chore(deps): bump uuid and conventional-changelog-cli#140
chore(deps): bump uuid and conventional-changelog-cli#140dependabot[bot] wants to merge 1 commit into
Conversation
Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [conventional-changelog-cli](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-cli). These dependencies need to be updated together. Removes `uuid` Updates `conventional-changelog-cli` from 2.0.21 to 5.0.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/conventional-changelog-cli-v5.0.0/packages/conventional-changelog-cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-cli-v5.0.0/packages/conventional-changelog-cli) --- updated-dependencies: - dependency-name: uuid dependency-version: dependency-type: indirect - dependency-name: conventional-changelog-cli dependency-version: 5.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default mode and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 7beba0f. Configure here.
| "devDependencies": { | ||
| "@testing-library/react": "^8.0.1", | ||
| "conventional-changelog-cli": "^2.0.21", | ||
| "conventional-changelog-cli": "^5.0.0", |
There was a problem hiding this comment.
Preset incompatibility with new conventional-changelog version
High Severity
Bumping conventional-changelog-cli from v2 to v5 pulls in conventional-changelog v6 and conventional-changelog-preset-loader v5, which introduced breaking changes to the preset interface (presets must now export a config factory function). The update-changelog script uses -p videojs, loading conventional-changelog-videojs v3 — a third-party preset last updated in 2021 that still uses the old q-promise-based export format. This mismatch will likely cause the update-changelog script (and consequently the version lifecycle hook) to fail at runtime.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 7beba0f. Configure here.
Removes uuid. It's no longer used after updating ancestor dependency conventional-changelog-cli. These dependencies need to be updated together.
Removes
uuidUpdates
conventional-changelog-clifrom 2.0.21 to 5.0.0Release notes
Sourced from conventional-changelog-cli's releases.
Changelog
Sourced from conventional-changelog-cli's changelog.
... (truncated)
Commits
a75cef6chore: release conventional-changelog-cli 5.0.0 (#1240)c2c4b3afix(conventional-changelog-cli,conventional-recommended-bump,standard-changel...4fec5d3ci: add clean-publish (#1232)4c3e82fci: package.json lint (#1231)862f66bfix(deps): update dependency meow to v13 (#1190)ec69cfdfeat!: drop node 16 support (#1226)0e4f293feat!: cleanup presets interface (#1215)a149b76test: proper cleanups after tests (#1206)8052c60test: move test tools to TS (#1170)7e51c6dfix(conventional-changelog-cli): fix link for option prompt (#1159)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.