chore(deps): bump yaml, @commitlint/cli, @commitlint/load and husky #307
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Removes [yaml](https://github.com/eemeli/yaml). It's no longer used after updating ancestor dependencies [yaml](https://github.com/eemeli/yaml), [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli), [@commitlint/load](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/load) and [husky](https://github.com/typicode/husky). These dependencies need to be updated together. Removes `yaml` Updates `@commitlint/cli` from 11.0.0 to 17.6.1 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v17.6.1/@commitlint/cli) Updates `@commitlint/load` from 11.0.0 to 17.5.0 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/load/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v17.5.0/@commitlint/load) Updates `husky` from 4.3.6 to 8.0.3 - [Release notes](https://github.com/typicode/husky/releases) - [Commits](typicode/husky@v4.3.6...v8.0.3) --- updated-dependencies: - dependency-name: yaml dependency-type: indirect - dependency-name: "@commitlint/cli" dependency-type: direct:development - dependency-name: "@commitlint/load" dependency-type: indirect - dependency-name: husky dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
![cr-gpt[bot]](https://avatars.githubusercontent.com/in/292659?s=60&v=4){kind=small}
| "commitizen": "^4.2.2", | ||
| "commitlint-config-cz": "^0.13.2", | ||
| "cz-customizable": "^6.3.0", | ||
| "eslint": "^7.17.0", | ||
| "husky": "^4.3.6", | ||
| "husky": "^8.0.3", | ||
| "standard": "^14.3.4", | ||
| "standard-version": "^9.1.0" | ||
| }, |
There was a problem hiding this comment.
code review
Firstly, the code is using the latest version of commitlint/cli and husky, which is good for security.
Secondly, standard and standard-version are being used for linting and versioning. This ensures that all code is consistent and follows the same standards.
Thirdly, cz-customizable and commmitzen are being used for committing code. This helps ensure that all commits are properly formatted and follow the same standards.
Finally, eslint is being used for linting Javascript code. This helps to ensure that all code is readable and follows the same standards.
Overall, the code appears to be well-structured and following best practices. There are no obvious risks or bugs present in the code. However, it would be beneficial to test the code to ensure that it is functioning as intended.
Removes yaml. It's no longer used after updating ancestor dependencies yaml, @commitlint/cli, @commitlint/load and husky. These dependencies need to be updated together.
Removes
yamlUpdates
@commitlint/clifrom 11.0.0 to 17.6.1Release notes
Sourced from
@commitlint/cli's releases.... (truncated)
Changelog
Sourced from
@commitlint/cli's changelog.... (truncated)
Commits
5da1048v17.6.128bc4c7v17.6.018fbed7v17.5.1665fbe4v17.5.01aeec3cv17.4.4e3e4775v17.4.33c691adv17.4.2317d044v17.4.17b0f7e8v17.4.0a437923fix: update dependency fs-extra to v11 (#3460)Updates
@commitlint/loadfrom 11.0.0 to 17.5.0Release notes
Sourced from
@commitlint/load's releases.... (truncated)
Changelog
Sourced from
@commitlint/load's changelog.... (truncated)
Commits
665fbe4v17.5.0c0a27fffeat: support typescript 5.0 (#3566)1aeec3cv17.4.43c691adv17.4.2dc2c899fix(load): fixes a bug when a ts commitlint config is compiled twice (#3499)317d044v17.4.1f19e08fchore: convert@types/nodeversion to * (#3490)7b0f7e8v17.4.0c0b32fechore: move@types/nodeto devDependencies (#3464)85ad18bfeat: support config .cts extension (#3461)Updates
huskyfrom 4.3.6 to 8.0.3Release notes
Sourced from husky's releases.
... (truncated)
Commits
3c0e08d8.0.31ed3f9afix: change message500d450fix: add git not installed error message (#1208)2945907chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#1229)9f6dac4chore: remove stale botf6c2c06chore: update package-lock.jsonf862dc2chore: update devDependencies9efb7208.0.2573de60docs: remove deprecated npm set-script3db28d4chore: increase daysUntilStaleDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.