deps: bump pacote from 20.0.0 to 21.0.0 (#1390)

Bumps [pacote](https://github.com/npm/pacote) from 20.0.0 to 21.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/pacote/releases">pacote's releases</a>.</em></p> <blockquote> <h2>v21.0.0</h2> <h2><a href="https://github.com/npm/pacote/compare/v20.0.0...v21.0.0">21.0.0</a> (2024-11-25)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li><code>bun.lockb</code> files are now included in the strict ignore list during packing</li> <li>this module is now compatible with the following node versions: ^20.17.0 || &gt;=22.9.0</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/844dc08895a16f67573f9d24eab092a32b77e3a3"><code>844dc08</code></a> update node engines to ^20.17.0 || &gt;=22.9.0 (<a href="https://redirect.github.com/npm/pacote/issues/414">#414</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/2cb6fa7ecf8016776077ae76651aaf5e188715e5"><code>2cb6fa7</code></a> <a href="https://redirect.github.com/npm/pacote/pull/415">#415</a> <code>npm-packlist@10.0.0</code> (<a href="https://redirect.github.com/npm/pacote/issues/415">#415</a>)</li> <li><a href="https://github.com/npm/pacote/commit/47b928ccefe1f3fc450e4d7df5058bac8a6090f6"><code>47b928c</code></a> <a href="https://redirect.github.com/npm/pacote/pull/412">#412</a> replace node builtin rmSync with rimraf (<a href="https://redirect.github.com/npm/pacote/issues/412">#412</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/b6f35a20be8baf7552c63c8255b33937066a1f06"><code>b6f35a2</code></a> <a href="https://redirect.github.com/npm/pacote/pull/402">#402</a> bump <code>@​npmcli/arborist</code> from 7.5.4 to 8.0.0 (<a href="https://redirect.github.com/npm/pacote/issues/402">#402</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li><a href="https://github.com/npm/pacote/commit/1ef54ba08b37fe4d83786d6de70f7a93917d3b6f"><code>1ef54ba</code></a> <a href="https://redirect.github.com/npm/pacote/pull/408">#408</a> support tests on win32 (<a href="https://redirect.github.com/npm/pacote/issues/408">#408</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> <li><a href="https://github.com/npm/pacote/commit/555b00080f608468fd9219b77e6b24570e98caa2"><code>555b000</code></a> <a href="https://redirect.github.com/npm/pacote/pull/401">#401</a> bump <code>@​npmcli/template-oss</code> from 4.23.3 to 4.23.4 (<a href="https://redirect.github.com/npm/pacote/issues/401">#401</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/pacote/blob/main/CHANGELOG.md">pacote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/pacote/compare/v20.0.0...v21.0.0">21.0.0</a> (2024-11-25)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li><code>bun.lockb</code> files are now included in the strict ignore list during packing</li> <li>this module is now compatible with the following node versions: ^20.17.0 || &gt;=22.9.0</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/844dc08895a16f67573f9d24eab092a32b77e3a3"><code>844dc08</code></a> update node engines to ^20.17.0 || &gt;=22.9.0 (<a href="https://redirect.github.com/npm/pacote/issues/414">#414</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/2cb6fa7ecf8016776077ae76651aaf5e188715e5"><code>2cb6fa7</code></a> <a href="https://redirect.github.com/npm/pacote/pull/415">#415</a> <code>npm-packlist@10.0.0</code> (<a href="https://redirect.github.com/npm/pacote/issues/415">#415</a>)</li> <li><a href="https://github.com/npm/pacote/commit/47b928ccefe1f3fc450e4d7df5058bac8a6090f6"><code>47b928c</code></a> <a href="https://redirect.github.com/npm/pacote/pull/412">#412</a> replace node builtin rmSync with rimraf (<a href="https://redirect.github.com/npm/pacote/issues/412">#412</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/b6f35a20be8baf7552c63c8255b33937066a1f06"><code>b6f35a2</code></a> <a href="https://redirect.github.com/npm/pacote/pull/402">#402</a> bump <code>@​npmcli/arborist</code> from 7.5.4 to 8.0.0 (<a href="https://redirect.github.com/npm/pacote/issues/402">#402</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li> <li><a href="https://github.com/npm/pacote/commit/1ef54ba08b37fe4d83786d6de70f7a93917d3b6f"><code>1ef54ba</code></a> <a href="https://redirect.github.com/npm/pacote/pull/408">#408</a> support tests on win32 (<a href="https://redirect.github.com/npm/pacote/issues/408">#408</a>) (<a href="https://github.com/mbtools"><code>@​mbtools</code></a>)</li> <li><a href="https://github.com/npm/pacote/commit/555b00080f608468fd9219b77e6b24570e98caa2"><code>555b000</code></a> <a href="https://redirect.github.com/npm/pacote/pull/401">#401</a> bump <code>@​npmcli/template-oss</code> from 4.23.3 to 4.23.4 (<a href="https://redirect.github.com/npm/pacote/issues/401">#401</a>) (<a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot], <a href="https://github.com/npm-cli-bot"><code>@​npm-cli-bot</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/pacote/commit/bf1f60f58bb61f053262f54724edcacaadb221ce"><code>bf1f60f</code></a> chore: release 21.0.0 (<a href="https://redirect.github.com/npm/pacote/issues/413">#413</a>)</li> <li><a href="https://github.com/npm/pacote/commit/2cb6fa7ecf8016776077ae76651aaf5e188715e5"><code>2cb6fa7</code></a> deps!: npm-packlist@10.0.0 (<a href="https://redirect.github.com/npm/pacote/issues/415">#415</a>)</li> <li><a href="https://github.com/npm/pacote/commit/b6f35a20be8baf7552c63c8255b33937066a1f06"><code>b6f35a2</code></a> chore: bump <code>@​npmcli/arborist</code> from 7.5.4 to 8.0.0 (<a href="https://redirect.github.com/npm/pacote/issues/402">#402</a>)</li> <li><a href="https://github.com/npm/pacote/commit/844dc08895a16f67573f9d24eab092a32b77e3a3"><code>844dc08</code></a> fix!: update node engines to ^20.17.0 || &gt;=22.9.0 (<a href="https://redirect.github.com/npm/pacote/issues/414">#414</a>)</li> <li><a href="https://github.com/npm/pacote/commit/555b00080f608468fd9219b77e6b24570e98caa2"><code>555b000</code></a> chore: bump <code>@​npmcli/template-oss</code> from 4.23.3 to 4.23.4 (<a href="https://redirect.github.com/npm/pacote/issues/401">#401</a>)</li> <li><a href="https://github.com/npm/pacote/commit/47b928ccefe1f3fc450e4d7df5058bac8a6090f6"><code>47b928c</code></a> deps: replace node builtin rmSync with rimraf (<a href="https://redirect.github.com/npm/pacote/issues/412">#412</a>)</li> <li><a href="https://github.com/npm/pacote/commit/1ef54ba08b37fe4d83786d6de70f7a93917d3b6f"><code>1ef54ba</code></a> chore: support tests on win32 (<a href="https://redirect.github.com/npm/pacote/issues/408">#408</a>)</li> <li>See full diff in <a href="https://github.com/npm/pacote/compare/v20.0.0...v21.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pacote&package-manager=npm_and_yarn&previous-version=20.0.0&new-version=21.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Nov 26, 2024 at 09:45 UTC a1f1d902dea40093b16a45eaabcddfb02e262dfd
2 files changed +11 -11
cli/package.json
+1 -1
@@ -23,7 +23,7 @@
23 "front-matter": "^4.0.2",
24 "minimatch": "^10.0.1",
25 "minipass": "^7.0.4",
26 - "pacote": "^20.0.0",
26 + "pacote": "^21.0.0",
27 "proc-log": "^5.0.0",
28 "semver": "^7.5.4",
29 "tar": "^7.0.1",
package-lock.json
+10 -10
@@ -91,7 +91,7 @@
91 "front-matter": "^4.0.2",
92 "minimatch": "^10.0.1",
93 "minipass": "^7.0.4",
94 - "pacote": "^20.0.0",
94 + "pacote": "^21.0.0",
95 "proc-log": "^5.0.0",
96 "semver": "^7.5.4",
97 "tar": "^7.0.1",
@@ -32436,14 +32436,14 @@
32436 }
32437 },
32438 "node_modules/npm-packlist": {
32439 - "version": "9.0.0",
32440 - "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-9.0.0.tgz",
32441 - "integrity": "sha512-8qSayfmHJQTx3nJWYbbUmflpyarbLMBc6LCAjYsiGtXxDB68HaZpb8re6zeaLGxZzDuMdhsg70jryJe+RrItVQ==",
32439 + "version": "10.0.0",
32440 + "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-10.0.0.tgz",
32441 + "integrity": "sha512-rht9U6nS8WOBDc53eipZNPo5qkAV4X2rhKE2Oj1DYUQ3DieXfj0mKkVmjnf3iuNdtMd8WfLdi2L6ASkD/8a+Kg==",
32442 "dependencies": {
32443 "ignore-walk": "^7.0.0"
32444 },
32445 "engines": {
32446 - "node": "^18.17.0 || >=20.5.0"
32446 + "node": "^20.17.0 || >=22.9.0"
32447 }
32448 },
32449 "node_modules/npm-pick-manifest": {
@@ -33080,9 +33080,9 @@
33080 }
33081 },
33082 "node_modules/pacote": {
33083 - "version": "20.0.0",
33084 - "resolved": "https://registry.npmjs.org/pacote/-/pacote-20.0.0.tgz",
33085 - "integrity": "sha512-pRjC5UFwZCgx9kUFDVM9YEahv4guZ1nSLqwmWiLUnDbGsjs+U5w7z6Uc8HNR1a6x8qnu5y9xtGE6D1uAuYz+0A==",
33083 + "version": "21.0.0",
33084 + "resolved": "https://registry.npmjs.org/pacote/-/pacote-21.0.0.tgz",
33085 + "integrity": "sha512-lcqexq73AMv6QNLo7SOpz0JJoaGdS3rBFgF122NZVl1bApo2mfu+XzUBU/X/XsiJu+iUmKpekRayqQYAs+PhkA==",
33086 "dependencies": {
33087 "@npmcli/git": "^6.0.0",
33088 "@npmcli/installed-package-contents": "^3.0.0",
@@ -33093,7 +33093,7 @@
33093 "fs-minipass": "^3.0.0",
33094 "minipass": "^7.0.2",
33095 "npm-package-arg": "^12.0.0",
33096 - "npm-packlist": "^9.0.0",
33096 + "npm-packlist": "^10.0.0",
33097 "npm-pick-manifest": "^10.0.0",
33098 "npm-registry-fetch": "^18.0.0",
33099 "proc-log": "^5.0.0",
@@ -33106,7 +33106,7 @@
33106 "pacote": "bin/index.js"
33107 },
33108 "engines": {
33109 - "node": "^18.17.0 || >=20.5.0"
33109 + "node": "^20.17.0 || >=22.9.0"
33110 }
33111 },
33112 "node_modules/pacote/node_modules/@npmcli/agent": {