Skip to content

build(deps): bump ora from 9.0.0 to 9.4.0#7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ora-9.4.0
Closed

build(deps): bump ora from 9.0.0 to 9.4.0#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ora-9.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown

Bumps ora from 9.0.0 to 9.4.0.

Release notes

Sourced from ora's releases.

v9.4.0

  • Add successSymbol and failSymbol options to oraPromise 3d2e0a9

sindresorhus/ora@v9.3.0...v9.4.0

v9.3.0

  • Reduce flicker in rendering 2ab4f76

sindresorhus/ora@v9.2.0...v9.3.0

v9.2.0

  • Update stdin-discarder dependency (#251) 020eaba

sindresorhus/ora@v9.1.0...v9.2.0

v9.1.0

  • Support external writes to stream (console.log) while spinning d2b543a
  • Replace strip-ansi dependency with native stripVTControlCharacters (#249) 68d50e5

sindresorhus/ora@v9.0.0...v9.1.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 3, 2026
@socket-security

socket-security Bot commented Jun 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedora@​9.0.0 ⏵ 9.4.099 +1100100 +185100

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ora-9.4.0 branch 4 times, most recently from 214f9d7 to 74389b9 Compare June 4, 2026 01:06
Bumps [ora](https://github.com/sindresorhus/ora) from 9.0.0 to 9.4.0.
- [Release notes](https://github.com/sindresorhus/ora/releases)
- [Commits](sindresorhus/ora@v9.0.0...v9.4.0)

---
updated-dependencies:
- dependency-name: ora
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ora-9.4.0 branch from 74389b9 to 16be6e7 Compare June 4, 2026 06:48
zacharyr0th added a commit that referenced this pull request Jun 11, 2026
* build(deps): apply pending dependabot bumps in one pass

Root: chalk 5.6.2, ora 9.4.0, commander 15.0.0, inquirer 14.0.2,
eslint 10.4.1 + @eslint/js 10.0.1 (with { cause } added to three
re-thrown errors for the new preserve-caught-error rule).
Site: react/react-dom/@types/react 19.2.7, typescript 6.0.3.
Actions: bump pinned SHAs for actions/checkout (v6.0.3) and
actions/setup-node (v6.4.0).

Covers dependabot PRs #4, #5, #6, #7, #8, #10, #12, #13, #15.
Skipped: tailwindcss 4 (#11, needs a real v4 migration) and site
eslint 10 (#14, eslint-config-next incompatible).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: update site bun.lock instead of adding a package-lock.json

Site CI installs with bun --frozen-lockfile; the npm lockfile was
never used.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: admin-raintree <277948009+admin-raintree@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
@zacharyr0th

Copy link
Copy Markdown
Contributor

Superseded by #23, which applied this bump (merged to main as 5a874c5).

@dependabot @github

dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/ora-9.4.0 branch June 11, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant