Skip to content

chore(deps-dev): bump @yao-pkg/pkg from 6.12.0 to 6.21.0 - #426

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/yao-pkg/pkg-6.21.0
Closed

chore(deps-dev): bump @yao-pkg/pkg from 6.12.0 to 6.21.0#426
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/yao-pkg/pkg-6.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps @yao-pkg/pkg from 6.12.0 to 6.21.0.

Release notes

Sourced from @​yao-pkg/pkg's releases.

Release 6.21.0

6.21.0 (2026-06-30)

Features

Bug Fixes

  • detector: pick up six more silent-drop shapes (re-exports, new URL, multi-arg path.join, path.resolve(__dirname,…), createRequire aliases, import.meta.resolve) (#272) (ea66111), closes #269
  • sea: set process.pkg in worker threads (#270) (376e2a4)

Test added

  • fetch-all: track supported node majors, drop node20 (#286) (1b0002f)
  • split unit tests into node:test suite, add c8 coverage (#271) (26f10a3), closes #267 #267

Chores

  • add worktrees to gitignore (d585e27)
  • deps: bump esbuild to >=0.28.1 to fix security vuln (#282) (#284) (68f41d5)

Release 6.19.0

6.19.0 (2026-04-24)

Features

  • config: accept CLI-only build flags in pkg config (#263) (a8e91df)

Bug Fixes

  • deps: update @​roberts_lando/vfs to version 0.3.3 (#266) (d155e24)
  • detector: stop silent dependency drops in SEA mode (ESM parse, dynamic import, decorators) (#268) (81c6c88)
  • sea: silence benign LIEF warnings during postject injection (#265) (974df53)

Release 6.18.2

6.18.2 (2026-04-22)

Bug Fixes

  • sea: match blob generator to target Node version (#247) (ad2a336), closes #236
  • sea: strip trailing slashes in manifest key lookup (#261) (af0c086)

Release 6.18.1

6.18.1 (2026-04-21)

Bug Fixes

... (truncated)

Changelog

Sourced from @​yao-pkg/pkg's changelog.

6.21.0 (2026-06-30)

Features

Bug Fixes

  • detector: pick up six more silent-drop shapes (re-exports, new URL, multi-arg path.join, path.resolve(__dirname,…), createRequire aliases, import.meta.resolve) (#272) (ea66111), closes #269
  • sea: set process.pkg in worker threads (#270) (376e2a4)

Test added

  • fetch-all: track supported node majors, drop node20 (#286) (1b0002f)
  • split unit tests into node:test suite, add c8 coverage (#271) (26f10a3), closes #267 #267

Chores

  • add worktrees to gitignore (d585e27)
  • deps: bump esbuild to >=0.28.1 to fix security vuln (#282) (#284) (68f41d5)

6.19.0 (2026-04-24)

Features

  • config: accept CLI-only build flags in pkg config (#263) (a8e91df)

Bug Fixes

  • deps: update @​roberts_lando/vfs to version 0.3.3 (#266) (d155e24)
  • detector: stop silent dependency drops in SEA mode (ESM parse, dynamic import, decorators) (#268) (81c6c88)
  • sea: silence benign LIEF warnings during postject injection (#265) (974df53)

6.18.2 (2026-04-22)

Bug Fixes

6.18.1 (2026-04-21)

Bug Fixes

  • pkg: ship all .d.ts files in npm package (#258) (7e10ce2)

6.18.0 (2026-04-20)

... (truncated)

Commits
  • 5e648f7 Release 6.21.0
  • 3667383 feat: build hooks (preBuild, postBuild, per-file transform) (#273)
  • 3520d26 feat: bump fetch 3.6.4 with nodejs 22.23.1, 24.18.0, 26.4.0 (#288)
  • ea66111 fix(detector): pick up six more silent-drop shapes (re-exports, new URL, mult...
  • 1b0002f test(fetch-all): track supported node majors, drop node20 (#286)
  • d585e27 chore: add worktrees to gitignore
  • 68f41d5 chore(deps): bump esbuild to >=0.28.1 to fix security vuln (#282) (#284)
  • 546bbf0 feat: bump fetch 3.6.3 with node 22.22.3, 24.15.0 and 26.2.0 (#277)
  • 26f10a3 test: split unit tests into node:test suite, add c8 coverage (#271)
  • 376e2a4 fix(sea): set process.pkg in worker threads (#270)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​yao-pkg/pkg since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@yao-pkg/pkg](https://github.com/yao-pkg/pkg) from 6.12.0 to 6.21.0.
- [Release notes](https://github.com/yao-pkg/pkg/releases)
- [Changelog](https://github.com/yao-pkg/pkg/blob/main/CHANGELOG.md)
- [Commits](yao-pkg/pkg@v6.12.0...v6.21.0)

---
updated-dependencies:
- dependency-name: "@yao-pkg/pkg"
  dependency-version: 6.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 30, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #430.

@dependabot dependabot Bot closed this Aug 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/yao-pkg/pkg-6.21.0 branch August 3, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants