Skip to content

chore(deps): update dependency yarn-deduplicate to v6 - #114

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/yarn-deduplicate-6.x
Open

chore(deps): update dependency yarn-deduplicate to v6#114
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/yarn-deduplicate-6.x

Conversation

@renovate

@renovate renovate Bot commented Mar 1, 2024

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
yarn-deduplicate ^3.1.0^6.0.2 age confidence

Release Notes

scinos/yarn-deduplicate (yarn-deduplicate)

v6.0.2

Compare Source

Chores
  • Update dependency tslib to ^2.5.0 (#​236)
  • Update dependency vm2 from 3.9.13 to 3.9.17 (#​238)
  • Update dependency commander to v10 (#​237)
  • Update dependency typescript to v5 (#​239)
  • Update dependency typescript to ^4.9.5 (#​235)
  • Update dependency semver to ^7.5.0 (#​234)
  • Update dependency prettier to ^2.8.8 (#​233)
  • Update dependency eslint-config-prettier to ^8.8.0 (#​222)
  • Update dependency @​types/jest to ^29.5.1 (#​231)
  • Update babel monorepo (#​232)
  • Update dependency release-it to ^15.10.3 (#​220)
  • Update dependency eslint to ^8.38.0 (#​217)
  • Update Yarn to v3.5.1 (#​218)
  • Update dependency eslint-plugin-jest to ^27.2.1 (#​216)
  • Update dependency commander to ^9.5.0 (#​223)
  • Update babel monorepo to ^7.21.4 (#​219)
  • Update jest monorepo to ^29.5.0 (#​221)

v6.0.1

Compare Source

Added
Chores
  • Configure renovate to run deduplicate
  • Bump vm2 from 3.9.9 to 3.9.13 (#​207)
  • Update babel monorepo (#​211)
  • Update babel monorepo to ^7.19.1 (#​189)
  • Update dependency @​types/jest to v29 (#​184)
  • Update dependency commander to ^9.4.1 (#​198)
  • Update dependency eslint to ^8.24.0 (#​193)
  • Update dependency eslint to ^8.28.0 (#​202)
  • Update dependency eslint to ^8.29.0 (#​213)
  • Update dependency eslint-plugin-jest to ^27.0.4 (#​190)
  • Update dependency eslint-plugin-jest to ^27.1.5 (#​199)
  • Update dependency eslint-plugin-jest to ^27.1.6 (#​209)
  • Update dependency jest to ^29.0.3 (#​188)
  • Update dependency prettier to ^2.8.1 (#​214)
  • Update dependency release-it to ^15.5.1 (#​185)
  • Update dependency semver to ^7.3.8 (#​200)
  • Update dependency tslib to ^2.4.1 (#​208)
  • Update dependency typescript to ^4.8.3 (#​191)
  • Update dependency typescript to ^4.9.3 (#​196)
  • Update dependency typescript to ^4.9.4 (#​212)
  • Update jest monorepo (#​197)
  • Update Yarn to v3.3.0 (#​203)

v6.0.0

Compare Source

Breaking changes
  • Drop support for Node 12.x. Minimum supported version is 14.x
  • Drop support for Yarn >= 2. It was never supported because it just doesn't work, but now Yarn
    version is enforced in engines entry in package.json
Chores
  • Do not pack Yarn version, rely on corepack instead
  • Enable corepack on CI
  • Update dependency @​babel/core to ^7.18.13 (#​175)
  • Update dependency @​types/jest to ^28.1.8 (#​174)
  • Update dependency eslint to ^8.23.0 (#​180)
  • Update dependency eslint-plugin-jest to v27 (#​183)
  • Update dependency jest to v29 (#​178)
  • Update dependency release-it to ^15.4.0 (#​176)
  • Update dependency typescript to ^4.8.2 (#​179)
  • Update Yarn to v3.2.3 (#​177)

v5.0.2

Compare Source

Chores

v5.0.0

Compare Source

Breaking
  • Migration to TypeScript. This is a breacking changes because previously we provided TypeScript
    types, and those have changed. If you were not using the exported types, this change should be
    transparent for you.
Chores
  • Configured which files goes into npm package
  • Updated dependencies

v4.0.0

Compare Source

Breaking
  • Dropped support for Node 10
Added
  • Added --exclude-scopes flag to exclude scopes (thanks to @​sventschui)
  • Documented --exclude flags in README.md
  • Added support for Node 16
Fixed
  • Fixed typo in documentation (thanks to @​ChetanGoti)
  • Updated repository information in package.json
  • Do not publish test files
Chores
  • Updated dependencies
  • Rename some directories/files
  • Addded typescript 4.6.2 (via peer dependency)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot

changeset-bot Bot commented Mar 1, 2024

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6ca701e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codesandbox-ci

codesandbox-ci Bot commented Mar 1, 2024

Copy link
Copy Markdown

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 39bf9ac to 21b5aa7 Compare July 1, 2024 04:18
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 21b5aa7 to 5a475d1 Compare December 1, 2024 04:21
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 5a475d1 to 50f0d79 Compare August 10, 2025 14:31
@coderabbitai

coderabbitai Bot commented Aug 10, 2025

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security

socket-security Bot commented Aug 10, 2025

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedyarn-deduplicate@​3.1.0 ⏵ 6.0.210010010080100

View full report

@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 50f0d79 to fe664a8 Compare October 21, 2025 15:48
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from fe664a8 to 08d3f5d Compare February 2, 2026 17:32
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 08d3f5d to dde7fcf Compare February 12, 2026 18:15
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from dde7fcf to 550ee2c Compare April 1, 2026 19:06
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 550ee2c to bf0cdb9 Compare May 12, 2026 11:03
@socket-security

socket-security Bot commented May 12, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm commander is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ?npm/yarn-deduplicate@6.0.2npm/commander@10.0.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/commander@10.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from bf0cdb9 to 5f782e3 Compare May 28, 2026 16:05
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 5f782e3 to 1596eb2 Compare June 11, 2026 15:57
@renovate
renovate Bot force-pushed the renovate/yarn-deduplicate-6.x branch from 1596eb2 to 6ca701e Compare July 12, 2026 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants