Skip to content

Conversation

@ch-snyk-sa
Copy link

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade ignore from 5.1.2 to 5.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 13 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2023-11-16.
Release notes
Package name: ignore
  • 5.3.0 - 2023-11-16

    5.3.0

    • MINOR export Options interface (#105)

    An upgrade is safe for all dependents


    It allows typing external methods which expect Options as a param, by importing the Options interface.

    import {Options} from 'ignore'
  • 5.2.4 - 2022-12-19
    • PATCH fixes normal single asterisk and normal consecutive asterisks defined in gitignore spec (#57)
    • PATCH invalid trailing backslash will not throw unexpectedly

    An upgrade is recommended for all dependents


    The following rules could be not properly parsed with previous ignore versions

    **foo
    *bar
    qu*ux
    abc\   # `ignore` would throw if no whitespace after `\`
  • 5.2.3 - 2022-12-19

    5.2.3: fixes #57: fixes normal single / consecutive asterisks

  • 5.2.2 - 2022-12-19

    5.2.2: fixes #81: invalid single trailing backslash should not throw

  • 5.2.1 - 2022-11-27

    5.2.1: fixes typo in the example of "backslash hash", related to #83

  • 5.2.0 - 2021-12-19
    • PATCH support readonly arrays of typescript. (#70)
    • MINOR bring backward compatibility with relative paths. (#75)

    An upgrade is recommended for all dependents.


    ignore().ignores('../foo/bar.js') // will throw

    And the code below will not throw, however it is not recommended

    ignore({
      allowRelativePaths: true
    }).ignores('../foo/bar.js')

    Recommend:

    ignore().ignores('foo/bar.js')
  • 5.1.9 - 2021-11-03
    • PATCH fixes ignorecase when internal cache is hit. (#74)

    An upgrade is recommended for all dependents.

  • 5.1.8 - 2020-05-30

    5.1.8: README.md: typo

  • 5.1.7 - 2020-05-30

    5.1.7: README.md: disclaimer about .npmignore. fixes #61

  • 5.1.6 - 2020-05-22

    5.1.6: better algo

  • 5.1.5 - 2020-05-22
  • 5.1.4 - 2019-08-14
  • 5.1.3 - 2019-08-14
  • 5.1.2 - 2019-05-28
from ignore GitHub release notes
Commit messages
Package name: ignore
  • e7f02c8 5.3.0: #105
  • 517d750 Merge pull request #105 from DamianGlowala/patch-1
  • 44a140d Update index.d.ts
  • ad88c32 test: rollback tap for the breaking change
  • e928203 Merge pull request #103 from kaelzhang/dependabot/npm_and_yarn/tap-18.5.3
  • 387e81b Bump tap from 16.3.9 to 18.5.3
  • 5f1ca30 test/typescript: add more tests for interface Ignore
  • e36dd28 chore: upgrade dev deps
  • 474eabc #94: upgrade mkdirp -> 3.0.0
  • 66fe91b Merge pull request #93 from kaelzhang/dependabot/npm_and_yarn/rimraf-5.0.0
  • ac14319 Bump rimraf from 4.4.1 to 5.0.0
  • e3fb48d Merge pull request #92 from kaelzhang/dependabot/npm_and_yarn/typescript-5.0.2
  • d14436d Bump typescript from 4.9.5 to 5.0.2
  • b170696 test: update git actions: since ignore are node-version-agnostic, so only test on node LTS
  • d072459 test: since ignore are node-version-agnostic, so only test on node LTS
  • 14170fe chore: upgrade dev dependencies, fixes #85, fixes #89, fixes #86
  • c148048 Create dependabot.yml
  • 45a5a9f 5.2.4: README: update github action badge
  • 85a88c7 test/coverage: do not force test coverage on windows since it is quite hard to ignore different lines for linux and windows
  • c710cf6 test/coverage: remove the buggy "istanbul ignore next" (nyc @ 15.1.0)
  • adf1f14 test: another test cases related to Bump minimatch and mocha in /src #57
  • 7be791b dev: upgrade dev dependencies
  • 69ea16f test: remove timeout setting for git-check-ignore
  • 9e4e370 5.2.3: fixes Bump minimatch and mocha in /src #57: fixes normal single / consecutive asterisks

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants