Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2025

Bumps import-from-esm from 1.3.4 to 2.0.0.

Release notes

Sourced from import-from-esm's releases.

v2.0.0

2.0.0 (2024-12-31)

⚠ Breaking changes

  • drop support for Node 16

🚨 Tests

  • remove --no-warnings Node option (bd75fce)

⚙️ Continuous Integrations

  • action: add Node 22 to test matrix (9bced1f)
  • action: allow all sigstore subdomains (c63bbc0)
  • action: allow new scorecard endpoint (c45dd26)
  • action: don't run fuzzing tests on Windows + Node 22 (0ff7550)
  • action: enable npm provenance (0f85491)
  • action: run each test separately (32c1d4b)
  • action: update actions/checkout action to v4.2.2 (#114) (fe4cb47)
  • action: update actions/download-artifact action to v4.1.8 (#117) (5e32ca2)
  • action: update actions/download-artifact digest to c850b93 (#96) (944cc05)
  • action: update actions/setup-node action to v4.1.0 (#116) (a28015f)
  • action: update actions/setup-node digest to 60edb5d (#98) (9b2c96b)
  • action: update actions/upload-artifact action to v4.3.1 (#90) (1990871)
  • action: update actions/upload-artifact action to v4.5.0 (#112) (829be50)
  • action: update actions/upload-artifact digest to 5d5d22a (#89) (0454435)
  • action: update github/codeql-action action to v3.25.0 (#93) (dcbb763)
  • action: update github/codeql-action action to v3.28.0 (#109) (3fa778e)
  • action: update insurgent-lab/is-in-pr-action action to v0.2.0 (#97) (6f3650b)
  • action: update ossf/scorecard-action action to v2.4.0 (#118) (c33184e)
  • action: update sonarsource/sonarcloud-github-action action to v2.3.0 (#120) (2d9e917)
  • action: update step-security/harden-runner action to v2.10.2 (#115) (3bcace5)
  • action: update step-security/harden-runner action to v2.7.0 (#95) (cb020c9)
  • renovate: don't update Node.js in .tool-versions (27a1832)
  • renovate: use correct preset & fix node package name (2e3cb36)

♻️ Chores

  • deps: lock file maintenance (144854b)
  • deps: lock file maintenance (4c5aeb8)
  • deps: lock file maintenance (ac1f305)
  • deps: lock file maintenance (9d38657)
  • deps: lock file maintenance (6579691)
  • deps: lock file maintenance (50f2f1f)
  • deps: lock file maintenance (d2a439a)
  • deps: lock file maintenance (04af189)
  • deps: lock file maintenance (1419cda)
  • deps: lock file maintenance (3a55659)
  • deps: lock file maintenance (e43cca2)

... (truncated)

Changelog

Sourced from import-from-esm's changelog.

2.0.0 (2024-12-31)

⚠ Breaking changes

  • drop support for Node 16

🚨 Tests

  • remove --no-warnings Node option (bd75fce)

⚙️ Continuous Integrations

  • action: add Node 22 to test matrix (9bced1f)
  • action: allow all sigstore subdomains (c63bbc0)
  • action: allow new scorecard endpoint (c45dd26)
  • action: don't run fuzzing tests on Windows + Node 22 (0ff7550)
  • action: enable npm provenance (0f85491)
  • action: run each test separately (32c1d4b)
  • action: update actions/checkout action to v4.2.2 (#114) (fe4cb47)
  • action: update actions/download-artifact action to v4.1.8 (#117) (5e32ca2)
  • action: update actions/download-artifact digest to c850b93 (#96) (944cc05)
  • action: update actions/setup-node action to v4.1.0 (#116) (a28015f)
  • action: update actions/setup-node digest to 60edb5d (#98) (9b2c96b)
  • action: update actions/upload-artifact action to v4.3.1 (#90) (1990871)
  • action: update actions/upload-artifact action to v4.5.0 (#112) (829be50)
  • action: update actions/upload-artifact digest to 5d5d22a (#89) (0454435)
  • action: update github/codeql-action action to v3.25.0 (#93) (dcbb763)
  • action: update github/codeql-action action to v3.28.0 (#109) (3fa778e)
  • action: update insurgent-lab/is-in-pr-action action to v0.2.0 (#97) (6f3650b)
  • action: update ossf/scorecard-action action to v2.4.0 (#118) (c33184e)
  • action: update sonarsource/sonarcloud-github-action action to v2.3.0 (#120) (2d9e917)
  • action: update step-security/harden-runner action to v2.10.2 (#115) (3bcace5)
  • action: update step-security/harden-runner action to v2.7.0 (#95) (cb020c9)
  • renovate: don't update Node.js in .tool-versions (27a1832)
  • renovate: use correct preset & fix node package name (2e3cb36)

♻️ Chores

  • deps: lock file maintenance (144854b)
  • deps: lock file maintenance (4c5aeb8)
  • deps: lock file maintenance (ac1f305)
  • deps: lock file maintenance (9d38657)
  • deps: lock file maintenance (6579691)
  • deps: lock file maintenance (50f2f1f)
  • deps: lock file maintenance (d2a439a)
  • deps: lock file maintenance (04af189)
  • deps: lock file maintenance (1419cda)
  • deps: lock file maintenance (3a55659)
  • deps: lock file maintenance (e43cca2)
  • deps: lock file maintenance (69caf26)

... (truncated)

Commits
  • a57041a chore(release): v2.0.0 [skip ci]
  • c63bbc0 ci(action): allow all sigstore subdomains
  • c8ec660 chore!: drop support for Node 16
  • 0f85491 ci(action): enable npm provenance
  • c45dd26 ci(action): allow new scorecard endpoint
  • 3bcace5 ci(action): update step-security/harden-runner action to v2.10.2 (#115)
  • 0ff7550 ci(action): don't run fuzzing tests on Windows + Node 22
  • 32c1d4b ci(action): run each test separately
  • 2aab0db chore(deps): remove unused cross-env dependency
  • bd75fce test: remove --no-warnings Node option
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [import-from-esm](https://github.com/sheerlox/import-from-esm) from 1.3.4 to 2.0.0.
- [Release notes](https://github.com/sheerlox/import-from-esm/releases)
- [Changelog](https://github.com/sheerlox/import-from-esm/blob/main/CHANGELOG.md)
- [Commits](sheerlox/import-from-esm@v1.3.4...v2.0.0)

---
updated-dependencies:
- dependency-name: import-from-esm
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 6, 2025
@cossssmin cossssmin merged commit cc3e254 into master Jan 6, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/import-from-esm-2.0.0 branch January 6, 2025 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants