Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 29, 2025

This PR contains the following updates:

Package Change Age Confidence
negotiator 0.6.4 -> 1.0.0 age confidence

Release Notes

jshttp/negotiator (negotiator)

v1.0.0

Compare Source

==================

  • Drop support for node <18
  • Added an option preferred encodings array #​59

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency Dependency updates label Oct 29, 2025
@renovate renovate bot requested a review from prabhu as a code owner October 29, 2025 20:36
@renovate renovate bot added the dependency Dependency updates label Oct 29, 2025
Signed-off-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
@github-actions
Copy link
Contributor

Output of pnpm why negotiator:

Legend: production dependency, optional only, dev only

@cyclonedx/cdxgen@12.0.0 /home/runner/work/cdxgen/cdxgen

optionalDependencies:
@appthreat/sqlite3 7.0.1
└─┬ node-gyp 11.5.0
  └─┬ make-fetch-happen 15.0.2
    └── negotiator 1.0.0
compression 1.8.1
└── negotiator 1.0.0
sequelize 6.37.7
└─┬ @appthreat/sqlite3 7.0.1 peer
  └─┬ node-gyp 11.5.0
    └─┬ make-fetch-happen 15.0.2
      └── negotiator 1.0.0

Output of jq on components:

{
  "group": "",
  "name": "negotiator",
  "version": "1.0.0",
  "description": "HTTP content negotiation",
  "scope": "optional",
  "hashes": [
    {
      "alg": "SHA-512",
      "content": "f0e7ecfc051087c31a11cae5ab9c4e5f4090f72a53179765efc9a394c35f38ad3c7f3a604c741140f07170f944b48c34c91a70b3e668ff7afee5645bcbbbb71a"
    }
  ],
  "licenses": [
    {
      "license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }
    }
  ],
  "purl": "pkg:npm/negotiator@1.0.0",
  "externalReferences": [
    {
      "type": "vcs",
      "url": "https://github.com/jshttp/negotiator#readme"
    },
    {
      "type": "vcs",
      "url": "git+https://github.com/jshttp/negotiator.git"
    }
  ],
  "type": "library",
  "bom-ref": "pkg:npm/negotiator@1.0.0",
  "properties": [
    {
      "name": "SrcFile",
      "value": "pnpm-lock.yaml"
    }
  ],
  "evidence": {
    "identity": [
      {
        "field": "purl",
        "confidence": 1,
        "methods": [
          {
            "technique": "manifest-analysis",
            "confidence": 1,
            "value": "pnpm-lock.yaml"
          }
        ],
        "concludedValue": "pnpm-lock.yaml"
      }
    ]
  }
}

Output of jq on dependencies:

{
  "ref": "pkg:npm/negotiator@1.0.0",
  "dependsOn": []
}
{
  "ref": "pkg:npm/compression@1.8.1",
  "dependsOn": [
    "pkg:npm/bytes@3.1.2",
    "pkg:npm/compressible@2.0.18",
    "pkg:npm/debug@4.4.3",
    "pkg:npm/negotiator@1.0.0",
    "pkg:npm/on-headers@1.1.0",
    "pkg:npm/safe-buffer@5.2.1",
    "pkg:npm/vary@1.1.2"
  ]
}
{
  "ref": "pkg:npm/make-fetch-happen@15.0.2",
  "dependsOn": [
    "pkg:npm/@npmcli/agent@4.0.0",
    "pkg:npm/cacache@20.0.1",
    "pkg:npm/http-cache-semantics@4.2.0",
    "pkg:npm/minipass-fetch@4.0.1",
    "pkg:npm/minipass-flush@1.0.5",
    "pkg:npm/minipass-pipeline@1.2.4",
    "pkg:npm/minipass@7.1.2",
    "pkg:npm/negotiator@1.0.0",
    "pkg:npm/proc-log@6.0.0",
    "pkg:npm/promise-retry@2.0.1",
    "pkg:npm/ssri@13.0.0"
  ]
}

@malice00 malice00 merged commit e1375a8 into master Oct 30, 2025
82 of 87 checks passed
@malice00 malice00 deleted the renovate/negotiator-1.x branch October 30, 2025 07:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants