chore(deps): update dependency semver to v7.8.5 by renovate-sh-app[bot] · Pull Request #324 · grafana/grafana-github-actions

renovate-sh-app · 2026-06-04T15:28:59Z

This PR contains the following updates:

Package	Change	Age	Confidence
semver	`7.5.4` → `7.8.5`
@types/semver (source)	`7.5.6` → `7.8.0`

Release Notes

npm/node-semver (semver)

`v7.8.5`

Compare Source

Bug Fixes

9c8692a #878 include prereleases in tilde range lower bound with includePrerelease (#878) (@chatman-media)

`v7.8.4`

Compare Source

Bug Fixes

e583226 #874 reject numeric segments after x-ranges (@pupuking723)

`v7.8.3`

Compare Source

Bug Fixes

046da7f #872 align caret includePrerelease lower bounds (#872) (@wayyoungboy)

Chores

3485dda #866 bump @npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@dependabot[bot])

`v7.8.2`

Compare Source

Bug Fixes

bea6028 #870 increment dotted prerelease identifiers (#870) (@liuzemei, @SheldonNeo)

`v7.8.1`

Compare Source

Bug Fixes

17aa702 #869 strip build metadata before comparator trimming (#869) (@owlstronaut)
5f3ca13 #867 handle prerelease bounds in subset (#867) (@puneetdixit200, Puneet Dixit)

`v7.8.0`

Compare Source

Features

0d0a0a2 #855 Add truncate function (#855) (@pjohnmeyer, @owlstronaut)

Bug Fixes

3905343 #859 Warn when defaulting to --inc=patch in CLI (@pjohnmeyer)

Documentation

c368af6 #853 fix typos in documentation (#853) (@ankitkumar572005)
37776c3 #846 fix BNF grammar to distinguish prerelease from build identifiers (#846) (@abhu85, @claude)

Chores

9542e09 #860 template-oss-apply (@owlstronaut)
937bc2c #860 template-oss-apply@5.0.0 (@owlstronaut)
6946fef #852 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#852) (@dependabot[bot], @npm-cli-bot)

`v7.7.4`

Compare Source

Bug Fixes

a29faa5 #835 cli: pass options to semver.valid() for loose version validation (#835) (@mldangelo)

Documentation

1d28d5e #836 fix typos and update -n CLI option documentation (#836) (@mldangelo)

Dependencies

120968b #840 @npmcli/template-oss@4.29.0 (#840)

Chores

44d7130 #824 bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#824) (@dependabot[bot])
7073576 #820 reorder parameters in invalid-versions.js test (#820) (@reggi)
5816d4c #829 bump @npmcli/template-oss from 4.28.0 to 4.28.1 (#829) (@dependabot[bot], @npm-cli-bot)

`v7.7.3`

Compare Source

Bug Fixes

e37e0ca #813 faster paths for compare (#813) (@H4ad)
2471d75 #811 x-range build metadata support (i529015)

Chores

8f05c87 #807 bump @npmcli/template-oss from 4.25.0 to 4.25.1 (#807) (@dependabot[bot], @owlstronaut)

`v7.7.2`

Compare Source

Bug Fixes

fcafb61 #780 add missing 'use strict' directives (#780) (@Fdawgs)
c99f336 #781 prerelease identifier starting with digits (#781) (@mbtools)

Chores

c760403 #784 template-oss-apply for workflow permissions (#784) (@wraithgar)
2677f2a #778 bump @npmcli/template-oss from 4.23.6 to 4.24.3 (#778) (@dependabot[bot], @npm-cli-bot)

`v7.7.1`

Compare Source

Bug Fixes

af761c0 #764 inc: fully capture prerelease identifier (#764) (@wraithgar)

`v7.7.0`

Compare Source

Features

0864b3c #753 add "release" inc type (#753) (@mbtools)

Bug Fixes

d588e37 #755 diff: fix prerelease to stable version diff logic (#755) (@eminberkayd, berkay.daglar)
8a34bde #754 add identifier validation to inc() (#754) (@mbtools)

Documentation

67e5478 #756 readme: added missing period for consistency (#756) (@shaymolcho)
868d4bb #749 clarify comment about obsolete prefixes (#749) (@mbtools, @ljharb)

Chores

145c554 #741 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])
753e02b #747 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#747) (@dependabot[bot], @npm-cli-bot)
0b812d5 #744 postinstall for dependabot template-oss PR (@hashtagchris)

`v7.6.3`

Compare Source

Bug Fixes

73a3d79 #726 optimize Range parsing and formatting (#726) (@jviide)

Documentation

2975ece #719 fix extra backtick typo (#719) (@stdavis)

`v7.6.2`

Compare Source

Bug Fixes

6466ba9 #713 lru: use map.delete() directly (#713) (@negezor, @lukekarrys)

`v7.6.1`

Compare Source

Bug Fixes

c570a34 #704 linting: no-unused-vars (@wraithgar)
ad8ff11 #704 use internal cache implementation (@mbtools)
ac9b357 #682 typo in compareBuild debug message (#682) (@mbtools)

Dependencies

988a8de #709 uninstall lru-cache (#709)
3fabe4d #704 remove lru-cache

Chores

dd09b60 #705 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)
ec49cdc #701 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)
b236c3d #696 add benchmarks (#696) (@H4ad)
692451b #688 various improvements to README (#688) (@mbtools)
5feeb7f #705 postinstall for dependabot template-oss PR (@lukekarrys)
074156f #701 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

`v7.6.0`

Compare Source

Features

a7ab13a #671 preserve pre-release and build parts of a version on coerce (#671) (@madtisa, madtisa, @wraithgar)

Chores

816c7b2 #667 postinstall for dependabot template-oss PR (@lukekarrys)
0bd24d9 #667 bump @npmcli/template-oss from 4.21.1 to 4.21.3 (@dependabot[bot])
e521932 #652 postinstall for dependabot template-oss PR (@lukekarrys)
8873991 #652 chore: chore: postinstall for dependabot template-oss PR (@lukekarrys)
f317dc8 #652 bump @npmcli/template-oss from 4.19.0 to 4.21.0 (@dependabot[bot])
7303db1 #658 add clean() test for build metadata (#658) (@jethrodaniel)
6240d75 #656 add missing quotes in README.md (#656) (@zyxkad)
14d263f #625 postinstall for dependabot template-oss PR (@lukekarrys)
7c34e1a #625 bump @npmcli/template-oss from 4.18.1 to 4.19.0 (@dependabot[bot])
123e0b0 #622 postinstall for dependabot template-oss PR (@lukekarrys)
737d5e1 #622 bump @npmcli/template-oss from 4.18.0 to 4.18.1 (@dependabot[bot])
cce6180 #598 postinstall for dependabot template-oss PR (@lukekarrys)
b914a3d #598 bump @npmcli/template-oss from 4.17.0 to 4.18.0 (@dependabot[bot])

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

github-actions · 2026-06-19T21:05:14Z

⚠️ The workflow jobs listed below don't declare a permissions: block and may break when the organization's default GITHUB_TOKEN permissions are restricted to read-only.

Expand for findings

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/codeowners-validator.yml:8:3
   |
 8 | /   codeowners-validator:
 9 | |     runs-on: ubuntu-latest
10 | |     steps:
11 | |       # Checks-out your repository, which is validated in the next step
...  |
37 | |           # Specifies whether only teams are allowed as owners of files.
38 | |           owner_checker_owners_must_be_teams: "false"          
   | |                                                                ^
   | |                                                                |
   | |________________________________________________________________this job
   |                                                                  default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/test-otel-export-workflow.yml:1:1
   |
 1 | / name: test-otel-export-workflow.yml
 2 | | on:
 3 | |   push:
 4 | |     branches:
...  |
22 | |         run: |
23 | |           echo "phase 2 step 1"
   | |________________________________^ default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/test-otel-export-workflow.yml:8:3
   |
 8 | /   phase_1:
 9 | |     runs-on: ubuntu-x64-small
10 | |     steps:
11 | |       - name: phase 1 step 1
...  |
16 | |           sleep 10
17 | |           echo "phase 1 step 2"
   | |                               ^
   | |                               |
   | |_______________________________this job
   |                                 default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/test-otel-export-workflow.yml:18:3
   |
18 | /   phase_2:
19 | |     runs-on: ubuntu-x64-small
20 | |     steps:
21 | |       - name: phase 2 step 1
22 | |         run: |
23 | |           echo "phase 2 step 1"
   | |                                ^
   | |                                |
   | |________________________________this job
   |                                  default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

warning[excessive-permissions]: overly broad permissions
  --> ./.github/workflows/test.yml:6:5
   |
 6 | /     test:
 7 | |         name: Test
 8 | |         runs-on: ubuntu-latest
...  |
30 | |             - name: Run tests
31 | |               run: yarn run test
   | |                                 ^
   | |                                 |
   | |_________________________________this job
   |                                   default permissions used due to no permissions: block
   |
   = note: audit confidence → Medium
   = help: audit documentation → https://docs.zizmor.sh/audits/#excessive-permissions

| datasource | package | from | to | | ---------- | ------------- | ----- | ----- | | npm | semver | 7.5.4 | 7.8.5 | | npm | @types/semver | 7.5.6 | 7.8.0 | Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

renovate-sh-app Bot requested a review from a team as a code owner June 4, 2026 15:29

renovate-sh-app Bot added the update-minor label Jun 4, 2026

renovate-sh-app Bot changed the title ~~chore(deps): update dependency semver to v7.8.1~~ chore(deps): update dependency semver to v7.8.2 Jun 7, 2026

renovate-sh-app Bot force-pushed the renovate/semver-7.x-lockfile branch 2 times, most recently from 89f8942 to d5dfd39 Compare June 10, 2026 00:08

renovate-sh-app Bot changed the title ~~chore(deps): update dependency semver to v7.8.2~~ chore(deps): update dependency semver to v7.8.3 Jun 11, 2026

renovate-sh-app Bot changed the title ~~chore(deps): update dependency semver to v7.8.3~~ chore(deps): update dependency semver to v7.8.4 Jun 13, 2026

renovate-sh-app Bot force-pushed the renovate/semver-7.x-lockfile branch from d5dfd39 to 32babc8 Compare June 19, 2026 21:04

renovate-sh-app Bot changed the title ~~chore(deps): update dependency semver to v7.8.4~~ chore(deps): update dependency semver to v7.8.5 Jun 22, 2026

renovate-sh-app Bot force-pushed the renovate/semver-7.x-lockfile branch from 32babc8 to fcc5bcd Compare August 2, 2026 09:09

renovate-sh-app Bot force-pushed the renovate/semver-7.x-lockfile branch from fcc5bcd to d14ae41 Compare October 15, 2026 12:10

Navigation Menu

Repository navigation

chore(deps): update dependency semver to v7.8.5 - #324

chore(deps): update dependency semver to v7.8.5#324
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/semver-7.x-lockfile

renovate-sh-app Bot commented Jun 4, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate-sh-app Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Chores

Bug Fixes

Bug Fixes

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Documentation

Dependencies

Chores

Bug Fixes

Chores

Bug Fixes

Chores

Bug Fixes

Features

Bug Fixes

Documentation

Chores

Bug Fixes

Documentation

Bug Fixes

Bug Fixes

Dependencies

Chores

Features

Chores

Configuration

Need help?

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate-sh-app Bot commented Jun 4, 2026 •

edited

Loading