Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update dependency turbo to v1.13.0 #1656

Merged
merged 1 commit into from
Apr 1, 2024
Merged

fix(deps): update dependency turbo to v1.13.0 #1656

merged 1 commit into from
Apr 1, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
turbo (source) 1.9.0 -> 1.13.0 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

vercel/turbo (turbo)

v1.13.0

Compare Source

v1.12.5

Compare Source

v1.12.4: Turborepo v1.12.4

Compare Source

What's Changed

Docs
create-turbo
@​turbo/repository - ⚠️ Alpha - Expect Breaking Changes
Changelog

New Contributors

Full Changelog: vercel/turbo@v1.12.3...v1.12.4

v1.12.3: Turborepo v1.12.3

Compare Source

What's Changed

Docs
create-turbo
Examples
Changelog

New Contributors

Full Changelog: vercel/turbo@v1.12.2...v1.12.3

v1.12.2: Turborepo v1.12.2

Compare Source

What's Changed

create-turbo
Changelog

Full Changelog: vercel/turbo@v1.12.1...v1.12.2

v1.12.1: Turborepo v1.12.1

Compare Source

What's Changed

Docs
create-turbo
Changelog

New Contributors

Full Changelog: vercel/turbo@v1.12.0...v1.12.1

v1.12.0: Turborepo v1.12.0

Compare Source

What's Changed

Docs
create-turbo
Examples
Changelog

New Contributors

Full Changelog: vercel/turbo@v1.11.3...v1.12.0

v1.11.3: Turborepo v1.11.3

Compare Source

What's Changed

Docs
create-turbo
Examples
Changelog

New Contributors

Full Changelog: vercel/turbo@v1.11.2...v1.11.3

v1.11.2: Turborepo v1.11.2

Compare Source

What's Changed

Docs
create-turbo
Examples
Changelog

Full Changelog: vercel/turbo@v1.11.1...v1.11.2

v1.11.1: Turborepo v1.11.1

Compare Source

What's Changed

create-turbo
Examples
Changelog

Full Changelog: vercel/turbo@v1.11.0...v1.11.1

v1.11.0: Turborepo v1.11.0

Compare Source

What's Changed

Docs
create-turbo

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Apr 1, 2024

⚠️ No Changeset found

Latest commit: 5892f80

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@what-the-diff What The Diff
Copy link

what-the-diff bot commented Apr 1, 2024

PR Summary

  • Updated Dependencies
    The application's dependencies have been upgraded. The version of certain software components that our application relies on has been updated from 1.9.0 to 1.13.0. This includes components used across different operating systems (including macOS, Linux, and Windows) and various processing architectures. This version update, mainly for a package called turbo, will ensure that our application stays current and benefits from recent improvements or bug fixes made in these dependencies. The optional components within this turbo package have also been made compatible with the new version 1.13.0. This will ensure that our application works properly, even if it requires these optional components.

@socket-security Socket Security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@types/[email protected] None 0 1.72 MB types
npm/@types/[email protected] None 0 6.72 kB types
npm/@types/[email protected] None 0 49.5 kB types
npm/@types/[email protected] None 0 6.54 kB types
npm/[email protected] None 0 81.8 kB egoist
npm/[email protected] None 0 4.85 kB dmnd
npm/[email protected] None 0 25.5 kB damonoehlman
npm/[email protected] None 0 315 kB stefanpenner
npm/[email protected] filesystem Transitive: environment +10 146 kB isaacs
npm/[email protected] None +2 143 kB evilebottnawi
npm/[email protected] None 0 1.41 MB bnjmnt4n
npm/[email protected] None 0 139 kB pimterry
npm/[email protected] environment, filesystem, unsafe 0 11.7 MB prettier-bot
npm/[email protected] environment +3 4.62 MB gnoff
npm/[email protected] environment +2 337 kB gnoff
npm/[email protected] filesystem Transitive: environment +11 160 kB isaacs
npm/[email protected] None 0 60 kB typescript-bot
npm/[email protected] None 0 66.8 MB typescript-bot
npm/[email protected] environment 0 72.2 kB soda

🚮 Removed packages: npm/@babel/[email protected], npm/@znck/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

@socket-security Socket Security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/[email protected]
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@cypress Cypress
Copy link

cypress bot commented Apr 1, 2024

Passing run #624 ↗︎

0 57 0 0 Flakiness 0

Details:

fix(deps): update dependency turbo to v1.13.0
Project: vue-styleguidist Commit: 5892f801bc
Status: Passed Duration: 14:18 💡
Started: Apr 1, 2024 2:21 AM Ended: Apr 1, 2024 2:36 AM

Review all test suite changes for PR #1656 ↗︎

@elevatebart elevatebart merged commit f416615 into dev Apr 1, 2024
10 of 11 checks passed
@elevatebart elevatebart deleted the renovate/turbo-monorepo branch April 1, 2024 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@elevatebart