Skip to content

Bump npm-check-updates from 19.6.6 to 20.0.0#433

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-check-updates-20.0.0
Open

Bump npm-check-updates from 19.6.6 to 20.0.0#433
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-check-updates-20.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Bumps npm-check-updates from 19.6.6 to 20.0.0.

Release notes

Sourced from npm-check-updates's releases.

v20.0.0

Auto Cooldown

The cooldown option is now automatically applied from the respective package manager's config:

  • npm - min-release-age (#1632)
  • yarn - npmMinimalAgeGate (excluding npmPreapprovedPackages) (#1643)
  • pnpm - minimumReleaseAge (excluding minimumReleaseAgeExclude) (#1639)

Why is this a breaking change?

Other changes

New Contributors

Full Changelog: raineorshine/npm-check-updates@v19.6.6...v20.0.0

Commits
  • a5d46ef 20.0.0
  • 612a33e feat: auto-apply yarn npmMinimalAgeGate as cooldown, respect `npmPreapprove...
  • 4e04b40 feat: auto-apply pnpm minimumReleaseAge as cooldown (#1639)
  • cfb1083 Potential fix for code scanning alert no. 13: Incomplete string escaping or e...
  • 9b9c139 Automatically apply npm min-release-age config as cooldown (#1632)
  • 8d9c32e update dependencies; fix vulnerabilities (#1630)
  • fb07ec2 Bump glob and markdownlint-cli (#1625)
  • 94f0eee Bump hosted-git-info from 9.0.0 to 9.0.2 (#1622)
  • 046f292 Bump @​typescript-eslint/eslint-plugin from 8.44.1 to 8.57.2 (#1619)
  • 57f75a6 Bump lodash and @​types/lodash (#1615)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [npm-check-updates](https://github.com/raineorshine/npm-check-updates) from 19.6.6 to 20.0.0.
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v19.6.6...v20.0.0)

---
updated-dependencies:
- dependency-name: npm-check-updates
  dependency-version: 20.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants