Skip to content

Conversation

@mend-for-github-com
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Aug 6, 2025

This PR contains the following updates:

Package Type Update Change
yeoman-generator (source) devDependencies major ^5.8.0 -> ^7.0.0

By merging this PR, the issue #1514 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
Medium Medium 5.3 CVE-2025-25288
Medium Medium 5.3 CVE-2025-25290

Release Notes

yeoman/generator (yeoman-generator)

v7.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: yeoman/generator@v7.4.0...v7.5.0

v7.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: yeoman/generator@v7.3.3...v7.4.0

v7.3.3

Compare Source

  • migrate to eslint 9 and test adjusts
  • permissive @types/node dependency.

v7.3.2

Compare Source

What's Changed

Full Changelog: yeoman/generator@v7.3.1...v7.3.2

v7.3.1

Compare Source

What's Changed

Full Changelog: yeoman/generator@v7.3.0...v7.3.1

v7.3.0

Compare Source

What's Changed

Full Changelog: yeoman/generator@v7.2.0...v7.3.0

v7.2.0

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

  • add pipeline() method and improve types a459b00

v7.0.0

Compare Source

  • bump required node versions ea4fd51
  • bump yeoman-environment to v4.0.0 e5eb6f6
  • fs.test.ts: Improve readbility, add types to fix TS problems (#​1482) 3dd4c2d

v6.0.1

Compare Source

  • set sourceRoot before help 16b16fb

v6.0.0

Compare Source

The yeoman-generator package now export a native ESM module. (Learn more about ESM)

Notable changes:

  • Convert to typescript
  • Drop node 12/14 support.
  • Requires yeoman-environment ^3.18.4.
  • Provides built-in types.
  • Uses new @yeoman/types for environment/generator interoperability. May conflict with @types/yeoman-* types.
  • Move skipParseOptions and customPriorities to features c12806a
  • Drop deprecated install (and not included by default) action 1a856b1
    Install action was not scalable. A separated task package can be considered at yeoman-api.
  • run-async is not provided anymore:
    Convert to Promises or use run-async v3:
import runAsync from 'run-async';
class Gen {
  asyncTaskWithCallback: runAsync(function() {
    const done = this.async();
    asyncMethod(done);
  }),
}
  • composeWith is async:
    • If used inside constructor, move it to _postConstruct or beforeQueue.
    • Due to complexity, prefer composeWith(generator, composeOptions signature.

v5.10.0

Compare Source

  • accept yeoman-environment v4 a8c526b

v5.9.0

Compare Source


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 6, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/yeoman-generator-7.x branch from f8ea75c to ac54d45 Compare August 7, 2025 04:49
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/yeoman-generator-7.x branch from ac54d45 to 4667f90 Compare August 15, 2025 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

repeat-contributor security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants