Bump npm-check-updates from 18.3.1 to 21.0.3 #54

Open

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/npm-check-updates-21.0.3 into main

dependabot[bot] commented

2026-04-21 20:06:30 +00:00

(Migrated from github.com)

Bumps npm-check-updates from 18.3.1 to 21.0.3.

Release notes

Sourced from npm-check-updates's releases.

v21.0.3

What's Changed

fix: chmod build/cli.js executable after vite build by @raineorshine in raineorshine/npm-check-updates#1678

fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes #1674) by @onemen in raineorshine/npm-check-updates#1676

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3

v21.0.2

What's Changed

fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in raineorshine/npm-check-updates#1675

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2

v21.0.1

What's Changed

fix: seeing catalog when inside workspaces by @Zamiell in raineorshine/npm-check-updates#1656

Bump @types/bun from 1.3.11 to 1.3.12 by @dependabot[bot] in raineorshine/npm-check-updates#1663

Bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in raineorshine/npm-check-updates#1664

Bump @typescript-eslint/parser from 8.58.1 to 8.58.2 by @dependabot[bot] in raineorshine/npm-check-updates#1665

Bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in raineorshine/npm-check-updates#1667

Bump verdaccio from 6.4.0 to 6.5.0 by @dependabot[bot] in raineorshine/npm-check-updates#1669

Bump sinon from 21.0.3 to 21.1.2 by @dependabot[bot] in raineorshine/npm-check-updates#1668

Skip CI on PRs with no file changes by @Copilot in raineorshine/npm-check-updates#1672

Bump @typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 by @dependabot[bot] in raineorshine/npm-check-updates#1666

Fix wrong message when all packages are within cooldown window by @Copilot in raineorshine/npm-check-updates#1671

Full Changelog: https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1

v21.0.0

⚠️ Breaking Changes

This is a major breaking change with significant architectural updates.

ESM Migration & Module System

Pure ESM: Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.

Import Syntax: Programmatic usage now requires named imports or namespace imports.

Old: import ncu from 'npm-check-updates'

New: import * as ncu from 'npm-check-updates' or import { run } from 'npm-check-updates'

Node.js Requirements: Now requires ^20.19.0 || ^22.12.0 || >=24.0.0. This is required for native require(esm) support and the Rolldown engine.

npm Requirements: Minimum version increased to >=10.0.0.

Configuration Files (.ncurc.js)

Files named .ncurc.js that use module.exports will now fail in projects that are not "type": "module".

Fix: Rename these files to .ncurc.cjs or convert them to use export default.

... (truncated)

Commits

5cde018 21.0.3
5e41802 fix: migrate from rc-config-loader to cosmiconfig for ESM config support (clo...
b9a344d fix: chmod build/cli.js executable after vite build (#1678)
e8d6477 21.0.2
c0d6cb2 fix: skip intersects() for non-semver specs like catalog: in peer dep checks ...
3878bc7 21.0.1
67216d1 Fix wrong message when all packages are within cooldown window (#1671)
52e4653 Bump @typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 (#1666)
68bea41 Skip CI on PRs with no file changes (#1672)
eef7e4d Bump sinon from 21.0.3 to 21.1.2 (#1668)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [npm-check-updates](https://github.com/raineorshine/npm-check-updates) from 18.3.1 to 21.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raineorshine/npm-check-updates/releases">npm-check-updates's releases</a>.</em></p> <blockquote> <h2>v21.0.3</h2> <h2>What's Changed</h2> <ul> <li>fix: chmod build/cli.js executable after vite build by <a href="https://github.com/raineorshine"><code>@raineorshine</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1678">raineorshine/npm-check-updates#1678</a></li> <li>fix: migrate from rc-config-loader to cosmiconfig for ESM config support (closes <a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1674">#1674</a>) by <a href="https://github.com/onemen"><code>@onemen</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1676">raineorshine/npm-check-updates#1676</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3">https://github.com/raineorshine/npm-check-updates/compare/v21.0.2...v21.0.3</a></p> <h2>v21.0.2</h2> <h2>What's Changed</h2> <ul> <li>fix: skip intersects() for non-semver specs like catalog: in peer dep checks by <a href="https://github.com/terminalchai"><code>@terminalchai</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1675">raineorshine/npm-check-updates#1675</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2">https://github.com/raineorshine/npm-check-updates/compare/v21.0.1...v21.0.2</a></p> <h2>v21.0.1</h2> <h2>What's Changed</h2> <ul> <li>fix: seeing catalog when inside workspaces by <a href="https://github.com/Zamiell"><code>@Zamiell</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1656">raineorshine/npm-check-updates#1656</a></li> <li>Bump <code>@types/bun</code> from 1.3.11 to 1.3.12 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1663">raineorshine/npm-check-updates#1663</a></li> <li>Bump globals from 17.4.0 to 17.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1664">raineorshine/npm-check-updates#1664</a></li> <li>Bump <code>@typescript-eslint/parser</code> from 8.58.1 to 8.58.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1665">raineorshine/npm-check-updates#1665</a></li> <li>Bump prettier from 3.8.1 to 3.8.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1667">raineorshine/npm-check-updates#1667</a></li> <li>Bump verdaccio from 6.4.0 to 6.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1669">raineorshine/npm-check-updates#1669</a></li> <li>Bump sinon from 21.0.3 to 21.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1668">raineorshine/npm-check-updates#1668</a></li> <li>Skip CI on PRs with no file changes by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1672">raineorshine/npm-check-updates#1672</a></li> <li>Bump <code>@typescript-eslint/eslint-plugin</code> from 8.58.1 to 8.58.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1666">raineorshine/npm-check-updates#1666</a></li> <li>Fix wrong message when all packages are within cooldown window by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/raineorshine/npm-check-updates/pull/1671">raineorshine/npm-check-updates#1671</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1">https://github.com/raineorshine/npm-check-updates/compare/v21.0.0...v21.0.1</a></p> <h2>v21.0.0</h2> <h3>⚠️ Breaking Changes</h3> <p>This is a <strong>major breaking change</strong> with significant architectural updates.</p> <h4>ESM Migration & Module System</h4> <ul> <li><strong>Pure ESM:</strong> Converted to pure ESM with dual-build support (ESM/CJS) via Vite 8.</li> <li><strong>Import Syntax:</strong> Programmatic usage now requires named imports or namespace imports. <ul> <li><strong>Old:</strong> <code>import ncu from 'npm-check-updates'</code></li> <li><strong>New:</strong> <code>import * as ncu from 'npm-check-updates'</code> or <code>import { run } from 'npm-check-updates'</code></li> </ul> </li> <li><strong>Node.js Requirements:</strong> Now requires <code>^20.19.0 || ^22.12.0 || >=24.0.0</code>. This is required for native <code>require(esm)</code> support and the Rolldown engine.</li> <li><strong>npm Requirements:</strong> Minimum version increased to <code>>=10.0.0</code>.</li> </ul> <h4>Configuration Files (<code>.ncurc.js</code>)</h4> <ul> <li>Files named <code>.ncurc.js</code> that use <code>module.exports</code> will now fail in projects that are not <code>"type": "module"</code>.</li> <li><strong>Fix:</strong> Rename these files to <code>.ncurc.cjs</code> or convert them to use <code>export default</code>.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/5cde018b1a5af0ba86bb9906ea8c690752f33247"><code>5cde018</code></a> 21.0.3</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/5e41802ac35a9b4e95a5d74049dd220772c7d688"><code>5e41802</code></a> fix: migrate from rc-config-loader to cosmiconfig for ESM config support (clo...</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/b9a344de20cd5f3cf4f473338cd1677d1b646443"><code>b9a344d</code></a> fix: chmod build/cli.js executable after vite build (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1678">#1678</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/e8d64772597771628b561b2ce093839b79a822e5"><code>e8d6477</code></a> 21.0.2</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/c0d6cb2d814e2d5171c9b1c646bb0c7e0a50b835"><code>c0d6cb2</code></a> fix: skip intersects() for non-semver specs like catalog: in peer dep checks ...</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/3878bc700d922efcb09ad5e4435052e32c049515"><code>3878bc7</code></a> 21.0.1</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/67216d13fcd0f893bcc6392902611cf38936f311"><code>67216d1</code></a> Fix wrong message when all packages are within cooldown window (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1671">#1671</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/52e4653670ed3e11a05e9ff51445958351240283"><code>52e4653</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.58.1 to 8.58.2 (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1666">#1666</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/68bea41aa075832c4679117f983102872481c7f0"><code>68bea41</code></a> Skip CI on PRs with no file changes (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1672">#1672</a>)</li> <li><a href="https://github.com/raineorshine/npm-check-updates/commit/eef7e4dd0baef0622ff7958bd0c785f3a3e99c8a"><code>eef7e4d</code></a> Bump sinon from 21.0.3 to 21.1.2 (<a href="https://redirect.github.com/raineorshine/npm-check-updates/issues/1668">#1668</a>)</li> <li>Additional commits viewable in <a href="https://github.com/raineorshine/npm-check-updates/compare/v18.3.1...v21.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=npm-check-updates&package-manager=npm_and_yarn&previous-version=18.3.1&new-version=21.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/npm_and_yarn/npm-check-updates-21.0.3:dependabot/npm_and_yarn/npm-check-updates-21.0.3

git switch dependabot/npm_and_yarn/npm-check-updates-21.0.3

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff dependabot/npm_and_yarn/npm-check-updates-21.0.3

git switch dependabot/npm_and_yarn/npm-check-updates-21.0.3

git rebase main

git switch main

git merge --ff-only dependabot/npm_and_yarn/npm-check-updates-21.0.3

git switch dependabot/npm_and_yarn/npm-check-updates-21.0.3

git rebase main

git switch main

git merge --no-ff dependabot/npm_and_yarn/npm-check-updates-21.0.3

git switch main

git merge --squash dependabot/npm_and_yarn/npm-check-updates-21.0.3