Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
@1stg/app-config (source) ^10.0.1 -> ^14.0.0 age confidence devDependencies major
@commitlint/cli (source) ^18.6.1 -> ^20.0.0 age confidence devDependencies major
@types/webpack (source) ^4.41.38 -> ^5.0.0 age confidence devDependencies major
actions/checkout v4 -> v5 age confidence action major
actions/setup-node v4 -> v5 age confidence action major
babel-loader ^8.3.0 -> ^10.0.0 age confidence devDependencies major
cross-env ^7.0.3 -> ^10.0.0 age confidence dependencies major
css-loader ^5.2.7 -> ^7.0.0 age confidence devDependencies major
eslint (source) ^8.56.0 -> ^9.0.0 age confidence devDependencies major
eslint-import-resolver-typescript ^3.6.1 -> ^4.0.0 age confidence devDependencies major
github/codeql-action v3 -> v4 age confidence action major
history ^4.10.1 -> ^5.0.0 age confidence dependencies major
koa-cash ^4.1.1 -> ^5.0.0 age confidence dependencies major
koa-logger ^3.2.1 -> ^4.0.0 age confidence dependencies major
lint-staged ^15.2.2 -> ^16.0.0 age confidence devDependencies major
lru-cache ^10.1.0 -> ^11.0.0 age confidence dependencies major
mini-css-extract-plugin ^1.6.2 -> ^2.0.0 age confidence devDependencies major
node (source) 16.20.2 -> 22.20.0 age confidence major
npm-run-all2 ^6.1.2 -> ^8.0.0 age confidence devDependencies major
postcss-loader ^4.3.0 -> ^8.0.0 age confidence devDependencies major
react (source) ^18.2.0 -> ^19.0.0 age confidence dependencies major
react-dom (source) ^18.2.0 -> ^19.0.0 age confidence dependencies major
react-router (source) ^5.3.4 -> ^7.0.0 age confidence dependencies major
react-router-dom (source) ^5.3.4 -> ^7.0.0 age confidence dependencies major
rimraf ^5.0.5 -> ^6.0.0 age confidence devDependencies major
sass-loader ^10.5.2 -> ^16.0.0 age confidence devDependencies major
serialize-javascript ^6.0.2 -> ^7.0.0 age confidence dependencies major
webpack ^4.47.0 -> ^5.0.0 age confidence devDependencies major
webpack-cli (source) ^4.10.0 -> ^6.0.0 age confidence devDependencies major
webpack-merge ^5.10.0 -> ^6.0.0 age confidence devDependencies major
yarn (source) 3.8.5 -> 4.10.3 age confidence packageManager major

Release Notes

1stG/configs (@​1stg/app-config)

v14.3.0

Compare Source

Minor Changes
Patch Changes

v14.2.0

Compare Source

Minor Changes
Patch Changes

v14.1.0

Compare Source

Minor Changes
Patch Changes

v14.0.0

Compare Source

Major Changes
Patch Changes

v13.1.0

Compare Source

Minor Changes
Patch Changes

v13.0.1

Compare Source

Patch Changes

v13.0.0

Compare Source

Major Changes
Patch Changes

v12.0.1

Compare Source

Patch Changes

v12.0.0

Compare Source

Major Changes
Patch Changes

v11.1.2

Compare Source

Patch Changes

v11.1.1

Compare Source

Patch Changes

v11.1.0

Compare Source

Minor Changes
Patch Changes

v11.0.3

Compare Source

Patch Changes

v11.0.2

Compare Source

Patch Changes

v11.0.1

Compare Source

Patch Changes

v11.0.0

Compare Source

Major Changes
Patch Changes
conventional-changelog/commitlint (@​commitlint/cli)

v20.1.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.0.0

Compare Source

Note: Version bump only for package @​commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

v19.8.1

Compare Source

Bug Fixes

v19.8.0

Compare Source

Performance Improvements
  • use node: prefix to bypass require.cache call for builtins (#​4302) (0cd8f41)

19.7.1 (2025-02-02)

Note: Version bump only for package @​commitlint/cli

19.6.1 (2024-12-15)

Note: Version bump only for package @​commitlint/cli

v19.7.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.6.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.6.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.5.0

Compare Source

Features

19.4.1 (2024-08-28)

Note: Version bump only for package @​commitlint/cli

v19.4.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.4.0

Compare Source

Features

v19.3.0

Compare Source

Note: Version bump only for package @​commitlint/cli

19.2.2 (2024-04-14)

Note: Version bump only for package @​commitlint/cli

19.2.1 (2024-03-19)

Note: Version bump only for package @​commitlint/cli

v19.2.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.2.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.2.0

Compare Source

Features
  • cli: introduce new --last flag, to stop recommending HEAD~1 (#​3916) (99f4f3f)

v19.1.0

Compare Source

Note: Version bump only for package @​commitlint/cli

19.0.3 (2024-02-28)

Note: Version bump only for package @​commitlint/cli

19.0.2 (2024-02-28)

Note: Version bump only for package @​commitlint/cli

19.0.1 (2024-02-27)

Bug Fixes
  • drop resolve-from, resolve-global and import-fresh, resolve global packages correctly (#​3939) (8793c63), closes #​3938

v19.0.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.0.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v19.0.1

Compare Source

Bug Fixes
  • drop resolve-from, resolve-global and import-fresh, resolve global packages correctly (#​3939) (8793c63), closes #​3938

v19.0.0

Compare Source

Reverts
  • Revert "chore!: minimum node version v20" (2816783)
BREAKING CHANGES
  • migrate to pure ESM

  • feat: migrate to pure ESM

  • chore: update snapshot

  • fix: load parserPreset with another await

  • test: migrate to vitest

  • test: remove no replacement --runInBand test-ci script

  • chore: fix code reviews

  • refactor(load): rewrite resolve logic

  • fix(config-nx-scopes): fix syntax error

  • feat(resolve-extends): add resolveFrom and loadParserPreset

  • feat(load): use resolveFrom and loadParserPreset from resolve-extends

  • test: include only @​commitlint/* packages src in coverage

  • test: explicit import vitest utilities

  • test: remove @​jest/globals from dependencies

  • fix(resolve-extends): resolveFrom output should be platform aware

  • test: restore NO_COLOR to test script

  • chore: fix linting issues

  • fix: should use fileURLToPath instead of pathname for Windows compatibility

  • Apply suggestions from code review

  • fix: should reuse cli instead call yargs()

  • feat(cli): set terminalWidth as wrap to avoid work break on help

  • Update .eslintrc.cjs

  • feat: migrate @​commitlint/config-conventional to pure ESM

18.6.1 (2024-02-13)

Note: Version bump only for package @​commitlint/cli

actions/checkout (actions/checkout)

v5

Compare Source

actions/setup-node (actions/setup-node)

v5

Compare Source

babel/babel-loader (babel-loader)

v10.0.0

Compare Source

What's Changed

Breaking Changes
  • bump node requirement to ^18.20.0 || ^20.10.0 || >=22.0.0 and webpack requirement to >= 5.61.0 by @​JLHwung in #​1026
  • breaking: use output.hashFunction as loader cache hasher by @​JLHwung in #​1027
New Features
Bug Fixes
Docs
Dependencies
Internal

New Contributors

Full Changelog: babel/babel-loader@v9.1.3...v10.0.0

v9.2.1

Compare Source

What's Changed

Full Changelog: babel/babel-loader@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed

Full Changelog: babel/babel-loader@v9.1.3...v9.2.0

v9.1.3

Compare Source

Security dependency updates
New Contributors

Full Changelog: babel/babel-loader@v9.1.2...v9.1.3

v9.1.2

Compare Source

9.1.1 was a broken release, it didn't include all the commits.

Dependencies updates

Misc

New Contributors

Full Changelog: babel/babel-loader@v9.1.0...v9.1.2

v9.1.1

Compare Source

v9.1.0

Compare Source

New features

Full Changelog: babel/babel-loader@v9.0.1...v9.1.0

v9.0.1

Compare Source

Bug Fixes

Full Changelog: babel/babel-loader@v9.0.0...v9.0.1

v9.0.0

Compare Source

What's Changed

  • update hash method mechanism so it doesn't fail on a fips enabled machine by @​darmbrust in #​939
  • Require babel ^7.12.0 and Node.js >= 14.15.0 versions by @​JLHwung in #​956
  • Remove dependency on loader-utils and drop webpack 4 support by @​nied in #​942

New Contributors

Full Changelog: babel/babel-loader@v8.2.5...v9.0.0

v8.4.1

Compare Source

What's Changed

Full Changelog: babel/babel-loader@v8.4.0...v8.4.1

v8.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v8.3.0...v8.4.0

kentcdodds/cross-env (cross-env)

v10.1.0

Compare Source

Features
  • add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

v10.0.0

Compare Source

TL;DR: You should probably not have to change anything if:

  • You're using a modern maintained version of Node.js (v20+ is tested)
  • You're only using the CLI (most of you are as that's the intended purpose)

In this release (which should have been v8 except I had some issues with automated releases 🙈), I've updated all the things and modernized the package. This happened in #​261

Was this needed? Not really, but I just thought it'd be fun to modernize this package.

Here's the highlights of what was done.

  • Replace Jest with Vitest for testing
  • Convert all source files from .js to .ts with proper TypeScript types
  • Use zshy for ESM-only builds (removes CJS support)
  • Adopt @​epic-web/config for TypeScript, ESLint, and Prettier
  • Update to Node.js >=20 requirement
  • Remove kcd-scripts dependency
  • Add comprehensive e2e tests with GitHub Actions matrix testing
  • Update GitHub workflow with caching and cross-platform testing
  • Modernize documentation and remove outdated sections
  • Update all dependencies to latest versions
  • Add proper TypeScript declarations and exports

The tool maintains its original functionality while being completely


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

changeset-bot bot commented Apr 1, 2025

⚠️ No Changeset found

Latest commit: ce43b84

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

vercel bot commented Apr 1, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
react-hackernews Error Error Oct 11, 2025 9:56am

Copy link

coderabbitai bot commented Apr 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

socket-security bot commented Apr 1, 2025

Copy link

socket-security bot commented Apr 6, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
safer-buffer@2.1.2 has Obfuscated code.

Confidence: 0.94

Location: Package overview

From: yarn.locknpm/safer-buffer@2.1.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/safer-buffer@2.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/all branch from 574d4b6 to 38ecf67 Compare May 2, 2025 09:51
@renovate renovate bot force-pushed the renovate/all branch from 38ecf67 to 3ab2bbd Compare May 2, 2025 19:23
@renovate renovate bot force-pushed the renovate/all branch from 3ab2bbd to d35b238 Compare May 10, 2025 17:51
@renovate renovate bot force-pushed the renovate/all branch from d35b238 to 0c84720 Compare May 14, 2025 23:20
@renovate renovate bot force-pushed the renovate/all branch from 0c84720 to 44e794a Compare May 16, 2025 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants