Update dependency yeoman-generator to v7 by mend-for-github-com[bot] · Pull Request #14 · Codefied/generator-tf-module

mend-for-github-com · 2025-08-08T08:13:47Z

This PR contains the following updates:

Package	Type	Update	Change
yeoman-generator (source)	dependencies	major	`^5.2.0` → `^7.0.0`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
Critical	9.8	CVE-2021-44906
High	8.8	CVE-2022-0235
High	7.1	CVE-2022-0144
Medium	5.3	CVE-2021-23343
Medium	5.3	CVE-2022-25883
Medium	5.3	CVE-2025-25288
Medium	5.3	CVE-2025-25290

Release Notes

yeoman/generator (yeoman-generator)

`v7.5.0`

Compare Source

What's Changed

docs: remove funding as we use a global setup by @UlisesGascon in #1596
ci: remove dependabot as we use renovate now by @UlisesGascon in #1597
ci: update Node.js versions supported and remove legacy step by @UlisesGascon in #1599
ci: apply security best practices by @UlisesGascon in #1601
ci: pin dependencies by @step-security-bot in #1602
ci: remove travis legacy references by @UlisesGascon in #1598
Update github-username to 9.0.0 to fix security vulnerability by @strmer15 in #1603
chore: apply prettier by @mshima in #1606
chore: deprecate github/username utility by @mshima in #1605
feat: move @types/node to peer dependencies and make it optional. by @mshima in #1607

New Contributors

@step-security-bot made their first contribution in #1602
@strmer15 made their first contribution in #1603

Full Changelog: yeoman/generator@v7.4.0...v7.5.0

`v7.4.0`

Compare Source

What's Changed

chore: Export questions types by @jmuzina in #1578
fix: replace Duplex with Transform by @mshima in #1577
fix: keep resolved as absolute path by @mshima in #1580
feat: don't modify original copyOptions and pass fromBasePath to rend… by @mshima in #1581
chore: fix lint warnings by @mshima in #1582

New Contributors

@jmuzina made their first contribution in #1578

Full Changelog: yeoman/generator@v7.3.3...v7.4.0

`v7.3.3`

Compare Source

migrate to eslint 9 and test adjusts
permissive @types/node dependency.

`v7.3.2`

Compare Source

What's Changed

emit event before:queueOwnTasks by @mshima in #1528

Full Changelog: yeoman/generator@v7.3.1...v7.3.2

`v7.3.1`

Compare Source

What's Changed

fix inheritTasks with taskPrefix by @mshima in #1525

Full Changelog: yeoman/generator@v7.3.0...v7.3.1

`v7.3.0`

Compare Source

What's Changed

add inheritTasks to features by @mshima in #1523

Full Changelog: yeoman/generator@v7.2.0...v7.3.0

`v7.2.0`

Compare Source

Use mem-fs-editor fromBasePath (#1517) 520c16d

`v7.1.1`

Compare Source

resolvePackage is not provided by Environment v4 eaa30f2
bump dependencies 3c45eb3 cd1adf6
Test cleanup: spawn command (#1488) 4d39258
Test cleanup: deprecate.test.ts (#1489) 0add881

`v7.1.0`

Compare Source

add pipeline() method and improve types a459b00

`v7.0.0`

Compare Source

bump required node versions ea4fd51
bump yeoman-environment to v4.0.0 e5eb6f6
fs.test.ts: Improve readbility, add types to fix TS problems (#1482) 3dd4c2d

`v6.0.1`

Compare Source

set sourceRoot before help 16b16fb

`v6.0.0`

Compare Source

The yeoman-generator package now export a native ESM module. (Learn more about ESM)

Notable changes:

Convert to typescript
Drop node 12/14 support.
Requires yeoman-environment ^3.18.4.
Provides built-in types.
Uses new @yeoman/types for environment/generator interoperability. May conflict with @types/yeoman-* types.
Move skipParseOptions and customPriorities to features c12806a
Drop deprecated install (and not included by default) action 1a856b1
Install action was not scalable. A separated task package can be considered at yeoman-api.
run-async is not provided anymore:
Convert to Promises or use run-async v3:

import runAsync from 'run-async';
class Gen {
  asyncTaskWithCallback: runAsync(function() {
    const done = this.async();
    asyncMethod(done);
  }),
}

composeWith is async:
- If used inside constructor, move it to _postConstruct or beforeQueue.
- Due to complexity, prefer composeWith(generator, composeOptions signature.

`v5.10.0`

Compare Source

accept yeoman-environment v4 a8c526b

`v5.9.0`

Compare Source

adjusts for yeoman-api 553537b

`v5.8.0`

Compare Source

always create a new mem-fs-editor instance instead of using shared instance. 7bec553

`v5.7.1`

Compare Source

add options to queueTransformStream. dac0db6

`v5.7.0`

Compare Source

make prompt default value dynamic ea460eb
show error message when task fails. 92cc534

`v5.6.1`

Compare Source

Move custom args inside the runAsync for better error handling ef3f702
Allow task to override taskPrefix. d2f4274
Fix destinationRoot overridden by current value. f6e1e67
Fix resolved when not passed by options. 52ac34c

`v5.6.0`

Compare Source

Bump version of shelljs to avoid vulnerable 0.8.4 version (#1325) 9c798e6
Return earlier at extractTasksFromPriority (#1324) 0bfb51a
Allow to edit priorities. (#1323) 2a6cf47

`v5.5.2`

Compare Source

Fix createStorage with options. 185a408

`v5.5.1`

Compare Source

Add options parameter to createStorage. 82db7d0

`v5.5.0`

Compare Source

Rework private methods. dac452e
Add args to queueTask. cf8580f
Add optional support to sorted Storage. cf2e53f
Documentation improvements.

`v5.4.2`

Compare Source

Fix composing with esm generator (#1308) 4b7f115

`v5.4.1`

Compare Source

Fix for esm generator. 979b63d

`v5.4.0`

Compare Source

Add immediately parameter to composeWith 8fd5c86
Add support to beforeQueue. b8747da

`v5.3.0`

Compare Source

Implement async fs methods. (#1301) 9cab8c9
Add test for path unsafe string. (#1300) 8bc6267
Answer stored inside config should take precedence over suggestions. (#1297) c1c847d
Bump mem-fs-editor to 9.0.0 (#1298) ce12e7f
Implement taskPrefix feature. (#1296) 84551ee
Bump yeoman-test to 6.0.0 (#1295) 5f3b2fb
Bump mem-fs to 2.0.0 and mem-fs-editor to 8.1.2 (#1290) d8dfd10
Load environment resources when running help. (#1288) 3579322
Fix 4.x api documentation link. a0313cd
Add api documentation link for 4.x b44ec7d

If you want to rebase/retry this PR, check this box

mend-for-github-com · 2025-08-08T08:13:49Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

[08:13:40.412] INFO (485865): Installing tool yarn-slim@1.22.22...
[08:13:40.498] WARN (485865): Npm error:
ERROR: npm v10.9.2 is known not to run on Node.js v14.21.3.  This version of npm supports the following node versions: `^18.17.0 || >=20.5.0`. You can find the latest version at https://nodejs.org/.

ERROR:
/opt/containerbase/tools/node/22.16.0/lib/node_modules/npm/lib/utils/error-message.js:11
  er.message &&= replaceInfo(er.message)
             ^^^

SyntaxError: Unexpected token '&&='
    at wrapSafe (internal/modules/cjs/loader.js:1029:16)
    at Module._compile (internal/modules/cjs/loader.js:1078:27)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1143:10)
    at Module.load (internal/modules/cjs/loader.js:979:32)
    at Function.Module._load (internal/modules/cjs/loader.js:819:12)
    at Module.require (internal/modules/cjs/loader.js:1003:19)
    at require (internal/modules/cjs/helpers.js:107:18)
    at Object.<anonymous> (/opt/containerbase/tools/node/22.16.0/lib/node_modules/npm/lib/cli/exit-handler.js:2:48)
    at Module._compile (internal/modules/cjs/loader.js:1114:14)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:1143:10)
[08:13:40.505] ERROR (485865): npm install command failed
[08:13:40.505] FATAL (485865): Install tool yarn-slim failed in 98ms.

Update dependency yeoman-generator to v7

e64329b

mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 8, 2025

Navigation Menu

Repository navigation

Update dependency yeoman-generator to v7 - #14

Update dependency yeoman-generator to v7#14
mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/yeoman-generator-7.x

mend-for-github-com Bot commented Aug 8, 2025 •

edited

Loading

Uh oh!

mend-for-github-com Bot commented Aug 8, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

mend-for-github-com Bot commented Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Uh oh!

mend-for-github-com Bot commented Aug 8, 2025

⚠️ Artifact update problem

File name: yarn.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

mend-for-github-com Bot commented Aug 8, 2025 •

edited

Loading