Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump argon2 from 0.27.2 to 0.28.1 #6021

Merged
merged 1 commit into from
Jun 3, 2021

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 3, 2021

Bumps argon2 from 0.27.2 to 0.28.1.

Release notes

Sourced from argon2's releases.

Fix Alpine builds

Since node-gyp was updated, it was requiring Python 3 instead of Python 2 (finally!). This release fixes the build process.

Fixes #301

Bump to minimum requirements

Drops support for Node 10.x and Ubuntu 16.04, upgrade to Node 12.x and Ubuntu 18.04 if you need the latest updates. Older versions do not provide required features for node-argon2 to work properly.

Solves #300

Dependency update

Upgrades to node-gyp v8, as v7.x was causing issues when compiling on OS X. See #295 for more information.

Commits
  • 94b613c Install python3 instead of python2 on Alpine builds
  • 78398a8 Bump minor version
  • 2097ed1 Bump lodash from 4.17.19 to 4.17.21 (#297)
  • 2ea1da8 Upgrade from deprecated Ubuntu version, pin Windows and MacOS
  • 95bd68a Fix README and package.json minimum Node version
  • 1de14c5 Drop Node 10.x support, add 16.x and fix node-gyp dependency
  • 9c2216a Upgrade dependencies and bump version
  • 8efb589 Bump hosted-git-info from 2.8.8 to 2.8.9 (#298)
  • 7118b3c Update to node-gyp 8 and bump version
  • 4494afe Raise minimum parameters, upgrade dependencies
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [argon2](https://github.com/ranisalt/node-argon2) from 0.27.2 to 0.28.1.
- [Release notes](https://github.com/ranisalt/node-argon2/releases)
- [Commits](ranisalt/node-argon2@v0.27.2...v0.28.1)

---
updated-dependencies:
- dependency-name: argon2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/argon2-0.28.1 branch from 26baa1d to 9e7f64e Compare June 3, 2021 15:02
@rijkvanzanten rijkvanzanten added this to the v9.0.0-rc.72 milestone Jun 3, 2021
@rijkvanzanten rijkvanzanten merged commit 755efee into main Jun 3, 2021
@rijkvanzanten rijkvanzanten deleted the dependabot/npm_and_yarn/argon2-0.28.1 branch June 3, 2021 15:07
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 5, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant