Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 24, 2024

This PR contains the following updates:

Package Change Age Confidence
editorconfig-checker 3.3.0 -> 6.1.1 age confidence

Release Notes

editorconfig-checker/editorconfig-checker.javascript (editorconfig-checker)

v6.1.1

Compare Source

Bug Fixes

v6.1.0

Compare Source

Features

v6.0.1

Compare Source

Bug Fixes

v6.0.0

Compare Source

⚠ BREAKING CHANGES
  • Minimum supported Node.js >= 20.11.0

Ref: https://nodejs.org/api/esm.html#importmetadirname

Bug Fixes
  • correct working directory (c78ecb0)

v5.1.9

Compare Source

Performance Improvements
  • reduce package size by updating dependencies, from 700Kb to 650Kb + fixes security issues with dependencies (f8f4bba)

v5.1.8

Compare Source

Reverts

v5.1.6 release didn't work because of an issue with the @vercel/ncc compiler: vercel/ncc#1193, for now we revert the changes, so basically v5.1.8 is the same as v5.1.5.
Sorry for the troubles, we also improved our CI, so we should be able to detect this kind of issues in the future.

v5.1.7

Compare Source

Reverts

v5.1.6

Compare Source

Bug Fixes

v5.1.5

Compare Source

Bug Fixes

v5.1.4

Compare Source

Performance Improvements
  • reduce package size by updating dependencies, from ~1Mb to ~700Kb (b1748bc)

v5.1.3

Compare Source

Bug Fixes
  • release: allow downloading binary via proxy again (#​407) (97339d5)

v5.1.2

Compare Source

v5.1.1

Compare Source

v5.1.0

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.0.2

Compare Source

[4.0.2] - 2021-03-31

  • Update Core to 2.3.5
Misc

v4.0.1

Compare Source

v4.0.0

Compare Source

[4.0.0] - 2021-03-14

Breaking
  • Use config file to get core specific version #​222
Misc

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

Thanks for opening an issue! Make sure you've followed CONTRIBUTING.md.

@github-actions
Copy link

Hello from PR Helper

Remember to comment with one of the following states:

#pr-ready to enable all auto processing and merging.

#pr-onhold to prevent merging as you have other commits or discussions to make.

If you do not set the #pr-ready comment then the auto-merge capabilities will not be active.

@github-actions
Copy link

Thanks for the PR!

This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged.

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Scan Summary

Tool Critical High Medium Low Status
Dependency Scan (universal) 1 8 3 0
Security Audit for Infrastructure 0 0 0 6

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

@renovate renovate bot force-pushed the renovate/editorconfig-checker-6.x branch from a8f3ac6 to 17585b9 Compare January 8, 2025 20:48
@renovate renovate bot force-pushed the renovate/editorconfig-checker-6.x branch 2 times, most recently from 059a12a to 4d1c6b3 Compare January 9, 2025 17:12
@renovate renovate bot force-pushed the renovate/editorconfig-checker-6.x branch from 4d1c6b3 to c4126ae Compare July 17, 2025 01:31
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Scan Summary

Tool Critical High Medium Low Status
Dependency Scan (universal) 1 7 3 0
Security Audit for Infrastructure 0 0 0 6

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/editorconfig-checker-6.x branch from c4126ae to 0cc6b1f Compare October 24, 2025 11:46
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Scan Summary

Tool Critical High Medium Low Status
Security Audit for Infrastructure 0 0 0 6

Recommendation

Looks good ✔️

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
npm@7.24.2 has Obfuscated code.

Confidence: 0.94

Location: Package overview

From: ?npm/@semantic-release/npm@7.1.3npm/npm@7.24.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/npm@7.24.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant