chore: release main

LavaMoat · Jan 18, 2024 · 8b05b97 · 8b05b97
1 parent 1628b55
commit 8b05b97
Show file tree

Hide file tree

Showing 19 changed files with 171 additions and 30 deletions.
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,12 +1,12 @@
 {
-  "packages/aa": "4.0.0",
-  "packages/allow-scripts": "3.0.0",
-  "packages/webpack": "0.1.0-beta.0",
-  "packages/browserify": "17.0.0",
-  "packages/core": "15.0.0",
-  "packages/lavapack": "6.0.0",
-  "packages/node": "8.0.0",
+  "packages/aa": "4.0.1",
+  "packages/allow-scripts": "3.0.1",
+  "packages/webpack": "0.1.1-beta.0",
+  "packages/browserify": "17.0.1",
+  "packages/core": "15.1.0",
+  "packages/lavapack": "6.0.1",
+  "packages/node": "8.0.1",
   "packages/preinstall-always-fail": "2.0.0",
-  "packages/tofu": "7.0.0",
-  "packages/viz": "7.0.0"
+  "packages/tofu": "7.1.0",
+  "packages/viz": "7.0.1"
 }
diff --git a/packages/aa/CHANGELOG.md b/packages/aa/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [4.0.1](https://github.com/LavaMoat/LavaMoat/compare/aa-v4.0.0...aa-v4.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+
 ## [4.0.0](https://github.com/LavaMoat/LavaMoat/compare/aa-v3.1.5...aa-v4.0.0) (2023-10-18)
 
 

diff --git a/packages/aa/package.json b/packages/aa/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/aa",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "LavaMoat's secure package naming convention",
   "author": "kumavis",
   "license": "MIT",

diff --git a/packages/allow-scripts/CHANGELOG.md b/packages/allow-scripts/CHANGELOG.md
@@ -1,5 +1,21 @@
 # Changelog
 
+## [3.0.1](https://github.com/LavaMoat/LavaMoat/compare/allow-scripts-v3.0.0...allow-scripts-v3.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **deps:** update dependency bin-links to v4.0.3 ([b8efb10](https://github.com/LavaMoat/LavaMoat/commit/b8efb100f4ce0b6a42ad37f16b524b3c4d4acc50))
+* **deps:** update dependency npm-normalize-package-bin to v3.0.1 ([d2576fb](https://github.com/LavaMoat/LavaMoat/commit/d2576fb4fd6c21f15a03329d2bdef0521a6ab4f7))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.0.0 to ^4.0.1
+
 ## [3.0.0](https://github.com/LavaMoat/LavaMoat/compare/allow-scripts-v2.5.1...allow-scripts-v3.0.0) (2023-10-18)
 
 

diff --git a/packages/allow-scripts/package.json b/packages/allow-scripts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/allow-scripts",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "A tool for running only the dependency lifecycle hooks specified in an allowlist.",
   "repository": {
     "type": "git",
@@ -39,7 +39,7 @@
     "test:run": "ava"
   },
   "dependencies": {
-    "@lavamoat/aa": "^4.0.0",
+    "@lavamoat/aa": "^4.0.1",
     "@npmcli/run-script": "6.0.2",
     "bin-links": "4.0.3",
     "npm-normalize-package-bin": "3.0.1",

diff --git a/packages/browserify/CHANGELOG.md b/packages/browserify/CHANGELOG.md
@@ -13,6 +13,23 @@
   * dependencies
     * @lavamoat/lavapack bumped from ^5.2.3 to ^5.2.4
 
+## [17.0.1](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-browserify-v17.0.0...lavamoat-browserify-v17.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **deps:** update dependency convert-source-map to v2.0.0 ([f91b369](https://github.com/LavaMoat/LavaMoat/commit/f91b36962dc52fd63c824e6428589202d9a5535e))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.0.0 to ^4.0.1
+    * @lavamoat/lavapack bumped from ^6.0.0 to ^6.0.1
+    * lavamoat-core bumped from ^15.0.0 to ^15.1.0
+
 ## [17.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-browserify-v16.0.0...lavamoat-browserify-v17.0.0) (2023-10-18)
 
 

diff --git a/packages/browserify/package.json b/packages/browserify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-browserify",
-  "version": "17.0.0",
+  "version": "17.0.1",
   "description": "browserify plugin for sandboxing dependencies with LavaMoat",
   "repository": {
     "type": "git",
@@ -29,14 +29,14 @@
     "test:prep": "WRITE_AUTO_POLICY=1 ./test/fixtures/secureBundling/run.sh"
   },
   "dependencies": {
-    "@lavamoat/aa": "^4.0.0",
-    "@lavamoat/lavapack": "^6.0.0",
+    "@lavamoat/aa": "^4.0.1",
+    "@lavamoat/lavapack": "^6.0.1",
     "browser-resolve": "2.0.0",
     "concat-stream": "1.6.2",
     "convert-source-map": "2.0.0",
     "duplexify": "4.1.2",
     "json-stable-stringify": "1.0.2",
-    "lavamoat-core": "^15.0.0",
+    "lavamoat-core": "^15.1.0",
     "pify": "4.0.1",
     "readable-stream": "3.6.2",
     "source-map": "0.5.7",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,26 @@
 # Changelog
 
+## [15.1.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-core-v15.0.0...lavamoat-core-v15.1.0) (2024-01-18)
+
+
+### Features
+
+* **core:** ship some types ([#732](https://github.com/LavaMoat/LavaMoat/issues/732)) ([d5de381](https://github.com/LavaMoat/LavaMoat/commit/d5de381edccb622b81dd02f9bd59cae605e71cdf))
+
+
+### Bug Fixes
+
+* **core:** add better types to policy loading and merging functions ([db799d1](https://github.com/LavaMoat/LavaMoat/commit/db799d17633a638a5a76ec52cb788ef705ae6f77))
+* **core:** update LavaMoatPolicy types ([d9292ca](https://github.com/LavaMoat/LavaMoat/commit/d9292ca7b99a0eedc215670cb1791f6dd0c3ce07))
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * lavamoat-tofu bumped from ^7.0.0 to ^7.1.0
+
 ## [15.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-core-v14.4.1...lavamoat-core-v15.0.0) (2023-10-18)
 
 

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-core",
-  "version": "15.0.0",
+  "version": "15.1.0",
   "description": "LavaMoat kernel and utils",
   "repository": {
     "type": "git",
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "json-stable-stringify": "1.0.2",
-    "lavamoat-tofu": "^7.0.0",
+    "lavamoat-tofu": "^7.1.0",
     "merge-deep": "3.0.3",
     "type-fest": "4.7.1"
   },

diff --git a/packages/lavapack/CHANGELOG.md b/packages/lavapack/CHANGELOG.md
@@ -6,6 +6,22 @@
   * dependencies
     * lavamoat-core bumped from ^14.2.2 to ^14.2.3
 
+## [6.0.1](https://github.com/LavaMoat/LavaMoat/compare/lavapack-v6.0.0...lavapack-v6.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **deps:** update dependency convert-source-map to v2.0.0 ([f91b369](https://github.com/LavaMoat/LavaMoat/commit/f91b36962dc52fd63c824e6428589202d9a5535e))
+* **lavapack:** espree should be a dep, not a dev dep ([bd71b06](https://github.com/LavaMoat/LavaMoat/commit/bd71b061b77343f0a8efa16be00b0801de8471a2))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * lavamoat-core bumped from ^15.0.0 to ^15.1.0
+
 ## [6.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavapack-v5.4.1...lavapack-v6.0.0) (2023-10-18)
 
 

diff --git a/packages/lavapack/package.json b/packages/lavapack/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/lavapack",
-  "version": "6.0.0",
+  "version": "6.0.1",
   "description": "LavaMoat packer",
   "repository": {
     "type": "git",
@@ -33,7 +33,7 @@
     "convert-source-map": "2.0.0",
     "espree": "9.6.1",
     "json-stable-stringify": "1.0.2",
-    "lavamoat-core": "^15.0.0",
+    "lavamoat-core": "^15.1.0",
     "readable-stream": "3.6.2",
     "through2": "2.0.5",
     "umd": "3.0.3"

diff --git a/packages/node/CHANGELOG.md b/packages/node/CHANGELOG.md
@@ -6,6 +6,24 @@
   * dependencies
     * lavamoat-core bumped from ^14.2.2 to ^14.2.3
 
+## [8.0.1](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-v8.0.0...lavamoat-v8.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **deps:** update dependency node-gyp-build to v4.6.1 ([570e00f](https://github.com/LavaMoat/LavaMoat/commit/570e00fcf70535e8c1abb9ee117d873130283cca))
+* **deps:** update dependency yargs to v17.7.2 ([a1b21d3](https://github.com/LavaMoat/LavaMoat/commit/a1b21d3db1904d05cd9e82bc62eb56dfafb76be2))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.0.0 to ^4.0.1
+    * lavamoat-core bumped from ^15.0.0 to ^15.1.0
+    * lavamoat-tofu bumped from ^7.0.0 to ^7.1.0
+
 ## [8.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-v7.3.1...lavamoat-v8.0.0) (2023-10-18)
 
 

diff --git a/packages/node/package.json b/packages/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lavamoat",
-  "version": "8.0.0",
+  "version": "8.0.1",
   "description": "",
   "repository": {
     "type": "git",
@@ -35,12 +35,12 @@
   "dependencies": {
     "@babel/code-frame": "7.22.13",
     "@babel/highlight": "7.22.20",
-    "@lavamoat/aa": "^4.0.0",
+    "@lavamoat/aa": "^4.0.1",
     "bindings": "1.5.0",
     "htmlescape": "1.1.1",
     "json-stable-stringify": "1.0.2",
-    "lavamoat-core": "^15.0.0",
-    "lavamoat-tofu": "^7.0.0",
+    "lavamoat-core": "^15.1.0",
+    "lavamoat-tofu": "^7.1.0",
     "node-gyp-build": "4.6.1",
     "resolve": "1.22.8",
     "yargs": "17.7.2"

diff --git a/packages/tofu/CHANGELOG.md b/packages/tofu/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [7.1.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-tofu-v7.0.0...lavamoat-tofu-v7.1.0) (2024-01-18)
+
+
+### Features
+
+* **tofu:** provide type definitions ([5057d19](https://github.com/LavaMoat/LavaMoat/commit/5057d1972eac01531ad0c06de0038a97aa419378))
+
+
+### Bug Fixes
+
+* **core:** update LavaMoatPolicy types ([d9292ca](https://github.com/LavaMoat/LavaMoat/commit/d9292ca7b99a0eedc215670cb1791f6dd0c3ce07))
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **tofu:** make lavamoat-core a peer dep ([21b0b2b](https://github.com/LavaMoat/LavaMoat/commit/21b0b2b1295bde752e5f213dfa93d3a375579e20))
+
 ## [7.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-tofu-v6.2.1...lavamoat-tofu-v7.0.0) (2023-10-18)
 
 

diff --git a/packages/tofu/package.json b/packages/tofu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-tofu",
-  "version": "7.0.0",
+  "version": "7.1.0",
   "description": "This is the TOFU (trust-on-first-use) static analysis tool used by LavaMoat to automatically generate useable config",
   "repository": {
     "type": "git",

diff --git a/packages/viz/CHANGELOG.md b/packages/viz/CHANGELOG.md
@@ -1,5 +1,20 @@
 # Changelog
 
+## [7.0.1](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-viz-v7.0.0...lavamoat-viz-v7.0.1) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **deps:** update dependency yargs to v17.7.2 ([a1b21d3](https://github.com/LavaMoat/LavaMoat/commit/a1b21d3db1904d05cd9e82bc62eb56dfafb76be2))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * lavamoat-core bumped from ^15.0.0 to ^15.1.0
+
 ## [7.0.0](https://github.com/LavaMoat/LavaMoat/compare/lavamoat-viz-v6.2.1...lavamoat-viz-v7.0.0) (2023-10-18)
 
 

diff --git a/packages/viz/package.json b/packages/viz/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lavamoat-viz",
-  "version": "7.0.0",
+  "version": "7.0.1",
   "description": "This is a dashboard for exploring a dependency graph and LavaMoat policy file",
   "repository": {
     "type": "git",
@@ -35,7 +35,7 @@
     "test": "npm run build"
   },
   "dependencies": {
-    "lavamoat-core": "^15.0.0",
+    "lavamoat-core": "^15.1.0",
     "ncp": "2.0.0",
     "open": "7.4.2",
     "pify": "4.0.1",

diff --git a/packages/webpack/CHANGELOG.md b/packages/webpack/CHANGELOG.md
@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.1.1-beta.0](https://github.com/LavaMoat/LavaMoat/compare/webpack-v0.1.0-beta.0...webpack-v0.1.1-beta.0) (2024-01-18)
+
+
+### Bug Fixes
+
+* **deps:** pin dependencies ([4006c1f](https://github.com/LavaMoat/LavaMoat/commit/4006c1f386c3024e8a8092ded9b98ede20de084e))
+* **webpack,survey:** add missing deps ([52e7b1c](https://github.com/LavaMoat/LavaMoat/commit/52e7b1ce3a3302f119bc5ff44aa298c21f77b255))
+* **webpack:** compatibility fix for overwriting exports reference in cjs ([2259d74](https://github.com/LavaMoat/LavaMoat/commit/2259d74c23f627cb4839370ffc1dc98813b495d6))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @lavamoat/aa bumped from ^4.0.0 to ^4.0.1
+    * lavamoat-core bumped from ^15.0.0 to ^15.1.0
+
 ## [0.1.0-beta.0](https://github.com/LavaMoat/LavaMoat/compare/webpack-v0.0.1-beta.0...webpack-v0.1.0-beta.0) (2023-11-23)
 
 

diff --git a/packages/webpack/package.json b/packages/webpack/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@lavamoat/webpack",
-  "version": "0.1.0-beta.0",
+  "version": "0.1.1-beta.0",
   "description": "LavaMoat Webpack plugin for running dependencies in Compartments without eval",
   "repository": {
     "type": "git",
@@ -37,8 +37,8 @@
     "webpack": "^5.80.2"
   },
   "dependencies": {
-    "@lavamoat/aa": "^4.0.0",
-    "lavamoat-core": "^15.0.0"
+    "@lavamoat/aa": "^4.0.1",
+    "lavamoat-core": "^15.1.0"
   },
   "devDependencies": {
     "css-loader": "6.7.4",