Skip to content

chore: bump JS-DevTools/npm-publish from 1.4.3 to 2.2.1#2361

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/JS-DevTools/npm-publish-2.2.1
Closed

chore: bump JS-DevTools/npm-publish from 1.4.3 to 2.2.1#2361
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/JS-DevTools/npm-publish-2.2.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 17, 2023

Bumps JS-DevTools/npm-publish from 1.4.3 to 2.2.1.

Release notes

Sourced from JS-DevTools/npm-publish's releases.

v2.2.1

Bug Fixes

  • action: update semver dep, esbuild and vitest dev deps (#114)
  • npm: do not assume error code is a string (#120), closes #119

v2.2.0

Features

  • Allow --ignore-scripts to be disabled in order to support publish lifecycle hooks (#102)

v2.1.0

Features

  • Add explicit support for --provenance (#92), closes #88

Bug Fixes

  • Handle missing latest tag during version check (#90), closes #89

v2.0.0

Welcome to v2 of JS-DevTools/npm-publish! We've been doing some spring cleaning to fix all our (known) bugs and knock out some longstanding feature requests. This release has some breaking changes, so please read carefully!

BREAKING CHANGES

  • The type output is now an empty string instead of none when no release occurs
    - - if: ${{ steps.publish.outputs.type != 'none' }}
    + - if: ${{ steps.publish.outputs.type }}
        run:  echo "Version changed!"
  • The check-version and greater-version-only options have been removed and replaced with strategy.
    • Use strategy: all (default) to publish all versions that do not yet exist in the registry.
        with:
          token: ${{ secrets.NPM_TOKEN }}
      -   check-version: true
      -   greater-version-only: false
      +   strategy: all
    • Use strategy: upgrade to only publish versions that upgrade the selected tag.
        with:
          token: ${{ secrets.NPM_TOKEN }}
      -   check-version: true
      -   greater-version-only: true
      +   strategy: upgrade
    • check-version: false has been removed. You don't need this action if you're not checking already published versions; use npm directly, instead.

... (truncated)

Commits
  • 5a85faf chore(release): 2.2.1 (#121)
  • 730683d fix(npm): do not assume error code is a string (#120)
  • c6846a9 docs: add GitHub Package Registry example workflow (#118)
  • d2a7a65 chore(deps): bump coverallsapp/github-action from 2.1.2 to 2.2.0 (#113)
  • 55fe6e7 chore(deps-dev): bump eslint-plugin-n from 16.0.0 to 16.0.1 (#112)
  • 7ae2800 refactor: pull side effect out of action bundle import (#115)
  • c139f4f fix(action): update semver dep, esbuild and vitest dev deps (#114)
  • 6dcdd6f chore(deps-dev): bump @​types/node from 18.16.3 to 20.3.3 (#108)
  • 7954e4c chore(deps-dev): bump eslint from 8.41.0 to 8.44.0 (#110)
  • 2f98354 chore(deps-dev): bump eslint-plugin-jsdoc from 43.1.1 to 46.2.4 (#106)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [JS-DevTools/npm-publish](https://github.com/js-devtools/npm-publish) from 1.4.3 to 2.2.1.
- [Release notes](https://github.com/js-devtools/npm-publish/releases)
- [Changelog](https://github.com/JS-DevTools/npm-publish/blob/main/CHANGELOG.md)
- [Commits](JS-DevTools/npm-publish@v1.4.3...v2.2.1)

---
updated-dependencies:
- dependency-name: JS-DevTools/npm-publish
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 17, 2023
@vercel
Copy link
Copy Markdown

vercel Bot commented Jul 17, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
castor ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 17, 2023 5:50am

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 2, 2023

Superseded by #2443.

@dependabot dependabot Bot closed this Oct 2, 2023
@dependabot dependabot Bot deleted the dependabot/github_actions/JS-DevTools/npm-publish-2.2.1 branch October 2, 2023 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants