Skip to content

Bump @metamask/auto-changelog from 2.6.1 to 3.4.4 - #161

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/metamask/auto-changelog-3.4.4
Closed

Bump @metamask/auto-changelog from 2.6.1 to 3.4.4#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/metamask/auto-changelog-3.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2025

Copy link
Copy Markdown
Contributor

Bumps @metamask/auto-changelog from 2.6.1 to 3.4.4.

Release notes

Sourced from @​metamask/auto-changelog's releases.

3.4.4

Added

  • Retain tag history on update command for renamed packages with new options (#182)

    • Introduced --version-before-package-rename and --tag-prefix-before-package-rename options for update command.

3.4.3

Changed

  • Place this library under the MIT / Apache 2.0 dual license (#175)

3.4.2

Fixed

  • Remove circular dependency on @metamask/utils (#170)

3.4.1

Fixed

  • Add missing dependency @metamask/utils (#168)

3.4.0

Added

  • Retain tag history for renamed packages with new validation options (#157)

    • Introduced --version-before-package-rename and --tag-prefix-before-package-rename options for validate command.

3.3.0

Added

  • Add --prettier option for Prettier-formatted changelogs (#155)

3.2.0

Added

  • Add --fix option to validate command (#148)

3.1.0

Added

  • Allow prerelease versions in release headers (#130)

3.0.0

Added

  • Support alternate tag prefixes (#120)

Changed

  • BREAKING: Update minimum Node.js version to v14 (#117)
  • Get package version from manifest (#121)
Changelog

Sourced from @​metamask/auto-changelog's changelog.

[3.4.4]

Added

  • Retain tag history on update command for renamed packages with new options (#182)

    • Introduced --version-before-package-rename and --tag-prefix-before-package-rename options for update command.

[3.4.3]

Changed

  • Place this library under the MIT / Apache 2.0 dual license (#175)

[3.4.2]

Fixed

  • Remove circular dependency on @metamask/utils (#170)

[3.4.1]

Fixed

  • Add missing dependency @metamask/utils (#168)

[3.4.0]

Added

  • Retain tag history for renamed packages with new validation options (#157)

    • Introduced --version-before-package-rename and --tag-prefix-before-package-rename options for validate command.

[3.3.0]

Added

  • Add --prettier option for Prettier-formatted changelogs (#155)

[3.2.0]

Added

  • Add --fix option to validate command (#148)

[3.1.0]

Added

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by metamaskbot, a new releaser for @​metamask/auto-changelog since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@metamask/auto-changelog](https://github.com/MetaMask/auto-changelog) from 2.6.1 to 3.4.4.
- [Release notes](https://github.com/MetaMask/auto-changelog/releases)
- [Changelog](https://github.com/MetaMask/auto-changelog/blob/main/CHANGELOG.md)
- [Commits](MetaMask/auto-changelog@v2.6.1...v3.4.4)

---
updated-dependencies:
- dependency-name: "@metamask/auto-changelog"
  dependency-version: 3.4.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2025
@dependabot
dependabot Bot requested a review from a team as a code owner September 22, 2025 06:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 22, 2025
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​metamask/​auto-changelog@​2.6.1 ⏵ 3.4.496 -3100100 +186100
Addedprettier@​2.8.810010010090100

View full report

Comment thread package.json
"license": "ISC",
"devDependencies": {
"@metamask/auto-changelog": "^2.6.1",
"@metamask/auto-changelog": "^3.4.4",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Node.js Version Mismatch in Dependencies

The package.json declares Node.js >=12.0.0 support, but the updated @metamask/auto-changelog@3.4.4 requires Node.js >=14.0.0 (a v3.0.0 breaking change). This mismatch prevents developers on Node.js 12 or 13 from installing or using development dependencies.

Fix in Cursor Fix in Web

@dependabot @github

dependabot Bot commented on behalf of github Apr 15, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #162.

@dependabot dependabot Bot closed this Apr 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/metamask/auto-changelog-3.4.4 branch April 15, 2026 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants