dependabot[bot] opened a new pull request, #6416: URL: https://github.com/apache/texera/pull/6416
Bumps [concurrently](https://github.com/open-cli-tools/concurrently) from 7.4.0 to 10.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-cli-tools/concurrently/releases";>concurrently's releases</a>.</em></p> <blockquote> <h2>v10.0.3</h2> <p>Republish of <a href="https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1";>https://github.com/open-cli-tools/concurrently/releases/tag/v10.0.1</a> with Trusted Publishing enabled (see <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/595";>#595</a>)</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-cli-tools/concurrently/compare/v10.0.2...v10.0.3";>https://github.com/open-cli-tools/concurrently/compare/v10.0.2...v10.0.3</a></p> <h2>v10.0.2</h2> <p>Test version to restore Trusted Publishing. Not published to npm.</p> <h2>v10.0.1</h2> <ul> <li>Ensure <code>FlowController</code> type is exported - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/594";>#594</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/open-cli-tools/concurrently/compare/v10.0.0...v10.0.1";>https://github.com/open-cli-tools/concurrently/compare/v10.0.0...v10.0.1</a></p> <h2>v10.0.0</h2> <h2>💥 Breaking Changes</h2> <ul> <li><strong>Dropped support for Node.js <22.0.0.</strong> Older Node.js version have reached end-of-life, and certain features require new-ish JS APIs.</li> <li><strong>concurrently is now ESM-only.</strong> It's now possible to <code>require(esm)</code>. See <a href="https://socket.dev/blog/require-esm-backported-to-node-js-20";>here for interoperability</a>.</li> <li><strong>Prefix colors now default to automatic</strong> - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/581";>#581</a> The colors used to default to <code>reset</code> (which does nothing). Concurrently now automatically selects a color, out of the box. The list of colors used is not jarring nor carries semantic meaning, and reads well in both dark and light terminal backgrounds.</li> <li><strong>Removed deprecated flags and options</strong> <ul> <li>CLI flag <code>--name-separator</code>: use commas instead.</li> <li>API option <code>killOthers</code>: use <code>killOthersOn</code> instead.</li> </ul> </li> </ul> <h2>✨ New Features</h2> <ul> <li>Support applying modifiers to hex prefix colors (e.g. <code>#ff0000.bold</code>) - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/450";>#450</a></li> <li>Support chalk's color functions in prefixes (e.g. <code>rgb()</code>, <code>hex()</code>, <code>bgRgb()</code>, etc) - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/578";>#578</a></li> <li>Set prefix background color via <code>bg#RRGGBB</code> - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/578";>#578</a></li> <li>Allow shell override via <code>--shell</code> CLI flag/<code>shell</code> API option - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/288";>#288</a>, <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/589";>#589</a>, <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/556";>#556</a> concurrently distinguishes between cmd.exe, powershell, and POSIX-based shells.</li> <li>Manual prefix coloring in templates e.g. <code>[{color}{name}{/color}]</code> - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/583";>#583</a>, <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/587";>#587</a></li> </ul> <h2>🐛 Bug fixes</h2> <ul> <li>Scope quote normalization to CLI input - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/582";>#582</a>, <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/585";>#585</a> It should now also be possible to run commands like <code>"/some/command" foo bar"</code></li> <li>Don't throw when color doesn't exist - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/580";>#580</a></li> </ul> <h2>🔐 Security</h2> <ul> <li>Address <a href="https://app.snyk.io/vuln/SNYK-JS-SHELLQUOTE-16799355";>vulnerability in <code>shellquote</code></a> - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/591";>#591</a></li> </ul> <h2>Other changes</h2> <ul> <li>Warn about running on Snap - <a href="https://redirect.github.com/open-cli-tools/concurrently/issues/584";>#584</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/philfreo";><code>@philfreo</code></a> made their first contribution in <a href="https://redirect.github.com/open-cli-tools/concurrently/pull/566";>open-cli-tools/concurrently#566</a></li> <li><a href="https://github.com/garretmh";><code>@garretmh</code></a> made their first contribution in <a href="https://redirect.github.com/open-cli-tools/concurrently/pull/450";>open-cli-tools/concurrently#450</a></li> <li><a href="https://github.com/CodeF53";><code>@CodeF53</code></a> made their first contribution in <a href="https://redirect.github.com/open-cli-tools/concurrently/pull/574";>open-cli-tools/concurrently#574</a></li> <li><a href="https://github.com/nkappler";><code>@nkappler</code></a> made their first contribution in <a href="https://redirect.github.com/open-cli-tools/concurrently/pull/577";>open-cli-tools/concurrently#577</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-cli-tools/concurrently/commit/435f61b5c5611daa25b9d7e97dded2e1a370201e";><code>435f61b</code></a> 10.0.3</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/5ea69c6432de4ba4ff27d2f43a9970b8760213f8";><code>5ea69c6</code></a> ci: use node 24 in the release workflow</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/18e1281879125e9a0de76ec329cbb657e10cfcde";><code>18e1281</code></a> 10.0.2</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/e70686fdd0ccad95466cc99c3e7fdc7fcde16487";><code>e70686f</code></a> 10.0.1</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/a95bcebd7bfc559e1b27ec9673d71ea6200bb344";><code>a95bceb</code></a> Rename flow-controller{.d -> }.ts</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/ced4245a9a6739b43afbc8ae63565bd83a5a54c7";><code>ced4245</code></a> ci: configure trusted publisher flow</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/cf2eaa2b0fd36cc9f1eaf1f8c56de8d21bd0a42c";><code>cf2eaa2</code></a> 10.0.0</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/1b9bae47a9d966cc13c3da4a4dab5d0c40a16ded";><code>1b9bae4</code></a> deps: upgrade yargs to v18 (<a href="https://redirect.github.com/open-cli-tools/concurrently/issues/593";>#593</a>)</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/b05ee750cafde7b10b544c0153ad56c53571b422";><code>b05ee75</code></a> Bump min Node.js version to v22</li> <li><a href="https://github.com/open-cli-tools/concurrently/commit/ae60bc4ef10d4292b44af42f26d1ab20bad2484c";><code>ae60bc4</code></a> Scope quote normalization to CLI input (<a href="https://redirect.github.com/open-cli-tools/concurrently/issues/585";>#585</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-cli-tools/concurrently/compare/v7.4.0...v10.0.3";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for concurrently since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
