dependabot[bot] opened a new pull request, #899: URL: https://github.com/apache/kafka-site/pull/899
Bumps [npm-check-updates](https://github.com/raineorshine/npm-check-updates) from 22.2.9 to 23.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/releases";>npm-check-updates's releases</a>.</em></p> <blockquote> <h2>v23.0.0</h2> <h3>⚠️ Breaking changes & migration</h3> <p><strong>1. Node.js 22+ required</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1844";>#1844</a>) The minimum supported Node.js is now <strong>22</strong>. Supported versions: <code>^22.22.2 || ^24.15.0 || >=26.0.0</code> (and npm <code>>=10</code>).</p> <ul> <li><em>Migration:</em> Upgrade Node before installing. On older Node, stay on v22.x.</li> </ul> <p><strong>2. Pure ESM package — CJS build dropped, default export is now callable</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1916";>#1916</a>, <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1894";>#1894</a>) The package is now pure ESM (no more CommonJS build), and the default export is now callable directly. <code>ncu.run()</code> and <code>ncu.defineConfig()</code> still work as namespaced properties.</p> <ul> <li><em>Migration (ESM):</em> <pre lang="js"><code>// before import * as ncu from 'npm-check-updates' const upgraded = await ncu.run({ /* ... */ }) // after import ncu from 'npm-check-updates' const upgraded = await ncu({ /* ... */ }) // ncu.run({...}) also still works </code></pre> </li> <li><em>Migration (CommonJS):</em> Still usable via Node's native <code>require()</code> of ESM (Node 22+), but the import shape changed: <pre lang="js"><code>// before const ncu = require('npm-check-updates') // after const { default: ncu } = require('npm-check-updates') ncu({ /* ... */ }).then(upgraded => console.log(upgraded)) </code></pre> </li> </ul> <p><strong>3. <code>filterVersion</code> / <code>rejectVersion</code> no longer accept a predicate function. Use <code>filter</code> / <code>reject</code> instead.</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1933";>#1933</a>) These options now accept only a string, wildcard, glob, comma/space-delimited list, or <code>/regex/</code>. (CLI usage is unchanged — the CLI never supported functions.)</p> <ul> <li><em>Migration:</em> If you passed a function to <code>filterVersion</code>/<code>rejectVersion</code> in <code>.ncurc.js</code> or via the module API, move it to <code>filter</code> / <code>reject</code> instead. Those receive the package name <strong>and</strong> the parsed current version, so they can match on both: <pre lang="js"><code>// before filterVersion: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) // after filter: (name, semver) => !(name.startsWith('@myorg/') && +semver[0].major > 5) </code></pre> </li> </ul> <p><strong>4. Output is now grouped by default</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1937";>#1937</a>) <code>--format</code> now defaults to <code>["group"]</code>, so upgrades are grouped by major / minor / patch out of the box. This is a better default for most users.</p> <ul> <li><em>Migration:</em> To get the old flat output, use: <pre lang="bash"><code>ncu --format no-group </code></pre> The new <code>no-</code> prefix removes a value from the default list instead of replacing the whole list, so <code>--format no-group,time</code> disables grouping while adding publish times.</li> </ul> <p><strong>5. <code>--target semver</code> now respects explicit upper bounds</strong> (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1920";>#1920</a>) An explicit upper bound in a range is now preserved and never exceeded, e.g. <code>^9.5.0 <10</code> → <code>^9.7.0 <10</code> (previously the bound could be overrun). This can change which versions are selected for ranges with explicit upper bounds.</p> <h3>✨ Other improvements</h3> <ul> <li>Native TypeScript loading (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1888";>#1888</a>), lazy-loaded <code>npm-registry-fetch</code> for faster startup (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1898";>#1898</a>), and reduced dependencies for a lighter install.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/2417fe3b0ce0356deefa22f1b650afe37e8b5ead";><code>2417fe3</code></a> 23.0.0</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/61b8818b28dddd2b3810225275d54905677e4ee9";><code>61b8818</code></a> Update deps (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1948";>#1948</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/548c6e3969865b5c8a5f57ad475617978c343534";><code>548c6e3</code></a> Merge pull request <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1943";>#1943</a> from raineorshine/xmr/test-doctor</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/d31677a3fe9110b0233b5075141ee4464d2c33a3";><code>d31677a</code></a> test/doctor: run fixtures from a temp copy instead of mutating tracked files</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/31c7e85a8ba37a1a1c26154c1f00a2f1aefdec9b";><code>31c7e85</code></a> Fix and clean up skipped tests (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1941";>#1941</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/c7c968f71aaf67cfc6aefd04ffd16b6c7a97f6a1";><code>c7c968f</code></a> Merge pull request <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1935";>#1935</a> from raineorshine/xmr/fix-regex</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/e42e613794eb89f25c2b32ba6aee9711755edbf6";><code>e42e613</code></a> Update dependencies (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1940";>#1940</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/5c7b4225ff4a299b6bb0c10b3afca6ef5da3d897";><code>5c7b422</code></a> Add regression test for single-character override keys that are not '.'</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/8d0d4be47363891b4362519f64629f12fa8a8609";><code>8d0d4be</code></a> Move override tests into upgradePackageData.test.ts</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/21b8f539eb64db2c7156deb8afb51b4e26312ff5";><code>21b8f53</code></a> Use jsonc-parser for packageManager and JSON catalog upgrades</li> <li>Additional commits viewable in <a href="https://github.com/raineorshine/npm-check-updates/compare/v22.2.9...v23.0.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
