Skip to content

Bump semver and johnny-five#4

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-8bb347c89f
Open

Bump semver and johnny-five#4
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-8bb347c89f

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 5, 2026

Bumps semver to 5.7.2 and updates ancestor dependency johnny-five. These dependencies need to be updated together.

Updates semver from 5.3.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates johnny-five from 0.11.7 to 2.1.0

Release notes

Sourced from johnny-five's releases.

v2.1.0

Commit Message/Description
a628ad9e 2.1.0
4c5cbb14 Update master => main
538b94ab fix: Thermometer extends Withinable, not Emitter
6b2ca0df Add EventEmitter to test/.jshintrc
d7b2b45f CI: remove "npm install -g npm@3"
f24969a6 Dependencies: grunt@1.4.1, grunt-cli@1.4.3
460179bb Emitter: rename Suspendable -> Emitter and update everything to use our Emitter
8dc5651c Suspendable: adds class that provides a "pause" and "resume" method
206c0803 README: update travis domain
5e7d6531 README: regenerate examples and readme
94584f8c Remove outdated references
62ef6fbe CI: node 14 & 16
3a5b52d3 jshint: esversion 9
6cd4a198 package-lock.json: regenerate for lockfileVersion 2
c81033f4 Examples: more updates, 2
0aaa7ecc Examples: more updates
725784f3 README.md

v2.0.0

Commit Message/Description
deea77dc 2.0.0
5b6683e1 SIP: Remove old comment
5bbb4e4d Examples: regenerate for new changes
46ada0ff Switch to 'change' event
73be1ba5 The sweep:full event was ambiguous and has been removed
1de6b2b0 Fix small example bugs
5bc60069 Rick and I independently verified that this example doesn't work and shouldn't be a promoted example
232e4f5f Easing: revert to pre-ES2018 syntax.
6dd0a63c PORTED: "chore: Upgrade SerialPort to v8"
c8e9ba55 Fix mistakenly changed url
a9499fd7 Board: modernization pass
02593c4d Keypad: provide Node 10 friendly "array flatten" mechanism :eyeroll:
10c40953 CI: Drop Node.js <= 10
52244b8f Examples: regenerate
d243a8a8 Modernize library and test code, pt 2
0e735c46 {Accelero, Alti, Baro, Magneto, Gyro, Hyro, Thermo}meter: IMU or Multi -> SIP
a6c36cd6 IMU -> SIP
c5b2d634 Examples: updates
fbd7064d Modernize library and test code

v1.5.0

Commit Message/Description
b0b1a213 1.5.0
efcaabc8 Updated IO Plugins Link to the up to date one.

... (truncated)

Commits
  • a628ad9 2.1.0
  • 4c5cbb1 Update master => main
  • 538b94a fix: Thermometer extends Withinable, not Emitter
  • 6b2ca0d Add EventEmitter to test/.jshintrc
  • d7b2b45 CI: remove "npm install -g npm@3"
  • f24969a Dependencies: grunt@1.4.1, grunt-cli@1.4.3
  • 460179b Emitter: rename Suspendable -> Emitter and update everything to use our Emitter
  • 8dc5651 Suspendable: adds class that provides a "pause" and "resume" method
  • 206c080 README: update travis domain
  • 5e7d653 README: regenerate examples and readme
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [semver](https://github.com/npm/node-semver) to 5.7.2 and updates ancestor dependency [johnny-five](https://github.com/rwaldron/johnny-five). These dependencies need to be updated together.


Updates `semver` from 5.3.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.3.0...v5.7.2)

Updates `johnny-five` from 0.11.7 to 2.1.0
- [Release notes](https://github.com/rwaldron/johnny-five/releases)
- [Commits](rwaldron/johnny-five@v0.11.7...v2.1.0)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 5.7.2
  dependency-type: indirect
- dependency-name: johnny-five
  dependency-version: 2.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants