Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump the dev group with 5 updates #37

Merged
merged 1 commit into from
Jan 26, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2025

Bumps the dev group with 5 updates:

Package From To
@tauri-apps/cli 2.2.4 2.2.5
@types/node 22.10.6 22.10.7
lefthook 1.10.4 1.10.9
postcss 8.5.0 8.5.1
vite 5.4.11 5.4.13

Updates @tauri-apps/cli from 2.2.4 to 2.2.5

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.2.5

[2.2.5]

Dependencies

Commits

Updates @types/node from 22.10.6 to 22.10.7

Commits

Updates lefthook from 1.10.4 to 1.10.9

Release notes

Sourced from lefthook's releases.

v1.10.9

Changelog

v1.10.8

Changelog

  • dcbf0d4db2ba809eb5a569c15d1239ea964d07a7 feat: add custom plain templates (#930)
  • 4711444fd6532d17e8971d30c3e4d7e96d2b02fb fix: unique names for nested operations (#931)

v1.10.7

Changelog

v1.10.6

Changelog

  • 3d0f05df1d3b6c4c8c2d8f9a98faeacd56da84aa chore: cleanup dotfiles
  • 9873cee940a4b84e9fd288994769b273170b7ddc chore: remove .lefthook.toml
  • 6d6977f4f01e6da99e7a077838265f0d0f3ab280 feat: add schema.json to npm packages (#928)
  • 66219211c5b0ebd681438ff3cb8e28a46de1a652 fix: increase timeout for self-update to 2 mins
  • e8bf5945477cd2f2c609a8bc46a2b98cb92417bb fix: typo
  • ce2058dc0fd563dcd084e38c2127d869020b7e2a fix: use lefthook option in ghost hook too (#929)

v1.10.5

Changelog

  • ab93bf19f2414cb8a12eb064874aa89e0d14ecf8 chore: update config template with new jobs
  • 9e023651f1fae3cca553815e8c1ec9eecd76f1fe feat: add lefthook option for custom path or command (#927)
Changelog

Sourced from lefthook's changelog.

1.10.9 (2025-01-20)

  • fix: make uninstall --remove-configs description more accurate (#934) by @​scop

1.10.8 (2025-01-17)

1.10.7 (2025-01-15)

1.10.5 (2025-01-14)

  • feat: add lefthook option for custom path or command (#927) by @​mrexox
  • chore: update config template with new jobs by @​mrexox
Commits
  • 40e97fc 1.10.9: fix help message
  • fbf3e2c docs: make uninstall --remote-configs description more accurate (#934)
  • b223bf4 docs: update "added in" for templates setting
  • e33dae5 1.10.8: add replacable templates configuration
  • dcbf0d4 feat: add custom plain templates (#930)
  • 4711444 fix: unique names for nested operations (#931)
  • 82f1c78 1.10.7: fix for NPM add postinstall scripts
  • 1fcc785 1.10.6: use lefthook option in prepare-commit-msg hook too
  • ce2058d fix: use lefthook option in ghost hook too (#929)
  • e8bf594 fix: typo
  • Additional commits viewable in compare view

Updates postcss from 8.5.0 to 8.5.1

Release notes

Sourced from postcss's releases.

8.5.1

Changelog

Sourced from postcss's changelog.

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

8.4.48

  • Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

  • Removed debug code.

8.4.46

  • Fixed Cannot read properties of undefined (reading 'before').

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.

8.4.44

  • Another way to fix markClean is not a function error.

8.4.43

  • Fixed markClean is not a function error.

8.4.42

  • Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

8.4.40

  • Moved to getter/setter in nodes types to help Sass team (by @​nex3).

8.4.39

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.

8.4.36

  • Fixed original.column are not numbers error on broken previous source map.

8.4.35

... (truncated)

Commits

Updates vite from 5.4.11 to 5.4.13

Release notes

Sourced from vite's releases.

v5.4.13

Please refer to CHANGELOG.md for details.

v5.4.12

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.13 (2025-01-20)

5.4.12 (2025-01-20)

  • fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
  • fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
  • fix: verify token for HMR WebSocket connection (b71a5c8)
  • chore: add deps update changelog (ecd2375)
Commits
  • a1824c5 release: v5.4.13
  • 5946215 fix: try parse server.origin URL (#19241)
  • f428aa9 release: v5.4.12
  • 9da4abc fix!: check host header to prevent DNS rebinding attacks and introduce `serve...
  • b71a5c8 fix: verify token for HMR WebSocket connection
  • dfea38f fix!: default server.cors: false to disallow fetching from untrusted origins
  • ecd2375 chore: add deps update changelog
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.2.4` | `2.2.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.10.6` | `22.10.7` |
| [lefthook](https://github.com/evilmartians/lefthook) | `1.10.4` | `1.10.9` |
| [postcss](https://github.com/postcss/postcss) | `8.5.0` | `8.5.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.11` | `5.4.13` |


Updates `@tauri-apps/cli` from 2.2.4 to 2.2.5
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.2.4...@tauri-apps/cli-v2.2.5)

Updates `@types/node` from 22.10.6 to 22.10.7
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `lefthook` from 1.10.4 to 1.10.9
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v1.10.4...v1.10.9)

Updates `postcss` from 8.5.0 to 8.5.1
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.0...8.5.1)

Updates `vite` from 5.4.11 to 5.4.13
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.13/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.13/packages/vite)

---
updated-dependencies:
- dependency-name: "@tauri-apps/cli"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: lefthook
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 20, 2025
@gvieira18 gvieira18 merged commit 5623ca8 into main Jan 26, 2025
5 checks passed
@gvieira18 gvieira18 deleted the dependabot_npm_and_yarn_dev-96e47b56c3 branch January 26, 2025 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant