Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update 30 dependencies from npm #3513

Merged
merged 31 commits into from
Apr 30, 2018
Merged

Update 30 dependencies from npm #3513

merged 31 commits into from
Apr 30, 2018

Conversation

dependencies[bot]
Copy link

@dependencies dependencies bot commented Apr 30, 2018

Overview

The following dependencies have been updated:

  • babel-core in / from "6.26.0" to "6.26.3"
  • chalk in / from "2.4.0" to "2.4.1"
  • codecov in / from "3.0.0" to "3.0.1"
  • danger in / from "3.5.1" to "3.6.1"
  • jest-image-snapshot in / from "2.4.0" to "2.4.1"
  • jest-preset-angular in / from "5.2.1" to "5.2.2"
  • lerna in / from "2.10.2" to "2.11.0"
  • lint-staged in / from "7.0.4" to "7.0.5"
  • lodash in / from "4.17.5" to "4.17.10"
  • glamorous in addons/actions from "4.12.4" to "4.12.5"
  • glamorous in lib/components from "4.12.4" to "4.12.5"
  • axe-core in addons/a11y from "3.0.1" to "3.0.2"
  • glamorous in addons/a11y from "4.12.4" to "4.12.5"
  • glamorous in addons/info from "4.12.4" to "4.12.5"
  • glamorous in addons/jest from "4.12.4" to "4.12.5"
  • autoprefixer in lib/core from "8.3.0" to "8.4.1"
  • chalk in lib/core from "2.4.0" to "2.4.1"
  • postcss-flexbugs-fixes in lib/core from "3.3.0" to "3.3.1"
  • webpack-dev-middleware in lib/core from "3.1.2" to "3.1.3"
  • glamorous in app/react from "4.12.4" to "4.12.5"
  • react-modal in lib/ui from "3.4.2" to "3.4.4"
  • babel-core in examples/polymer-cli from "6.26.0" to "6.26.3"
  • webpack-dev-middleware in app/react-native from "3.1.2" to "3.1.3"
  • @types/node in examples/angular-cli from "9.6.6" to "9.6.7"
  • babel-core in examples/angular-cli from "6.26.0" to "6.26.3"
  • ts-node in examples/angular-cli from "6.0.0" to "6.0.2"
  • babel-core in examples/mithril-kitchen-sink from "6.26.0" to "6.26.3"
  • babel-core in examples/vue-kitchen-sink from "6.26.0" to "6.26.3"
  • eventemitter3 in examples/official-storybook from "3.0.1" to "3.1.0"
  • chalk in lib/cli from "2.4.0" to "2.4.1"

Details

Dependencies.io has updated babel-core (a npm dependency in /) from "6.26.0" to "6.26.3".

6.26.3

Summary

6.26.2

Summary

Dependencies.io has updated chalk (a npm dependency in /) from "2.4.0" to "2.4.1".

2.4.1
  • Improved Flow type definition for CommonJS interop.

chalk/chalk@v2.4.0...v2.4.1

Dependencies.io has updated codecov (a npm dependency in /) from "3.0.0" to "3.0.1".

3.0.1

Fixing security vulnerability

Dependencies.io has updated danger (a npm dependency in /) from "3.5.1" to "3.6.1".

3.6.1
  • Catch the github api error thrown from octokit/rest [Teamop][]
  • Replace preview media type of github pull request reviews api [Teamop][]
  • Add support for Screwdriver CI [dbgrandi][]
3.6.0
  • A Dangerfile can return a default export, and then Danger will handle the execution of that code orta
  • Changes the order of the text output in verbose, or when STDOUT is the only option orta
  • Prints a link to the comment in the build log orta

3.5.0 - 3.5.1

  • Fixed a bug where Danger posts empty main comment when it have one or more inline comments to post codestergit
  • fix bug when commiting .png files on BitBucket Mifi
  • Adds support for inline comments for bitbucket server. codestergit

3.4.7

  • Update dependencies orta

3.4.6

  • Fixed Babel 7 breaking due to invalid sourceFileName configuration [kesne][]

3.4.5

  • Don't print error for commit status when there was no error sunshinejr

3.4.4

  • Fixed a bug where Danger would get access to all inline comments, thus deleting comments posted by other people
    sunshinejr

3.4.3

  • Fixed a bug where updating multiple inline comments caused a Javascript error sunshinejr

3.4.2

  • Improving reporting when multiple violations are o nthe same line of a file sunshinejr

3.4.1

  • Protection against nulls in the inline comment data orta

3.4.0

  • Adds support for inline comments when using GitHub.

    This is one of those "massive under the hood" changes, that has a tiny user DSL surface. From this point onwards
    fail, warn, message and markdown all take an extra two optional params: file?: string and line?: number.

    Adding file and line to the call of any exported communication function will trigger one of two things:

    • Danger will create a new comment inline inside your PR with your warning/message/fail/markdown
    • Danger will append a in the main Danger comment with your warning/message/fail/markdown

    Inline messages are edited/created/deleted with each subsequent run of danger ci in the same way the main comment
    does. This is really useful for: linters, test runners and basically anything that relies on the contents of a file
    itself.

    If you're using danger process to communicate with an external process, you can return JSON like:

    {
  "markdowns": [
    {
      "file": "package.swift",
      "line": 3,
      "message": "Needs more base"
    }
  ]
  // [...]
}

    -- sunshinejr

  • Adds a data validation step when Danger gets results back from a process . orta

3.3.2

  • Adds support for TeamCity as a CI provider. fwal

3.3.1

  • Fixed Babel 7 breaking because of sourceFileName being defined wrong. happylinks

3.3.0

  • Fix committer field issue - missing in Stash API by using commit author instead. [zdenektopic][]

  • Adds a new command: reset-status

    This command is for setting the CI build status in advance of running Danger. If your Danger build relies on running
    tests/linters, then you might want to set the PR status (the red/green/yellow dots) to pending at the start of your
    build. You can do this by running yarn danger reset-status.

    mxstbr

3.2.0

  • Add BitBucket Server support.

    To use Danger JS with BitBucket Server: you'll need to create a new account for Danger to use, then set the following
    environment variables on your CI:

    • DANGER_BITBUCKETSERVER_HOST = The root URL for your server, e.g. https://bitbucket.mycompany.com.
    • DANGER_BITBUCKETSERVER_USERNAME = The username for the account used to comment.
    • DANGER_BITBUCKETSERVER_PASSWORD = The password for the account used to comment.

    Then you will have a fully fleshed out danger.bitbucket_server object in your Dangerfile to work with, for example:

    import { danger, warn } from "danger"

if (danger.bitbucket_server.pr.title.includes("WIP")) {
  warn("PR is considered WIP")
}

    The DSL is fully fleshed out, you can see all the details inside the [Danger JS Reference][ref], but the summary is:

    danger.bitbucket_server.
  /** The pull request and repository metadata */
  metadata: RepoMetaData
  /** The related JIRA issues */
  issues: JIRAIssue[]
  /** The PR metadata */
  pr: BitBucketServerPRDSL
  /** The commits associated with the pull request */
  commits: BitBucketServerCommit[]
  /** The comments on the pull request */
  comments: BitBucketServerPRActivity[]
  /** The activities such as OPENING, CLOSING, MERGING or UPDATING a pull request */
  activities: BitBucketServerPRActivity[]

    You can see more in the docs for Danger + BitBucket Server.

    -- azz

  • Don't check for same user ID on comment when running as a GitHub App. [tibdex][]

3.1.8

  • Improvements to the Flow definition file. orta
  • Improve path generator for danger-runner. Mifi
  • Update the PR DSL to include bots. orta

3.1.7

  • Minor error reporting improvements. orta

3.1.6

  • Move more code to only live inside functions. orta

3.1.5

  • Fix --base options for danger local. peterjgrainger
  • Fix a minor typo in Semaphore CI setup. hongrich
  • Fix for capitalized Dangerfiles in CI environment. wizardishungry
  • Fix danger local crashing when comparing master to HEAD with no changes. orta

3.1.4

  • Register danger-runner as a package binary. urkle

3.1.2-3.1.3

  • Peril typings to the Danger DSL. orta
  • Reference docs updates for the website. orta

3.1.1

  • Allows danger runner (the hidden command which runs the process) to accept unknown command flags (such as ones
    passed to it via danger local.) - adam-moss/[@orta][]

3.1.0

  • Adds a new command danger local.

    This command will look between the current branch and master and use that to evaluate a dangerfile. This is aimed
    specifically at tools like git commit hooks, and for people who don't do code review.

    danger.github will be falsy in this context, so you could share a dangerfile between danger local and danger ci.

    When I thought about how to use it on Danger JS, I opted to make another Dangerfile and import it at the end of the
    main Dangerfile. This new Dangerfile only contains rules which can run with just danger.git, e.g. CHANGELOG/README
    checks. I called it dangerfile.lite.ts.

    Our setup looks like:

    "scripts": {
  "prepush": "yarn build; yarn danger:prepush",
  "danger:prepush": "yarn danger local --dangerfile dangerfile.lite.ts"
  // [...]

You'll need to have husky installed for this to work. - orta

  • STDOUT formatting has been improved, which is the terminal only version of Danger's typical GitHub comment style
    system. It's used in danger pr, danger ci --stdout and danger local. - orta
  • Exposed a get file contents for the platform abstraction so that Peril can work on many platforms in the future -
    orta

3.0.5

  • Added support for Bitrise as a CI Provider - tychota

3.0.5

  • Nevercode ENV var fixes - fbartho

3.0.4

  • Paginate for issues - orta

3.0.3

  • Added support for Nevercode.io as a CI Provider - fbartho

3.0.2

  • Don't log ENV vars during a run - thanks samdmarshall. - orta

3.0.1

  • Bug fixes and debug improvements. If you're interested run danger with DEBUG="*" yarn danger [etc] and you'll get a
    lot of output. This should make it much easier to understand what's going on. - orta

3.0.0

  • Updates to the CLI user interface. Breaking changes for everyone.

    TLDR - change yarn danger to yarn danger ci.

    Danger JS has been fighting an uphill battle for a while with respects to CLI naming, and duplication of work. So, now
    it's been simplified. There are four user facing commands:

    • danger init - Helps you get started with Danger
    • danger ci - Runs Danger on CI
    • danger process - Like ci but lets another process handle evaluating a Dangerfile
    • danger pr - Runs your local Dangerfile against an existing GitHub PR. Will not post on the PR

    This release deprecates running danger on it's own, so if you have yarn danger then move that be yarn danger ci.

    Each command name is now much more obvious in it intentions, I've heard many times that people aren't sure what
    commands do and it's is still even worse in Danger ruby. I figure now is as good a time as any a good time to call
    it a clean slate.

    On a positive note, I gave all of the help screens an update and tried to improve language where I could.

2.1.9-10

  • Fix to danger pr and danger infinite looping - orta

2.1.8

  • Add a note in danger pr if you don't have a token set up - orta
  • Bunch of docs updates - orta

2.1.7

  • Fix Codeship integration - caffodian
  • Updates documentation dependencies - orta
  • Fixes to running danger with params - orta
  • Fixes for danger pr not acting like danger WRT async code - orta
  • Fixes tsconfig.json parse to be JSON5 friendly - [gantman][]
  • Fixes for danger.github.thisPR to use the base metadata for a PR, I'm too used to branch workflows - orta

2.1.6

  • Updates dependencies - orta
  • Link to the build URL if Danger can find it in the CI env - orta
  • Removes the "couldn't post a status" message - orta

2.1.5

  • The TS compiler will force a module type of commonjs when transpiling the Dangerfile - orta

2.1.4

  • Adds a CLI option for a unique Danger ID per run to danger and danger process, so you can have multiple Danger
    comments on the same PR. - orta

2.1.1 - 2.1.2 - 2.1.3

  • Fixes/Improvements for danger init - orta

2.1.0

  • Adds a new command for getting set up: danger init - orta
  • Fix double negative in documentation. dfalling
  • Fix gloabally typo in documentation. dfalling

2.0.2 - 2.0.3

  • Adds a warning when you try to import Danger when you're not in a Dangerfile - orta
  • Exports the current process env to the danger run subprocess - orta

2.0.1

  • Potential fixes for CLI sub-commands not running when packaging danger - orta

2.0.0

  • Fixes the danger.js.flow fix to handle exports correctly, you probably need to add
    .*/node_modules/danger/distribution/danger.js.flow to the [libs] section of your settings for it to work though -
    orta

2.0.0-beta.2

  • Fixes a bug with danger.github.utils in that it didn't work as of b1, and now it does 👍 - orta
  • Ships a danger.js.flow in the root of the project, this may be enough to support flow typing, thanks to
    joarwilk and flowgen - orta

2.0.0-beta.1

  • Converts the command danger (and danger run) to use danger process under the hood. What does this do?

    • Dangerfile evaluation is in a separate process, run without a vm sandbox. This fixes the async problem which we
      created schedule for. Previously, any async work in your Dangerfile needed to be declared to Danger so that it
      knew when all of the work had finished. Now that the running happens inside another process, we can use the
      on_exit calls of the process to know that all work is done. So, in Danger (not in Peril) async code will work
      just like inside a traditional node app.

    • Makes danger process a first class citizen. This is awesome because there will be reliable support for other
      languages like danger-swift, danger-go and more to come.

    • The danger process system is now codified in types, so it's really easy to document on the website.

  • Adds a --js and --json option to danger pr which shows the output in a way that works with danger process.
    This means you can preview the data for any pull request.

./orta

2.0.0-alpha.20

Moves away from vm2 to a require-based Dangerfile runner. This removes the sandboxing aspect of the Dangerfile
completely, but the sandboxing was mainly for Peril and I have a plan for that.

danger/peril#159

I would like to move the main parts of Danger JS to also work like danger process, so I'll be continuing to work as a
alpha for a bit more. One interesting side-effect of this could be that I can remove schedule from the DSL. I've not
tested it yet though. Turns out this change is real hard to write tests for. I've made #394 for that.

./orta

2.0.0-alpha.18 - 19

  • Moves internal methods away from Sync to avoid problems when running in Peril - ashfurrow
  • Passes through non-zero exit codes from danger process runs - ashfurrow

2.0.0-alpha.17

  • Improve CircleCI PR detection

2.0.0-alpha.16

Some UX fixes:

  • Don't show warnings about not setting a commit status (unless in verbose) - orta
  • Delete duplicate Danger message, due to fast Peril edits - orta
  • Show Peril in the commit status if inside Peril, not just Danger - orta
  • [internal] Tightened the typings on the commands, and abstracted them to share some code - orta

2.0.0-alpha.15

2.0.0-alpha.14

2.0.0-alpha.13

  • Improve the error handling around the babel API - Add autofixer defaults. #357 - orta
  • Move back to the original URLs for diffs, instead of relying on PR metadata - orta
  • Updates the types for schedule to be more accepting of what it actually takes - orta

2.0.0-alpha.12

2.0.0-alpha.11

  • Doh, makes the danger process command actually available via the CLI - orta

2.0.0-alpha.10

  • Adds a danger process command, this command takes amn argument of a process to run which expects the Danger DSL as
    JSON in STDIN, and will post a DangerResults object to it's STDOUT. This frees up another process to do whatever they
    want. So, others can make their own Danger runner.

    An example of this is Danger Swift. It takes a JSON document via STDIN,
    compiles and evaluates a Swift file then passes the results back to danger process
    via STDOUT.

    Another example is this simple Ruby script:

      #!/usr/bin/env ruby

require 'json'
dsl_json = STDIN.tty? ? 'Cannot read from STDIN' : $stdin.read
danger = JSON.parse(dsl_json)
results = { warnings: [], messages:[], fails: [], markdowns: [] }

if danger.github.pr.body.include? "Hello world"
  results.messages << { message: "Hey there" }
end

require 'json'
STDOUT.write(results.to_json)

    Which is basically Ruby Danger in ~10LOC. Lols.

    This is the first release of the command, it's pretty untested, but it does work. - orta

2.0.0-alpha.9

  • Uses the Babel 7 alpha for all source compilation with JS, Flow+JS and TS. This worked without any changes to our
    internal infra which is pretty awesome. All TS tests passed. Babel 7 is still in alpha, but so is Danger 2.0 - so I'm
    happy to keep Danger in a pretty long alpha, till at least Babel 7 is in beta.

    It also still supports using TypeScript via the "typescript" module, if you have that installed. - orta

  • danger.github.thisPR now uses the PR's head, not base - orta

2.0.0-alpha.8

  • Uses the GitHub diff_url instead of the diff version header, as it conflicted with Peril - orta
  • Handle exceptions in Dangerfile and report them as failures in Danger results - macklinu

2.0.0-alpha.6-7

  • Expose a Promise object to the external GitHub API - orta

2.0.0-alpha.4-5

  • Allow running a dangerfile entirely from memory using the Executor API - orta

2.0.0-alpha.2-3

  • Removes the jest-* dependencies - orta

2.0.0-alpha.1

  • Support a vm2 based Dangerfile runner as an alternative to the jest
    infrastructure. There are a few main reasons for this:

    • I haven't been able to completely understand how Jest's internals work around all of the code-eval and pre-requisite
      setup, which has made it hard to work on some more complex Peril features.

    • Jest releases are every few months, personally I love this as a user of Jest, as an API consumer it can be difficult
      to get changes shipped.

    • The fact that both Danger/Jest make runtime changes means that you need to update them together

    • I have commit access to vm2, so getting changes done is easy

    I like to think of it as having gone from Jest's runner which is a massive toolbox, to vm2 which is a tiny toolbox
    where I'll have to add a bunch of new tools to get everything working.

    The massive downside to this is that Danger now has to have support for transpiling via Babel, or from TypeScript
    unlike before, where it was a freebie inside Jest. Jest handled this so well. This means that a Dangerfile which used
    to "just work" with no config may not. Thus, IMO, this is a breaking major semver.

    Is it likely that you need to make any changes? So far, it seems probably not. At least all of the tests with
    Dangerfiles original from the older Jest runner pass with the new version.

    This is an alpha release, because it's knowingly shipped with some breakages around babel support, specifically:

    • Babel parsing of relative imports in a Dangerfile aren't working
    • Some of the features which require the regeneratorRuntime to be set up aren't working yet

    Those are blockers on a 2.0.0 release.

1.2.0

  • Exposes an internal API for reading a file from a GitHub repo as danger.github.utils.fileContents - orta

    Ideally this is what you should be using in plugins to read files, it's what Danger uses throughout the codebase
    internally. This means that your plugin/dangerfile doesn't need to rely on running on the CI when instead it could run
    via the GitHub API.

  • Update prettier - orta

  • Removes dtslint as a dependency - sapegin/orta

1.1.0

  • Support retrive paginated pull request commit list - kwonoj
  • Add support for VSTS CI - mlabrum
  • Remove the DSL duplication on the danger export, it wasn't needed or used. - orta
  • Update to TypeScript 2.4.x - orta
  • Rename github test static_file to remove : from the filename to fix a checkout issue on windows - mlabrum

1.0.0

Hello readers! This represents a general stability for Danger. It is mainly a documentation release, as it corresponds
to http://danger.systems/js/ being generally available. I made the initial commit back in 20 Aug 2016 and now it's
30th June 2017. It's awesome to look back through the CHANGELOG and see how things have changed.

You can find out a lot more about the 1.0, and Danger's history on my
Artsy blog post on the Danger 1.0.

  • Adds inline docs for all CI providers - orta

0.21.1

  • Use HTTP for the GitHub status check target URL - macklinu
  • Correct some examples in node-app - clintam
  • Add support for buddybuild CI - benkraus/clintam
  • Add support for GithHub Apps API (no GET /user) - clintam

0.21.0

  • Posts status reports for passing/failing builds, if the account for danger has access - orta
  • Adds prettier to the codebase - orta
  • Converts a bunch of Danger's dangerfile into a plugin -
    danger-plugin-yarn - orta

This is my first non-trivial plugin, based on infrastructure from macklinu. Plugins are looking great, you can get some
info at https://github.com/macklinu/generator-danger-plugin.

  • Docs updates for the website - orta

0.20.0

  • Fix danger pr commands are not running on windows - kwonoj
  • Fix broken link in getting started docs - frozegnome
  • Do not delete comment written from user have same userid for danger - kwonoj
  • Fix link to jest in getting started docs - palleas
  • Fix yarn install instruction in getting started docs - palleas

0.19.0

  • Update to Jest 20 - macklinu
  • Change the danger.d.ts to use module exports instead of globals - orta
  • Render markdown inside message(), warn(), and fail() messages. - macklinu

An example:

fail(`Missing Test Files:

- \`src/lib/components/artist/artworks/__tests__/index-tests.tsx\`
- \`src/lib/components/artwork_grids/__tests__/infinite_scroll_grid-tests.tsx\`
- \`src/lib/containers/__tests__/works_for_you-tests.tsx\`

If these files are supposed to not exist, please update your PR body to include "Skip New Tests".`)

Will result in:

Fails
🚫 Missing Test Files:
  • src/lib/components/artist/artworks/__tests__/index-tests.tsx
  • src/lib/components/artwork_grids/__tests__/infinite_scroll_grid-tests.tsx
  • src/lib/containers/__tests__/works_for_you-tests.tsx

If these files are supposed to not exist, please update your PR body to include "Skip New Tests".

0.18.0

  • Adds github.api. This is a fully authenticated client from the github npm
    module. - orta

    An easy example of it's usage would be using Danger to add a label to your PR. Note that Danger will have the
    permissions for your account, so for OSS repos - this won't work.

    danger.github.api.issues.addLabels({
  owner: "danger",
  repo: "danger-js",
  number: danger.github.pr.number,
  labels: ["Danger Passed"],
})

    Yeah, that's a bit verbose, I agree. So, there's also github.thisPR which should simplify that. It aims to provide a
    lot of the values for the current PR to use with the API.

    const github = danger.github
github.api.issues.addLabels({ ...github.thisPR, labels: ["Danger Passed"] })

    You could use this API for a bunch of things, here's some quick ideas:

    • Request specific reviewers when specific files change (api.pullRequests.createReviewRequest)
    • Add a label for when something passes or fails (api.issues.addLabels)
    • Verifying if someone is in your org? (api.orgs.checkMembership)
    • Updating Project tickets to show they have a PR (api.projects.updateProject)

0.17.0

  • Enhancements to danger.git.diffForFile() - namuol

    • Removed diffTypes second argument in favor of result.added and result.removed
    • Added result.before and result.after for easy access to full contents of the original & updated file
    • danger.git.diffForFile is now an async function

    TL;DR:

    // In danger 0.16.0:
const fullDiff = danger.git.diffForFile('foo.js')
const addedLines = danger.git.diffForFile('foo.js', ['add'])
const removedLines = danger.git.diffForFile('foo.js', ['del'])

// In the latest version:
const diff = await danger.git.diffForFile('foo.js')
const fullDiff = diff.diff
const addedLines = diff.added
const removedLines = diff.removed
const beforeFileContents = diff.before
const afterFileContents = diff.after

  • Update internal test fixture generation docs - namuol

0.16.0

  • Adds a diffTypes option to diffForFile - alex3165
  • Add Buildkite CI source - jacobwgillespie

0.15.0

  • When a Dangerfile fails to eval, send a message to the PR - orta

0.14.2

  • Updated jest-* dependencies to 19.x - orta

    Updating the jest-* dependencies seems to be exhibiting strange behavior in tests for windows if you update, and use
    windows, can you please confirm that everything is 👍

  • Added type shapings to JSONPatchForFile - orta

  • Replaced deprecated lodash.isarray package with Array.isArray - damassi

0.14.1

  • Moved @types/chalk from dependencies to devDependencies - orta
  • Killed some stray console logs - orta
  • Updated the danger.d.ts - orta

0.14.0

  • TypeScript Dangerfiles are now support in Danger - orta

    We use TypeScript in Danger, and a lot of my work in Artsy now uses TypeScript (see:
    JS2017 at Artsy), so I
    wanted to explore using TypeScript in Dangerfiles.

    This is built on top of Jest's custom transformers, so if you are already using Jest with TypeScript, then you can
    change the dangerfile.js to dangerfile.ts and nothing should need changing ( except that you might have new
    warnings/errors ) (note: in changing this for Danger, I had to also add the dangerfile.ts to the "exclude"
    section of the tsconfig.json so that it didn't change the project's root folder.)

    This repo is now using both a babel Dangerfile (running on Circle CI) and a TypeScript one (running on Travis) to
    ensure that we don't accidentally break either.

  • Created a new danger.d.ts for VS Code users to get auto-completion etc - orta

  • Added a two new git DSL functions: git.JSONDiffForFile(filename) and git.JSONPatchForFile(filename).

    • git.JSONPatchForFile

      This will generate a rfc6902 JSON patch between two files inside your repo. These patch files are useful as a
      standard, but are pretty tricky to work with in something like a Dangerfile, where rule terseness takes priority.

    • git.JSONDiffForFile

      This uses JSONPatchForFile to generate an object that represents all changes inside a Dangerfile as a single
      object, with keys for the changed paths. For example with a change like this:

      {
  "dependencies": {
    "babel-polyfill": "^6.20.0",
 +  "chalk": "^1.1.1",
    "commander": "^2.9.0",
    "debug": "^2.6.0"
  },
}

      You could become aware of what has changed with a Dangerfile in a schedule'd function like:

      const packageDiff = await git.JSONDiffForFile("package.json")
if (packageDiff.dependencies) {
  const deps = packageDiff.dependencies

  deps.added   // ["chalk"],
  deps.removed // []
  deps.after   // { "babel-polyfill": "^6.20.0", "chalk": "^1.1.1", "commander": "^2.9.0", "debug": "^2.6.0" }
  deps.before  // { "babel-polyfill": "^6.20.0", "commander": "^2.9.0", "debug": "^2.6.0" }
}

      The keys: added and removed only exist on the object if:

      • before and after are both objects - in which case added and removed are the added or removed keys
      • before and after are both arrays - in which case added and removed are the added or removed values

  • Exposed all global functions ( like warn, fail, git, schedule, ... ) on the danger object. - orta

    This is specifically to simplify building library code. It should not affect end-users. If you want to look at making
    a Danger JS Plugin, I'd recommend exposing a function which takes the danger object and working from that. If you're
    interested, there is an active discussion on plugin support in the DangerJS issues.

  • Improves messaging to the terminal - orta

  • Adds the ability to not have Danger post to GitHub via a flag: danger run --text-only - orta

  • Fix a crasher with prs.find Conflicts with NPM Shrinkwrap #181 - orta

0.13.0

  • Add danger.utils DSL, which includes danger.utils.href() and danger.utils.sentence() - macklinu

    We were finding that a lot of Dangerfiles needed similar functions, so we've added a utils object to offer functions
    that are going to be used across the board. If you can think of more functions you use, we'd love to add them. Ideally
    you shouldn't need to use anything but Danger + utils to write your Dangerfiles.

    danger.utils.href("http://danger.systems", "Danger") // <a href="http://danger.systems">Danger</a>
danger.utils.sentence(["A", "B", "C"]) // "A, B and C"

  • Adds danger.github.utils - which currently has only one function: fileLinks - orta

    Most of the time people are working with a list of files (e.g. modified, or created) and then want to present
    clickable links to those. As the logic to figure the URLs is very GitHub specific, we've moved that into it's own
    object with space to grow.

    const files = danger.git.modified_files // ["lib/component/a.ts", "lib/component/b.ts"]
const links = danger.github.utils.fileLinks(files) // "<a href='...'>a</a> and <a href='...'>b</a>"
warn(`These files have changes: ${links}`)

0.12.1

  • Add support for Drone - gabro

0.12.0

  • Added support for handling async code in a Dangerfile - deecewan

    This is still a bit of a work in progress, however, there is a new function added to the DSL: schedule.

    A Dangerfile is evaluated as a script, and so async code has not worked out of the box. With the schedule function
    you can now register a section of code to evaluate across multiple tick cycles.

    schedule currently handles two types of arguments, either a promise or a function with a resolve arg. Assuming you
    have a working Babel setup for this inside your project, you can run a Dangerfile like this:

    schedule(async () => {
  const thing = await asyncAction()
  if (thing) {
    warn("After Async Function")
  }
})

    Or if you wanted something simpler,

    schedule(resolved => {
  if (failed) {
    fail("Failed to run")
  }
})

  • Adds new GitHub DSL elements - deecewan

  • danger.github.issue - As a PR is an issue in GitHub terminology, the issue contains a bit more metadata. Mainly
    labels, so if you want to know what labels are applied to a PR, use danger.github.issue.labels
  • danger.github.reviews - Find out about your reviews in the new GitHub Reviewer systems,
  • danger.github.requested_reviewers - Find out who has been requested to review a PR.
  • Updated TypeScript and Jest dependencies - orta
  • Add support for Github Enterprise via DANGER_GITHUB_API_BASE_URL env var - mashbourne

0.11.3 - 0.11.5

  • Internal changes for usage with Peril - orta

  • Add danger pr --repl, which drops into a Node.js REPL after evaluating the dangerfile - macklinu

  • Add support for Codeship - deecewan

0.11.0 - 0.11.2

0.10.1

  • Builds which only use markdown now only show the markdown, and no violations table is shown - mxstbr

0.10.0

  • Adds support for running Danger against a PR locally - orta

The workflow is that you find a PR that exhibits the behavior you'd like Danger to run against, then edit the local
Dangerfile.js and run yarn run danger pr https://github.com/facebook/jest/pull/2629.

This will post the results to your console, instead of on the PR itself.

  • Danger changes to your Dangerfile are not persisted after the run - orta
  • Add summary comment for danger message - kwonoj
  • Add jest-environment-node to the Package.json - orta

0.9.0

  • Adds support for git.commits and github.commits - orta

    Why two? Well github.commits contains a bunch of github specific metadata ( e.g. GitHub user creds, commit comment
    counts. ) Chances are, you're always going to use git.commits however if you want more rich data, the GitHub one is
    available too. Here's an example:

const merges = git.commits.filter(commit => commit.message.include("Merge Master"))
if (merges.length) {
  fail("Please rebase your PR")
}
  • Support custom dangerfile via -d commandline arg - kwonoj
  • Allow debug dump output via DEBUG=danger:* environment variable - kwonoj
  • Adds surf-build ci provider - kwonoj
  • Forward environment variables to external module constructor - kwonoj

0.8.0

  • Support danger run -ci to specify external CI provider - kwonoj
  • Adds --verbose to danger, which for now will echo out all the URLs Danger has requested - orta
  • Migrate codebase into TypeScript from flow - kwonoj
  • Handle removing all sorts of import types for Danger in the Dangerfile - orta

0.7.3-4-5

  • A failing network request will raise an error - orta
  • Fix Dangerfile parsing which broke due to Peril related changes - orta
  • Tweak the npmignore, ship less random stuff to others - orta

0.7.2

  • Fixes to the shipped Flow/TS definitions - orta
  • Adds more functions the the internal Danger GitHub client - orta
  • Infrastructure work to allow Peril to run a Dangerfile - orta
  • Upgrade outdated ESLint packages - macklinu
  • Enhance Windows OS compatibility - kwonoj

0.7.1

  • Set exit code to 1 when running danger throws an error - macklinu
  • Add Jenkins CI source - macklinu
  • Add .editorconfig - macklinu
  • Adds jest-runtime to the dependencies - orta

0.7.0

  • You can build and run in vscode using your own custom env/development.env file. This is useful because you can use
    the debugger against a real PR. See env/development.env.example for syntax. - orta

  • Uses jest-transform and jest-runtime to eval and apply babel transforms.

    This does two things, makes it feasible to do hosted-danger and makes it possible
    to write your Dangerfile in a way that's consistent with the rest of your JavaScript. - orta

  • Add tests directory to .npmignore - macklinu

  • Update to Jest 18 - macklinu

0.6.10

  • Brings back the ability to emulate a fake CI run locally via danger - orta

0.6.9

  • Makes babel-polyfill a direct dependency, this is because it is actually an implicit dependency in the app. I'm not
    sure how I feel about this, I guess if we use a part of it in the babel translation of a user's Dangerfile them I'm OK
    with it. - orta

0.6.6 - 0.6.7 - 0.6.8

  • Ship flow annotations with the npm module - orta

0.6.5

  • Adds more node instances to travis - romanki + orta
  • Adds support for Semaphore CI - orta

0.6.4

  • The env vars DANGER_TEST_REPO and DANGER_TEST_PR will allow you initialize the FakeCI with a repo of your choice.
    See README.md for more info
  • Improved error messaging around not including a DANGER_GITHUB_API_TOKEN in the ENV - nsfmc / orta
  • Adds support for getting the diff for a specific file from git: e.g.
// Politely ask for their name on the entry too
const changelogDiff = danger.git.diffForFile("changelog.md")
const contributorName = danger.github.pr.user.login
if (changelogDiff && changelogDiff.indexOf(contributorName) === -1) {
  warn("Please add your GitHub name to the changelog entry, so we can attribute you.")
}

0.6.3

  • Does not break commonmark on GitHub - orta
  • upgrades to flow 0.35.0 and fixes associated type errors in covariant/invariant interfaces - nsfmc
  • omits flow requirement for new test files - nsfmc
  • adds support for circleci - nsfmc
  • defines CISource properties in flow as read-only - nsfmc

0.5.0

  • danger.pr -> danger.github.pr, I've also created interfaces for them - orta
  • warn, message, markdown are all ported over to DangerJS - orta
  • Shows a HTML table for Danger message - orta
  • Now offers a Flow-typed definition file, it's not shipped to their repo yet, you can make it by
    npm run export-flowtype - orta
  • Started turning this into a real project by adding tests - orta

0.0.5-0.0.10

  • Changes some files casing, added some logs, a bit of error reporting, and verifying everything works through npm -
    orta

0.0.4

  • Danger edit an existing post, and delete it when it's not relevant - orta

0.0.3

  • Danger will post a comment on a GitHub PR with any Fails - orta

0.0.2

OK, first usable for others version. Only supports GitHub and Travis CI.

You can run by doing:

danger

Make sure you set a DANGER_GITHUB_API_TOKEN on your CI -
see the Ruby guide for that.

Then you can make a dangerfile.js (has to be lowercase, deal with it.) It has access to a whopping 2 DSL attributes.

pr
git
fail(message: string)

pr probably won't be sticking around for the long run, but if you're using a 0.0.2 release, you should be OK with
that. It's the full metadata of the PR, so
this JSON file.
git currently has:

git.modified_file
git.created_files
git.deleted_files

which are string arrays of files.

fail(message: string) will let you raise an error, and will make the process return 1 after the parsing has finished.

Overall: your Dangerfile should look something like:

import { danger } from "danger"

const hasChangelog = danger.git.modified_files.includes("changelog.md")
if (!hasChangelog) {
  fail("No Changelog changes!")
}

That should do ya. I think. This doesn't support babel, and I haven't explored using other modules etc, so...

./orta

0.0.1

Not usable for others, only stubs of classes etc. - orta

Dependencies.io has updated jest-image-snapshot (a npm dependency in /) from "2.4.0" to "2.4.1".

2.4.1

This release includes changes to:

  • support node 9
  • support Jest --ci flag and behave just like Jest snapshots do when said flag is passed.

Dependencies.io has updated jest-preset-angular (a npm dependency in /) from "5.2.1" to "5.2.2".

5.2.2

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated lerna (a npm dependency in /) from "2.10.2" to "2.11.0".

2.11.0

🚀 Enhancement

🐛 Bug Fix

Committers: 2

Dependencies.io has updated lint-staged (a npm dependency in /) from "7.0.4" to "7.0.5".

7.0.5

7.0.5 (2018-04-26)

Bug Fixes

  • Update "please-upgrade-node" to version 3.0.2 (#434) (b9d84ce)

Dependencies.io has updated lodash (a npm dependency in /) from "4.17.5" to "4.17.10".

4.17.10

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

4.17.9

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated glamorous (a npm dependency in addons/actions) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated glamorous (a npm dependency in lib/components) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated axe-core (a npm dependency in addons/a11y) from "3.0.1" to "3.0.2".

3.0.2

Bug Fixes

  • rule: Allow empty aria-labelledby values (#829) (d280c5f)
  • Prevent color rules from crashing Chrome 66+ #856 (#861) (147b665)
  • respondable: Identify the current axe instance by its application name when it exists (affd75c)
  • respondable: Use the hard-coded axe.application name as default (ab4a49f)
  • rule: Ignore hashbang URLs for skiplinks (#827) (e1f0c57)
  • rule: Tag video-caption only as SC 1.2.2 (87818e7)

Dependencies.io has updated glamorous (a npm dependency in addons/a11y) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated glamorous (a npm dependency in addons/info) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated glamorous (a npm dependency in addons/jest) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated autoprefixer (a npm dependency in lib/core) from "8.3.0" to "8.4.1".

8.4.1
  • Fix working in old PostCSS versions (by Diablohu).
8.4.0 Bludor family coat of arms

Autoprefixer 8.4 brings new control comment to ignore next line.

vostrik implemented the levin-du’s idea of having control comment to disable only next property/rule:

.logo {
    /* autoprefixer: ignore next */
    user-select: none; /* ← ignored */
    mask: url(mask.jpg); /* ← will be prefixed */
}

/* autoprefixer: ignore next */
::placholder /* ← ignored */ {
    text-decoration-style: dotted; /* ← will be prefixed */
}

Dependencies.io has updated chalk (a npm dependency in lib/core) from "2.4.0" to "2.4.1".

2.4.1
  • Improved Flow type definition for CommonJS interop.

chalk/chalk@v2.4.0...v2.4.1

Dependencies.io has updated postcss-flexbugs-fixes (a npm dependency in lib/core) from "3.3.0" to "3.3.1".

3.3.1

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated webpack-dev-middleware (a npm dependency in lib/core) from "3.1.2" to "3.1.3".

3.1.3

Bugfixes

Dependencies.io has updated glamorous (a npm dependency in app/react) from "4.12.4" to "4.12.5".

4.12.5

4.12.5 (2018-04-30)

Bug Fixes

  • getGlamorClassName: don't attempt to merge class names that aren't from glamor (#415) (3f03298)

Dependencies.io has updated react-modal (a npm dependency in lib/ui) from "3.4.2" to "3.4.4".

3.4.4

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

3.4.3

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated babel-core (a npm dependency in examples/polymer-cli) from "6.26.0" to "6.26.3".

6.26.3

Summary

6.26.2

Summary

Dependencies.io has updated webpack-dev-middleware (a npm dependency in app/react-native) from "3.1.2" to "3.1.3".

3.1.3

Bugfixes

Dependencies.io has updated @types/node (a npm dependency in examples/angular-cli) from "9.6.6" to "9.6.7".

9.6.7

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated babel-core (a npm dependency in examples/angular-cli) from "6.26.0" to "6.26.3".

6.26.3

Summary

6.26.2

Summary

Dependencies.io has updated ts-node (a npm dependency in examples/angular-cli) from "6.0.0" to "6.0.2".

6.0.2

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

6.0.1

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated babel-core (a npm dependency in examples/mithril-kitchen-sink) from "6.26.0" to "6.26.3".

6.26.3

Summary

6.26.2

Summary

Dependencies.io has updated babel-core (a npm dependency in examples/vue-kitchen-sink) from "6.26.0" to "6.26.3".

6.26.3

Summary

6.26.2

Summary

Dependencies.io has updated eventemitter3 (a npm dependency in examples/official-storybook) from "3.0.1" to "3.1.0".

3.1.0

No content found. Please open an issue at https://github.com/dependencies-io/support if you think this content could have been found.

Dependencies.io has updated chalk (a npm dependency in lib/cli) from "2.4.0" to "2.4.1".

2.4.1
  • Improved Flow type definition for CommonJS interop.

chalk/chalk@v2.4.0...v2.4.1

@dependencies-bot
Update babel-core from 6.26.0 to 6.26.3 in /
cd3cb85
@dependencies-bot
Update chalk from 2.4.0 to 2.4.1 in /
6b97418
@dependencies-bot
Update codecov from 3.0.0 to 3.0.1 in /
6b2c866
@dependencies-bot
Update danger from 3.5.1 to 3.6.1 in /
de837d2
@dependencies-bot
Update jest-image-snapshot from 2.4.0 to 2.4.1 in /
24b3fb2
@dependencies-bot
Update jest-preset-angular from 5.2.1 to 5.2.2 in /
46a7d6b
@dependencies-bot
Update lerna from 2.10.2 to 2.11.0 in /
c3859f5
@dependencies-bot
Update lint-staged from 7.0.4 to 7.0.5 in /
17f5969
@dependencies-bot
Update lodash from 4.17.5 to 4.17.10 in /
006e60f
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in addons/actions
a95dc94
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in lib/components
a081b56
@dependencies-bot
Update axe-core from 3.0.1 to 3.0.2 in addons/a11y
29419bc
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in addons/a11y
15736cb
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in addons/info
a547091
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in addons/jest
1280509
@dependencies-bot
Update autoprefixer from 8.3.0 to 8.4.1 in lib/core
5f9994f
@dependencies-bot
Update chalk from 2.4.0 to 2.4.1 in lib/core
a2188e0
@dependencies-bot
Update postcss-flexbugs-fixes from 3.3.0 to 3.3.1 in lib/core
93ab6ff
@dependencies-bot
Update webpack-dev-middleware from 3.1.2 to 3.1.3 in lib/core
5c7d0e6
@dependencies-bot
Update glamorous from 4.12.4 to 4.12.5 in app/react
5c7bf04
@dependencies-bot
Update react-modal from 3.4.2 to 3.4.4 in lib/ui
0fbaa6c
@dependencies-bot
Update babel-core from 6.26.0 to 6.26.3 in examples/polymer-cli
2a416e9
@dependencies-bot
Update webpack-dev-middleware from 3.1.2 to 3.1.3 in app/react-native
6a8a1d1
@dependencies-bot
Update @types/node from 9.6.6 to 9.6.7 in examples/angular-cli
ae807c0
@dependencies-bot
Update babel-core from 6.26.0 to 6.26.3 in examples/angular-cli
76c204c
@dependencies-bot
Update ts-node from 6.0.0 to 6.0.2 in examples/angular-cli
7b058f7
@dependencies-bot
Update babel-core from 6.26.0 to 6.26.3 in examples/mithril-kitchen-sink
cfae42d
@dependencies-bot
Update babel-core from 6.26.0 to 6.26.3 in examples/vue-kitchen-sink
005ddbd
@dependencies-bot
Update eventemitter3 from 3.0.1 to 3.1.0 in examples/official-storybook
12a9340
@dependencies-bot
Update chalk from 2.4.0 to 2.4.1 in lib/cli
0b171ce
@storybook-bot storybook-bot merged commit 4536fd7 into master Apr 30, 2018
@Hypnosphi Hypnosphi deleted the dependencies.io-update-build-338.0.0 branch May 1, 2018 15:43
@dependencies dependencies bot mentioned this pull request Jan 15, 2021
Merged
@adrukh adrukh mentioned this pull request Apr 6, 2024
Open
@adrianblynch adrianblynch mentioned this pull request Apr 6, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@alexandrebodin alexandrebodin Awaiting requested review from alexandrebodin alexandrebodin is a code owner

@alterx alterx Awaiting requested review from alterx alterx is a code owner

@dangreenisrael dangreenisrael Awaiting requested review from dangreenisrael dangreenisrael is a code owner

@danielduan danielduan Awaiting requested review from danielduan

@Gongreg Gongreg Awaiting requested review from Gongreg

@Hypnosphi Hypnosphi Awaiting requested review from Hypnosphi

@igor-dv igor-dv Awaiting requested review from igor-dv igor-dv is a code owner

@jbovenschen jbovenschen Awaiting requested review from jbovenschen jbovenschen is a code owner

@naipath naipath Awaiting requested review from naipath

@ndelangen ndelangen Awaiting requested review from ndelangen ndelangen is a code owner

@renaudtertrais renaudtertrais Awaiting requested review from renaudtertrais renaudtertrais is a code owner

@rhalff rhalff Awaiting requested review from rhalff

@rmevans9 rmevans9 Awaiting requested review from rmevans9

@shilman shilman Awaiting requested review from shilman shilman is a code owner

@stijnkoopal stijnkoopal Awaiting requested review from stijnkoopal stijnkoopal is a code owner

@theinterned theinterned Awaiting requested review from theinterned theinterned is a code owner

@thomasbertet thomasbertet Awaiting requested review from thomasbertet thomasbertet is a code owner

@tmeasday tmeasday Awaiting requested review from tmeasday tmeasday is a code owner

@usulpro usulpro Awaiting requested review from usulpro usulpro is a code owner

@z4o4z z4o4z Awaiting requested review from z4o4z z4o4z is a code owner

Assignees

@Hypnosphi Hypnosphi

Labels
dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@phated @Hypnosphi @storybook-bot @dependencies-bot