Skip to content

build(deps-dev): bump license-checker-rseidelsohn from 4.4.2 to 5.0.1#135

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/license-checker-rseidelsohn-5.0.0
Open

build(deps-dev): bump license-checker-rseidelsohn from 4.4.2 to 5.0.1#135
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/license-checker-rseidelsohn-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 27, 2026 •
edited
Loading

Bumps license-checker-rseidelsohn from 4.4.2 to 5.0.1.

Release notes

Sourced from license-checker-rseidelsohn's releases.

Fixing 5.0.0 :)

🧐 Full Changelog: RSeidelsohn/license-checker-rseidelsohn@v5.0.0...v5.0.1

What's Changed

This is a bugfix release that addresses some regressions that happened with 5.0.0.

🐛 Bugs fixed:

  • Updated the wrapper around @npmcli/arborist and @npmcli/package-json so that it behaves more consistently like the previous solution based on read-installed-packages. This (hopefully) ensures we have the same behavior as before 🤞

Housekeeping galore

🧐 Full Changelog: RSeidelsohn/license-checker-rseidelsohn@v4.4.2...v5.0.0

What's Changed

❌ Breaking changes:

  • Node.js support now baselined to 24 (plus npm 11).
  • The --direct option has slightly changed its behavior, but it's now considered mostly deprecated.

🎉 New features:

  • --depth was introduced to replace --direct.

🐛 Bugs fixed:

  • Typing of init callback

🧹 Housekeeping:

  • Updated (or entirely removed) several outdated dependencies.
  • Code is now proper ESM.
  • Testing with Vitest
  • Dropped ESLint + Prettier in favor of Biome.

New Contributors

Changelog

Sourced from license-checker-rseidelsohn's changelog.

Change Log

v5.0.0 (2026/05/27 06:00 +00:00)

Commits
  • 2f83a3b 5.0.1
  • 3ec070f chore: update changelog
  • 8f43b56 fix: more fixes to restore the original behavior of read-installed-packages
  • fb88dc6 fix: properly parse dependency license information from package.json files
  • 5b60e4b 5.0.0
  • b1e2616 chore: drop read-installed-packages dep
  • 9d5b0d3 chore: update changelog from script
  • 4a0b2b0 chore: update contrib script
  • d447390 fix: init callback typing
  • e741230 fix: work around deprecation warning for existsSync
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by defaude, a new releaser for license-checker-rseidelsohn since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
@dependabot dependabot Bot requested a review from theagenticguy as a code owner May 27, 2026 10:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
@theagenticguy theagenticguy mentioned this pull request May 28, 2026
Merged
6 tasks
@theagenticguy
Copy link
Copy Markdown
Owner

theagenticguy commented May 28, 2026

Held back from the consolidation in #137. license-checker-rseidelsohn v5 requires Node >= 24, but the repo's engines.node is >=22.0.0 and CI runs both 22 and 24. Leaving this PR open as a tracking marker — pick it up when the repo drops Node 22 support.

theagenticguy added a commit that referenced this pull request May 28, 2026
@theagenticguy
build(deps): consolidate weekly Dependabot bumps (2026-05-28) (#137)
9e6ccb7 
## Summary

Consolidates the 11 open Dependabot PRs into a single merge to cut CI
churn. Lockfile regenerated and full local gate (`pnpm run check` — lint
+ typecheck + test + banned-strings) is green.

### npm bumps

| Package | From | To |
| --- | --- | --- |
| `@aws-sdk/client-bedrock-runtime` | 3.1045.0 | 3.1054.0 |
| `@aws-sdk/client-sagemaker-runtime` | 3.1045.0 | 3.1054.0 |
| `@duckdb/node-api` | 1.5.2-r.1 | 1.5.2-r.2 |
| `@types/node` (typescript-tooling group) | 25.7.0 | 25.9.1 |
| `astro` | 6.3.3 | 6.3.8 |
| `lefthook` | 2.1.6 | 2.1.8 |
| `lru-cache` | 11.3.6 | 11.5.0 |
| `tsx` | 4.21.0 | 4.22.3 |
| `web-tree-sitter` (tree-sitter group) | 0.26.8 | 0.26.9 |

### github-actions bumps (SHA-pinned)

| Action | From | To |
| --- | --- | --- |
| `github/codeql-action` | v4.35.4 (`68bde55…`) | v4.35.5 (`9e0d7b8…`) |
| `github/codeql-action` (release.yml, codeql-bundle) | `9887d98…` |
`f4d0a7a…` |
| `pnpm/action-setup` | v4.1.0 (`a7487c7…`) | v6.0.8 (`0e279bb…`) |

### Held back

- **license-checker-rseidelsohn 4.4.2 → 5.0.0** — v5 requires Node >= 24
but the repo's `engines.node` is `>=22.0.0` and CI's `node-version`
matrix runs both 22 and 24. Pick this up when the repo drops Node 22
support. PR #135 stays open as a tracking marker if the user prefers;
otherwise it should be closed with a comment.

## Closes

#123, #124, #125, #126, #127, #128, #129, #133, #134, #136

(also supersedes #135 modulo the Node 22 caveat above)

## Test plan

- [x] `pnpm install --no-frozen-lockfile` (lockfile regen clean)
- [x] `pnpm run lint` — biome clean across 670 files
- [x] `pnpm run typecheck` — clean across all 19 workspace projects
- [x] `pnpm run test` — 1959 tests, 0 failures across 16 packages
- [x] `pnpm run banned-strings` — PASS
- [ ] CI green on Node 22 + Node 24 matrix
@dependabot
build(deps-dev): bump license-checker-rseidelsohn from 4.4.2 to 5.0.1
bcce7bc 
Bumps [license-checker-rseidelsohn](https://github.com/RSeidelsohn/license-checker-rseidelsohn) from 4.4.2 to 5.0.1.
- [Release notes](https://github.com/RSeidelsohn/license-checker-rseidelsohn/releases)
- [Changelog](https://github.com/RSeidelsohn/license-checker-rseidelsohn/blob/master/CHANGELOG.md)
- [Commits](RSeidelsohn/license-checker-rseidelsohn@v4.4.2...v5.0.1)

---
updated-dependencies:
- dependency-name: license-checker-rseidelsohn
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump license-checker-rseidelsohn from 4.4.2 to 5.0.0 build(deps-dev): bump license-checker-rseidelsohn from 4.4.2 to 5.0.1 May 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/license-checker-rseidelsohn-5.0.0 branch from 74cffc7 to bcce7bc Compare May 28, 2026 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@theagenticguy theagenticguy Awaiting requested review from theagenticguy theagenticguy is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@theagenticguy