fix(deps): update dependency ssri to v13#870
Merged
Conversation
How to use the Graphite Merge QueueAdd either label to this PR to merge it via the merge queue:
You must have a Graphite account in order to use the merge queue. Sign up using this link. An organization admin has enabled the Graphite Merge Queue in this repository. Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue. |
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
renovate
bot
force-pushed
the
renovate/ssri-13.x
branch
from
13ca879 to
8c1780f
Compare
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #870 +/- ##
==========================================
- Coverage 95.35% 95.21% -0.15%
==========================================
Files 197 197
Lines 23855 23856 +1
Branches 2487 1954 -533
==========================================
- Hits 22748 22714 -34
- Misses 1107 1142 +35 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
bot
force-pushed
the
renovate/ssri-13.x
branch
2 times, most recently
from
ea8a4ee to
68b50ce
Compare
renovate
bot
force-pushed
the
renovate/ssri-13.x
branch
from
68b50ce to
565e621
Compare
fengmk2
pushed a commit
that referenced
this pull request
Nov 18, 2025
[skip ci] ## 4.12.0 (2025-11-18) * feat: add builds/driver for playwright (#884) ([93034bf](93034bf)), closes [#884](#884) [#883](#883) * feat: add ffmpeg-builds binary mirror (#879) ([d7de1cd](d7de1cd)), closes [#879](#879) * feat: try to avoid recalculating integrity (#880) ([4859ce8](4859ce8)), closes [#880](#880) * chore: add deployment test (#874) ([0d32146](0d32146)), closes [#874](#874) * chore: Configure Renovate (#845) ([f3f3584](f3f3584)), closes [#845](#845) * chore(deps): update actions/attest-build-provenance action to v3 (#847) ([957f43d](957f43d)), closes [#847](#847) * chore(deps): update actions/checkout action to v5 (#849) ([e8a3ee5](e8a3ee5)), closes [#849](#849) * chore(deps): update actions/first-interaction action to v3 (#850) ([35a7be3](35a7be3)), closes [#850](#850) * chore(deps): update actions/setup-node action to v6 (#851) ([3671c52](3671c52)), closes [#851](#851) * chore(deps): update dependency lint-staged to v16 (#853) ([e1848c7](e1848c7)), closes [#853](#853) * chore(deps): update dependency mocha to v11.7.4 (#846) ([4213bd8](4213bd8)), closes [#846](#846) * chore(deps): update dependency oxlint-tsgolint to ^0.3.0 (#863) ([0c987a7](0c987a7)), closes [#863](#863) * chore(deps): update dependency oxlint-tsgolint to ^0.5.0 (#875) ([95543b1](95543b1)), closes [#875](#875) * chore(deps): update dependency oxlint-tsgolint to ^0.7.0 (#885) ([06a3ae1](06a3ae1)), closes [#885](#885) * chore(deps): update dependency type-fest to v5 [skip ci] (#871) ([01385f4](01385f4)), closes [#871](#871) * fix(deps): update dependency npm-package-arg to v13 (#866) ([c3059c7](c3059c7)), closes [#866](#866) * fix(deps): update dependency read-env-value to v2 (#869) ([098c75a](098c75a)), closes [#869](#869) * fix(deps): update dependency ssri to v13 (#870) ([0f11e77](0f11e77)), closes [#870](#870) * fix(deps): update dependency validate-npm-package-name to v7 [skip ci] (#873) ([6c29f08](6c29f08)), closes [#873](#873) * refactor: use all in one egg v4 (#855) ([89f1250](89f1250)), closes [#855](#855)
|
🎉 This PR is included in version 4.12.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^8.0.1->^13.0.0Release Notes
npm/ssri (ssri)
v13.0.0Compare Source
ssrinow supports node^20.17.0 || >=22.9.0Bug Fixes
46a2520#155 align to npm 11 node engine range (#155) (@owlstronaut)8f0bbf2#151 improveSRI_REGEX(#151) (@ericcornelissen)Chores
79e0018#146 postinstall workflow updates (#146) (@owlstronaut)89b775a#154 bump @npmcli/template-oss from 4.26.0 to 4.27.1 (#154) (@dependabot[bot], @npm-cli-bot)v12.0.0Compare Source
ssrinow supports node^18.17.0 || >=20.5.0Bug Fixes
b7a3f9a#141 align to npm 10 node engine range (@hashtagchris)Chores
f8121e9#141 run template-oss-apply (@hashtagchris)v11.0.0Compare Source
ssriis now compatible with the following semver range for node:^16.14.0 || >=18.0.0Bug Fixes
29a6e2cAddress breaking engine change in dependency (@hashtagchris)Chores
db4219fbump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])f2dd012template-oss-apply (@hashtagchris)f2a2a9dpostinstall for dependabot template-oss PR (@hashtagchris)4508f71bump @npmcli/template-oss from 4.22.0 to 4.23.3 (@dependabot[bot])v10.0.6Compare Source
Bug Fixes
f3773e2#127 linting: no-unused-vars (@lukekarrys)Chores
55e7dfb#127 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)96d1795#127 postinstall for dependabot template-oss PR (@lukekarrys)10d5e8a#125 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])v10.0.5Compare Source
Dependencies
00dacfd#94 bump minipass from 5.0.0 to 7.0.3v10.0.4Compare Source
Dependencies
152e2bc#78 bump minipass from 4.2.7 to 5.0.0 (#78)v10.0.3Compare Source
Bug Fixes
7fef846#79 optimize adding this.algorithm to algorithms list (@wraithgar)d90f674#79 prevent DEFAULT_ALGORITHM mutation (@wraithgar)4e94d15#79 Integrity#match prioritizes overlapping hashes (@wraithgar)dce3dab#79 faster stream verification (@H4ad)v10.0.2Compare Source
Bug Fixes
8e80eca#74 move from symbols to private methods (#74) (@wraithgar)a316b12#75 faster toString for integrity (#75) (@H4ad)6e6877d#72 remove spread of defaultOpts (#72) (@H4ad)v10.0.1Compare Source
Dependencies
4f6ba1e#64 bump minipass from 3.3.6 to 4.0.0v10.0.0Compare Source
ssriis now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0Features
3de0c45#52 postinstall for dependabot template-oss PR (@lukekarrys)Bug Fixes
2e876d1#48 properly handle missing algorithm type (#48) (@ahmedwelhakim)9.0.1 (2022-05-19)
Bug Fixes
v9.0.1Compare Source
ssriis now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0Features
3de0c45#52 postinstall for dependabot template-oss PR (@lukekarrys)Bug Fixes
2e876d1#48 properly handle missing algorithm type (#48) (@ahmedwelhakim)9.0.1 (2022-05-19)
Bug Fixes
v9.0.0Compare Source
ssriis now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0Features
3de0c45#52 postinstall for dependabot template-oss PR (@lukekarrys)Bug Fixes
2e876d1#48 properly handle missing algorithm type (#48) (@ahmedwelhakim)9.0.1 (2022-05-19)
Bug Fixes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.