Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps-dev): bump the dev-dependencies group with 3 updates #374

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 9, 2023

Bumps the dev-dependencies group with 3 updates: chai, eslint and eslint-plugin-mocha.

Updates chai from 4.3.8 to 4.3.10

Release notes

Sourced from chai's releases.

v4.3.10

This release simply bumps all dependencies to their latest non-breaking versions.

What's Changed

Full Changelog: chaijs/chai@v4.3.9...v4.3.10

v4.3.9

Upgrade dependencies.

This release upgrades dependencies to address CVE-2023-43646 where a large function name can cause "catastrophic backtracking" (aka ReDOS attack) which can cause the test suite to hang.

Full Changelog: chaijs/chai@v4.3.8...v4.3.9

Commits

Updates eslint from 8.49.0 to 8.51.0

Release notes

Sourced from eslint's releases.

v8.51.0

Features

  • 0a9c433 feat: Add --no-warn-ignored CLI option for flat config (#17569) (Domantas Petrauskas)
  • 977e67e feat: logical-assignment-operators to report expressions with 3 operands (#17600) (Yosuke Ota)

Bug Fixes

  • f976b2f fix: make rule severity case-sensitive in flat config (#17619) (Milos Djermanovic)
  • 0edfe36 fix: Ensure crash error messages are not duplicated (#17584) (Nicholas C. Zakas)
  • dd79abc fix: eslint-disable to be able to parse quoted rule names (#17612) (Yosuke Ota)
  • d2f6801 fix: Ensure correct code path for && followed by ?? (#17618) (Nicholas C. Zakas)

Documentation

  • ee5be81 docs: default to sourceType: "module" in rule examples (#17615) (Francesco Trotta)
  • 1aa26df docs: Add more examples for multiline-ternary (#17610) (George Ashiotis)
  • 47d0b44 docs: Update README (GitHub Actions Bot)
  • dbf831e docs: use generated og image (#17601) (Percy Ma)
  • 1866da5 docs: Update README (GitHub Actions Bot)

Chores

  • 1ef39ea chore: upgrade @​eslint/js@​8.51.0 (#17624) (Milos Djermanovic)
  • f8c7403 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • 2665552 test: fix flat config linter tests to use Linter in flat config mode (#17616) (Milos Djermanovic)
  • 7b77bcc chore: Refactor CodePathState (#17510) (Nicholas C. Zakas)
  • bc77c9a chore: Document and refactor ForkContext (#17566) (Nicholas C. Zakas)
  • 24e1f14 chore: Refactor and document CodePath (#17558) (Nicholas C. Zakas)

v8.50.0

Features

  • 27d5a9e feat: add suggestions to array-callback-return (#17590) (Tanuj Kanti)
  • f9082ff feat: flat-rule-tester make sure default config always matches (#17585) (fnx)
  • 83914ad feat: Implement SourceCode#applyInlineConfig() (#17351) (Nicholas C. Zakas)
  • 22a5582 feat: add rule no-object-constructor, deprecate no-new-object (#17576) (Francesco Trotta)
  • 85a3d9e feat: allowVoid option in array-callback-return (#17564) (Tanuj Kanti)

Bug Fixes

  • cc4d26b fix: Ensure deprecated context.parserServices warns (#17593) (Nicholas C. Zakas)
  • 1ea4cfb fix: Ensure all RuleTester tests all deprecated context methods (#17587) (Nicholas C. Zakas)
  • aa1b657 fix: wrong suggestion and message in no-misleading-character-class (#17571) (Yosuke Ota)

Documentation

  • 1800537 docs: Fix and standardize JSX code examples (#17591) (Francesco Trotta)
  • 48a44a7 docs: Add correct/incorrect tags to prefer-arrow-callback (#17589) (Francesco Trotta)
  • 20893d4 docs: fix incorrect tag's place (#17575) (Tanuj Kanti)
  • bd7a71f docs: Update README (GitHub Actions Bot)

Chores

  • f8a8a2d chore: upgrade @​eslint/js@​8.50.0 (#17599) (Milos Djermanovic)
  • 38ada6d chore: package.json update for @​eslint/js release (ESLint Jenkins)
Changelog

Sourced from eslint's changelog.

v8.51.0 - October 6, 2023

  • 1ef39ea chore: upgrade @​eslint/js@​8.51.0 (#17624) (Milos Djermanovic)
  • f8c7403 chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • f976b2f fix: make rule severity case-sensitive in flat config (#17619) (Milos Djermanovic)
  • 0edfe36 fix: Ensure crash error messages are not duplicated (#17584) (Nicholas C. Zakas)
  • ee5be81 docs: default to sourceType: "module" in rule examples (#17615) (Francesco Trotta)
  • dd79abc fix: eslint-disable to be able to parse quoted rule names (#17612) (Yosuke Ota)
  • d2f6801 fix: Ensure correct code path for && followed by ?? (#17618) (Nicholas C. Zakas)
  • 2665552 test: fix flat config linter tests to use Linter in flat config mode (#17616) (Milos Djermanovic)
  • 1aa26df docs: Add more examples for multiline-ternary (#17610) (George Ashiotis)
  • 47d0b44 docs: Update README (GitHub Actions Bot)
  • dbf831e docs: use generated og image (#17601) (Percy Ma)
  • 0a9c433 feat: Add --no-warn-ignored CLI option for flat config (#17569) (Domantas Petrauskas)
  • 1866da5 docs: Update README (GitHub Actions Bot)
  • 7b77bcc chore: Refactor CodePathState (#17510) (Nicholas C. Zakas)
  • 977e67e feat: logical-assignment-operators to report expressions with 3 operands (#17600) (Yosuke Ota)
  • bc77c9a chore: Document and refactor ForkContext (#17566) (Nicholas C. Zakas)
  • 24e1f14 chore: Refactor and document CodePath (#17558) (Nicholas C. Zakas)

v8.50.0 - September 22, 2023

  • f8a8a2d chore: upgrade @​eslint/js@​8.50.0 (#17599) (Milos Djermanovic)
  • 38ada6d chore: package.json update for @​eslint/js release (ESLint Jenkins)
  • 27d5a9e feat: add suggestions to array-callback-return (#17590) (Tanuj Kanti)
  • f9082ff feat: flat-rule-tester make sure default config always matches (#17585) (fnx)
  • 83914ad feat: Implement SourceCode#applyInlineConfig() (#17351) (Nicholas C. Zakas)
  • cc4d26b fix: Ensure deprecated context.parserServices warns (#17593) (Nicholas C. Zakas)
  • 1ea4cfb fix: Ensure all RuleTester tests all deprecated context methods (#17587) (Nicholas C. Zakas)
  • 1800537 docs: Fix and standardize JSX code examples (#17591) (Francesco Trotta)
  • 22a5582 feat: add rule no-object-constructor, deprecate no-new-object (#17576) (Francesco Trotta)
  • 48a44a7 docs: Add correct/incorrect tags to prefer-arrow-callback (#17589) (Francesco Trotta)
  • aa1b657 fix: wrong suggestion and message in no-misleading-character-class (#17571) (Yosuke Ota)
  • 20893d4 docs: fix incorrect tag's place (#17575) (Tanuj Kanti)
  • 85a3d9e feat: allowVoid option in array-callback-return (#17564) (Tanuj Kanti)
  • bd7a71f docs: Update README (GitHub Actions Bot)
Commits
  • f079382 8.51.0
  • e8235e5 Build: changelog update for 8.51.0
  • 1ef39ea chore: upgrade @​eslint/js@​8.51.0 (#17624)
  • f8c7403 chore: package.json update for @​eslint/js release
  • f976b2f fix: make rule severity case-sensitive in flat config (#17619)
  • 0edfe36 fix: Ensure crash error messages are not duplicated (#17584)
  • ee5be81 docs: default to sourceType: "module" in rule examples (#17615)
  • dd79abc fix: eslint-disable to be able to parse quoted rule names (#17612)
  • d2f6801 fix: Ensure correct code path for && followed by ?? (#17618)
  • 2665552 test: fix flat config linter tests to use Linter in flat config mode (#17616)
  • Additional commits viewable in compare view

Updates eslint-plugin-mocha from 10.1.0 to 10.2.0

Release notes

Sourced from eslint-plugin-mocha's releases.

10.2.0

Features

  • Support function calls as custom names (to stop false warnings) (#336)

Documentation

  • Automate docs with eslint-doc-generator (#330)

Dependency Upgrades

  • Update all dependencies (#334)

Build-Related

  • Include Node.js v20 in continuous integration pipeline (#338)
  • Introduce "release-it" to make releases more comfortable (#337)
Changelog

Sourced from eslint-plugin-mocha's changelog.

10.2.0 (September 25, 2023)

Features

  • Support function calls as custom names (to stop false warnings) (#336)

Documentation

  • Automate docs with eslint-doc-generator (#330)

Dependency Upgrades

  • Update all dependencies (#334)

Build-Related

  • Include Node.js v20 in continuous integration pipeline (#338)
  • Introduce "release-it" to make releases more comfortable (#337)
Commits
  • 2c4ac44 Release 10.2.0
  • e855322 Fix passing arguments to changelog command
  • 76646c4 Don’t check workspace via pr-log
  • 7d9f024 Adjust release-it settings
  • 9a2eb49 Merge pull request #338 from lo1tuma/node20
  • 4f2aefa Include Node.js v20 in continuous integration pipeline
  • dd6522d Merge pull request #337 from screendriver/release-it
  • 760684c Update release-it to v16.2.0
  • 2dcc676 Update pr-log to v5.0.0
  • 122206c Configure release-it
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 3 updates: [chai](https://github.com/chaijs/chai), [eslint](https://github.com/eslint/eslint) and [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha).


Updates `chai` from 4.3.8 to 4.3.10
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/4.x.x/History.md)
- [Commits](chaijs/chai@v4.3.8...v4.3.10)

Updates `eslint` from 8.49.0 to 8.51.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v8.49.0...v8.51.0)

Updates `eslint-plugin-mocha` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)
- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/master/CHANGELOG.md)
- [Commits](lo1tuma/eslint-plugin-mocha@10.1.0...10.2.0)

---
updated-dependencies:
- dependency-name: chai
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-mocha
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 9, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 16, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 16, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dev-dependencies-25df8b8923 branch October 16, 2023 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants