Skip to content

Bump simple-git, yeoman-generator and yeoman-test - #609

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-94fa7dd849
Open

Bump simple-git, yeoman-generator and yeoman-test#609
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-94fa7dd849

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps simple-git to 4.0.2 and updates ancestor dependencies simple-git, yeoman-generator and yeoman-test. These dependencies need to be updated together.

Updates simple-git from 3.36.0 to 4.0.2

Release notes

Sourced from simple-git's releases.

simple-git@4.0.2

Patch Changes

  • 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

    Thanks to @​oss-security-shopify for identifying the vulnerability.

  • Updated dependencies [68874c2]

    • @​simple-git/argv-parser@​2.0.1

simple-git@4.0.1

Patch Changes

  • 365f52d: Prepare package.json before publishing.

simple-git@4.0.0

Major Changes

  • 98864c6: Major upgrade to v4. In this version:

    • Removed previously available default export, now uses a consistently named simpleGit export.
    • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
    • Removed legacy gitP export (change to using the main simpleGit export).
    // v3 - previously supported imports
import simpleGit from "simple-git";
import { gitP } from "simple-git";
import simpleGit from "simple-git/promise";
const simpleGit = require("simple-git");
// v4 - consolidates to a single supported import
import { simpleGit } from "simple-git";
const { simpleGit } = require("simple-git");

    • Prevents the use of abbreviated long-form git options:
    // v3 - allowed the use of unambiguous long-form options
git.raw("clone", "--conf=user.name=me", "...");
// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
git.raw("fetch", "--config=user.name=me", "...");

    • Ambient environment variables are filtered before passing into the git child process.
    // v3

... (truncated)

Changelog

Sourced from simple-git's changelog.

4.0.2

Patch Changes

  • 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

    Thanks to @​oss-security-shopify for identifying the vulnerability.

  • Updated dependencies [68874c2]

    • @​simple-git/argv-parser@​2.0.1

4.0.1

Patch Changes

  • 365f52d: Prepare package.json before publishing.

4.0.0

Major Changes

  • 98864c6: Major upgrade to v4. In this version:

    • Removed previously available default export, now uses a consistently named simpleGit export.
    • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
    • Removed legacy gitP export (change to using the main simpleGit export).
    // v3 - previously supported imports
import simpleGit from "simple-git";
import { gitP } from "simple-git";
import simpleGit from "simple-git/promise";
const simpleGit = require("simple-git");
// v4 - consolidates to a single supported import
import { simpleGit } from "simple-git";
const { simpleGit } = require("simple-git");

    • Prevents the use of abbreviated long-form git options:
    // v3 - allowed the use of unambiguous long-form options
git.raw("clone", "--conf=user.name=me", "...");
// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
git.raw("fetch", "--config=user.name=me", "...");

    Thanks to @​anir0y, @​CFionaBF, @​Leeziao, @​internetteletubbie, @​idisdi, @​the-vibe-dev,

... (truncated)

Commits

Updates yeoman-generator from 8.2.2 to 10.0.1

Release notes

Sourced from yeoman-generator's releases.

v10.0.1

10.0.1 (2026-10-07)

Bug Fixes

  • storage: drop the cache when the file changes to other contents (#1870) (bf56faf)

v10.0.0

10.0.0 (2026-10-06)

⚠ BREAKING CHANGES

  • deps: bump simple-git from 3.36.0 to 4.0.2 (#1864)

Features

  • cancel a spawned command with the signal of the adapter (#1866) (b9840f6)
  • deps: bump simple-git from 3.36.0 to 4.0.2 (#1864) (c950cce)

Bug Fixes

  • storage: keep the objects read before a write (#1868) (e9cbb1b)

v9.2.0

9.2.0 (2026-09-14)

Features

  • add skipGlobalConfig option to disable the global config storage (#1858) (ea9ef51)

Bug Fixes

  • store answers of stored questions that follow a non-stored one (#1859) (df71470)

v9.1.0

9.1.0 (2026-09-12)

Features

  • add allowPackageTemplates feature (#1855) (a9d69dd)
  • create destination root on demand at createSimpleGit (#1854) (c1c5425)

v9.0.0

9.0.0 (2026-09-11)

... (truncated)

Changelog

Sourced from yeoman-generator's changelog.

10.0.1 (2026-10-07)

Bug Fixes

  • storage: drop the cache when the file changes to other contents (#1870) (bf56faf)

10.0.0 (2026-10-06)

⚠ BREAKING CHANGES

  • deps: bump simple-git from 3.36.0 to 4.0.2 (#1864)

Features

  • cancel a spawned command with the signal of the adapter (#1866) (b9840f6)
  • deps: bump simple-git from 3.36.0 to 4.0.2 (#1864) (c950cce)

Bug Fixes

  • storage: keep the objects read before a write (#1868) (e9cbb1b)

9.2.0 (2026-09-14)

Features

  • add skipGlobalConfig option to disable the global config storage (#1858) (ea9ef51)

Bug Fixes

  • store answers of stored questions that follow a non-stored one (#1859) (df71470)

9.1.0 (2026-09-12)

Features

  • add allowPackageTemplates feature (#1855) (a9d69dd)
  • create destination root on demand at createSimpleGit (#1854) (c1c5425)

9.0.0 (2026-09-11)

⚠ BREAKING CHANGES

  • do not eagerly create destinationRoot folder, create on demand at spawn (#1852)
  • update execa to v10 (#1850)
  • drop node 20 support and update dependencies (#1849)
  • templatePath() and destinationPath() throw when the resolved path is outside the source/destination root.

Features

  • do not eagerly create destinationRoot folder, create on demand at spawn (#1852) (0a14c27)

... (truncated)

Commits
  • 70e374d chore(main): release 10.0.1 (#1871)
  • bf56faf fix(storage): drop the cache when the file changes to other contents (#1870)
  • e60cd75 chore(main): release 10.0.0 (#1867)
  • c950cce feat(deps)!: bump simple-git from 3.36.0 to 4.0.2 (#1864)
  • e9cbb1b fix(storage): keep the objects read before a write (#1868)
  • 8541418 chore(deps): bump the codeql-action group with 4 updates (#1865)
  • b9840f6 feat: cancel a spawned command with the signal of the adapter (#1866)
  • 2421833 chore(deps): bump the codeql-action group with 4 updates (#1862)
  • fbd2640 chore(dependabot): use chore prefix for github-actions updates (#1861)
  • 1857358 chore(main): release 9.2.0 (#1860)
  • Additional commits viewable in compare view

Updates yeoman-test from 11.6.0 to 11.8.2

Release notes

Sourced from yeoman-test's releases.

v11.8.2

11.8.2 (2026-09-07)

Bug Fixes

v11.8.1

11.8.1 (2026-09-06)

Bug Fixes

v11.8.0

11.8.0 (2026-09-06)

Features

v11.7.0

11.7.0 (2026-09-02)

Features

  • accept @​yeoman/adapter v5 and mem-fs v6 (#329) (a42c4c3)
Changelog

Sourced from yeoman-test's changelog.

11.8.2 (2026-09-07)

Bug Fixes

11.8.1 (2026-09-06)

Bug Fixes

11.8.0 (2026-09-06)

Features

11.7.0 (2026-09-02)

Features

  • accept @​yeoman/adapter v5 and mem-fs v6 (#329) (a42c4c3)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump simple-git, yeoman-generator and yeoman-test
236c347 
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) to 4.0.2 and updates ancestor dependencies [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git), [yeoman-generator](https://github.com/yeoman/generator) and [yeoman-test](https://github.com/yeoman/yeoman-test). These dependencies need to be updated together.


Updates `simple-git` from 3.36.0 to 4.0.2
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@4.0.2/simple-git)

Updates `yeoman-generator` from 8.2.2 to 10.0.1
- [Release notes](https://github.com/yeoman/generator/releases)
- [Changelog](https://github.com/yeoman/generator/blob/main/CHANGELOG.md)
- [Commits](yeoman/generator@v8.2.2...v10.0.1)

Updates `yeoman-test` from 11.6.0 to 11.8.2
- [Release notes](https://github.com/yeoman/yeoman-test/releases)
- [Changelog](https://github.com/yeoman/yeoman-test/blob/main/CHANGELOG.md)
- [Commits](yeoman/yeoman-test@v11.6.0...v11.8.2)

---
updated-dependencies:
- dependency-name: simple-git
  dependency-version: 4.0.2
  dependency-type: indirect
- dependency-name: yeoman-generator
  dependency-version: 10.0.1
  dependency-type: direct:production
- dependency-name: yeoman-test
  dependency-version: 11.8.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rzhao271 Raymond Zhao (rzhao271) Awaiting requested review from rzhao271

At least 1 approving review is required to merge this pull request.

Assignees

@rzhao271 Raymond Zhao (rzhao271)

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rzhao271