vscode-yaml-sort chore(deps): update dependency dependency-cruiser to v16.4.2

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dependency-cruiser	`16.3.1` -> `16.4.2`

Release Notes

sverweij/dependency-cruiser (dependency-cruiser)

`v16.4.2`

Compare Source

👷 maintenance

4314428 refactor: uses explicit exports over default where possible (#956)
6d1b8bb build(npm): updates external dependencies + minor refactor

🧹 chores

c7802df chore(ci): adds repo check to provenance publishing
76da16f chore(npm): updates external devDependencies

`v16.4.1`

Compare Source

🐛 fixes

e414c0a fix(extract): ignore entries in 'workspaces' arrays that aren't strings (instead of throwing) (#955) - thanks to @asfaltboy for raising the issue that led to this fix

🧹 chores

Things not influencing the built & distributed artifact:

75f946f chore(doc): removes a few @ts-expect-errors now typescript has caught up with some new features
b2cd13d/ bb215ae chore(npm): updates external devDependencies
079f7d8 chore(ci): cache based on the lockfile, now we use it

`v16.4.0`

Compare Source

✨ features

0335910 feat(cli): adds --affected command line option (#952) This doesn't really add a new capability to dependency-cruiser, but an existing one more convenient to use (--affected == --reaches "$(npx watskeburt main)"; --affected develop == --reaches "$(npx watskeburt develop)")
e43c1aa fix(extract): extends list of source that could be transformed with babel with modern ones

👷 maintenance

77ebcc9 build(npm): makes 3rd party dependency requirements more lenient dependency-cruiser now uses carets for specifying 3rd party dependencies. It's an experiment; it puts some trust in third party maintainers to not make breaking changes in minor or patch releases in exchange for a potentially smaller installed footprint because the likelihood a 3rd party dependency is already present in node_modules increases.
dbdf686/ 2930a4e build(npm): updates external dependencies

🧹 chores

Things not influencing the built & distributed artifact:

860ea1a Revert "Reapply "fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2"" The bug is fixed in later versions, and now it is more likely the runner that makes the reproducible release artifact actually picks that later version. 🤞
818157d chore(ci): some more windows baby-sitting
15cbef2 chore: converts own config to javascript (#951)

`v16.3.10`

Compare Source

👷 maintenance

24b40be refactor: replaces lodash (#950) this cuts back dependency-cruiser's install size with >1Mb
018ea49 build(npm): updates external dependencies
d3b0994 refactor(test): simplifies is-same-violation unit tests
580fc77 chore: adds kubotak-is to contributors in package manifest

`v16.3.9`

Compare Source

✨ features

72373ea feat: support svelte 4 (#948) - thanks to @kubotak-is for both doing the research and making the pull request that made this work!

👷 maintenance

30b5148 build(npm): updates external dependencies
1ee4e42 chore: removes some additional references to/ uses of lodash
615134a fix(ci): runs release & prelease on node 22.4.x instead of 22.x to circumvent issue with 22.5 + npm 10.8.2, where npm clean-install bought the farm

`v16.3.7`

Compare Source

👷 maintenance

daa550c build(npm): updates external dependencies
dc4f183 chore(npm): removes unused devDependency shx
6e618ce refactor: removes 3rd party dependency 'wrap-ansi' (#946)

`v16.3.6`

Compare Source

👷 maintenance

78810ce refactor: replaces chalk with picocolors (#945)
03c34a6 refactor: replaces lodash' flattenDeep, isEmpty, reject, omit, merge with native alternatives (#944)
d6884ae build(npm): updates external dependencies

`v16.3.5`

Compare Source

🐛 fixes

8196c9e fix(extract/transpile): transpile script setup with vue 2 (#942) (thanks to @ferdynator for the clear & complete pull request!)

`v16.3.4`

Compare Source

This release is one in a series of efforts to reduce the number dependency-cruiser's 3rd party dependencies where it reduces maintenance, decreases total download size and/ or increases run speed.

👷 maintenance

f6b6d19 refactor: removes 3rd party dependency 'semver-try-require' (#939)
c8f7fa1 refactor: removes 3rd party dependency 'indent-string' (#940)
838b3e8 refactor: removes 3rd party dependency 'figures' (#941)
af27535 build(npm): updates external dependencies
eac0d63 refactor(init): replaces runtime wordwrap on feedback with a static wordwrap
bbd3abb chore: removes accidentally committed file

`v16.3.3`

Compare Source

🐛 fixes

de34d42 fix(enrich/summarize): also configure experimentalStats to be in the summary (so the caching algorithme can pick it up as well)
8617939 chore: makes generated .mjs schemas smaller (#934)

📖 documentation

6f6bef5 doc(FAQ): copy update
46d1c3f chore(schema): corrects a typo
4a5dcd0 doc(options-reference): corrects a typo

👷 maintenance

34e3795 build(npm): updates external dependencies
079e3fe chore(ci): makes husky config [email protected] compliant

`v16.3.2`

Compare Source

🐛 fixes

54a7f42 fix(config-util): adds utility that extracts dependency-cruiser options from a dependency-cruiser config (#933) - thanks to @AdrienLeblanc for reporting this issue.

👷 maintenance

7e74a4e build(npm): update external dependencies
add4856 chore(ci): also run on node 22
712c5be refactor: cleans up some of the regular expressions

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Jun 01 '24 02:06 renovate[bot]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	Transitive: environment, eval, filesystem, unsafe	`+45`	4.97 MB	foureightone, sverweij

🚮 Removed packages: npm/[email protected]

View full report↗︎

Jun 08 '24 18:06 socket-security[bot]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

Oct 28 '24 12:10 sonarqubecloud[bot]