vulnera
vulnera copied to clipboard
chore(deps): bump @nodesecure/npm-registry-sdk from 2.1.1 to 3.0.0 in the dependencies group
Bumps the dependencies group with 1 update: @nodesecure/npm-registry-sdk.
Updates @nodesecure/npm-registry-sdk from 2.1.1 to 3.0.0
Release notes
Sourced from @nodesecure/npm-registry-sdk's releases.
v3.0.0
What's Changed
- chore: using dependabot groups by
@fabnguessin NodeSecure/npm-registry-sdk#127- chore(deps): bump the github-actions group with 4 updates by
@dependabotin NodeSecure/npm-registry-sdk#132- chore(deps-dev): bump the development-dependencies group with 1 update by
@dependabotin NodeSecure/npm-registry-sdk#133- chore(deps): bump the dependencies group with 1 update by
@dependabotin NodeSecure/npm-registry-sdk#134- fix(packument): add missing properties for NPM provenance by
@fraxkenin NodeSecure/npm-registry-sdk#135- Use NodeSecure npm types by
@fraxkenin NodeSecure/npm-registry-sdk#144Breaking changes
This release use
@nodesecure/typesinstead of@npm/types. This break type compatibility (V3 should be a more precise reflect of what the registry return).Full Changelog: https://github.com/NodeSecure/npm-registry-sdk/compare/v2.1.1...v3.0.0
Commits
8cbc3363.0.03680828Merge pull request #144 from NodeSecure/nodesecure-types37e390dfix: skip metadata tests because NPM registry interface is broken0fc5410refactor: use@nodesecure/npm-typesb29922afix(packument): add missing properties for NPM provenance (#135)29d3a56chore(deps): bump the dependencies group with 1 update (#134)3a43637chore(deps-dev): bump the development-dependencies group with 1 update (#133)fa917a6chore(deps): bump the github-actions group with 4 updates (#132)c2d219dchore: using dependabot groups (#127)- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) -
@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) -
@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) -
@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency -
@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions