Skip to content

chore(deps): bump the npm-all group across 1 directory with 5 updates - #1464

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-all-6b8f575274
Closed

chore(deps): bump the npm-all group across 1 directory with 5 updates#1464
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm-all-6b8f575274

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown

Bumps the npm-all group with 5 updates in the / directory:

Package From To
@semantic-release/changelog 6.0.3 7.0.0
@semantic-release/commit-analyzer 10.0.1 13.0.1
@semantic-release/git 10.0.1 11.0.0
@semantic-release/release-notes-generator 11.0.4 14.1.1
semantic-release 21.0.7 25.0.8

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

  • Replaced xo with prettier with default configuration; following newly established convention
  • Replaced nyc with c8 for code coverage
  • Replaced lodash with lodash-es for proper esm support

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
  • 0563e5d chore(deps): update to the latest semantic-release version (#417)
  • e154214 feat: ES Module (#414)
  • 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
  • 1c48000 test: remove codecov (#399)
  • 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
  • 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
  • e7c79f8 chore(deps): update dependency nyc to v17 (#392)
  • 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
  • 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.


Updates @semantic-release/commit-analyzer from 10.0.1 to 13.0.1

Release notes

Sourced from @​semantic-release/commit-analyzer's releases.

v13.0.1

13.0.1 (2025-01-03)

Bug Fixes

  • deps: update dependency import-from-esm to v2 (#741) (f106b76)

v13.0.0

13.0.0 (2024-05-31)

Bug Fixes

  • log the raw message again (e2f5d6c)

Features

  • support latest conventional-changelog packages (0254d7a)

BREAKING CHANGES

  • by supporting the latest major versions of conventional-changelog packages, we are dropping support for previous major versions of those packages due to the breaking changes between majors. this only impacts your project if you are installing alongside semantic-release, so updating those packages to latest version should be the only change you need for this update. no action should be necessary if you are using default semantic-release config

v13.0.0-beta.2

13.0.0-beta.2 (2024-05-25)

Bug Fixes

  • log the raw message again (e2f5d6c)

v13.0.0-beta.1

13.0.0-beta.1 (2024-05-25)

Features

  • support latest conventional-changelog packages (0254d7a)

BREAKING CHANGES

  • by supporting the latest major versions of conventional-changelog packages, we are

... (truncated)

Commits

Updates @semantic-release/git from 10.0.1 to 11.0.0

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

Other Notable Changes

  • @semantic-release/error ^3^4 (ESM-only)
  • aggregate-error ^3^5 (ESM-only, uses native AggregateError)
  • execa ^5^9 (ESM-only, named export)
  • p-reduce ^2^3 (ESM-only)
  • Removed CJS-only devDeps: clear-module, file-url, fs-extra, get-stream, nyc
  • Added c8 for coverage; bumped ava, sinon, tempy, semantic-release, prettier
  • Engine: ^22.22.2 || >= 24.15;
  • Scripts: nycc8, added pretest, removed test:ci

Related Issue

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

  • update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

v11.0.0-beta.1

11.0.0-beta.1 (2026-07-17)

Features

... (truncated)

Commits
  • 4d704a2 feat: ES Module (#544)
  • bd1876c chore(deps): update dependency micromatch to v4.0.8 [security] (#537)
  • b82a708 docs: fix broken links in README (#535)
  • 28a1751 ci(action): update actions/checkout action to v4.1.3 (#515)
  • 29839bd docs(release-commits): add warning about considering if the plugin is truly n...
  • 8ad065b chore: Fix URL for Adding a new GPG key to your GitHub account (#511)
  • 5e30d7a ci(action): update actions/setup-node action to v4.0.2 (#503)
  • 8b0b8d1 ci(renovate): fixed the reference to our org-level config
  • 0a537fb ci(action): update actions/setup-node action to v4.0.1 (#502)
  • 788ec68 chore(deps): update dependency fs-extra to v11.2.0 (#499)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.


Updates @semantic-release/release-notes-generator from 11.0.4 to 14.1.1

Release notes

Sourced from @​semantic-release/release-notes-generator's releases.

v14.1.1

14.1.1 (2026-05-08)

Bug Fixes

  • deps: update dependency get-stream to v9 (#613) (9728887)

v14.1.0

14.1.0 (2025-09-05)

Features

  • preset: support ignoreCommits option (#836) (485bc0a)

v14.0.3

14.0.3 (2025-01-03)

Bug Fixes

  • deps: update dependency import-from-esm to v2 (#756) (832620e)

v14.0.2

14.0.2 (2024-12-16)

Bug Fixes

v14.0.1

14.0.1 (2024-06-22)

Bug Fixes

  • deps: rename read-pkg-up to read-package-up (#671) (687ba5a)

v14.0.0

14.0.0 (2024-05-31)

Features

  • support latest conventional-changelog packages (#643) (2bce0d3)

BREAKING CHANGES

... (truncated)

Commits
  • 9728887 fix(deps): update dependency get-stream to v9 (#613)
  • 618cd05 chore(deps): update dependency publint to v0.3.19 (#965)
  • 2cbdb58 chore(deps): lock file maintenance (#964)
  • df3fb9e chore(deps): lock file maintenance (#962)
  • e60ca73 chore(deps): update npm to v11.13.0 (#961)
  • 05ea556 ci(action): update actions/setup-node action to v6.4.0 (#960)
  • 0b4e4a7 chore(deps): lock file maintenance (#959)
  • 9854b65 chore(deps): update dependency prettier to v3.8.3 (#958)
  • 64d547f chore(deps): update dependency sinon to v21.1.2 (#957)
  • 46dec93 chore(deps): update dependency sinon to v21.1.1 (#956)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/release-notes-generator since your current version.


Updates semantic-release from 21.0.7 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)

v25.0.5

25.0.5 (2026-06-09)

Bug Fixes

v25.0.4

25.0.4 (2026-06-09)

Bug Fixes

  • code-quality: add missing comma in context object for consistency (493d6cd)

v25.0.3

25.0.3 (2026-01-30)

Bug Fixes

... (truncated)

Commits
  • 1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
  • 0a60004 fix: handle potential null values in commit message and gitTags trimming
  • f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
  • 973d763 fix(hide-sensitive): mask key/auth/webhook env vars
  • 474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
  • fc9382c docs: fix issue template links (#4251)
  • e34c52d ci(action): update actions/setup-node action to v7 (#4250)
  • 8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
  • 956baf4 chore(deps): update npm to v12.0.1 (#4247)
  • c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for semantic-release since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-all group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.3` | `7.0.0` |
| [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer) | `10.0.1` | `13.0.1` |
| [@semantic-release/git](https://github.com/semantic-release/git) | `10.0.1` | `11.0.0` |
| [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator) | `11.0.4` | `14.1.1` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `21.0.7` | `25.0.8` |



Updates `@semantic-release/changelog` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.3...v7.0.0)

Updates `@semantic-release/commit-analyzer` from 10.0.1 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v10.0.1...v13.0.1)

Updates `@semantic-release/git` from 10.0.1 to 11.0.0
- [Release notes](https://github.com/semantic-release/git/releases)
- [Commits](semantic-release/git@v10.0.1...v11.0.0)

Updates `@semantic-release/release-notes-generator` from 11.0.4 to 14.1.1
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v11.0.4...v14.1.1)

Updates `semantic-release` from 21.0.7 to 25.0.8
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v21.0.7...v25.0.8)

---
updated-dependencies:
- dependency-name: "@semantic-release/changelog"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@semantic-release/git"
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: semantic-release
  dependency-version: 25.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
@tieubao

tieubao commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Closing: disabling Dependabot version updates on this repo (noise, low-priority project).

@tieubao tieubao closed this Aug 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@tieubao
tieubao deleted the dependabot/npm_and_yarn/npm-all-6b8f575274 branch August 5, 2026 19:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant