Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency rimraf to ^5.0.10 #2034

Merged
merged 1 commit into from
Sep 15, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 20, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
rimraf ^5.0.5 -> ^5.0.10 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

isaacs/rimraf (rimraf)

v5.0.10

Compare Source

v5.0.9

Compare Source

v5.0.8

Compare Source

v5.0.7

Compare Source

v5.0.6

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor Author

renovate bot commented Aug 20, 2024

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

Copy link

coderabbitai bot commented Aug 20, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

Walkthrough

This update involves a minor version upgrade of the rimraf package in package.json, moving from version ^5.0.5 to ^5.0.10. Such upgrades generally include bug fixes and performance enhancements without breaking changes. As a result, the overall functionality of the project remains stable, ensuring continued smooth operation while benefiting from the latest improvements in the dependency.

Changes

File Change Summary
package.json Updated rimraf from ^5.0.5 to ^5.0.10

Poem

In the garden where code does play,
A rabbit hops with joy today! 🐰
Rimraf's version, fresh and bright,
Brings fixes swift, a pure delight.
Hopping through bugs, no time to stall,
With every change, we’ll rise and sprawl! 🌼


Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

codecov bot commented Aug 20, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 29.58%. Comparing base (feaa400) to head (08c37ea).
Report is 13 commits behind head on dev.

✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff            @@
##              dev    #2034    +/-   ##
========================================
  Coverage   29.58%   29.58%            
========================================
  Files         222      222            
  Lines       12545    12545            
  Branches      454      572   +118     
========================================
  Hits         3712     3712            
  Misses       8833     8833            
Flag Coverage Δ
cli 7.14% <ø> (ø)
connection 22.42% <ø> (ø)
database 30.76% <ø> (ø)
gateway 23.46% <ø> (ø)
lobby 14.37% <ø> (ø)
login 7.14% <ø> (ø)
mcots 10.62% <ø> (ø)
nps 15.88% <ø> (ø)
patch 65.04% <ø> (ø)
persona 19.45% <ø> (ø)
sessions 91.98% <ø> (ø)
shard 47.71% <ø> (ø)
shared 23.71% <ø> (ø)
shared-packets 2.64% <ø> (ø)
transactions 60.54% <ø> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link

@codecov codecov bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The changes in the diff primarily consist of updated dependencies in the package-lock.json file. While such changes are essential to keep the project up-to-date with any bug fixes or new features from dependencies, it's important to test thoroughly due to risk of unintentional breaking changes.

@@ -40,7 +40,7 @@
"lint-staged": "^15.2.0",
"prettier": "3.1.1",
"prettier-eslint": "16.2.0",
"rimraf": "^5.0.5",
"rimraf": "^5.0.10",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'rimraf' package's version has been updated. We need to make sure that the new version is fully compatible with the project and does not introduce any breaking changes.

@@ -7717,16 +7717,14 @@
}
},
"node_modules/jackspeak": {
"version": "2.3.6",
"resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.3.6.tgz",
"integrity": "sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems like 'jackspeak' has been updated from version 2.3.6 to version 3.4.3. That's a major version change which might come with breaking changes, ensure to test the parts of the software relying on this package thoroughly.

"dev": true,
"license": "BlueOak-1.0.0",
"dependencies": {
"@isaacs/cliui": "^8.0.2"
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Noticed that the Engine support check for the 'jackspeak' package has been removed. This could potentially lead to compatibility issues if our project or certain environments rely on a specific Node.js version.

@@ -8847,11 +8845,13 @@
}
},
"node_modules/minipass": {
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'minipass' package update may also introduce some changes. Be aware of them if you're extensively using this package.

@@ -9237,27 +9244,28 @@
"license": "MIT"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The minor version update for 'path-scurry' might introduce some improvements or patches.

@@ -10435,19 +10443,17 @@
"license": "MIT"
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'rimraf' package's version has been updated. This is consistent with the changes made to the package.json file.

@@ -10457,37 +10463,38 @@
"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
"dev": true,
"license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'glob' dependency of 'rimraf' has a major version update. Ensure the project is fully compatible with the changes.

},
"bin": {
"glob": "dist/esm/bin.mjs"
},
"engines": {
"node": ">=16 || 14 >=14.17"
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'minimatch' has been updated as well, this change should be tested as well.

@@ -58,7 +58,7 @@
"lint-staged": "^15.2.0",
"prettier": "3.1.1",
"prettier-eslint": "16.2.0",
"rimraf": "^5.0.5",
"rimraf": "^5.0.10",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The update of 'rimraf' package in package.json is reflected here. Make sure all scripts using 'rimraf' work as expected.

Copy link

@codecov codecov bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The code changes mainly relate to updating the package-lock.json file, introducing upgraded versions of various dependencies, as well as adding some new ones. General improvements have been made to software integrity and licensing, however, the version upgrades might introduce breaking changes due to API updates. Nonetheless, these changes form part of routine package maintenance and are a positive step toward ensuring the project's robustness and compatibility with other technologies.

@@ -40,7 +40,7 @@
"lint-staged": "^15.2.0",
"prettier": "3.1.1",
"prettier-eslint": "16.2.0",
"rimraf": "^5.0.5",
"rimraf": "^5.0.10",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'rimraf' package has been upgraded from version 5.0.5 to 5.0.10. It's important to check if any breaking changes between these versions might affect this project.

@@ -7717,16 +7717,14 @@
}
},
"node_modules/jackspeak": {
"version": "2.3.6",
"resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.3.6.tgz",
"integrity": "sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'jackspeak' package has been upgraded from 2.3.6 to 3.4.3, which is a major version change. This could potentially introduce breaking changes, so the related code should be thoroughly tested.

"dev": true,
"license": "BlueOak-1.0.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A new license field has been added. Make sure the 'BlueOak-1.0.0' license is compatible with the project license.

@@ -8847,11 +8845,13 @@
}
},
"node_modules/minipass": {
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'minipass' package version has been significantly upgraded from 5.0.0 to 7.1.2. It's necessary to verify whether the changes introduced in the updated package versions don't interfere with the project.

@@ -9182,6 +9182,13 @@
"node": ">=6"
}
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A new package, 'package-json-from-dist', has been added. Consider checking exactly where this is used in the codebase and that it adds the expected functionality.

"minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
},
"engines": {
"node": ">=16 || 14 >=14.17"
"node": ">=16 || 14 >=14.18"
},
"funding": {
"url": "https://github.com/sponsors/isaacs"
}
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version of the 'lru-cache' dependency within the 'path-scurry' package has been upgraded from 10.0.1 to 10.4.3. It would be a good idea to check whether this version change might influence the project's performance.

@@ -10457,37 +10463,38 @@
"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
"integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
"dev": true,
"license": "MIT",
"dependencies": {
"balanced-match": "^1.0.0"
}
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'glob' package within 'rimraf' node_module has been updated significantly from 10.3.10 to 10.4.5. This change should be validated for any potential impact.

},
"bin": {
"glob": "dist/esm/bin.mjs"
},
"engines": {
"node": ">=16 || 14 >=14.17"
},
"funding": {
"url": "https://github.com/sponsors/isaacs"
}
},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 'minimatch' package within 'rimraf' node_module has been updated from 9.0.3 to 9.0.5. Ensure this change doesn't break any current functionality.

@@ -58,7 +58,7 @@
"lint-staged": "^15.2.0",
"prettier": "3.1.1",
"prettier-eslint": "16.2.0",
"rimraf": "^5.0.5",
"rimraf": "^5.0.10",
Copy link

@codecov codecov bot Aug 20, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Upgrading a package version might introduce new features or bug fixes, but it might also cause compatibility issues. Testing whether all functionalities work as expected after upgrading is strongly advised.

"version": "5.0.0",
"version": "7.1.2",
"resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
"integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==",
"dev": true,
"license": "ISC",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package 'minipass' has updated its 'engines' field. It now requires a higher version of Node. Make sure your environment meets these requirements.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 646aa88 and 4b14d09.

Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
Files selected for processing (1)
  • package.json (1 hunks)
Files skipped from review due to trivial changes (1)
  • package.json

coderabbitai[bot]
coderabbitai bot previously approved these changes Aug 20, 2024
Copy link
Contributor Author

renovate bot commented Aug 26, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm error code EUNSUPPORTEDPROTOCOL
npm error Unsupported URL Type "link:": link:packages/lobby
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-09-15T13_37_43_129Z-debug-0.log

Copy link

socket-security bot commented Aug 26, 2024

No dependency changes detected. Learn more about Socket for GitHub ↗︎

👍 No dependency changes detected in pull request

Copy link

@codecov codecov bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodecovAI submitted a new review for dcf96a7

pnpm-lock.yaml Outdated
@@ -10,7 +10,7 @@ importers:
dependencies:
'@adminjs/sequelize':
specifier: ^4.1.1
version: 4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3(pg@8.12.0))
version: 4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are removing 'pg' from '@adminjs/sequelize' dependencies. Ensure that 'pg' is not required for '@adminjs/sequelize' to run correctly, otherwise, users might encounter runtime errors.

pnpm-lock.yaml Outdated
@@ -79,7 +79,7 @@ importers:
version: link:packages/transactions
sequelize:
specifier: ^6.35.2
version: 6.37.3(pg@8.12.0)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are removing 'pg' from 'sequelize' dependencies. This might cause runtime errors if 'pg' is a required dependency.

@@ -151,7 +151,7 @@ importers:
specifier: 16.2.0
version: 16.2.0
rimraf:
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are updating 'rimraf' from version '^5.0.5' to version '^5.0.10' here as well. Again, consider the possibility of breaking changes introduced in the new version.

pnpm-lock.yaml Outdated
@@ -6034,11 +6034,11 @@ snapshots:
- react-is
- supports-color

'@adminjs/sequelize@4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3(pg@8.12.0))':
'@adminjs/sequelize@4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3)':
dependencies:
adminjs: 7.8.11(@types/react@18.3.4)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Again, 'pg' is being removed from 'sequelize' dependencies. Make sure this doesn't cause any unforeseen problems.

pnpm-lock.yaml Outdated
@@ -11376,7 +11376,7 @@ snapshots:

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You're again removing 'pg' from 'sequelize' dependencies. Make sure this doesn't introduce any unintented breaks.

Copy link

deepsource-io bot commented Aug 26, 2024

Here's the code health analysis summary for commits 735bbe4..08c37ea. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link

@codecov codecov bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CodecovAI submitted a new review for dcf96a7

pnpm-lock.yaml Outdated
@@ -10,7 +10,7 @@ importers:
dependencies:
'@adminjs/sequelize':
specifier: ^4.1.1
version: 4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3(pg@8.12.0))
version: 4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version of @adminjs/sequelize has been changed and pg package has been removed from it as a dependency. Check whether this change has an impact on its functionality.

pnpm-lock.yaml Outdated
@@ -79,7 +79,7 @@ importers:
version: link:packages/transactions
sequelize:
specifier: ^6.35.2
version: 6.37.3(pg@8.12.0)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version of sequelize has been changed and pg package has been removed from it as a dependency. Please ensure this won't cause any crash or unexpected behavior.

@@ -151,7 +151,7 @@ importers:
specifier: 16.2.0
version: 16.2.0
rimraf:
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The rimraf package version has been changed. Ensure the newer version is tested well and is compatible with the entire system.

pnpm-lock.yaml Outdated
@@ -6034,11 +6034,11 @@ snapshots:
- react-is
- supports-color

'@adminjs/sequelize@4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3(pg@8.12.0))':
'@adminjs/sequelize@4.1.1(adminjs@7.8.11(@types/react@18.3.4))(sequelize@6.37.3)':
dependencies:
adminjs: 7.8.11(@types/react@18.3.4)
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The pg dependency for sequelize has been modified in the snapshots. If the pg dependency is still needed, this could probably lead to runtime errors.

pnpm-lock.yaml Outdated
@@ -11376,7 +11376,7 @@ snapshots:

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Within the snapshots, pg has been removed from sequelize. As long as sequelize doesn't strictly need pg and no errors are encountered upon testing, this should not be an issue.

pnpm-lock.yaml Outdated
@@ -11394,8 +11394,6 @@ snapshots:
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pg has been removed as an optional dependency for sequelize. Please ensure this won't cause any crash or unexpected behavior.

@renovate renovate bot force-pushed the renovate/rimraf-5.x branch 3 times, most recently from e2fae4c to e2bd96f Compare August 27, 2024 13:35
@renovate renovate bot force-pushed the renovate/rimraf-5.x branch 5 times, most recently from c44bb00 to e13ca89 Compare August 27, 2024 16:48
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 4b14d09 and e13ca89.

Files selected for processing (1)
  • package.json (1 hunks)
Files skipped from review as they are similar to previous changes (1)
  • package.json

@renovate renovate bot force-pushed the renovate/rimraf-5.x branch 2 times, most recently from e077b58 to 0677b97 Compare August 27, 2024 17:06
@renovate renovate bot force-pushed the renovate/rimraf-5.x branch 3 times, most recently from c22d2da to 19d1856 Compare September 15, 2024 13:23
Copy link

sonarcloud bot commented Sep 15, 2024

@renovate renovate bot added this pull request to the merge queue Sep 15, 2024
Merged via the queue into dev with commit d44a367 Sep 15, 2024
14 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants