From 94a18e04b51a885cc109df23331e02cf2627ff6e Mon Sep 17 00:00:00 2001 From: Olivier Contant Date: Wed, 17 May 2023 16:56:49 -0400 Subject: [PATCH 1/2] Create dependabot.yml Initial dependabot.yml --- .github/dependabot.yml | 41 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000000..7693fb4ab69 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,41 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 +updates: + - package-ecosystem: "npm" # See documentation for possible values + directory: "/api" # Location of package manifests + schedule: + interval: "weekly" + allow: + # Allow both direct and indirect updates for all packages + - dependency-type: "all" + commit-message: + prefix: "npm api prod" + prefix-development: "npm api dev" + include: "scope" + - package-ecosystem: "npm" # See documentation for possible values + directory: "/client" # Location of package manifests + schedule: + interval: "weekly" + allow: + # Allow both direct and indirect updates for all packages + - dependency-type: "all" + commit-message: + prefix: "npm client prod" + prefix-development: "npm client dev" + include: "scope" + - package-ecosystem: "npm" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" + allow: + # Allow both direct and indirect updates for all packages + - dependency-type: "all" + commit-message: + prefix: "npm all prod" + prefix-development: "npm all dev" + include: "scope" + From 50c213f2b1f9d854df56a6114899191d03dd750e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 May 2023 21:11:53 +0000 Subject: [PATCH 2/2] npm all dev(deps-dev): bump @vitejs/plugin-react from 3.1.0 to 4.0.0 Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 3.1.0 to 4.0.0. - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@4.0.0/packages/plugin-react) --- updated-dependencies: - dependency-name: "@vitejs/plugin-react" dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- client/package.json | 2 +- package-lock.json | 43 +++++++++++++------------------------------ 2 files changed, 14 insertions(+), 31 deletions(-) diff --git a/client/package.json b/client/package.json index b7efe5e837c..fdc7301232d 100644 --- a/client/package.json +++ b/client/package.json @@ -91,7 +91,7 @@ "@types/node": "^18.15.10", "@types/react": "^18.0.30", "@types/react-dom": "^18.0.11", - "@vitejs/plugin-react": "^3.1.0", + "@vitejs/plugin-react": "^4.0.0", "autoprefixer": "^10.4.13", "babel-loader": "^9.1.2", "babel-plugin-root-import": "^6.6.0", diff --git a/package-lock.json b/package-lock.json index c5cdf7d8cff..96a4e05b184 100644 --- a/package-lock.json +++ b/package-lock.json @@ -136,7 +136,7 @@ "@types/node": "^18.15.10", "@types/react": "^18.0.30", "@types/react-dom": "^18.0.11", - "@vitejs/plugin-react": "^3.1.0", + "@vitejs/plugin-react": "^4.0.0", "autoprefixer": "^10.4.13", "babel-loader": "^9.1.2", "babel-plugin-root-import": "^6.6.0", @@ -4929,21 +4929,21 @@ } }, "node_modules/@vitejs/plugin-react": { - "version": "3.1.0", + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-4.0.0.tgz", + "integrity": "sha512-HX0XzMjL3hhOYm+0s95pb0Z7F8O81G7joUHgfDd/9J/ZZf5k4xX6QAMFkKsHFxaHlf6X7GD7+XuaZ66ULiJuhQ==", "dev": true, - "license": "MIT", "dependencies": { - "@babel/core": "^7.20.12", - "@babel/plugin-transform-react-jsx-self": "^7.18.6", + "@babel/core": "^7.21.4", + "@babel/plugin-transform-react-jsx-self": "^7.21.0", "@babel/plugin-transform-react-jsx-source": "^7.19.6", - "magic-string": "^0.27.0", "react-refresh": "^0.14.0" }, "engines": { "node": "^14.18.0 || >=16.0.0" }, "peerDependencies": { - "vite": "^4.1.0-beta.0" + "vite": "^4.2.0" } }, "node_modules/@waylaidwanderer/chatgpt-api": { @@ -11103,17 +11103,6 @@ "react": "^16.5.1 || ^17.0.0 || ^18.0.0" } }, - "node_modules/magic-string": { - "version": "0.27.0", - "dev": true, - "license": "MIT", - "dependencies": { - "@jridgewell/sourcemap-codec": "^1.4.13" - }, - "engines": { - "node": ">=12" - } - }, "node_modules/make-dir": { "version": "2.1.0", "dev": true, @@ -19818,13 +19807,14 @@ } }, "@vitejs/plugin-react": { - "version": "3.1.0", + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-4.0.0.tgz", + "integrity": "sha512-HX0XzMjL3hhOYm+0s95pb0Z7F8O81G7joUHgfDd/9J/ZZf5k4xX6QAMFkKsHFxaHlf6X7GD7+XuaZ66ULiJuhQ==", "dev": true, "requires": { - "@babel/core": "^7.20.12", - "@babel/plugin-transform-react-jsx-self": "^7.18.6", + "@babel/core": "^7.21.4", + "@babel/plugin-transform-react-jsx-self": "^7.21.0", "@babel/plugin-transform-react-jsx-source": "^7.19.6", - "magic-string": "^0.27.0", "react-refresh": "^0.14.0" } }, @@ -20832,7 +20822,7 @@ "@types/node": "^18.15.10", "@types/react": "^18.0.30", "@types/react-dom": "^18.0.11", - "@vitejs/plugin-react": "^3.1.0", + "@vitejs/plugin-react": "^4.0.0", "@zattoo/use-double-click": "1.2.0", "autoprefixer": "^10.4.13", "axios": "^1.3.4", @@ -23985,13 +23975,6 @@ "version": "0.113.0", "requires": {} }, - "magic-string": { - "version": "0.27.0", - "dev": true, - "requires": { - "@jridgewell/sourcemap-codec": "^1.4.13" - } - }, "make-dir": { "version": "2.1.0", "dev": true,