chore(deps): bump zustand from 5.0.2 to 5.0.3 #116
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: zustand
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 8 |
| Repository activity | 7.1 |
| User activity | 8.9 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 145 |
| Number of git tags or releases | 125 |
| Versions matched to tags or releases | 114 |
Pull Request Test Coverage Report for Build 12863441885Details
💛 - Coveralls |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/zustand-5.0.3
branch
from
84bdc37 to
ccbb6f7
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: zustand
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.9 |
| Repository activity | 7.1 |
| User activity | 8.8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 145 |
| Number of git tags or releases | 125 |
| Versions matched to tags or releases | 114 |
Alternatives
| Package | Score | Description |
|---|---|---|
| redux | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/zustand-5.0.3
branch
from
ccbb6f7 to
4047dc4
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: zustand
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.9 |
| Repository activity | 7.1 |
| User activity | 8.8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 145 |
| Number of git tags or releases | 125 |
| Versions matched to tags or releases | 114 |
Alternatives
| Package | Score | Description |
|---|---|---|
| redux | 0 |
Bumps [zustand](https://github.com/pmndrs/zustand) from 5.0.2 to 5.0.3. - [Release notes](https://github.com/pmndrs/zustand/releases) - [Commits](pmndrs/zustand@v5.0.2...v5.0.3) --- updated-dependencies: - dependency-name: zustand dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/zustand-5.0.3
branch
from
4047dc4 to
ef2bf76
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: zustand
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.9 |
| Repository activity | 7.1 |
| User activity | 8.8 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 145 |
| Number of git tags or releases | 125 |
| Versions matched to tags or releases | 114 |
Alternatives
| Package | Score | Description |
|---|---|---|
| redux | 0 |
Bumps zustand from 5.0.2 to 5.0.3.
Release notes
Sourced from zustand's releases.
Commits
3f9127f5.0.36eff6e7chore(deps): update dev dependencies (#2944)4378abefix(build): alias entries in rollup config (#2942)d2ac820feat(types): Make ExtractState public (#2935)929b547docs(create-store.md): fix incorrect usage ofcreatefunction in example (#...efaf416docs(create.md): fix state selector syntax in troubleshooting example (#2938)07b32d6change prettier to fix:format (#2936)6759fcbchore(.github/workflows): change 'node-version' to 'lts/*' in 'actions/setup-...2e6d881chore(eslint): change 'dist' area in 'ignores', sort rules (#2924)55a7d0achore(eslint): migrate to flat config and simplify (#2912)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)