Skip to content

Bump the all-dependencies group across 1 directory with 13 updates - #600

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/AspireWithJavaScript/AspireJavaScript.Vue/all-dependencies-39f55e9854
Closed

Bump the all-dependencies group across 1 directory with 13 updates#600
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/AspireWithJavaScript/AspireJavaScript.Vue/all-dependencies-39f55e9854

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 2, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 12 updates in the /samples/AspireWithJavaScript/AspireJavaScript.Vue directory:

Package From To
vue 3.4.33 3.5.13
@rushstack/eslint-patch 1.10.3 1.10.4
@types/node 20.14.11 22.10.1
@vitejs/plugin-vue 5.0.5 5.2.1
@vue/eslint-config-prettier 9.0.0 10.1.0
@vue/eslint-config-typescript 13.0.0 14.1.4
@vue/tsconfig 0.5.1 0.7.0
npm-run-all2 6.2.2 7.0.1
prettier 3.3.3 3.4.1
typescript 5.5.3 5.7.2
vite 5.3.4 6.0.2
vue-tsc 2.0.26 2.1.10

Updates vue from 3.4.33 to 3.5.13

Release notes

Sourced from vue's releases.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.10

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.9

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.8

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.7

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.6

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.5

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.4

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.3

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.2

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.1

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.13 (2024-11-15)

Bug Fixes

  • compiler-core: handle v-memo + v-for with functional key (#12014) (99009ee), closes #12013
  • compiler-dom: properly stringify template string style (#12392) (2d78539), closes #12391
  • custom-element: avoid triggering mutationObserver when relecting props (352bc88), closes #12214 #12215
  • deps: update dependency postcss to ^8.4.48 (#12356) (b5ff930)
  • hydration: the component vnode's el should be updated when a mismatch occurs. (#12255) (a20a4cb), closes #12253
  • reactiivty: avoid unnecessary watcher effect removal from inactive scope (2193284), closes #5783 #5806
  • reactivity: release nested effects/scopes on effect scope stop (#12373) (bee2f5e), closes #12370
  • runtime-dom: set css vars before user onMounted hooks (2d5c5e2), closes #11533
  • runtime-dom: set css vars on update to handle child forcing reflow in onMount (#11561) (c4312f9)
  • ssr: avoid updating subtree of async component if it is resolved (#12363) (da7ad5e), closes #12362
  • ssr: ensure v-text updates correctly with custom directives in SSR output (#12311) (1f75d4e), closes #12309
  • ssr: handle initial selected state for select with v-model + v-for option (#12399) (4f8d807), closes #12395
  • teleport: handle deferred teleport update before mounted (#12168) (8bff142), closes #12161
  • templateRef: set ref on cached async component which wrapped in KeepAlive (#12290) (983eb50), closes #4999 #5004
  • test: update snapshot (#12169) (828d4a4)
  • Transition: fix transition memory leak edge case (#12182) (660132d), closes #12181
  • transition: reflow before leave-active class after leave-from (#12288) (4b479db), closes #2593
  • types: defineEmits w/ interface declaration (#12343) (1022eab), closes #8457
  • v-once: setting hasOnce to current block only when in v-once (#12374) (37300fc), closes #12371

Performance Improvements

  • reactivity: do not track inner key `__v_skip`` (#11690) (d637bd6)
  • runtime-core: use feature flag for call to resolveMergedOptions (#12163) (1755ac0)

3.5.12 (2024-10-11)

Bug Fixes

... (truncated)

Commits
  • 6eb29d3 release: v3.5.13
  • 4f8d807 fix(ssr): handle initial selected state for select with v-model + v-for optio...
  • 983eb50 fix(templateRef): set ref on cached async component which wrapped in KeepAliv...
  • da7ad5e fix(ssr): avoid updating subtree of async component if it is resolved (#12363)
  • 1f75d4e fix(ssr): ensure v-text updates correctly with custom directives in SSR outpu...
  • 4b479db fix(transition): reflow before leave-active class after leave-from (#12288)
  • a20a4cb fix(hydration): the component vnode's el should be updated when a mismatch oc...
  • 352bc88 fix(custom-element): avoid triggering mutationObserver when relecting props
  • 10ab8c0 chore(playground): reset version when opening local playground from reproduction
  • d637bd6 perf(reactivity): do not track inner key `__v_skip`` (#11690)
  • Additional commits viewable in compare view

Updates @rushstack/eslint-patch from 1.10.3 to 1.10.4

Changelog

Sourced from @​rushstack/eslint-patch's changelog.

1.10.4

Sat, 27 Jul 2024 00:10:27 GMT

Patches

  • Include CHANGELOG.md in published releases again
Commits

Updates @types/node from 20.14.11 to 22.10.1

Commits

Updates @vitejs/plugin-vue from 5.0.5 to 5.2.1

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@5.2.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.5

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.3

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.2

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

5.2.1 (2024-11-26)

5.2.0 (2024-11-13)

  • feat: add a feature option to support custom component id generator (#461) (7a1fc4c), closes #461

5.1.5 (2024-11-11)

5.1.4 (2024-09-16)

  • chore: format (07b29a6)
  • chore(deps): update dependency rollup to ^4.21.3 (#440) (98766c2), closes #440
  • fix: skip checking private properties of typeParameters (#443) (e4f5fff), closes #443
  • fix(plugin-vue): allow overwrite esbuild config (#444) (1344294), closes #444

5.1.3 (2024-08-29)

  • chore: upgrade to eslint 9 (236a40f)
  • chore: use pnpm catalog for shared deps (0735e18)
  • chore(deps): update dependency rollup to ^4.20.0 (#433) (37c9073), closes #433
  • chore(deps): update upstream (#436) (b75a46f), closes #436
  • fix(deps): update all non-major dependencies (#421) (e3a7fec), closes #421
  • fix(plugin-vue): default value for __VUE_OPTIONS_API__ (acb57c9), closes #438

5.1.2 (2024-08-01)

  • refactor(plugin-vue): add type field (a6b7e3f)

... (truncated)

Commits
  • d156ad7 release: plugin-vue@5.2.1
  • 4288652 chore: add vite 6 peer dep (#481)
  • b2df95e chore(deps): update dependency rollup to ^4.27.2 (#476)
  • 378aea3 chore: fix lint
  • 7edc3d9 release: plugin-vue@5.2.0
  • 7a1fc4c feat: add a feature option to support custom component id generator (#461)
  • 7d081cc release: plugin-vue@5.1.5
  • 91210cc chore(deps): update dependency rollup to ^4.25.0 (#472)
  • e432bcb fix(deps): update all non-major dependencies (#439)
  • 62b17f3 fix(hmr): should reload if relies file changed after re-render (#471)
  • Additional commits viewable in compare view

Updates @vue/eslint-config-prettier from 9.0.0 to 10.1.0

Release notes

Sourced from @​vue/eslint-config-prettier's releases.

v10.1.0

New Features

  • Added .d.ts files, fixed #24

Full Changelog: vuejs/eslint-config-prettier@v10.0.0...v10.1.0

v10.0.0

What's Changed

Full Changelog: vuejs/eslint-config-prettier@v9.0.0...v10.0.0

Commits

Updates @vue/eslint-config-typescript from 13.0.0 to 14.1.4

Release notes

Sourced from @​vue/eslint-config-typescript's releases.

v14.1.3

What's Changed

New Contributors

Full Changelog: vuejs/eslint-config-typescript@v14.1.2...v14.1.3

v14.1.2

Bug Fixes

  • Print more friendly error messages if the user provides a non-existent configuration name to extends.

Full Changelog: vuejs/eslint-config-typescript@v14.1.1...v14.1.2

v14.1.1

Bug Fixes

  • Fixed #91

    TypeError: Config "typescript-eslint/disable-type-checked": Key "files": Expected value to be a non-empty array"

Full Changelog: vuejs/eslint-config-typescript@v14.1.0...v14.1.1

v14.1.0

New Features

Bug Fixes

New Contributors

Full Changelog: vuejs/eslint-config-typescript@v14.0.1...v14.1.0

v14.0.1

Bugfixes

  • Fixed an occasional bug that when using with npm or yarn v1, an invalid ecmaVersion error would be thrown if the wrong version of estree is hoisted to the node_modules root. Fixes #87. [aae95d6]

New Contributors

Full Changelog: vuejs/eslint-config-typescript@v14.0.0...v14.0.1

... (truncated)

Commits
  • e95da47 14.1.4
  • bb462cc workflow: add automated release with provenance
  • 1fc321c fix: escape glob-like paths to ensure correct overrides
  • 4e1fe36 chore(deps): update all non-major dependencies (#103)
  • 53e61ed chore(deps): update all non-major dependencies (#99)
  • b9d22dd chore(deps): update dependency typescript to ~5.6.3 (#100)
  • 1ed4b98 chore: Configure Renovate (#97)
  • d7b6c2e ci: skip cypress binary download as we don't need it in linting
  • 89e08a5 chore: ⬆️ Upgraded typescript-eslint dependencies (#96)
  • 3f8bf2e 14.1.3
  • Additional commits viewable in compare view

Updates @vue/tsconfig from 0.5.1 to 0.7.0

Release notes

Sourced from @​vue/tsconfig's releases.

v0.7.0

Breaking Changes

  • Set skipLibCheck: false in tsconfig.lib.json [cee76cf]
  • Require Vue.js >= 3.4

Full Changelog: vuejs/tsconfig@v0.6.0...v0.7.0

v0.6.0

Notable Changes

Full Changelog: vuejs/tsconfig@v0.5.1...v0.6.0

Commits
  • 37994ed 0.7.0
  • cee76cf feat(lib)!: disable skipLibCheck in library tsconfig, closes #5
  • ab39083 0.6.0
  • 1b9a763 workflow: add release automation with provenance
  • ad9bd77 fix: require vue 3.3 as peer dependency
  • 590d74c fix: add peer dep to typescript v5.x in package.json. (#20)
  • e1ef309 chore: rename bundler to Bundler for consistency
  • 6355fab feat: set moduleDetection to force
  • 27fa57b feat: enable allowImportingTsExtensions
  • 480cd96 fix: typo (#28)
  • Additional commits viewable in compare view

Updates eslint-plugin-vue from 9.27.0 to 9.32.0

Release notes

Sourced from eslint-plugin-vue's releases.

v9.32.0

✨ Enhancements

🐛 Bug Fixes

Full Changelog: vuejs/eslint-plugin-vue@v9.31.0...v9.32.0

v9.31.0

✨ Enhancements

🐛 Bug Fixes

⚙️ Updates

Full Changelog: vuejs/eslint-plugin-vue@v9.30.0...v9.31.0

v9.30.0

🐛 Bug Fixes

Full Changelog: vuejs/eslint-plugin-vue@v9.29.1...v9.30.0

v9.29.1

🐛 Bug Fixes

Full Changelog: vuejs/eslint-plugin-vue@v9.29.0...v9.29.1

v9.29.0

... (truncated)

Commits
  • 4cbcad6 9.32.0
  • dc06535 docs: add example config with typescript-eslint and Prettier (#2522)
  • 618f49c fix(require-explicit-slots): add support for type references (#2617)
  • a270df8 feat: add slot-name-casing rule (#2620)
  • fdfffd6 fix(prefer-use-template-ref): only check root-level variables (#2612)
  • 39b353a Chore: workaround for ESLint Stylistic issue (#2623)
  • bed816b feat: add restricted-component-names rule (#2611)
  • 9ddf3e5 feat: add ignoreTags option (#2609)
  • bea53c0 feat(no-v-text-v-html-on-component): add ignore namespace option (#2610)
  • 86a8138 feat(no-duplicate-attr-inheritance): ignore multi root (#2598)
  • Additional commits viewable in compare view

Updates npm-run-all2 from 6.2.2 to 7.0.1

Release notes

Sourced from npm-run-all2's releases.

v7.0.1

Commits

  • Revert engine range bump back to Node 18 b2e849b

v7.0.0

Merged

Commits

  • Breaking change: Bump node engines ^18.17.0 || >=20.5.0 49b95f0
  • Merge pull request #156 from bcomnes/rm-rf-rimraf c661ffc
  • Remove rimraf c77e085

v6.2.6

Commits

  • Prevent a throw when looking up undefined results d928f9a

v6.2.4

Merged

Fixed

v6.2.3

Commits

  • Merge pull request #151 from bcomnes/fix-pnpm-agian c43fa2b
  • Avoid passing config fields as flags for pnpm dc2d7da
Changelog

Sourced from npm-run-all2's changelog.

v7.0.1

Commits

  • Revert engine range bump back to Node 18 b2e849b

v7.0.0 - 2024-10-21

Merged

Commits

  • Breaking change: Bump node engines ^18.17.0 || >=20.5.0 49b95f0
  • Merge pull request #156 from bcomnes/rm-rf-rimraf c661ffc
  • Remove rimraf c77e085

v6.2.6 - 2024-10-21

Commits

  • Prevent a throw when looking up undefined results d928f9a

v6.2.4 - 2024-10-18

Merged

Fixed

v6.2.3 - 2024-09-13

Commits

  • Merge pull request #151 from bcomnes/fix-pnpm-agian c43fa2b
  • Avoid passing config fields as flags for pnpm dc2d7da
Commits
  • 43bfd54 7.0.1
  • b2e849b Revert engine range bump back to Node 18
  • 1a2f0a1 7.0.0
  • b300a1f Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/minimatch-10.0.1'
  • 4be26c5 Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/which-5.0.0'
  • 3f28b19 Merge pull request #158 from bcomnes/fix-undefined-throw
  • b0f342e Prevent a throw when looking up undefined results
  • c661ffc Merge pull request #156 from bcomnes/rm-rf-rimraf
  • b667e23 Upgrade: Bump which from 3.0.1 to 5.0.0
  • c989293 Upgrade: Bump minimatch from 9.0.5 to 10.0.1
  • Additional commits viewable in compare view

Updates prettier from 3.3.3 to 3.4.1

Release notes

Sourced from prettier's releases.

3.4.1

🔗 Changelog

3.4.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.4.1

diff

Remove unnecessary parentheses around assignment in v-on (#16887 by @​fisker)

<!-- Input -->
\<template>
  <button @click="foo += 2">Click</button>
</template>
<!-- Prettier 3.4.0 -->
&lt;template>
<button @​click="(foo += 2)">Click</button>
</template>
<!-- Prettier 3.4.1 -->
&lt;template>
<button @​click="foo += 2">Click</button>
</template>

3.4.0

diff

🔗 Release Notes

Commits

@dependabot
Bump the all-dependencies group across 1 directory with 13 updates
32f6739 
Bumps the all-dependencies group with 12 updates in the /samples/AspireWithJavaScript/AspireJavaScript.Vue directory:

| Package | From | To |
| --- | --- | --- |
| [vue](https://github.com/vuejs/core) | `3.4.33` | `3.5.13` |
| [@rushstack/eslint-patch](https://github.com/microsoft/rushstack/tree/HEAD/eslint/eslint-patch) | `1.10.3` | `1.10.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.14.11` | `22.10.1` |
| [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `5.0.5` | `5.2.1` |
| [@vue/eslint-config-prettier](https://github.com/vuejs/eslint-config-prettier) | `9.0.0` | `10.1.0` |
| [@vue/eslint-config-typescript](https://github.com/vuejs/eslint-config-typescript) | `13.0.0` | `14.1.4` |
| [@vue/tsconfig](https://github.com/vuejs/tsconfig) | `0.5.1` | `0.7.0` |
| [npm-run-all2](https://github.com/bcomnes/npm-run-all2) | `6.2.2` | `7.0.1` |
| [prettier](https://github.com/prettier/prettier) | `3.3.3` | `3.4.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.3` | `5.7.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.3.4` | `6.0.2` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `2.0.26` | `2.1.10` |



Updates `vue` from 3.4.33 to 3.5.13
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.4.33...v3.5.13)

Updates `@rushstack/eslint-patch` from 1.10.3 to 1.10.4
- [Changelog](https://github.com/microsoft/rushstack/blob/main/eslint/eslint-patch/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@rushstack/eslint-patch_v1.10.4/eslint/eslint-patch)

Updates `@types/node` from 20.14.11 to 22.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitejs/plugin-vue` from 5.0.5 to 5.2.1
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@5.2.1/packages/plugin-vue)

Updates `@vue/eslint-config-prettier` from 9.0.0 to 10.1.0
- [Release notes](https://github.com/vuejs/eslint-config-prettier/releases)
- [Changelog](https://github.com/vuejs/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](vuejs/eslint-config-prettier@v9.0.0...v10.1.0)

Updates `@vue/eslint-config-typescript` from 13.0.0 to 14.1.4
- [Release notes](https://github.com/vuejs/eslint-config-typescript/releases)
- [Commits](vuejs/eslint-config-typescript@v13.0.0...v14.1.4)

Updates `@vue/tsconfig` from 0.5.1 to 0.7.0
- [Release notes](https://github.com/vuejs/tsconfig/releases)
- [Commits](vuejs/tsconfig@v0.5.1...v0.7.0)

Updates `eslint-plugin-vue` from 9.27.0 to 9.32.0
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Commits](vuejs/eslint-plugin-vue@v9.27.0...v9.32.0)

Updates `npm-run-all2` from 6.2.2 to 7.0.1
- [Release notes](https://github.com/bcomnes/npm-run-all2/releases)
- [Changelog](https://github.com/bcomnes/npm-run-all2/blob/master/CHANGELOG.md)
- [Commits](bcomnes/npm-run-all2@v6.2.2...v7.0.1)

Updates `prettier` from 3.3.3 to 3.4.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.3.3...3.4.1)

Updates `typescript` from 5.5.3 to 5.7.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.5.3...v5.7.2)

Updates `vite` from 5.3.4 to 6.0.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.0.2/packages/vite)

Updates `vue-tsc` from 2.0.26 to 2.1.10
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v2.1.10/packages/tsc)

---
updated-dependencies:
- dependency-name: vue
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@rushstack/eslint-patch"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@vitejs/plugin-vue"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@vue/eslint-config-prettier"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@vue/eslint-config-typescript"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: "@vue/tsconfig"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-vue
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: npm-run-all2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: vue-tsc
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Dec 9, 2024

Copy link
Copy Markdown
Contributor Author

Superseded by #615.

@dependabot dependabot Bot closed this Dec 9, 2024
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/samples/AspireWithJavaScript/AspireJavaScript.Vue/all-dependencies-39f55e9854 branch December 9, 2024 07:00
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 30, 2026
@SkynetBot-001
Fix Angular npm ci: revert typescript to ~6.0.3 + apply low-risk secu…
369ae65 
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@IEvangelist David Pine (IEvangelist) mentioned this pull request Jul 30, 2026
Open
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 30, 2026
@SkynetBot-001
Phase B: clear fast-uri (#624) and brace-expansion (#600) alerts
c3a4d87 
Angular sample lockfile-only leaf swaps (no override cascade):
- fast-uri 3.1.3 -> 3.1.4 (alert #624, high)
- brace-expansion 1.1.15 -> 1.1.16 (alert #600, high)

Both satisfy parent ranges (ajv; minimatch requires ^1.1.7).
Integrity cross-verified via canonical npmjs SHA-1 shasum.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 31, 2026
@SkynetBot-001
Fix Angular npm ci: revert typescript to ~6.0.3 + apply low-risk secu…
7a15d08 
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 31, 2026
@SkynetBot-001
Phase B: clear fast-uri (#624) and brace-expansion (#600) alerts
651be33 
Angular sample lockfile-only leaf swaps (no override cascade):
- fast-uri 3.1.3 -> 3.1.4 (alert #624, high)
- brace-expansion 1.1.15 -> 1.1.16 (alert #600, high)

Both satisfy parent ranges (ajv; minimatch requires ^1.1.7).
Integrity cross-verified via canonical npmjs SHA-1 shasum.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Aug 3, 2026
@SkynetBot-001
Fix Angular npm ci: revert typescript to ~6.0.3 + apply low-risk secu…
885123b 
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Aug 3, 2026
@SkynetBot-001
Phase B: clear fast-uri (#624) and brace-expansion (#600) alerts
33657af 
Angular sample lockfile-only leaf swaps (no override cascade):
- fast-uri 3.1.3 -> 3.1.4 (alert #624, high)
- brace-expansion 1.1.15 -> 1.1.16 (alert #600, high)

Both satisfy parent ranges (ajv; minimatch requires ^1.1.7).
Integrity cross-verified via canonical npmjs SHA-1 shasum.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Aug 6, 2026
@SkynetBot-001
[auto-sec] Bump vulnerable npm deps across samples (brace-expansion, …
84280d2 
…postcss, fast-uri, js-yaml)

Clears 27 Dependabot alerts via minimal, lockfile-only patch bumps (registry.npmjs.org, sha512):
- brace-expansion 5.0.5->5.0.7 (9 samples) and 1.1.15->1.1.16 (Angular): #590,#592-#600 (HIGH ReDoS)
- postcss ->8.5.23 (Angular, Vite, Vue, aspire-with-node, rag-svelte, vite-csharp, vite-react): #629,#630,#647,#649,#651,#659,#660,#695,#704,#706,#709,#715,#716,#717
- fast-uri 3.1.3->3.1.4 (Angular, React): #624,#626 (HIGH)
- js-yaml 4.2.0->4.3.0 (Angular): #601 (HIGH)

Same-major patch bumps only; dependency trees unchanged. Deferred (see PR body): fast-uri 3.1.5, webpack-dev-server, esbuild, @babel/core, @hono/node-server, body-parser, protobufjs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Aug 8, 2026
@SkynetBot-001
[auto-sec] Bump vulnerable npm deps across samples (brace-expansion, …
f5a72e7 
…postcss, fast-uri, js-yaml)

Clears 27 Dependabot alerts via minimal, lockfile-only patch bumps (registry.npmjs.org, sha512):
- brace-expansion 5.0.5->5.0.7 (9 samples) and 1.1.15->1.1.16 (Angular): #590,#592-#600 (HIGH ReDoS)
- postcss ->8.5.23 (Angular, Vite, Vue, aspire-with-node, rag-svelte, vite-csharp, vite-react): #629,#630,#647,#649,#651,#659,#660,#695,#704,#706,#709,#715,#716,#717
- fast-uri 3.1.3->3.1.4 (Angular, React): #624,#626 (HIGH)
- js-yaml 4.2.0->4.3.0 (Angular): #601 (HIGH)

Same-major patch bumps only; dependency trees unchanged. Deferred (see PR body): fast-uri 3.1.5, webpack-dev-server, esbuild, @babel/core, @hono/node-server, body-parser, protobufjs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area-engineering-systems

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants