Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency lerna to v7 - autoclosed #163

Closed
wants to merge 1 commit into from
Closed

chore(deps): update dependency lerna to v7 - autoclosed #163

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link

This PR contains the following updates:

Package Type Update Change
lerna (source) devDependencies major ^3.13.4 -> ^7.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 9.8 CVE-2020-7677 #110
Critical 9.8 CVE-2020-7788 #31
Critical 9.8 CVE-2021-23369 #41
Critical 9.8 CVE-2021-23383 #44
Critical 9.8 CVE-2021-44906 #97
Critical 9.8 CVE-2022-2216 #106
Critical 9.8 CVE-2022-37598 #123
Critical 9.1 CVE-2022-2900 #118
High 8.6 CVE-2021-37701 #69
High 8.6 CVE-2021-37712 #72
High 8.6 CVE-2021-37713 #75
High 8.1 CVE-2021-32803 #68
High 8.1 CVE-2021-32804 #67
High 7.5 CVE-2020-28469 #57
High 7.5 CVE-2021-27290 #42
High 7.5 CVE-2021-33623 #58
High 7.5 CVE-2021-33623 #58
High 7.5 CVE-2021-3807 #74
High 7.5 CVE-2022-0722 #107
High 7.5 CVE-2022-25881 #138
High 7.5 WS-2022-0237 #114
High 7.5 WS-2022-0238 #115
High 7.3 CVE-2020-8116 #33
High 7.3 CVE-2020-8116 #33
High 7.3 CVE-2022-0624 #103

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2022-25883 #148

Release Notes

lerna/lerna (lerna)

v7.3.0

Compare Source

Bug Fixes
Features

v7.2.0

Compare Source

Note: Version bump only for package lerna

7.1.5 (2023-08-09)

Note: Version bump only for package lerna

7.1.4 (2023-07-15)

Bug Fixes

7.1.3 (2023-07-12)

Bug Fixes
  • changelog entries for 7.1.2 (f61b087)

7.1.2 (2023-07-12)

7.1.1 (2023-06-28)

Bug Fixes
  • schema: add missing ref to changelogEntryAdditionalMarkdown (b41afab)

v7.1.5

Compare Source

Note: Version bump only for package lerna

v7.1.4

Compare Source

Bug Fixes

v7.1.3

Compare Source

Bug Fixes
  • changelog entries for 7.1.2 (f61b087)

v7.1.2

Compare Source

v7.1.1

Compare Source

Bug Fixes
  • schema: add missing ref to changelogEntryAdditionalMarkdown (b41afab)

v7.1.0

Compare Source

Features
  • core: export detectProjects utility function (#​3740) (641fecb)
  • repair: add migration to remove unused "lerna" field from lerna.json (#​3734) (4fb0427)
  • version: add --changelog-entry-additional-markdown option (#​3751) (63671df)

7.0.2 (2023-06-15)

Note: Version bump only for package lerna

7.0.1 (2023-06-13)

Note: Version bump only for package lerna

v7.0.2

Compare Source

Note: Version bump only for package lerna

v7.0.1

Compare Source

Note: Version bump only for package lerna

v7.0.0

Compare Source

Bug Fixes
Features
  • add migration for adding $schema, increase some strictness (73ceac3)

v6.6.2

Compare Source

Bug Fixes
  • deps: bump pacote to latest to remove install warning (#​3624) (7c34521)
  • remove non-functional schema properties starting with "no" (#​3645) (43c2a48)

v6.6.1

Compare Source

Bug Fixes
  • build-metadata reference in lerna schema (e2349ad)
  • deps: update to rimraf v4, remove path-exists (#​3616) (2f2ee2a)
  • lerna schema type for contents should be string (1625757)

v6.6.0

Compare Source

Bug Fixes
  • update arborist package to get rid of deprecated warning (#​3559) (aff38a7)
Features

6.5.1 (2023-02-14)

Bug Fixes
  • add missing dependency on js-yaml (187f480)

v6.5.1

Compare Source

Bug Fixes
  • add missing dependency on js-yaml (187f480)

v6.5.0

Compare Source

Features
  • publish: add --include-private option for testing private packages (#​3503) (fa1f490)

6.4.1 (2023-01-12)

Bug Fixes

v6.4.1

Compare Source

Bug Fixes

v6.4.0

Compare Source

Features

v6.3.0

Compare Source

Features
  • version: use npmClientArgs in npm install after lerna version (#​3434) (e019e3f)

v6.2.0

Compare Source

Bug Fixes
  • schema: add the other format changelogPreset can assume (#​3441) (d286973)
Features

v6.1.0

Compare Source

Features
  • version: bump prerelease versions from conventional commits (#​3362) (2288b3a)

6.0.3 (2022-11-07)

Note: Version bump only for package lerna

6.0.2 (2022-11-02)

Note: Version bump only for package lerna

6.0.1 (2022-10-14)

Bug Fixes

v6.0.3

Compare Source

Note: Version bump only for package lerna

v6.0.2

Compare Source

Note: Version bump only for package lerna

v6.0.1

Compare Source

Bug Fixes

v6.0.0

Compare Source

Note: Version bump only for package lerna

v5.6.2

Compare Source

Note: Version bump only for package lerna

v5.6.1

Compare Source

Bug Fixes
  • add-caching: ensure lerna.json is configured automatically (9677cda)

v5.6.0

Compare Source

Features

5.5.4 (2022-09-28)

Note: Version bump only for package lerna

5.5.3 (2022-09-28)

Note: Version bump only for package lerna

5.5.2 (2022-09-20)

Note: Version bump only for package lerna

5.5.1 (2022-09-09)

Bug Fixes
  • run: exclude dependencies with --scope when nx.json is not present (#​3316) (99a13a9)

v5.5.4

Compare Source

Note: Version bump only for package lerna

v5.5.2

Compare Source

Note: Version bump only for package lerna

v5.5.1

Compare Source

Bug Fixes
  • run: exclude dependencies with --scope when nx.json is not present (#​3316) (99a13a9)

v5.5.0

Compare Source

Features
Reverts

5.4.3 (2022-08-16)

Note: Version bump only for package lerna

5.4.2 (2022-08-14)

Note: Version bump only for package lerna

5.4.1 (2022-08-12)

Note: Version bump only for package lerna

v5.4.3

Compare Source

Note: Version bump only for package lerna

v5.4.2

Compare Source

Note: Version bump only for package lerna

v5.4.1

Compare Source

Note: Version bump only for package lerna

v5.4.0

Compare Source

Bug Fixes

v5.3.0

Compare Source

Features
  • publish: include all dependencies in package graph by default, allow no-sort (#​3263) (3b0c79c)

v5.2.0

Compare Source

Features

5.1.8 (2022-07-07)

Note: Version bump only for package lerna

5.1.7 (2022-07-06)

Note: Version bump only for package lerna

5.1.6 (2022-06-24)

Note: Version bump only for package lerna

5.1.5 (2022-06-24)

Note: Version bump only for package lerna

5.1.4 (2022-06-15)

Note: Version bump only for package lerna

5.1.3 (2022-06-15)

Note: Version bump only for package lerna

5.1.2 (2022-06-13)

Bug Fixes

5.1.1 (2022-06-09)

Bug Fixes
  • allow maintenance LTS node 14 engines starting at 14.15.0 (#​3161) (72305e4)

v5.1.8

Compare Source

Note: Version bump only for package lerna

v5.1.7

Compare Source

Note: Version bump only for package lerna

v5.1.6

Compare Source

Note: Version bump only for package lerna

v5.1.5

Compare Source

Note: Version bump only for package lerna

v5.1.4

Compare Source

Note: Version bump only for package lerna

v5.1.3

Compare Source

Note: Version bump only for package lerna

v5.1.2

Compare Source

Bug Fixes

v5.1.1

Compare Source

Bug Fixes
  • allow maintenance LTS node 14 engines starting at 14.15.0 (#​3161) (72305e4)

v5.1.0

Compare Source

Note: Version bump only for package lerna

v5.0.0

Compare Source

Note: Version bump only for package lerna

v4.0.0

Compare Source

Features
  • Consume named exports of sibling modules (63499e3)
  • deps: import-local@^3.0.2 (e0e74d4)
  • Drop support for Node v6.x & v8.x (ff4bb4d)
BREAKING CHANGES
  • Node v6.x & v8.x are no longer supported. Please upgrade to the latest LTS release.

Here's the gnarly one-liner I used to make these changes:

npx lerna exec --concurrency 1 --stream -- 'json -I -f package.json -e '"'"'this.engines=this.engines||{};this.engines.node=">= 10.18.0"'"'"

(requires npm i -g json beforehand)

3.22.1 (2020-06-09)

Note: Version bump only for package lerna

v3.22.1

Compare Source

Note: Version bump only for package lerna

v3.22.0

Compare Source

Note: Version bump only for package lerna

v3.21.0

Compare Source

Note: Version bump only for package lerna

3.20.2 (2020-01-02)

Note: Version bump only for package lerna

3.20.1 (2019-12-29)

Note: Version bump only for package lerna

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Feb 29, 2024
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency lerna to v7 chore(deps): update dependency lerna to v7 - autoclosed Mar 3, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/lerna-7.x branch March 3, 2024 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants