Skip to content

chore(deps-dev): bump the semantic-release group across 1 directory with 2 updates - #259

Merged
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/semantic-release-95cedb7a77
Jul 28, 2026
Merged

chore(deps-dev): bump the semantic-release group across 1 directory with 2 updates#259
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/semantic-release-95cedb7a77

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the semantic-release group with 2 updates in the / directory: @semantic-release/changelog and @semantic-release/git.

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

  • Replaced xo with prettier with default configuration; following newly established convention
  • Replaced nyc with c8 for code coverage
  • Replaced lodash with lodash-es for proper esm support

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
  • 0563e5d chore(deps): update to the latest semantic-release version (#417)
  • e154214 feat: ES Module (#414)
  • 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
  • 1c48000 test: remove codecov (#399)
  • 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
  • 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
  • e7c79f8 chore(deps): update dependency nyc to v17 (#392)
  • 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
  • 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.


Updates @semantic-release/git from 10.0.1 to 11.0.1

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

  • deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

Other Notable Changes

  • @semantic-release/error ^3^4 (ESM-only)
  • aggregate-error ^3^5 (ESM-only, uses native AggregateError)
  • execa ^5^9 (ESM-only, named export)
  • p-reduce ^2^3 (ESM-only)
  • Removed CJS-only devDeps: clear-module, file-url, fs-extra, get-stream, nyc
  • Added c8 for coverage; bumped ava, sinon, tempy, semantic-release, prettier
  • Engine: ^22.22.2 || >= 24.15;
  • Scripts: nycc8, added pretest, removed test:ci

Related Issue

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

  • update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

... (truncated)

Commits
  • b39d5c6 fix(deps): update dependency execa to v10 (#564)
  • 9dd61f1 chore(deps): lock file maintenance (#470)
  • c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
  • b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
  • d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
  • 16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
  • 8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
  • e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
  • 4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
  • 7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@dhensby

dhensby commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with master! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@dhensby

dhensby commented Jul 27, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot dependabot Bot changed the title chore(deps-dev): bump the semantic-release group with 2 updates chore(deps-dev): bump the semantic-release group across 1 directory with 2 updates Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-95cedb7a77 branch from d7003a7 to 45ae016 Compare July 27, 2026 12:26
@dhensby

dhensby commented Jul 28, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

…ith 2 updates

Bumps the semantic-release group with 2 updates in the / directory: [@semantic-release/changelog](https://github.com/semantic-release/changelog) and [@semantic-release/git](https://github.com/semantic-release/git).


Updates `@semantic-release/changelog` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v6.0.3...v7.0.0)

Updates `@semantic-release/git` from 10.0.1 to 11.0.1
- [Release notes](https://github.com/semantic-release/git/releases)
- [Commits](semantic-release/git@v10.0.1...v11.0.1)

---
updated-dependencies:
- dependency-name: "@semantic-release/changelog"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: semantic-release
- dependency-name: "@semantic-release/git"
  dependency-version: 11.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: semantic-release
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/semantic-release-95cedb7a77 branch from 45ae016 to c0cb6b1 Compare July 28, 2026 11:41

@dhensby dhensby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review — @semantic-release/changelog 6.0.3 → 7.0.0 + @semantic-release/git 10.0.1 → 11.0.1 (dev, MAJOR; semantic-release group)

Supply-chain: both published via GitHub Actions OIDC with SLSA provenance (verified in nhms#233 this batch). Peer semantic-release >=20.1.0; engines require Node ^22.22.2 || >=24.15.
Compatibility: this repo's release job uses node-version-file: '.nvmrc' with .nvmrc=22 → Node 22.x (latest, ≥22.22.2), satisfying the new engine requirement. Test matrix [20.x, 22.x, 24.x].
Diff scope: package.json + package-lock.json.
CI: all required checks green (lint + tests on Node 20/22/24) after rebasing onto the merged packageManager pin (#261).

Human reviewed the major bump and authorised the upgrade (release job on Node 22.x meets the new Node requirement; same upgrade accepted across the org this batch).

@dhensby
dhensby merged commit 672fdc7 into master Jul 28, 2026
7 checks passed
@dhensby
dhensby deleted the dependabot/npm_and_yarn/semantic-release-95cedb7a77 branch July 28, 2026 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant