Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lock file maintenance npm all non-major dependencies #3136

Merged
merged 1 commit into from
Sep 25, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 25, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
lockFileMaintenance All locks refreshed age adoption passing confidence
@mui/x-data-grid (source) dependencies minor 6.14.0 -> 6.15.0 age adoption passing confidence
@mui/x-date-pickers (source) dependencies minor 6.14.0 -> 6.15.0 age adoption passing confidence
@reduxjs/toolkit (source) dependencies patch 1.9.5 -> 1.9.6 age adoption passing confidence
@types/esri-leaflet (source) dependencies patch 3.0.0 -> 3.0.1 age adoption passing confidence
@types/leaflet (source) dependencies patch 1.9.4 -> 1.9.6 age adoption passing confidence
@types/lodash (source) dependencies patch 4.14.198 -> 4.14.199 age adoption passing confidence
@types/webpack-env (source) dependencies patch 1.18.1 -> 1.18.2 age adoption passing confidence
@typescript-eslint/eslint-plugin dependencies patch 6.7.2 -> 6.7.3 age adoption passing confidence
@typescript-eslint/parser dependencies patch 6.7.2 -> 6.7.3 age adoption passing confidence
eslint (source) devDependencies minor 8.49.0 -> 8.50.0 age adoption passing confidence
plotly.js dependencies patch 2.26.0 -> 2.26.1 age adoption passing confidence
start-server-and-test devDependencies patch 2.0.0 -> 2.0.1 age adoption passing confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

mui/mui-x (@​mui/x-data-grid)

v6.15.0

Compare Source

Sep 22, 2023

We'd like to offer a big thanks to the 9 contributors who made this release possible. Here are some highlights ✨:

  • 🚀 Implement columns auto-sizing (#​10180) @​romgrk
  • 🎁 Add support for getRowsToExport option to print export on the data grid (#​10084) @​zreecespieces
  • 🌍 Improve Finnish (fi-FI) locale
  • 🐞 Bugfixes
  • 📚 Documentation improvements
Data Grid
@mui/[email protected]
@mui/[email protected] pro

Same changes as in @mui/[email protected], plus:

@mui/[email protected] premium

Same changes as in @mui/[email protected].

Date Pickers
@mui/[email protected]
@mui/[email protected] pro

Same changes as in @mui/[email protected].

Charts / @mui/[email protected]
Tree View / @mui/[email protected]
Docs
Core
reduxjs/redux-toolkit (@​reduxjs/toolkit)

v1.9.6

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v6.7.3

Compare Source

Note: Version bump only for package @​typescript-eslint/eslint-plugin

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v6.7.3

Compare Source

Note: Version bump only for package @​typescript-eslint/parser

You can read about our versioning strategy and releases on our website.

eslint/eslint (eslint)

v8.50.0

Compare Source

Features

  • 27d5a9e feat: add suggestions to array-callback-return (#​17590) (Tanuj Kanti)
  • f9082ff feat: flat-rule-tester make sure default config always matches (#​17585) (fnx)
  • 83914ad feat: Implement SourceCode#applyInlineConfig() (#​17351) (Nicholas C. Zakas)
  • 22a5582 feat: add rule no-object-constructor, deprecate no-new-object (#​17576) (Francesco Trotta)
  • 85a3d9e feat: allowVoid option in array-callback-return (#​17564) (Tanuj Kanti)

Bug Fixes

  • cc4d26b fix: Ensure deprecated context.parserServices warns (#​17593) (Nicholas C. Zakas)
  • 1ea4cfb fix: Ensure all RuleTester tests all deprecated context methods (#​17587) (Nicholas C. Zakas)
  • aa1b657 fix: wrong suggestion and message in no-misleading-character-class (#​17571) (Yosuke Ota)

Documentation

  • 1800537 docs: Fix and standardize JSX code examples (#​17591) (Francesco Trotta)
  • 48a44a7 docs: Add correct/incorrect tags to prefer-arrow-callback (#​17589) (Francesco Trotta)
  • 20893d4 docs: fix incorrect tag's place (#​17575) (Tanuj Kanti)
  • bd7a71f docs: Update README (GitHub Actions Bot)

Chores

plotly/plotly.js (plotly.js)

v2.26.1

Compare Source

Fixed
  • Fix horizontal title alignment [#​6725],
    with thanks to @​28raining for the contribution!
  • Fix single-point histogram when user has provided bin widths [#​6725],
    with thanks to @​28raining for the contribution!
  • Fix to allow custom plotly_legenddoubleclick handlers to execute even when the default plotly_legendclick event is cancelled (returns false) [#​6727], with thanks to @​andrej-vasilj for the contribution!
  • Fix Finnish translation for "Download plot" in fi locale [#​6723],
    with thanks to @​wkmor1 for the contribution!
  • Fix Czech number separators in cs locale [#​6734],
    with thanks to @​vlastimil-dolejs for the contribution!
bahmutov/start-server-and-test (start-server-and-test)

v2.0.1

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@socket-security
Copy link

socket-security bot commented Sep 25, 2023

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
@types/leaflet 1.9.6 None +1 122 kB types
@mui/x-data-grid 6.15.0 environment +3 5.7 MB danailh
@types/lodash 4.14.199 None +0 863 kB types
@mui/x-date-pickers 6.15.0 environment +4 5.9 MB danailh
plotly.js 2.26.1 eval, filesystem, shell, environment +143 128 MB archmoj
eslint 8.50.0 filesystem, environment +24 5.98 MB eslintbot
@types/webpack-env 1.18.1...1.18.2 None +0/-0 17.3 kB
@typescript-eslint/parser 6.7.2...6.7.3 None +29/-4 7.32 MB
@typescript-eslint/eslint-plugin 6.7.2...6.7.3 None +33/-8 10.2 MB
@types/esri-leaflet 3.0.0...3.0.1 None +2/-0 187 kB types
@reduxjs/toolkit 1.9.5...1.9.6 None +3/-3 13.3 MB acemarke

🚮 Removed packages: [email protected]

@socket-security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue Package Version Note Source
Protestware/Troll package es5-ext 0.10.62
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale

Next steps

What is protestware and troll packages?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package my come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

@codecov
Copy link

codecov bot commented Sep 25, 2023

Codecov Report

Merging #3136 (5056cc9) into main (71be9dc) will decrease coverage by 0.02%.
Report is 1 commits behind head on main.
The diff coverage is 92.30%.

@@            Coverage Diff             @@
##             main    #3136      +/-   ##
==========================================
- Coverage   84.72%   84.71%   -0.02%     
==========================================
  Files         300      301       +1     
  Lines       10110    10123      +13     
  Branches      588      588              
==========================================
+ Hits         8566     8576      +10     
- Misses       1381     1384       +3     
  Partials      163      163              
Files Coverage Δ
api/app/routers/fba_calc.py 90.12% <100.00%> (-1.19%) ⬇️
api/app/schemas/fba_calc.py 100.00% <100.00%> (ø)
api/app/fire_behaviour/wind_speed.py 88.23% <88.23%> (ø)

... and 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@renovate renovate bot force-pushed the renovate/npm-all-minor-patch branch 2 times, most recently from 4eb5c3d to 331c991 Compare September 25, 2023 17:19
@renovate renovate bot force-pushed the renovate/npm-all-minor-patch branch from 331c991 to 5056cc9 Compare September 25, 2023 18:45
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@conbrad conbrad merged commit 0ccc86f into main Sep 25, 2023
27 of 28 checks passed
@conbrad conbrad deleted the renovate/npm-all-minor-patch branch September 25, 2023 23:02
vanislekahuna pushed a commit to vanislekahuna/wps that referenced this pull request Sep 19, 2024
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant