Bump the npm-dependencies group with 5 updates #752
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [rollup](https://github.com/rollup/rollup) | `4.50.2` | `4.52.0` | | [@cloudflare/vitest-pool-workers](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-pool-workers) | `0.9.2` | `0.9.3` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.35.0` | `9.36.0` | | [eslint](https://github.com/eslint/eslint) | `9.35.0` | `9.36.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.37.1` | `4.38.0` | Updates `rollup` from 4.50.2 to 4.52.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.50.2...v4.52.0) Updates `@cloudflare/vitest-pool-workers` from 0.9.2 to 0.9.3 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vitest-pool-workers/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/[email protected]/packages/vitest-pool-workers) Updates `@eslint/js` from 9.35.0 to 9.36.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.36.0/packages/js) Updates `eslint` from 9.35.0 to 9.36.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v9.35.0...v9.36.0) Updates `wrangler` from 4.37.1 to 4.38.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@cloudflare/vitest-pool-workers" dependency-version: 0.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@eslint/js" dependency-version: 9.36.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 9.36.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: wrangler dependency-version: 4.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
dependabot
bot
added
dependencies
github-actions
bot
added
root
and removed
dependencies
|
Here's the code health analysis summary for commits Analysis Summary
|
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
Deploying brisbanesocialchess with
|
| Latest commit: |
fc91997
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://c0521932.brisbanesocialchess.pages.dev |
| Branch Preview URL: | https://dependabot-npm-and-yarn-npm-u22w.brisbanesocialchess.pages.dev |
michal-duszak
added
low-priority
dependencies
|
/gemini review |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates five npm dependencies, including rollup, wrangler, and eslint. The changes are confined to the package-lock.json file, reflecting the updated resolved versions of these packages and their transitive dependencies. I have reviewed the release notes for the updated packages, and they consist of new features, bug fixes, and minor improvements that should not introduce any breaking changes for this project. The updates are safe to merge.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/npm-dependencies-2a4c8dc5d6
branch
Bumps the npm-dependencies group with 5 updates:
4.50.24.52.00.9.20.9.39.35.09.36.09.35.09.36.04.37.14.38.0Updates
rollupfrom 4.50.2 to 4.52.0Release notes
Sourced from rollup's releases.
Changelog
Sourced from rollup's changelog.
Commits
2029f634.52.0039ba6bFix release script for commits without GitHub authors98f5d35Automatically remove REPL artefacts label from PRs (#6118)3f124bafix: manualChunks and non manualChunks shared dependencies are merged with th...a0bb78cAdd support x86_64-pc-windows-gnu (#6110)17487364.51.0e518bdechore(deps): lock file maintenance (#6117)9265955Disable local_dynamic_tls for OpenHarmony (#6115)0b8e19dfix(deps): update rust crate swc_compiler_base to v35 (#6113)b14f803chore(deps): lock file maintenance minor/patch updates (#6116)Updates
@cloudflare/vitest-pool-workersfrom 0.9.2 to 0.9.3Release notes
Sourced from
@cloudflare/vitest-pool-workers's releases.Changelog
Sourced from
@cloudflare/vitest-pool-workers's changelog.Commits
56cc3c6Version Packages (#10672)Updates
@eslint/jsfrom 9.35.0 to 9.36.0Release notes
Sourced from
@eslint/js's releases.Changelog
Sourced from
@eslint/js's changelog.Commits
488cba6chore: package.json update for@eslint/jsrelease1c0d850fix: updateeslint-all.jsto useObject.freezeforrulesobject (#20116)Updates
eslintfrom 9.35.0 to 9.36.0Release notes
Sourced from eslint's releases.
Changelog
Sourced from eslint's changelog.
Commits
b4857e59.36.05878a42Build: changelog update for 9.36.012411e8chore: upgrade@eslint/js@9.36.0 (#20139)488cba6chore: package.json update for@eslint/jsreleaseb73ab12docs: update examples to usedefineConfig(#20131)47afcf6feat: correctpreserve-caught-erroredge cases (#20109)75b74d8fix: add missing rule option types (#20127)bac82a2ci: simplify renovate configuration (#19907)1c0d850fix: updateeslint-all.jsto useObject.freezeforrulesobject (#20116)c00bb37ci: bump actions/labeler from 5 to 6 (#20090)Updates
wranglerfrom 4.37.1 to 4.38.0Release notes
Sourced from wrangler's releases.
Changelog
Sourced from wrangler's changelog.
Commits
56cc3c6Version Packages (#10672)769ffb1Wrangler preview urls e2e fixes and warning follow up (#10561)b30263eRemove dummy auth & add trace header (#10678)1cc258eFix remote/local display (#10674)f76da43Supportctx.exportsin wrangler types (#10676)b59e3e1Bump the workerd-and-workers-types group across 1 directory with 2 updates (#...6caf938Add new attribute allowed_sender_addresses (#10651)a4e2439fix: update R2 SQL response format and env variable (#10654)e9b0c66Use workerdnode:processv2 when available (#10577)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions