Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps dependency-cruiser from 16.10.4 to 17.3.6.

Release notes

Sourced from dependency-cruiser's releases.

v17.3.6

🐛 fixes

  • cd6fe3af fix(report/dot): makes the dot 'flat' reporter respect collapse patterns

🧑‍🏭 refactoring

  • d58c78ad/ e884b1e1/ 58c01d1d/ refactor: replace memoize with internal Maps (#1040)
  • 464388c0 refactor(cache): uses more appropriate Set for remembering which cache contexts were initialized
  • a4a7a807 refactor(report/teamcity): passes the flowId instead of memoizing it

📖 documentation

  • 9ca0ab0b doc: various updates to type annotations
  • f3648f61 doc(cli): refreshes the documentation of the configuration scaffolding template
  • 1b12e61a doc(cli): documents the 'ndjson' logging/ progress format
  • cd52da95 doc(cli): updates progress performance-log sample
  • 54becb36 doc(report/teamcity): uses same filename pattern for typedefs as used elsewhere in the src tree

👷 maintenance

  • 64d42f95 chore(npm): updates external devDependencies
  • a3a41f16 chore: tweaks dependency-cruiser configuration
  • f924f5c5 chore(LICENSE): 2026
  • 0a82fc36 chore(main): logs the 'report from cache' step as part of the 'report' step
  • 60981148 chore(ci): uses content based cache strategy as it's faster for our self-scan
  • f9b8565e chore(ci): updates known violations
  • 120cc755 chore(progress): adds runId and user & system totals to the ndjson listener output

v17.3.5

👷 maintenance

  • 2c72a14f perf(enrich/orphan): optimizes the data structure it exercises upon (#1037)
  • c80252ed perf(enrich/derive/metrics): only create indexed graph once (#1036)
  • 1dab573d perf(enrich/derive): uses better datastructure for deriving dependents (#1035)
  • 11a608a9 refactor(enrich/derive/circular): moves creation of indexed module graph into deriveCycles (#1034)

🧹 chores

  • 6ddfe153 chore(progress): cleans up steps & performance log (#1038)
  • b8358fca doc(cache): adds missing type annotation
  • 3d20f907 chore(npm): updates external devDependencies

v17.3.5-beta-2

  • 2c72a14f perf(enrich/orphan): optimizes the data structure it exercises upon (#1037)

from the previous beta:

  • b8358fca doc(cache): adds missing type annotation
  • c80252ed perf(enrich/derive/metrics): only create indexed graph once (#1036)
  • 1dab573d perf(enrich/derive): uses better datastructure for deriving dependents (#1035)
  • 11a608a9 refactor(enrich/derive/circular): moves creation of indexed module graph into deriveCycles (#1034)

v17.3.4

... (truncated)

Commits
  • 6372494 17.3.6
  • 9ca0ab0 doc: various updates to type annotations
  • 64d42f9 chore(npm): updates external devDependencies
  • a3a41f1 chore: tweaks dependency-cruiser configuration
  • 464388c refactor(cache): uses more appropriate Set for remembering which cache contex...
  • f924f5c chore(LICENSE): 2026
  • 54becb3 fix(report/teamcity): uses same filename pattern for typedefs as used elsewhe...
  • d58c78a refactor: 👞 memoize (#1040)
  • 0a82fc3 chore(main): logs the 'report from cache' step as part of the 'report' step
  • e884b1e refactor(report/anon): replaces word list memoization with internal map
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for dependency-cruiser since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 12, 2026
Bumps [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) from 16.10.4 to 17.3.6.
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v16.10.4...v17.3.6)

---
updated-dependencies:
- dependency-name: dependency-cruiser
  dependency-version: 17.3.6
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependency-cruiser-17.3.6 branch from 996e0ae to df298bc Compare January 12, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants