Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix #4837 Update glob due to vulnerability in dep #4970

Merged
merged 8 commits into from Mar 30, 2023
Merged

fix #4837 Update glob due to vulnerability in dep #4970

merged 8 commits into from Mar 30, 2023

Conversation

jb2311
Copy link
Contributor

@jb2311 jb2311 commented Mar 8, 2023 •
edited by juergba

Description of the Change

The minimatch npm package version <=3.0.4 has a security vulnerability explained here: GHSA-f8q6-p94x-37v3

Mocha has the glob package 7.2.0 as a dependency, which in turn has minimatch ^3.0.4 as a dependency

This results in a high security risk warning for consumers of mocha. See #4937 for an example.

This PR changes the glob dependency to 8.1.0 which no longer depends on the insecure version of minimatch.

@jb2311 jb2311 changed the title Update glob due to vulnerability in dep fix #4837 Update glob due to vulnerability in dep Mar 8, 2023
@jb2311 jb2311 mentioned this pull request Mar 8, 2023
Closed
@linux-foundation-easycla
Copy link

linux-foundation-easycla bot commented Mar 14, 2023 •
edited

CLA Signed

The committers listed above are authorized under a signed CLA.

@jb2311
Copy link
Contributor Author

jb2311 commented Mar 15, 2023

@juergba this should be ready to be tested again. 2 things I have concerns about. #1 The tests referenced coffee-script, with a hyphen, but when I ran the tests, I got a "module not found error" and it looks like the hyphen package is depreciated, and mocha's package.json references "coffeescript" with no hyphen, so I updated those tests. Additionally, I got an error during linting that "eslint-plugin-n" is missing. I though it was my local setup, but it also happened when the tests ran in the CI process. Anyways, I added that package to the dev deps. Let me know if you have any questions or concerns

@juergba
Copy link
Member

juergba commented Mar 15, 2023 •
edited

@jb2311 thank you for this PR.

We will see wether our CI tests will pass. Tbh I don't trust your package-lock.json.

Edit: looks good, I will have a closer look on coming week-end. Could you evtl. add any link about this additional lint dependency?

@coveralls
Copy link

coveralls commented Mar 15, 2023 •
edited

Coverage Status

Coverage: 94.331% (+0.002%) from 94.329% when pulling 626e19e on jb2311:upgrade-glob into 9f24d0d on mochajs:master.

@juergba juergba added the dependencies Pull requests that update a dependency file label Mar 15, 2023
@jb2311
Copy link
Contributor Author

jb2311 commented Mar 15, 2023 •
edited

esline-plugin-node is no longer being maintained, so eslint-plugin-n (https://github.com/eslint-community/eslint-plugin-n) is a fork that is still active. However, I have no idea why it's erroring out without it suddenly. It happened on the first test run, when I did nothing but update the glob package https://github.com/mochajs/mocha/actions/runs/4368808387/jobs/7681675449

Edit: it looks like eslint-plugin-n is a peerDep for some packages. I was running an old version of NPM, newer versions of NPM don't require peerDeps to be referenced in the main package.json, so I removed the package.

@jb2311
Copy link
Contributor Author

jb2311 commented Mar 20, 2023

@juergba have you had a chance to take a look at this?

juergba
juergba reviewed Mar 22, 2023
View reviewed changes
Copy link
Member

@juergba juergba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not convinced completely, I'm afraid there might be some unwanted side-effects by windowsPathsNoEscape. Anyway let's do it.

package.json Show resolved Hide resolved
package.json Outdated Show resolved Hide resolved
package.json Outdated Show resolved Hide resolved
@jb2311
Copy link
Contributor Author

jb2311 commented Mar 22, 2023

@juergba updated

juergba
juergba reviewed Mar 24, 2023
View reviewed changes
package.json Outdated Show resolved Hide resolved
@jb2311
Copy link
Contributor Author

jb2311 commented Mar 27, 2023

@juergba okay, I think the whitespace should be appropriate.

@juergba juergba added the run-browser-test run browser tests on forked PR if code is safe label Mar 30, 2023
@github-actions github-actions bot removed the run-browser-test run browser tests on forked PR if code is safe label Mar 30, 2023
@juergba juergba added this to the next milestone Mar 30, 2023
juergba
juergba approved these changes Mar 30, 2023
View reviewed changes
Copy link
Member

@juergba juergba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jb2311 thank you for this PR.

@juergba juergba merged commit d722d00 into mochajs:master Mar 30, 2023
16 checks passed
@jb2311 jb2311 deleted the upgrade-glob branch April 4, 2023 15:50
renovate bot added a commit to line/line-bot-sdk-nodejs that referenced this pull request Feb 8, 2024
@renovate
Update dependency mocha to v10.3.0 (#702)
c05050a 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mocha](https://mochajs.org/)
([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` ->
`10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mochajs/mocha (mocha)</summary>

### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0)

[Compare
Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0)

This is a stable release equivalent to
[v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0).

#### What's Changed

- Fix deprecated warn gh actions by
[@&#8203;outsideris](https://togithub.com/outsideris) in
[mochajs/mocha#4962
- fix [#&#8203;4837](https://togithub.com/mochajs/mocha/issues/4837)
Update glob due to vulnerability in dep by
[@&#8203;jb2311](https://togithub.com/jb2311) in
[mochajs/mocha#4970
- Add Node v19 to test matrix by
[@&#8203;juergba](https://togithub.com/juergba) in
[mochajs/mocha#4974
- chore: fix the ci by [@&#8203;Uzlopak](https://togithub.com/Uzlopak)
in
[mochajs/mocha#5020
- update can-i-use by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5021
- chore: remove uuid dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5022
- chore: remove nanoid as dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5024
- chore: remove touch as dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5023
- chore: remove stale workflow by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5029
- docs: fix fragment ID for yargs' "extends" documentation by
[@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) in
[mochajs/mocha#4918
- docs: use mocha.js instead of mocha in the example run by
[@&#8203;nikolas](https://togithub.com/nikolas) in
[mochajs/mocha#4927
- docs: fix jsdoc return type of `titlePath` method by
[@&#8203;F3n67u](https://togithub.com/F3n67u) in
[mochajs/mocha#4886
- docs: overhaul contributing and maintenance docs for end-of-year 2023
by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5038
- docs: touchups to labels and a template title post-revamp by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5050
- fix: add alt text to Built with Netlify badge by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5068
- chore: inline nyan reporter's write function by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5056
- chore: remove unnecessary canvas dependency by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5069

#### New Contributors

- [@&#8203;jb2311](https://togithub.com/jb2311) made their first
contribution in
[mochajs/mocha#4970
- [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first
contribution in
[mochajs/mocha#5020
- [@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) made their
first contribution in
[mochajs/mocha#4918
- [@&#8203;nikolas](https://togithub.com/nikolas) made their first
contribution in
[mochajs/mocha#4927
- [@&#8203;F3n67u](https://togithub.com/F3n67u) made their first
contribution in
[mochajs/mocha#4886

**Full Changelog**:
mochajs/mocha@v10.2.0...v10.3.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/line/line-bot-sdk-nodejs).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate bot added a commit to matzkoh/eslint-plugin-generate-test-id that referenced this pull request Feb 9, 2024
@renovate
chore(deps): update dependency mocha to v10.3.0 (#135)
35b7d74 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mocha](https://mochajs.org/)
([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` ->
`10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mochajs/mocha (mocha)</summary>

### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0)

[Compare
Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0)

This is a stable release equivalent to
[v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0).

#### What's Changed

- Fix deprecated warn gh actions by
[@&#8203;outsideris](https://togithub.com/outsideris) in
[mochajs/mocha#4962
- fix [#&#8203;4837](https://togithub.com/mochajs/mocha/issues/4837)
Update glob due to vulnerability in dep by
[@&#8203;jb2311](https://togithub.com/jb2311) in
[mochajs/mocha#4970
- Add Node v19 to test matrix by
[@&#8203;juergba](https://togithub.com/juergba) in
[mochajs/mocha#4974
- chore: fix the ci by [@&#8203;Uzlopak](https://togithub.com/Uzlopak)
in
[mochajs/mocha#5020
- update can-i-use by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5021
- chore: remove uuid dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5022
- chore: remove nanoid as dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5024
- chore: remove touch as dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5023
- chore: remove stale workflow by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5029
- docs: fix fragment ID for yargs' "extends" documentation by
[@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) in
[mochajs/mocha#4918
- docs: use mocha.js instead of mocha in the example run by
[@&#8203;nikolas](https://togithub.com/nikolas) in
[mochajs/mocha#4927
- docs: fix jsdoc return type of `titlePath` method by
[@&#8203;F3n67u](https://togithub.com/F3n67u) in
[mochajs/mocha#4886
- docs: overhaul contributing and maintenance docs for end-of-year 2023
by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5038
- docs: touchups to labels and a template title post-revamp by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5050
- fix: add alt text to Built with Netlify badge by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5068
- chore: inline nyan reporter's write function by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5056
- chore: remove unnecessary canvas dependency by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5069

#### New Contributors

- [@&#8203;jb2311](https://togithub.com/jb2311) made their first
contribution in
[mochajs/mocha#4970
- [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first
contribution in
[mochajs/mocha#5020
- [@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) made their
first contribution in
[mochajs/mocha#4918
- [@&#8203;nikolas](https://togithub.com/nikolas) made their first
contribution in
[mochajs/mocha#4927
- [@&#8203;F3n67u](https://togithub.com/F3n67u) made their first
contribution in
[mochajs/mocha#4886

**Full Changelog**:
mochajs/mocha@v10.2.0...v10.3.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/matzkoh/eslint-plugin-generate-test-id).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
ogkevin-robot bot added a commit to OGKevin/obsidian-kobo-highlights-import that referenced this pull request Feb 11, 2024
@ogkevin-robot
feat(deps): update mocha to 10.3.0 (#304)
2987000 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [mocha](https://mochajs.org/) ([source](https://togithub.com/mochajs/mocha)) | devDependencies | minor | [`10.2.0` -> `10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) |

---

### Release Notes

<details>
<summary>mochajs/mocha (mocha)</summary>

### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0)

[Compare Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0)

This is a stable release equivalent to [v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0).

#### What's Changed

-   Fix deprecated warn gh actions by [@&#8203;outsideris](https://togithub.com/outsideris) in [mochajs/mocha#4962
-   fix [#&#8203;4837](https://togithub.com/mochajs/mocha/issues/4837) Update glob due to vulnerability in dep by [@&#8203;jb2311](https://togithub.com/jb2311) in [mochajs/mocha#4970
-   Add Node v19 to test matrix by [@&#8203;juergba](https://togithub.com/juergba) in [mochajs/mocha#4974
-   chore: fix the ci by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [mochajs/mocha#5020
-   update can-i-use by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [mochajs/mocha#5021
-   chore: remove uuid dev dependency by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [mochajs/mocha#5022
-   chore: remove nanoid as dependency by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [mochajs/mocha#5024
-   chore: remove touch as dev dependency by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in [mochajs/mocha#5023
-   chore: remove stale workflow by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5029
-   docs: fix fragment ID for yargs' "extends" documentation by [@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) in [mochajs/mocha#4918
-   docs: use mocha.js instead of mocha in the example run by [@&#8203;nikolas](https://togithub.com/nikolas) in [mochajs/mocha#4927
-   docs: fix jsdoc return type  of `titlePath` method by [@&#8203;F3n67u](https://togithub.com/F3n67u) in [mochajs/mocha#4886
-   docs: overhaul contributing and maintenance docs for end-of-year 2023 by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5038
-   docs: touchups to labels and a template title post-revamp by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5050
-   fix: add alt text to Built with Netlify badge by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5068
-   chore: inline nyan reporter's write function by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5056
-   chore: remove unnecessary canvas dependency by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in [mochajs/mocha#5069

#### New Contributors

-   [@&#8203;jb2311](https://togithub.com/jb2311) made their first contribution in [mochajs/mocha#4970
-   [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first contribution in [mochajs/mocha#5020
-   [@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) made their first contribution in [mochajs/mocha#4918
-   [@&#8203;nikolas](https://togithub.com/nikolas) made their first contribution in [mochajs/mocha#4927
-   [@&#8203;F3n67u](https://togithub.com/F3n67u) made their first contribution in [mochajs/mocha#4886

**Full Changelog**: mochajs/mocha@v10.2.0...v10.3.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMy4zIiwidXBkYXRlZEluVmVyIjoiMzcuMTMuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9-->
solaris007 pushed a commit to adobe/spacecat-shared that referenced this pull request Feb 12, 2024
@renovate
fix(deps): update external fixes (#148)
a32b5ce 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@aws-sdk/client-dynamodb](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-dynamodb)
([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb))
| [`3.506.0` ->
`3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-dynamodb/3.506.0/3.511.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@aws-sdk%2fclient-dynamodb/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@aws-sdk%2fclient-dynamodb/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@aws-sdk%2fclient-dynamodb/3.506.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@aws-sdk%2fclient-dynamodb/3.506.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@aws-sdk/client-s3](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3)
([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3))
| [`3.507.0` ->
`3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.507.0/3.511.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@aws-sdk%2fclient-s3/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@aws-sdk%2fclient-s3/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@aws-sdk%2fclient-s3/3.507.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@aws-sdk%2fclient-s3/3.507.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@aws-sdk/client-sqs](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-sqs)
([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs))
| [`3.507.0` ->
`3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-sqs/3.507.0/3.511.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@aws-sdk%2fclient-sqs/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@aws-sdk%2fclient-sqs/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@aws-sdk%2fclient-sqs/3.507.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@aws-sdk%2fclient-sqs/3.507.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@aws-sdk/lib-dynamodb](https://togithub.com/aws/aws-sdk-js-v3/tree/main/lib/lib-dynamodb)
([source](https://togithub.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-dynamodb))
| [`3.506.0` ->
`3.511.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2flib-dynamodb/3.506.0/3.511.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@aws-sdk%2flib-dynamodb/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@aws-sdk%2flib-dynamodb/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@aws-sdk%2flib-dynamodb/3.506.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@aws-sdk%2flib-dynamodb/3.506.0/3.511.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/typescript-eslint)
([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin))
| [`6.20.0` ->
`6.21.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2feslint-plugin/6.20.0/6.21.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@typescript-eslint%2feslint-plugin/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@typescript-eslint%2feslint-plugin/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@typescript-eslint%2feslint-plugin/6.20.0/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@typescript-eslint%2feslint-plugin/6.20.0/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@typescript-eslint/parser](https://togithub.com/typescript-eslint/typescript-eslint)
([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser))
| [`6.20.0` ->
`6.21.0`](https://renovatebot.com/diffs/npm/@typescript-eslint%2fparser/6.20.0/6.21.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@typescript-eslint%2fparser/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@typescript-eslint%2fparser/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@typescript-eslint%2fparser/6.20.0/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@typescript-eslint%2fparser/6.20.0/6.21.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [lint-staged](https://togithub.com/okonet/lint-staged) | [`15.2.1` ->
`15.2.2`](https://renovatebot.com/diffs/npm/lint-staged/15.2.1/15.2.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/lint-staged/15.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/lint-staged/15.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/lint-staged/15.2.1/15.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lint-staged/15.2.1/15.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [mocha](https://mochajs.org/)
([source](https://togithub.com/mochajs/mocha)) | [`10.2.0` ->
`10.3.0`](https://renovatebot.com/diffs/npm/mocha/10.2.0/10.3.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mocha/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mocha/10.2.0/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[semantic-release](https://togithub.com/semantic-release/semantic-release)
| [`23.0.0` ->
`23.0.2`](https://renovatebot.com/diffs/npm/semantic-release/23.0.0/23.0.2)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/semantic-release/23.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/semantic-release/23.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/semantic-release/23.0.0/23.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/semantic-release/23.0.0/23.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| semantic-release-monorepo | [`8.0.1` ->
`8.0.2`](https://renovatebot.com/diffs/npm/semantic-release-monorepo/8.0.1/8.0.2)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/semantic-release-monorepo/8.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/semantic-release-monorepo/8.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/semantic-release-monorepo/8.0.1/8.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/semantic-release-monorepo/8.0.1/8.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>aws/aws-sdk-js-v3 (@&#8203;aws-sdk/client-dynamodb)</summary>

###
[`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35110-2024-02-09)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-dynamodb](https://togithub.com/aws-sdk/client-dynamodb)

###
[`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35090-2024-02-07)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-dynamodb](https://togithub.com/aws-sdk/client-dynamodb)

###
[`v3.507.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-dynamodb/CHANGELOG.md#35070-2024-02-05)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.506.0...v3.507.0)

##### Features

- unified error dispatcher in protocols
([#&#8203;5756](https://togithub.com/aws/aws-sdk-js-v3/issues/5756))
([0872087](https://togithub.com/aws/aws-sdk-js-v3/commit/0872087ef56422541bd38d293f97613dfd10236f))

</details>

<details>
<summary>aws/aws-sdk-js-v3 (@&#8203;aws-sdk/client-s3)</summary>

###
[`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35110-2024-02-09)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3)

###
[`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#35090-2024-02-07)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3)

</details>

<details>
<summary>aws/aws-sdk-js-v3 (@&#8203;aws-sdk/client-sqs)</summary>

###
[`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-sqs/CHANGELOG.md#35110-2024-02-09)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-sqs](https://togithub.com/aws-sdk/client-sqs)

###
[`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-sqs/CHANGELOG.md#35090-2024-02-07)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/client-sqs](https://togithub.com/aws-sdk/client-sqs)

</details>

<details>
<summary>aws/aws-sdk-js-v3 (@&#8203;aws-sdk/lib-dynamodb)</summary>

###
[`v3.511.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35110-2024-02-09)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.509.0...v3.511.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb)

###
[`v3.509.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35090-2024-02-07)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.507.0...v3.509.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb)

###
[`v3.507.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/lib/lib-dynamodb/CHANGELOG.md#35070-2024-02-05)

[Compare
Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.506.0...v3.507.0)

**Note:** Version bump only for package
[@&#8203;aws-sdk/lib-dynamodb](https://togithub.com/aws-sdk/lib-dynamodb)

</details>

<details>
<summary>typescript-eslint/typescript-eslint
(@&#8203;typescript-eslint/eslint-plugin)</summary>

###
[`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#6210-2024-02-05)

[Compare
Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0)

##### 🚀 Features

-   export plugin metadata

-   allow `parserOptions.project: false`

-   **eslint-plugin:** add rule prefer-find

##### 🩹 Fixes

- **eslint-plugin:** \[no-unused-vars] don't report on types referenced
in export assignment expression

- **eslint-plugin:** \[switch-exhaustiveness-check] better support for
intersections, infinite types, non-union values

- **eslint-plugin:** \[consistent-type-imports] dont report on types
used in export assignment expressions

- **eslint-plugin:** \[no-unnecessary-condition] handle left-hand
optional with exactOptionalPropertyTypes option

- **eslint-plugin:** \[class-literal-property-style] allow getter when
same key setter exists

- **eslint-plugin:** \[no-unnecessary-type-assertion] provide valid
fixes for assertions with extra tokens before `as` keyword

##### ❤️  Thank You

-   auvred
-   Brad Zacher
-   Kirk Waiblinger
-   Pete Gonzalez
-   YeonJuan

You can read about our [versioning
strategy](https://main--typescript-eslint.netlify.app/users/versioning)
and
[releases](https://main--typescript-eslint.netlify.app/users/releases)
on our website.

</details>

<details>
<summary>typescript-eslint/typescript-eslint
(@&#8203;typescript-eslint/parser)</summary>

###
[`v6.21.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#6210-2024-02-05)

[Compare
Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v6.20.0...v6.21.0)

##### 🚀 Features

-   allow `parserOptions.project: false`

##### ❤️  Thank You

-   auvred
-   Brad Zacher
-   Kirk Waiblinger
-   Pete Gonzalez
-   YeonJuan

You can read about our [versioning
strategy](https://main--typescript-eslint.netlify.app/users/versioning)
and
[releases](https://main--typescript-eslint.netlify.app/users/releases)
on our website.

</details>

<details>
<summary>okonet/lint-staged (lint-staged)</summary>

###
[`v15.2.2`](https://togithub.com/okonet/lint-staged/blob/HEAD/CHANGELOG.md#1522)

[Compare
Source](https://togithub.com/okonet/lint-staged/compare/v15.2.1...v15.2.2)

##### Patch Changes

- [#&#8203;1391](https://togithub.com/lint-staged/lint-staged/pull/1391)
[`fdcdad4`](https://togithub.com/lint-staged/lint-staged/commit/fdcdad42ff96fea3c05598e378d3c44ad4a51bde)
Thanks [@&#8203;iiroj](https://togithub.com/iiroj)! - *Lint-staged* no
longer tries to load configuration from files that are not checked out.
This might happen when using sparse-checkout.

</details>

<details>
<summary>mochajs/mocha (mocha)</summary>

### [`v10.3.0`](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0)

[Compare
Source](https://togithub.com/mochajs/mocha/compare/v10.2.0...v10.3.0)

This is a stable release equivalent to
[v10.3.0-preminor.0](https://togithub.com/mochajs/mocha/releases/tag/v10.3.0-preminor.0).

#### What's Changed

- Fix deprecated warn gh actions by
[@&#8203;outsideris](https://togithub.com/outsideris) in
[mochajs/mocha#4962
- fix [#&#8203;4837](https://togithub.com/mochajs/mocha/issues/4837)
Update glob due to vulnerability in dep by
[@&#8203;jb2311](https://togithub.com/jb2311) in
[mochajs/mocha#4970
- Add Node v19 to test matrix by
[@&#8203;juergba](https://togithub.com/juergba) in
[mochajs/mocha#4974
- chore: fix the ci by [@&#8203;Uzlopak](https://togithub.com/Uzlopak)
in
[mochajs/mocha#5020
- update can-i-use by [@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5021
- chore: remove uuid dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5022
- chore: remove nanoid as dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5024
- chore: remove touch as dev dependency by
[@&#8203;Uzlopak](https://togithub.com/Uzlopak) in
[mochajs/mocha#5023
- chore: remove stale workflow by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5029
- docs: fix fragment ID for yargs' "extends" documentation by
[@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) in
[mochajs/mocha#4918
- docs: use mocha.js instead of mocha in the example run by
[@&#8203;nikolas](https://togithub.com/nikolas) in
[mochajs/mocha#4927
- docs: fix jsdoc return type of `titlePath` method by
[@&#8203;F3n67u](https://togithub.com/F3n67u) in
[mochajs/mocha#4886
- docs: overhaul contributing and maintenance docs for end-of-year 2023
by [@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5038
- docs: touchups to labels and a template title post-revamp by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5050
- fix: add alt text to Built with Netlify badge by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5068
- chore: inline nyan reporter's write function by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5056
- chore: remove unnecessary canvas dependency by
[@&#8203;JoshuaKGoldberg](https://togithub.com/JoshuaKGoldberg) in
[mochajs/mocha#5069

#### New Contributors

- [@&#8203;jb2311](https://togithub.com/jb2311) made their first
contribution in
[mochajs/mocha#4970
- [@&#8203;Uzlopak](https://togithub.com/Uzlopak) made their first
contribution in
[mochajs/mocha#5020
- [@&#8203;Spencer-Doak](https://togithub.com/Spencer-Doak) made their
first contribution in
[mochajs/mocha#4918
- [@&#8203;nikolas](https://togithub.com/nikolas) made their first
contribution in
[mochajs/mocha#4927
- [@&#8203;F3n67u](https://togithub.com/F3n67u) made their first
contribution in
[mochajs/mocha#4886

**Full Changelog**:
mochajs/mocha@v10.2.0...v10.3.0

</details>

<details>
<summary>semantic-release/semantic-release (semantic-release)</summary>

###
[`v23.0.2`](https://togithub.com/semantic-release/semantic-release/releases/tag/v23.0.2)

[Compare
Source](https://togithub.com/semantic-release/semantic-release/compare/v23.0.1...v23.0.2)

##### Bug Fixes

- **deps:** update dependency marked to v12
([#&#8203;3176](https://togithub.com/semantic-release/semantic-release/issues/3176))
([38105f5](https://togithub.com/semantic-release/semantic-release/commit/38105f5bc8ac280d8fb726097962bb357bfc5dac))

###
[`v23.0.1`](https://togithub.com/semantic-release/semantic-release/releases/tag/v23.0.1)

[Compare
Source](https://togithub.com/semantic-release/semantic-release/compare/v23.0.0...v23.0.1)

##### Bug Fixes

- **deps:** update dependency marked-terminal to v7
([9faded8](https://togithub.com/semantic-release/semantic-release/commit/9faded8d50bd056374f79d0a1385dc9f140a85de))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 2pm on Saturday" in timezone
Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/adobe/spacecat-shared).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@juergba juergba juergba approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@jb2311 @juergba @coveralls