Update dependency danger to v11

[mend-for-github.aaakk.us.kg]

This PR contains the following updates:

Package	Type	Update	Change
danger	devDependencies	major	^9.1.0 -> ^11.2.1

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	8.2	WS-2020-0345	#196
High	7.5	CVE-2021-23490	#50
High	7.5	CVE-2022-38900	#171
High	7.3	CVE-2020-7788	#179
Medium	6.4	CVE-2022-23540	#175
Medium	6.1	CVE-2022-0235	#67
Medium	5.9	CVE-2022-23539	#174
Medium	5.6	CVE-2021-23807	#82
Medium	5.5	CVE-2021-4245	#172
Medium	5.0	CVE-2022-23541	#176

---

Release Notes

danger/danger-js (danger)

v11.2.1

Compare Source

• Updates jsonwebtoken due to security issues
• Support arm64 binary generation for Apple silicon users #​1342 [@​pepix]

v11.2.0

Compare Source

• Append random string to danger-results.json and danger-dsl.json files to better support concurrent processes #​1311
• Gitlab: add support for skipping remove of messages when empty #​1330 [@​ivankatliarchuk]
• Gitlab: package moved to a new home "@​gitbreaker/*" #​1301 [@​ivankatliarchuk]
• GitLab: Improve support for MRs from forks #​1319 [@​ivankatliarchuk]
• GitLab: Added provider tests #​1319 [@​ivankatliarchuk]
• GitHub: Added danger.github.pr.draft field to DSL
• GitLab: Add support for using threads instead of comments #​1331 [@​uncaught]

v11.1.4

Compare Source

• Yarn faff (a1d15db)
• Merge pull request #​1320 from ivankatliarchuk/fix/getFileContents (9539b9d)
• Merge pull request #​1323 from KubaJastrz/pr-draft (c92a32e)
• feat: add github.pr.draft field (184df2d)
• fix: added getFileContents tests with and without file (43c202b)
• fix: added getFileContents tests (a1af3e2)
• fix: gitlab api (b5de611)

v11.1.3

Compare Source

• Merge pull request #​1318 from ivankatliarchuk/issue_1301 (8e58eae)
• Manually fix (f6d17c0)
• Merge branch 'main' into issue_1301 (4c52740)
• Merge pull request #​1319 from ivankatliarchuk/fix-gitlab-forks (6a216a1)
• Merge pull request #​1307 from OscarBarrett/feature/upgrade-proxy-agents (f5eeee0)
• @​types/nock no longer needed (6a70f47)
• spell check (ba84b5f)
• rename tests (15c00e0)
• added forked mr url (3367329)
• changelog: update (47d2085)
• fix: added provider gitlab tests (dafdb02)
• inline changelog, provide link to an issue (67737e8)
• added yarn.lock (c0d8430)
• added ^ to gitbreaker version (89987a2)
• cleanup (27414d9)
• move code to @​gitbeaker/node (507cb11)
• wip (ad51f2b)
• update nock (a258814)
• Merge pull request #​1315 from purefan/patch-1 (6c49cfe)
• Update default-dangerfile.ts (7a50540)
• Merge pull request #​1312 from squarefrog/concurrent (b427e3e)
• Add random chars to files to support concurrency (116a3a4)
• Revert unrelated formatting changes (8dd9fd8)
• Fixed syntax (d015c09)
• Upgrade http-proxy-agent and https-proxy-agent (b37c807)

v11.1.2

Compare Source

• Improvements to --staging in Danger local
• Protection against custom git prompts in Danger local

v11.1.1

Compare Source

• Bug fix for over-deleting inline comments #​1287

v11.0.7

Compare Source

• Prepare for release (ce16725)
• Merge pull request #​1280 from danger/step_summs (25dd589)
• Adds a CHANGELOG entry (88a6fe6)
• Run danger on CI (3eb82ab)
• Snapshots (852cd34)
• Adds support for posting to the markdown summary (a49b939)

v11.0.6

Compare Source

• CHANGELOG (b3a76c4)
• Merge pull request #​1278 from OJPARKINSON/main (d99dfbd)
• upped the DSL timeout to 10 seconds (5a48e1c)
• Merge pull request #​1277 from martinerko/main (0b2c1d3)
• Fix dead links (7f3c5ea)

v11.0.5

Compare Source

• Set the timeout for getting results from the Danger runner to be 10 seconds

v11.0.4

Compare Source

• Deploying from my Mac to see if that's what's causing the build issues for homebrew. [@​orta]

v11.0.2

Compare Source

• Breaking: Upgrade @​octokit/rest from ^16.43.1 to ^18.12.0 - #​1204 [@​fbartho]

  This is only likely to hit you if you use danger.github.api pretty extensively in your Dangerfiles, but better to keep an eye out.

v10.9.0

Compare Source

• Prepare for release (34fe471)
• Merge branch 'adjust-structured-diff-return-value' into main (06928e3)
• Merge pull request #​1201 from berlysia/adjust-structured-diff-return-value (fb66c81)
• Lock node-fetch to the latest 2.x (6303c88)
• Merge pull request #​1198 from jonny133/jonny133-node-fetch-2_6_7 (9049848)
• now structuredDiffForFile is well-typed (dc54972)
• make structuredDiffForFile for BitBucketServer the same as the others (0b5865f)
• Resolve node-fetch to 2.6.7 (ab77e3c)
• Merge pull request #​1197 from danger/fb/fix-moved-json-crash (a7355a3)
• Cleanup debug log (3411074)
• Don't crash when danger.git.JSONDiffForFile encounters a moved JSON file (99e19f7)
• Merge pull request #​1176 from Rouby/patch-1 (d896baf)
• Merge branch 'main' into patch-1 (4804f80)
• Merge branch 'main' of https://github.com/danger/danger-js into patch-1 (38a963e)
• add changelog entry for pr 1176 (68ab2e9)
• extend github api to send complete reviews (fb630ec)

v10.8.0

Compare Source

• Feature: danger local --outputJSON for #​1177 [@​orta]
• Fix: Updates jsonpointer for #​1174 [@​unfernandito]
• Fix: Updates parse-link-header for CVE-2021-23490 #​1190 [@​fbartho]

v10.7.1

Compare Source

• Updates micromatch dependencies for CVE-2021-23440

v10.7.0

Compare Source

• Adds support for XcodeCloud

v10.6.6

Compare Source

• Fix for supporting Bitbucket Server personal repositories
• GitLab: Added GitLabApi to danger.gitlab.api. - [@​shyim]
• GitLab: Added label helper functions to danger.gitlab.api.addLabels and danger.gitlab.api.removeLabels. - [@​shyim]

v10.6.4

Compare Source

• DEBUG="*" will now log out the response for any HTTP request which isn't classed as "OK" - [@​orta]

v10.6.3

Compare Source

• Fixed Bitrise's ciRunURL underlying env var - [@​rogerluan]
• Simplified Bitrise repo slug lookup, fixing SSH URL parsing in BitBucketServer - [@​rogerluan]
• Log failure to update status also when not in verbose mode - [@​rogerluan]

v10.6.2

Compare Source

• Added Codemagic.io as a supported CI - [@​fbartho]
• Switched Danger's default branch to be 'main' from 'master' - [@​orta]
• Added GitLab Approvals to the DSL: gitlab.approvals - kelvin-lemon

v10.6.1

Compare Source

• Better detection of using the github actions bot for comment deletion - [@​orta]

v10.6.0

Compare Source

• Bitbucket Cloud: Add markdown emoji instead of unicode - [@​JanStevens]
• Add DANGER_DISABLE_TSC environment variable to disable transpiling with tsc, providing a way to force transpiling
  with Babel - [@​ozzieorca]
• Adds options --newComment and --removePreviousComments - [@​davidhouweling]
• Add support for a file path filter when calculation lines of code - [@​melvinvermeer]

v10.5.4

Compare Source

• Fix for danger local not passing through --staging - [@​g3offrey]

v10.5.3

Compare Source

• Fix for danger local not showing commit messages - [@​hmschreiner]

v10.5.2

Compare Source

• Adds danger.git.head and danger.git.base - [@​jamiebuilds]

v10.5.1

Compare Source

• Bitbucket Cloud: Fix bug when Danger updating inline comment with summary comment. - [@​hellocore]
• Fall back to alternative methods for establishing the PR number from CodeBuild - [@​alexandermendes]

v10.5.0

Compare Source

• Handle deprecations for the APIs used with --use-github-checks #​1073 [@​wardpeet]

v10.4.1

Compare Source

• Improved tsconfig.json file lookup strategy: it now looks for it starting from the location of the danger file.
  #​1068 [@​igorbek]
• Upgrade node-fetch to 2.6.1 to fix GHSA-w7rc-rwvf-8q5r. #​1071 [@​hmcc]

v10.4.0

Compare Source

• Adds aliases to the FakeCI env vars. You could now have something like:

  - run: "npx danger-ts ci"
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      DANGER_MANUAL_CI: true
      DANGER_MANUAL_GH_REPO: ${{ steps.pr_info.outputs.repo }}
      DANGER_MANUAL_PR_NUM: ${{ steps.pr_info.outputs.number }}

  Which looks more intentional instead of: DANGER_FAKE_CI etc. [@​orta]

v10.3.1

Compare Source

• Experimental support for internal routing when using npx danger-ts [@​orta]

v10.3.0

Compare Source

• Added a CLI option --ignoreOutOfDiffComments so that you can ignore inline-comments for lines that were not changed
  in the checked PR. The comments would be ignored completely - they won't even show in the results comment. [@​pinkasey]

v10.2.1

Compare Source

• Wait for close event on spawned process in local git platform - [@​gzaripov]
• Fix Typo in README.md [@​NotMoni]
• Fix danger failure on getting diff for files with spaces in file path [@​HonzaMac]
• Document how to disable transpilation [@​rzgry]
• Fix get blob url for pr commit [@​doniyor2109]

v10.2.0

Compare Source

• Take commit hash from CircleCI environment variable [@​valscion]
• Fix project path with /- in GitLab MR URL [@​pgoudreau]
• When creating a new PR with createOrUpdatePR, add the description (as done when editing) - [@​sogame]

v10.1.1

Compare Source

• Release faff: (27d1dcc)
• Remove the update changelog setp (585b006)
• Prepare for release (16d8666)
• Make bamboo names match up (0a33bfd)
• Merge branch 'master' of https://github.com/danger/danger-js (56d36bb)
• Merge pull request #​1033 from valscion/circle-ci-commit-hash (8090b86)
• Add changelog entry (bf3e021)
• Take commit hash from CircleCI (dbac25a)
• Merge pull request #​1032 from sogame/createOrUpdatePR_create_body (f58ee85)
• Add description when creating a pr with "createOrUpdatePR" (94688fe)
• Merge pull request #​1030 from pgoudreau/origin/danger-pr-gitlab-url (c17604e)
• Fix project path with /- in GitLab MR URL (4ab7345)
• More release-it faff (e7d9b6a)
• Release 10.1.0 (4e36b7c)
• Update release it json (297a254)
• Faff (94475c3)
• Update release-it (d5c3172)

v10.1.0

Compare Source

• Adds support for Bamboo CI [@​tim3trick]
• Replace regex to a long url repos approach on Bitrise [@​lucasmpaim]
• Pass process arguments back to the original process [@​f-meloni]
• When fetching existing labels in createOrAddLabel use pagination to fetch them all - [@​sogame]

v10.0.0

Compare Source

• Changed JSON patch implementation for better memory performance. [@​dkundel]

  Breaking: JSONPatchForFile will return a different order of operations than previously. It will also return a
  path with the index of the element inserted into an array for add operations.

v9.4.0

Compare Source

• Vbump (24b0965)
• Merge pull request #​1018 from sogame/Contributor_url (dcf1472)
• Add missing contributor url (49b6f27)
• Merge pull request #​1017 from sogame/Labels_add_debug (e6c7436)
• Add debug messages for "createLabel" and "addLabels" failures in "createOrAddLabel" (31a1961)

v9.3.0

Compare Source

• Add the staged flag to danger local command - [@​soyn]
• Don't use hardcoded userId to update comments if using personal token in Github Actions - [@​rohit-gohri]
• Disable warning in Github Action if using DANGER_GITHUB_API_TOKEN - [@​rohit-gohri]
• Update parse-diff library - [@​417-72KI]
• Fix repository slug in Jenkins provider - [@​sandratatarevicova]
• Add Gitlab diff support - [@​rohit-gohri]
• Fix Typos across danger-js Repo - [@​yohix]
• Fix @octokit/rest deprecation warning when using .issues.addLabels() - [@​sogame]

v9.2.10

Compare Source

• Fixes for the homebrew generated binaries - [@​hellocore]

v9.2.9

Compare Source

• Bitbucket Cloud: Allow DangerCI to get UUID from Bitbucket - [@​hellocore]
• Update docs for GitLab - [@​orta]

v9.2.8

Compare Source

• Prepare for release (00d11ee)

v9.2.7

Compare Source

• Maybe fix deploys to GPR for Docker - [@​orta]

v9.2.6

Compare Source

• Add support for Cirrus CI - [@​RDIL]

v9.2.5

Compare Source

• Remove additional danger from pr generated json - [@​f-meloni]

v9.2.4

Compare Source

• Fix github actions checks - [@​f-meloni]

v9.2.3

Compare Source

• Support more events on GitHub actions - [@​f-meloni]

v9.2.2

Compare Source

• Fix binary files for BitBucket Server - [@​osmestad]
• Allow GHE to use checks - [@​adam-bratin]

v9.2.1

Compare Source

• Fixes for the homebrew generated binaries - [@​hellocore]

v9.2.0

Compare Source

• Add Buddy.works Pipelines support - [@​kristof0425]
• Added flag to bypass Jira/Issues - [@​orieken]
• Improve docs for GitHub Actions - [@​nguyenhuy]

v9.1.8

Compare Source

• Get GitHub Actions event file pathname from env variable - [@​IljaDaderko]

v9.1.7

Compare Source

• GitHub Actions docs update - [@​orta]

v9.1.5

Compare Source

• Take commit hash from bitrise env - [@​f-meloni]

v9.1.4

Compare Source

• Use new env BITBUCKET_REPO_FULL_NAME in bitbucket pipeline. - [@​Soyn]
• Take commit hash from CI Source if available - [@​f-meloni]

v9.1.3

Compare Source

• Updates GitLab API to 10.x - [@​awgeorge]

v9.1.1

Compare Source

• Fixes TS declarations - [@​orta]
• Fix Github Actions documentation - [@​ravanscafi]
• Improve Performance by Caching BitBucket Cloud Commits - [@​hellocore]
• Add compliment message to comment template on Bitbucket Cloud - [@​hellocore]
• Add option to set custom icon in messages - [@​rohit-gohri]

---

• If you want to rebase/retry this PR, check this box