[PR #819] [MERGED] Update deps and add dependabot.yml #848

Closed
opened 2025-11-13 12:12:18 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/819
Author: @Lokowitz
Created: 6/1/2025
Status: Merged
Merged: 6/2/2025
Merged by: @oschwartz10612

Base: devHead: main


📝 Commits (10+)

  • a23d437 Create dependabot.yml
  • 10ff2c8 Bump the prod-patch-updates group with 19 updates (#120)
  • 858c809 Bump the dev-patch-updates group with 8 updates (#117)
  • be0c744 Bump node from 20-alpine to 24-alpine in the major-updates group (#111)
  • ea1cd4b Bump the prod-minor-updates group with 27 updates (#121)
  • fa365fb Bump the dev-minor-updates group with 4 updates (#118)
  • d03bee9 Bump yargs from 17.7.2 to 18.0.0 in the dev-major-updates group (#119)
  • 30e8b1f Update dependabot.yml
  • ab79720 Update dependabot.yml
  • 34c6b59 Update dependabot.yml

📊 Changes

4 files changed (+4736 additions, -4410 deletions)

View changed files

.github/dependabot.yml (+46 -0)
📝 Dockerfile (+2 -2)
📝 package-lock.json (+4633 -4353)
📝 package.json (+55 -55)

📄 Description

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

  • updated dependencies
  • added dependabot.yml

Please let me know if you want to use dependabot. It's easy to enable Settings->Advanced Security see docs


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/819 **Author:** [@Lokowitz](https://github.com/Lokowitz) **Created:** 6/1/2025 **Status:** ✅ Merged **Merged:** 6/2/2025 **Merged by:** [@oschwartz10612](https://github.com/oschwartz10612) **Base:** `dev` ← **Head:** `main` --- ### 📝 Commits (10+) - [`a23d437`](https://github.com/fosrl/pangolin/commit/a23d437bd312cbd01b9458b9d7a38d97778a9e95) Create dependabot.yml - [`10ff2c8`](https://github.com/fosrl/pangolin/commit/10ff2c8a653dd99b07d2c3b4a090ee7be2193381) Bump the prod-patch-updates group with 19 updates (#120) - [`858c809`](https://github.com/fosrl/pangolin/commit/858c809514d022c4f2b706b72699d1c8f680c371) Bump the dev-patch-updates group with 8 updates (#117) - [`be0c744`](https://github.com/fosrl/pangolin/commit/be0c7444e91e4bcf501f30c43a350d7d56828497) Bump node from 20-alpine to 24-alpine in the major-updates group (#111) - [`ea1cd4b`](https://github.com/fosrl/pangolin/commit/ea1cd4b0d4b9da0c13257309d766e6a00f93b686) Bump the prod-minor-updates group with 27 updates (#121) - [`fa365fb`](https://github.com/fosrl/pangolin/commit/fa365fb7b8799c0dfe4ab0d30b900b1b78f9ad8c) Bump the dev-minor-updates group with 4 updates (#118) - [`d03bee9`](https://github.com/fosrl/pangolin/commit/d03bee98f51ed55f5427a630b786ac79bcf6f54f) Bump yargs from 17.7.2 to 18.0.0 in the dev-major-updates group (#119) - [`30e8b1f`](https://github.com/fosrl/pangolin/commit/30e8b1f0fe09e5f1a0e1edad0481797b7879cd2f) Update dependabot.yml - [`ab79720`](https://github.com/fosrl/pangolin/commit/ab797203eb4cd999a442274e2ed737c6bcc94d1d) Update dependabot.yml - [`34c6b59`](https://github.com/fosrl/pangolin/commit/34c6b590d70c3a4f3bc5db92ba070feb350c9e86) Update dependabot.yml ### 📊 Changes **4 files changed** (+4736 additions, -4410 deletions) <details> <summary>View changed files</summary> ➕ `.github/dependabot.yml` (+46 -0) 📝 `Dockerfile` (+2 -2) 📝 `package-lock.json` (+4633 -4353) 📝 `package.json` (+55 -55) </details> ### 📄 Description ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description - updated dependencies - added dependabot.yml Please let me know if you want to use dependabot. It's easy to enable Settings->Advanced Security [see docs](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide#enabling-dependabot-for-your-repository) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2025-11-13 12:12:18 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#848