You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2023/01/10 07:07:43 UTC
[GitHub] [superset] dependabot[bot] opened a new pull request, #22655: build(deps): bump winston from 3.3.3 to 3.8.2 in /superset-websocket
dependabot[bot] opened a new pull request, #22655:
URL: https://github.com/apache/superset/pull/22655
Bumps [winston](https://github.com/winstonjs/winston) from 3.3.3 to 3.8.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/winstonjs/winston/releases">winston's releases</a>.</em></p>
<blockquote>
<h2>v3.8.2</h2>
<h3>Patch-level changes</h3>
<ul>
<li>Add <code>.js</code> to main entry point in package.json in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2177">winstonjs/winston#2177</a>; thanks to new contributor <a href="https://github.com/rumanbsl"><code>@rumanbsl</code></a></li>
<li>Small grammatical fixes in README.md in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2183">winstonjs/winston#2183</a>; thanks to new contributor <a href="https://github.com/mikebarr24"><code>@mikebarr24</code></a></li>
<li>Move colors to non-dev dependencies by <a href="https://github.com/wbt"><code>@wbt</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2190">winstonjs/winston#2190</a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump <code>@babel/preset-env</code> from 7.18.2 to 7.19.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2189">winstonjs/winston#2189</a></li>
<li>Bump <code>@babel/cli</code> from 7.17.10 to 7.18.10 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2173">winstonjs/winston#2173</a></li>
<li>Bump eslint from 8.18.0 to 8.23.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2184">winstonjs/winston#2184</a></li>
<li>Bump <code>@babel/core</code> from 7.18.5 to 7.19.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2192">winstonjs/winston#2192</a></li>
<li>Bump logform from 2.4.1 to 2.4.2 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2191">winstonjs/winston#2191</a></li>
</ul>
<h2>v3.8.1</h2>
<h3>Patch-level changes</h3>
<ul>
<li>Update types to match in-code definitions in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2157">winstonjs/winston#2157</a>; thanks to new contributor <a href="https://github.com/flappyBug"><code>@flappyBug</code></a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump logform from 2.4.0 to 2.4.1 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2156">winstonjs/winston#2156</a></li>
<li>Bump async from 3.2.3 to 3.2.4 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2147">winstonjs/winston#2147</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/winstonjs/winston/compare/v3.8.0...v3.8.1">https://github.com/winstonjs/winston/compare/v3.8.0...v3.8.1</a></p>
<h2>v3.8.0</h2>
<h3>Added functionality</h3>
<ul>
<li>Add the stringify replacer option to the HTTP transport by <a href="https://github.com/domiins"><code>@domiins</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2155">winstonjs/winston#2155</a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump <code>@babel/core</code> from 7.17.8 to 7.18.5</li>
<li>Bump eslint from 8.12.0 to 8.18.0</li>
<li>Bump <code>@types/node</code> from 17.0.23 to 18.0.0</li>
<li>Bump <code>@babel/preset-env</code> from 7.16.11 to 7.18.2</li>
<li>Bump <code>@babel/cli</code> from 7.17.6 to 7.17.10</li>
</ul>
<h3>Updates facilitating repo maintenance & enhancing documentation</h3>
<ul>
<li>Explicitly note that the Contirbuting.md file is out of date</li>
<li>Add instructions for publishing updated version by <a href="https://github.com/wbt"><code>@wbt</code></a> (docs/publishing.md)</li>
<li>Prettier Config File by <a href="https://github.com/jeanpierrecarvalho"><code>@jeanpierrecarvalho</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2092">winstonjs/winston#2092</a></li>
<li>Readme update to explain origin of errors for handling (<a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2120">#2120</a>)</li>
<li>update documentation for <a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2114">#2114</a> by <a href="https://github.com/zizifn"><code>@zizifn</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2138">winstonjs/winston#2138</a></li>
<li>enhance message for logs with no transports <a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2114">#2114</a> by <a href="https://github.com/zizifn"><code>@zizifn</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2139">winstonjs/winston#2139</a></li>
<li>Added a new Community Transport option to the list: Worker Thread based async Console Transport by <a href="https://github.com/arpad1337"><code>@arpad1337</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2140">winstonjs/winston#2140</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/zizifn"><code>@zizifn</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2138">winstonjs/winston#2138</a></li>
<li><a href="https://github.com/arpad1337"><code>@arpad1337</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2140">winstonjs/winston#2140</a></li>
<li><a href="https://github.com/domiins"><code>@domiins</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2155">winstonjs/winston#2155</a></li>
<li>made their first contribution in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2092">winstonjs/winston#2092</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/winstonjs/winston/compare/v3.7.2...v3.8.0">https://github.com/winstonjs/winston/compare/v3.7.2...v3.8.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/winstonjs/winston/blob/master/CHANGELOG.md">winston's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/winstonjs/winston/compare/v3.8.1...v3.8.2">v3.8.2</a></h2>
<h3>Patch-level changes</h3>
<ul>
<li>Add <code>.js</code> to main entry point in package.json in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2177">winstonjs/winston#2177</a>; thanks to new contributor <a href="https://github.com/rumanbsl"><code>@rumanbsl</code></a></li>
<li>Small grammatical fixes in README.md in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2183">winstonjs/winston#2183</a>; thanks to new contributor <a href="https://github.com/mikebarr24"><code>@mikebarr24</code></a></li>
<li>Move colors to non-dev dependencies by <a href="https://github.com/wbt"><code>@wbt</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2190">winstonjs/winston#2190</a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump <code>@babel/preset-env</code> from 7.18.2 to 7.19.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2189">winstonjs/winston#2189</a></li>
<li>Bump <code>@babel/cli</code> from 7.17.10 to 7.18.10 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2173">winstonjs/winston#2173</a></li>
<li>Bump eslint from 8.18.0 to 8.23.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2184">winstonjs/winston#2184</a></li>
<li>Bump <code>@babel/core</code> from 7.18.5 to 7.19.0 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2192">winstonjs/winston#2192</a></li>
<li>Bump logform from 2.4.1 to 2.4.2 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2191">winstonjs/winston#2191</a></li>
</ul>
<h2><a href="https://github.com/winstonjs/winston/compare/v3.8.0...v3.8.1">v3.8.1</a></h2>
<h3>Patch-level changes</h3>
<ul>
<li>Update types to match in-code definitions in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2157">winstonjs/winston#2157</a>; thanks to new contributor <a href="https://github.com/flappyBug"><code>@flappyBug</code></a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump logform from 2.4.0 to 2.4.1 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2156">winstonjs/winston#2156</a></li>
<li>Bump async from 3.2.3 to 3.2.4 in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2147">winstonjs/winston#2147</a></li>
</ul>
<h2><a href="https://github.com/winstonjs/winston/compare/v3.7.2...v3.8.0">v3.8.0</a> / 2022-06-23</h2>
<h3>Added functionality</h3>
<ul>
<li>Add the stringify replacer option to the HTTP transport by <a href="https://github.com/domiins"><code>@domiins</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2155">winstonjs/winston#2155</a></li>
</ul>
<h3>Dependency updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> + CI autotesting</h3>
<ul>
<li>Bump <code>@babel/core</code> from 7.17.8 to 7.18.5</li>
<li>Bump eslint from 8.12.0 to 8.18.0</li>
<li>Bump <code>@types/node</code> from 17.0.23 to 18.0.0</li>
<li>Bump <code>@babel/preset-env</code> from 7.16.11 to 7.18.2</li>
<li>Bump <code>@babel/cli</code> from 7.17.6 to 7.17.10</li>
</ul>
<h3>Updates facilitating repo maintenance & enhancing documentation</h3>
<ul>
<li>Explicitly note that the Contributing.md file is out of date</li>
<li>Add instructions for publishing updated version by <a href="https://github.com/wbt"><code>@wbt</code></a> (docs/publishing.md)</li>
<li>Prettier Config File by <a href="https://github.com/jeanpierrecarvalho"><code>@jeanpierrecarvalho</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2092">winstonjs/winston#2092</a></li>
<li>Readme update to explain origin of errors for handling (<a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2120">#2120</a>)</li>
<li>update documentation for <a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2114">#2114</a> by <a href="https://github.com/zizifn"><code>@zizifn</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2138">winstonjs/winston#2138</a></li>
<li>enhance message for logs with no transports <a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2114">#2114</a> by <a href="https://github.com/zizifn"><code>@zizifn</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2139">winstonjs/winston#2139</a></li>
<li>Added a new Community Transport option to the list: Worker Thread based async Console Transport by <a href="https://github.com/arpad1337"><code>@arpad1337</code></a> in <a href="https://github-redirect.dependabot.com/winstonjs/winston/pull/2140">winstonjs/winston#2140</a></li>
</ul>
<p>Thanks especially to new contributors <a href="https://github.com/zizifn"><code>@zizifn</code></a>, <a href="https://github.com/arpad1337"><code>@arpad1337</code></a>, <a href="https://github.com/domiins"><code>@domiins</code></a>, & <a href="https://github.com/jeanpierrecarvalho"><code>@jeanpierrecarvalho</code></a>!</p>
<h2>v3.7.2 / 2022-04-04</h2>
<p>This change reverts what should have been the feature-level update in 3.7.0 due to issue <a href="https://github-redirect.dependabot.com/winstonjs/winston/issues/2103">#2103</a> showing this to be breaking, unintentionally.</p>
<h2>v3.7.1 / 2022-04-04</h2>
<p>This change includes some minor updates to package-lock.json resolving npm audit failures: one in <a href="https://github.com/advisories/GHSA-93q8-gq69-wqmw">ansi-regex</a> and another in <a href="https://github.com/advisories/GHSA-xvch-5gv4-984h">minimist</a>.</p>
<h2>v3.7.0 / 2022-03-30</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/winstonjs/winston/commit/101e2f45057ae16835bcc2f35ca00e77dd004465"><code>101e2f4</code></a> Merge branch 'master' of <a href="https://github.com/winstonjs/winston">https://github.com/winstonjs/winston</a></li>
<li><a href="https://github.com/winstonjs/winston/commit/a14ac0411dbfba8370602ac9c59ff6b38f59c640"><code>a14ac04</code></a> v3.8.2</li>
<li><a href="https://github.com/winstonjs/winston/commit/c32a5aea08962f72d97c3dad78ec84003436534d"><code>c32a5ae</code></a> Bump logform from 2.4.1 to 2.4.2</li>
<li><a href="https://github.com/winstonjs/winston/commit/0bf0faebc3f6a1aa28d94055c9c07acc7bea7511"><code>0bf0fae</code></a> Bump <code>@babel/core</code> from 7.18.5 to 7.19.0</li>
<li><a href="https://github.com/winstonjs/winston/commit/ff219f3b4ec65e484c3a4e4ae21d265a4935a132"><code>ff219f3</code></a> Bump eslint from 8.18.0 to 8.23.0</li>
<li><a href="https://github.com/winstonjs/winston/commit/90fb00b8b6c2ab5fb608d8b0ffba2f8b7fb40b3a"><code>90fb00b</code></a> Bump <code>@babel/cli</code> from 7.17.10 to 7.18.10</li>
<li><a href="https://github.com/winstonjs/winston/commit/64e25e42e63579d596abec5867f70d6e69faea31"><code>64e25e4</code></a> Bump <code>@babel/preset-env</code> from 7.18.2 to 7.19.0</li>
<li><a href="https://github.com/winstonjs/winston/commit/7e6675175e31a0ee9cdf08b269de9e998fad7203"><code>7e66751</code></a> Move colors to non-dev dependencies</li>
<li><a href="https://github.com/winstonjs/winston/commit/3f1dcc13cda384eb30fe3b941764e47a5a5efc26"><code>3f1dcc1</code></a> Update README.md</li>
<li><a href="https://github.com/winstonjs/winston/commit/acaa95b7951dcc97056b0237bd5d2105341aac1b"><code>acaa95b</code></a> Update package.json</li>
<li>Additional commits viewable in <a href="https://github.com/winstonjs/winston/compare/v3.3.3...v3.8.2">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~w-b-t">w-b-t</a>, a new releaser for winston since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] rusackas merged pull request #22655: build(deps): bump winston from 3.3.3 to 3.8.2 in /superset-websocket
Posted by GitBox <gi...@apache.org>.
rusackas merged PR #22655:
URL: https://github.com/apache/superset/pull/22655
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] codecov[bot] commented on pull request #22655: build(deps): bump winston from 3.3.3 to 3.8.2 in /superset-websocket
Posted by GitBox <gi...@apache.org>.
codecov[bot] commented on PR #22655:
URL: https://github.com/apache/superset/pull/22655#issuecomment-1376865984
# [Codecov](https://codecov.io/gh/apache/superset/pull/22655?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
> Merging [#22655](https://codecov.io/gh/apache/superset/pull/22655?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (29fc95e) into [master](https://codecov.io/gh/apache/superset/commit/159dcd7e62e9466e2da4ad81cd25c06770fb4a5e?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (159dcd7) will **not change** coverage.
> The diff coverage is `n/a`.
```diff
@@ Coverage Diff @@
## master #22655 +/- ##
=======================================
Coverage 67.14% 67.14%
=======================================
Files 1869 1869
Lines 71523 71523
Branches 7814 7814
=======================================
Hits 48022 48022
Misses 21460 21460
Partials 2041 2041
```
| Flag | Coverage Δ | |
|---|---|---|
| javascript | `53.98% <ø> (ø)` | |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#carryforward-flags-in-the-pull-request-comment) to find out more.
:mega: We’re building smart automated test selection to slash your CI/CD build times. [Learn more](https://about.codecov.io/iterative-testing/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org