diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fe3c3d4c87..3b643c2466 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -78,7 +78,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Initialize CodeQL - uses: github/codeql-action/init@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 + uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8 with: config: | paths: @@ -95,7 +95,7 @@ jobs: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 + uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 4fc4f41f3d..b5f6406925 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -68,7 +68,7 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 + uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8 if: github.repository == 'nuxt/nuxt' && success() with: sarif_file: results.sarif diff --git a/package.json b/package.json index 1c3af7fbd5..c182924d3b 100644 --- a/package.json +++ b/package.json @@ -118,7 +118,7 @@ "pkg-pr-new": "0.0.39", "playwright-core": "1.50.0", "rollup": "4.32.1", - "semver": "7.6.3", + "semver": "7.7.0", "sherif": "1.2.0", "std-env": "3.8.0", "tinyexec": "0.3.2", diff --git a/packages/kit/package.json b/packages/kit/package.json index ca784c623e..961d0c585e 100644 --- a/packages/kit/package.json +++ b/packages/kit/package.json @@ -41,7 +41,7 @@ "pathe": "^2.0.2", "pkg-types": "^1.3.1", "scule": "^1.3.0", - "semver": "^7.6.3", + "semver": "^7.7.0", "std-env": "^3.8.0", "ufo": "^1.5.4", "unctx": "^2.4.1", diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json index 7fb6057b8d..a6f6107a42 100644 --- a/packages/nuxt/package.json +++ b/packages/nuxt/package.json @@ -114,7 +114,7 @@ "pkg-types": "^1.3.1", "radix3": "^1.1.2", "scule": "^1.3.0", - "semver": "^7.6.3", + "semver": "^7.7.0", "std-env": "^3.8.0", "strip-literal": "^3.0.0", "tinyglobby": "0.2.10", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c6f52bf21b..5618c5a817 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -186,8 +186,8 @@ importers: specifier: 4.32.1 version: 4.32.1 semver: - specifier: 7.6.3 - version: 7.6.3 + specifier: 7.7.0 + version: 7.7.0 sherif: specifier: 1.2.0 version: 1.2.0 @@ -273,8 +273,8 @@ importers: specifier: ^1.3.0 version: 1.3.0 semver: - specifier: ^7.6.3 - version: 7.6.3 + specifier: ^7.7.0 + version: 7.7.0 std-env: specifier: ^3.8.0 version: 3.8.0 @@ -463,8 +463,8 @@ importers: specifier: ^1.3.0 version: 1.3.0 semver: - specifier: ^7.6.3 - version: 7.6.3 + specifier: ^7.7.0 + version: 7.7.0 std-env: specifier: ^3.8.0 version: 3.8.0 @@ -6973,8 +6973,8 @@ packages: resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==} hasBin: true - semver@7.6.3: - resolution: {integrity: sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==} + semver@7.7.0: + resolution: {integrity: sha512-DrfFnPzblFmNrIZzg5RzHegbiRWg7KMR7btwi2yjHwx06zsUbO5g613sVwEV7FTwmzJu+Io0lJe2GJ3LxqpvBQ==} engines: {node: '>=10'} hasBin: true @@ -8284,7 +8284,7 @@ snapshots: commander: 10.0.1 marked: 9.1.6 marked-terminal: 7.2.1(marked@9.1.6) - semver: 7.6.3 + semver: 7.7.0 '@arethetypeswrong/core@0.17.3': dependencies: @@ -8292,7 +8292,7 @@ snapshots: cjs-module-lexer: 1.4.1 fflate: 0.8.2 lru-cache: 10.4.3 - semver: 7.6.3 + semver: 7.7.0 typescript: 5.7.3 validate-npm-package-name: 5.0.1 @@ -8975,7 +8975,7 @@ snapshots: https-proxy-agent: 7.0.5(supports-color@9.4.0) node-fetch: 2.7.0 nopt: 8.0.0 - semver: 7.6.3 + semver: 7.7.0 tar: 7.4.3 transitivePeerDependencies: - encoding @@ -9067,7 +9067,7 @@ snapshots: perfect-debounce: 1.0.0 pkg-types: 1.3.1 scule: 1.3.0 - semver: 7.6.3 + semver: 7.7.0 std-env: 3.8.0 tinyexec: 0.3.2 ufo: 1.5.4 @@ -9147,7 +9147,7 @@ snapshots: pkg-types: 1.3.1 prompts: 2.4.2 rc9: 2.1.2 - semver: 7.6.3 + semver: 7.7.0 '@nuxt/devtools@1.7.0(rollup@4.32.1)(vite@6.0.11(@types/node@22.12.0)(jiti@2.4.2)(terser@5.37.0)(tsx@4.19.2)(yaml@2.7.0))(vue@3.5.13(typescript@5.7.3))': dependencies: @@ -9179,7 +9179,7 @@ snapshots: pkg-types: 1.3.1 rc9: 2.1.2 scule: 1.3.0 - semver: 7.6.3 + semver: 7.7.0 simple-git: 3.27.0 sirv: 3.0.0 tinyglobby: 0.2.10 @@ -9269,7 +9269,7 @@ snapshots: ohash: 1.1.4 pathe: 1.1.2 pkg-types: 1.3.1 - semver: 7.6.3 + semver: 7.7.0 shiki: 1.22.0 sirv: 3.0.0 std-env: 3.8.0 @@ -10174,7 +10174,7 @@ snapshots: fast-glob: 3.3.3 is-glob: 4.0.3 minimatch: 9.0.5 - semver: 7.6.3 + semver: 7.7.0 ts-api-utils: 2.0.0(typescript@5.7.3) typescript: 5.7.3 transitivePeerDependencies: @@ -10188,7 +10188,7 @@ snapshots: fast-glob: 3.3.3 is-glob: 4.0.3 minimatch: 9.0.5 - semver: 7.6.3 + semver: 7.7.0 ts-api-utils: 2.0.0(typescript@5.7.3) typescript: 5.7.3 transitivePeerDependencies: @@ -10735,7 +10735,7 @@ snapshots: '@voxpelli/semver-set@6.0.0': dependencies: - semver: 7.6.3 + semver: 7.7.0 '@voxpelli/type-helpers@3.4.0': {} @@ -11439,7 +11439,7 @@ snapshots: pathe: 1.1.2 pkg-types: 1.3.1 scule: 1.3.0 - semver: 7.6.3 + semver: 7.7.0 std-env: 3.8.0 yaml: 2.7.0 transitivePeerDependencies: @@ -11675,7 +11675,7 @@ snapshots: postcss-modules-scope: 3.2.0(postcss@8.5.1) postcss-modules-values: 4.0.0(postcss@8.5.1) postcss-value-parser: 4.2.0 - semver: 7.6.3 + semver: 7.7.0 optionalDependencies: '@rspack/core': 1.2.2 webpack: 5.96.1 @@ -11689,7 +11689,7 @@ snapshots: postcss-modules-scope: 3.2.0(postcss@8.5.1) postcss-modules-values: 4.0.0(postcss@8.5.1) postcss-value-parser: 4.2.0 - semver: 7.6.3 + semver: 7.7.0 optionalDependencies: '@rspack/core': 1.2.2 webpack: 5.97.1 @@ -11977,7 +11977,7 @@ snapshots: '@one-ini/wasm': 0.1.1 commander: 10.0.1 minimatch: 9.0.1 - semver: 7.6.3 + semver: 7.7.0 ee-first@1.1.1: {} @@ -12197,7 +12197,7 @@ snapshots: get-tsconfig: 4.8.0 is-glob: 4.0.3 minimatch: 9.0.5 - semver: 7.6.3 + semver: 7.7.0 stable-hash: 0.0.4 tslib: 2.7.0 transitivePeerDependencies: @@ -12215,7 +12215,7 @@ snapshots: espree: 10.3.0 esquery: 1.6.0 parse-imports: 2.1.1 - semver: 7.6.3 + semver: 7.7.0 spdx-expression-parse: 4.0.0 synckit: 0.9.1 transitivePeerDependencies: @@ -12261,7 +12261,7 @@ snapshots: read-pkg-up: 7.0.1 regexp-tree: 0.1.27 regjsparser: 0.10.0 - semver: 7.6.3 + semver: 7.7.0 strip-indent: 3.0.0 eslint-plugin-vue@9.32.0(eslint@9.19.0(jiti@2.4.2)): @@ -12272,7 +12272,7 @@ snapshots: natural-compare: 1.4.0 nth-check: 2.1.1 postcss-selector-parser: 6.1.2 - semver: 7.6.3 + semver: 7.7.0 vue-eslint-parser: 9.4.3(eslint@9.19.0(jiti@2.4.2)) xml-name-validator: 4.0.0 transitivePeerDependencies: @@ -12539,7 +12539,7 @@ snapshots: minimatch: 3.1.2 node-abort-controller: 3.1.1 schema-utils: 3.3.0 - semver: 7.6.3 + semver: 7.7.0 tapable: 2.2.1 typescript: 5.7.3 webpack: 5.96.1 @@ -12556,7 +12556,7 @@ snapshots: minimatch: 3.1.2 node-abort-controller: 3.1.1 schema-utils: 3.3.0 - semver: 7.6.3 + semver: 7.7.0 tapable: 2.2.1 typescript: 5.7.3 webpack: 5.97.1 @@ -12873,7 +12873,7 @@ snapshots: kleur: 4.1.5 minimist: 1.2.8 prompts: 2.4.2 - semver: 7.6.3 + semver: 7.7.0 optionalDependencies: vitest: 3.0.4(@types/debug@4.1.12)(@types/node@22.12.0)(happy-dom@16.7.3)(jiti@2.4.2)(sass@1.78.0)(terser@5.37.0)(tsx@4.19.2)(yaml@2.7.0) @@ -13013,7 +13013,7 @@ snapshots: is-glob: 4.0.3 list-installed: 5.3.1 picomatch: 4.0.2 - semver: 7.6.3 + semver: 7.7.0 installed-check@9.3.0: dependencies: @@ -13503,7 +13503,7 @@ snapshots: make-dir@4.0.0: dependencies: - semver: 7.6.3 + semver: 7.7.0 markdown-it@14.1.0: dependencies: @@ -13997,7 +13997,7 @@ snapshots: pkg-types: 1.3.1 postcss: 8.5.1 postcss-nested: 7.0.2(postcss@8.5.1) - semver: 7.6.3 + semver: 7.7.0 tinyglobby: 0.2.10 optionalDependencies: typescript: 5.7.3 @@ -14017,7 +14017,7 @@ snapshots: pkg-types: 1.3.1 postcss: 8.5.1 postcss-nested: 7.0.2(postcss@8.5.1) - semver: 7.6.3 + semver: 7.7.0 tinyglobby: 0.2.10 optionalDependencies: typescript: 5.7.3 @@ -14115,7 +14115,7 @@ snapshots: rollup: 4.32.1 rollup-plugin-visualizer: 5.13.1(rollup@4.32.1) scule: 1.3.0 - semver: 7.6.3 + semver: 7.7.0 serve-placeholder: 2.0.2 serve-static: 1.16.2 std-env: 3.8.0 @@ -14197,7 +14197,7 @@ snapshots: normalize-package-data@6.0.2: dependencies: hosted-git-info: 7.0.2 - semver: 7.6.3 + semver: 7.7.0 validate-npm-package-license: 3.0.4 normalize-path@3.0.0: {} @@ -14583,7 +14583,7 @@ snapshots: cosmiconfig: 9.0.0(typescript@5.7.3) jiti: 1.21.7 postcss: 8.5.1 - semver: 7.6.3 + semver: 7.7.0 optionalDependencies: '@rspack/core': 1.2.2 webpack: 5.96.1 @@ -14595,7 +14595,7 @@ snapshots: cosmiconfig: 9.0.0(typescript@5.7.3) jiti: 1.21.7 postcss: 8.5.1 - semver: 7.6.3 + semver: 7.7.0 optionalDependencies: '@rspack/core': 1.2.2 webpack: 5.97.1 @@ -15282,7 +15282,7 @@ snapshots: semver@6.3.1: {} - semver@7.6.3: {} + semver@7.7.0: {} send@1.1.0: dependencies: @@ -15706,7 +15706,7 @@ snapshots: third-party-capital@2.3.0: dependencies: - semver: 7.6.3 + semver: 7.7.0 time-fix-plugin@2.0.7(webpack@5.96.1): dependencies: @@ -16447,7 +16447,7 @@ snapshots: vscode-languageclient@7.0.0: dependencies: minimatch: 3.1.2 - semver: 7.6.3 + semver: 7.7.0 vscode-languageserver-protocol: 3.16.0 vscode-languageserver-protocol@3.16.0: @@ -16486,7 +16486,7 @@ snapshots: espree: 9.6.1 esquery: 1.6.0 lodash: 4.17.21 - semver: 7.6.3 + semver: 7.7.0 transitivePeerDependencies: - supports-color @@ -16527,7 +16527,7 @@ snapshots: dependencies: '@volar/typescript': 2.4.11 '@vue/language-core': 2.1.10(typescript@5.7.3) - semver: 7.6.3 + semver: 7.7.0 typescript: 5.7.3 optional: true