[Snyk] Upgrade husky from 6.0.0 to 9.0.5

Open lholmquist opened this issue 2 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade husky from 6.0.0 to 9.0.5.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 14 versions ahead of your current version.
The recommended version was released 21 days ago, on 2024-01-25.

Release notes

Package name: husky

9.0.5 - 2024-01-25
- docs: update path to startup files by @ ManuelRauber in #1350
- fix: init error by @ typicode in #1353
9.0.4 - 2024-01-25
- fix: init create dir before by @ typicode in #1348
- refactor: simplify by @ typicode in #1349
- fix: init not working on pnpm #1334 by @ rozbo in #1347
9.0.3 - 2024-01-25
- docs: fix link by @ typicode in #1340
- chore: fix links in issue template by @ julien-f in #1341
- fix: add scripts field if not present by @ chalkygames123 in #1338
- docs: changelog link by @ typicode in #1343
- fix: insert final newline by @ chalkygames123 in #1339
- fix: fix git hooks path on windows by @ rozbo in #1346
9.0.2 - 2024-01-25
- fix: exit code by @ gergelypap in #1336
- docs: typo by @ chalkygames123 in #1337
9.0.1 - 2024-01-25
Kicking off the year with an exciting update!

TLDR;

Improved user experience and a (even) smaller package size while packing in more features!

Note: install using husky@latest to get the bug fixes that were released after.

👋 By the Way

I'm available for remote work (Front-end/Back-end mainly JS/TS but open to other stacks Rails, Go, Elixir). You can contact me at my mail: typicode at gmail 🙂

Introducing husky init

v8
```
npm pkg set scripts.prepare="husky install"
npm run prepare
npx husky add .husky/pre-commit "npm test"
```
v9

Adding husky to a project is now easier than ever. It's just a single line that does the same as above. No need to read the docs to get started anymore.
```
npx husky init
```
Adding a New Hook

v8
```
npx husky add  .husky/pre-commit "npm test"
git add --chmod=+x .husky/pre-commit # On Windows
```
v9

Adding a hook is as simple as creating a file. This can be accomplished using your favorite editor, a script or a basic echo command. For example, on Linux/macOS:
```
echo "npm test" > .husky/pre-commit
```
Further Size Reduction

v8 was already the most compact Git hooks manager at approximately 6kB.

v9 takes this a step further, reducing the size to just 3kB, likely making it the smallest devDependency in your toolkit.

To give you an idea of how small it is, the biggest file in the project is the MIT license 😄

More to Come

Additional features are in the pipeline for v9. Stay tuned 🙌

Other Changes
- Enhanced security with CI and npm --provenance for safer publishing.
- Added $XDG_CONFIG_HOME support. Move ~/.huskyrc to ~/.config/husky/init.sh for centralized configuration.
- Fixed permission issue for Windows-created hooks; they no longer need to be executable.
- Removed husky install. Use husky or husky some/dir for the same functionality (deprecation notice to be added).
- Modified behavior when .git is missing; it now triggers a warning instead of failure.
- Replaced HUSKY_DEBUG=1 with HUSKY=2 for debugging.
- Updated the Husky API for module usage.
- Transitioned to ESM for module usage.
- Dropped support for Node 14 and 16.
- Revamped docs.
How to Migrate

v9 is backward compatible with v8, allowing you to freely upgrade and migrate your hooks later.

Here are the steps to migrate:

package.json
```
{
  "scripts": {
-   "prepare": "husky install"
+   "prepare": "husky"
  }
}
```
.husky/pre-commit
```
- #!/usr/bin/env sh
- . "$(dirname -- "$0")/_/husky.sh"
npm test 
```
Note: sh will be used to run hooks, even if a shebang is set.

If you were using husky as a module:
```
- const husky = require('husky')
- // ...
+ import husky from 'husky'
+ console.log(husky())
```
8.0.3 - 2023-01-03
- fix: add git not installed message #1208
8.0.2 - 2022-11-08
- docs: remove deprecated npm set-script
8.0.1 - 2022-05-09
- fix: use POSIX equality operator
8.0.0 - 2022-05-08
7.0.4 - 2021-10-21
7.0.3 - 2021-10-21
7.0.2 - 2021-08-25
7.0.1 - 2021-07-06
7.0.0 - 2021-07-01
6.0.0 - 2021-03-29