Skip to content

chore(deps): bump del-cli from 5.1.0 to 7.0.0 - #980

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/del-cli-7.0.0
Open

chore(deps): bump del-cli from 5.1.0 to 7.0.0#980
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/del-cli-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor

Bumps del-cli from 5.1.0 to 7.0.0.

Release notes

Sourced from del-cli's releases.

v7.0.0

Breaking

  • Require Node.js 20 aba3b05

Improvements

  • Improve error presentation 822f27c
  • Fix --dry-run behavior and clarify help text f71aaa6

sindresorhus/del-cli@v6.0.0...v7.0.0

v6.0.0

Breaking

  • Require Node.js 18 de54031

Improvements

  • Update dependencies de54031

sindresorhus/del-cli@v5.1.0...v6.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [del-cli](https://github.com/sindresorhus/del-cli) from 5.1.0 to 7.0.0.
- [Release notes](https://github.com/sindresorhus/del-cli/releases)
- [Commits](sindresorhus/del-cli@v5.1.0...v7.0.0)

---
updated-dependencies:
- dependency-name: del-cli
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 15, 2026 07:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 15, 2026
@changeset-bot

changeset-bot Bot commented Aug 15, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 9eee8c8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addeddel-cli@​7.0.01001008081100

View full report

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm meow under CC-BY-3.0

License: CC-BY-3.0 - The applicable license policy does not permit this license (5) (package/build/licenses.md)

From: pnpm-lock.yamlnpm/del-cli@7.0.0npm/meow@14.1.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/meow@14.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@ev-vaultkeeper ev-vaultkeeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review: del-cli 5.1.0 → 7.0.0 — safe to merge ✅

How it's used
del-cli is a dev-only build tool with a single usage in the repo: the clean script in packages/react-native/package.jsondel-cli android/build dist. Both arguments are plain directory paths (no globs, no flags). It's wired through the pnpm catalog, and this PR updates the catalog specifier ^5.0.0^7.0.0.

Changelog review (5→7, plus underlying del 7.1.0→8.0.1)

  • del-cli v6.0.0: require Node 18; dep updates.
  • del-cli v7.0.0: require Node 20; improved error presentation (new presentable-error dep); --dry-run fix + help-text clarification (this repo doesn't use --dry-run).
  • del v8.0.0: only breaking change is require Node 18; dependency bumps (globby 13→14, p-map 5→7, slash 4→5). No API/behavior change for non-glob directory deletion.
  • Net effect on the lockfile is a reduction (meow 14 has no dependencies) — 346 lines removed.

Node requirement
del-cli v7 needs Node 20 (via meow 14). The repo's .nvmrc is v24 and the react-native package's engines.node is >= 24.0.0, so this is satisfied in CI.

Security / performance
Dev-only build tool used only in a clean script. New transitive deps are standard sindresorhus packages, and the dependency tree shrinks overall. Socket Security and CodeQL checks on the PR pass.

Verification performed

  • pnpm install --frozen-lockfile succeeds → lockfile is consistent.
  • Ran the actual clean script: it deletes android/build and dist while preserving the rest of android/ (build.gradle, src, gradle…). Behavior is identical to 5.1.0.
  • CI: lint-and-test, CodeQL, Socket Security, and Auto Format are green.

No code changes were needed. (Minor note: dependabot labels this direct:production, but it is effectively a devDependency.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

0 participants