Skip to content

chore(deps): bump semantic-release, @semantic-release/changelog, @semantic-release/commit-analyzer, @semantic-release/git and @semantic-release/release-notes-generator - #166

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-604bc3b98b
Open

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps semantic-release to 25.0.9 and updates ancestor dependencies semantic-release, @semantic-release/changelog, @semantic-release/commit-analyzer, @semantic-release/git and @semantic-release/release-notes-generator. These dependencies need to be updated together.

Updates semantic-release from 15.14.0 to 25.0.9

Release notes

Sourced from semantic-release's releases.

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

  • do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

  • handle potential null values in commit message and gitTags trimming (0a60004)
  • hide-sensitive: mask key/auth/webhook env vars (973d763)
  • mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)
  • prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

  • argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

  • ensure encoded secrets get masked (8e28dd3)

v25.0.5

25.0.5 (2026-06-09)

Bug Fixes

v25.0.4

25.0.4 (2026-06-09)

Bug Fixes

  • code-quality: add missing comma in context object for consistency (493d6cd)

... (truncated)

Commits
  • 8d905a5 fix: do not expose the authenticated repository URL in EGITNOPERMISSION error...
  • e176eb7 ci(action): update github/codeql-action action to v4.37.6 (#4282)
  • d27db1b chore(deps): update dependency js-yaml to v4.3.1 (#4279)
  • 55beeac ci(action): update github/codeql-action action to v4.37.5 (#4277)
  • 7bf348d chore(deps): update dependency nock to v14.0.17 (#4275)
  • 2ec3ba2 chore(deps): update dependency mockserver-client to v7.5.0 (#4274)
  • d3b7724 chore(deps): update npm to v12.0.2 (#4273)
  • 514dc5f chore(deps): update dependency npm-run-all2 to v9.0.3 (#4271)
  • f25b716 ci(action): update github/codeql-action action to v4.37.4 (#4270)
  • 1114416 chore: remove 'next version' badge from README (#4265)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for semantic-release since your current version.


Updates @semantic-release/changelog from 3.0.6 to 7.0.0

Release notes

Sourced from @​semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

  • Replaced xo with prettier with default configuration; following newly established convention
  • Replaced nyc with c8 for code coverage
  • Replaced lodash with lodash-es for proper esm support

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

  • @semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
  • 0563e5d chore(deps): update to the latest semantic-release version (#417)
  • e154214 feat: ES Module (#414)
  • 15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
  • 1c48000 test: remove codecov (#399)
  • 3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
  • 854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
  • e7c79f8 chore(deps): update dependency nyc to v17 (#392)
  • 171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
  • 13e3bf7 chore(deps): update dependency sinon to v18 (#389)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/changelog since your current version.


Updates @semantic-release/commit-analyzer from 6.3.3 to 13.0.1

Release notes

Sourced from @​semantic-release/commit-analyzer's releases.

v13.0.1

13.0.1 (2025-01-03)

Bug Fixes

  • deps: update dependency import-from-esm to v2 (#741) (f106b76)

v13.0.0

13.0.0 (2024-05-31)

Bug Fixes

  • log the raw message again (e2f5d6c)

Features

  • support latest conventional-changelog packages (0254d7a)

BREAKING CHANGES

  • by supporting the latest major versions of conventional-changelog packages, we are dropping support for previous major versions of those packages due to the breaking changes between majors. this only impacts your project if you are installing alongside semantic-release, so updating those packages to latest version should be the only change you need for this update. no action should be necessary if you are using default semantic-release config

v13.0.0-beta.2

13.0.0-beta.2 (2024-05-25)

Bug Fixes

  • log the raw message again (e2f5d6c)

v13.0.0-beta.1

13.0.0-beta.1 (2024-05-25)

Features

  • support latest conventional-changelog packages (0254d7a)

BREAKING CHANGES

  • by supporting the latest major versions of conventional-changelog packages, we are

... (truncated)

Commits

Updates @semantic-release/git from 7.0.18 to 11.0.1

Release notes

Sourced from @​semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

  • deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

  • update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

v11.0.0-beta.1

11.0.0-beta.1 (2026-07-17)

Features

BREAKING CHANGES

  • @semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)
  • the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits
  • b39d5c6 fix(deps): update dependency execa to v10 (#564)
  • 9dd61f1 chore(deps): lock file maintenance (#470)
  • c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
  • b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
  • d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
  • 16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
  • 8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
  • e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
  • 4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
  • 7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/git since your current version.


Updates @semantic-release/release-notes-generator from 7.3.5 to 14.1.1

Release notes

Sourced from @​semantic-release/release-notes-generator's releases.

v14.1.1

14.1.1 (2026-05-08)

Bug Fixes

  • deps: update dependency get-stream to v9 (#613) (9728887)

v14.1.0

14.1.0 (2025-09-05)

Features

  • preset: support ignoreCommits option (#836) (485bc0a)

v14.0.3

14.0.3 (2025-01-03)

Bug Fixes

  • deps: update dependency import-from-esm to v2 (#756) (832620e)

v14.0.2

14.0.2 (2024-12-16)

Bug Fixes

v14.0.1

14.0.1 (2024-06-22)

Bug Fixes

  • deps: rename read-pkg-up to read-package-up (#671) (687ba5a)

v14.0.0

14.0.0 (2024-05-31)

Features

  • support latest conventional-changelog packages (#643) (2bce0d3)

BREAKING CHANGES

... (truncated)

Commits
  • 9728887 fix(deps): update dependency get-stream to v9 (#613)
  • 618cd05 chore(deps): update dependency publint to v0.3.19 (#965)
  • 2cbdb58 chore(deps): lock file maintenance (#964)
  • df3fb9e chore(deps): lock file maintenance (#962)
  • e60ca73 chore(deps): update npm to v11.13.0 (#961)
  • 05ea556 ci(action): update actions/setup-node action to v6.4.0 (#960)
  • 0b4e4a7 chore(deps): lock file maintenance (#959)
  • 9854b65 chore(deps): update dependency prettier to v3.8.3 (#958)
  • 64d547f chore(deps): update dependency sinon to v21.1.2 (#957)
  • 46dec93 chore(deps): update dependency sinon to v21.1.1 (#956)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​semantic-release/release-notes-generator since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…antic-release/commit-analyzer, @semantic-release/git and @semantic-release/release-notes-generator

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) to 25.0.9 and updates ancestor dependencies [semantic-release](https://github.com/semantic-release/semantic-release), [@semantic-release/changelog](https://github.com/semantic-release/changelog), [@semantic-release/commit-analyzer](https://github.com/semantic-release/commit-analyzer), [@semantic-release/git](https://github.com/semantic-release/git) and [@semantic-release/release-notes-generator](https://github.com/semantic-release/release-notes-generator). These dependencies need to be updated together.


Updates `semantic-release` from 15.14.0 to 25.0.9
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v15.14.0...v25.0.9)

Updates `@semantic-release/changelog` from 3.0.6 to 7.0.0
- [Release notes](https://github.com/semantic-release/changelog/releases)
- [Commits](semantic-release/changelog@v3.0.6...v7.0.0)

Updates `@semantic-release/commit-analyzer` from 6.3.3 to 13.0.1
- [Release notes](https://github.com/semantic-release/commit-analyzer/releases)
- [Commits](semantic-release/commit-analyzer@v6.3.3...v13.0.1)

Updates `@semantic-release/git` from 7.0.18 to 11.0.1
- [Release notes](https://github.com/semantic-release/git/releases)
- [Commits](semantic-release/git@v7.0.18...v11.0.1)

Updates `@semantic-release/release-notes-generator` from 7.3.5 to 14.1.1
- [Release notes](https://github.com/semantic-release/release-notes-generator/releases)
- [Commits](semantic-release/release-notes-generator@v7.3.5...v14.1.1)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-version: 25.0.9
  dependency-type: indirect
- dependency-name: "@semantic-release/changelog"
  dependency-version: 7.0.0
  dependency-type: direct:development
- dependency-name: "@semantic-release/commit-analyzer"
  dependency-version: 13.0.1
  dependency-type: direct:development
- dependency-name: "@semantic-release/git"
  dependency-version: 11.0.1
  dependency-type: direct:development
- dependency-name: "@semantic-release/release-notes-generator"
  dependency-version: 14.1.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants