Bump minimatch, geoip-lite, grunt, grunt-contrib-clean and grunt-contrib-jade #7
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…rib-jade Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.0.8 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch), [geoip-lite](https://github.com/geoip-lite/node-geoip), [grunt](https://github.com/gruntjs/grunt), [grunt-contrib-clean](https://github.com/gruntjs/grunt-contrib-clean) and [grunt-contrib-jade](https://github.com/gruntjs/grunt-contrib-jade). These dependencies need to be updated together. Updates `minimatch` from 0.2.14 to 3.0.8 - [Release notes](https://github.com/isaacs/minimatch/releases) - [Commits](isaacs/minimatch@v0.2.14...v3.0.8) Updates `geoip-lite` from 1.1.6 to 1.4.6 - [Release notes](https://github.com/geoip-lite/node-geoip/releases) - [Commits](geoip-lite/node-geoip@v1.1.6...v1.4.6) Updates `grunt` from 0.4.5 to 1.5.3 - [Release notes](https://github.com/gruntjs/grunt/releases) - [Changelog](https://github.com/gruntjs/grunt/blob/main/CHANGELOG) - [Commits](gruntjs/grunt@v0.4.5...v1.5.3) Updates `grunt-contrib-clean` from 0.6.0 to 2.0.1 - [Release notes](https://github.com/gruntjs/grunt-contrib-clean/releases) - [Changelog](https://github.com/gruntjs/grunt-contrib-clean/blob/main/CHANGELOG) - [Commits](gruntjs/grunt-contrib-clean@v0.6.0...v2.0.1) Updates `grunt-contrib-jade` from 0.14.1 to 1.0.0 - [Release notes](https://github.com/gruntjs/grunt-contrib-jade/releases) - [Changelog](https://github.com/gruntjs/grunt-contrib-pug/blob/main/CHANGELOG) - [Commits](gruntjs/grunt-contrib-pug@v0.14.1...v1.0.0) --- updated-dependencies: - dependency-name: minimatch dependency-type: indirect - dependency-name: geoip-lite dependency-type: direct:production - dependency-name: grunt dependency-type: direct:production - dependency-name: grunt-contrib-clean dependency-type: direct:production - dependency-name: grunt-contrib-jade dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps minimatch to 3.0.8 and updates ancestor dependencies minimatch, geoip-lite, grunt, grunt-contrib-clean and grunt-contrib-jade. These dependencies need to be updated together.
Updates
minimatchfrom 0.2.14 to 3.0.8Commits
782c2643.0.86ade2dafix: trim patterna6f52b03.0.7e4cd434fix: treat nocase:true as always having magice6bbe1cpublishConfig for 3.05b7cd333.0.620b4b56[fix] revert all breaking syntax changes2ff0388document, expose, and test 'partial:true' option5dbd6a7ci: tests and makeworkdbda065full test coverage, adding tests, deleting dead codeMaintainer changes
This version was pushed to npm by isaacs, a new releaser for minimatch since your current version.
Updates
geoip-litefrom 1.1.6 to 1.4.6Commits
cb6e638ready for 1.4.60a7fc98updatedb.js: geodatadir argument support (#239)89fcc74bump to 1.4.5046e406update async version patch (#238)ef67e3dBump to 1.4.48b53adcFix README to no longer link to geoip which is obsolete6402408Updated maxmind license key links in README.md (#233)b084765Fix URLs in updatedb.js (#234)77e3392Fix version numbers of dependencies to reduce supply chain attack surface6227080Migrate from colors to chalk (#230)Updates
gruntfrom 0.4.5 to 1.5.3Release notes
Sourced from grunt's releases.
... (truncated)
Changelog
Sourced from grunt's changelog.
... (truncated)
Commits
82d79b81.5.3572d79bMerge pull request #1745 from gruntjs/fix-copy-op58016ffPatch up race condition in symlink copying.0749e1dMerge pull request #1746 from JamieSlome/patch-169b7c50Create SECURITY.mdac667b21.5.27f15fd5Update Changelogb0ec6e1Merge pull request #1743 from gruntjs/cleanup-link433f91bClean up link handlingd5969ec1.5.1Maintainer changes
This version was pushed to npm by vladikoff, a new releaser for grunt since your current version.
Updates
grunt-contrib-cleanfrom 0.6.0 to 2.0.1Release notes
Sourced from grunt-contrib-clean's releases.
Changelog
Sourced from grunt-contrib-clean's changelog.
Commits
9bd20a62.0.1518aa72Update deps (#117)d226900Update deps, clean up (#116)395bb66Bump async from 2.6.1 to 3.2.2 (#113)b94a81eBump path-parse from 1.0.5 to 1.0.7 (#112)897e872Bump js-yaml from 3.5.5 to 3.14.1 (#111)947a601Bump hosted-git-info from 2.6.0 to 2.8.9 (#110)569bf5fBump lodash from 4.17.15 to 4.17.21 (#109)2d125d1Bump grunt from 1.0.3 to 1.3.0 (#108)c1882faBump lodash from 4.17.10 to 4.17.15 (#104)Updates
grunt-contrib-jadefrom 0.14.1 to 1.0.0Changelog
Sourced from grunt-contrib-jade's changelog.
Commits
a7af7c2v1.0.0be13f9cRemove trailing newline to fix test4ebf477Fix jade test. Every year!48f059fPoint main to task7917792Remove peerDeps. Ref gruntjs/grunt#1116b0b4e4bUpdate copyright to 20167d735ffCI: Remove node.js '0.12' and add '5'.9c2430cUpdate jade-options.md155e846Update appveyor.yml.a74d77eCI: test node.js 4.0.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.