Skip to content

Bump tough-cookie and node-gyp #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 14 commits into
base: Current
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Nov 14, 2023

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Removes tough-cookie. It's no longer used after updating ancestor dependency node-gyp. These dependencies need to be updated together.

Removes tough-cookie

Updates node-gyp from 6.1.0 to 10.0.1

Release notes

Sourced from node-gyp's releases.

node-gyp v10.0.1

Bug Fixes

  • use local util for findAccessibleSync() (b39e681)

Miscellaneous

  • add parallel test logging (7de1f5f)
  • lint fixes (4e0ed99)
  • use platform specific timeouts in tests (a68586a)

node-gyp v10.0.0

⚠ BREAKING CHANGES

  • use .npmignore file to limit which files are published (#2921)
  • the Gyp class exported is now created using ECMAScript classes and therefore might have small differences to classes that were previously created with util.inherits.
  • All internal functions have been coverted to return promises and no longer accept callbacks. This is not a breaking change for users but may be breaking to consumers of node-gyp if you are requiring internal functions directly.
  • node-gyp now supports node ^16.14.0 || >=18.0.0

Features

  • convert all internal functions to async/await (355622f)
  • convert internal classes from util.inherits to classes (d52997e)
  • drop node 14 support (#2929) (1b3bd34)
  • drop rimraf dependency (4a50fe3)
  • gyp: update gyp to v0.16.1 (#2923) (707927c)
  • replace npmlog with proc-log (4a50fe3)
  • update engines.node to ^14.17.0 || ^16.13.0 || >=18.0.0 (4a50fe3)
  • use .npmignore file to limit which files are published (#2921) (864a979)

Bug Fixes

  • create Python symlink only during builds, and clean it up after (#2721) (0f1f667)
  • promisify build command (4a50fe3)
  • use fs/promises in favor of fs.promises (4a50fe3)

Tests

Doc

... (truncated)

Changelog

Sourced from node-gyp's changelog.

10.0.1 (2023-11-02)

Bug Fixes

  • use local util for findAccessibleSync() (b39e681)

Miscellaneous

  • add parallel test logging (7de1f5f)
  • lint fixes (4e0ed99)
  • use platform specific timeouts in tests (a68586a)

10.0.0 (2023-10-28)

⚠ BREAKING CHANGES

  • use .npmignore file to limit which files are published (#2921)
  • the Gyp class exported is now created using ECMAScript classes and therefore might have small differences to classes that were previously created with util.inherits.
  • All internal functions have been coverted to return promises and no longer accept callbacks. This is not a breaking change for users but may be breaking to consumers of node-gyp if you are requiring internal functions directly.
  • node-gyp now supports node ^16.14.0 || >=18.0.0

Features

  • convert all internal functions to async/await (355622f)
  • convert internal classes from util.inherits to classes (d52997e)
  • drop node 14 support (#2929) (1b3bd34)
  • drop rimraf dependency (4a50fe3)
  • gyp: update gyp to v0.16.1 (#2923) (707927c)
  • replace npmlog with proc-log (4a50fe3)
  • update engines.node to ^14.17.0 || ^16.13.0 || >=18.0.0 (4a50fe3)
  • use .npmignore file to limit which files are published (#2921) (864a979)

Bug Fixes

  • create Python symlink only during builds, and clean it up after (#2721) (0f1f667)
  • promisify build command (4a50fe3)
  • use fs/promises in favor of fs.promises (4a50fe3)

Tests

Doc

... (truncated)

Commits
  • da19158 chore: release 10.0.1
  • b39e681 fix: use local util for findAccessibleSync()
  • a68586a chore: use platform specific timeouts in tests
  • 4e0ed99 chore: lint fixes
  • 7de1f5f chore: add parallel test logging
  • 4c302ca chore: release 10.0.0 (#2920)
  • 3032e10 chore: run tests after release please PR
  • 864a979 feat!: use .npmignore file to limit which files are published (#2921)
  • 4e493d4 chore: misc testing fixes (#2930)
  • d52997e feat: convert internal classes from util.inherits to classes
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for node-gyp since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

NikolaRHristov and others added 14 commits October 29, 2023 04:59
Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [node-gyp](https://github.com/nodejs/node-gyp). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `node-gyp` from 6.1.0 to 10.0.1
- [Release notes](https://github.com/nodejs/node-gyp/releases)
- [Changelog](https://github.com/nodejs/node-gyp/blob/main/CHANGELOG.md)
- [Commits](nodejs/node-gyp@v6.1.0...v10.0.1)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: node-gyp
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/tough-cookie-and-node-gyp--removed branch from d0e353c to d40bb57 Compare November 14, 2023 21:23
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 14, 2023
@dependabot dependabot bot changed the base branch from main to repository February 5, 2024 23:38
@dependabot dependabot bot changed the base branch from repository to Current March 9, 2024 08:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant