix/release-versionf62a400fix: avoid creating unnecessary backup pomd08c39efix: invalid version bump and body generationUpdates
@types/nodefrom 20.19.31 to 25.3.2Commits
Updates
chaifrom 4.5.0 to 6.2.2Release notes
Sourced from chai's releases.
... (truncated)
Commits
814172dchore(deps): update dependency esbuild to v0.27.2 (#1759)b38c22bchore: add legal-comments=none option (#1756)180d4ccchore(deps): update dependencies to v9.39.2 (#1757)678cd00chore(deps): update dependencies (#1755)c8fb100chore(deps): update dependency prettier to v3.7.3 (#1754)d63c74echore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 (#1751)243bf86fix: avoid BigInt literal in closeTo for runtime compat (#1748)d8b0395chore(deps): update actions/checkout action to v6 (#1749)7e1e247build(deps): bump glob from 10.4.5 to 10.5.0 (#1747)b25e5d8chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 (#1746)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chai since your current version.
Updates
eslintfrom 8.57.1 to 10.0.2Release notes
Sourced from eslint's releases.
... (truncated)
Commits
55122d610.0.280f1e29Build: changelog update for 10.0.2951223bchore: update dependency@eslint/eslintrcto ^3.3.4 (#20553)13eeedbdocs: link rule type explanation to CLI option --fix-type (#20548)6aa1afechore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536)2b72361fix: updateajvto6.14.0to address security vulnerabilities (#20537)98cbf6bdocs: update migration guide per Program range change (#20534)61a2405docs: add missing semicolon in vars-on-top rule example (#20533)0bd549710.0.1ddb80efBuild: changelog update for 10.0.1Updates
mochafrom 10.8.2 to 11.7.5Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.