Update all dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
@types/node-fetch	devDependencies	minor	2.3.7 -> 2.5.0
lerna	devDependencies	minor	3.15.0 -> 3.16.4
rimraf	devDependencies	minor	2.6.3 -> 2.7.1

---

Release Notes

lerna/lerna

v3.16.4

Compare Source

Bug Fixes

• conventional-commits: Avoid duplicate root changelog entries with custom --tag-version-prefix (8adeac1), closes #​2197
• conventional-commits: Preserve tag prefix in fixed changelog comparison links (11cf6d2), closes #​2197
• pack-directory: Use correct property when packing subdirectories (1575396)
• publish: Pass correct arguments to packDirectory() (b1aade3)

v3.16.3

Compare Source

Bug Fixes

• conventional-commits: Avoid duplicate root changelog entries with custom --tag-version-prefix (8adeac1), closes #​2197
• conventional-commits: Preserve tag prefix in fixed changelog comparison links (11cf6d2), closes #​2197
• pack-directory: Use correct property when packing subdirectories (1575396)
• publish: Pass correct arguments to packDirectory() (b1aade3)

v3.16.2

Compare Source

Bug Fixes

• publish: Identify tagged packages correctly with custom --tag-version-prefix (f4cbd4d), closes #​2195

v3.16.1

Compare Source

Bug Fixes

• create-symlink: Generate shims for missing bin scripts for Windows (c3f7998)
• create-symlink: Use octal notation for chmod values (03f80b7)
• deps: npm-lifecycle@^3.1.2 (25edebf), closes #​2189
• deps: Switch to actively-maintained @zkochan/cmd-shim (60d1100)
• integration: Limit concurrency of bootstrap --hoist test (f25854d)

v3.16.0

Compare Source

Bug Fixes

• command: Bump minimum range of lodash, silence dumb 'security' warning (c405871)
• conventional-commits: Hard-pin lodash.template dependency to silence 'helpful' security warning (c54ad68)
• deps: Bump @evocateur/pacote (03e4797)
• deps: Update forked npm libs (4d67426)
• npm-conf: OTP should default to undefined, figgy pudding is very strict (2fa02a8)
• pack-directory: Bump npm-packlist + tar dependencies (59ebd19)
• package-graph: Flatten cycles to avoid skipping packages (#​2185) (b335763)
• project: Ensure deprecated githubRelease config is also remapped from command.publish namespace (a3d264e), closes #​2177
• publish: Add --graph-type option to control packages included in topological sort (#​2152) (ae87669), closes #​1437
• publish: Allow --no-verify-access to prevent checking for account-level 2FA (ce58d8f)
• publish: OTP cache should be seeded from conf value, not CLI directly (cf56622)
• publish: Propagate root license into custom publish directories (d410a58), closes #​2157

Features

• bootstrap: Add --strict option to enable throwing when --hoist warns (#​2140) (91437b5)
• deps: @octokit/plugin-enterprise-rest@^3.6.1 (74a3890)
• deps: @octokit/rest@^16.28.4 (5f09f50)
• deps: byte-size@^5.0.1 (ed51ddd)
• deps: conventional-recommended-bump@^5.0.0 (2a0ed60)
• deps: fs-extra@^8.1.0 (313287f)
• deps: get-port@^4.2.0 (778ae6a)
• deps: glob-parent@^5.0.0 (c6bc218)
• deps: globby@^9.2.0 (d9aa249)
• deps: import-local@^2.0.0 (14d2c66)
• deps: is-ci@^2.0.0 (ab2ad83)
• deps: load-json-file@^5.3.0 (3718cc9)
• deps: multimatch@^3.0.0 (968b0d7)
• deps: p-map@^2.1.0 (9e58394)
• deps: pify@^4.0.1 (f8ee7e6)
• deps: semver@^6.2.0 (d8016d9)
• deps: slash@^2.0.0 (bedd6af)
• deps: write-json-file@^3.2.0 (4fa7dea)
• listable: Output JSON adjacency list with --graph (9457a21), closes #​1970
• otplease: Expose getOneTimePassword() helper (44b9f70)
• publish: Eager prompt for OTP when account-level 2FA is enabled (4f893d1)
• run-lifecycle: Upgrade npm-lifecycle@^3.1.0 (e015a74)

isaacs/rimraf

v2.7.1

Compare Source

v2.7.0

Compare Source

---

Renovate configuration

📅 Schedule: "every weekend" in timezone Asia/Tokyo.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or if you modify the PR title to begin with "rebase!".

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot. View repository job log here.