chore(deps): bump d3-color from 2.0.0 to 3.0.1 #3241
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [d3-color](https://github.com/d3/d3-color) from 2.0.0 to 3.0.1. - [Release notes](https://github.com/d3/d3-color/releases) - [Commits](d3/d3-color@v2.0.0...v3.0.1) --- updated-dependencies: - dependency-name: d3-color dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
|
EDIT: Sorry, I misread the security report for a long time. I thought the security issue in Thank you very much for your work on this amazing project ❤️ |
|
Thanks @jfmengels. Is this the same issue as #3321? |
|
FWIW, I do plan to update d3-color as new releases are made. This automatic PR was closed in favor of a later manual update. Some of the new D3 modules have changed their settings to "type": "module" and we first need to make sure we don't have any downstream breakage when we switch to using those. |
|
Yes it is the same issue. Thank you for considering this 🙏 |
Bumps d3-color from 2.0.0 to 3.0.1.
Release notes
Sourced from d3-color's releases.
Commits
7d61bbe3.0.193bc4ffrelated d3/d33; extract copyrights from LICENSE611e1c33.0.04c2be7eAdopt type=module (#90)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)