Skip to content

Bump semver from 5.7.1 to 5.7.2#3153

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/semver-5.7.2
Closed

Bump semver from 5.7.1 to 5.7.2#3153
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/semver-5.7.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 16, 2023

Bumps semver from 5.7.1 to 5.7.2.

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 16, 2023
@codecov-commenter
Copy link

codecov-commenter commented Jul 16, 2023

Codecov Report

Merging #3153 (8b0ed73) into master (e87f50e) will increase coverage by 0.08%.
The diff coverage is n/a.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##           master    #3153      +/-   ##
==========================================
+ Coverage   25.56%   25.65%   +0.08%     
==========================================
  Files          53       53              
  Lines       11481    11481              
==========================================
+ Hits         2935     2945      +10     
+ Misses       8546     8536      -10     

see 2 files with indirect coverage changes

rejas
rejas previously approved these changes Jul 16, 2023
@rejas rejas force-pushed the dependabot/npm_and_yarn/semver-5.7.2 branch from a009c0b to 558c59c Compare July 16, 2023 20:19
@rejas rejas changed the base branch from master to develop July 16, 2023 20:21
@rejas
Copy link
Collaborator

rejas commented Jul 16, 2023

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 16, 2023

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@rejas
Copy link
Collaborator

rejas commented Jul 16, 2023

@dependabot recreate

@dependabot dependabot bot changed the base branch from develop to master July 16, 2023 20:28
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/semver-5.7.2 branch from 558c59c to a87fa2d Compare July 16, 2023 20:28
@rejas rejas changed the base branch from master to develop July 16, 2023 20:28
@rejas
Copy link
Collaborator

rejas commented Jul 16, 2023

@dependabot rebase

@rejas rejas mentioned this pull request Jul 16, 2023
khassel pushed a commit that referenced this pull request Jul 16, 2023
Takes #3153 (why does that
always base against master despite the yaml configuring it against
develop?) and updates othe rminor dependencies (not prettier v3 that
will take a little time)

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Dependabot couldn't find the original pull request head commit, a009c0b.
@dependabot dependabot bot changed the base branch from develop to master July 16, 2023 21:18
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/semver-5.7.2 branch from a87fa2d to 8b0ed73 Compare July 16, 2023 21:18
@khassel
Copy link
Collaborator

khassel commented Jul 16, 2023

done with #3155

@khassel khassel closed this Jul 16, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 16, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/semver-5.7.2 branch July 16, 2023 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants