Skip to content

chore(deps-dev): bump the dev-deps group across 1 directory with 6 updates#169

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-deps-90829eab9d
Closed

chore(deps-dev): bump the dev-deps group across 1 directory with 6 updates#169
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-deps-90829eab9d

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Dec 2, 2024 •
edited
Loading

Bumps the dev-deps group with 6 updates in the / directory:

Package From To
@moonrepo/cli 1.29.3 1.30.2
@vitest/coverage-v8 2.1.4 2.1.6
vitest 2.1.4 2.1.6
@astrojs/starlight 0.28.5 0.29.2
rollup 4.24.3 4.28.0
vite 5.4.10 6.0.2

Updates @moonrepo/cli from 1.29.3 to 1.30.2

Release notes

Sourced from @​moonrepo/cli's releases.

v1.30.2

🐞 Fixes

  • Fixed an issue where dependencies/dependents of an affected task would be skipped in the action graph if they were also not affected.
  • Fixed a potential cycle (stack overflow) that may occur in the affected tracker.

⚙️ Internal

  • Improved task dependent resolution in the action graph.

v1.30.1

🐞 Fixes

  • Fixed a Git "fatal: bad object" error when submodules are in being used.
  • Fixed an issue where moon ci would trigger a shallow checkout error, even when a base revision is provided.
  • Fixed an issue were changes in a non-direct dependency would not mark a deep dependent as affected.

v1.30.0

💥 Breaking

  • If you renamed a project using the id setting in moon.yml, you can no longer reference that project in dependencies and targets using its original ID.
  • Refactored the moon query tasks command.
    • CLI options have been replaced with new task based options, instead of being project based.
    • Now utilizes the new task graph and affected tracker.
  • The moon project-graph --json output no longer includes task data (the tasks field is an empty map).
    • Use moon task-graph to access this data, and piece things together using the project taskTargets field.
    • The moon project --json output pieces everything together automatically.

🚀 Updates

  • Added unstable support for self-hosted remote caches, powered by the Bazel Remote Execution API.
    • Allows for 3rd-party implementations like bazel-remote to be used.
    • Currently supports the gRPC protocol, and will support HTTP in a later release.
    • Our moonbase product will be sunset in the future.
  • Added Python tier 2 and 3 support.
    • Will download and install Python into the toolchain when a version is configured.
    • Will parse the requirements.txt to resolve and install dependencies.
    • Added a python setting to .moon/toolchain.yml.
    • Added a toolchain.python setting to moon.yml.
    • Updated moon bin commands to support Python.
  • Added a new task graph, that enables new granular based functionality for task related features.
    • Added a new moon task-graph command.

... (truncated)

Changelog

Sourced from @​moonrepo/cli's changelog.

1.30.2

🐞 Fixes

  • Fixed an issue where dependencies/dependents of an affected task would be skipped in the action graph if they were also not affected.
  • Fixed a potential cycle (stack overflow) that may occur in the affected tracker.

⚙️ Internal

  • Improved task dependent resolution in the action graph.

1.30.1

🐞 Fixes

  • Fixed a Git "fatal: bad object" error when submodules are in being used.
  • Fixed an issue where moon ci would trigger a shallow checkout error, even when a base revision is provided.
  • Fixed an issue were changes in a non-direct dependency would not mark a deep dependent as affected.

1.30.0

💥 Breaking

  • If you renamed a project using the id setting in moon.yml, you can no longer reference that project in dependencies and targets using its original ID.
  • Refactored the moon query tasks command.
    • CLI options have been replaced with new task based options, instead of being project based.
    • Now utilizes the new task graph and affected tracker.
  • The moon project-graph --json output no longer includes task data (the tasks field is an empty map).
    • Use moon task-graph to access this data, and piece things together using the project taskTargets field.
    • The moon project --json output pieces everything together automatically.

🚀 Updates

  • Added unstable support for self-hosted remote caches, powered by the Bazel Remote Execution API.
    • Allows for 3rd-party implementations like bazel-remote to be used.
    • Currently supports the gRPC protocol, and will support HTTP in a later release.
    • Our moonbase product will be sunset in the future.
  • Added Python tier 2 and 3 support.
    • Will download and install Python into the toolchain when a version is configured.
    • Will parse the requirements.txt to resolve and install dependencies.
    • Added a python setting to .moon/toolchain.yml.
    • Added a toolchain.python setting to moon.yml.

... (truncated)

Commits

Updates @vitest/coverage-v8 from 2.1.4 to 2.1.6

Release notes

Sourced from @​vitest/coverage-v8's releases.

v2.1.6

🚀 Features

  • Support Vite 6
    View changes on GitHub

v2.1.5

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates vitest from 2.1.4 to 2.1.6

Release notes

Sourced from vitest's releases.

v2.1.6

🚀 Features

  • Support Vite 6
    View changes on GitHub

v2.1.5

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • b936702 bump: 2.1.6
  • 32f23b9 chore: release v2.1.5
  • 417bdb4 fix(browser): init browsers eagerly when tests are running (#6876)
  • 93b67c2 fix: throw an error and a warning if .poll, .element, .rejects/`.resolv...
  • 9a0c93d fix(browser): stop the browser rpc when the pool is closed (#6858)
  • 251893b chore: set resolve.mainFields and resolve.conditions for SSR environment ...
  • 0ad2cdc chore(deps): update all non-major dependencies (#6890)
  • 4c96cce fix: print ssrTransform error (#6885)
  • 98f76ea fix: don't rerun on Esc or Ctrl-C during watch filter (#6895)
  • 00ebea6 refactor(reporters): base reporter readability improvements (#6889)
  • Additional commits viewable in compare view

Updates @astrojs/starlight from 0.28.5 to 0.29.2

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.29.2

Patch Changes

  • #2616 128cc51 Thanks @​delucis! - Fixes an edge case to correctly avoid a trailing slash when navigating from a root locale homepage to another language via Starlight’s language switcher when trailingSlash: 'never' is set

@​astrojs/starlight@​0.29.1

Patch Changes

  • #2611 6059d96 Thanks @​HiDeoo! - Fixes a UI string type issue in projects with multiple data content collections.

  • #2606 10b15a7 Thanks @​delucis! - Makes <CardGrid> more resilient to complex child content on smaller viewports

  • #2605 ec7ab4f Thanks @​brianzelip! - Exposes SidebarPersister component in package exports for use in custom overrides

  • #2614 9a31980 Thanks @​HiDeoo! - Fixes an issue with custom pages using the <StarlightPage /> component and a custom sidebar missing highlighting for the active page and navigation links.

  • #2600 49aef17 Thanks @​jdevega! - Adds Backstage social icon

  • #2613 a73780f Thanks @​delucis! - Fixes support for sidebar frontmatter options in sidebar entries using slug or the string shorthand for internal links

@​astrojs/starlight@​0.29.0

Minor Changes

  • #2551 154c8e3 Thanks @​hippotastic! - Updates the astro-expressive-code dependency to the latest version (0.38).

    The new version allows using ec.config.mjs to selectively override individual Expressive Code styles and settings provided by Starlight themes and plugins, speeds up Shiki language loading, and adds the config option expressiveCode.shiki.injectLangsIntoNestedCodeBlocks. See the Expressive Code release notes for full details.

  • #2252 6116db0 Thanks @​HiDeoo! - Improves build performance for sites with large sidebars

    This release adds a caching layer to Starlight’s sidebar generation logic, reducing the number of times sidebars need to be regenerated while building a site. Some benchmarks for projects with a complex sidebar saw builds complete more than 35% faster with this change.

  • #2503 a4c8edd Thanks @​HiDeoo! - Improves the accessibility of asides and tabs by removing some unnecessary HTML landmarks.

Patch Changes

@​astrojs/starlight@​0.28.6

Patch Changes

  • #2565 236467b Thanks @​HiDeoo! - Fixes an issue with custom UI strings defined in YAML files not being loaded in some contexts.
Changelog

Sourced from @​astrojs/starlight's changelog.

0.29.2

Patch Changes

  • #2616 128cc51 Thanks @​delucis! - Fixes an edge case to correctly avoid a trailing slash when navigating from a root locale homepage to another language via Starlight’s language switcher when trailingSlash: 'never' is set

0.29.1

Patch Changes

  • #2611 6059d96 Thanks @​HiDeoo! - Fixes a UI string type issue in projects with multiple data content collections.

  • #2606 10b15a7 Thanks @​delucis! - Makes <CardGrid> more resilient to complex child content on smaller viewports

  • #2605 ec7ab4f Thanks @​brianzelip! - Exposes SidebarPersister component in package exports for use in custom overrides

  • #2614 9a31980 Thanks @​HiDeoo! - Fixes an issue with custom pages using the <StarlightPage /> component and a custom sidebar missing highlighting for the active page and navigation links.

  • #2600 49aef17 Thanks @​jdevega! - Adds Backstage social icon

  • #2613 a73780f Thanks @​delucis! - Fixes support for sidebar frontmatter options in sidebar entries using slug or the string shorthand for internal links

0.29.0

Minor Changes

  • #2551 154c8e3 Thanks @​hippotastic! - Updates the astro-expressive-code dependency to the latest version (0.38).

    The new version allows using ec.config.mjs to selectively override individual Expressive Code styles and settings provided by Starlight themes and plugins, speeds up Shiki language loading, and adds the config option expressiveCode.shiki.injectLangsIntoNestedCodeBlocks. See the Expressive Code release notes for full details.

  • #2252 6116db0 Thanks @​HiDeoo! - Improves build performance for sites with large sidebars

    This release adds a caching layer to Starlight’s sidebar generation logic, reducing the number of times sidebars need to be regenerated while building a site. Some benchmarks for projects with a complex sidebar saw builds complete more than 35% faster with this change.

  • #2503 a4c8edd Thanks @​HiDeoo! - Improves the accessibility of asides and tabs by removing some unnecessary HTML landmarks.

Patch Changes

0.28.6

Patch Changes

  • #2565 236467b Thanks @​HiDeoo! - Fixes an issue with custom UI strings defined in YAML files not being loaded in some contexts.
Commits

Updates rollup from 4.24.3 to 4.28.0

Release notes

Sourced from rollup's releases.

v4.28.0

4.28.0

2024-11-30

Features

  • Allow to specify how to handle import attributes when transpiling Rollup config files (#5743)

Pull Requests

v4.27.4

4.27.4

2024-11-23

Bug Fixes

  • Update bundled magic-string to support sourcemap debug ids (#5740)

Pull Requests

v4.27.3

4.27.3

2024-11-18

Bug Fixes

  • Revert object property tree-shaking for now (#5736)

Pull Requests

v4.27.2

4.27.2

2024-11-15

Bug Fixes

  • Ensure unused variables in patterns are always deconflicted if rendered (#5728)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.28.0

2024-11-30

Features

  • Allow to specify how to handle import attributes when transpiling Rollup config files (#5743)

Pull Requests

4.27.4

2024-11-23

Bug Fixes

  • Update bundled magic-string to support sourcemap debug ids (#5740)

Pull Requests

4.27.3

2024-11-18

Bug Fixes

  • Revert object property tree-shaking for now (#5736)

Pull Requests

4.27.2

2024-11-15

Bug Fixes

  • Ensure unused variables in patterns are always deconflicted if rendered (#5728)

Pull Requests

... (truncated)

Commits

Updates vite from 5.4.10 to 6.0.2

Release notes

Sourced from vite's releases.

v6.0.2

Please refer to CHANGELOG.md for details.

create-vite@6.0.1

Please refer to CHANGELOG.md for details.

v6.0.1

Please refer to CHANGELOG.md for details.

create-vite@6.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@6.0.0

Please refer to CHANGELOG.md for details.

v6.0.0

Please refer to CHANGELOG.md for details.

v6.0.0-beta.10

Please refer to CHANGELOG.md for details.

v6.0.0-beta.9

Please refer to CHANGELOG.md for details.

v6.0.0-beta.8

Please refer to CHANGELOG.md for details.

v6.0.0-beta.7

Please refer to CHANGELOG.md for details.

v6.0.0-beta.6

Please refer to CHANGELOG.md for details.

v6.0.0-beta.5

Please refer to CHANGELOG.md for details.

v6.0.0-beta.4

Please refer to CHANGELOG.md for details.

v6.0.0-beta.3

Please refer to CHANGELOG.md for details.

v6.0.0-beta.2

Please refer to CHANGELOG.md for details.

v6.0.0-beta.1

Please refer to CHANGELOG.md for details.

v6.0.0-beta.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

6.0.2 (2024-12-02)

6.0.1 (2024-11-27)

6.0.0 (2024-11-26)

Vite 6 is out!

Today, we're taking another big step in Vite's story. The Vite team, contributors, and ecosystem partners are excited to announce the release of the next Vite major:

We want to thank the more than 1K contributors to Vite Core and the maintainers and contributors of Vite plugins, integrations, tools, and translations that have helped us craft this new major. We invite you to get involved and help us improve Vite for the whole ecosystem. Learn more at our Contributing Guide.

Breaking Changes

... (truncated)

Commits
  • c7af14d release: v6.0.2
  • 49f20bb chore: run typecheck in unit tests (#18858)
  • b39e696 fix(ssr): set ssr.target: 'webworker' defaults as fallback (#18827)
  • 2250ffa fix(resolve): don't set builtinModules to external by default (#18821)
  • d6e6194 fix(optimizer): resolve all promises when cancelled (#18826)
  • a20267b fix: don't store temporary vite config file in node_modules if deno (#18823)
  • ae68958 fix(css): referencing aliased svg asset with lightningcss enabled errored (#1...
  • dac7992 feat(css): format lightningcss error (#18818)
  • ec51115 fix(manifest): use style.css as a key for the style file for `cssCodesplit:...
  • 51a5569 refactor: make properties of ResolvedServerOptions and ResolvedPreviewOptions...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to ...

Description has been truncated

@dependabot
chore(deps-dev): bump the dev-deps group across 1 directory with 6 up…
7a32332 
…dates

Bumps the dev-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@moonrepo/cli](https://github.com/moonrepo/moon/tree/HEAD/packages/cli) | `1.29.3` | `1.30.2` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `2.1.4` | `2.1.6` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `2.1.4` | `2.1.6` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.28.5` | `0.29.2` |
| [rollup](https://github.com/rollup/rollup) | `4.24.3` | `4.28.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.10` | `6.0.2` |



Updates `@moonrepo/cli` from 1.29.3 to 1.30.2
- [Release notes](https://github.com/moonrepo/moon/releases)
- [Changelog](https://github.com/moonrepo/moon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moonrepo/moon/commits/@moonrepo/cli@1.30.2/packages/cli)

Updates `@vitest/coverage-v8` from 2.1.4 to 2.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.6/packages/coverage-v8)

Updates `vitest` from 2.1.4 to 2.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v2.1.6/packages/vitest)

Updates `@astrojs/starlight` from 0.28.5 to 0.29.2
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/starlight@0.29.2/packages/starlight)

Updates `rollup` from 4.24.3 to 4.28.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.24.3...v4.28.0)

Updates `vite` from 5.4.10 to 6.0.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.0.2/packages/vite)

---
updated-dependencies:
- dependency-name: "@moonrepo/cli"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: "@vitest/coverage-v8"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@astrojs/starlight"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-deps
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 2, 2024
@dependabot dependabot bot mentioned this pull request Dec 2, 2024
Closed
@socket-security
Copy link
Copy Markdown

socket-security bot commented Dec 2, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@astrojs/starlight@0.29.2 Transitive: environment, eval, filesystem, network, shell +241 29.7 MB fredkschott
npm/@moonrepo/cli@1.30.2 environment, filesystem Transitive: shell +1 32.1 kB milesj
npm/@vitest/coverage-v8@2.1.6 Transitive: environment, filesystem, shell +63 10.7 MB antfu, oreanno, patak, ...1 more
npm/rollup@4.28.0 environment, filesystem +1 2.63 MB lukastaegert
npm/vite@6.0.2 environment, eval, filesystem, network, shell, unsafe +5 3.34 MB antfu, patak, soda, ...2 more
npm/vitest@2.1.6 environment, eval Transitive: filesystem, shell, unsafe +33 4.37 MB antfu, oreanno, patak, ...1 more

🚮 Removed packages: npm/@astrojs/starlight@0.28.5, npm/@moonrepo/cli@1.29.3, npm/@vitest/coverage-v8@2.1.4, npm/rollup@4.24.3, npm/vitest@2.1.4

View full report↗︎

@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Dec 9, 2024

Superseded by #172.

@dependabot dependabot bot closed this Dec 9, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-deps-90829eab9d branch December 9, 2024 07:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants