From d112a5f5ef34504320c51e741c739d619b4b744f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Jan 2025 09:54:06 -0800
Subject: [PATCH] chore: bump @npmcli/template-oss from 4.23.1 to 4.23.3 (#742)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from
4.23.1 to 4.23.3.
Release notes
Sourced from @npmcli/template-oss's
releases.
v4.23.3
4.23.3
(2024-08-26)
Bug Fixes
v4.23.2
4.23.2
(2024-08-13)
Bug Fixes
Changelog
Sourced from @npmcli/template-oss's
changelog.
4.23.3
(2024-08-26)
Bug Fixes
4.23.2
(2024-08-13)
Bug Fixes
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
---------
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris Sidi
---
.commitlintrc.js | 1 +
.github/workflows/codeql-analysis.yml | 4 ++--
package.json | 4 ++--
3 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/.commitlintrc.js b/.commitlintrc.js
index e9c80b92..b706e527 100644
--- a/.commitlintrc.js
+++ b/.commitlintrc.js
@@ -7,5 +7,6 @@ module.exports = {
'header-max-length': [2, 'always', 80],
'subject-case': [0],
'body-max-line-length': [0],
+ 'footer-max-line-length': [0],
},
}
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 3741af66..f8b17025 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -31,8 +31,8 @@ jobs:
git config --global user.email "npm-cli+bot@github.com"
git config --global user.name "npm CLI robot"
- name: Initialize CodeQL
- uses: github/codeql-action/init@v2
+ uses: github/codeql-action/init@v3
with:
languages: javascript
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v2
+ uses: github/codeql-action/analyze@v3
diff --git a/package.json b/package.json
index 19454ac6..bdd5521c 100644
--- a/package.json
+++ b/package.json
@@ -12,7 +12,7 @@
"posttest": "npm run lint"
},
"devDependencies": {
- "@npmcli/template-oss": "4.23.1",
+ "@npmcli/template-oss": "4.23.3",
"tap": "^12.7.0"
},
"license": "ISC",
@@ -32,6 +32,6 @@
"templateOSS": {
"//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
"content": "./scripts/template-oss",
- "version": "4.23.1"
+ "version": "4.23.3"
}
}