From efef723b2912f313e563c0e97d51c7c8fb590df5 Mon Sep 17 00:00:00 2001 From: Jan Richter Date: Tue, 9 May 2023 22:38:29 +1200 Subject: [PATCH 1/4] ci: debug Sonarcloud cannot be triggered by dependabot. Adding permissions. --- .github/workflows/sonarcloud.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 83b8f0474f..ea07eef8fb 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -1,10 +1,14 @@ -name: Build +name: Sonarcloud on: push: branches: - main pull_request: types: [opened, synchronize, reopened] + +permissions: + contents: read + jobs: sonarcloud: name: SonarCloud From 1237e443c1d5a7b9755818682473e1869dcd59f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 9 May 2023 10:41:10 +0000 Subject: [PATCH 2/4] build(deps): bump copy-to-clipboard from 3.3.1 to 3.3.3 in /client Bumps [copy-to-clipboard](https://github.com/sudodoki/copy-to-clipboard) from 3.3.1 to 3.3.3. - [Release notes](https://github.com/sudodoki/copy-to-clipboard/releases) - [Commits](https://github.com/sudodoki/copy-to-clipboard/compare/v3.3.1...v3.3.3) --- updated-dependencies: - dependency-name: copy-to-clipboard dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- client/packages/openblocks/package.json | 2 +- client/yarn.lock | 11 ++++++++++- 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/client/packages/openblocks/package.json b/client/packages/openblocks/package.json index fca649dc11..c7aac3d46f 100644 --- a/client/packages/openblocks/package.json +++ b/client/packages/openblocks/package.json @@ -40,7 +40,7 @@ "axios": "^0.21.1", "buffer": "^6.0.3", "clsx": "^1.2.1", - "copy-to-clipboard": "^3.3.1", + "copy-to-clipboard": "^3.3.3", "core-js": "^3.25.2", "echarts": "^5.4.2", "eslint4b-prebuilt-2": "^7.32.0", diff --git a/client/yarn.lock b/client/yarn.lock index b5864f7a5e..3e7c2ee092 100644 --- a/client/yarn.lock +++ b/client/yarn.lock @@ -7319,6 +7319,15 @@ __metadata: languageName: node linkType: hard +"copy-to-clipboard@npm:^3.3.3": + version: 3.3.3 + resolution: "copy-to-clipboard@npm:3.3.3" + dependencies: + toggle-selection: ^1.0.6 + checksum: e0a325e39b7615108e6c1c8ac110ae7b829cdc4ee3278b1df6a0e4228c490442cc86444cd643e2da344fbc424b3aab8909e2fec82f8bc75e7e5b190b7c24eecf + languageName: node + linkType: hard + "copy-to@npm:^2.0.1": version: 2.0.1 resolution: "copy-to@npm:2.0.1" @@ -14492,7 +14501,7 @@ __metadata: axios: ^0.21.1 buffer: ^6.0.3 clsx: ^1.2.1 - copy-to-clipboard: ^3.3.1 + copy-to-clipboard: ^3.3.3 core-js: ^3.25.2 dotenv: ^16.0.3 echarts: ^5.4.2 From 6e27997041fb48fe5cc165f42b922a15e27972c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 9 May 2023 11:14:56 +0000 Subject: [PATCH 3/4] build(deps): bump @types/lodash from 4.14.178 to 4.14.194 in /client Bumps [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) from 4.14.178 to 4.14.194. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) --- updated-dependencies: - dependency-name: "@types/lodash" dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- client/packages/openblocks/package.json | 2 +- client/yarn.lock | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/client/packages/openblocks/package.json b/client/packages/openblocks/package.json index c7aac3d46f..4a9783c5d4 100644 --- a/client/packages/openblocks/package.json +++ b/client/packages/openblocks/package.json @@ -27,7 +27,7 @@ "@manaflair/redux-batch": "^1.0.0", "@rjsf/antd": "^4.1.1", "@rjsf/core": "^4.2.0", - "@types/lodash": "^4.14.178", + "@types/lodash": "^4.14.194", "@types/node": "^16.7.13", "@types/react": "^17.0.20", "@types/react-dom": "^17.0.9", diff --git a/client/yarn.lock b/client/yarn.lock index 3e7c2ee092..bfffb9791b 100644 --- a/client/yarn.lock +++ b/client/yarn.lock @@ -4889,10 +4889,10 @@ __metadata: languageName: node linkType: hard -"@types/lodash@npm:^4.14.178": - version: 4.14.178 - resolution: "@types/lodash@npm:4.14.178" - checksum: a69a04a60bfc5257c3130a554b4efa0c383f0141b7b3db8ab7cf07ad2a46ea085fce66d0242da41da7e5647b133d5dfb2c15add9cbed8d7fef955e4a1e5b3128 +"@types/lodash@npm:^4.14.194": + version: 4.14.194 + resolution: "@types/lodash@npm:4.14.194" + checksum: 113f34831c461469d91feca2dde737f88487732898b4d25e9eb23b087bb193985f864d1e1e0f3b777edc5022e460443588b6000a3b2348c966f72d17eedc35ea languageName: node linkType: hard @@ -14484,7 +14484,7 @@ __metadata: "@rjsf/core": ^4.2.0 "@types/core-js": ^2.5.5 "@types/intl": ^1.2.0 - "@types/lodash": ^4.14.178 + "@types/lodash": ^4.14.194 "@types/node": ^16.7.13 "@types/papaparse": ^5.3.5 "@types/react": ^17.0.20 From ab1ce14c6f05dc447360122dd1878cc7e5f096f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 May 2023 14:07:29 +0000 Subject: [PATCH 4/4] build(deps): bump lombok from 1.18.20 to 1.18.26 in /server/api-service Bumps [lombok](https://github.com/projectlombok/lombok) from 1.18.20 to 1.18.26. - [Release notes](https://github.com/projectlombok/lombok/releases) - [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown) - [Commits](https://github.com/projectlombok/lombok/compare/v1.18.20...v1.18.26) --- updated-dependencies: - dependency-name: org.projectlombok:lombok dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- server/api-service/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/api-service/pom.xml b/server/api-service/pom.xml index ebaf7ce445..c1dc1bce50 100644 --- a/server/api-service/pom.xml +++ b/server/api-service/pom.xml @@ -120,7 +120,7 @@ org.projectlombok lombok - 1.18.20 + 1.18.26

AltStyle によって変換されたページ (->オリジナル) /