Skip to content

Bump minimatch and mocha in /packages/rdf-parser-csvw#27

Open
dependabot[bot] wants to merge 33 commits into
masterfrom
dependabot/npm_and_yarn/packages/rdf-parser-csvw/multi-46763a828f
Open

Bump minimatch and mocha in /packages/rdf-parser-csvw#27
dependabot[bot] wants to merge 33 commits into
masterfrom
dependabot/npm_and_yarn/packages/rdf-parser-csvw/multi-46763a828f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Feb 28, 2026

Bumps minimatch to 3.1.5 and updates ancestor dependencies minimatch and mocha. These dependencies need to be updated together.

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates minimatch from 9.0.4 to 9.0.9

Commits

Updates mocha from 10.4.0 to 10.8.2

Release notes

Sourced from mocha's releases.

v10.8.2

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)
  • test link in html reporter (#5224) (f054acc)

📚 Documentation

  • indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

  • fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

  • deps: bump the github-actions group with 1 update (#5132) (e536ab2)

v10.8.1

10.8.1 (2024-10-29)

🩹 Fixes

v10.8.0

10.8.0 (2024-10-29)

🌟 Features

🩹 Fixes

📚 Documentation

... (truncated)

Changelog

Sourced from mocha's changelog.

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)
  • test link in html reporter (#5224) (f054acc)

📚 Documentation

  • indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

  • fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

  • deps: bump the github-actions group with 1 update (#5132) (e536ab2)

10.8.1 (2024-10-29)

🩹 Fixes

10.8.0 (2024-10-29)

🌟 Features

🩹 Fixes

📚 Documentation

🧹 Chores

  • fix npm scripts on windows (#5219) (1173da0)
  • remove trailing whitespace in SECURITY.md (7563e59)

10.7.3 (2024-08-09)

... (truncated)

Commits
  • 05097db chore(main): release 10.8.2 (#5239)
  • 14e640e docs: indicate 'exports' interface does not work in browsers (#5181)
  • 881e3b0 chore: fix docs builds by re-adding eleventy and ignoring gitignore again (#5...
  • f054acc fix: test link in html reporter (#5224)
  • e536ab2 build(deps): bump the github-actions group with 1 update (#5132)
  • ba0fefe fix: support errors with circular dependencies in object values with --parall...
  • f44f71b chore(main): release 10.8.1 (#5238)
  • f72bc17 fix: handle case of invalid package.json with no explicit config (#5198)
  • 68803b6 fix: use accurate test links in HTML reporter (#5228)
  • d8ca270 fix: Typos on mochajs.org (#5237)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

rareba added 30 commits December 9, 2025 11:58
@rareba
Fix spex package to use @lindaS dependencies instead of @zazuko
1f04229 
Updated source code imports:
- @zazuko/vue-graph-layout -> @lindas/vue-graph-layout
- @zazuko/env/web -> @lindas/env/web
- @zazuko/prefixes -> @lindas/prefixes

Files changed:
- src/components/data-model/data-model-component.vue
- src/components/ResourcesExplorer.vue
- src/components/shacl-dialog/modal-shacl-load.vue
- src/views/ShaclEditor.vue

Published versions:
- @lindas/vue-graph-layout@0.1.6
- @lindas/spex@0.2.4
@rareba
Update spex to use @lindaS packages instead of @zazuko
05224f2 
Updated source code imports:
- @zazuko/vue-graph-layout -> @lindas/vue-graph-layout
- @zazuko/env/web -> @lindas/env/web
- @zazuko/prefixes -> @lindas/prefixes

Files changed:
- src/components/data-model/data-model-component.vue
- src/components/ResourcesExplorer.vue
- src/components/shacl-dialog/modal-shacl-load.vue
- src/views/ShaclEditor.vue
- packages/vocabulary-extras-builders/package.json (generate script)
@rareba
Fix async/await in shorten-report.js for createPlaygroundUrl
ac43ec3
@rareba
Bump @lindas/shacl-test to 0.1.3
c3d027e
@rareba
Add rdf-parser-csvw-xlsx and fix clownface for monorepo
c7cc1f6 
- Add @lindas/rdf-parser-csvw-xlsx package (forked from @zazuko/rdf-parser-csvw-xlsx)
- Update clownface package.json:
  - Rename from lindas-clownface to @lindas/clownface
  - Point repository to lindas-stack-libraries monorepo
  - Remove husky configuration (not needed in monorepo)
  - Add publishConfig for public access
@rareba
Fix security vulnerabilities in rdf-parser-csvw-xlsx and vue-graph-la…
4e4ef97 
…yout

Security fixes:
- Replace xlsx library with exceljs in rdf-parser-csvw-xlsx to fix:
  - Prototype Pollution vulnerability (GHSA-4r6h-8v6p-xvw6)
  - ReDoS vulnerability (GHSA-5pgg-2g8v-p4x9)
- Migrate vue-graph-layout from Vue CLI to Vite to fix:
  - webpack-dev-server source code theft vulnerability
  - Multiple other webpack-dev-server vulnerabilities

Other improvements:
- Fix Windows path handling in tests using fileURLToPath
- Bump @lindas/env-node to ^3.0.2
- All 8 tests pass with exceljs implementation
@rareba
Fix vue-graph-layout build with ESM-compatible config files
20f6824 
Renamed config files to use .cjs extension for CommonJS compatibility:
- postcss.config.js -> postcss.config.cjs
- tailwind.config.js -> tailwind.config.cjs
- babel.config.js -> Removed (not needed with Vite)

This fixes the build failure caused by module.exports being used
in an ES module context (package.json has "type": "module").

Build now succeeds with Vite producing:
- vue-graph-layout.js (9.90 kB)
- vue-graph-layout.umd.cjs (7.12 kB)
- vue-graph-layout.css (0.49 kB)
@rareba
Convert clownface from submodule to regular package files
8ea3e5f
@rareba
Fix @lindas/env browser compatibility by using readable-stream and ut…
233b9ff 
…il polyfills
@rareba
Fix @lindas/shacl-test line endings and permissions for Linux compati…
3ba5095 
…bility
@rareba
Fix shacl-test scripts to use explicit node and bash commands for npm…
decbeb3 
… compatibility
@rareba
Fix approvals flag quoting to prevent empty string argument
af5d4ae
@rareba
Fix security vulnerabilities by replacing vulnerable xlsx dependency
e964954 
- Added npm override to replace @zazuko/rdf-parser-csvw-xlsx (uses vulnerable
  xlsx) with @lindas/rdf-parser-csvw-xlsx (uses safe exceljs)
- Resolves GHSA-4r6h-8v6p-xvw6 (Prototype Pollution in sheetJS)
- Resolves GHSA-5pgg-2g8v-p4x9 (ReDoS in sheetJS)
- npm audit now reports 0 vulnerabilities
@rareba
Fix TypeScript module resolution and update CI workflows
4afb108 
- Add proper exports with types for @lindas/env subpath exports
  (./web.js, ./Environment.js, etc.)
- Update CI and release workflows to use --legacy-peer-deps
- Support both main and master branches
- Exclude test directory from TypeScript compilation in rdf-parser-csvw-xlsx
- Remove compiled test files from repository
@rareba
Publish packages @lindas/env@3.0.5 and @lindas/env-node@3.0.3
1d684de 
Published to npm with fixed TypeScript module exports.
@rareba
Add basic tests and configure automated npm publishing
5453070 
- Add test suites for prefixes, vocabulary-loader, vocabulary-extras, vocabulary-extras-builders
- Add mocha configuration for TypeScript tests
- Add placeholder test scripts for UI packages (yasgui, yasr, yasqe, spex, shacl-test)
- Configure changesets with README documentation
- Add ts-node for TypeScript test support
@rareba
Fix TypeScript test type errors in rdf-parser-csvw-xlsx
2a25f7a 
- Add type assertions for streamToArray results
- Fix factory type compatibility
- Add eslint-disable comments for necessary any types
@rareba
Update wait-on to v9 for Node 22 compatibility
8c43c72 
- wait-on@6 uses axios internal paths that don't work with Node 22
- Update to wait-on@9.0.3 which is compatible
@rareba
Add docker-compose setup to CI workflow
d9ba42b 
The cube-hierarchy-query tests require docker-compose to start Fuseki
(SPARQL server) for integration tests.
@rareba
Fix snapshot test name for renamed package
390cc19 
Updated snapshot key from @zazuko/cube-hierarchy-query to
@lindas/cube-hierarchy-query to match the renamed package.
@rareba
Add docker-compose setup to Release workflow
f0c863c 
Same fix as CI workflow - cube-hierarchy-query tests require
docker-compose to start Fuseki for integration tests.
@rareba
Combine CI and Release workflows into single pipeline
601dba5 
- Tests run first on Node 18, 20, 22
- Security audit runs in parallel (non-blocking)
- Release job runs after tests pass (only on push to main/master)
- Added concurrency control to cancel outdated runs
@rareba
Add docker-compose to release job
fae60b6 
Changesets action runs tests internally which need docker-compose
for cube-hierarchy-query integration tests.
@rareba
Fix @lindas/shacl-test line endings and permissions for Linux compati…
af114d3 
…bility
@rareba
Add webpack build for yasgui and increase max response size
803b6ab 
- Add webpack configuration for building yasgui packages
- Add tsconfig files for TypeScript compilation
- Increase maxPersistentResponseSize from 100KB to 10MB in yasr defaults
- Add build scripts for yasgui bundle generation
@rareba
Add CHANGELOG.md for tracking repository changes
9f22477
@rareba
Fix bundler compatibility issues in env and env-core packages
8ae475b 
- Downgrade get-stream from ^9.0.1 to ^8.0.0 in @lindas/env to fix
  Angular/esbuild bundler compatibility issue caused by
  @sec-ant/readable-stream async generator patterns
- Add comprehensive proxy traps to extend() function in @lindas/env-core:
  getPrototypeOf, setPrototypeOf, isExtensible, preventExtensions,
  defineProperty, deleteProperty
- Clean up debug logging from extend.js and Environment.js
- Update changelogs
@rareba
Add @lindas/formats-lazy package for browser-compatible RDF parsing
cf45502 
- Fork of @zazuko/formats-lazy v1.0.2
- Provides lazy-loaded RDF parsers and serializers
- Uses @rdfjs/parser-n3, @rdfjs/parser-jsonld, rdfxml-streaming-parser
- Does not depend on @graphy/* packages which require Node.js crypto
- Browser-compatible alternative to @rdfjs-elements/formats-pretty
@rareba
Fix TypeScript type declarations in @lindas/formats-lazy
7eb48ec 
- Fixed malformed SinkMap generic types in index.d.ts
- Properly import EventEmitter from events and Stream from @rdfjs/types
- Fixes TS2345 error when using env.formats.import(formats)
@rareba
Bump @lindas/formats-lazy to 1.0.2
d575dec
rareba and others added 3 commits February 6, 2026 17:31
@rareba
Align all package versions to 4.7.0 (#18)
a0a5177 
Bump all packages to unified version for DevOps guidelines compliance.
@rareba
Run CI on all branches and pull requests (#20)
dd4e924
@dependabot
Bump minimatch and mocha in /packages/rdf-parser-csvw
affced2 
Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.5 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 9.0.4 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `mocha` from 10.4.0 to 10.8.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.4.0...v10.8.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: mocha
  dependency-version: 10.8.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rareba