Skip to content
This repository was archived by the owner on Apr 14, 2026. It is now read-only.

deps: bump the npm-dependencies group with 5 updates - #302

Closed
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/npm_and_yarn/npm-dependencies-ec15869941
Closed

deps: bump the npm-dependencies group with 5 updates#302
dependabot[bot] wants to merge 1 commit into
nextfrom
dependabot/npm_and_yarn/npm-dependencies-ec15869941

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on @lerna-lite/cli, @lerna-lite/publish, @lerna-lite/run, @lerna-lite/version and conventional-changelog-conventionalcommits to permit the latest version.
Updates @lerna-lite/cli from 4.11.5 to 5.0.0

Release notes

Sourced from @​lerna-lite/cli's releases.

v5.0.0

5.0.0 (2026-04-02)

📢 Major 5.0 Release ⚠️

NodeJS 20 will be EOL by the end of April, so it's time for another Lerna-Lite major release and a Node requirement bump. Below is the list of breaking changes:

  1. removed the Conventional Changelog legacy API that allowed reading config from external file (it was deprecated years ago). It is now accepting only configuration through lerna.json file (when using custom changelogPreset).
    • for users of Commitlint and/or conventional-changelog-conventionalcommits, please make sure to update to their latest versions to avoid any problems
  2. last year lerna publish --remove-package-fields option was renamed and its old name deprecated, it is now officially removed. This mean that only the new option name is valid, so make sure to use:
  3. NodeJS requirement is now ^22.17.0 || >=24.0.0 which is allowing the use of even more native NodeJS code (e.g. util.styleText() and import.meta.dirname)

to see the complete list of all previous migrations, take a look at: all Release Migrations

New Requirements

  • drop Node 20 support, which will be EOL in April, we now require Node ^22.17.0 || >=24.0.0

Some Project Statistics

What happened since the last major version?

  • download nearly doubled to ~2M/year (in comparison Lerna also grew from 62M to 84M/year)
    • Lerna-Lite grew by almost 100% while Lerna grew by 35%... so Lerna-Lite is small, but growing steadily
  • OIDC trusted publishing was added just a few months ago (which Lerna-Lite itself uses to publish)
  • extended Catalog support, pnpm catalog was added last year, and more recently support for all 3 package managers (pnpm, Yarn and even Bun)
    • for reference Lerna does not support Catalog
  • also following e18e initiative, more focus was put on using even more native code. Allowing Lerna-Lite install size to keep decreasing, for example the publish command (which includes version) install size is now at 33Mb/257 packages (ref node-module-inspector)
    • in comparison v1.0 was at 62Mb/454 packages, that's nearly 50% decrease in size and external packages.
    • also in comparison, the original Lerna (all-in-one tool) pulls in 138Mb/499 packages
  • a few different features were added during the year
  • and finally a couple of large projects migrated to Lerna-Lite during the past year:

in conclusion, Lerna-Lite has always been a great alternative to the original Lerna project. Most users like it for its modular approach (install only what you want) which is a huge distinction compared to the original (all-in-one) Lerna. There's also a few unique features that were added over the past few years in Lerna-Lite which Lerna doesn't have... there's many more reasons to use Lerna-Lite, you can read more about the subject on the main readme page (About Lerna-Lite)

That's it for now, thanks ⭐ 🚀

A big Thanks to all my Sponsors and Happy Coding 🐉

... (truncated)

Changelog

Sourced from @​lerna-lite/cli's changelog.

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

  • use native import.meta.dirname/filename (#1302)
  • build: use module --nodenext instead of bundler/esnext (#1301)
  • bump NodeJS requirement to Node v22.17 (#1299)
  • remove deprecated code --remove-package-fields (#1295)

Code Refactoring

Commits
  • 75dc11d chore(release): publish new version v5.0.0
  • 9a4f686 refactor!: use native import.meta.dirname/filename (#1302)
  • 14990ba refactor(build)!: use module --nodenext instead of bundler/esnext (#1301)
  • 91ca715 refactor!: bump NodeJS requirement to Node v22.17 (#1299)
  • 072c863 refactor!: remove deprecated code --remove-package-fields (#1295)
  • See full diff in compare view

Updates @lerna-lite/publish from 4.11.5 to 5.0.0

Release notes

Sourced from @​lerna-lite/publish's releases.

v5.0.0

5.0.0 (2026-04-02)

📢 Major 5.0 Release ⚠️

NodeJS 20 will be EOL by the end of April, so it's time for another Lerna-Lite major release and a Node requirement bump. Below is the list of breaking changes:

  1. removed the Conventional Changelog legacy API that allowed reading config from external file (it was deprecated years ago). It is now accepting only configuration through lerna.json file (when using custom changelogPreset).
    • for users of Commitlint and/or conventional-changelog-conventionalcommits, please make sure to update to their latest versions to avoid any problems
  2. last year lerna publish --remove-package-fields option was renamed and its old name deprecated, it is now officially removed. This mean that only the new option name is valid, so make sure to use:
  3. NodeJS requirement is now ^22.17.0 || >=24.0.0 which is allowing the use of even more native NodeJS code (e.g. util.styleText() and import.meta.dirname)

to see the complete list of all previous migrations, take a look at: all Release Migrations

New Requirements

  • drop Node 20 support, which will be EOL in April, we now require Node ^22.17.0 || >=24.0.0

Some Project Statistics

What happened since the last major version?

  • download nearly doubled to ~2M/year (in comparison Lerna also grew from 62M to 84M/year)
    • Lerna-Lite grew by almost 100% while Lerna grew by 35%... so Lerna-Lite is small, but growing steadily
  • OIDC trusted publishing was added just a few months ago (which Lerna-Lite itself uses to publish)
  • extended Catalog support, pnpm catalog was added last year, and more recently support for all 3 package managers (pnpm, Yarn and even Bun)
    • for reference Lerna does not support Catalog
  • also following e18e initiative, more focus was put on using even more native code. Allowing Lerna-Lite install size to keep decreasing, for example the publish command (which includes version) install size is now at 33Mb/257 packages (ref node-module-inspector)
    • in comparison v1.0 was at 62Mb/454 packages, that's nearly 50% decrease in size and external packages.
    • also in comparison, the original Lerna (all-in-one tool) pulls in 138Mb/499 packages
  • a few different features were added during the year
  • and finally a couple of large projects migrated to Lerna-Lite during the past year:

in conclusion, Lerna-Lite has always been a great alternative to the original Lerna project. Most users like it for its modular approach (install only what you want) which is a huge distinction compared to the original (all-in-one) Lerna. There's also a few unique features that were added over the past few years in Lerna-Lite which Lerna doesn't have... there's many more reasons to use Lerna-Lite, you can read more about the subject on the main readme page (About Lerna-Lite)

That's it for now, thanks ⭐ 🚀

A big Thanks to all my Sponsors and Happy Coding 🐉

... (truncated)

Changelog

Sourced from @​lerna-lite/publish's changelog.

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

  • use native import.meta.dirname/filename (#1302)
  • bump NodeJS requirement to Node v22.17 (#1299)
  • remove deprecated code --remove-package-fields (#1295)
  • core: replace tinyrainbow with native util.styleText() (#1293)

Bug Fixes

Code Refactoring

Commits
  • 75dc11d chore(release): publish new version v5.0.0
  • 530905f fix(deps): update all non-major dependencies (#1289)
  • 9a4f686 refactor!: use native import.meta.dirname/filename (#1302)
  • 91ca715 refactor!: bump NodeJS requirement to Node v22.17 (#1299)
  • 072c863 refactor!: remove deprecated code --remove-package-fields (#1295)
  • 1d36057 refactor(core)!: replace tinyrainbow with native util.styleText() (#1293)
  • d5faf1b fix(publish): show output from publish and postpublish lifecycle scripts (#1287)
  • c729652 fix(npmlog): replace has-unicode with internal implementation (#1284)
  • ae8867d fix(publish): replace byte-size with internal implementation (#1283)
  • See full diff in compare view

Updates @lerna-lite/run from 4.11.5 to 5.0.0

Release notes

Sourced from @​lerna-lite/run's releases.

v5.0.0

5.0.0 (2026-04-02)

📢 Major 5.0 Release ⚠️

NodeJS 20 will be EOL by the end of April, so it's time for another Lerna-Lite major release and a Node requirement bump. Below is the list of breaking changes:

  1. removed the Conventional Changelog legacy API that allowed reading config from external file (it was deprecated years ago). It is now accepting only configuration through lerna.json file (when using custom changelogPreset).
    • for users of Commitlint and/or conventional-changelog-conventionalcommits, please make sure to update to their latest versions to avoid any problems
  2. last year lerna publish --remove-package-fields option was renamed and its old name deprecated, it is now officially removed. This mean that only the new option name is valid, so make sure to use:
  3. NodeJS requirement is now ^22.17.0 || >=24.0.0 which is allowing the use of even more native NodeJS code (e.g. util.styleText() and import.meta.dirname)

to see the complete list of all previous migrations, take a look at: all Release Migrations

New Requirements

  • drop Node 20 support, which will be EOL in April, we now require Node ^22.17.0 || >=24.0.0

Some Project Statistics

What happened since the last major version?

  • download nearly doubled to ~2M/year (in comparison Lerna also grew from 62M to 84M/year)
    • Lerna-Lite grew by almost 100% while Lerna grew by 35%... so Lerna-Lite is small, but growing steadily
  • OIDC trusted publishing was added just a few months ago (which Lerna-Lite itself uses to publish)
  • extended Catalog support, pnpm catalog was added last year, and more recently support for all 3 package managers (pnpm, Yarn and even Bun)
    • for reference Lerna does not support Catalog
  • also following e18e initiative, more focus was put on using even more native code. Allowing Lerna-Lite install size to keep decreasing, for example the publish command (which includes version) install size is now at 33Mb/257 packages (ref node-module-inspector)
    • in comparison v1.0 was at 62Mb/454 packages, that's nearly 50% decrease in size and external packages.
    • also in comparison, the original Lerna (all-in-one tool) pulls in 138Mb/499 packages
  • a few different features were added during the year
  • and finally a couple of large projects migrated to Lerna-Lite during the past year:

in conclusion, Lerna-Lite has always been a great alternative to the original Lerna project. Most users like it for its modular approach (install only what you want) which is a huge distinction compared to the original (all-in-one) Lerna. There's also a few unique features that were added over the past few years in Lerna-Lite which Lerna doesn't have... there's many more reasons to use Lerna-Lite, you can read more about the subject on the main readme page (About Lerna-Lite)

That's it for now, thanks ⭐ 🚀

A big Thanks to all my Sponsors and Happy Coding 🐉

... (truncated)

Changelog

Sourced from @​lerna-lite/run's changelog.

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

  • use native import.meta.dirname/filename (#1302)
  • bump NodeJS requirement to Node v22.17 (#1299)
  • core: replace tinyrainbow with native util.styleText() (#1293)

Code Refactoring

Commits
  • 75dc11d chore(release): publish new version v5.0.0
  • 9a4f686 refactor!: use native import.meta.dirname/filename (#1302)
  • 91ca715 refactor!: bump NodeJS requirement to Node v22.17 (#1299)
  • 1d36057 refactor(core)!: replace tinyrainbow with native util.styleText() (#1293)
  • See full diff in compare view

Updates @lerna-lite/version from 4.11.5 to 5.0.0

Release notes

Sourced from @​lerna-lite/version's releases.

v5.0.0

5.0.0 (2026-04-02)

📢 Major 5.0 Release ⚠️

NodeJS 20 will be EOL by the end of April, so it's time for another Lerna-Lite major release and a Node requirement bump. Below is the list of breaking changes:

  1. removed the Conventional Changelog legacy API that allowed reading config from external file (it was deprecated years ago). It is now accepting only configuration through lerna.json file (when using custom changelogPreset).
    • for users of Commitlint and/or conventional-changelog-conventionalcommits, please make sure to update to their latest versions to avoid any problems
  2. last year lerna publish --remove-package-fields option was renamed and its old name deprecated, it is now officially removed. This mean that only the new option name is valid, so make sure to use:
  3. NodeJS requirement is now ^22.17.0 || >=24.0.0 which is allowing the use of even more native NodeJS code (e.g. util.styleText() and import.meta.dirname)

to see the complete list of all previous migrations, take a look at: all Release Migrations

New Requirements

  • drop Node 20 support, which will be EOL in April, we now require Node ^22.17.0 || >=24.0.0

Some Project Statistics

What happened since the last major version?

  • download nearly doubled to ~2M/year (in comparison Lerna also grew from 62M to 84M/year)
    • Lerna-Lite grew by almost 100% while Lerna grew by 35%... so Lerna-Lite is small, but growing steadily
  • OIDC trusted publishing was added just a few months ago (which Lerna-Lite itself uses to publish)
  • extended Catalog support, pnpm catalog was added last year, and more recently support for all 3 package managers (pnpm, Yarn and even Bun)
    • for reference Lerna does not support Catalog
  • also following e18e initiative, more focus was put on using even more native code. Allowing Lerna-Lite install size to keep decreasing, for example the publish command (which includes version) install size is now at 33Mb/257 packages (ref node-module-inspector)
    • in comparison v1.0 was at 62Mb/454 packages, that's nearly 50% decrease in size and external packages.
    • also in comparison, the original Lerna (all-in-one tool) pulls in 138Mb/499 packages
  • a few different features were added during the year
  • and finally a couple of large projects migrated to Lerna-Lite during the past year:

in conclusion, Lerna-Lite has always been a great alternative to the original Lerna project. Most users like it for its modular approach (install only what you want) which is a huge distinction compared to the original (all-in-one) Lerna. There's also a few unique features that were added over the past few years in Lerna-Lite which Lerna doesn't have... there's many more reasons to use Lerna-Lite, you can read more about the subject on the main readme page (About Lerna-Lite)

That's it for now, thanks ⭐ 🚀

A big Thanks to all my Sponsors and Happy Coding 🐉

... (truncated)

Changelog

Sourced from @​lerna-lite/version's changelog.

5.0.0 (2026-04-02)

[!NOTE] Please visit the v5.0.0 release for more details about the migration.

⚠ BREAKING CHANGES

  • use native import.meta.dirname/filename (#1302)
  • bump NodeJS requirement to Node v22.17 (#1299)
  • drop conventional-changelog legacy API for local preset file (#1296)
  • core: replace tinyrainbow with native util.styleText() (#1293)

Bug Fixes

Code Refactoring

Commits
  • 75dc11d chore(release): publish new version v5.0.0
  • ee684a7 fix(deps): update conventional-changelog packages (#1304)
  • 9a4f686 refactor!: use native import.meta.dirname/filename (#1302)
  • 4cfddb8 chore: ignore line for text coverage
  • 91ca715 refactor!: bump NodeJS requirement to Node v22.17 (#1299)
  • c299059 refactor!: drop conventional-changelog legacy API for local preset file (#1296)
  • 1d36057 refactor(core)!: replace tinyrainbow with native util.styleText() (#1293)
  • 27fa3a0 docs: remove note about commitlint conventional changelog overrides
  • See full diff in compare view

Updates conventional-changelog-conventionalcommits to 9.3.1

Release notes

Sourced from conventional-changelog-conventionalcommits's releases.

conventional-changelog-conventionalcommits: v9.3.1

Bug Fixes

  • skip mention linkification inside inline code (#1444) (c598bf1)
Changelog

Sourced from conventional-changelog-conventionalcommits's changelog.

9.3.1 (2026-03-29)

Bug Fixes

  • skip mention linkification inside inline code (#1444) (c598bf1)

9.3.0 (2026-03-04)

Features

9.2.0 (2026-03-01)

Features

9.1.0 (2025-07-10)

Features

9.0.0 (2025-05-19)

⚠ BREAKING CHANGES

  • bang notes handling is removed, it already being handled in conventional-commits-parser

Features

  • bang notes handling is removed (#1355) (5150f47)
  • scope, scopeOnly and bumpStrict options were added (e2973e2)

8.0.0 (2024-04-26)

⚠ BREAKING CHANGES

  • Node >= 18 is required
  • conventional-recommended-bump: new Bumper exported class (#1218)
  • cleanup presets interface (#1215)
  • conventional-changelog-writer: rewrite to TypeScript (#1150)
  • Now all packages, except gulp-conventional-changelog, are ESM-only.

Features

... (truncated)

Commits
  • 08f44dc chore(release): monorepo release (#1442)
  • c598bf1 fix(conventional-changelog-angular,conventional-changelog-conventionalcommits...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the npm-dependencies group with 5 updates
862a86f 
Updates the requirements on [@lerna-lite/cli](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/cli), [@lerna-lite/publish](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/publish), [@lerna-lite/run](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/run), [@lerna-lite/version](https://github.com/lerna-lite/lerna-lite/tree/HEAD/packages/version) and [conventional-changelog-conventionalcommits](https://github.com/conventional-changelog/conventional-changelog/tree/HEAD/packages/conventional-changelog-conventionalcommits) to permit the latest version.

Updates `@lerna-lite/cli` from 4.11.5 to 5.0.0
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.0.0/packages/cli)

Updates `@lerna-lite/publish` from 4.11.5 to 5.0.0
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/publish/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.0.0/packages/publish)

Updates `@lerna-lite/run` from 4.11.5 to 5.0.0
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/run/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.0.0/packages/run)

Updates `@lerna-lite/version` from 4.11.5 to 5.0.0
- [Release notes](https://github.com/lerna-lite/lerna-lite/releases)
- [Changelog](https://github.com/lerna-lite/lerna-lite/blob/main/packages/version/CHANGELOG.md)
- [Commits](https://github.com/lerna-lite/lerna-lite/commits/v5.0.0/packages/version)

Updates `conventional-changelog-conventionalcommits` to 9.3.1
- [Release notes](https://github.com/conventional-changelog/conventional-changelog/releases)
- [Changelog](https://github.com/conventional-changelog/conventional-changelog/blob/master/packages/conventional-changelog-conventionalcommits/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/conventional-changelog/commits/conventional-changelog-conventionalcommits-v9.3.1/packages/conventional-changelog-conventionalcommits)

---
updated-dependencies:
- dependency-name: "@lerna-lite/cli"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@lerna-lite/publish"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@lerna-lite/run"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@lerna-lite/version"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: conventional-changelog-conventionalcommits
  dependency-version: 9.3.1
  dependency-type: direct:development
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added ci Work that improves the continuous integration. dependencies Change in project dependencies. maintenance Generic maintenance tasks. major This PR causes a major bump in the version number. priority-low Nice addition, maybe... someday... labels Apr 2, 2026
@dependabot
dependabot Bot requested a review from alimd as a code owner April 2, 2026 04:38
@dependabot dependabot Bot added major This PR causes a major bump in the version number. priority-low Nice addition, maybe... someday... maintenance Generic maintenance tasks. ci Work that improves the continuous integration. dependencies Change in project dependencies. labels Apr 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 9, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-ec15869941 branch April 9, 2026 00:33
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@alimd alimd Awaiting requested review from alimd alimd is a code owner

Assignees

No one assigned

Labels

ci Work that improves the continuous integration. dependencies Change in project dependencies. maintenance Generic maintenance tasks. major This PR causes a major bump in the version number. priority-low Nice addition, maybe... someday...

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants