deps: bump the major-dependencies group with 4 updates #126

dependabot · 2023-10-10T20:46:05Z

Bumps the major-dependencies group with 4 updates: @actions/github, conventional-changelog-angular, conventional-recommended-bump and prettier.

Updates @actions/github from 5.1.1 to 6.0.0

Changelog

Sourced from @actions/github's changelog.

6.0.0

Support the latest Octokit in @actions/github #1553

Drop support of NodeJS v14, v16

Commits

See full diff in compare view

Updates conventional-changelog-angular from 6.0.0 to 7.0.0

Release notes

Sourced from conventional-changelog-angular's releases.

conventional-changelog-angular: v7.0.0

7.0.0 (2023-08-26)

⚠ BREAKING CHANGES

Node >= 16 is required

Now all presets are exports preset config factory function. conventional-changelog-preset-loader now exports new loadPreset and createPresetLoader functions. If you are using presets indirectly, using preset name, no any changes in configuration needed, just upgrade packages to latest versions.

Features

drop node 14 support (#1085) (1bce036)

unified presets interface (#1045) (8d0ffbe)

Changelog

Sourced from conventional-changelog-angular's changelog.

{ "packages/conventional-changelog-conventionalcommits": "7.0.2", "packages/conventional-changelog-cli": "4.1.0", "packages/conventional-changelog": "5.1.0", "packages/conventional-commits-parser": "5.0.0", "packages/git-raw-commits": "4.0.0", "packages/conventional-changelog-writer": "7.0.1", "packages/conventional-changelog-jshint": "4.0.0", "packages/conventional-changelog-jquery": "5.0.0", "packages/conventional-changelog-express": "4.0.0", "packages/conventional-changelog-eslint": "5.0.0", "packages/conventional-changelog-ember": "4.0.0", "packages/conventional-changelog-codemirror": "4.0.0", "packages/conventional-changelog-angular": "7.0.0", "packages/conventional-changelog-atom": "4.0.0", "packages/git-semver-tags": "7.0.1", "packages/conventional-commits-filter": "4.0.0", "packages/conventional-changelog-preset-loader": "4.1.0", "packages/conventional-recommended-bump": "9.0.0", "packages/conventional-changelog-core": "7.0.0", "packages/standard-changelog": "5.0.0", "packages/gulp-conventional-changelog": "4.0.0" }

Commits

6c7a2e1 chore(master): release conventional-changelog-angular 7.0.0 (#1049)
0204a9a chore(master): release conventional-changelog-jshint 4.0.0 (#1048)
ab9b2c1 chore(master): release conventional-changelog-atom 4.0.0 (#1047)
29df6c4 chore(master): release conventional-changelog-cli 4.0.0 (#1046)
45613bb chore(master): release conventional-changelog-core 6.0.0 (#1036)
5a896e3 chore(master): release gulp-conventional-changelog 4.0.0 (#1035)
878fc56 chore(master): release git-raw-commits 4.0.0 (#1034)
9c138ee refactor(conventional-commits-parser): use Transform instead of JSONStream (#...
bcef5fe chore(conventional-changelog-preset-loader): remove unused sinon (#1091)
8a20d9e ci: manual trigger for release-please to escape github api rate limits (#1092)
Additional commits viewable in compare view

Updates conventional-recommended-bump from 7.0.1 to 9.0.0

Release notes

Sourced from conventional-recommended-bump's releases.

conventional-recommended-bump: v9.0.0

9.0.0 (2023-09-08)

⚠ BREAKING CHANGES

git-semver-tags,conventional-recommended-bump: gitSemverTags and conventionalRecommendedBump now return promises

standard-changelog: createIfMissing method now returns a promise

Features

git-semver-tags,conventional-recommended-bump: refactoring to use promises instead of callbacks (#1112) (1697ecd)

standard-changelog: use promises (#1111) (5015ab7)

Bug Fixes

conventional-changelog-conventionalcommits: fix handling input params (#1120) (e721cde)

conventional-recommended-bump: v8.0.0

8.0.0 (2023-08-26)

⚠ BREAKING CHANGES

Node >= 16 is required

Now all presets are exports preset config factory function. conventional-changelog-preset-loader now exports new loadPreset and createPresetLoader functions. If you are using presets indirectly, using preset name, no any changes in configuration needed, just upgrade packages to latest versions.

Features

drop node 14 support (#1085) (1bce036)

git-semver-tags,conventional-recommended-bump: define skip-unstable option in cli (#1066) (0ffec3f)

unified presets interface (#1045) (8d0ffbe)

Bug Fixes

fix semver vulnerability (#1071) (3f5c99d), closes #1019

Changelog

Sourced from conventional-recommended-bump's changelog.

{ "packages/conventional-changelog-conventionalcommits": "7.0.2", "packages/conventional-changelog-cli": "4.1.0", "packages/conventional-changelog": "5.1.0", "packages/conventional-commits-parser": "5.0.0", "packages/git-raw-commits": "4.0.0", "packages/conventional-changelog-writer": "7.0.1", "packages/conventional-changelog-jshint": "4.0.0", "packages/conventional-changelog-jquery": "5.0.0", "packages/conventional-changelog-express": "4.0.0", "packages/conventional-changelog-eslint": "5.0.0", "packages/conventional-changelog-ember": "4.0.0", "packages/conventional-changelog-codemirror": "4.0.0", "packages/conventional-changelog-angular": "7.0.0", "packages/conventional-changelog-atom": "4.0.0", "packages/git-semver-tags": "7.0.1", "packages/conventional-commits-filter": "4.0.0", "packages/conventional-changelog-preset-loader": "4.1.0", "packages/conventional-recommended-bump": "9.0.0", "packages/conventional-changelog-core": "7.0.0", "packages/standard-changelog": "5.0.0", "packages/gulp-conventional-changelog": "4.0.0" }

Commits

ad633d9 chore(master): release conventional-recommended-bump 9.0.0 (#1130)
50113f9 chore(master): release conventional-changelog-conventionalcommits 7.0.2 (#1124)
a14d218 chore(master): release conventional-changelog-preset-loader 5.0.0 (#1117)
1697ecd feat(git-semver-tags,conventional-recommended-bump)!: refactoring to use prom...
5015ab7 feat(standard-changelog)!: use promises (#1111)
e721cde fix(conventional-changelog-conventionalcommits): fix handling input params (#...
2c54379 chore(deps): lock file maintenance (#1118)
4f09e6d feat(conventional-changelog-preset-loader): throw error if preset does not ex...
59c7848 feat!(git-semver-tags,conventional-recommended-bump): refactoring to use prom...
574d29d feat!(standard-changelog): small refactoring (#1111)
Additional commits viewable in compare view

Updates prettier from 2.8.8 to 3.0.3

Release notes

Sourced from prettier's releases.

3.0.3

🔗 Changelog

3.0.2

🔗 Changelog

3.0.1

🔗 Changelog

3.0.0

diff

🔗 Release note

3.0.0-alpha.6

What's Changed

Update .d.ts files of plugins to use export default ... by @fisker in prettier/prettier#14435

Other changes since v2, see 3.0.0-alpha.1 release notes

Full Changelog: prettier/prettier@3.0.0-alpha.5...3.0.0-alpha.6

3.0.0-alpha.5

What's Changed

Add .d.ts files by @sosukesuzuki in prettier/prettier#14212

Support TypeScript 5 via babel-ts parser by @fisker in prettier/prettier#14391

Other changes since v2, see 3.0.0-alpha.1 release notes

Full Changelog: prettier/prettier@3.0.0-alpha.4...3.0.0-alpha.5

3.0.0-alpha.4

What's Changed

Remove support for Flow comment types by @thorn0 in prettier/prettier#13687

Make resolveParser work like v2 by @fisker in prettier/prettier#13732

Add __debug apis to cjs version by @fisker in prettier/prettier#13731

Other changes since v2, see 3.0.0-alpha.1 release notes

Full Changelog: prettier/prettier@3.0.0-alpha.3...3.0.0-alpha.4

3.0.0-alpha.3

Fix exports field in package.json file

Other changes since v2, see 3.0.0-alpha.1 release notes

Full Changelog: prettier/prettier@3.0.0-alpha.2...3.0.0-alpha.3

3.0.0-alpha.2

Fix bundled index.cjs file

... (truncated)

Changelog

Sourced from prettier's changelog.

3.0.3

diff

Add preferUnplugged: true to package.json (#15169 by @fisker and @so1ve)

Prettier v3 uses dynamic imports, user will need to unplug Prettier when Yarn's PnP mode is enabled, add preferUnplugged: true to package.json, so Yarn will install Prettier as unplug by default.

Support shared config that forbids require() (#15233 by @fisker)

If an external shared config package is used, and the package exports don't have require or default export.

In Prettier 3.0.2 Prettier fails when attempt to require() the package, and throws an error.
Error [ERR_PACKAGE_PATH_NOT_EXPORTED]: No "exports" main defined in <packageName>/package.json
Allow argument of require() to break (#15256 by @fisker)
// Input
const plugin = require(
  global.STANDALONE
    ? path.join(__dirname, "../standalone.js")
    : path.join(__dirname, "..")
);
// Prettier 3.0.2
const plugin = require(global.STANDALONE
? path.join(__dirname, "../standalone.js")
: path.join(__dirname, ".."));
// Prettier 3.0.3
const plugin = require(
global.STANDALONE
? path.join(__dirname, "../standalone.js")
: path.join(__dirname, "..")
);
Do not print trailing commas in arrow function type parameter lists in ts code blocks (#15286 by @sosukesuzuki)

```ts
const foo = <T>() => {}
```
</tr></table>

... (truncated)

Commits

d5f3171 Release 3.0.3
a35008f Support shared config that forbids require() (#15233)
1ce97d1 Support TypeScript 5.2 using / await using declaration (#15321)
a73cfa0 Fix build script --report option (#15323)
941c6b3 Minor refactor to getSupportedFilesGlob (#15319)
f6c9e9b Assert uniqueness in language properties (#15320)
288ea7e chore(deps): update dependency webpack to v5.88.2 (#15147)
6654451 chore(deps): update dependency webpack to v5.88.2 (#15148)
d059644 chore(deps): update dependency fast-glob to v3.3.1 (#15001)
423011d Minor refactor to expandPatterns (#15317)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major-dependencies group with 4 updates: [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github), [conventional-changelog-angular](https://github.com/conventional-changelog/conventional-changelog), [conventional-recommended-bump](https://github.com/conventional-changelog/conventional-changelog) and [prettier](https://github.com/prettier/prettier). Updates `@actions/github` from 5.1.1 to 6.0.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) Updates `conventional-changelog-angular` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/.release-please-manifest.json) - [Commits](conventional-changelog/conventional-changelog@conventional-changelog-angular-v6.0.0...conventional-changelog-angular-v7.0.0) Updates `conventional-recommended-bump` from 7.0.1 to 9.0.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/.release-please-manifest.json) - [Commits](conventional-changelog/conventional-changelog@conventional-recommended-bump-v7.0.1...conventional-recommended-bump-v9.0.0) Updates `prettier` from 2.8.8 to 3.0.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@2.8.8...3.0.3) --- updated-dependencies: - dependency-name: "@actions/github" dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-dependencies - dependency-name: conventional-changelog-angular dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-dependencies - dependency-name: conventional-recommended-bump dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-dependencies - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2023-10-10T20:47:28Z

Codecov Report

All modified lines are covered by tests ✅

Comparison is base (3bed1d7) 100.00% compared to head (e90eb66) 100.00%.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #126   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines           53        53           
=========================================
  Hits            53        53

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

stdavis · 2023-10-11T23:26:50Z

@steveoh Would you mind taking a look at the additional commits that I added to this PR?

steveoh

🚀 we still have a bug in here right #106, do you know if these updates sort that out?

.prettierignore

README.md

index.js

stdavis · 2023-10-12T15:05:38Z

we still have a bug in here right #106, do you know if these updates sort that out?

No, I didn't dig into that bug.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 10, 2023

stdavis added 3 commits October 11, 2023 16:15

fix: conventionalRecommendedBump returns a promise now

0ba49f4

fix: add prettier plugins config

3e748f4

style: fresh prettier run

d659790

stdavis enabled auto-merge (rebase) October 11, 2023 22:18

stdavis requested a review from steveoh October 11, 2023 23:26

stdavis added 3 commits October 11, 2023 17:27

fix: default values can only be strings

9b0c5b1

fix: handle new apis for conventional commit packages

bb27c1b

docs: add note about using the act project

e90eb66

stdavis force-pushed the dependabot/npm_and_yarn/major-dependencies-15337ce55d branch from c1efc9f to e90eb66 Compare October 11, 2023 23:27

steveoh approved these changes Oct 12, 2023

View reviewed changes

.prettierignore Show resolved Hide resolved

README.md Show resolved Hide resolved

index.js Show resolved Hide resolved

index.js Show resolved Hide resolved

stdavis merged commit 3407531 into main Oct 12, 2023
10 checks passed

stdavis deleted the dependabot/npm_and_yarn/major-dependencies-15337ce55d branch October 12, 2023 15:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the major-dependencies group with 4 updates #126

deps: bump the major-dependencies group with 4 updates #126

dependabot bot commented on behalf of github Oct 10, 2023

codecov bot commented Oct 10, 2023 •

edited

Loading

stdavis commented Oct 11, 2023

steveoh left a comment

stdavis commented Oct 12, 2023

deps: bump the major-dependencies group with 4 updates #126

deps: bump the major-dependencies group with 4 updates #126

Conversation

dependabot bot commented on behalf of github Oct 10, 2023

6.0.0

conventional-changelog-angular: v7.0.0

7.0.0 (2023-08-26)

⚠ BREAKING CHANGES

Features

conventional-recommended-bump: v9.0.0

9.0.0 (2023-09-08)

⚠ BREAKING CHANGES

Features

Bug Fixes

conventional-recommended-bump: v8.0.0

8.0.0 (2023-08-26)

⚠ BREAKING CHANGES

Features

Bug Fixes

3.0.3

3.0.2

3.0.1

3.0.0

3.0.0-alpha.6

What's Changed

3.0.0-alpha.5

What's Changed

3.0.0-alpha.4

What's Changed

3.0.0-alpha.3

3.0.0-alpha.2

3.0.3

Add preferUnplugged: true to package.json (#15169 by @​fisker and @​so1ve)

Support shared config that forbids require() (#15233 by @​fisker)

Allow argument of require() to break (#15256 by @​fisker)

Do not print trailing commas in arrow function type parameter lists in ts code blocks (#15286 by @​sosukesuzuki)

codecov bot commented Oct 10, 2023 • edited Loading

Codecov Report

stdavis commented Oct 11, 2023

steveoh left a comment

Choose a reason for hiding this comment

stdavis commented Oct 12, 2023

Add `preferUnplugged: true` to `package.json` (#15169 by `@fisker` and `@so1ve`)

Support shared config that forbids `require()` (#15233 by `@fisker`)

Allow argument of `require()` to break (#15256 by `@fisker`)

Do not print trailing commas in arrow function type parameter lists in `ts` code blocks (#15286 by `@sosukesuzuki`)

codecov bot commented Oct 10, 2023 •

edited

Loading