Skip to content

Bump semver, pg, pg-promise and node-sass#55

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-6792d3104d
Open

Bump semver, pg, pg-promise and node-sass#55
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-6792d3104d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 5, 2026

Copy link
Copy Markdown
Contributor

Bumps semver to 5.7.2 and updates ancestor dependencies semver, pg, pg-promise and node-sass. These dependencies need to be updated together.

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates semver from 6.3.0 to 6.3.1

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates pg from 7.18.2 to 8.18.0

Changelog

Sourced from pg's changelog.

pg@8.18.0

pg@8.17.0

  • Throw correct error if database URL parsing fails.

pg@8.16.0

pg@8.15.0

  • Add support for esm importing. CommonJS importing is still also supported.

pg@8.14.0

pg@8.13.0

pg@8.12.0

pg-pool@8.10.0

  • Emit release event when client is returned to the pool.

pg@8.9.0

pg@8.8.0

pg-pool@3.5.0

... (truncated)

Commits

Updates pg-promise from 8.7.5 to 12.6.0

Release notes

Sourced from pg-promise's releases.

12.6.0

Removing Legacy Inspections

All legacy (custom) object/class inspections have been removed, to rely on NodeJS's default inspection instead, which has evolved a lot since early days. Now for all class instances in the library you will see color output in the console, thanks to NodeJS support for colors.

See #979

Minor version incremented, because the console output format has changed, which may break some tests, if you are testing the output. Other than that, the change is compatible, i.e. not enough to justify major version change.

12.5.0

Improved duplicate columns handling

Class ColumnSet has been reworked for better flexibility in handling duplicate columns:

  • The constructor options now include duplicate?: 'error' | 'skip' | 'replace'
  • Method extend now accepts option skip, and relies on the ColumnSet constructor with duplicate option set to error or skip
  • Method merge now simply relies on ColumnSet constructor with duplicate = 'replace' option

This change though substantial, is only incremental, and should work the same without using those new options.

In addition, the underlying pg driver has been updated.

12.4.0

  • Updated all dependencies, including the pg driver.
  • Updated TypeScript declarations for ColumnSet, as per #PR-974
  • Updated docs, as per #976

12.3.0

  • Dependencies update for DEV + for spex, to allow for proper types resolution, see PR#19

12.2.0

  • Adding official support for PostgreSQL v18, including in GitHub CI.
  • Dev dependencies updated.

It is more of a landmark release, without any code changes.

12.1.3

  • Minor code refactoring
  • Documentation updates: Added automatic Dark-Mode to the API, if your OS is set to use a dark theme.

12.1.2

  • Improved Promise detection, and updated spex dependency with the same.
  • Minor error refactoring.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by vitaly.tomilov, a new releaser for pg-promise since your current version.


Updates node-sass from 4.14.1 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump semver, pg, pg-promise and node-sass
b21b444 
Bumps [semver](https://github.com/npm/node-semver) to 5.7.2 and updates ancestor dependencies [semver](https://github.com/npm/node-semver), [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg), [pg-promise](https://github.com/vitaly-t/pg-promise) and [node-sass](https://github.com/sass/node-sass). These dependencies need to be updated together.


Updates `semver` from 5.7.1 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `semver` from 6.3.0 to 6.3.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `pg` from 7.18.2 to 8.18.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.18.0/packages/pg)

Updates `pg-promise` from 8.7.5 to 12.6.0
- [Release notes](https://github.com/vitaly-t/pg-promise/releases)
- [Commits](vitaly-t/pg-promise@8.7.5...12.6.0)

Updates `node-sass` from 4.14.1 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v4.14.1...v9.0.0)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 5.7.2
  dependency-type: indirect
- dependency-name: semver
  dependency-version: 6.3.1
  dependency-type: indirect
- dependency-name: pg
  dependency-version: 8.18.0
  dependency-type: direct:production
- dependency-name: pg-promise
  dependency-version: 12.6.0
  dependency-type: direct:production
- dependency-name: node-sass
  dependency-version: 9.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 5, 2026
@dependabot dependabot Bot mentioned this pull request Feb 5, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants