Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump semver and @types/semver

Merged
Number: #1217
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: June 09, 2025 at 10:47 AM UTC
(12 months ago)
Updated: June 10, 2025 at 10:23 AM UTC
(12 months ago)
Merged: June 10, 2025 at 10:23 AM UTC
(12 months ago)
by robertbrignull
Time to Close: about 24 hours
Labels:
dependencies javascript
Description:

Bumps semver and @types/semver. These dependencies needed to be updated together.
Updates semver from 7.7.1 to 7.7.2

Release notes

Sourced from semver's releases.

v7.7.2

7.7.2 (2025-05-12)

Bug Fixes

Chores

Changelog

Sourced from semver's changelog.

7.7.2 (2025-05-12)

Bug Fixes

Chores

Commits
  • 281055e chore: release 7.7.2 (#783)
  • fcafb61 fix: add missing 'use strict' directives (#780)
  • c760403 chore: template-oss-apply for workflow permissions (#784)
  • c99f336 fix: prerelease identifier starting with digits (#781)
  • 2677f2a chore: bump @​npmcli/template-oss from 4.23.6 to 4.24.3 (#778)
  • 0b98655 chore: bump @​npmcli/template-oss from 4.23.4 to 4.23.6 (#760)
  • See full diff in compare view

Updates @types/semver from 7.5.8 to 7.7.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
2
Files Changed:
3
Additions:
+59
Deletions:
-16
Package Dependencies
Package:
semver
Ecosystem:
npm
Version Change:
7.7.1 → 7.7.2
Update Type:
Patch
Package:
@types/semver
Ecosystem:
npm
Version Change:
7.5.8 → 7.7.0
Update Type:
Minor
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1373796
UUID: 2578064275
Node ID: PR_kwDOF2Nnlc6ZqiOT
Host: GitHub
Repository: github/codeql-variant-analysis-action
Merge State: Unknown