Bump rimraf from 3.0.2 to 6.1.3 #8

Open

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/rimraf-6.1.3 into master

dependabot[bot] commented

2026-05-10 19:31:21 -08:00

(Migrated from github.com)

Bumps rimraf from 3.0.2 to 6.1.3.

Changelog

Sourced from rimraf's changelog.

6.1

Move to native fs/promises usage instead of promisifying manually.

6.0

Drop support for nodes before v20

Add --version to CLI

5.0

No default export, only named exports

4.4

Provide Dirent or Stats object as second argument to filter

4.3

Return boolean indicating whether the path was fully removed

Add filter option

bin: add --verbose, -v to print files as they are deleted

bin: add --no-verbose, -V to not print files as they are deleted

bin: add -i --interactive to be prompted on each deletion

bin: add -I --no-interactive to not be prompted on each deletion

4.3.1 Fixed inappropriately following symbolic links to directories

v4.2

Brought back glob support, using the new and improved glob v9

v4.1

Improved hybrid module with no need to look at the .default dangly bit. .default preserved as a reference to rimraf for compatibility with anyone who came to rely on it in v4.0.

Accept and ignore -rf and -fr arguments to the bin.

v4.0

Remove glob dependency entirely. This library now only accepts actual file and folder names to delete.

Accept array of paths or single path.

Windows performance and reliability improved.

All strategies separated into explicitly exported methods.

Drop support for Node.js below version 14

rewrite in TypeScript

... (truncated)

Commits

f738c78 6.1.3
a164a85 update deps
4635ba7 update deps
509c53f limit ci workflow permissions
68ce04f formatting
37680c5 add warning to not pass untrusted input to this method ever
786563d remove contributing doc, already covered by .github repo
dbeef73 contributing
84d27af update workflows and standard project junk
cd45498 6.1.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for rimraf since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rimraf](https://github.com/isaacs/rimraf) from 3.0.2 to 6.1.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md">rimraf's changelog</a>.</em></p> <blockquote> <h1>6.1</h1> <ul> <li>Move to native <code>fs/promises</code> usage instead of promisifying manually.</li> </ul> <h1>6.0</h1> <ul> <li>Drop support for nodes before v20</li> <li>Add <code>--version</code> to CLI</li> </ul> <h1>5.0</h1> <ul> <li>No default export, only named exports</li> </ul> <h1>4.4</h1> <ul> <li>Provide Dirent or Stats object as second argument to filter</li> </ul> <h1>4.3</h1> <ul> <li>Return boolean indicating whether the path was fully removed</li> <li>Add filter option</li> <li>bin: add --verbose, -v to print files as they are deleted</li> <li>bin: add --no-verbose, -V to not print files as they are deleted</li> <li>bin: add -i --interactive to be prompted on each deletion</li> <li>bin: add -I --no-interactive to not be prompted on each deletion</li> <li><strong>4.3.1</strong> Fixed inappropriately following symbolic links to directories</li> </ul> <h1>v4.2</h1> <ul> <li>Brought back <code>glob</code> support, using the new and improved glob v9</li> </ul> <h1>v4.1</h1> <ul> <li>Improved hybrid module with no need to look at the <code>.default</code> dangly bit. <code>.default</code> preserved as a reference to <code>rimraf</code> for compatibility with anyone who came to rely on it in v4.0.</li> <li>Accept and ignore <code>-rf</code> and <code>-fr</code> arguments to the bin.</li> </ul> <h1>v4.0</h1> <ul> <li>Remove <code>glob</code> dependency entirely. This library now only accepts actual file and folder names to delete.</li> <li>Accept array of paths or single path.</li> <li>Windows performance and reliability improved.</li> <li>All strategies separated into explicitly exported methods.</li> <li>Drop support for Node.js below version 14</li> <li>rewrite in TypeScript</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/rimraf/commit/f738c781d14fa7bc06f8e39e062d78f701fde3f1"><code>f738c78</code></a> 6.1.3</li> <li><a href="https://github.com/isaacs/rimraf/commit/a164a85093f78e40d8f995b0d8ff3a1856324768"><code>a164a85</code></a> update deps</li> <li><a href="https://github.com/isaacs/rimraf/commit/4635ba7498849cade724bd34c1ec9feae4b56236"><code>4635ba7</code></a> update deps</li> <li><a href="https://github.com/isaacs/rimraf/commit/509c53f8b0298508c3a536dc121bbc0652d3e56f"><code>509c53f</code></a> limit ci workflow permissions</li> <li><a href="https://github.com/isaacs/rimraf/commit/68ce04f9bfb436e66356428e2970c78fa2a76d02"><code>68ce04f</code></a> formatting</li> <li><a href="https://github.com/isaacs/rimraf/commit/37680c5d7f0104042ab8e8fae3e77484dc7687ca"><code>37680c5</code></a> add warning to not pass untrusted input to this method ever</li> <li><a href="https://github.com/isaacs/rimraf/commit/786563d3901763fa77090271d239233aa27e7a3a"><code>786563d</code></a> remove contributing doc, already covered by .github repo</li> <li><a href="https://github.com/isaacs/rimraf/commit/dbeef7399038d0cc467dbac5f91074cd0dc847dd"><code>dbeef73</code></a> contributing</li> <li><a href="https://github.com/isaacs/rimraf/commit/84d27afdbf7a211ecce6e9e73530aeb7278ea5d2"><code>84d27af</code></a> update workflows and standard project junk</li> <li><a href="https://github.com/isaacs/rimraf/commit/cd45498f616f9265dfe1e30640d6424348f75f04"><code>cd45498</code></a> 6.1.2</li> <li>Additional commits viewable in <a href="https://github.com/isaacs/rimraf/compare/v3.0.2...v6.1.3">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~isaacs">isaacs</a>, a new releaser for rimraf since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rimraf&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=6.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/npm_and_yarn/rimraf-6.1.3:dependabot/npm_and_yarn/rimraf-6.1.3

git checkout dependabot/npm_and_yarn/rimraf-6.1.3

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout master

git merge --no-ff dependabot/npm_and_yarn/rimraf-6.1.3

git checkout dependabot/npm_and_yarn/rimraf-6.1.3

git rebase master

git checkout master

git merge --ff-only dependabot/npm_and_yarn/rimraf-6.1.3

git checkout dependabot/npm_and_yarn/rimraf-6.1.3

git rebase master

git checkout master

git merge --no-ff dependabot/npm_and_yarn/rimraf-6.1.3

git checkout master

git merge --squash dependabot/npm_and_yarn/rimraf-6.1.3