Skip to content

chore(deps-dev): bump @metamask/auto-changelog from 5.3.2 to 6.1.0#4

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/metamask/auto-changelog-6.1.0
Open

chore(deps-dev): bump @metamask/auto-changelog from 5.3.2 to 6.1.0#4
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/metamask/auto-changelog-6.1.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Bumps @metamask/auto-changelog from 5.3.2 to 6.1.0.

Release notes

Sourced from @​metamask/auto-changelog's releases.

6.1.0

Added

  • Add --formatter option and support Oxfmt for formatting changelog (#283, #285)
    • The oxfmt and prettier formatters are now available through the API as well.

6.0.0

Added

  • Add --checkDeps flag to validate command for dependency bump changelog validation (#267)
    • Compares dependencies and peerDependencies in package.json between git refs to detect version changes
    • With --fix --currentPr <number>, automatically adds missing changelog entries
    • Additional CLI options: --fromRef, --toRef, --remote, --baseBranch
  • Add dependencyBump support to Changelog class with addChange() and new updateChange() method (#267)
  • Detect Bump, Update, and Upgrade forms of dependency bump entries when parsing changelogs (#267)
  • Export getDependencyChanges, BaseRefNotFoundError, DependencyBump, DependencyCheckResult, and MissingDependencyEntriesError from package entry point (#267)

Changed

  • BREAKING: Throw error if any release section has no changelog entries (#275)
Changelog

Sourced from @​metamask/auto-changelog's changelog.

[6.1.0]

Added

  • Add --formatter option and support Oxfmt for formatting changelog (#283, #285)
    • The oxfmt and prettier formatters are now available through the API as well.

[6.0.0]

Added

  • Add --checkDeps flag to validate command for dependency bump changelog validation (#267)
    • Compares dependencies and peerDependencies in package.json between git refs to detect version changes
    • With --fix --currentPr <number>, automatically adds missing changelog entries
    • Additional CLI options: --fromRef, --toRef, --remote, --baseBranch
  • Add dependencyBump support to Changelog class with addChange() and new updateChange() method (#267)
  • Detect Bump, Update, and Upgrade forms of dependency bump entries when parsing changelogs (#267)
  • Export getDependencyChanges, BaseRefNotFoundError, DependencyBump, DependencyCheckResult, and MissingDependencyEntriesError from package entry point (#267)

Changed

  • BREAKING: Throw error if any release section has no changelog entries (#275)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 29, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 29, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​auto-changelog@​5.3.2 ⏵ 6.1.096 -1100100 +194 +1100

View full report

@github-advanced-security
Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/main/metamask/auto-changelog-6.1.0 branch from 6cd18cf to f4a9de4 Compare April 29, 2026 16:14
@dependabot dependabot Bot requested a review from a team as a code owner April 29, 2026 16:14
Bumps [@metamask/auto-changelog](https://github.com/MetaMask/auto-changelog) from 5.3.2 to 6.1.0.
- [Release notes](https://github.com/MetaMask/auto-changelog/releases)
- [Changelog](https://github.com/MetaMask/auto-changelog/blob/main/CHANGELOG.md)
- [Commits](MetaMask/auto-changelog@v5.3.2...v6.1.0)

---
updated-dependencies:
- dependency-name: "@metamask/auto-changelog"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/main/metamask/auto-changelog-6.1.0 branch from f4a9de4 to c705acf Compare May 6, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant