ci(deps): bump the major-updates group across 1 directory with 5 updates by dependabot[bot] · Pull Request #111 · vineethkrishnan/clearpr

dependabot · 2026-07-13T14:16:42Z

Bumps the major-updates group with 5 updates in the / directory:

Package	From	To
js-yaml	`4.2.0`	`5.2.1`
typeorm	`0.3.30`	`1.0.0`
@types/node	`25.9.2`	`26.1.1`
jscpd	`4.2.4`	`5.0.12`
typescript	`6.0.3`	`7.0.2`

Updates js-yaml from 4.2.0 to 5.2.1

Changelog

Sourced from js-yaml's changelog.

[5.2.1] - 2026-07-02

Fixed

Add Map support to !!omap (should work when realMapTag used)

Security

Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

[breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

Added named exports for schemas, tags, parser events and AST utilities.

Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.

Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.

Added dump() transform option for changing the generated AST before rendering.

Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and

... (truncated)

Commits

ac16b42 5.2.1 released
4a864e5 Deps bump
39f3211 !!omap: add Map support and remove quadratic complexity
ff17f1e Changelog update
8ed15f1 deps bump
1a562dc Fix changelog link
c28ed5e 5.2.0 released
125cd5a Add maxAliases option
3105455 Replace maxMergeSeqLengthoption with maxTotalMergeKeys (more robust)
39d00d6 numbers: Drop boxed numbers support, simplify .identify() checks, clarify rou...
Additional commits viewable in compare view

Updates typeorm from 0.3.30 to 1.0.0

Release notes

Sourced from typeorm's releases.

1.0.0

TypeORM v1.0 is here! 🥳

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

This release includes breaking changes. See the v1.0 Upgrade Guide

What's Changed

fix: include joined entity primary keys in pagination subquery by @mag123c in typeorm/typeorm#11669

feat(postgres): add support for PostgreSQL indices by @freePixel in typeorm/typeorm#11318

refactor!: remove legacy expo driver by @G0maa in typeorm/typeorm#11860

fix(cockroachdb): preserve structured query results during txn retry replay by @naorpeled in typeorm/typeorm#11861

docs: add version dropdown (stable/dev) to master by @naorpeled in typeorm/typeorm#11862

docs: link to queryrunner api docs from top level queryrunner page by @hughrawlinson in typeorm/typeorm#11869

feat: add error handling and log warning for ormconfig loading failures by @Cprakhar in typeorm/typeorm#11871

refactor: remove shajs by @G0maa in typeorm/typeorm#11864

ci: setup pnpm by @alumni in typeorm/typeorm#11881

chore(docs): move to PNPM by @naorpeled in typeorm/typeorm#11884

feat: add better typing for conditions in increment and decrement of EntityManager by @OSA413 in typeorm/typeorm#11294

fix: getPendingMigrations unnecessarily creating migrations table by @pkuczynski in typeorm/typeorm#11672

fix: copy cordova query rows affected into query result by @jacobg in typeorm/typeorm#10873

fix: resolve nameless TableForeignKey on drop foreign key by @taichunmin in typeorm/typeorm#10744

feat(docs): add Kapa.ai widget for AI-powered documentation assistance by @dlhck in typeorm/typeorm#11891

fix: virtual property handling in schema builder by @skyran1278 in typeorm/typeorm#11000

fix(mongo): correctly process embedded arrays of nested documents by @mciuchitu in typeorm/typeorm#10940

feat(postgres): use ADD VALUE when changing enum values if possible by @janzipek in typeorm/typeorm#10956

test: add mutation testing and mutation score badge by @OSA413 in typeorm/typeorm#11253

fix: change import for process dependency by @yohannpoli in typeorm/typeorm#11248

chore(tests): adapt Stryker mutator to pnpm and fix markup in README for badges by @OSA413 in typeorm/typeorm#11893

chore(tests): send only mutation score to the Stryker dashboard by @OSA413 in typeorm/typeorm#11895

fix: fix working with tables with quotes in the names for postgres and cockroachdb by @iskalyakin in typeorm/typeorm#10993

refactor: replace uuid with native Crypto API by @mag123c in typeorm/typeorm#11769

fix(mysql): getVersion returning undefined for PolarDB-X 2.0 by @Missna in typeorm/typeorm#11837

test: align file names by @gioboa in typeorm/typeorm#11898

ci: ensure pull request follow conventional commits spec by @pkuczynski in typeorm/typeorm#11840

feat(qodo): enable new review experience by @naorpeled in typeorm/typeorm#11909

test: modify tests to confirm ON CONFLICT ON CONSTRAINT on PostgreSQL/CockroachDB by @Cprakhar in typeorm/typeorm#11908

feat: add support for installing additional postgres extensions by @Cprakhar in typeorm/typeorm#11888

feat: add deferrable support to exclusion decorator to mirror unique and index decorators by @oGAD31 in typeorm/typeorm#11802

chore(mutation testing): tweak Stryker for lower resource usage and decrease timeout for slow running mutants by @OSA413 in typeorm/typeorm#11901

fix: raw select query with correctly ordered selected columns by @Cprakhar in typeorm/typeorm#11902

docs: fix typo 'spass' to 'pass' by @guoxk-me in typeorm/typeorm#11919

chore: align master with v0.3 by @gioboa in typeorm/typeorm#11912

fix: update child's mpath by @JoseCToscano in typeorm/typeorm#10844

test: verify column names when using referencedColumnName in composite relations by @Cprakhar in typeorm/typeorm#11883

fix: merging into an entity now respects null values by @knoid in typeorm/typeorm#11154

fix: handle re-save of postgres geometric types by @Cprakhar in typeorm/typeorm#11857

fix(sqlite): handle simple-enum arrays correctly by @Cprakhar in typeorm/typeorm#11865

fix: fix up map objects comparison by @mgohin in typeorm/typeorm#10990

feat: support INSERT INTO ... SELECT FROM ... in QueryBuilder by @Cprakhar in typeorm/typeorm#11896

... (truncated)

Changelog

Sourced from typeorm's changelog.

1.0.0 (2026-05-19)

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

The list below is the set of commits between 0.3.30 and 1.0.0 — fixes already shipped on the 0.3.x line are listed under their respective 0.3.x entries below.

feat!: drop support for node 16 and 18 (#11382) (349d910), closes #11382

Bug Fixes

cascade: propagate withDeleted to relation-id loader for many-to-many recover (#12287) (cfba9e7)

cascade: support cascade remove for OneToMany relations with composite PKs (#12286) (09183c8)

cli: preserve devDependencies needed by init command in published package (#12281) (c3b771c)

cockroachdb: preserve structured query results during txn retry replay (#11861) (09db48c)

codemod: apply find-options select/relations rewrites to .exists() too (#12399) (4461063)

codemod: correct relation-count guidance and flag loadRelationCountAndMap (#12374) (5de5490)

codemod: cover ColumnMetadata args.options in column option rewrites (#12400) (7a68cf2)

codemod: exclude type declarations from build (#12292) (4c645f0)

codemod: handle aliases, quoted keys, and ObjectProperty variants (#12377) (2d15644)

codemod: handle lock option objects correctly and increase test coverage (#12353) (b871719)

codemod: handle typeof type queries and use getStringValue consistently (#12379) (dedea37)

codemod: harden destructure and DI accessor rewrites for connection to dataSource rename (#12398) (057ddbc)

codemod: harden scope and type-name detection across more AST shapes (#12394) (9d1fd8d)

codemod: harden scope, idempotency, and import-strip semantics (#12391) (ed5a19b)

codemod: recognize typeorm deep-path imports (#12382) (a96b097)

codemod: rename .connection on EntityMetadata, ColumnMetadata, IndexMetadata (#12383) (8a51e30), closes #12249

codemod: rewrite typeorm re-exports in barrel files (#12373) (25f0b5f)

codemod: scope v1 transforms to typeorm imports and skip .d.ts files (#12372) (a34fdb2)

codemod: track DataSource accessor chains for typed-variable renames (#12385) (14a3132)

copy cordova query rows affected into query result (#10873) (ad22c10)

disable global order for aggregate functions (#11925) (2efb2a1)

do not run npm install during CLI init (#12386) (66aa930)

docs: add lunr as explicit dependency for pnpm strict hoisting (f4d435e)

docs: align code style (#12081) (5f6eb4c)

docs: complete Typesense removal missed during cherry-pick (eb7a5b6)

docs: update docs pnpm lockfile for new dependencies (4123db9)

eager load relation strategy (#11326) (5797d97)

enhance upsert functionality for proper sql generation with table alias (#11915) (42ce630)

expo: auto-load expo-sqlite driver via loadDependencies() (#12363) (212c8ef)

fix up change detection with date transformer (#11963) (e3e3c97)

fix up generated query with .update() (#11993) (fe6c072)

fix up join attributes inside bracket (#11218) (d233daa)

fix up map objects comparison (#10990) (f66eee7)

fix up save with eagerly loaded relation (#11975) (f5cea95)

fix working with tables with quotes in the names for postgres and cockroachdb (#10993) (e5a8afb)

handle re-save of postgres geometric types (#11857) (65dea3c)

handle relation ids in nested embedded entities (#11942) (5237bee)

include joined entity primary keys in pagination subquery (#11669) (4ffe666)

make shorten method to properly work with camelCase_aliases (#11283) (8a9a376)

merging into an entity now respects null values (#11154) (1676484)

... (truncated)

Commits

cf3f13f docs: restyle version dropdown for v1 release (#12514)
6997b23 chore: release v1.0.0 (#12510)
df09802 fix(cockroachdb): adjust join in loadTables to load correct table columns (#1...
f5cc456 fix(find-options): allow array values in JsonContains (#12420)
9440998 fix(mysql)!: use index identifiers instead of raw SQL in QB.useIndex() (#12...
a4f26af chore(deps): bump the github-actions-official group with 3 updates (#12483)
ac2ffc6 chore(deps): bump the github-actions-third-party group with 3 updates (#12484)
62948a3 revert: fix up limit with joins (#12478)
c2b788f ci: pin all GitHub Actions to commit SHAs (#12481)
9284c16 fix(security): validate limit() in Update/SoftDelete query builders (#12436)
Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 26.1.1

Commits

See full diff in compare view

Updates jscpd from 4.2.4 to 5.0.12

Release notes

Sourced from jscpd's releases.

Release v5.0.12

Highlights

Bug Fixes

Rename cpd binary and npm packages to jscpd — the CLI binary was named cpd (cpd.exe on Windows), which collided with an executable name flagged by some antivirus software (McAfee, Trend Micro), causing false-positive blocking. The binary and platform npm packages are now named jscpd / jscpd-*. Closes #826 (#854)

Recognize ; line comments for Lisp/Clojure/Scheme/Racket — these languages fell through to C-style comment handling, so ; comments were tokenized as code and --mode weak / --skip-comments couldn't drop them. Closes #849 (#850, thanks @laurynas-biveinis)

Use HTTPS for SARIF schema URI — avoids "untrusted URI" errors in SARIF-consuming tools (#844, thanks @chrisc-onaorg)

Chores

Use public repository URLs for @jscpd/core, @jscpd/finder, @jscpd/tokenizer, @jscpd/html-reporter, @jscpd/badge-reporter, @jscpd/leveldb-store, and @jscpd/redis-store package metadata (#831–#837, thanks @9904099)

Add cargo ecosystem to Dependabot config

Dependencies

Bump askama to 0.16.0 in /rust

Bump log to 0.4.33 in /rust

Bump env_logger to 0.11.11 in /rust

Bump rustc-hash to 2.1.3 in /rust

Thanks

Big thanks to @laurynas-biveinis, @chrisc-onaorg, and @9904099 for their contributions to this release! 🙌

Published Packages

cpd-core@0.1.6 on crates.io

cpd-finder@0.1.8 on crates.io

cpd-reporter@0.1.7 on crates.io

cpd-tokenizer@0.1.7 on crates.io

jscpd@5.0.12 on crates.io

cpd@5.0.12 on npm

jscpd@5.0.12 on npm

jscpd-darwin-arm64@5.0.12 on npm

jscpd-darwin-x64@5.0.12 on npm

jscpd-linux-x64-gnu@5.0.12 on npm

jscpd-linux-arm64-gnu@5.0.12 on npm

jscpd-linux-x64-musl@5.0.12 on npm

jscpd-windows-x64-msvc@5.0.12 on npm

Release v5.0.10

cpd (Rust) v5.0.10

Bug Fixes

Emit scan-root-relative paths in all reporters when absolute: false (or the default). Previously, jscpd /abs/path from a different CWD left absolute paths in SARIF/JSON/XML/HTML/CSV/Markdown/console output, and Windows/macOS path canonicalization could leave \\?\ or ./ prefixes. Paths are now normalized against the canonicalized scan root (with CWD fallback) and stripped of any leading ./ or .\\ component. Fixes #827

Fix --skip-local to match jscpd v4 TypeScript semantics: it now filters clones where both fragments are under the same scan root, instead of only skipping clones in the same parent directory

Refactoring

... (truncated)

Changelog

Sourced from jscpd's changelog.

Changelog

All notable changes to jscpd are documented here. Releases follow Semantic Versioning.

5.0.11

New Features

Razor (.razor) support — new tokenizer for Razor files in the Rust backend (thanks to @chrisc-onaorg in #829)

Dependencies

cpd-core bumped to 0.1.6, cpd-tokenizer bumped to 0.1.7

5.0.10

Bug Fixes

Emit scan-root-relative paths in all reporters when absolute: false. Fixes #827

Fix --skip-local to match jscpd v4 TypeScript semantics

Refactoring

DRY duplication in reporters: extract shared helpers into cpd-reporter/src/shared.rs

Move blame enrichment from gitoxide to git blame --porcelain

5.0.9

New Features

GitHub Action for jscpd (Rust v5) — jscpd-copy-paste-detector action for GitHub Actions Marketplace. Scan your repo for copy/paste in CI with uses: kucherenko/jscpd/.github/workflows/action.yml@v5

Bug Fixes

Resolve platform binary resolution when cpd is installed as a nested dependency (e.g. in a project's node_modules via a parent package). The runner now correctly locates the platform-specific binary relative to the installed package rather than assuming a top-level install. Fixes #816

5.0.8

Bug Fixes

Prevent mmap exhaustion crashes when scanning repositories with more files than vm.max_map_count (default 131 072 on Linux). The walker previously held a live Mmap per discovered file; each rayon worker now opens and drops its mapping within the processing closure, capping concurrent mappings to the thread-pool size (typically 8–32). Fixes #813

Fix --pattern not matching relative paths when the scan root is absolute (e.g. CWD). Patterns like src/**/*.ts now match correctly by comparing against both the relative path and the full absolute path, and bare patterns like *.ts gain a **/ prefix to match at any depth. Fixes #811

... (truncated)

Commits

See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major-updates group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.2.1` | | [typeorm](https://github.com/typeorm/typeorm) | `0.3.30` | `1.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.1.1` | | [jscpd](https://github.com/kucherenko/jscpd/tree/HEAD/rust/jscpd) | `4.2.4` | `5.0.12` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | Updates `js-yaml` from 4.2.0 to 5.2.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.2.0...5.2.1) Updates `typeorm` from 0.3.30 to 1.0.0 - [Release notes](https://github.com/typeorm/typeorm/releases) - [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md) - [Commits](typeorm/typeorm@0.3.30...1.0.0) Updates `@types/node` from 25.9.2 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jscpd` from 4.2.4 to 5.0.12 - [Release notes](https://github.com/kucherenko/jscpd/releases) - [Changelog](https://github.com/kucherenko/jscpd/blob/master/CHANGELOG.md) - [Commits](https://github.com/kucherenko/jscpd/commits/v5.0.12/rust/jscpd) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: typeorm dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: jscpd dependency-version: 5.0.12 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies label Jul 13, 2026

dependabot Bot requested a review from vineethkrishnan as a code owner July 13, 2026 14:16

dependabot Bot added the dependencies label Jul 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci(deps): bump the major-updates group across 1 directory with 5 updates - #111

ci(deps): bump the major-updates group across 1 directory with 5 updates#111
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-updates-058d52bbaa

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[5.2.1] - 2026-07-02

Fixed

Security

4.3.0, 3.15.0 - 2026-06-27

Security

[5.2.0] - 2026-06-26

Added

Removed

Fixed

[5.1.0] - 2026-06-23

Added

Changed

[5.0.0] - 2026-06-20

Added

1.0.0

What's Changed

1.0.0 (2026-05-19)

Bug Fixes

Release v5.0.12

Highlights

Bug Fixes

Chores

Dependencies

Thanks

Published Packages

Release v5.0.10

Bug Fixes

Refactoring

Changelog

5.0.11

New Features

Dependencies

5.0.10

Bug Fixes

Refactoring

5.0.9

New Features

Bug Fixes

5.0.8

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading