chore(deps): bump actions/dependency-review-action from 3 to 4 - #50
Open
dependabot[bot] wants to merge 56 commits into
Open
chore(deps): bump actions/dependency-review-action from 3 to 4#50dependabot[bot] wants to merge 56 commits into
dependabot[bot] wants to merge 56 commits into
Conversation
Bumps python from 3.9-bullseye to 3.11-bullseye. --- updated-dependencies: - dependency-name: python dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [selenium](https://github.com/SeleniumHQ/Selenium) to permit the latest version. - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-3.141.0...selenium-4.9.0) --- updated-dependencies: - dependency-name: selenium dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [coverage](https://github.com/nedbat/coveragepy) to permit the latest version. - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](coveragepy/coveragepy@coverage-4.5.4...7.2.4) --- updated-dependencies: - dependency-name: coverage dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.23.0 to 1.24.0. - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Commits](slackapi/slack-github-action@v1.23.0...v1.24.0) --- updated-dependencies: - dependency-name: slackapi/slack-github-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3.1.3...v3.1.4) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…1-bullseye chore(deps): Bump python from 3.9-bullseye to 3.11-bullseye in /docker
Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) --- updated-dependencies: - dependency-name: semver dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [semver](https://github.com/npm/node-semver) from 6.3.0 to 6.3.1. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v6.3.1) --- updated-dependencies: - dependency-name: semver dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.4) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.4) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. - [Release notes](https://github.com/jonschlinkert/word-wrap/releases) - [Commits](jonschlinkert/word-wrap@1.2.3...1.2.4) --- updated-dependencies: - dependency-name: word-wrap dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/ncipollo/release-action/releases) - [Commits](ncipollo/release-action@v1.12.0...v1.13.0) --- updated-dependencies: - dependency-name: ncipollo/release-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pytz](https://github.com/stub42/pytz) from 2022.2.1 to 2023.3.post1. - [Commits](stub42/pytz@release_2022.2.1...release_2023.3.post1) --- updated-dependencies: - dependency-name: pytz dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 5. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v4...v5) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps postgres from 14.6 to 16.0. --- updated-dependencies: - dependency-name: postgres dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.12 to 8.4.31. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.12...8.4.31) --- updated-dependencies: - dependency-name: postcss dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps python from 3.11-bullseye to 3.12-bullseye. --- updated-dependencies: - dependency-name: python dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…1.2.4 chore(deps): bump word-wrap from 1.2.3 to 1.2.4
…16.0 chore(deps): bump postgres from 14.6 to 16.0 in /docker
…12-bullseye chore(deps): bump python from 3.11-bullseye to 3.12-bullseye in /docker
…4.31 chore(deps): bump postcss from 8.4.12 to 8.4.31
…uild-push-action-5 chore(deps): bump docker/build-push-action from 4 to 5
chore(deps): bump pytz from 2022.2.1 to 2023.3.post1
…checkout-4 chore(deps): bump actions/checkout from 3 to 4
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v2...v3) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…etup-buildx-action-3 chore(deps): bump docker/setup-buildx-action from 2 to 3
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v2...v3) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@v2...v3) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps postgres from 16.0 to 16.1. --- updated-dependencies: - dependency-name: postgres dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [mypy](https://github.com/python/mypy) to permit the latest version. - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.2.0...v1.7.1) --- updated-dependencies: - dependency-name: mypy dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [mypy](https://github.com/python/mypy) to permit the latest version. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's changelog</a>.</em></p> <blockquote> <h1>Mypy Release Notes</h1> <h2>Next release</h2> <p>Stubgen will now include <code>__all__</code> in its output if it is in the input file (PR <a href="https://redirect.github.com/python/mypy/pull/16356">16356</a>).</p> <h2>Mypy 1.7</h2> <p>We’ve just uploaded mypy 1.7 to the Python Package Index (<a href="https://pypi.org/project/mypy/">PyPI</a>). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:</p> <pre><code>python3 -m pip install -U mypy </code></pre> <p>You can read the full documentation for this release on <a href="http://mypy.readthedocs.io">Read the Docs</a>.</p> <h4>Using TypedDict for <code>**kwargs</code> Typing</h4> <p>Mypy now has support for using <code>Unpack[...]</code> with a TypedDict type to annotate <code>**kwargs</code> arguments enabled by default. Example:</p> <pre lang="python"><code># Or 'from typing_extensions import ...' from typing import TypedDict, Unpack <p>class Person(TypedDict): name: str age: int</p> <p>def foo(**kwargs: Unpack[Person]) -> None: ...</p> <p>foo(name="x", age=1) # Ok foo(name=1) # Error </code></pre></p> <p>The definition of <code>foo</code> above is equivalent to the one below, with keyword-only arguments <code>name</code> and <code>age</code>:</p> <pre lang="python"><code>def foo(*, name: str, age: int) -> None: ... </code></pre> <p>Refer to <a href="https://peps.python.org/pep-0692/">PEP 692</a> for more information. Note that unlike in the current version of the PEP, mypy always treats signatures with <code>Unpack[SomeTypedDict]</code> as equivalent to their expanded forms with explicit keyword arguments, and there aren't special type checking rules for TypedDict arguments.</p> <p>This was contributed by Ivan Levkivskyi back in 2022 (PR <a href="https://redirect.github.com/python/mypy/pull/13471">13471</a>).</p> <h4>TypeVarTuple Support Enabled (Experimental)</h4> <p>Mypy now has support for variadic generics (TypeVarTuple) enabled by default, as an experimental feature. Refer to <a href="https://peps.python.org/pep-0646/">PEP 646</a> for the details.</p> <p>TypeVarTuple was implemented by Jared Hance and Ivan Levkivskyi over several mypy releases, with help from Jukka Lehtosalo.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python/mypy/commit/6b3c41838d8e7a39242b6fd035535e2d76eabfc6"><code>6b3c418</code></a> Update version to 1.7.1 (without +dev)</li> <li><a href="https://github.com/python/mypy/commit/c10e17348f2eacbbeae80eb6c10c661c0137d849"><code>c10e173</code></a> [mypyc] Fix regression with nested functions (<a href="https://redirect.github.com/python/mypy/issues/16484">#16484</a>)</li> <li><a href="https://github.com/python/mypy/commit/e6399d10b0a1cdb104559482fad1b4dc0e2de6ac"><code>e6399d1</code></a> Fix polymorphic application for callback protocols (<a href="https://redirect.github.com/python/mypy/issues/16514">#16514</a>)</li> <li><a href="https://github.com/python/mypy/commit/661adb756800ecc40fabbe62e9339efd253aff4e"><code>661adb7</code></a> Fix crash on strict-equality with recursive types (<a href="https://redirect.github.com/python/mypy/issues/16483">#16483</a>)</li> <li><a href="https://github.com/python/mypy/commit/6c8e0cc47c014894ea41621a10f3d1b465322362"><code>6c8e0cc</code></a> Ignore position if imprecise arguments are matched by name (<a href="https://redirect.github.com/python/mypy/issues/16471">#16471</a>)</li> <li><a href="https://github.com/python/mypy/commit/5c354c41c0fbb74418afcbd30ba822694be28d11"><code>5c354c4</code></a> Fix missing meet case exposed by len narrowing (<a href="https://redirect.github.com/python/mypy/issues/16470">#16470</a>)</li> <li><a href="https://github.com/python/mypy/commit/88791cabe0521f77b699405154d90f3bb7c6b31b"><code>88791ca</code></a> Exclude private attributes from override checks (<a href="https://redirect.github.com/python/mypy/issues/16464">#16464</a>)</li> <li><a href="https://github.com/python/mypy/commit/4b5b316beb570bba4c9b7797deb2e6d7df0552d0"><code>4b5b316</code></a> Special-case unions in polymorphic inference (<a href="https://redirect.github.com/python/mypy/issues/16461">#16461</a>)</li> <li><a href="https://github.com/python/mypy/commit/f862d3ef540c38e7efd2fffd64fc732d6318dfb4"><code>f862d3e</code></a> Fix crash on Callable self in <strong>call</strong> (<a href="https://redirect.github.com/python/mypy/issues/16453">#16453</a>)</li> <li><a href="https://github.com/python/mypy/commit/fe79a59e44299a3cc8025aa5084e08773c872a54"><code>fe79a59</code></a> Bump version to 1.7.1+dev</li> <li>Additional commits viewable in <a href="https://github.com/python/mypy/compare/v1.2.0...v1.7.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps [python-magic](https://github.com/ahupp/python-magic) from 0.4.18 to 0.4.27. - [Changelog](https://github.com/ahupp/python-magic/blob/master/CHANGELOG) - [Commits](ahupp/python-magic@0.4.18...0.4.27) --- updated-dependencies: - dependency-name: python-magic dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [django](https://github.com/django/django) to permit the latest version. - [Commits](django/django@4.2.1...5.0) --- updated-dependencies: - dependency-name: django dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [django](https://github.com/django/django) to permit the latest version. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/django/django/commit/617bcf611f3daa796e4054ba041089ece30a32fc"><code>617bcf6</code></a> [5.0.x] Bumped version for 5.0 release.</li> <li><a href="https://github.com/django/django/commit/94914b550db70176963c9b941635a3d9dd87f3a5"><code>94914b5</code></a> [5.0.x] Finalized release notes for Django 5.0.</li> <li><a href="https://github.com/django/django/commit/8e1b820fa10d16664beb5d1ca2f5671891da1704"><code>8e1b820</code></a> [5.0.x] Updated translations from Transifex.</li> <li><a href="https://github.com/django/django/commit/e4d7cc3eae3b6b04866ed5874f5d285b8e083ba0"><code>e4d7cc3</code></a> [5.0.x] Added release date for 4.2.8.</li> <li><a href="https://github.com/django/django/commit/cb013fc7d9be5faf59f79b6e59ab04e751d05a16"><code>cb013fc</code></a> [5.0.x] Fixed <a href="https://redirect.github.com/django/django/issues/35002">#35002</a> -- Made UniqueConstraints with fields respect nulls_dist...</li> <li><a href="https://github.com/django/django/commit/6c502734a0395c3c937a827716e3c02697f53f9b"><code>6c50273</code></a> [5.0.x] Fixed <a href="https://redirect.github.com/django/django/issues/35001">#35001</a> -- Fixed position of related widget action icons in admi...</li> <li><a href="https://github.com/django/django/commit/b8a476b7455868c627fd6cab18d6a5f5da49233e"><code>b8a476b</code></a> [5.0.x] Improved wording in auth.models.User field docs.</li> <li><a href="https://github.com/django/django/commit/471fa926eaa1bb9270e0b0ad0cd8bdd93ea6f88f"><code>471fa92</code></a> [5.0.x] Fixed <a href="https://redirect.github.com/django/django/issues/34995">#34995</a> -- Improved position of related widget's add link on adm...</li> <li><a href="https://github.com/django/django/commit/9fe12b0f364b18926ef52587d4dbe2b2901b2b98"><code>9fe12b0</code></a> [5.0.x] Refs <a href="https://redirect.github.com/django/django/issues/34995">#34995</a> -- Made Selenium tests more robust for admin_views and ad...</li> <li><a href="https://github.com/django/django/commit/7f1dc67f53c0d7a79031852603b8c8445bca65ac"><code>7f1dc67</code></a> [5.0.x] Fixed <a href="https://redirect.github.com/django/django/issues/35006">#35006</a> -- Fixed migrations crash when altering Meta.db_table_co...</li> <li>Additional commits viewable in <a href="https://github.com/django/django/compare/4.2.1...5.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps [python-magic](https://github.com/ahupp/python-magic) from 0.4.18 to 0.4.27. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ahupp/python-magic/blob/master/CHANGELOG">python-magic's changelog</a>.</em></p> <blockquote> <p>Changes to 0.4.29:</p> <ul> <li>support MAGIC_SYMLINK (via follow_symlink flag on Magic constructor)</li> <li>correctly throw FileNotFoundException depending on flag</li> </ul> <p>Changes to 0.4.28:</p> <ul> <li>support "magic-1.dll" on Windows, which is produced by vcpkg</li> <li>add python 3.10 to tox config</li> <li>update test for upstream gzip extensions</li> </ul> <p>Changes to 0.4.27:</p> <ul> <li>remove spurious pyproject.toml that breaks source builds</li> </ul> <p>Changes to 0.4.26:</p> <ul> <li>Use tox for all multi-version testing</li> <li>Fix use of pytest, use it via tox</li> </ul> <p>Changes to 0.4.25:</p> <ul> <li>Support os.PathLike values in Magic.from_file and magic.from_file</li> <li>Handle some versions of libmagic that return mime string without charset</li> <li>Fix tests for file 5.41</li> <li>Include typing stub in package</li> </ul> <p>Changes to 0.4.24:</p> <ul> <li>Fix regression in library loading on some Alpine docker images.</li> </ul> <p>Changes to 0.4.23</p> <ul> <li>Include a <code>py.typed</code> sentinal to enable type checking</li> <li>Improve fix for attribute error during destruction</li> <li>Cleanup library loading logic</li> <li>Add new homebrew library dir for OSX</li> </ul> <p>Changes to 0.4.21, 0.4.22</p> <ul> <li>Unify dll loader between the standard and compat library, fixing load failures on some previously supported platforms.</li> </ul> <p>Changes to 0.4.20</p> <ul> <li>merge in a compatibility layer for the upstream libmagic python binding. Since both this package and that one are called 'magic', this compat layer removes a very common source of runtime errors. Use of that libmagic API will produce a deprecation warning.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ahupp/python-magic/commit/b443195104d89363b93a547584c1a12fce3b57ec"><code>b443195</code></a> bump version to remove accidental pyproject.toml in sdist</li> <li><a href="https://github.com/ahupp/python-magic/commit/73e98a5d0de8da9f660ea501e335aec8cdd27333"><code>73e98a5</code></a> update CHANGELOG</li> <li><a href="https://github.com/ahupp/python-magic/commit/65a971f17942d4b6610efc40d5c698b3241baa39"><code>65a971f</code></a> update to 0.4.26</li> <li><a href="https://github.com/ahupp/python-magic/commit/51e34d2b8b84f1a582b4dbbfa3693957ddc3f48a"><code>51e34d2</code></a> use tox for all the multi-version testing</li> <li><a href="https://github.com/ahupp/python-magic/commit/585373b5d952e579a9f7bd8f6418ca0bfd6a5e35"><code>585373b</code></a> rename test to match standard naming rules, so pytest finds it: <a href="https://docs">https://docs</a>....</li> <li><a href="https://github.com/ahupp/python-magic/commit/de97f00b128b04de65af2c480c411f4e6d0527b3"><code>de97f00</code></a> less surprising use of abspath</li> <li><a href="https://github.com/ahupp/python-magic/commit/7e760728889b3d3928310a453ebe3383adb37984"><code>7e76072</code></a> correctly find path to testdata when running from root</li> <li><a href="https://github.com/ahupp/python-magic/commit/6b34bde052be74334dad71963d92a1c49eecd168"><code>6b34bde</code></a> improve test script name clarity; expand test docs; cleanup docker run script</li> <li><a href="https://github.com/ahupp/python-magic/commit/0fb1922da4a7b27bd19b75a03dca2f51bff4362f"><code>0fb1922</code></a> include typing stubs in package, bump to 0.4.25</li> <li><a href="https://github.com/ahupp/python-magic/commit/f8e5ca3f04988a8e41a209ece4d3a4d862b714ae"><code>f8e5ca3</code></a> Merge pull request <a href="https://redirect.github.com/ahupp/python-magic/issues/257">#257</a> from vivienm/master</li> <li>Additional commits viewable in <a href="https://github.com/ahupp/python-magic/compare/0.4.18...0.4.27">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps postgres from 16.0 to 16.1. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-qemu-action/releases">docker/setup-qemu-action's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <ul> <li>Node 20 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.308.0">Actions Runner v2.308.0</a> or later) by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/102">docker/setup-qemu-action#102</a></li> <li>Bump <code>@actions/core</code> from 1.10.0 to 1.10.1 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/103">docker/setup-qemu-action#103</a></li> <li>Bump semver from 6.3.0 to 6.3.1 in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/89">docker/setup-qemu-action#89</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v2.2.0...v3.0.0">https://github.com/docker/setup-qemu-action/compare/v2.2.0...v3.0.0</a></p> <h2>v2.2.0</h2> <ul> <li>Trim off spaces in <code>platforms</code> input by <a href="https://github.com/Chocobo1"><code>@Chocobo1</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/64">docker/setup-qemu-action#64</a></li> <li>Switch to actions-toolkit implementation by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/setup-qemu-action/pull/70">docker/setup-qemu-action#70</a> <a href="https://redirect.github.com/docker/setup-qemu-action/pull/80">docker/setup-qemu-action#80</a> <a href="https://redirect.github.com/docker/setup-qemu-action/pull/83">docker/setup-qemu-action#83</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v2.1.0...v2.2.0">https://github.com/docker/setup-qemu-action/compare/v2.1.0...v2.2.0</a></p> <h2>v2.1.0</h2> <ul> <li>Use context for inputs by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> (<a href="https://redirect.github.com/docker/setup-qemu-action/issues/62">#62</a>)</li> <li>Use built-in <code>getExecOutput</code> by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> (<a href="https://redirect.github.com/docker/setup-qemu-action/issues/61">#61</a>)</li> <li>Remove workaround for <code>setOutput</code> by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> (<a href="https://redirect.github.com/docker/setup-qemu-action/issues/63">#63</a>)</li> <li>Bump <code>@actions/core</code> from 1.6.0 to 1.10.0 (<a href="https://redirect.github.com/docker/setup-qemu-action/issues/54">#54</a> <a href="https://redirect.github.com/docker/setup-qemu-action/issues/58">#58</a> <a href="https://redirect.github.com/docker/setup-qemu-action/issues/59">#59</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-qemu-action/compare/v2.0.0...v2.1.0">https://github.com/docker/setup-qemu-action/compare/v2.0.0...v2.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-qemu-action/commit/68827325e0b33c7199eb31dd4e31fbe9023e06e3"><code>6882732</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/103">#103</a> from docker/dependabot/npm_and_yarn/actions/core-1.10.1</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/183f4af5043c24c5dcd58e6e9868b7df0a201a17"><code>183f4af</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/f17493529ee8f8b9fd58ed31aa1e9816c8345eb8"><code>f174935</code></a> build(deps): bump <code>@actions/core</code> from 1.10.0 to 1.10.1</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/2e423eb50075d10a6af463e39e267d4057cc07bb"><code>2e423eb</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/89">#89</a> from docker/dependabot/npm_and_yarn/semver-6.3.1</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/ecc406afa7d79acce0ed8a04bb5eb086136fd000"><code>ecc406a</code></a> Bump semver from 6.3.0 to 6.3.1</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/12dec5e201ab2f6dbea47c28f4a138590189069a"><code>12dec5e</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-qemu-action/issues/102">#102</a> from crazy-max/update-node20</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/c29b31213096fed2f8b8b36e66385d52653bf332"><code>c29b312</code></a> chore: node 20 as default runtime</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/34ae628c8f4fb0d5c8921b9a0ffa9dcf66120c07"><code>34ae628</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/1f3d2e1ac09548bbfb7d44b1809ac66e3d551ea4"><code>1f3d2e1</code></a> chore: fix author in package.json</li> <li><a href="https://github.com/docker/setup-qemu-action/commit/277dbe8c9c1990b42dc38cb1f35a593889a31a62"><code>277dbe8</code></a> vendor: bump <code>@docker/actions-toolkit</code> from 0.3.0 to 0.12.0</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-qemu-action/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <ul> <li>Node 20 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.308.0">Actions Runner v2.308.0</a> or later) by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/593">docker/login-action#593</a></li> <li>Bump <code>@actions/core</code> from 1.10.0 to 1.10.1 in <a href="https://redirect.github.com/docker/login-action/pull/598">docker/login-action#598</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.410.0 in <a href="https://redirect.github.com/docker/login-action/pull/555">docker/login-action#555</a> <a href="https://redirect.github.com/docker/login-action/pull/560">docker/login-action#560</a> <a href="https://redirect.github.com/docker/login-action/pull/582">docker/login-action#582</a> <a href="https://redirect.github.com/docker/login-action/pull/599">docker/login-action#599</a></li> <li>Bump semver from 6.3.0 to 6.3.1 in <a href="https://redirect.github.com/docker/login-action/pull/556">docker/login-action#556</a></li> <li>Bump https-proxy-agent to 7.0.2 <a href="https://redirect.github.com/docker/login-action/pull/561">docker/login-action#561</a> <a href="https://redirect.github.com/docker/login-action/pull/588">docker/login-action#588</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v2.2.0...v3.0.0">https://github.com/docker/login-action/compare/v2.2.0...v3.0.0</a></p> <h2>v2.2.0</h2> <ul> <li>Switch to actions-toolkit implementation by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/409">docker/login-action#409</a> <a href="https://redirect.github.com/docker/login-action/pull/470">docker/login-action#470</a> <a href="https://redirect.github.com/docker/login-action/pull/476">docker/login-action#476</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.347.1 in <a href="https://redirect.github.com/docker/login-action/pull/524">docker/login-action#524</a> <a href="https://redirect.github.com/docker/login-action/pull/364">docker/login-action#364</a> <a href="https://redirect.github.com/docker/login-action/pull/363">docker/login-action#363</a></li> <li>Bump minimatch from 3.0.4 to 3.1.2 in <a href="https://redirect.github.com/docker/login-action/pull/354">docker/login-action#354</a></li> <li>Bump json5 from 2.2.0 to 2.2.3 in <a href="https://redirect.github.com/docker/login-action/pull/378">docker/login-action#378</a></li> <li>Bump http-proxy-agent from 5.0.0 to 7.0.0 in <a href="https://redirect.github.com/docker/login-action/pull/509">docker/login-action#509</a></li> <li>Bump https-proxy-agent from 5.0.1 to 7.0.0 in <a href="https://redirect.github.com/docker/login-action/pull/508">docker/login-action#508</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v2.1.0...v2.2.0">https://github.com/docker/login-action/compare/v2.1.0...v2.2.0</a></p> <h2>v2.1.0</h2> <ul> <li>Ensure AWS temp credentials are redacted in workflow logs by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> (<a href="https://redirect.github.com/docker/login-action/issues/275">#275</a>)</li> <li>Bump <code>@actions/core</code> from 1.6.0 to 1.10.0 (<a href="https://redirect.github.com/docker/login-action/issues/252">#252</a> <a href="https://redirect.github.com/docker/login-action/issues/292">#292</a>)</li> <li>Bump <code>@aws-sdk/client-ecr</code> from 3.53.0 to 3.186.0 (<a href="https://redirect.github.com/docker/login-action/issues/298">#298</a>)</li> <li>Bump <code>@aws-sdk/client-ecr-public</code> from 3.53.0 to 3.186.0 (<a href="https://redirect.github.com/docker/login-action/issues/299">#299</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v2.0.0...v2.1.0">https://github.com/docker/login-action/compare/v2.0.0...v2.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/343f7c4344506bcbf9b4de18042ae17996df046d"><code>343f7c4</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/599">#599</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li> <li><a href="https://github.com/docker/login-action/commit/aad0f974f21dc644b324e9fa84c4e364f62acbe6"><code>aad0f97</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/2e0cd391447ec1a654ce199502a5d596fad131a2"><code>2e0cd39</code></a> build(deps): bump the aws-sdk-dependencies group with 2 updates</li> <li><a href="https://github.com/docker/login-action/commit/203bc9c4eff55a7fac1552bc4811dc0ea4814f2e"><code>203bc9c</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/588">#588</a> from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li> <li><a href="https://github.com/docker/login-action/commit/2199648fc889a2592472959743a8e7d4423bcb29"><code>2199648</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/b489376173c4ff2c6e783dcb597ba8eff69245fe"><code>b489376</code></a> build(deps): bump the proxy-agent-dependencies group with 1 update</li> <li><a href="https://github.com/docker/login-action/commit/7c309e74e68d0a0055fd02607b10b3d96510544c"><code>7c309e7</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/598">#598</a> from docker/dependabot/npm_and_yarn/actions/core-1.10.1</li> <li><a href="https://github.com/docker/login-action/commit/0ccf222961de35820c1704a0293ca7483b07d065"><code>0ccf222</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/56d703e106032867ad04c1e54d781c209f451e26"><code>56d703e</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/597">#597</a> from docker/dependabot/github_actions/aws-actions/con...</li> <li><a href="https://github.com/docker/login-action/commit/24d3b3519e6e369d4d0a307a02881c2f81318560"><code>24d3b35</code></a> build(deps): bump <code>@actions/core</code> from 1.10.0 to 1.10.1</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jonschlinkert/word-wrap/releases">word-wrap's releases</a>.</em></p> <blockquote> <h2>1.2.4</h2> <h2>What's Changed</h2> <ul> <li>Remove default indent by <a href="https://github.com/mohd-akram"><code>@mohd-akram</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li> <li>🔒fix: CVE 2023 26115 (2) by <a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li> <li>:lock: fix: CVE-2023-26115 by <a href="https://github.com/aashutoshrathi"><code>@aashutoshrathi</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li> <li>chore: publish workflow by <a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/42">jonschlinkert/word-wrap#42</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mohd-akram"><code>@mohd-akram</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li> <li><a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li> <li><a href="https://github.com/aashutoshrathi"><code>@aashutoshrathi</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/f64b188c7261d26b99e1e2075d6b12f21798e83a"><code>f64b188</code></a> run verb to generate README</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/03ea08256ba0c8e8b02b1b304f0f5bd2b1863207"><code>03ea082</code></a> Merge pull request <a href="https://redirect.github.com/jonschlinkert/word-wrap/issues/42">#42</a> from jonschlinkert/chore/publish-workflow</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/420dce9a2412b21881202b73a3c34f0edc53cb2e"><code>420dce9</code></a> Merge pull request <a href="https://redirect.github.com/jonschlinkert/word-wrap/issues/41">#41</a> from jonschlinkert/fix/CVE-2023-26115-2</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/bfa694edf55bb84ff84512f13da6d68bf7593f06"><code>bfa694e</code></a> Update .github/workflows/publish.yml</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/ace0b3c78f81aaf43040bab3bc91d3c5546d3fd2"><code>ace0b3c</code></a> chore: bump version to 1.2.4</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/6fd727594676f3e1b196b08a320908bec2f4ca02"><code>6fd7275</code></a> chore: add publish workflow</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/30d6daf60fce429f5f559252fa86ee78200652c4"><code>30d6daf</code></a> chore: fix test</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/655929cabea6299dddf3b4a21fc3713fca701b48"><code>655929c</code></a> chore: remove package-lock</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/49e08bbc32a84da5d79e6b7e0fa74ff6217f6d81"><code>49e08bb</code></a> chore: added an additional testcase</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/9f626935f3fac6ec0f3c4b26baea4eb9740d9645"><code>9f62693</code></a> fix: cve 2023-26115</li> <li>Additional commits viewable in <a href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jaxs88/datatracker/network/alerts). </details>
Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.12.0 to 1.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ncipollo/release-action/releases">ncipollo/release-action's releases</a>.</em></p> <blockquote> <h2>v1.13.0</h2> <h2>What's Changed</h2> <ul> <li>Fixed <a href="https://redirect.github.com/ncipollo/release-action/issues/357">#357</a> - we now use a <code>ReadStream</code> for artifacts which will hopefully prevent them from being loaded entirely into memory before being uploaded.</li> <li>Bump json5 from 2.2.1 to 2.2.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/296">ncipollo/release-action#296</a></li> <li>Bump typescript from 4.9.3 to 4.9.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/293">ncipollo/release-action#293</a></li> <li>Bump <code>@types/node</code> from 18.11.10 to 18.11.18 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/292">ncipollo/release-action#292</a></li> <li>Bump glob and <code>@types/glob</code> by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/304">ncipollo/release-action#304</a></li> <li>Bump typescript from 4.9.4 to 4.9.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/305">ncipollo/release-action#305</a></li> <li>Bump jest-circus from 29.3.1 to 29.4.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/306">ncipollo/release-action#306</a></li> <li>Bump jest-circus from 29.4.1 to 29.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/318">ncipollo/release-action#318</a></li> <li>Bump <code>@types/node</code> from 18.11.18 to 18.15.11 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/319">ncipollo/release-action#319</a></li> <li>Readme: update checkout to v3 by <a href="https://github.com/SpencerIsGiddy"><code>@SpencerIsGiddy</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/303">ncipollo/release-action#303</a></li> <li>Bump typescript from 4.9.5 to 5.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/320">ncipollo/release-action#320</a></li> <li>Bump glob from 8.1.0 to 9.3.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/321">ncipollo/release-action#321</a></li> <li>Bump <code>@types/jest</code> from 29.5.0 to 29.5.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/326">ncipollo/release-action#326</a></li> <li>Bump glob from 9.3.2 to 10.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/330">ncipollo/release-action#330</a></li> <li>Bump ts-jest from 29.0.5 to 29.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/329">ncipollo/release-action#329</a></li> <li>Bump typescript from 5.0.3 to 5.0.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/327">ncipollo/release-action#327</a></li> <li>Bump <code>@types/jest</code> from 29.5.1 to 29.5.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/337">ncipollo/release-action#337</a></li> <li>Bump glob from 10.2.2 to 10.2.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/339">ncipollo/release-action#339</a></li> <li>Bump <code>@types/node</code> from 18.15.11 to 20.3.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/340">ncipollo/release-action#340</a></li> <li>Bump ts-jest from 29.1.0 to 29.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/345">ncipollo/release-action#345</a></li> <li>Bump glob from 10.2.6 to 10.3.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/342">ncipollo/release-action#342</a></li> <li>Bump typescript from 5.0.4 to 5.1.6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/343">ncipollo/release-action#343</a></li> <li>Bump <code>@types/node</code> from 18.15.11 to 20.3.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ncipollo/release-action/pull/341">ncipollo/release-action#341</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SpencerIsGiddy"><code>@SpencerIsGiddy</code></a> made their first contribution in <a href="https://redirect.github.com/ncipollo/release-action/pull/303">ncipollo/release-action#303</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ncipollo/release-action/compare/v1...v1.13.0">https://github.com/ncipollo/release-action/compare/v1...v1.13.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ncipollo/release-action/commit/6c75be85e571768fa31b40abf38de58ba0397db5"><code>6c75be8</code></a> Fixes <a href="https://redirect.github.com/ncipollo/release-action/issues/357">#357</a> Use a read stream for artifacts.</li> <li><a href="https://github.com/ncipollo/release-action/commit/2d19fb459bc3363e985ff6a38af3a1465d3115b0"><code>2d19fb4</code></a> Remove lib</li> <li><a href="https://github.com/ncipollo/release-action/commit/9cfd0835c65b0d60645c29ca13ed25b2fb4b88a5"><code>9cfd083</code></a> Remove explicit typescript src setting</li> <li><a href="https://github.com/ncipollo/release-action/commit/37c87f6b53fb46d40450c3cac428aa83c8d0055f"><code>37c87f6</code></a> Fixes <a href="https://redirect.github.com/ncipollo/release-action/issues/349">#349</a> Copy description of makeLatest legacy from github docs</li> <li><a href="https://github.com/ncipollo/release-action/commit/7288236d4e7192904c2d85c5db0bf2ade30b63d3"><code>7288236</code></a> build dep updates</li> <li><a href="https://github.com/ncipollo/release-action/commit/384ae1fad62cb3c29969d6033f6029426b97c6ee"><code>384ae1f</code></a> Bump <code>@types/node</code> from 18.15.11 to 20.3.3 (<a href="https://redirect.github.com/ncipollo/release-action/issues/341">#341</a>)</li> <li><a href="https://github.com/ncipollo/release-action/commit/934783784570983d9d7eee406551e327bdd772e0"><code>9347837</code></a> Bump typescript from 5.0.4 to 5.1.6 (<a href="https://redirect.github.com/ncipollo/release-action/issues/343">#343</a>)</li> <li><a href="https://github.com/ncipollo/release-action/commit/893ce36b2e94cb5dcd6f06cc5dbaafa17629aac3"><code>893ce36</code></a> Bump glob from 10.2.6 to 10.3.1 (<a href="https://redirect.github.com/ncipollo/release-action/issues/342">#342</a>)</li> <li><a href="https://github.com/ncipollo/release-action/commit/c07e9f4dffba6f528c813871198f0a785233e93c"><code>c07e9f4</code></a> Bump ts-jest from 29.1.0 to 29.1.1 (<a href="https://redirect.github.com/ncipollo/release-action/issues/345">#345</a>)</li> <li><a href="https://github.com/ncipollo/release-action/commit/cb77c9ee9cfdaee84a9a48f7b8b9194e9a7a3594"><code>cb77c9e</code></a> Revert "Bump <code>@types/node</code> from 18.15.11 to 20.3.2 (<a href="https://redirect.github.com/ncipollo/release-action/issues/340">#340</a>)"</li> <li>Additional commits viewable in <a href="https://github.com/ncipollo/release-action/compare/v1.12.0...v1.13.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
…action (#21) Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jonschlinkert/word-wrap/releases">word-wrap's releases</a>.</em></p> <blockquote> <h2>1.2.4</h2> <h2>What's Changed</h2> <ul> <li>Remove default indent by <a href="https://github.com/mohd-akram"><code>@mohd-akram</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li> <li>🔒fix: CVE 2023 26115 (2) by <a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li> <li>:lock: fix: CVE-2023-26115 by <a href="https://github.com/aashutoshrathi"><code>@aashutoshrathi</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li> <li>chore: publish workflow by <a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/42">jonschlinkert/word-wrap#42</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mohd-akram"><code>@mohd-akram</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li> <li><a href="https://github.com/OlafConijn"><code>@OlafConijn</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li> <li><a href="https://github.com/aashutoshrathi"><code>@aashutoshrathi</code></a> made their first contribution in <a href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/f64b188c7261d26b99e1e2075d6b12f21798e83a"><code>f64b188</code></a> run verb to generate README</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/03ea08256ba0c8e8b02b1b304f0f5bd2b1863207"><code>03ea082</code></a> Merge pull request <a href="https://redirect.github.com/jonschlinkert/word-wrap/issues/42">#42</a> from jonschlinkert/chore/publish-workflow</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/420dce9a2412b21881202b73a3c34f0edc53cb2e"><code>420dce9</code></a> Merge pull request <a href="https://redirect.github.com/jonschlinkert/word-wrap/issues/41">#41</a> from jonschlinkert/fix/CVE-2023-26115-2</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/bfa694edf55bb84ff84512f13da6d68bf7593f06"><code>bfa694e</code></a> Update .github/workflows/publish.yml</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/ace0b3c78f81aaf43040bab3bc91d3c5546d3fd2"><code>ace0b3c</code></a> chore: bump version to 1.2.4</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/6fd727594676f3e1b196b08a320908bec2f4ca02"><code>6fd7275</code></a> chore: add publish workflow</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/30d6daf60fce429f5f559252fa86ee78200652c4"><code>30d6daf</code></a> chore: fix test</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/655929cabea6299dddf3b4a21fc3713fca701b48"><code>655929c</code></a> chore: remove package-lock</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/49e08bbc32a84da5d79e6b7e0fa74ff6217f6d81"><code>49e08bb</code></a> chore: added an additional testcase</li> <li><a href="https://github.com/jonschlinkert/word-wrap/commit/9f626935f3fac6ec0f3c4b26baea4eb9740d9645"><code>9f62693</code></a> fix: cve 2023-26115</li> <li>Additional commits viewable in <a href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jaxs88/datatracker/network/alerts). </details>
…20) Bumps [semver](https://github.com/npm/node-semver) from 6.3.0 to 6.3.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/node-semver/releases">semver's releases</a>.</em></p> <blockquote> <h2>v6.3.1</h2> <h2><a href="https://github.com/npm/node-semver/compare/v6.3.0...v6.3.1">6.3.1</a> (2023-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"><code>928e56d</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/591">#591</a> better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/591">#591</a>) (<a href="https://github.com/lukekarrys"><code>@lukekarrys</code></a>, <a href="https://github.com/joaomoreno"><code>@joaomoreno</code></a>, <a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/node-semver/blob/v6.3.1/CHANGELOG.md">semver's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/node-semver/compare/v6.3.0...v6.3.1">6.3.1</a> (2023-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"><code>928e56d</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/591">#591</a> better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/591">#591</a>) (<a href="https://github.com/lukekarrys"><code>@lukekarrys</code></a>, <a href="https://github.com/joaomoreno"><code>@joaomoreno</code></a>, <a href="https://github.com/nicolo-ribaudo"><code>@nicolo-ribaudo</code></a>)</li> </ul> <h2>6.2.0</h2> <ul> <li>Coerce numbers to strings when passed to semver.coerce()</li> <li>Add <code>rtl</code> option to coerce from right to left</li> </ul> <h2>6.1.3</h2> <ul> <li>Handle X-ranges properly in includePrerelease mode</li> </ul> <h2>6.1.2</h2> <ul> <li>Do not throw when testing invalid version strings</li> </ul> <h2>6.1.1</h2> <ul> <li>Add options support for semver.coerce()</li> <li>Handle undefined version passed to Range.test</li> </ul> <h2>6.1.0</h2> <ul> <li>Add semver.compareBuild function</li> <li>Support <code>*</code> in semver.intersects</li> </ul> <h2>6.0</h2> <ul> <li> <p>Fix <code>intersects</code> logic.</p> <p>This is technically a bug fix, but since it is also a change to behavior that may require users updating their code, it is marked as a major version increment.</p> </li> </ul> <h2>5.7</h2> <ul> <li>Add <code>minVersion</code> method</li> </ul> <h2>5.6</h2> <ul> <li>Move boolean <code>loose</code> param to an options object, with backwards-compatibility protection.</li> <li>Add ability to opt out of special prerelease version handling with the <code>includePrerelease</code> option flag.</li> </ul> <h2>5.5</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/node-semver/commit/44d27bc007e4827e9b797d6145f1076c127005f2"><code>44d27bc</code></a> chore: release 6.3.1</li> <li><a href="https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c"><code>928e56d</code></a> fix: better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/591">#591</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/39f632690ea5b1b0d64fa913aa0f96f42b9bde32"><code>39f6326</code></a> chore: <code>@npmcli/template-oss</code><a href="https://github.com/4"><code>@4</code></a>.16.0</li> <li>See full diff in <a href="https://github.com/npm/node-semver/compare/v6.3.0...v6.3.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~lukekarrys">lukekarrys</a>, a new releaser for semver since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jaxs88/datatracker/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/node-semver/releases">semver's releases</a>.</em></p> <blockquote> <h2>v5.7.2</h2> <h2><a href="https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2">5.7.2</a> (2023-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0"><code>2f8fd41</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/585">#585</a> better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/585">#585</a>) (<a href="https://github.com/joaomoreno"><code>@joaomoreno</code></a>, <a href="https://github.com/lukekarrys"><code>@lukekarrys</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md">semver's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2">5.7.2</a> (2023-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0"><code>2f8fd41</code></a> <a href="https://redirect.github.com/npm/node-semver/pull/585">#585</a> better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/585">#585</a>) (<a href="https://github.com/joaomoreno"><code>@joaomoreno</code></a>, <a href="https://github.com/lukekarrys"><code>@lukekarrys</code></a>)</li> </ul> <h2>5.7</h2> <ul> <li>Add <code>minVersion</code> method</li> </ul> <h2>5.6</h2> <ul> <li>Move boolean <code>loose</code> param to an options object, with backwards-compatibility protection.</li> <li>Add ability to opt out of special prerelease version handling with the <code>includePrerelease</code> option flag.</li> </ul> <h2>5.5</h2> <ul> <li>Add version coercion capabilities</li> </ul> <h2>5.4</h2> <ul> <li>Add intersection checking</li> </ul> <h2>5.3</h2> <ul> <li>Add <code>minSatisfying</code> method</li> </ul> <h2>5.2</h2> <ul> <li>Add <code>prerelease(v)</code> that returns prerelease components</li> </ul> <h2>5.1</h2> <ul> <li>Add Backus-Naur for ranges</li> <li>Remove excessively cute inspection methods</li> </ul> <h2>5.0</h2> <ul> <li>Remove AMD/Browserified build artifacts</li> <li>Fix ltr and gtr when using the <code>*</code> range</li> <li>Fix for range <code>*</code> with a prerelease identifier</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/node-semver/commit/f8cc313550691a50d9662d8c94f0c033717efd7d"><code>f8cc313</code></a> chore: release 5.7.2</li> <li><a href="https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0"><code>2f8fd41</code></a> fix: better handling of whitespace (<a href="https://redirect.github.com/npm/node-semver/issues/585">#585</a>)</li> <li><a href="https://github.com/npm/node-semver/commit/deb5ad51bf58868fa243c1683775305fe9e0e365"><code>deb5ad5</code></a> chore: <code>@npmcli/template-oss</code><a href="https://github.com/4"><code>@4</code></a>.16.0</li> <li>See full diff in <a href="https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~lukekarrys">lukekarrys</a>, a new releaser for semver since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jaxs88/datatracker/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>3.1.4</h2> <h2>What's Changed</h2> <ul> <li>build(deps-dev): bump <code>@types/node</code> from 18.15.12 to 18.16.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/970">codecov/codecov-action#970</a></li> <li>Fix typo in README.md by <a href="https://github.com/hisaac"><code>@hisaac</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/967">codecov/codecov-action#967</a></li> <li>fix: add back in working dir by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/971">codecov/codecov-action#971</a></li> <li>fix: CLI option names for uploader by <a href="https://github.com/kleisauke"><code>@kleisauke</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/969">codecov/codecov-action#969</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 18.16.3 to 20.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/975">codecov/codecov-action#975</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 20.1.0 to 20.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/979">codecov/codecov-action#979</a></li> <li>build(deps-dev): bump <code>@types/node</code> from 20.1.2 to 20.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/981">codecov/codecov-action#981</a></li> <li>release: 3.1.4 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/983">codecov/codecov-action#983</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/hisaac"><code>@hisaac</code></a> made their first contribution in <a href="https://redirect.github.com/codecov/codecov-action/pull/967">codecov/codecov-action#967</a></li> <li><a href="https://github.com/kleisauke"><code>@kleisauke</code></a> made their first contribution in <a href="https://redirect.github.com/codecov/codecov-action/pull/969">codecov/codecov-action#969</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4">https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md">codecov/codecov-action's changelog</a>.</em></p> <blockquote> <h2>3.1.4</h2> <h3>Fixes</h3> <ul> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/967">#967</a> Fix typo in README.md</li> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/971">#971</a> fix: add back in working dir</li> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/969">#969</a> fix: CLI option names for uploader</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/970">#970</a> build(deps-dev): bump <code>@types/node</code> from 18.15.12 to 18.16.3</li> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/979">#979</a> build(deps-dev): bump <code>@types/node</code> from 20.1.0 to 20.1.2</li> <li><a href="https://redirect.github.com/codecov/codecov-action/issues/981">#981</a> build(deps-dev): bump <code>@types/node</code> from 20.1.2 to 20.1.4</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codecov/codecov-action/commit/eaaf4bedf32dbdc6b720b63067d99c4d77d6047d"><code>eaaf4be</code></a> release: 3.1.4 (<a href="https://redirect.github.com/codecov/codecov-action/issues/983">#983</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/c2ab9ab2e177cef69bda1961b1e66eaf868c790b"><code>c2ab9ab</code></a> build(deps-dev): bump <code>@types/node</code> from 20.1.2 to 20.1.4 (<a href="https://redirect.github.com/codecov/codecov-action/issues/981">#981</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/49c20db375a254995f6d63d5dc03aa04e04a42ea"><code>49c20db</code></a> build(deps-dev): bump <code>@types/node</code> from 20.1.0 to 20.1.2 (<a href="https://redirect.github.com/codecov/codecov-action/issues/979">#979</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/cf8e3e4262e63ac53fdbc0ea1b6dd69cb03c974b"><code>cf8e3e4</code></a> build(deps-dev): bump <code>@types/node</code> from 18.16.3 to 20.1.0 (<a href="https://redirect.github.com/codecov/codecov-action/issues/975">#975</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/1c34415a066a16afff4060670e36707eba85ccbd"><code>1c34415</code></a> fix: CLI option names for uploader (<a href="https://redirect.github.com/codecov/codecov-action/issues/969">#969</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/b4dfea724ff5d8e51bb4dffdc668c0d964df6103"><code>b4dfea7</code></a> fix: add back in working dir (<a href="https://redirect.github.com/codecov/codecov-action/issues/971">#971</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/5bf250470ea3e4bf9456e73127015eb78ce4c280"><code>5bf2504</code></a> Fix typo in README.md (<a href="https://redirect.github.com/codecov/codecov-action/issues/967">#967</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/1dd0ce34be62fac4f3b714f860c0b0c520acd35d"><code>1dd0ce3</code></a> build(deps-dev): bump <code>@types/node</code> from 18.15.12 to 18.16.3 (<a href="https://redirect.github.com/codecov/codecov-action/issues/970">#970</a>)</li> <li>See full diff in <a href="https://github.com/codecov/codecov-action/compare/v3.1.3...v3.1.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
…16) Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.23.0 to 1.24.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's releases</a>.</em></p> <blockquote> <h2>Slack Send V1.24.0</h2> <h2>What's Changed</h2> <ul> <li>Add in testing instructions for maintainer's guide and standardize bullet point punctuation by <a href="https://github.com/hello-ashleyintech"><code>@hello-ashleyintech</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/140">slackapi/slack-github-action#140</a></li> <li>Added checks for bot token and webhook url length by <a href="https://github.com/koki-develop"><code>@koki-develop</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/124">slackapi/slack-github-action#124</a></li> <li>Add channel_id output parameter by <a href="https://github.com/maso7"><code>@maso7</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/149">slackapi/slack-github-action#149</a></li> <li><a href="https://redirect.github.com/slackapi/slack-github-action/issues/171">#171</a> Update Technique 2 to use Actions context instead of values property by <a href="https://github.com/mwbrooks"><code>@mwbrooks</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/172">slackapi/slack-github-action#172</a></li> <li>Fix interpolation of variables in file-based payloads by <a href="https://github.com/filmaj"><code>@filmaj</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/200">slackapi/slack-github-action#200</a></li> <li>Update README.md with variable usage and links to example workflows by <a href="https://github.com/filmaj"><code>@filmaj</code></a> in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/201">slackapi/slack-github-action#201</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/koki-develop"><code>@koki-develop</code></a> made their first contribution in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/124">slackapi/slack-github-action#124</a></li> <li><a href="https://github.com/maso7"><code>@maso7</code></a> made their first contribution in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/149">slackapi/slack-github-action#149</a></li> <li><a href="https://github.com/mwbrooks"><code>@mwbrooks</code></a> made their first contribution in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/172">slackapi/slack-github-action#172</a></li> <li><a href="https://github.com/hnarimiya"><code>@hnarimiya</code></a> made their first contribution in <a href="https://redirect.github.com/slackapi/slack-github-action/pull/200">slackapi/slack-github-action#200</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/slackapi/slack-github-action/compare/v1.23.0...v1.24.0">https://github.com/slackapi/slack-github-action/compare/v1.23.0...v1.24.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slackapi/slack-github-action/commit/e28cf165c92ffef168d23c5c9000cffc8a25e117"><code>e28cf16</code></a> Automatic compilation</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/f07b4a2d031f34c3b178cc488f68dd4ea0595c1d"><code>f07b4a2</code></a> bump package version to v1.24.0</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/2c8b741a8271a726a82b26bab167236b2b395f48"><code>2c8b741</code></a> Update README.md with variable usage and links to example workflows. (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/201">#201</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/81a1dc0cd9125fcd4ebb978042f69ebdf636faf4"><code>81a1dc0</code></a> Fixed to be able to use env of Step (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/200">#200</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/4eb73136079188d577719fa06040cb68f1d2ef56"><code>4eb7313</code></a> Bump sinon from 15.0.3 to 15.0.4 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/194">#194</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/17394c7ff6cc7e12009d6a3ca833aa7c6f6e08dd"><code>17394c7</code></a> Bump eslint-plugin-jsdoc from 40.1.1 to 43.1.1 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/195">#195</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/2746ea822228ddb38878b2bc08e6f1444dab944e"><code>2746ea8</code></a> Bump axios from 1.3.4 to 1.4.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/196">#196</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/1b89efce668bcf845ffcf8b566c702be34f6d7dc"><code>1b89efc</code></a> Bump eslint from 8.37.0 to 8.39.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/197">#197</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/0e608ca73820eccb299d9937bfcc14fa56bbe5f8"><code>0e608ca</code></a> Bump eslint-plugin-jsdoc from 40.0.0 to 40.1.1 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/188">#188</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/02b50ad38bb77b61c5b207f5d5d8f5dbdf82b353"><code>02b50ad</code></a> Bump eslint from 8.35.0 to 8.37.0 (<a href="https://redirect.github.com/slackapi/slack-github-action/issues/189">#189</a>)</li> <li>Additional commits viewable in <a href="https://github.com/slackapi/slack-github-action/compare/v1.23.0...v1.24.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
…,<8.0 (#12) Updates the requirements on [coverage](https://github.com/nedbat/coveragepy) to permit the latest version. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage's changelog</a>.</em></p> <blockquote> <h2>Version 7.2.4 — 2023-04-28</h2> <p>PyCon 2023 sprint fixes!</p> <ul> <li> <p>Fix: with <code>relative_files = true</code>, specifying a specific file to include or omit wouldn't work correctly (<code>issue 1604</code><em>). This is now fixed, with testing help by <code>Marc Gibbons <pull 1608_></code></em>.</p> </li> <li> <p>Fix: the XML report would have an incorrect <code><source></code> element when using relative files and the source option ended with a slash (<code>issue 1541</code><em>). This is now fixed, thanks to <code>Kevin Brown-Silva <pull 1608_></code></em>.</p> </li> <li> <p>When the HTML report location is printed to the terminal, it's now a terminal-compatible URL, so that you can click the location to open the HTML file in your browser. Finishes <code>issue 1523</code>_ thanks to <code>Ricardo Newbery <pull 1613_></code>_.</p> </li> <li> <p>Docs: a new :ref:<code>Migrating page <migrating></code> with details about how to migrate between major versions of coverage.py. It currently covers the wildcard changes in 7.x. Thanks, <code>Brian Grohe <pull 1610_></code>_.</p> </li> </ul> <p>.. _issue 1523: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1523">nedbat/coveragepy#1523</a> .. _issue 1541: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1541">nedbat/coveragepy#1541</a> .. _issue 1604: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1604">nedbat/coveragepy#1604</a> .. _pull 1608: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1608">nedbat/coveragepy#1608</a> .. _pull 1609: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1609">nedbat/coveragepy#1609</a> .. _pull 1610: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1610">nedbat/coveragepy#1610</a> .. _pull 1613: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1613">nedbat/coveragepy#1613</a></p> <p>.. _changes_7-2-3:</p> <h2>Version 7.2.3 — 2023-04-06</h2> <ul> <li> <p>Fix: the :ref:<code>config_run_sigterm</code> setting was meant to capture data if a process was terminated with a SIGTERM signal, but it didn't always. This was fixed thanks to <code>Lewis Gaul <pull 1600_></code><em>, closing <code>issue 1599</code></em>.</p> </li> <li> <p>Performance: HTML reports with context information are now much more compact. File sizes are typically as small as one-third the previous size, but can be dramatically smaller. This closes <code>issue 1584</code>_ thanks to <code>Oleh Krehel <pull 1587_></code>_.</p> </li> <li> <p>Development dependencies no longer use hashed pins, closing <code>issue 1592</code>_.</p> </li> </ul> <p>.. _issue 1584: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1584">nedbat/coveragepy#1584</a> .. _pull 1587: <a href="https://redirect.github.com/nedbat/coveragepy/pull/1587">nedbat/coveragepy#1587</a> .. _issue 1592: <a href="https://redirect.github.com/nedbat/coveragepy/issues/1592">nedbat/coveragepy#1592</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nedbat/coveragepy/commit/90736643823bb2c6fa978ca30c054ac8848df318"><code>9073664</code></a> docs: sample HTML for 7.2.4</li> <li><a href="https://github.com/nedbat/coveragepy/commit/1f5beeb706696f91955b68723fd8b8ffc7570f3c"><code>1f5beeb</code></a> docs: prep for 7.2.4</li> <li><a href="https://github.com/nedbat/coveragepy/commit/ee6506f08e5de7e568751f78e8be82fc2a102ffe"><code>ee6506f</code></a> fix: specific files to include/omit should match even with relative files <a href="https://redirect.github.com/nedbat/coveragepy/issues/1604">#1604</a>.</li> <li><a href="https://github.com/nedbat/coveragepy/commit/3344a78595f5158a7412b9a6c70ceb9a56df437b"><code>3344a78</code></a> tet: add tests to reproduce <a href="https://redirect.github.com/nedbat/coveragepy/issues/1604">#1604</a> (<a href="https://redirect.github.com/nedbat/coveragepy/issues/1609">#1609</a>)</li> <li><a href="https://github.com/nedbat/coveragepy/commit/23717cefa18bc1f15e83ca313268a02930a0409a"><code>23717ce</code></a> docs: alphabetize the contributors</li> <li><a href="https://github.com/nedbat/coveragepy/commit/81bee6c1766b265230c0c0a0cd03335519a1f8f4"><code>81bee6c</code></a> Add more contributors from the Git log</li> <li><a href="https://github.com/nedbat/coveragepy/commit/43085b9d5378ef343ac214fd15e8f7c2ceffa95f"><code>43085b9</code></a> refactor: parametrize a test for <a href="https://redirect.github.com/nedbat/coveragepy/issues/1608">#1608</a></li> <li><a href="https://github.com/nedbat/coveragepy/commit/df1bf082f242cccdcb342000525bede537b95935"><code>df1bf08</code></a> fix: source paths with trailing slashes causing inconsistent sources in XML r...</li> <li><a href="https://github.com/nedbat/coveragepy/commit/74b1758bb138355d5036631d8c92e7b0871339b2"><code>74b1758</code></a> test: refactor and add a test of terminal link text</li> <li><a href="https://github.com/nedbat/coveragepy/commit/3e9205fc3a0c69976e3ca0afb9e43dd5677853b3"><code>3e9205f</code></a> build: fine-tune the messages we get from metacov</li> <li>Additional commits viewable in <a href="https://github.com/nedbat/coveragepy/compare/coverage-4.5.4...7.2.4">compare view</a></li> </ul> </details> <br /> You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
Updates the requirements on [lxml](https://github.com/lxml/lxml) to permit the latest version. - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-4.8.0...lxml-5.0.0) --- updated-dependencies: - dependency-name: lxml dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): update lxml requirement from <5,>=4.8.0 to >=4.8.0,<6
…41.0,<5.0 (#10) chore(deps): Update selenium requirement from <4.0,>=3.141.0 to >=3.141.0,<5.0
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.2 to 4.1.1. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3.0.2...v4.1.1) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.3.9 to 4.5.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.2 to 4.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v4.1.1</h2> <ul> <li>Fix transient request timeouts <a href="https://redirect.github.com/actions/download-artifact/issues/249">actions/download-artifact#249</a></li> <li>Bump <code>@actions/artifacts</code> to latest version</li> </ul> <h2>v4.1.0</h2> <h2>What's Changed</h2> <ul> <li>Some cleanup by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/247">actions/download-artifact#247</a></li> <li>Fix default for run-id by <a href="https://github.com/stchr"><code>@stchr</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/252">actions/download-artifact#252</a></li> <li>Support pattern matching to filter artifacts & merge to same directory by <a href="https://github.com/robherley"><code>@robherley</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/259">actions/download-artifact#259</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/stchr"><code>@stchr</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/252">actions/download-artifact#252</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v4...v4.1.0">https://github.com/actions/download-artifact/compare/v4...v4.1.0</a></p> <h2>v4.0.0</h2> <h2>What's Changed</h2> <p>The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.</p> <p>ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads <em>must</em> use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.</p> <p>For more information, please see:</p> <ol> <li>The <a href="https://github.blog/changelog/2023-12-14-github-actions-artifacts-v4-is-now-generally-available/">changelog</a> post.</li> <li>The <a href="https://github.com/actions/download-artifact/blob/main/README.md">README</a>.</li> <li>The <a href="https://github.com/actions/upload-artifact/blob/main/docs/MIGRATION.md">migration documentation</a>.</li> <li>As well as the underlying npm package, <a href="https://github.com/actions/toolkit/tree/main/packages/artifact"><code>@actions/artifact</code></a> documentation.</li> </ol> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bflad"><code>@bflad</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/194">actions/download-artifact#194</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v3...v4.0.0">https://github.com/actions/download-artifact/compare/v3...v4.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/6b208ae046db98c579e8a3aa621ab581ff575935"><code>6b208ae</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/274">#274</a> from actions/vmjoseph/timeout-patch</li> <li><a href="https://github.com/actions/download-artifact/commit/6c5b5806e1d833ffbeb6c412b38ba07d67086dc6"><code>6c5b580</code></a> only adding updated license</li> <li><a href="https://github.com/actions/download-artifact/commit/5f5015dc38f8eb6cafa9c4d68689495abffbea38"><code>5f5015d</code></a> readding index</li> <li><a href="https://github.com/actions/download-artifact/commit/1fddaaf0f1912c34f984d46c39e99a66afa07172"><code>1fddaaf</code></a> Revert "updating licenses"</li> <li><a href="https://github.com/actions/download-artifact/commit/8aa9e2115bb091db1962857dc393a054568a7851"><code>8aa9e21</code></a> Revert "updating dist"</li> <li><a href="https://github.com/actions/download-artifact/commit/657edd9b813fc9cdb0cddf8601de283f4ecea661"><code>657edd9</code></a> updating licenses</li> <li><a href="https://github.com/actions/download-artifact/commit/555a2fc1299fb63c5a4e673a65c8b9e6e3474b22"><code>555a2fc</code></a> updating dist</li> <li><a href="https://github.com/actions/download-artifact/commit/4fc4d70d4c55025435f9bfd763515cecf048fc86"><code>4fc4d70</code></a> updating lock</li> <li><a href="https://github.com/actions/download-artifact/commit/072ac9dcebef67fdbbc9612b2879103e0e877f16"><code>072ac9d</code></a> updating version no</li> <li><a href="https://github.com/actions/download-artifact/commit/038dc0329f0e804ae981db8af9f43b00a55b10de"><code>038dc03</code></a> updating version no</li> <li>Additional commits viewable in <a href="https://github.com/actions/download-artifact/compare/v3.0.2...v4.1.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.3.9 to 4.5.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>create-vite@4.4.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@4.4.1/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@4.4.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@4.4.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v4.5.2/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->4.5.2 (2024-01-19)<!-- raw HTML omitted --></h2> <ul> <li>fix: fs deny for case insensitive systems (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653">#15653</a>) (<a href="https://github.com/vitejs/vite/commit/eeec23b">eeec23b</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15653">#15653</a></li> </ul> <h2><!-- raw HTML omitted -->4.5.1 (2023-12-04)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15223">#15223</a>, proxy html path should be encoded (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15226">#15226</a>) (<a href="https://github.com/vitejs/vite/commit/41bb354">41bb354</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15223">#15223</a> <a href="https://redirect.github.com/vitejs/vite/issues/15226">#15226</a></li> </ul> <h2>4.5.0 (2023-10-18)</h2> <ul> <li>feat: backport mdx as known js source (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14560">#14560</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14670">#14670</a>) (<a href="https://github.com/vitejs/vite/commit/45595ef">45595ef</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14560">#14560</a> <a href="https://redirect.github.com/vitejs/vite/issues/14670">#14670</a></li> <li>feat: scan .marko files (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14669">#14669</a>) (<a href="https://github.com/vitejs/vite/commit/ed7bdc5">ed7bdc5</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14669">#14669</a></li> <li>feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14498">#14498</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14668">#14668</a>) (<a href="https://github.com/vitejs/vite/commit/520139c">520139c</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14498">#14498</a> <a href="https://redirect.github.com/vitejs/vite/issues/14668">#14668</a></li> </ul> <h2><!-- raw HTML omitted -->4.4.11 (2023-10-05)<!-- raw HTML omitted --></h2> <ul> <li>revert: "fix: use string manipulation instead of regex to inject esbuild helpers (<a href="https://github.com/vitejs/vite/commit/54e1275">54e1275</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14094">#14094</a></li> </ul> <h2><!-- raw HTML omitted -->4.4.10 (2023-10-03)<!-- raw HTML omitted --></h2> <ul> <li>fix: add source map to Web Workers (fix <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14216">#14216</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14217">#14217</a>) (<a href="https://github.com/vitejs/vite/commit/df6f32f">df6f32f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14216">#14216</a> <a href="https://redirect.github.com/vitejs/vite/issues/14217">#14217</a></li> <li>fix: handle errors during <code>hasWorkspacePackageJSON</code> function (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14394">#14394</a>) (<a href="https://github.com/vitejs/vite/commit/6f6e5de">6f6e5de</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14394">#14394</a></li> <li>fix: handle sourcemap correctly when multiple line import exists (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14232">#14232</a>) (<a href="https://github.com/vitejs/vite/commit/218861f">218861f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14232">#14232</a></li> <li>fix: if host is specified check whether it is valid (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14013">#14013</a>) (<a href="https://github.com/vitejs/vite/commit/b1b816a">b1b816a</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14013">#14013</a></li> <li>fix: include <code>vite/types/*</code> in exports field (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14296">#14296</a>) (<a href="https://github.com/vitejs/vite/commit/40e99a1">40e99a1</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14296">#14296</a></li> <li>fix: initWasm options should be optional (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14152">#14152</a>) (<a href="https://github.com/vitejs/vite/commit/119c074">119c074</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14152">#14152</a></li> <li>fix: restore builtins list (<a href="https://github.com/vitejs/vite/commit/f8b9adb">f8b9adb</a>)</li> <li>fix: use string manipulation instead of regex to inject esbuild helpers (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14094">#14094</a>) (<a href="https://github.com/vitejs/vite/commit/128ad8f">128ad8f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14094">#14094</a></li> <li>fix: ws never connects after restarting server if server.hmr.server is set (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14127">#14127</a>) (<a href="https://github.com/vitejs/vite/commit/441642e">441642e</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14127">#14127</a></li> <li>fix(analysis): warnings for dynamic imports that use static template literals (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14458">#14458</a>) (<a href="https://github.com/vitejs/vite/commit/0c6d289">0c6d289</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14458">#14458</a></li> <li>fix(cli): convert special base (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14283">#14283</a>) (<a href="https://github.com/vitejs/vite/commit/d4bc0fb">d4bc0fb</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14283">#14283</a></li> <li>fix(css): remove pure css chunk sourcemap (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14290">#14290</a>) (<a href="https://github.com/vitejs/vite/commit/cd7e033">cd7e033</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14290">#14290</a></li> <li>fix(css): reset render cache on renderStart (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14326">#14326</a>) (<a href="https://github.com/vitejs/vite/commit/d334b3d">d334b3d</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14326">#14326</a></li> <li>fix(glob): trigger HMR for glob in a package (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14117">#14117</a>) (<a href="https://github.com/vitejs/vite/commit/0f582bf">0f582bf</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14117">#14117</a></li> <li>fix(import-analysis): preserve importedUrls import order (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14465">#14465</a>) (<a href="https://github.com/vitejs/vite/commit/269aa43">269aa43</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14465">#14465</a></li> <li>fix(manifest): preserve pure css chunk assets (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14297">#14297</a>) (<a href="https://github.com/vitejs/vite/commit/3d63ae6">3d63ae6</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14297">#14297</a></li> <li>fix(optimizer): define crawlDeps after scanProcessing and optimizationResult are complete (fix <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/1428">#1428</a> (<a href="https://github.com/vitejs/vite/commit/fcaf749">fcaf749</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14284">#14284</a> <a href="https://redirect.github.com/vitejs/vite/issues/14285">#14285</a></li> <li>fix(resolve): support submodules of optional peer deps (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14489">#14489</a>) (<a href="https://github.com/vitejs/vite/commit/104971d">104971d</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14489">#14489</a></li> <li>fix(vite): precisely check if files are in dirs (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14241">#14241</a>) (<a href="https://github.com/vitejs/vite/commit/c4758d1">c4758d1</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14241">#14241</a></li> <li>feat: improve deno and bun support (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14379">#14379</a>) (<a href="https://github.com/vitejs/vite/commit/8bc1f9d">8bc1f9d</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/14379">#14379</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/d0360c12476ccc61e9e78c500ed1bd74ed65a2cf"><code>d0360c1</code></a> release: v4.5.2</li> <li><a href="https://github.com/vitejs/vite/commit/eeec23bbc9d476c54a3a6d36e78455867185a7cb"><code>eeec23b</code></a> fix: fs deny for case insensitive systems (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653">#15653</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/c0751156f0c015f6dbd5c7a58afd8cff2fde1a2f"><code>c075115</code></a> release: v4.5.1</li> <li><a href="https://github.com/vitejs/vite/commit/41bb3546a839ed2c822367b3933770c0693a0fb0"><code>41bb354</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15223">#15223</a>, proxy html path should be encoded (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15226">#15226</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/055d2b86b0543a7c1a2a4d5bc7298af62bc51fa7"><code>055d2b8</code></a> release: v4.5.0</li> <li><a href="https://github.com/vitejs/vite/commit/ed7bdc520679577509466ce808a1794ba8377204"><code>ed7bdc5</code></a> feat: scan .marko files (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14669">#14669</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/45595ef82f786d6b321ce002f2cd4951659114ac"><code>45595ef</code></a> feat: backport mdx as known js source (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14560">#14560</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/14670">#14670</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/520139cdff88ae3a0bf89692133cce3e453cb29a"><code>520139c</code></a> feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions...</li> <li><a href="https://github.com/vitejs/vite/commit/b50db04a5a47aa855cae6ced026290c2761ffa8d"><code>b50db04</code></a> release: v4.4.11</li> <li><a href="https://github.com/vitejs/vite/commit/54e12755c06a3ac8622ed1da5706fef68b69c50e"><code>54e1275</code></a> revert: "fix: use string manipulation instead of regex to inject esbuild helpers</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v4.5.2/packages/vite">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Jaxs88/datatracker/network/alerts). </details>
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3 to 4. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@v3...v4) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/dependency-review-action from 3 to 4.
Release notes
Sourced from actions/dependency-review-action's releases.
... (truncated)
Commits
4cd9eb2Updating docs to point to v4.4901385bump to 4.0.0dbf82a4Merge pull request #639 from takost/takost/update-to-node-2078aeb2aMerge pull request #663 from actions/dependabot/npm_and_yarn/typescript-eslin...4e51000Bump@typescript-eslint/parserfrom 6.18.0 to 6.18.19560737Merge pull request #661 from actions/dependabot/npm_and_yarn/typescript-eslin...4125f47Merge pull request #660 from actions/dependabot/npm_and_yarn/types/node-16.18.7007cc93eBump@typescript-eslint/eslint-pluginfrom 6.18.0 to 6.18.1e2c203bBump@types/nodefrom 16.18.62 to 16.18.70f0b304dMerge pull request #653 from actions/dependabot/npm_and_yarn/got-14.0.0You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)