lavamoat-tofu - npm Package Compare versions

Comparing version 7.2.3 to 7.3.0

CHANGELOG.md

 # Changelog
 
+## [7.3.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-tofu-v7.2.3...lavamoat-tofu-v7.3.0) (2024-07-11)
+
+
+### Features
+
+* **tofu:** support node.js 22.x ([d6c5e1f](https://github.com/LavaMoat/LavaMoat/commit/d6c5e1f26977dc84575c2e9a75667b6339ca7aec))
+
+
+### Bug Fixes
+
+* **deps:** update babel monorepo ([246ec25](https://github.com/LavaMoat/LavaMoat/commit/246ec256790a0a2cb993d5895ae13a0b716da1c6))
+* **deps:** update babel monorepo to v7.24.5 ([7e466bd](https://github.com/LavaMoat/LavaMoat/commit/7e466bd5718a0a1b92df24a2d023c0bb1f54b872))
+* **deps:** update babel monorepo to v7.24.6 ([f6d450f](https://github.com/LavaMoat/LavaMoat/commit/f6d450fa48c8f166dac72a2b606429dafa5a70c4))
+* **deps:** update definitelytyped ([a23d8be](https://github.com/LavaMoat/LavaMoat/commit/a23d8beb8a64ceed6417ac1eb48b866465fd784b))
+* **deps:** update dependency type-fest to v4.14.0 ([1321a58](https://github.com/LavaMoat/LavaMoat/commit/1321a58964f36af95b30a547154a060edb63d009))
+* **deps:** update dependency type-fest to v4.15.0 ([c48f8e3](https://github.com/LavaMoat/LavaMoat/commit/c48f8e31c2f0bfc5e8baff190ea7afeef11d205b))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * peerDependencies
+    * lavamoat-core bumped from ^15.3.0 to ^15.4.0
+
 ## [7.2.3](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-tofu-v7.2.2...lavamoat-tofu-v7.2.3) (2024-03-26)
@@ -4,0 +28,0 @@

package.json

 {
   "name": "lavamoat-tofu",
-  "version": "7.2.3",
+  "version": "7.3.0",
   "description": "This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config",
@@ -17,3 +17,3 @@ "repository": {
   "engines": {
-    "node": "^16.20.0 || ^18.0.0 || ^20.0.0"
+    "node": "^16.20.0 || ^18.0.0 || ^20.0.0 || ^22.0.0"
   },
@@ -30,10 +30,10 @@ "main": "src/index.js",
   "peerDependencies": {
-    "lavamoat-core": "^15.3.0"
+    "lavamoat-core": "^15.4.0"
   },
   "dependencies": {
-    "@babel/parser": "7.24.0",
-    "@babel/traverse": "7.24.0",
-    "@babel/types": "7.24.0",
-    "@types/babel__traverse": "7.20.5",
-    "type-fest": "4.13.1"
+    "@babel/parser": "7.24.6",
+    "@babel/traverse": "7.24.6",
+    "@babel/types": "7.24.6",
+    "@types/babel__traverse": "7.20.6",
+    "type-fest": "4.15.0"
   },
@@ -40,0 +40,0 @@ "devDependencies": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

227732

increased by0.61%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removed@babel/parser@7.24.0(transitive)

• - Removed@babel/traverse@7.24.0(transitive)

• - Removed@babel/types@7.24.0(transitive)

• - Removed@types/babel__traverse@7.20.5(transitive)

• - Removedlavamoat-tofu@7.3.0(transitive)

• - Removedtype-fest@4.13.1(transitive)

• Updated@babel/parser@7.24.6

• Updated@babel/traverse@7.24.6

• Updated@babel/types@7.24.6

• Updated@types/babel__traverse@7.20.6

• Updatedtype-fest@4.15.0