Bump hexo-generator-feed from 3.0.0 to 4.0.0#21
Conversation
Bumps [hexo-generator-feed](https://github.com/hexojs/hexo-generator-feed) from 3.0.0 to 4.0.0. - [Release notes](https://github.com/hexojs/hexo-generator-feed/releases) - [Commits](hexojs/hexo-generator-feed@3.0.0...v4.0.0) --- updated-dependencies: - dependency-name: hexo-generator-feed dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
There was a problem hiding this comment.
Pull request overview
Updates the Hexo site’s RSS/Atom feed generator dependency to a newer major version, refreshing the lockfile to include new transitive packages required by the updated feed generator.
Changes:
- Bump
hexo-generator-feedfrom^3.0.0to^4.0.0. - Update
package-lock.jsonto reflect the new dependency graph (addsfeedsmith,fast-xml-parser, etc.).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates the feed generator dependency version. |
| package-lock.json | Locks hexo-generator-feed@4.0.0 and introduces its new transitive dependencies and engine constraints. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
You can also share your feedback on Copilot code review. Take the survey.
| "hexo-generator-archive": "^2.0.0", | ||
| "hexo-generator-category": "^2.0.0", | ||
| "hexo-generator-feed": "^3.0.0", | ||
| "hexo-generator-feed": "^4.0.0", | ||
| "hexo-generator-index": "^3.0.0", | ||
| "hexo-generator-sitemap": "^3.0.1", |
dependabot
bot
deleted the
dependabot/npm_and_yarn/hexo-generator-feed-4.0.0
branch
There was a problem hiding this comment.
Pull request overview
Updates the Hexo feed generator dependency to the latest major version, refreshing the dependency graph for feed generation in this Hexo site.
Changes:
- Bump
hexo-generator-feedfrom^3.0.0to^4.0.0inpackage.json. - Update
package-lock.jsonto reflect the newhexo-generator-feed@4.0.0dependency tree (including new transitive deps and updated engine constraints).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Upgrades hexo-generator-feed to v4. |
| package-lock.json | Locks v4 plus new transitive dependencies and updated engines requirements. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
You can also share your feedback on Copilot code review. Take the survey.
| "hexo-generator-category": "^2.0.0", | ||
| "hexo-generator-feed": "^3.0.0", | ||
| "hexo-generator-feed": "^4.0.0", | ||
| "hexo-generator-index": "^3.0.0", |
Bumps hexo-generator-feed from 3.0.0 to 4.0.0.
Release notes
Sourced from hexo-generator-feed's releases.
... (truncated)
Commits
a5b470drelease: v4.0.0 (#257)eee0d04ci: verify tag version for trusted publishing (#258)7c457bechore(deps-dev): bump cheerio from 1.1.2 to 1.2.0 (#260)f5e903dchore(deps): bump fast-xml-parser (#261)452c660fix: Add language attribute for Atom feed generation (#262)8d2708dchore(deps): bump feedsmith from 2.8.0 to 2.9.0 (#259)003618aci: enable OIDC publishing (#255)b62cdf5chore(deps): update, version pinning and add lockfile (#256)72d08c3ci: add dependency-review action for vulnerability scanning (#254)799689achore: remove ESLint configuration files and update package.json for reposito...Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for hexo-generator-feed since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)