Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group in /npm_and_yarn/helpers with 4 updates #7598

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 19, 2023

Bumps the dependencies group in /npm_and_yarn/helpers with 4 updates: @npmcli/arborist, detect-indent, nock and @pnpm/lockfile-file.

Updates @npmcli/arborist from 6.2.7 to 6.3.0

Release notes

Sourced from @​npmcli/arborist's releases.

arborist: v6.3.0

6.3.0 (2023-07-05)

Features

Bug Fixes

Dependencies

arborist: v6.2.10

6.2.10 (2023-06-21)

Bug Fixes

arborist: v6.2.9

6.2.9 (2023-05-03)

Bug Fixes

Dependencies

arborist: v6.2.8

6.2.8 (2023-04-19)

Bug Fixes

Dependencies

Changelog

Sourced from @​npmcli/arborist's changelog.

6.3.0 (2023-07-05)

Features

Bug Fixes

Dependencies

6.2.10 (2023-06-21)

Bug Fixes

6.2.9 (2023-05-03)

Bug Fixes

Dependencies

6.2.8 (2023-04-19)

Bug Fixes

Dependencies

Commits

Updates detect-indent from 6.1.0 to 7.0.1

Release notes

Sourced from detect-indent's releases.

v7.0.1

  • Fix detecting the indent of files with many repeats after a single indent (#34) 477e390

sindresorhus/detect-indent@v7.0.0...v7.0.1

v7.0.0

Breaking

  • Require Node.js 12.20 429c145
  • This package is now pure ESM. Please read this.

sindresorhus/detect-indent@v6.1.0...v7.0.0

Commits

Updates nock from 13.3.0 to 13.3.2

Release notes

Sourced from nock's releases.

v13.3.2

13.3.2 (2023-07-13)

Bug Fixes

  • nock.removeInterceptor can remove the wrong Intercept (#2497) (92de0de)

v13.3.1

13.3.1 (2023-04-27)

Bug Fixes

Commits
  • 92de0de fix: nock.removeInterceptor can remove the wrong Intercept (#2497)
  • bd4783b ci(delivery): use Node LTS version (#2496)
  • dd15ba5 docs(README): add warning about incompatibility with fetch
  • ed91030 chore(deps-dev): bump semantic-release from 21.0.2 to 21.0.6
  • 0c9186d chore(deps-dev): bump @​sinonjs/fake-timers from 10.2.0 to 10.3.0
  • 880efed chore(deps-dev): bump typescript from 5.1.3 to 5.1.6
  • 6ae6e98 chore(deps-dev): bump sinon from 15.1.0 to 15.2.0
  • fa088a4 chore(deps-dev): bump @​definitelytyped/dtslint from 0.0.162 to 0.0.163
  • 8aab603 Push persisted interceptors to the end instead of ignore on remove (#2350)
  • 8a38f41 chore(deps-dev): bump eslint-config-standard from 17.0.0 to 17.1.0
  • Additional commits viewable in compare view

Updates @pnpm/lockfile-file from 8.1.1 to 8.1.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot dependabot bot requested a review from a team as a code owner July 19, 2023 18:29
@dependabot dependabot bot added dependencies javascript Dependabot pull requests that update Javascript code labels Jul 19, 2023
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn/helpers/dependencies-25f5e52b34 branch from 92f47f8 to 45bb242 Compare July 23, 2023 16:41
Bumps the dependencies group in /npm_and_yarn/helpers with 4 updates: [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist), [detect-indent](https://github.com/sindresorhus/detect-indent), [nock](https://github.com/nock/nock) and [@pnpm/lockfile-file](https://github.com/pnpm/pnpm).


Updates `@npmcli/arborist` from 6.2.7 to 6.3.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/v6.3.0/workspaces/arborist)

Updates `detect-indent` from 6.1.0 to 7.0.1
- [Release notes](https://github.com/sindresorhus/detect-indent/releases)
- [Commits](sindresorhus/detect-indent@v6.1.0...v7.0.1)

Updates `nock` from 13.3.0 to 13.3.2
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v13.3.0...v13.3.2)

Updates `@pnpm/lockfile-file` from 8.1.1 to 8.1.2
- [Release notes](https://github.com/pnpm/pnpm/releases)
- [Commits](https://github.com/pnpm/pnpm/commits)

---
updated-dependencies:
- dependency-name: "@npmcli/arborist"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: detect-indent
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: nock
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@pnpm/lockfile-file"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn/helpers/dependencies-25f5e52b34 branch from 45bb242 to c95ed4f Compare July 24, 2023 16:03
@jeffwidman
Copy link
Member

This is likely blocked by detect-indent requiring ESM... more context:

Because we weren't ready to prioritize moving to ESM, on ☝️ PR I specifically added a fake commit to prevent :dependabot: churning it every week and wasting CI minutes...

Not sure what we want to do here, but letting it sit blocking all other updates in this ecosystem and wasting CI minutes during the weekly rebase/update seems like the worst option.

Maybe exclude detect-indent from the group? Not via an ignore--as we still want the :dependabot: PR for it--but just by excluding from the group.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 25, 2023

The group that created this PR has been removed from your configuration.

@dependabot dependabot bot closed this Jul 25, 2023
auto-merge was automatically disabled July 25, 2023 22:23

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn/helpers/dependencies-25f5e52b34 branch July 25, 2023 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies javascript Dependabot pull requests that update Javascript code L: javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants