Skip to content

Bump minimatch, grunt-contrib-jshint, grunt-sync and sails - #8

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minimatch-and-grunt-contrib-jshint-and-grunt-sync-and-sails-3.0.4
Open

Bump minimatch, grunt-contrib-jshint, grunt-sync and sails#8
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/minimatch-and-grunt-contrib-jshint-and-grunt-sync-and-sails-3.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2022

Copy link
Copy Markdown

Bumps minimatch to 3.0.4 and updates ancestor dependencies minimatch, grunt-contrib-jshint, grunt-sync and sails. These dependencies need to be updated together.

Updates minimatch from 0.3.0 to 3.0.4

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for minimatch since your current version.


Updates grunt-contrib-jshint from 0.11.3 to 3.2.0

Release notes

Sourced from grunt-contrib-jshint's releases.

v3.2.0

  • Merge pull request #307 from gruntjs/hotfix-main d9c3b35
  • Patch Update 3.1.1 f3eb299

gruntjs/grunt-contrib-jshint@v3.1.0...v3.2.0

v3.1.1

  • Update to 3.1.1 ace956f

gruntjs/grunt-contrib-jshint@v3.1.0...v3.1.1

v3.1.0

  • update jshint to ~2.13.0 b7edf02
  • Merge pull request #303 from gruntjs/dependabot/npm_and_yarn/path-parse-1.0.7 270d8dd
  • Bump path-parse from 1.0.6 to 1.0.7 77dca66
  • Merge pull request #301 from gruntjs/dependabot/npm_and_yarn/hosted-git-info-2.8.9 1028d82
  • Bump hosted-git-info from 2.8.8 to 2.8.9 eb0314f
  • Merge pull request #300 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.21 337623c
  • Bump lodash from 4.17.20 to 4.17.21 51e07d4
  • Merge pull request #299 from gruntjs/dependabot/npm_and_yarn/y18n-4.0.1 9c08ff1
  • Bump y18n from 4.0.0 to 4.0.1 7834701
  • Merge pull request #298 from gruntjs/dependabot/npm_and_yarn/ini-1.3.8 d4359aa
  • Bump ini from 1.3.5 to 1.3.8 52f5e31
  • Add changelog 8f597c2
  • Merge pull request #275 from raddevon/patch-1 fc210e7
  • Merge pull request #297 from gruntjs/peer-dep 03f4302
  • Remove Grunt peerDependency 01d13d2
  • Merge pull request #296 from gruntjs/chalk-upt c78f6ee
  • Update chalk 656f31b
  • Merge pull request #295 from gruntjs/uptdate-deps-oct 16ee83d
  • Update dependencies, switch to github actions df2b06d
  • Merge pull request #291 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.15 9bb54cd
  • Bump lodash from 4.17.10 to 4.17.15 d2e4063
  • Ensures errors in stdoutEqual callback are logged 7a6fec4

gruntjs/grunt-contrib-jshint@v2.1.0...v3.1.0

v2.0.0

  • Bump devDependencies.
  • Drop Node.js < 6 support.

v1.1.0

No release notes provided.

v1.0.0

No release notes provided.

v0.12.0

No release notes provided.

Changelog

Sourced from grunt-contrib-jshint's changelog.

v3.2.0: date: 2022-02-17 changes: - Bump dependencies, including jshint. v3.0.0: date: 2020-10-20 changes: - Bump dependencies. - Switch to GitHub actions. - Ensures errors in stdoutEqual callback are logged. - Requires Node 10+. v2.1.0: date: 2019-03-18 changes: - Bump dependencies. - Update to latest JSHint v2.0.0: date: 2018-09-22 changes: - Bump devDependencies. - Drop Node.js < 6 support. v1.1.0: date: 2016-11-23 changes: - Fix relative output - Bump minor version v1.0.0: date: 2016-02-16 changes: - Replace String prototype colors with chalk. - Update Grunt peerDep to >=0.4.0. v0.12.0: date: 2016-01-17 changes: - Update to JSHint ~2.9.0.

Commits
  • d9c3b35 Merge pull request #307 from gruntjs/hotfix-main
  • f3eb299 Patch Update 3.1.1
  • 1910674 3.1.0
  • b7edf02 update jshint to ~2.13.0
  • 270d8dd Merge pull request #303 from gruntjs/dependabot/npm_and_yarn/path-parse-1.0.7
  • 77dca66 Bump path-parse from 1.0.6 to 1.0.7
  • 1028d82 Merge pull request #301 from gruntjs/dependabot/npm_and_yarn/hosted-git-info-...
  • eb0314f Bump hosted-git-info from 2.8.8 to 2.8.9
  • 337623c Merge pull request #300 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.21
  • 51e07d4 Bump lodash from 4.17.20 to 4.17.21
  • Additional commits viewable in compare view

Updates grunt-sync from 0.5.2 to 0.8.2

Release notes

Sourced from grunt-sync's releases.

v0.8.1

Change required engines to match the ones from fs-extra, due to #61

v0.8.0

Removes promise-io and lodash dependency. Fixes compatiblity with new node version. Kudos to @​nwoltman

v0.7.0

No release notes provided.

Commits

Updates sails from 0.12.14 to 1.5.3

Release notes

Sourced from sails's releases.

v1.4.0

  • Support sameSite:none in cookie options (thanks @​pixnlove!)

v1.3.1

  • Updated the machine-as-action dependency to include a reminder about escaping strings with dynamic data when they're injected (Thanks @​dusterherz for letting us know about this)

v1.2.5

  • Added more info to the error message shown when an app fails to lift
  • Updated the sails-generate dependency

v1.2.4

  • Fix resourceful PubSub for the update blueprint action, resolving #6824 (thanks @​Tarrask!)
  • Re-enable afterDestroy lifecycle callback for the destroy blueprint action, fixing #5630
  • Update CSRF hook to fix an issue with disabling CSRF for routes defined using regular expression syntax, resolving #6838
  • Update session hook to fix an issue with double-prefixes, resolving #6541 (thanks @​travispwingo!)
  • Update minimist dependency to resolve potential vulnerabilities
  • Update various comments, error messages, and logs for clarity/consistency

v1.2.3

1.2.3

  • Update eslint dev depdendency to get rid of vulnerability warnings
  • Minor formatting/verbiage fixes

v1.2.2

• Update merge-defaults dependency to resolve potential vulnerabilities • Update sails-stringfile dependency to resolve potential vulnerabilities • Update sort-route-addresses dependency to resolve potential vulnerabilities

v1.2.1

  • Added sails migrate for quickly running auto-migrations by hand
  • The output of sails inspect no longer includes controller information
  • When loading user hooks, if sails.config.loadHooks is specified, skip hooks whose names aren't explicitly included
  • Increased time to display warning message in config/bootstrap.js from 5 seconds to 30 seconds
  • Switched to using updateOne in the "update" blueprint
  • Blueprint queries no longer include fetch: true by default, to avoid warnings from updateOne
  • Update error mesage in default serverError response to use flaverr
  • In lib/router/res.js, instead of always setting 'content-type' to 'application/json', only set it if res.get('content-type') is falsy
  • Update flaverr dependency
  • Update i18n-2 dependency to resolve deprecation warning
  • Update rc dependency to address potential vulnerabilities
  • Update machinepack-process dependency to address potential vulnerabilities
  • Update machinepack-redis dependency to address potential vulnerabilities

v0.9.13: 0.9.13

No release notes provided.

v0.9.12: 0.9.12

No release notes provided.

Changelog

Sourced from sails's changelog.

Sails Changelog

1.2.0

  • Added sails migrate for quickly running auto-migrations by hand
  • The output of sails inspect no longer includes controller information
  • When loading user hooks, if sails.config.loadHooks is specified, skip hooks whose names aren't explicitly included
  • Increased time to display warning message in config/bootstrap.js from 5 seconds to 30 seconds
  • Switched to using updateOne in the "update" blueprint
  • Blueprint queries no longer include fetch: true by default, to avoid warnings from updateOne
  • Update error mesage in default serverError response to use flaverr
  • In lib/router/res.js, instead of always setting 'content-type' to 'application/json', only set it if res.get('content-type') is falsy
  • Update flaverr dependency
  • Update i18n-2 dependency to resolve deprecation warning
  • Update rc dependency to address potential vulnerabilities
  • Update machinepack-process dependency to address potential vulnerabilities
  • Update machinepack-redis dependency to address potential vulnerabilities

1.1.0

As always, we owe a debt of gratitude to our contributors-- we mentioned you below next to the features/enhancements/fixes you contributed to. (Apologies to anyone we missed, there was a lot in this release! Let us know and we'll add you to the list.)

We especially want to thank those contributors who helped out with the documentation:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by eashaw, a new releaser for sails since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.0.4 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch), [grunt-contrib-jshint](https://github.com/gruntjs/grunt-contrib-jshint), [grunt-sync](https://github.com/tomusdrw/grunt-sync) and [sails](https://github.com/balderdashy/sails). These dependencies need to be updated together.


Updates `minimatch` from 0.3.0 to 3.0.4
- [Release notes](https://github.com/isaacs/minimatch/releases)
- [Commits](isaacs/minimatch@v0.3.0...v3.0.4)

Updates `grunt-contrib-jshint` from 0.11.3 to 3.2.0
- [Release notes](https://github.com/gruntjs/grunt-contrib-jshint/releases)
- [Changelog](https://github.com/gruntjs/grunt-contrib-jshint/blob/main/CHANGELOG)
- [Commits](gruntjs/grunt-contrib-jshint@v0.11.3...v3.2.0)

Updates `grunt-sync` from 0.5.2 to 0.8.2
- [Release notes](https://github.com/tomusdrw/grunt-sync/releases)
- [Commits](https://github.com/tomusdrw/grunt-sync/commits)

Updates `sails` from 0.12.14 to 1.5.3
- [Release notes](https://github.com/balderdashy/sails/releases)
- [Changelog](https://github.com/balderdashy/sails/blob/master/CHANGELOG.md)
- [Commits](balderdashy/sails@v0.12.14...v1.5.3)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
- dependency-name: grunt-contrib-jshint
  dependency-type: direct:production
- dependency-name: grunt-sync
  dependency-type: direct:production
- dependency-name: sails
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants