build(deps): bump statuses from 2.0.1 to 2.0.2 by dependabot[bot] · Pull Request #1888 · koajs/koa (original) (raw)

Bumps statuses from 2.0.1 to 2.0.2.

Release notes

Sourced from statuses's releases.

v2.0.2

What's Changed

• Ci/add missing node versions by @​carpasse in jshttp/statuses#32
• chore: add support for OSSF scorecard reporting by @​inigomarquinez in jshttp/statuses#24
• chore: pin dependencies and specify permissions in the pipeline by @​inigomarquinez in jshttp/statuses#25
• docs: add openssf badge in readme file by @​inigomarquinez in jshttp/statuses#29
• chore: add codeql pipeline by @​inigomarquinez in jshttp/statuses#26
• chore: add dependency review tool by @​inigomarquinez in jshttp/statuses#27
• chore: add dependabot by @​inigomarquinez in jshttp/statuses#28
• fix: use ubuntu-latest as ci runner by @​UlisesGascon in jshttp/statuses#33
• Replace deprecated String.prototype.substr() by @​CommanderRoot in jshttp/statuses#23
• ci: modernize pipelines by @​UlisesGascon in jshttp/statuses#34
• fix: typo in pipeline by @​UlisesGascon in jshttp/statuses#39
• build(deps-dev): bump raw-body from 2.4.1 to 2.5.2 by @​dependabot in jshttp/statuses#35
• build(deps-dev): bump eslint-plugin-promise from 4.2.1 to 4.3.1 by @​dependabot in jshttp/statuses#36
• build(deps-dev): bump csv-parse from 4.15.1 to 4.16.3 by @​dependabot in jshttp/statuses#37
• build(deps-dev): bump eslint-plugin-import from 2.23.2 to 2.31.0 by @​dependabot in jshttp/statuses#38
• Release: 2.0.2 by @​UlisesGascon in jshttp/statuses#40

New Contributors

• @​carpasse made their first contribution in jshttp/statuses#32
• @​inigomarquinez made their first contribution in jshttp/statuses#24
• @​UlisesGascon made their first contribution in jshttp/statuses#33
• @​CommanderRoot made their first contribution in jshttp/statuses#23
• @​dependabot made their first contribution in jshttp/statuses#35

Full Changelog: jshttp/statuses@v2.0.1...v2.0.2

Changelog

Sourced from statuses's changelog.

2.0.2 / 2025-06-06

• Migrate to String.prototype.slice()

Commits

• 33ec007 2.0.2 (#40)
• cc539ee build(deps-dev): bump eslint-plugin-import from 2.23.2 to 2.31.0 (#38)
• c3a417a build(deps-dev): bump csv-parse from 4.15.1 to 4.16.3 (#37)
• 99d64ae build(deps-dev): bump eslint-plugin-promise from 4.2.1 to 4.3.1 (#36)
• 6eb7e11 build(deps-dev): bump raw-body from 2.4.1 to 2.5.2 (#35)
• 2e7a28e fix: typo in pipeline (#39)
• 8f80743 ci: modernize pipelines (#34)
• ed17ccd chore: migrate to String.prototype.slice() (#23)
• 76d8502 fix: use ubuntu-latest as ci runner (#33)
• 4f369f5 ci: add dependabot (#28)
• Additional commits viewable in compare view Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for statuses since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)