chore(deps): bump uuid and conventional-changelog-cli#98
chore(deps): bump uuid and conventional-changelog-cli#98dependabot[bot] wants to merge 1 commit into
Conversation
Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [conventional-changelog-cli](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-cli). These dependencies need to be updated together. Removes `uuid` Updates `conventional-changelog-cli` from 2.0.21 to 5.0.0 - [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases) - [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/conventional-changelog-cli-v5.0.0/packages/conventional-changelog-cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-cli-v5.0.0/packages/conventional-changelog-cli) --- updated-dependencies: - dependency-name: uuid dependency-version: dependency-type: indirect - dependency-name: conventional-changelog-cli dependency-version: 5.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default mode and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 1e38d13. Configure here.
| }, | ||
| "devDependencies": { | ||
| "conventional-changelog-cli": "^2.0.21", | ||
| "conventional-changelog-cli": "^5.0.0", |
There was a problem hiding this comment.
Incompatible preset version breaks changelog generation script
High Severity
Bumping conventional-changelog-cli to v5.0.0 brings in conventional-changelog v6.0.0 and conventional-changelog-preset-loader v5.0.0, which require the new preset factory function interface. However, conventional-changelog-videojs remains at v3.0.0, which uses the legacy preset format (with q promises). The update-changelog script (conventional-changelog -p videojs) will fail because the new preset loader cannot consume the old-format videojs preset. This also breaks the version script used during releases.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 1e38d13. Configure here.
Removes uuid. It's no longer used after updating ancestor dependency conventional-changelog-cli. These dependencies need to be updated together.
Removes
uuidUpdates
conventional-changelog-clifrom 2.0.21 to 5.0.0Release notes
Sourced from conventional-changelog-cli's releases.
Changelog
Sourced from conventional-changelog-cli's changelog.
... (truncated)
Commits
a75cef6chore: release conventional-changelog-cli 5.0.0 (#1240)c2c4b3afix(conventional-changelog-cli,conventional-recommended-bump,standard-changel...4fec5d3ci: add clean-publish (#1232)4c3e82fci: package.json lint (#1231)862f66bfix(deps): update dependency meow to v13 (#1190)ec69cfdfeat!: drop node 16 support (#1226)0e4f293feat!: cleanup presets interface (#1215)a149b76test: proper cleanups after tests (#1206)8052c60test: move test tools to TS (#1170)7e51c6dfix(conventional-changelog-cli): fix link for option prompt (#1159)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.