Skip to content

Update dependency snyk-nodejs-lockfile-parser to v2#136

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/snyk-nodejs-lockfile-parser-2.x
Open

Update dependency snyk-nodejs-lockfile-parser to v2#136
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/snyk-nodejs-lockfile-parser-2.x

Conversation

@renovate

@renovate renovate Bot commented May 2, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
snyk-nodejs-lockfile-parser ^1.44.0 → ^2.0.0 age confidence

Release Notes

snyk/nodejs-lockfile-parser (snyk-nodejs-lockfile-parser)

v2.10.0

Compare Source

Features
  • emit component-metadata labels for yarn v1 lockfiles [CMPA-611] (a1062a9)

v2.9.1

Compare Source

Bug Fixes
  • [CMPA-552] set bugs url and remove bin dir from files (b20023d)

v2.9.0

Compare Source

Bug Fixes
  • harden component-metadata distribution:url labels [CMPA-603] (cd13deb)
Features
  • emit component-metadata labels for npm lockfile v1 (legacy depTree) (cad891c)
  • report npm package hashes and distribution URLs as node labels (2571064)

v2.8.1

Compare Source

Bug Fixes
  • yarn-berry: key workspace prune by resolved name for npm aliases (8d05f54)
  • yarn-berry: prune workspace devDependencies from prod graph (08a9545)

v2.8.0

Compare Source

Bug Fixes
  • node 20 tests (fa8e2d3)
  • release context (cedbc96)
  • surface underlying npm lockfile JSON parse errors [OSM-3753] (663f2e5)
  • switch to OIDC auth publishing (a07b91c)
Features

v2.7.1

Compare Source

Bug Fixes
  • use actual package name from lockfile for aliased packages (9d8607d)

v2.7.0

Compare Source

Bug Fixes
  • [OSM-3591] handle patches applied as resolutions (cd4a5bc)
  • [OSM-3624] Support pnpm v6 lockfile for workspaces (b61e8dd)
  • bump tar to resolve vulns (6b4a56a)
Features
  • [OSM-3591] added support for versioned scoped resolutions (2c7574e)

v2.6.1

Compare Source

Bug Fixes
  • patch protocol URL decoding and npm alias package creation (3b99e1e)

v2.6.0

Compare Source

Features

v2.5.1

Compare Source

Bug Fixes
  • [OSM-3532] yarn scoped alias fix (025898c)

v2.5.0

Compare Source

Features
  • add npm scope [CSENG-94] (15bf216)

v2.4.5

Compare Source

Bug Fixes
  • yarn protocol in versions stripped (29a78db)

v2.4.4

Compare Source

Bug Fixes
  • nodejs transitive with a top level alias but transitive it not (9e53a97)

v2.4.3

Compare Source

Bug Fixes

v2.4.2

Compare Source

Bug Fixes
  • resolve OutOfSyncError for workspace nested dependencies (81f09a7)

v2.4.1

Compare Source

Bug Fixes
  • handle npm aliases in resolutions field (yarn) (ea206a9)

v2.4.0

Compare Source

Features
  • [OSM-3009] handle optional dependencies without separate package entries (9f37a3c)

v2.3.3

Compare Source

Bug Fixes
  • [OSM-3091] resolve nested dependencies in aliased packages with honorAliases (dcc5d42)

v2.3.2

Compare Source

Bug Fixes
  • [OSM-2671] resolve bundled deps with non-hoisted bundle owner (f9bef4b)

v2.3.1

Compare Source

Bug Fixes
  • handle npm aliases in overrides field (db50e7d)

v2.3.0

Compare Source

Features
  • npm-lock-v2: handled bundled dependencies without lockfile entries (#​285) (b7115b3)

v2.2.4

Compare Source

Bug Fixes
  • add missing alias labels in yarn [SOSE-22] (621f791)

v2.2.3

Compare Source

Bug Fixes
  • aliases in dpgrph names instd of mutating lockfiles (7e9c94a)
  • lodash import issue (350bfa9)

v2.2.2

Compare Source

Bug Fixes
  • handle direct dep alias references in transitive deps - npm and yarn (00dc971)

v2.2.1

Compare Source

Bug Fixes
  • handle ignoring of transitive deps alias [SOSE-1] (45999e5)

v2.2.0

Compare Source

Features
  • add alias support for npm v1 v2 and v3 (0107642)
  • add alias support for npm v1 v2 and v3 (028acdb)
  • add alias support for yarn v1 and v2 (f8e6119)

v2.1.0

Compare Source

Features
  • OSM-2021: add support for multiple versions of the same dependency in Yarn resolutions (#​272) (ca73d78)

v2.0.1

Compare Source

Bug Fixes
  • [OSM-2120] npm handle bundled top level deps (8f57081)

v2.0.0

Compare Source

  • chore(deps)!: upgrade node engine to 18, update yarn core and typescript (5c605aa)
BREAKING CHANGES
  • Minimum required Node.js version is now 18.

v1.60.1

Compare Source

Bug Fixes
  • handle out of sync in resolutions for yarn 2 (d57fc87)

v1.60.0

Compare Source

Features
  • pnpm - function for parsing single project from a workspace (a7e7057)

v1.59.0

Compare Source

Bug Fixes
  • OSM-2190: check package version when fetching node key (eaf6043)
Features
  • only use new flow on feature flag (6d81596)

v1.58.19

Compare Source

Bug Fixes
  • [OSM-2481] pnpm outofsync error fix for overlap dep in peer/dev deps (4c61623)

v1.58.18

Compare Source

Bug Fixes
  • [OSM-2329] pnpm check out of sync option for missing top level deps (9aec600)

v1.58.17

Compare Source

Bug Fixes
  • [OSM-2314] handle codelabreferences in pnpm (231f4cd)

v1.58.16

Compare Source

Bug Fixes
  • [OSM-2329] handle peers deps in dep path for git protocol deps (2ccc03f)

v1.58.15

Compare Source

Bug Fixes
  • return same format for undefined versions pnpm (780939b)

v1.58.14

Compare Source

Bug Fixes
  • security update for micromatch, semver, snyk-config, cross-spawn (430a9a1)

v1.58.13

Compare Source

Bug Fixes

v1.58.12

Compare Source

Bug Fixes
  • handle pnpm empty lockfiles (45d6de9)

v1.58.11

Compare Source

Bug Fixes
  • removed optional params from extract top level deps (c0a049b)

v1.58.10

Compare Source

Bug Fixes
  • fixed dev deps ref and added more debug logs (4dd003a)

v1.58.9

Compare Source

Bug Fixes
  • fail early for top level deps out of sync pnpm and updated tests (f3f5193)

v1.58.8

Compare Source

Bug Fixes
  • [OSM-1996] support pnpm packages aliases (d42528b)

v1.58.7

Compare Source

Bug Fixes
  • small change for new version release (d6bc4d3)

v1.58.6

Compare Source

Bug Fixes
  • debug log for undefined version (c7bd821)

v1.58.5

Compare Source

Bug Fixes
  • ignore optional deps if not installed (928e2f2)

v1.58.4

Compare Source

Bug Fixes
  • [OSM-1122] handle projects cycles in workspace (9e5db13)
  • [OSM-1923] added test for catalogs feature in pnpm 9 (4fd3db3)
  • remove duplicate includePeerDeps (261fb3a)

v1.58.3

Compare Source

Bug Fixes
  • [OSM-1079] support the parsing of transitive peer deps - if they are installed (d77a36d)

v1.58.2

Compare Source

Bug Fixes
  • [OSM-1924] send peerDeps option (2eb6337)

v1.58.1

Compare Source

Bug Fixes
  • add info debug log and format test fixtures (96ce653)

v1.58.0

Compare Source

Features
  • [OSM-1122] improve workspaces parsing (63aef6c)

v1.57.0

Compare Source

Features
  • add prodsec/security_scans (d0bffa1)

v1.56.2

Compare Source

Bug Fixes

v1.56.1

Compare Source

Bug Fixes

v1.56.0

Compare Source

Features
  • added support for pnpm lockfiles v9 (da40be3)

v1.55.0

Compare Source

Features
  • expose getPnpmParser functionality at the top level (515e78e)

v1.54.0

Compare Source

Features
  • normalize pnpm importers on parse (0d8a77d)

v1.53.3

Compare Source

Bug Fixes
  • avoid redos by replacing regex with string split (1f63d42)

v1.53.2

Compare Source

Bug Fixes
  • fixed possible missing fields and dev/optional deps (dc40d04)

v1.53.1

Compare Source

Bug Fixes
  • pnpm workspaces should return everything if config file empty (bcbc059)

v1.53.0

Compare Source

Features
  • [OSM-1024] pnpm dep graph builder (384a1f7)

v1.52.11

Compare Source

Bug Fixes
  • stop hard failures on npm dist-tags (2501435)

v1.52.10

Compare Source

Bug Fixes
  • resolve npm scoped versions (0793a88)

v1.52.9

Compare Source

Bug Fixes
  • allow overrides with version specs (3f5926c)

v1.52.8

Compare Source

Bug Fixes
  • more accurately resolves deps of overrides (4be31c5)

v1.52.7

Compare Source

Bug Fixes
  • start supporting overrides in a non destructive way - npm lock v2 (9658c6d)

v1.52.6

Compare Source

Bug Fixes
  • stop assumption that local pkgs are in workspaces (9db7dff)

v1.52.5

Compare Source

Bug Fixes
  • correct nested pkg resolution (d7e087c)

v1.52.4

Compare Source

Bug Fixes
  • correctly pick npm-lock-v2 pkg version parsing lockfile (891789a)

v1.52.3

Compare Source

Bug Fixes
  • parse of package-lock with nested packages (98edb54)

v1.52.2

Compare Source

Bug Fixes
  • run all tests for npm lock v2 (29ef12d)

v1.52.1

Compare Source

Bug Fixes
  • correct bundled deps behaviour and add fixture (be500ff)

v1.52.0

Compare Source

Features

v1.51.1

Compare Source

Bug Fixes
  • accept optional workspace args for helping parse yarn2 workspace repos (#​193) (031be55)

v1.51.0

Compare Source

Features
  • add pruning to yarn lock v1 dep graph builder (e79c464)

v1.50.0

Compare Source

Features
  • add pruning to yarn lock v2 dep graph builder (ded8dde)

v1.49.0

Compare Source

Features
  • async-ify all the depgraph builder functions (6f7da8a)

v1.48.3

Compare Source

Bug Fixes
  • accuracy improvements for npm lock v2 and v3 parsing (4f1acb7)

v1.48.2

Compare Source

Bug Fixes
  • correctly index pkg lock with pkgs with similar candidates (5280457)

v1.48.1

Compare Source

Bug Fixes
  • correctyl choose key to index pkg lock data (0169478)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from cef5898 to a16942d Compare August 13, 2025 11:33
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from a16942d to 8e6616d Compare August 19, 2025 12:43
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 8e6616d to c5aee3b Compare August 31, 2025 09:39
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from c5aee3b to a988d14 Compare September 25, 2025 21:59
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from eb0bfdc to 6c3ec42 Compare October 7, 2025 10:34
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 3 times, most recently from 830ac20 to 6817e79 Compare October 16, 2025 21:52
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 3 times, most recently from 9b06bbc to d8146af Compare October 21, 2025 23:59
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from d8146af to 3517dff Compare October 28, 2025 19:37
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 3517dff to 7dff9b7 Compare November 11, 2025 00:41
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 7dff9b7 to 09a6350 Compare November 18, 2025 14:10
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from 1a04db0 to d0521b4 Compare November 27, 2025 18:59
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from d0521b4 to 67e2477 Compare December 3, 2025 18:53
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from d576072 to a561582 Compare January 5, 2026 16:33
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from a561582 to 65c1799 Compare January 8, 2026 20:38
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from 0558c55 to 4f3bf85 Compare January 24, 2026 03:08
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 4f3bf85 to faaf6d4 Compare February 2, 2026 21:38
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from faaf6d4 to 3c56bfe Compare February 12, 2026 14:12
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from d0b920b to 1c227b7 Compare February 25, 2026 12:40
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from 8e9a992 to 037bd7f Compare March 10, 2026 14:14
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 037bd7f to 5b09b54 Compare March 13, 2026 15:01
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from a950c12 to 3847d0d Compare April 2, 2026 17:55
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from 6ee3f52 to f7d0a9a Compare May 1, 2026 14:46
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from f7d0a9a to 2efbd7a Compare May 12, 2026 10:56
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 3 times, most recently from e1409a4 to 1de0c82 Compare June 4, 2026 16:34
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from 340e544 to 8a444d2 Compare June 16, 2026 18:38
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch 2 times, most recently from ddeabe2 to aaf6e17 Compare July 1, 2026 20:40
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from aaf6e17 to 84df56f Compare July 9, 2026 20:00
@renovate
renovate Bot force-pushed the renovate/snyk-nodejs-lockfile-parser-2.x branch from 84df56f to 1871cc0 Compare July 12, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants