Skip to content

chore(deps): bump tmp, @release-it/conventional-changelog and release-it#104

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-de3adcc44a
Open

chore(deps): bump tmp, @release-it/conventional-changelog and release-it#104
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-de3adcc44a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Copy link
Copy Markdown

Removes tmp. It's no longer used after updating ancestor dependencies tmp, @release-it/conventional-changelog and release-it. These dependencies need to be updated together.

Removes tmp

Updates @release-it/conventional-changelog from 8.0.2 to 11.0.1

Release notes

Sourced from @​release-it/conventional-changelog's releases.

Release 11.0.1

  • Restore no-preset fallback to prevent whatBump error (636c254fd1df5c4858d9ab48d1e1c13a1f24412a)
  • Bump tmp from 0.2.5 to 0.2.6 (#145) (ce9a599e2762247bc8c71143214ab1cc6c162489) - thanks @​dependabot[bot]!
  • Update dependencies (063b6af211b095465490e5b1c801955c7d25e72e)
  • Derive tag prefix from resolved tag for recommended bump (resolve #80) (8947320a51403c8eaf47eebad8d3cef637cc3279)
  • Document transform override and parseCommits resolution (resolve #78, resolve #137) (f3461f1ed7133bb70022ae4e6dbdd011f6d4641d)
  • Run tests on Node 26 (74812985412d061d39352071a0c04666e25c61c5)

Release 11.0.0

  • Fix repository.url (23d3d9cd50fdb4475b8736273a776541833862c0)
  • docs: fix broken links and remove outdated override warning (#138) (344bad3bf2f90618a86d3e38883a5d5eff12aaf1) - thanks @​aarondpn!
  • fix: support release-it 20 (#142) (043242693e5c88244a25fbcf0dceafcbf955588f) - thanks @​twk3!
  • Update dependencies & bump engines.node (1b746e6b5a26335cf01c314074dcf7e291c260a0)

Release 10.0.6

  • fix: bump conventional-changelog to ^7.2.0 (#141) (0e2bb53395fd5f6037c2244378fdd827d3f0ffd6) - thanks @​aarondpn!
  • Update dependencies (1f2572923a00a01276b97c8eece41d38b8f90e02)

Release 10.0.5

  • test: add should generate changelog with remote origin urls (#132) (7e53f8ce957b1e2469acfff6bb2d1f9a46654b6f) - thanks @​Maxel01!
  • fix: pass parserOpts to both Bumper and ConventionalChangelog (#135) (4dce48ad332aeba00ae49c2f9df229961ab902eb) - thanks @​aarond-sp!

Release 10.0.4

  • fix: add readRepository to resolve correct urls (#131) (933bcc6aa5d854158dc3702f004b5cbd4caf4cad) - thanks @​Maxel01!
  • Update release-it (ac4426a38d5d2c948884901acf8adec065d54c4f)

Release 10.0.3

  • Remove verbose comments (eb178bd556e5939b93a374adc418d6be5cc85323)
  • fix: remove preset options filtering (#129) (1b9fb95608117bc3f0f3379188f5c82f3231a792) - thanks @​NateSmyth!

Release 10.0.2

  • Remove node 18 from test matrix (e00dabf5cdd374a33361aeda9aa9eaf8cb4be485)
  • feat: Preserve preReleaseBase config option (#111) (678faefe7049e30499d19d002c5ef6234a8a77b6) - thanks @​ChAyLom!
  • Bump tmp from 0.2.3 to 0.2.4 (#120) (5ccbc29ba2e54308b5ad6fbf5209d50f4268916c) - thanks @​dependabot[bot]!
  • Fix CVE-2025-59433: Update dependencies and enable all tests (#124) (c838c6789872c12916ccc63ea93813ade66040cf) - thanks @​nbouvrette!
  • Add Node 24 to CI workflow (8f5ac43899d8e43f0eb9e4cc57aa8f07483fb921)
  • Add github release notes + comments (2d0a4b396cfadb3f7a2807fdde6b763c773e668a)
  • Bump engines.node (not breaking as release-it has this too) (5fa0ce80e0604296128d95748b345c9ee5a3f5df)

Release 10.0.1

  • Add dummy config file in test (3e9f528)
  • Support release-it v19 (a2f5059)
  • Add note about conventional-changelog-conventionalcommits override (#110) (587be05)
  • docs: Show that whatBump accepts a function for recommending the new version (#109) (bf27526)

Release 10.0.0

  • Update dependencies + bump engines.node (273c84f)

Release 9.0.4

  • Add default header (resolves #108) (6197330)

... (truncated)

Commits
  • 82f88c9 Release 11.0.1
  • 7481298 Run tests on Node 26
  • f3461f1 Document transform override and parseCommits resolution (resolve #78, resolve...
  • 8947320 Derive tag prefix from resolved tag for recommended bump (resolve #80)
  • 063b6af Update dependencies
  • ce9a599 Bump tmp from 0.2.5 to 0.2.6 (#145)
  • 636c254 Restore no-preset fallback to prevent whatBump error
  • 981e7b0 Release 11.0.0
  • 1b746e6 Update dependencies & bump engines.node
  • 0432426 fix: support release-it 20 (#142)
  • Additional commits viewable in compare view

Updates release-it from 17.11.0 to 20.2.0

Release notes

Sourced from release-it's releases.

Release 20.2.0

  • Print staged-packages approval URL after stage publish (244d8112498d7283f6bdcfd25d487ecc833aff03)
  • Capture the stage id for the approval message (2476065893cfe3421cf54c02d73d280c8192b41d)

Release 20.1.0

  • feat: add --quiet flag to hide release previews (#1274) (ecefe4407351bc74a85e88355a2772ea8fb22396) - thanks @​Yeom-JinHo!
  • fix: ensure release body is an empty string instead of null (#1303) (5cc5ebd284673cb67b7897c3bd36c3ace6d54880) - thanks @​driiftkiing!
  • Add 'Accept-Encoding' header to GitLab API requests (#1301) (14a478e4c1db309a04babe7060f0d95fb2879134) - thanks @​KlausDerKleber!
  • Support npm staged publishing (npm.stage) (aa20f56587f0f5720e684d6b1d6b9bc594b3876e)
  • Run tests on Node 26 (29f079bf8a515f1fced7bde05902183b1e990b2d)
  • Use draft flow for immutable releases with assets (resolve #1295) (c63b4e46710564edf809ea688d12ecc4abc39d33)
  • Publish interactively under --only-version so passkey 2FA works (resolve #1234) (4ebb66ebc6cee1b5352aa0fdafc0fa80ad568645)
  • Format docs/npm.md (a2a262c524a14b040aa9cc50f3ea45f2e4ac78e3)
  • Dogfoodin' (0cb51a9c85cc7e91db57c251e216664197639565)

Release 20.0.1

  • fix: allow false as npm config value in types (#1289) (f783e825944cf8114305606116ca61542f0031c6) - thanks @​ahippler!
  • Bump actions/checkout from 5 to 6 (#1262) (19921fc2429b314912a139f66ed43ca12475ffd3) - thanks @​dependabot[bot]!
  • fix: Replace @​nodeutils/defaults-deep with defu for deep-default merging (#1297) (8616a216ccf2be474732b1aefbe47dce0e6b4eb0) - thanks @​rajnsunny!
  • Update dependencies (bee31380a2bbdda7aeaffe7658a3900290a1a181)

Release 20.0.0

  • fix: remove leading slashes from owner (#1288) (5585b720e9389fa857ba50f86161245ccb3b9589) - thanks @​driiftkiing!
  • Fix write: false guard in npm.bump (resolve #1267) (a2d1b99bfe52fff1b6768f904cae5c4aaa78cfb1)
  • Format (f427a85758999073a5ea4f666c6ddb4cd5586d61)

Release 20.0.0-1

  • Fix test (56cae4cd441e00a58d3d91fbc15b1503d423a775)
  • Update changelog & docs for v20 (509e50b043003f8adf3f347af949819e2954b639)
  • Improve guessPreReleaseTaggetRegistryDistTags (a62509e6c7374e3d6898b17ae9ec8c365296fe64)

Release 20.0.0-0

  • fix: upgrade undici from 6.23.0 to 7.24.3 to resolve security vulnerabilities (#1285) (cd100eb1368d084f5892a9a2bbad0c14d511125e) - thanks @​nbouvrette!
  • Fix Logger.info() on Node.js 25 (#1284) (dcc0b43fc6bb693b3ec176cd8d77bbb40f454164) - thanks @​bidord!
  • Update proxy-agent to fix DEP0169 (#1287) (c660ef5f34536988abd203807f53ec3ea5c1c742) - thanks @​risantos!
  • Update dependencies (9dc313e29e617af912ace05a5aaa5cc34fdf35a3)
  • Fix lint issues (a0522ff8777fc6877bf03f5f441e33561c9dc25b)
  • Bump engines.node (5654b9badae6dd08a3d654772d2f280f6b1d84c3)
  • Don't roll back if isReleased is set (resolve #1281) (f2a31231f587cb4809415f4eae81a99617177341)
  • Fix if not running test using npm (332f40536ec32bbd816f9872bb89bc864ee66136)
  • Migrate to @​inquirer/prompts (resolve #1260) (6c21e95c9188e88d41bb30840672cbd5fe99f5b6)
  • Pop it (c90c4c97e11da8f90b398f045e5337f8ec5e0439)

Release 19.2.4

  • chore: update dependencies to resolve security vulnerabilities (#1273) (b45dd1aa3749d74ce279600dea242cb3c9dd5e8d) - thanks @​Yeom-JinHo!
  • Update a few dev deps (cd8acdc8fdb50cf60ba45e8bd5128c4669a04f00)

Release 19.2.3

  • Reuse generated changelog (316dbfa458d670fc92d2da7fe7298ad90f44dc68)
  • Remove obsolete eslint compat packages/config (f6cc8f3622995ebe98c43a8a5adb8d62b2de70b8)

... (truncated)

Changelog

Sourced from release-it's changelog.

Changelog

This document lists breaking changes for each major release.

See the GitHub Releases page for detailed changelogs: [https://github.com/release-it/release-it/releases][1]

v20 (2026-03-24)

  • Upgraded undici from v6 to v7 to resolve security vulnerabilities.
  • Upgraded proxy-agent from v6 to v7 to fix DEP0169 (url.parse() deprecation).
  • Migrated from deprecated inquirer to @inquirer/prompts.
  • Bumped engines.node to minimum Node.js v20.19.0 (was v20.12.0).

v19 (2025-04-18)

  • No breaking changes (dependency party)

v18 (2025-01-06)

  • Removed support for Node.js v18.

v17 (2023-11-11)

  • Removed support for Node.js v16.

v16 (2023-07-05)

  • Removed support for Node.js v14.

v15 (2022-04-30)

  • Removed support for Node.js v10 and v12.
  • Removed support for GitLab v12.4 and lower.
  • Removed anonymous metrics (and the option to disable it).
  • Programmatic usage and plugins only through ES Module syntax (import)

Use release-it v14 in legacy environments.

v14 (2020-09-03)

  • Removed global property from plugins. Use this.config[key] instead.
  • Removed deprecated npm.access option. Set this in package.json instead.

v13 (2020-03-07)

  • Dropped support for Node v8
  • Dropped support for GitLab v11.6 and lower.
  • Deprecated scripts are removed (in favor of [hooks][2]).
  • Removed deprecated --non-interactive (-n) argument. Use --ci instead.
  • Removed old %s and [REV_RANGE] syntax in command substitutions. Use ${version} and ${latestTag} instead.

... (truncated)

Commits
  • 3217e49 Release 20.2.0
  • 2476065 Capture the stage id for the approval message
  • 244d811 Print staged-packages approval URL after stage publish
  • 5a105f3 Release 20.1.0
  • 0cb51a9 Dogfoodin'
  • a2a262c Format docs/npm.md
  • 4ebb66e Publish interactively under --only-version so passkey 2FA works (resolve #1234)
  • c63b4e4 Use draft flow for immutable releases with assets (resolve #1295)
  • 29f079b Run tests on Node 26
  • aa20f56 Support npm staged publishing (npm.stage)
  • Additional commits viewable in compare view

@dependabot dependabot Bot requested review from nsrCodes and wrongsahil as code owners May 27, 2026 13:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
@pkg-pr-new

pkg-pr-new Bot commented May 27, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@requestly/requestly-proxy@104

commit: c027f5a

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Removes [tmp](https://github.com/raszi/node-tmp). It's no longer used after updating ancestor dependencies [tmp](https://github.com/raszi/node-tmp), [@release-it/conventional-changelog](https://github.com/release-it/conventional-changelog) and [release-it](https://github.com/release-it/release-it). These dependencies need to be updated together.


Removes `tmp`

Updates `@release-it/conventional-changelog` from 8.0.2 to 11.0.1
- [Release notes](https://github.com/release-it/conventional-changelog/releases)
- [Commits](release-it/conventional-changelog@8.0.2...11.0.1)

Updates `release-it` from 17.11.0 to 20.2.0
- [Release notes](https://github.com/release-it/release-it/releases)
- [Changelog](https://github.com/release-it/release-it/blob/main/CHANGELOG.md)
- [Commits](release-it/release-it@17.11.0...20.2.0)

---
updated-dependencies:
- dependency-name: "@release-it/conventional-changelog"
  dependency-version: 11.0.0
  dependency-type: direct:development
- dependency-name: release-it
  dependency-version: 20.0.1
  dependency-type: direct:development
- dependency-name: tmp
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-de3adcc44a branch from e124e69 to c027f5a Compare June 26, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant