Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2023

Bumps lerna from 4.0.0 to 6.6.1.

Release notes

Sourced from lerna's releases.

6.6.1

6.6.1 (2023-03-24)

Bug Fixes

  • build-metadata reference in lerna schema (e2349ad)
  • deps: update to rimraf v4, remove path-exists (#3616) (2f2ee2a)
  • ensure rimraf bin dir can always be resolved (#3614) (0fe5faf)
  • handle trailing commas and comments in lerna.json files (#3603) (b826398)
  • lerna schema type for contents should be string (1625757)
  • publish: use updated version with pnpm workspaces (#3606) (cd7ad21)

6.6.0

6.6.0 (2023-03-23)

Bug Fixes

  • correct links to command docs (#3598) (b90b684)
  • publish: ensure zero exit code when EWORKINGTREE warning occurs (#3327) (9c00a33)
  • update troubleshooting.md typo (#3581) (a174cd7)
  • update arborist package to get rid of deprecated warning (#3559) (aff38a7)
  • version: handle deps property missing due to outdated lockfile (#3549) (fdbbab9)
  • version: update yarn lock for versions of yarn >= 2.0.0 (#3555) (ce2ceca)

Features

  • add @​lerna/legacy-package-management package (#3602) (4a03dd5)
  • version: add user-defined build metadata to bumped packages (#2880) (0b0e2a6)

6.5.1

6.5.1 (2023-02-14)

Bug Fixes

  • add missing dependency on js-yaml (187f480)

6.5.0

6.5.0 (2023-02-13)

Bug Fixes

  • create: normalize quotes and indents in generated test and lib files (#3529) (ad39fe2)
  • repair: re-enable repair generators (#3497) (510c3e9)

... (truncated)

Changelog

Sourced from lerna's changelog.

6.6.1 (2023-03-24)

Bug Fixes

  • build-metadata reference in lerna schema (e2349ad)
  • deps: update to rimraf v4, remove path-exists (#3616) (2f2ee2a)
  • lerna schema type for contents should be string (1625757)

6.6.0 (2023-03-23)

Bug Fixes

  • update arborist package to get rid of deprecated warning (#3559) (aff38a7)

Features

  • add @​lerna/legacy-package-management package (#3602) (4a03dd5)
  • version: add user-defined build metadata to bumped packages (#2880) (0b0e2a6)

6.5.1 (2023-02-14)

Bug Fixes

  • add missing dependency on js-yaml (187f480)

6.5.0 (2023-02-13)

Features

  • publish: add --include-private option for testing private packages (#3503) (fa1f490)

6.4.1 (2023-01-12)

Bug Fixes

6.4.0 (2023-01-05)

Features

6.3.0 (2022-12-26)

Features

  • version: use npmClientArgs in npm install after lerna version (#3434) (e019e3f)

6.2.0 (2022-12-13)

... (truncated)

Commits
  • dbc6df8 chore(misc): publish 6.6.1
  • 2f2ee2a fix(deps): update to rimraf v4, remove path-exists (#3616)
  • 1625757 fix: lerna schema type for contents should be string
  • e2349ad fix: build-metadata reference in lerna schema
  • 43afbf8 chore(misc): publish 6.6.0
  • 4a03dd5 feat: add @​lerna/legacy-package-management package (#3602)
  • 4b045a1 chore: update workspace to latest, including jest 29 (#3577)
  • aff38a7 fix: update arborist package to get rid of deprecated warning (#3559)
  • 9eed42d chore(core): remove some ts-ignore comments and any types (#3556)
  • 0b0e2a6 feat(version): add user-defined build metadata to bumped packages (#2880)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jameshenry, a new releaser for lerna since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) from 4.0.0 to 6.6.1.
- [Release notes](https://github.com/lerna/lerna/releases)
- [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md)
- [Commits](https://github.com/lerna/lerna/commits/6.6.1/packages/lerna)

---
updated-dependencies:
- dependency-name: lerna
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from aleksaToljic as a code owner April 1, 2023 12:09
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2023
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎


👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

🚮 Removed packages: [email protected]

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 1, 2023

Superseded by #451.

@dependabot dependabot bot closed this Jun 1, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependabot_develop/lerna-6.6.1 branch June 1, 2023 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants