Bump the production-dependencies group across 1 directory with 5 updates #94
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the production-dependencies group with 5 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [cron](https://github.com/kelektiv/node-cron) | `3.2.1` | `3.3.1` | | [dotenv](https://github.com/motdotla/dotenv) | `16.4.5` | `16.4.7` | | [eventsource](https://github.com/EventSource/eventsource) | `2.0.2` | `3.0.2` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.4.1` | `7.5.0` | | [mysql2](https://github.com/sidorares/node-mysql2) | `3.11.4` | `3.12.0` | Updates `cron` from 3.2.1 to 3.3.1 - [Release notes](https://github.com/kelektiv/node-cron/releases) - [Changelog](https://github.com/kelektiv/node-cron/blob/main/CHANGELOG.md) - [Commits](kelektiv/node-cron@v3.2.1...v3.3.1) Updates `dotenv` from 16.4.5 to 16.4.7 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.4.5...v16.4.7) Updates `eventsource` from 2.0.2 to 3.0.2 - [Release notes](https://github.com/EventSource/eventsource/releases) - [Changelog](https://github.com/EventSource/eventsource/blob/main/CHANGELOG.md) - [Commits](EventSource/eventsource@v2.0.2...v3.0.2) Updates `express-rate-limit` from 7.4.1 to 7.5.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.4.1...v7.5.0) Updates `mysql2` from 3.11.4 to 3.12.0 - [Release notes](https://github.com/sidorares/node-mysql2/releases) - [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md) - [Commits](sidorares/node-mysql2@v3.11.4...v3.12.0) --- updated-dependencies: - dependency-name: cron dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: dotenv dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: eventsource dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: express-rate-limit dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mysql2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Dependency ReviewThe following issues were found:
License Issuesbackend/package.json
OpenSSF ScorecardScorecard details
Scanned Files
|
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/backend/production-dependencies-626b674458
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the production-dependencies group with 5 updates in the /backend directory:
3.2.13.3.116.4.516.4.72.0.23.0.27.4.17.5.03.11.43.12.0Updates
cronfrom 3.2.1 to 3.3.1Release notes
Sourced from cron's releases.
Changelog
Sourced from cron's changelog.
Commits
789015bRelease v3.3.1 [skip ci]f6270f8fix: correct waitForCompletion behavior (#924)f4e9e02Release v3.3.0 [skip ci]b58fb6bfeat: support async handling and add CronJob status tracking (#894)94465aechore(deps): lock file maintenance23d67a4chore(deps): lock file maintenanceca5065achore(deps): update dependency@types/nodeto v20.17.95899fc2chore(deps): update dependency@types/nodeto v20.17.89181b6achore(deps): update dependency@types/nodeto v20.17.73447ff5chore(deps): update dependency typescript to v5.7.2Updates
dotenvfrom 16.4.5 to 16.4.7Changelog
Sourced from dotenv's changelog.
Commits
a338d6816.4.7daf3e3dchangelog 🪵fb74f68Merge pull request #848 from Spice-King/patch-1fe87ba2Add .tap to .npmignore0c9f76416.4.6fd5f26bchangelog 🪵bb19b6bMerge pull request #847 from motdotla/deps-updates2f4e36bfurther dev dependency cleanupc2fdd01send to codecov6707487add test coverageUpdates
eventsourcefrom 2.0.2 to 3.0.2Release notes
Sourced from eventsource's releases.
Changelog
Sourced from eventsource's changelog.
Commits
5e08e28chore(release): 3.0.2 [skip ci]d3b6849fix: reference possibly missing event typings101028dci: introduce renovatebot84c7c63ci: remove dependabot (replace with renovate)bcf0945test: ensuretargetis set to EventSource instanceeddb83cci: update bun lockfile2979b39ci: remove unnecessary build stepf1b5ff7chore(release): 3.0.1 [skip ci]f86df19fix: run build prior to publishingf7483f4chore(release): 3.0.0 [skip ci]Updates
express-rate-limitfrom 7.4.1 to 7.5.0Release notes
Sourced from express-rate-limit's releases.
Commits
fe46b437.5.0919bb8adocs: add changelog forv7.5.069a1c20feat(headers): implement ietfdraft-8(#486)413995bbuild(deps): bump cookie, express and socket.io (#483)Updates
mysql2from 3.11.4 to 3.12.0Release notes
Sourced from mysql2's releases.
Changelog
Sourced from mysql2's changelog.
Commits
646ac6dchore(master): release 3.12.0 (#3268)e455b6bbuild(deps): bump lucide-react from 0.468.0 to 0.469.0 in /website (#3289)e3f5145build(deps): bump sass from 1.82.0 to 1.83.0 in /website (#3284)04f8dabbuild(deps): bump prism-react-renderer from 2.4.0 to 2.4.1 in /website (#3282)d97f80abuild(deps-dev): bump@types/nodefrom 22.10.1 to 22.10.2 in /website (#3281)0a022abbuild(deps-dev): bump c8 from 10.1.2 to 10.1.3 (#3278)29c8c85build(deps-dev): bump lint-staged from 15.2.10 to 15.2.11 (#3277)6eaa468build(deps-dev): bump@types/nodefrom 22.10.1 to 22.10.2 (#3276)605fa04build(deps): bump lucide-react from 0.467.0 to 0.468.0 in /website (#3272)e60a584build(deps-dev): bump eslint-plugin-react-hooks in /website (#3271)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions