Bump js-yaml, eslint, eslint-plugin-import and mocha - #196
Bump js-yaml, eslint, eslint-plugin-import and mocha#196dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.3.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [eslint](https://github.com/eslint/eslint), [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together. Updates `js-yaml` from 3.13.1 to 4.3.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.13.1...4.3.1) Updates `eslint` from 7.32.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v7.32.0...v10.8.1) Updates `eslint-plugin-import` from 2.22.0 to 2.32.0 - [Release notes](https://github.com/import-js/eslint-plugin-import/releases) - [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md) - [Commits](import-js/eslint-plugin-import@v2.22.0...v2.32.0) Updates `mocha` from 7.2.0 to 11.8.0 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/v11.8.0/CHANGELOG.md) - [Commits](mochajs/mocha@v7.2.0...v11.8.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development - dependency-name: js-yaml dependency-version: 4.3.1 dependency-type: indirect - dependency-name: mocha dependency-version: 11.8.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
8629fa1 to
8f2cdf3
Compare
|
Closing — this one doesn't install. I tested it rather than reading the diff.
|
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Dependabot opened #196 ("Bump js-yaml, eslint, eslint-plugin-import and mocha") against master. It does not install, and the reason is worth recording so the next attempt doesn't repeat it. #196 bumps eslint to ^10.8.1 while leaving eslint-config-standard@12 and eslint-plugin-node@7 behind. `npm install` AND `npm ci` both fail ERESOLVE on eslint-plugin-import@2.32.0, whose peer range is eslint <= 9 -- so it would break a deploy, not just a dev install. Forced through with --legacy-peer-deps it installs but still cannot run: eslint 9+ requires flat config and this repo has .eslintrc.json. Split the salvageable part out. The four js-yaml advisories (all development scope) come from mocha, not eslint: mocha ^7.2.0 -> ^11.8.0 on its own takes mocha/node_modules/js-yaml from 3.13.1 to 4.3.1 and drops one high advisory (high 14 -> 13), with offline suites still at 247 passing / 2 pre-existing failures. Recorded rather than applied, since it is unrelated to the forever removal this branch is about. Also recorded the mocha 11 behaviour change that will bite: bare directory arguments are no longer accepted, and `mocha tests/test-util/` reports "No test files found" instead of erroring usefully. The package.json scripts already use test.*.spec.js patterns and are unaffected; ad-hoc and CI invocations are what to check. And the real shape of the eslint work: eslint-config-standard@17 peers eslint ^8.0.1 and wants eslint-plugin-n, a DIFFERENT package from the declared eslint-plugin-node -- so it is a plugin swap plus a config-format rewrite plus a lint re-run over the 56 pre-existing errors, not a version bump. #196 closed with this analysis. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
1 participant
Bumps js-yaml to 4.3.1 and updates ancestor dependencies js-yaml, eslint, eslint-plugin-import and mocha. These dependencies need to be updated together.
Updates
js-yamlfrom 3.13.1 to 4.3.1Changelog
Sourced from js-yaml's changelog.
... (truncated)
Commits
86e91b84.3.1 releasedc3cc4b0Backport quadratic complexity fix for !!omap33d05b54.3.0 released663bfabDrop demo publish, to not override new v5 one.1cb8c7bAdd v4-legacy tag for publish02f27afRestore umd builds back to es58be84edFix es5 compatibility59423c6ReplacemaxMergeSeqLengthoption withmaxTotalMergeKeys(more robust). Ba...6842ef6doc polish590dbab4.2.0 releasedUpdates
eslintfrom 7.32.0 to 10.8.1Release notes
Sourced from eslint's releases.
... (truncated)
Commits
c049dc310.8.1a3f7826Build: changelog update for 10.8.118eb0a7fix: prevent ASI hazard inno-unused-labelsautofix (#21173)0a14800chore: update github/codeql-action action to v4.37.4 (#21196)7d0cbf8docs: Update README05adcb1test: fix failing ecosystem test foreslint-plugin-unicorn(#21191)5611035test: add error locations info tono-void(#21185)ee47333ci: bump github/codeql-action from 4 to 4.37.3 (#21176)f131c03chore: improve ecosystem test failure reporting (#20937)0a05812docs: add missing backticks tono-duplicate-imports.js(#21183)Maintainer changes
This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.
Updates
eslint-plugin-importfrom 2.22.0 to 2.32.0Release notes
Sourced from eslint-plugin-import's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-import's changelog.
... (truncated)
Commits
01c9eb0v2.32.0ae57cc1[Deps] updatearray-includes,array.prototype.findlastindex, `eslint-modu...9e1ad6b[Fix]order: codify invariants from docs into config schemaf017790[Docs]no-restricted-paths: clarify wording and fix errors7d83a57[Docs]no-unused-modules: add missing double quote519eb94[utils] v2.12.171ad145[actions] split out tests into new vs old eslint9b096c4[utils] [dev deps] update@arethetypeswrong/cli,@ljharb/tsconfig, `@type...da5f6ec[Fix]enforce-node-protocol-usage: avoid a crash with some TS code6e49a58[Refactor]order: remove unnecessary negative checkInstall script changes
This version modifies
prepublishscript that runs during installation. Review the package contents before updating.Updates
mochafrom 7.2.0 to 11.8.0Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
90c1bb3chore(v11.x): release 11.8.0 (#6076)05aec43chore(CI): bump Node from 22 to 24 in publish action (#6206)1f44d5fchore: change site title to Mocha 11, update index note (#6086)26deb23chore: add modern Netlify to v11.x branch (#6082)7830309feat: add --fail-hook-affected-tests option to report skipped tests as failed...41f2b95chore(v11.x): release 11.7.7 (#6068)3477563fix: surface ts-node compile errors (#6045)3765ba0chore(v11.x): release 11.7.6 (#5632)73ebdfafix(test): replacewmicusage with native Windows API (#5694)aafe6fdfix: makedescribe().timeout()workMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.