Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings
This repository was archived by the owner on Nov 8, 2022. It is now read-only.

chore(deps): bump lodash and commitizen#1383

Open
dependabot wants to merge1 commit intodev
base:dev
Choose a base branch
Loading
fromdependabot/npm_and_yarn/lodash-and-commitizen-4.17.21

Conversation

dependabot[bot]
Copy link
Contributor

@dependabotdependabotbot commented on behalf ofgithubOct 24, 2022
edited
Loading

Bumpslodash to 4.17.21 and updates ancestor dependencycommitizen. These dependencies need to be updated together.

Updateslodash from 4.17.14 to 4.17.21

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance oftoNumber,trim andtrimEnd on large input strings
  • 3469357 Prevent command injection through_.template'svariable option
  • ded9bc6 Bump to v4.17.20.
  • 63150ef Documentation fixes.
  • 00f0f62 test.js: Remove trailing comma.
  • 846e434 Temporarily use a custom fork oflodash-cli.
  • 5d046f3 Re-enable Travis tests on4.17 branch.
  • aa816b3 Remove/npm-package.
  • d7fbc52 Bump to v4.17.19
  • Additional commits viewable incompare view
Maintainer changes

This version was pushed to npm bybnjmnt4n, a new releaser for lodash since your current version.


Updatescommitizen from 3.1.2 to 4.2.5

Release notes

Sourced fromcommitizen's releases.

v4.2.5

4.2.5 (2022-07-17)

Bug Fixes

v4.2.4

4.2.4 (2021-05-07)

Bug Fixes

  • deps: update find-node-modules to ^2.1.2 (#824) (e434901)

v4.2.3

4.2.3 (2021-01-15)

Bug Fixes

  • revert "use cz-conventional-changelog as default adapter (#778)" (#792) (f2fad87)

v4.2.2

4.2.2 (2020-10-20)

Bug Fixes

  • cli: Exit CLI with 1(as failed) when received SIGINT (#736) (95a20d4)

Features

  • Use cz-conventional-changelog as default adapter (#778) (e6b75cb). Fixes (#762)

v4.2.1

4.2.1 (2020-08-25)

Bug Fixes

... (truncated)

Commits
  • 0939910 ci(release): defined a github workflow to release with semantic-release (#923)
  • 757a806 chore(deps): update all non-major dependencies
  • 25dc80c fix: fix the "isFunction" utility to match both "asyncFunction"s and "Functio...
  • fc283fb chore(deps): update dependency semver to v7.3.7
  • c35a3c7 chore(deps): update all non-major dependencies
  • 69de704 fix(deps): update all non-major dependencies
  • e79f3ee chore(deps): update dependency@​babel/core to v7.17.8
  • 69689fb chore(deps): update all non-major dependencies to v7.17.7
  • 3c2553f fix(deps): update all non-major dependencies
  • 4118263 docs: add cz-git commitizen adapter (#905)
  • Additional commits viewable incompare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from theSecurity Alerts page.

@dependabotdependabotbot added the dependenciesPull requests that update a dependency file labelOct 24, 2022
Bumps [lodash](https://github.com/lodash/lodash) to 4.17.21 and updates ancestor dependency [commitizen](https://github.com/commitizen/cz-cli). These dependencies need to be updated together.Updates `lodash` from 4.17.14 to 4.17.21- [Release notes](https://github.com/lodash/lodash/releases)- [Commits](lodash/lodash@4.17.14...4.17.21)Updates `commitizen` from 3.1.2 to 4.2.5- [Release notes](https://github.com/commitizen/cz-cli/releases)- [Commits](commitizen/cz-cli@v3.1.2...v4.2.5)---updated-dependencies:- dependency-name: lodash  dependency-type: indirect- dependency-name: commitizen  dependency-type: direct:development...Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotbotforce-pushed thedependabot/npm_and_yarn/lodash-and-commitizen-4.17.21 branch from8cd85bf to3f542b1CompareOctober 30, 2022 01:52
Sign up for freeto subscribe to this conversation on GitHub. Already have an account?Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
dependenciesPull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

0 participants

[8]ページ先頭

©2009-2025 Movatter.jp