Griefed/serverpackcreator-de
Watch
1
0
Fork
You've already forked serverpackcreator-de
 0
Code Issues 1 Pull requests 10 Projects Releases 11 Packages 1 Wiki Activity Actions

fix(deps): update dependency @quasar/cli to v5 #3

Open
renovate-bot wants to merge 1 commit from renovate/quasar-cli-5.x into master
pull from: renovate/quasar-cli-5.x
merge into: Griefed:master
Conversation 0 Commits 1 Files changed 2 +2491 -3893
renovate-bot commented 2026-10-16 07:14:26 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Change Age Confidence
@quasar/cli (source) 1.3.2 → 5.0.4 age confidence

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions

CVE-2026-106105 / GHSA-fh39-c73x-5pjv

More information

Details

The @quasar/ssl-certificate development utility caches a combined PEM containing a generated private key and certificate without explicitly restricting its filesystem permissions. On systems with a typical process umask, the PEM can be readable by other local users. A local attacker with filesystem access could copy and reuse the private key to impersonate a development TLS endpoint in an environment that trusts the certificate.

The generated certificate was also unnecessarily CA-capable and included broad key usages beyond its localhost HTTPS purpose. Its IPv6 loopback entry was encoded as a DNS name rather than an IP subject alternative name.

The remediation writes and repairs the cached PEM with owner-only permissions on supported platforms, generates a non-CA server-auth leaf certificate with constrained key usage, corrects the IPv6 loopback SAN, and bases cache expiry on content modification time so permission metadata changes cannot extend the certificate lifetime. This issue does not expose the key remotely by itself; exploitation requires another local user to be able to read the cached PEM file.

Severity

  • CVSS Score: 8.4 / 10 (High)
  • Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

quasarframework/quasar (@​quasar/cli)

v5.0.4

Compare Source

This is the optional globally-installed part of the Quasar CLI

Security fix

  • fix(ssl-certificate): restrict development TLS credentials

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v5.0.3

Compare Source

This is the optional globally-installed part of the Quasar CLI

Changes

  • feat(cli): upgraded deps
  • fix(cli): upgrade cmd should correctly install selected packages (if any selection changes)
  • fix(cli): banner when using the deprecated "create" cmd
  • fix(cli): configured npm registry detection; also, make registry requests robust

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v5.0.2

Compare Source

This is the optional globally-installed part of the Quasar CLI

Changes

  • feat(cli): upgrade deps
  • feat(cli): adapt to newer clack/prompts specs (remove workaround on note() - not needed anymore)
  • feat(cli): modernize cli-pkg

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v5.0.1

Compare Source

This is the optional globally-installed part of the Quasar CLI

Changes

  • fix(cli): update help menu
  • fix(cli): spawn stdio handling
  • fix(cli): correctly handle browser opening failures

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v5.0.0

Compare Source

This is the optional globally-installed part of the Quasar CLI

Breaking changes

The "serve" command now uses the native hono/proxy (for the --proxy, -P cmd option) instead of http-proxy-middleware. Example of proxy file:

export default ({ app, proxy }) => {
  app.get('/proxy/:path', (c) => {
    return proxy('http://some.api.com/' + c.req.param('path'))
  })
}

Changes

  • feat(cli): modernize codebase; drop some deps and replace with native Node.js alternatives
  • feat+refactor(cli): rewrite the "upgrade" cmd; parallel NPM registry fetching; use modern prompts
  • feat(cli): all commands have the "--no-color" option
  • feat(cli): upgrade deps

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v4.0.0

Compare Source

This is the optional globally-installed part of the Quasar CLI

Changes

  • feat(cli): serve cmd > replace express with Hono
  • feat(cli): add --nocolor param to all commands
  • feat(cli): serve cmd > disregard "quasar" package.json prop
  • fix(cli): serve --open param handling

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v3.0.0

Compare Source

This is the optional globally-installed part of the Quasar CLI

Breaking changes

  1. Requires Node.js >= 20.20
  2. If using the "quasar serve" command with proxy, you will need to update the proxy rules to match http-proxy-middleware v3 specs.

Other changes

  • feat(cli): upgraded all deps, including express (v5), http-proxy-middleware (v3), open, route-cache, update-notifier
  • fix(cli): [security] upgrade to our newer quasar/ssl-certificate

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.5.0

Compare Source

This is the optional globally-installed part of the Quasar CLI

Changes

  • feat(cli): add bun.lock support (#​17775)
  • feat(cli): upgrade deps

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.4.1

Compare Source

Changes

  • feat(cli): upgrade deps
  • fix(cli): remove unused dep (selfsigned)
  • feat(cli): update all banners to mention pnpm and bun too

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.4.0

Compare Source

This is the optional globally installed CLI.

Changes

  • feat(cli): "upgrade" command -> keep account of configured npm registry url; add --registry (-r) param to override; write the registry url on terminal for security purposes #​16703
  • feat(cli): upgrade deps
  • fix(cli): update node version check
  • fix(cli): remove unused dep (selfsigned)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.3.0

Compare Source

New

  • feat(cli): add support for Bun as package manager #​16335
  • feat(cli): directly fetch versions list from npm registry for the "upgrade" cmd (Bun doesn't have a version listing cmd anyway)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.2.3

Compare Source

Fixes

  • fix(cli): issue deferring to local CLIs when on Windows host and dealing with next (unreleased) major versions of them

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.2.2

Compare Source

Fixes

  • fix(cli): quirk on Windows host regarding paths management

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.2.1

Compare Source

Changes

  • feat(cli): "serve" cmd proxy file in ESM format
  • fix(cli): "serve" cmd > --open fails
  • feat(cli): use our internal @​quasar/ssl-certificate

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.2.0

Compare Source

New

  • feat(cli): enhance the list of upcoming supported quasar.config file formats
  • feat&perf(cli): upgrade cmd -> faster & more accurate algorithm for determining node package manager to use
  • feat(cli): release notes banner URL is more accurate (keeps account of Quasar UI version); show banner if packages were skipped
  • feat(cli): "server" cmd -> show all network interface IPs (if not specifying any hostname)

Fixes

  • Correctly require minimum Node.js version (16)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.1.1

Compare Source

Fixes

  • fix(cli): glitch in quasar upgrade command when using NPM or PNPM #​15804

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.1.0

Compare Source

New

  • feat(cli): prepare support for future formats of quasar config file (cjs/mjs/ts) (#​15756)
  • feat(cli): use our new node-packager - correctly handle yarn/npm/pnpm commands, including for "quasar upgrade" command
  • feat(cli): use same logger as q/app-vite and q/app-webpack

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.0.1

Compare Source

Changes

  • feat(cli): Upgraded all deps

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v2.0.0

Compare Source

Changes

The optional global CLI is now in ESM format (was previously in commonjs), which is why we have bumped up the major version for this release. We have also upgraded all of its dependencies (including for security reasons).

The minimum supported Node.js version is now v14.15.

It has backward compatibility with Quasar v1 as well, so it is safe to upgrade to it, including bumping Node.js to minimum 14.15. We strongly recommend using only LTS versions of Node.js (major version should be an even number).

We have also extracted the legacy "quasar create" command into its own global CLI (@quasar/legacy-create - globally install it) should you still need it. This new package will not receive updates, including security ones, as it uses some dependencies that are now unmaintained. The effort to fork those packages is not worth it, especially for a legacy CLI command.

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

v1.4.0

Compare Source

New

  • PNPM package manager support (especially for the "quasar upgrade" command)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@quasar/cli](https://quasar.dev) ([source](https://github.com/quasarframework/quasar/tree/HEAD/cli)) | [`1.3.2` → `5.0.4`](https://renovatebot.com/diffs/npm/@quasar%2fcli/1.3.2/5.0.4) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@quasar%2fcli/5.0.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@quasar%2fcli/1.3.2/5.0.4?slim=true) | --- ### Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions [CVE-2026-106105](https://nvd.nist.gov/vuln/detail/CVE-2026-106105) / [GHSA-fh39-c73x-5pjv](https://github.com/advisories/GHSA-fh39-c73x-5pjv) <details> <summary>More information</summary> #### Details The `@quasar/ssl-certificate` development utility caches a combined PEM containing a generated private key and certificate without explicitly restricting its filesystem permissions. On systems with a typical process umask, the PEM can be readable by other local users. A local attacker with filesystem access could copy and reuse the private key to impersonate a development TLS endpoint in an environment that trusts the certificate. The generated certificate was also unnecessarily CA-capable and included broad key usages beyond its localhost HTTPS purpose. Its IPv6 loopback entry was encoded as a DNS name rather than an IP subject alternative name. The remediation writes and repairs the cached PEM with owner-only permissions on supported platforms, generates a non-CA server-auth leaf certificate with constrained key usage, corrects the IPv6 loopback SAN, and bases cache expiry on content modification time so permission metadata changes cannot extend the certificate lifetime. This issue does not expose the key remotely by itself; exploitation requires another local user to be able to read the cached PEM file. #### Severity - CVSS Score: 8.4 / 10 (High) - Vector String: `CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N` #### References - [https://github.com/quasarframework/quasar/security/advisories/GHSA-fh39-c73x-5pjv](https://github.com/quasarframework/quasar/security/advisories/GHSA-fh39-c73x-5pjv) - [https://nvd.nist.gov/vuln/detail/CVE-2026-106105](https://nvd.nist.gov/vuln/detail/CVE-2026-106105) - [https://github.com/quasarframework/quasar/commit/b719460aa78e88714b8a1b7ca68267234d217575](https://github.com/quasarframework/quasar/commit/b719460aa78e88714b8a1b7ca68267234d217575) - [https://github.com/quasarframework/quasar](https://github.com/quasarframework/quasar) - [https://github.com/quasarframework/quasar/releases/tag/@&#8203;quasar/app-vite-v3.3.0](https://github.com/quasarframework/quasar/releases/tag/@&#8203;quasar/app-vite-v3.3.0) - [https://github.com/quasarframework/quasar/releases/tag/@&#8203;quasar/cli-v5.0.4](https://github.com/quasarframework/quasar/releases/tag/@&#8203;quasar/cli-v5.0.4) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-fh39-c73x-5pjv) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Release Notes <details> <summary>quasarframework/quasar (@&#8203;quasar/cli)</summary> ### [`v5.0.4`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v5.0.4) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v5.0.3...@quasar/cli-v5.0.4) *This is the optional globally-installed part of the Quasar CLI* #### Security fix - fix(ssl-certificate): restrict development TLS credentials #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v5.0.3`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v5.0.3) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v5.0.2...@quasar/cli-v5.0.3) *This is the optional globally-installed part of the Quasar CLI* #### Changes - feat(cli): upgraded deps - fix(cli): upgrade cmd should correctly install selected packages (if any selection changes) - fix(cli): banner when using the deprecated "create" cmd - fix(cli): configured npm registry detection; also, make registry requests robust #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v5.0.2`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v5.0.2) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v5.0.1...@quasar/cli-v5.0.2) *This is the optional globally-installed part of the Quasar CLI* #### Changes - feat(cli): upgrade deps - feat(cli): adapt to newer clack/prompts specs (remove workaround on note() - not needed anymore) - feat(cli): modernize cli-pkg #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v5.0.1`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v5.0.1) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v5.0.0...@quasar/cli-v5.0.1) *This is the optional globally-installed part of the Quasar CLI* #### Changes - fix(cli): update help menu - fix(cli): spawn stdio handling - fix(cli): correctly handle browser opening failures #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v5.0.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v5.0.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v4.0.0...@quasar/cli-v5.0.0) *This is the optional globally-installed part of the Quasar CLI* #### Breaking changes The "serve" command now uses the native hono/proxy (for the --proxy, -P cmd option) instead of http-proxy-middleware. Example of proxy file: ```js export default ({ app, proxy }) => { app.get('/proxy/:path', (c) => { return proxy('http://some.api.com/' + c.req.param('path')) }) } ``` #### Changes - feat(cli): modernize codebase; drop some deps and replace with native Node.js alternatives - feat+refactor(cli): rewrite the "upgrade" cmd; parallel NPM registry fetching; use modern prompts - feat(cli): all commands have the "--no-color" option - feat(cli): upgrade deps #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v4.0.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v4.0.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v3.0.0...@quasar/cli-v4.0.0) *This is the optional globally-installed part of the Quasar CLI* #### Changes - feat(cli): serve cmd > replace express with Hono - feat(cli): add --nocolor param to all commands - feat(cli): serve cmd > disregard "quasar" package.json prop - fix(cli): serve --open param handling #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v3.0.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v3.0.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.5.0...@quasar/cli-v3.0.0) *This is the optional globally-installed part of the Quasar CLI* #### Breaking changes 1. Requires Node.js >= 20.20 2. If using the "quasar serve" command with proxy, you will need to update the proxy rules to match http-proxy-middleware v3 specs. #### Other changes - feat(cli): upgraded all deps, including express (v5), http-proxy-middleware (v3), open, route-cache, update-notifier - fix(cli): \[security] upgrade to our newer quasar/ssl-certificate #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.5.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.5.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.4.1...@quasar/cli-v2.5.0) *This is the optional globally-installed part of the Quasar CLI* #### Changes - feat(cli): add bun.lock support ([#&#8203;17775](https://github.com/quasarframework/quasar/issues/17775)) - feat(cli): upgrade deps #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.4.1`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.4.1) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.4.0...@quasar/cli-v2.4.1) #### Changes - feat(cli): upgrade deps - fix(cli): remove unused dep (selfsigned) - feat(cli): update all banners to mention pnpm and bun too #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.4.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.4.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.3.0...@quasar/cli-v2.4.0) This is the optional globally installed CLI. #### Changes - feat(cli): "upgrade" command -> keep account of configured npm registry url; add --registry (-r) param to override; write the registry url on terminal for security purposes [#&#8203;16703](https://github.com/quasarframework/quasar/issues/16703) - feat(cli): upgrade deps - fix(cli): update node version check - fix(cli): remove unused dep (selfsigned) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.3.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.3.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.2.3...@quasar/cli-v2.3.0) #### New - feat(cli): add support for Bun as package manager [#&#8203;16335](https://github.com/quasarframework/quasar/issues/16335) - feat(cli): directly fetch versions list from npm registry for the "upgrade" cmd (Bun doesn't have a version listing cmd anyway) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.2.3`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.2.3) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.2.2...@quasar/cli-v2.2.3) #### Fixes - fix(cli): issue deferring to local CLIs when on Windows host and dealing with next (unreleased) major versions of them #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.2.2`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.2.2) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.2.1...@quasar/cli-v2.2.2) #### Fixes - fix(cli): quirk on Windows host regarding paths management #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.2.1`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.2.1) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.2.0...@quasar/cli-v2.2.1) #### Changes - feat(cli): "serve" cmd proxy file in ESM format - fix(cli): "serve" cmd > --open fails - feat(cli): use our internal [@&#8203;quasar/ssl-certificate](https://github.com/quasar/ssl-certificate) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.2.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.2.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.1.1...@quasar/cli-v2.2.0) #### New - feat(cli): enhance the list of upcoming supported quasar.config file formats - feat\&perf(cli): upgrade cmd -> faster & more accurate algorithm for determining node package manager to use - feat(cli): release notes banner URL is more accurate (keeps account of Quasar UI version); show banner if packages were skipped - feat(cli): "server" cmd -> show all network interface IPs (if not specifying any hostname) #### Fixes - Correctly require minimum Node.js version (16) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.1.1`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.1.1) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.1.0...@quasar/cli-v2.1.1) #### Fixes - fix(cli): glitch in quasar upgrade command when using NPM or PNPM [#&#8203;15804](https://github.com/quasarframework/quasar/issues/15804) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.1.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.1.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.0.1...@quasar/cli-v2.1.0) #### New - feat(cli): prepare support for future formats of quasar config file (cjs/mjs/ts) ([#&#8203;15756](https://github.com/quasarframework/quasar/issues/15756)) - feat(cli): use our new node-packager - correctly handle yarn/npm/pnpm commands, including for "quasar upgrade" command - feat(cli): use same logger as q/app-vite and q/app-webpack #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.0.1`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.0.1) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v2.0.0...@quasar/cli-v2.0.1) #### Changes - feat(cli): Upgraded all deps #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v2.0.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v2.0.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v1.4.0...@quasar/cli-v2.0.0) #### Changes The optional global CLI is now in ESM format (was previously in commonjs), which is why we have bumped up the major version for this release. We have also upgraded all of its dependencies (including for security reasons). **The minimum supported Node.js version is now v14.15.** It has backward compatibility with Quasar v1 as well, so it is safe to upgrade to it, including bumping Node.js to minimum 14.15. We strongly recommend using only LTS versions of Node.js (major version should be an even number). We have also extracted the legacy "quasar create" command into its own global CLI (`@quasar/legacy-create` - globally install it) should you still need it. This new package will not receive updates, including security ones, as it uses some dependencies that are now unmaintained. The effort to fork those packages is not worth it, especially for a legacy CLI command. #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) ### [`v1.4.0`](https://github.com/quasarframework/quasar/releases/tag/%40quasar/cli-v1.4.0) [Compare Source](https://github.com/quasarframework/quasar/compare/@quasar/cli-v1.3.2...@quasar/cli-v1.4.0) #### New - PNPM package manager support (especially for the "quasar upgrade" command) #### Donations Quasar Framework is an open-source MIT-licensed project made possible due to the **generous contributions** by [sponsors and backers](https://github.com/sponsors/rstoenescu). If you are interested in supporting this project, please consider the following: - [Becoming a sponsor on Github](https://github.com/sponsors/rstoenescu) - [One-off donation via PayPal](https://paypal.me/rstoenescu1) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40MS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNDEuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZSIsInNlY3VyaXR5Il19-->
fix(deps): update dependency @quasar/cli to v5
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
Details
CI / Quasar build (push) Successful in 1m41s
Details
CI / Docker build (push) Successful in 6m1s
Details
CI / Release (push) Has been skipped
Details
8584a736bd
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
Details
CI / Quasar build (push) Successful in 1m41s
Details
CI / Docker build (push) Successful in 6m1s
Details
CI / Release (push) Has been skipped
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/quasar-cli-5.x:renovate/quasar-cli-5.x
git switch renovate/quasar-cli-5.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff renovate/quasar-cli-5.x
git switch renovate/quasar-cli-5.x
git rebase master
git switch master
git merge --ff-only renovate/quasar-cli-5.x
git switch renovate/quasar-cli-5.x
git rebase master
git switch master
git merge --no-ff renovate/quasar-cli-5.x
git switch master
git merge --squash renovate/quasar-cli-5.x
git switch master
git merge --ff-only renovate/quasar-cli-5.x
git switch master
git merge renovate/quasar-cli-5.x
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
dependencies
Pull requests that update a dependency file

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
javascript
Pull requests that update Javascript code

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
dependencies
documentation
duplicate
enhancement
good first issue
help wanted
invalid
javascript
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
Griefed
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Griefed/serverpackcreator-de!3
No description provided.