Skip to content
This repository has been archived by the owner on Jan 2, 2024. It is now read-only.

Bump the npm_and_yarn group group with 2 updates #992

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2023

Bumps the npm_and_yarn group group with 2 updates: @storybook/svelte and webpack-bundle-analyzer.

Updates @storybook/svelte from 5.3.14 to 7.6.6

Release notes

Sourced from @​storybook/svelte's releases.

v7.6.6

7.6.6

v7.6.5

7.6.5

v7.6.4

7.6.4

v7.6.3

7.6.3

v7.6.2

7.6.2

v7.6.1

7.6.1

v7.6.0

7.6.0

Storybook 7.6 is here with increased performance and much more!

  • 🔥 Improved SWC support
  • 🧪 New test utilities and fast build mode
  • 🔼 NextJS SWC + avif support & fixes
  • 🤡 SvelteKit page and navigation mocking
  • ⚛️ React-docgen upgrade
  • 🎨 Controls a11y, background theming, and viewports
  • 🩺 CLI: The doctor is in!
  • 🚫 Addons: Remove React as a peer dependency

... (truncated)

Changelog

Sourced from @​storybook/svelte's changelog.

7.6.6

7.6.5

7.6.4

7.6.3

7.6.2

7.6.1

7.6.0

Storybook 7.6 is here with increased performance and much more!

  • 🔥 Improved SWC support
  • 🧪 New test utilities and fast build mode
  • 🔼 NextJS SWC + avif support & fixes
  • 🤡 SvelteKit page and navigation mocking
  • ⚛️ React-docgen upgrade
  • 🎨 Controls a11y, background theming, and viewports
  • 🩺 CLI: The doctor is in!
  • 🚫 Addons: Remove React as a peer dependency
  • 🪦 Storyshots and Vue2 deprecated

... (truncated)

Commits
  • a3a9ca8 Bump version from "7.6.5" to "7.6.6" [skip ci]
  • 1bb4147 Bump version from "7.6.4" to "7.6.5" [skip ci]
  • 1ba5416 Bump version from "7.6.3" to "7.6.4" [skip ci]
  • afc4c2f Bump version from "7.6.2" to "7.6.3" [skip ci]
  • afc89aa Bump version from "7.6.1" to "7.6.2" [skip ci]
  • 60f9c9a Bump version from "7.6.0" to "7.6.1" [skip ci]
  • b64214c Bump version from "7.6.0-beta.2" to "7.6.0" [skip ci]
  • 975ad76 Update TOC to use heading type
  • 1fb8d01 Remove /\<renderer> from URLs in CLI templates
  • b990144 Bump version from "7.6.0-beta.1" to "7.6.0-beta.2" [skip ci]
  • Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 3.8.0 to 4.10.1

Changelog

Sourced from webpack-bundle-analyzer's changelog.

4.10.1

  • Bug Fix

4.10.0

  • Improvement

  • Internal

    • Make module much slimmer by replacing all lodash.* packages (#612) by @​sukkaw.

4.9.1

4.9.0

  • Improvement
    • Display modules included in concatenated entry modules on Webpack 5 when "Show content of concatenated modules" is checked (#602 by @​pgoldberg)

4.8.0

4.7.0

4.6.1

4.6.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 22, 2023
Bumps the npm_and_yarn group group with 2 updates: [@storybook/svelte](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/svelte) and [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer).


Updates `@storybook/svelte` from 5.3.14 to 7.6.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/renderers/svelte)

Updates `webpack-bundle-analyzer` from 3.8.0 to 4.10.1
- [Release notes](https://github.com/webpack-contrib/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack-contrib/webpack-bundle-analyzer/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/webpack-bundle-analyzer@v3.8.0...v4.10.1)

---
updated-dependencies:
- dependency-name: "@storybook/svelte"
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
- dependency-name: webpack-bundle-analyzer
  dependency-type: direct:development
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-security-group-62f4a297f7 branch from 30f91d6 to 6941ea8 Compare December 22, 2023 14:09
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants