Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 11, 2023

Bumps bfj from 7.0.2 to 8.0.0.

Changelog

Sourced from bfj's changelog.

8.0.0

Breaking changes

  • platform: only support node 18+ (45062680c52dc5ee09b136babcb3c333e3409409)

New features

  • match: support jsonpath expressions (96e3a20eea18efd982867dd894c2f1c2a649321e)

Other changes

  • docs: change downloads metric to weekly in readme (869b78f6629cbfcf9f4f6035c8bef52f1efaf0d1)
  • ci: run tests in node 16, 18 and 20 (a688782892f72f554215e181d7925fb19de934ff)
  • deps: upgrade dependencies (f6e8664281931e0eeea26d62059bfbc9e9a8c37d)
  • tests: add perf test for bfj.match (f345bc83e5fbd9204cab02169a2ae9f4c02d1450)
Commits
  • 3b6ee77 release: 8.0.0
  • 4506268 break(platform): only support node 18+
  • 869b78f chore(docs): change downloads metric to weekly in readme
  • a688782 chore(ci): run tests in node 16, 18 and 20
  • 519a26d release: 7.1.0
  • 96e3a20 feat(match): support jsonpath expressions
  • f6e8664 chore(deps): upgrade dependencies
  • f345bc8 chore(tests): add perf test for bfj.match
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 11, 2023
@socket-security
Copy link

socket-security bot commented Sep 11, 2023

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
bfj 8.0.0 filesystem +0 385 kB philbooth

Bumps [bfj](https://gitlab.com/philbooth/bfj) from 7.0.2 to 8.0.0.
- [Changelog](https://gitlab.com/philbooth/bfj/blob/master/HISTORY.md)
- [Commits](https://gitlab.com/philbooth/bfj/compare/7.0.2...8.0.0)

---
updated-dependencies:
- dependency-name: bfj
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/bfj-8.0.0 branch from ee42d25 to 5c501df Compare September 12, 2023 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants