Skip to content

Bump the npm_and_yarn group across 1 directory with 4 updates - #7

Closed
dependabot[bot] wants to merge 23 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-ff707d40e7
Closed

Bump the npm_and_yarn group across 1 directory with 4 updates#7
dependabot[bot] wants to merge 23 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-ff707d40e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2024

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 4 updates in the / directory: postcss, semver, tar and yaml.

Updates postcss from 8.4.35 to 8.4.38

Release notes

Sourced from postcss's releases.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.

8.4.36

  • Fixed original.column are not numbers error on broken previous source map.
Changelog

Sourced from postcss's changelog.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.

8.4.36

  • Fixed original.column are not numbers error on broken previous source map.
Commits
  • a69d45e Release 8.4.38 version
  • 64e35d9 Update dependencies
  • c1ad8fb Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...
  • b45e7e9 fix endIndex
  • 1bea246 failing test: for endIndex 0 in rangeBy
  • 0fd1d86 Add changelog auto release on Github
  • 49c906e Release 8.4.37 version
  • b5bd92c Fix another broken prev source map issue
  • 2882039 Update dependencies
  • e5ad939 Release 8.4.36 version
  • Additional commits viewable in compare view

Updates semver from 7.5.4 to 7.6.2

Release notes

Sourced from semver's releases.

v7.6.2

7.6.2 (2024-05-09)

Bug Fixes

v7.6.1

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

v7.6.0

7.6.0 (2024-01-31)

Features

Chores

... (truncated)

Changelog

Sourced from semver's changelog.

7.6.2 (2024-05-09)

Bug Fixes

7.6.1 (2024-05-04)

Bug Fixes

Dependencies

Chores

7.6.0 (2024-01-31)

Features

Chores

Commits
  • eb1380b chore: release 7.6.2 (#714)
  • 6466ba9 fix(lru): use map.delete() directly (#713)
  • d777418 chore: release 7.6.1 (#706)
  • 988a8de deps: uninstall lru-cache (#709)
  • 5feeb7f chore: postinstall for dependabot template-oss PR
  • dd09b60 chore: bump @​npmcli/template-oss to 4.22.0
  • c570a34 fix(linting): no-unused-vars
  • ad8ff11 fix: use internal cache implementation
  • 3fabe4d deps: remove lru-cache
  • ec49cdc chore: chore: chore: postinstall for dependabot template-oss PR
  • Additional commits viewable in compare view

Updates tar from 6.2.0 to 6.2.1

Commits

Updates yaml from 2.3.1 to 2.4.3

Release notes

Sourced from yaml's releases.

v2.4.3

  • Improve error when parsing a non-string value (#459)
  • Do not parse -.NaN or +.nan as NaN (#546)
  • Support # within %TAG prefixes with trailing #comments
  • Check for non-node complex keys when stringifying with simpleKeys (#541)

v2.4.2

  • Restrict YAML 1.1 boolean strings to their explicit capitalization (#530)
  • Add sponsorship by Scipress (#536)

v2.4.1

  • cst: Do not drop trailing newline after line comment in block-map if followed by unindented block-seq value (#525)
  • Stringify flow collection comments in parent (#528)
  • Do not skip folding lines after the first in indented block scalars (#529)

v2.4.0

  • Add a command-line tool (#523)
  • Use the lineWidth option for line breaking in flow collections (#522)

v2.3.4

  • Do not throw for carriage return in tag shorthand (#501)

v2.3.3

  • Do not throw error on malformed URI escape in tag (#498)

v2.3.2

  • Fix docs typo (#489)
  • Do not require quotes for implicit keys with flow indicators (#494)
  • Update Prettier to v3 & update ESLint config
Commits
  • 208d98f 2.4.3
  • fad10b2 style: Apply updated Prettier style
  • b92b602 chore: Refresh lockfile
  • a1dc96f fix: Improve error when parsing a non-string value (fixes #459)
  • edc623d fix: Do not parse -.NaN or +.nan as NaN (#546)
  • 69f3517 fix: Support # within %TAG prefixes with trailing #comments
  • ba89ff2 fix: Check for non-node complex keys when stringifying with simpleKeys (#541)
  • f792d1b 2.4.2
  • de120d6 docs: Move sponsor section up
  • 5410c25 ci: Drop tests in EOL Node.js versions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

scherler and others added 23 commits November 15, 2022 17:49
@scherler
Update README.md
92845d4
@scherler
Update README.md
073f679
@scherler
Merge branch 'main' of github.com:scherler/sirocco-wc
ba7590e
@scherler
[main] fix linking again
b5ef79b 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] add missing types
4b2c463 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] fix problems with special character and remove comments
fbc1695 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] force lodash version
ea0f79e 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] lodash in caporal is old force new one
e1fe2b3 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] refactor config load and fix export
d9bfa8b 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] drop empty valu
61bdca8 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] raise version
f1c32ce 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
Create npm-publish.yml
06322fc
@scherler
[main] bump version
007b10e 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] bump version
b62e1d3 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@dwnusbaum
Put Tailwind base CSS in a single file and then reference it from ind…
ba00828 
…ividual style files to avoid duplication

Signed-off-by: Devin Nusbaum <dnusbaum@cloudbees.com>
@scherler
Merge pull request #1 from dwnusbaum/reduce-duplication
2b6a27e 
Put Tailwind base CSS in a single file and then reference it from individual style files to avoid duplication
@scherler
Revert "Put Tailwind base CSS in a single file and then reference it …
5c07159 
…from individual style files to avoid duplication"
@scherler
Merge pull request #2 from scherler/revert-1-reduce-duplication
d7c742e 
Revert "Put Tailwind base CSS in a single file and then reference it from individual style files to avoid duplication"
@dependabot
Bump the npm_and_yarn group group with 2 updates
63460da 
Bumps the npm_and_yarn group group with 2 updates: [postcss](https://github.com/postcss/postcss) and [ip](https://github.com/indutny/node-ip).


Updates `postcss` from 8.4.32 to 8.4.33
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.32...8.4.33)

Updates `ip` from 2.0.0 to 2.0.1
- [Commits](indutny/node-ip@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn-security-group
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn-security-group
...

Signed-off-by: dependabot[bot] <support@github.com>
@scherler
Merge pull request #4 from scherler/dependabot/npm_and_yarn/npm_and_y…
6504f6d 
…arn-security-group-276150f924

Bump the npm_and_yarn group group with 2 updates
@scherler
[main] manual update versions
0908779 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@scherler
[main] export tailwind
812e2c4 
Signed-off-by: Thorsten Scherler <scherler@gmail.com>
@dependabot
Bump the npm_and_yarn group across 1 directory with 4 updates
ec7e8fe 
Bumps the npm_and_yarn group with 4 updates in the / directory: [postcss](https://github.com/postcss/postcss), [semver](https://github.com/npm/node-semver), [tar](https://github.com/isaacs/node-tar) and [yaml](https://github.com/eemeli/yaml).


Updates `postcss` from 8.4.35 to 8.4.38
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.35...8.4.38)

Updates `semver` from 7.5.4 to 7.6.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.5.4...v7.6.2)

Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v6.2.1)

Updates `yaml` from 2.3.1 to 2.4.3
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.3.1...v2.4.3)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: semver
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 4, 2024
@dependabot dependabot Bot mentioned this pull request Jun 4, 2024
Closed
@bolt-new-by-stackblitz

bolt-new-by-stackblitz Bot commented Jun 4, 2024

Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@scherler scherler closed this Sep 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-ff707d40e7 branch September 22, 2026 19:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@scherler @dwnusbaum