Skip to content

Bump netlify-cli from 24.0.1 to 24.8.1#2160

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/netlify-cli-24.8.1
Closed

Bump netlify-cli from 24.0.1 to 24.8.1#2160
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/netlify-cli-24.8.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps netlify-cli from 24.0.1 to 24.8.1.

Release notes

Sourced from netlify-cli's releases.

v24.8.1

24.8.1 (2026-03-27)

Bug Fixes

  • improve ax error handling around missing commands or unknown flags (0715310)

v24.8.0

24.8.0 (2026-03-27)

Features

Bug Fixes

v24.7.0

24.7.0 (2026-03-27)

Features

Bug Fixes

v24.6.2

24.6.2 (2026-03-26)

Bug Fixes

v24.6.1

24.6.1 (2026-03-25)

Bug Fixes

... (truncated)

Changelog

Sourced from netlify-cli's changelog.

24.8.1 (2026-03-27)

Bug Fixes

  • improve ax error handling around missing commands or unknown flags (0715310)

24.8.0 (2026-03-27)

Features

Bug Fixes

24.7.0 (2026-03-27)

Features

Bug Fixes

24.6.2 (2026-03-26)

Bug Fixes

24.6.1 (2026-03-25)

Bug Fixes

24.6.0 (2026-03-25)

... (truncated)

Commits
  • 26eaa6c chore(main): release 24.8.1
  • 0715310 fix: improve ax error handling around missing commands or unknown flags
  • 056268a chore(deps): update dependency serialize-javascript to v7.0.5 [security] (#8120)
  • 3cefa0e chore(main): release 24.8.0 (#8115)
  • c08644e feat: set branch as alias on deploy command (#8111)
  • e95762d fix(deps): bump yaml from 2.8.1 to 2.8.3 (#8101)
  • 3fc2aec fix(deps): bump node-forge from 1.3.2 to 1.4.0 (#8114)
  • 83a952b chore(main): release 24.7.0 (#8108)
  • 1fd371e chore(website): update dependency astro to v5.18.1 [security] (#8107)
  • 9dee49e feat: support --allow-anonymous deploys (#8109)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [netlify-cli](https://github.com/netlify/cli) from 24.0.1 to 24.8.1.
- [Release notes](https://github.com/netlify/cli/releases)
- [Changelog](https://github.com/netlify/cli/blob/main/CHANGELOG.md)
- [Commits](netlify/cli@v24.0.1...v24.8.1)

---
updated-dependencies:
- dependency-name: netlify-cli
  dependency-version: 24.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 6, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 6, 2026

🍱 Your pull request preview is ready

Please use this preview to check your changes. Ideally use the test documentation template and document your test results by commenting on the PR. This will speed up the review process for everyone.

FYI, once this PR is merged, you can use the iD Editor Preview to test your changes in interaction with all other changes.

Copy link
Copy Markdown
Collaborator

@matkoniecz matkoniecz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why dependabot removes resolved and integrity fields?

             "safe-buffer": {
               "version": "5.1.2",
-              "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
-              "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
               "dev": true
             },

See #2126 (comment)

@matkoniecz
Copy link
Copy Markdown
Collaborator

@k-yle have you looked into what is going on here?

@matkoniecz
Copy link
Copy Markdown
Collaborator

See dependabot/dependabot-core#14584

See also npm/cli#4263

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 8, 2026

Superseded by #2164.

@dependabot dependabot bot closed this Apr 8, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/netlify-cli-24.8.1 branch April 8, 2026 06:42
@k-yle
Copy link
Copy Markdown
Collaborator

k-yle commented Apr 16, 2026

sorry, no, this is a different issue to the one that i was thinking of.

i have no idea what's going on...

@matkoniecz
Copy link
Copy Markdown
Collaborator

I guess at some point I will either try running update and do PR myself, or even edit config files by hand. Or cherry pick part of what dependabot generated.

@k-yle
Copy link
Copy Markdown
Collaborator

k-yle commented Apr 16, 2026

alternatively, i recently joined the #id-and-rapid channel on discord, where someone is proposing to remove this dependency completely, which I think is a great idea.

This guide suggests that deployment can be implemented with a single curl command instead of the CLI.

To avoid duplicate work, I won't look into this, in case that person sends a PR themselves

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants