Bumpslint-staged from 13.2.2 to 16.2.1.
Release notes
Sourced fromlint-staged's releases.
v16.2.1
Patch Changes
#16648277b3b Thanks@iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[] and can't be mutated. Thanks@outslept!
export default {--- "*": (files: string[]) => void console.log('staged files', files)+++ "*": (files: readonly string[]) => void console.log('staged files', files)}#165470b9af3 Thanks@iiroj! - This version has been published from GitHub Actions usingTrusted Publishing for npm packages.
#16594996817 Thanks@iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.json files in the working directory. This situation might happen when runninglint-staged for a single package in a monorepo.
#16547021f0a Thanks@iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates tolint-staged. This was changed in16.2.0 after the vulnerability issues withchalk anddebug, which were also removed in the same version.
Given the recent vulnerabilities in thenpm ecosystem, it's best to be very careful when updating dependencies.
v16.2.0
Minor Changes
#161599eb742 Thanks@iiroj! - Added a new option--fail-on-changes to makelint-staged exit with code 1 when tasks modify any files, making theprecommit hook fail. This is similar to thegit diff --exit-code option. Using this flag also implies the--no-revert flag which means any changes made by tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.
#1611cd05fd3 Thanks@rlorenzo! - Added a new option--continue-on-error so thatlint-staged will run all tasks to completion even if some of them fail. By default,lint-staded will exit early on the first failure.
#163782fcc07 Thanks@iiroj! - Internallint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in thelint-staged configuration file.
#1647a5ecc06 Thanks@iiroj! - Removedebug as a dependency due to recent malware issue; read more atdebug-js/debug#1005. Because of this, theDEBUG environment variable is no longer supported — use the--debug to enable debugging
#16368db2717 Thanks@iiroj! - Added a new option--hide-unstaged so thatlint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags--hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just--hide-unstaged.
Thanks to@ItsNickBarry for the idea and initial implementation in#1552.
#16487900b3b Thanks@iiroj! - Removelilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly intolint-staged and should work about the same.
Patch Changes
#16337f9e485 Thanks@dependabot! - Bumpslistr2 from 9.0.3 to 9.0.4.
#162699d5a9b Thanks@iiroj! - Due to recent phishing attacks, for examplechalk@5.6.1 was released with malware. To avoidlint-staged's users being at risk thedirect dependencies are pinned to exact versions, instead of allowing future patch versions with thecaret (^) range.
#1588035bbf2 Thanks@outslept! - Increase performance by listing staged files and searching for configuration concurrently.
#1645deba3ad Thanks@iiroj! - Removechalk as a dependency due to recent malware issue; read more atchalk/chalk#656.
If you are having trouble with ANSI color codes when usinglint-staged, you can try setting eitherFORCE_COLOR=true orNO_COLOR=true env variables.
v16.1.6
... (truncated)
Changelog
Sourced fromlint-staged's changelog.
16.2.1
Patch Changes
#16648277b3b Thanks@iiroj! - The built-in TypeScript types have been updated to more closely match the implementation. Notably, the list of staged files supplied to task functions isreadonly string[] and can't be mutated. Thanks@outslept!
export default {--- "*": (files: string[]) => void console.log('staged files', files)+++ "*": (files: readonly string[]) => void console.log('staged files', files)}#165470b9af3 Thanks@iiroj! - This version has been published from GitHub Actions usingTrusted Publishing for npm packages.
#16594996817 Thanks@iiroj! - Fix searching configuration files when the working directory is a subdirectory of a git repository, and there arepackage.json files in the working directory. This situation might happen when runninglint-staged for a single package in a monorepo.
#16547021f0a Thanks@iiroj! - Return the caret semver range (^) to direct dependencies so that future patch and minor versions are allowed. This enables projects to better maintain and deduplicate their own transitive dependencies while not requiring direct updates tolint-staged. This was changed in16.2.0 after the vulnerability issues withchalk anddebug, which were also removed in the same version.
Given the recent vulnerabilities in thenpm ecosystem, it's best to be very careful when updating dependencies.
16.2.0
Minor Changes
#161599eb742 Thanks@iiroj! - Added a new option--fail-on-changes to makelint-staged exit with code 1 when tasks modify any files, making theprecommit hook fail. This is similar to thegit diff --exit-code option. Using this flag also implies the--no-revert flag which means any changes made by tasks will be left in the working tree after failing, so that they can be manually staged and the commit tried again.
#1611cd05fd3 Thanks@rlorenzo! - Added a new option--continue-on-error so thatlint-staged will run all tasks to completion even if some of them fail. By default,lint-staded will exit early on the first failure.
#163782fcc07 Thanks@iiroj! - Internallint-staged errors are now thrown and visible in the console output. Previously they were caught with the process exit code set to 1, but not logged. This happens when, for example, there's a syntax error in thelint-staged configuration file.
#1647a5ecc06 Thanks@iiroj! - Removedebug as a dependency due to recent malware issue; read more atdebug-js/debug#1005. Because of this, theDEBUG environment variable is no longer supported — use the--debug to enable debugging
#16368db2717 Thanks@iiroj! - Added a new option--hide-unstaged so thatlint-staged will hide all unstaged changes to tracked files before running tasks. The changes will be applied back after running the tasks. Note that the combination of flags--hide-unstaged --no-hide-partially-staged isn't meaningful and behaves the same as just--hide-unstaged.
Thanks to@ItsNickBarry for the idea and initial implementation in#1552.
#16487900b3b Thanks@iiroj! - Removelilconfig to reduce reliance on third-party dependencies. It was used to find possible config files outside of those tracked in Git, including from the parent directories. This behavior has been moved directly intolint-staged and should work about the same.
Patch Changes
#16337f9e485 Thanks@dependabot! - Bumpslistr2 from 9.0.3 to 9.0.4.
#162699d5a9b Thanks@iiroj! - Due to recent phishing attacks, for examplechalk@5.6.1 was released with malware. To avoidlint-staged's users being at risk thedirect dependencies are pinned to exact versions, instead of allowing future patch versions with thecaret (^) range.
#1588035bbf2 Thanks@outslept! - Increase performance by listing staged files and searching for configuration concurrently.
#1645deba3ad Thanks@iiroj! - Removechalk as a dependency due to recent malware issue; read more atchalk/chalk#656.
If you are having trouble with ANSI color codes when usinglint-staged, you can try setting eitherFORCE_COLOR=true orNO_COLOR=true env variables.
... (truncated)
Commits
b62e72e chore(changeset): releaseb320abd docs: add example to changeloge1dd5bb fix: use boolean type forfailOnChanges8277b3b fix: update built-in TypeScript types6286f31 perf: load each config file only oncede970bb fix: remove use of "git restore" because it resets file contents instead of a...673fdc3 perf: use "git stash" to directly hide unstaged filesb111dc8 docs: fix typo in CHANGELOG.mdd2b0b73 build(deps-dev): bump@eslint/js from 9.35.0 to 9.36.04996817 fix: always search configuration from both Git and FS- Additional commits viewable incompare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumpslint-staged from 13.2.2 to 16.2.1.
Release notes
Sourced fromlint-staged's releases.
... (truncated)
Changelog
Sourced fromlint-staged's changelog.
... (truncated)
Commits
b62e72echore(changeset): releaseb320abddocs: add example to changeloge1dd5bbfix: use boolean type forfailOnChanges8277b3bfix: update built-in TypeScript types6286f31perf: load each config file only oncede970bbfix: remove use of "git restore" because it resets file contents instead of a...673fdc3perf: use "git stash" to directly hide unstaged filesb111dc8docs: fix typo in CHANGELOG.mdd2b0b73build(deps-dev): bump@eslint/jsfrom 9.35.0 to 9.36.04996817fix: always search configuration from both Git and FSMaintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lint-staged since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)