Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #92

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 3, 2021

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@hapi/hapi (source) 20.1.3 -> 20.3.0 age adoption passing confidence devDependencies minor
@hapi/hoek 9.2.0 -> 9.3.0 age adoption passing confidence dependencies minor
ad-m/github-push-action v0.6.0 -> v0.8.0 age adoption passing confidence action minor
coveralls 1.0.6 -> 1.0.7 age adoption passing confidence orb patch
debug 4.3.1 -> 4.3.7 age adoption passing confidence dependencies patch
eslint (source) 7.27.0 -> 7.32.0 age adoption passing confidence devDependencies minor
eslint-config-goodway 3.2.1 -> 3.3.2 age adoption passing confidence devDependencies minor
eslint-plugin-import 2.23.4 -> 2.31.0 age adoption passing confidence devDependencies minor
jest (source) 27.0.3 -> 27.5.1 age adoption passing confidence devDependencies minor
node (source) 14.17.0 -> 14.21.3 age adoption passing confidence minor

Release Notes

hapijs/hapi (@​hapi/hapi)

v20.3.0

Compare Source

v20.2.2

Compare Source

v20.2.1

Compare Source

v20.2.0

Compare Source

Features

  • Add optional payload authentication skip on credentials injection #​4214 (#​4274)

Bug

Miscellaneous

Credits

Thanks @​devinivy, @​jonathansamines and @​Nargonath for contributing.

v20.1.5

Compare Source

v20.1.4

Compare Source

hapijs/hoek (@​hapi/hoek)

v9.3.0

Compare Source

v9.2.1

Compare Source

ad-m/github-push-action (ad-m/github-push-action)

v0.8.0

Compare Source

What's Changed

Full Changelog: ad-m/github-push-action@v0.7.0...v0.8.0

v0.7.0

Compare Source

What's Changed

New Contributors

Full Changelog: ad-m/github-push-action@v0.6.0...v0.7.0

debug-js/debug (debug)

v4.3.7

Compare Source

What's Changed

Full Changelog: debug-js/debug@4.3.6...4.3.7

v4.3.6

Compare Source

What's Changed

New Contributors

Full Changelog: debug-js/debug@4.3.5...4.3.6

v4.3.5

Compare Source

Patch

Thank you @​calvintwr for the fix.

v4.3.4

Compare Source

What's Changed

New Contributors

Full Changelog: debug-js/debug@4.3.3...4.3.4

v4.3.3

Compare Source

Patch Release 4.3.3

This is a documentation-only release. Further, the repository was transferred. Please see notes below.

Thank you to @​taylor1791 and @​kristofkalocsai for their contributions.


Repository Migration Information

I've formatted this as a FAQ, please feel free to open an issue for any additional question and I'll add the response here.

Q: What impact will this have on me?

In most cases, you shouldn't notice any change.

The only exception I can think of is if you pull code directly from https://github.com/visionmedia/debug, e.g. via a "debug": "visionmedia/debug"-type version entry in your package.json - in which case, you should still be fine due to the automatic redirection Github sets up, but you should also update any references as soon as possible.

Q: What are the security implications of this change?

If you pull code directly from the old URL, you should update the URL to https://github.com/debug-js/debug as soon as possible. The old organization has many approved owners and thus a new repository could (in theory) be created at the old URL, circumventing Github's automatic redirect that is in place now and serving malicious code. I (@​qix-) also wouldn't have access to that repository, so while I don't think it would happen, it's still something to consider.

Even in such a case, however, the officially released package on npm (debug) would not be affected. That package is still very much under control (even more than it used to be).

Q: What should I do if I encounter an issue related to the migration?

Search the issues first to see if someone has already reported it, and then open a new issue if someone has not.

Q: Why was this done as a 'patch' release? Isn't this breaking?

No, it shouldn't be breaking. The package on npm shouldn't be affected (aside from this patch release) and any references to the old repository should automatically redirect.

Thus, according to all of the "APIs" (loosely put) involved, nothing should have broken.

I understand there are a lot of edge cases so please open issues as needed so I can assist in any way necessary.

Q: Why was the repository transferred?

I'll just list them off in no particular order.

  • The old organization was defunct and abandoned.
  • I was not an owner of the old organization and thus could not ban the non-trivial amount of spam users or the few truly abusive users from the org. This hindered my ability to properly maintain this package.
  • The debug ecosystem intends to grow beyond a single package, and since new packages could not be created in the old org (nor did it make sense for them to live there), a new org made the most sense - especially from a security point of view.
  • The old org has way, way too many approved members with push access, for which there was nothing I could do. This presented a pretty sizable security risk given that many packages in recent years have fallen victim to backdoors and the like due to lax security access.
Q: Was this approved?

Yes.[archive]

Q: Do I need to worry about another migration sometime in the future?

No.

v4.3.2

Compare Source

Patch release 4.3.2

  • Caches enabled statuses on a per-logger basis to speed up .enabled checks (#​799)

Thank you @​omg!

eslint/eslint (eslint)

v7.32.0

Compare Source

v7.31.0

Compare Source

v7.30.0

Compare Source

v7.29.0

Compare Source

v7.28.0

Compare Source

GoodwayGroup/eslint-config-goodway (eslint-config-goodway)

v3.3.2

Compare Source

Bug Fixes
  • MS-52 updating JSX settings for React 17+ (#​56)

v3.3.1

Compare Source

Bug Fixes
  • Resolve plugin version conflict. All rules covered by airbnb. (#​55)
Chore
  • release: v3.3.1

v3.3.0

Compare Source

Bug Fixes
  • deps: update dependency eslint-plugin-import to v2.23.2 (#​27)
  • deps: update dependency eslint-plugin-import to v2.23.0 (#​26)
Features
  • SDG-6 Standardize eslint (#​46)
import-js/eslint-plugin-import (eslint-plugin-import)

v2.31.0

Compare Source

Added
Fixed
Changed

v2.30.0

Compare Source

Added
Fixed
Changed
  • [Docs] no-extraneous-dependencies: Make glob pattern description more explicit ([#​2944], thanks [@​mulztob])
  • [no-unused-modules]: add console message to help debug [#​2866]
  • [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap ([#​2982], thanks [@​soryy708])
  • [Refactor] ExportMap: separate ExportMap instance from its builder logic ([#​2985], thanks [@​soryy708])
  • [Docs] order: Add a quick note on how unbound imports and --fix ([#​2640], thanks [@​minervabot])
  • [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) ([#​2987], thanks [@​joeyguerra])
  • [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
  • [Refactor] exportMapBuilder: avoid hoisting ([#​2989], thanks [@​soryy708])
  • [Refactor] ExportMap: extract "builder" logic to separate files ([#​2991], thanks [@​soryy708])
  • [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option ([#​3036], thanks [@​liby])
  • [readme] Clarify how to install the plugin ([#​2993], thanks [@​jwbth])

v2.29.1

Compare Source

Fixed

v2.29.0

Compare Source

Added

v2.28.1

Compare Source

Fixed
Changed
  • [Docs] remove duplicate fixable notices in docs ([#​2850], thanks [[@&

Configuration

📅 Schedule: Branch creation - "after 3am and before 10pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Updating dependencies label Jun 3, 2021
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 807b1e9 to 4d2be1f Compare June 4, 2021 23:07
@renovate renovate bot changed the title chore(deps): update dependency jest to v27.0.4 chore(deps): update all non-major dependencies Jun 4, 2021
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 50a5d53 to 1e9d9c5 Compare June 15, 2021 13:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 153706e to ce89454 Compare June 22, 2021 11:31
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 6da2e38 to 471f730 Compare July 5, 2021 17:07
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 471f730 to 6f68581 Compare July 17, 2021 22:46
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 00cbab6 to df4a05e Compare July 30, 2021 23:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3c7420d to ee93333 Compare March 7, 2022 10:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ee93333 to 3cd9235 Compare March 26, 2022 13:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3cd9235 to ac2249e Compare April 25, 2022 02:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ac2249e to b42c864 Compare May 16, 2022 02:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b42c864 to c0dab90 Compare June 18, 2022 20:50
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 032e298 to 04e651b Compare March 16, 2023 10:11
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 04e651b to 8520003 Compare July 28, 2023 06:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 8520003 to 3e117d3 Compare August 18, 2023 23:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 62a31f6 to 970b655 Compare April 30, 2024 21:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 970b655 to fbcd8e5 Compare May 31, 2024 14:04
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from fbcd8e5 to b6ca322 Compare July 27, 2024 12:37
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 758e0a1 to def164b Compare September 6, 2024 01:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from def164b to adbd086 Compare October 3, 2024 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Updating dependencies
Development

Successfully merging this pull request may close these issues.

0 participants