Skip to content

Bump semver and @twilio/cli-core#91

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8cb9730b44
Open

Bump semver and @twilio/cli-core#91
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8cb9730b44

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2026

Bumps semver to 5.7.2 and updates ancestor dependencies semver and @twilio/cli-core. These dependencies need to be updated together.

Updates semver from 5.7.0 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates semver from 7.3.7 to 7.7.4

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates @twilio/cli-core from 7.27.2 to 8.3.1

Release notes

Sourced from @​twilio/cli-core's releases.

8.3.1

8.3.1 (2026-01-07)


Api

  • Added optional parameter clientNotificationUrl for create call api
  • Added optional parameter clientNotificationUrl for create participant api

8.3.0

8.3.0 (2025-12-17)


Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

8.2.5

8.2.5 (2025-12-08)

Library - Chores

  • add content write permission (eb07e0d)

8.2.4

8.2.4 (2025-12-08)

Library - Fixes

  • Add edge parameter support for regional authentication (#298) (9f023f4)
  • Regional Endpoint Processing (#296) (b3786ca), closes #297

Library - Chores

  • add npm token for semantic-release authentication (e13b03c)
  • Add trusted publisher (#299) (a544aea)
  • remove registry url (6a1c488)

8.2.3

8.2.3 (2025-11-20)

... (truncated)

Changelog

Sourced from @​twilio/cli-core's changelog.

8.3.1 (2026-01-07)


Api

  • Added optional parameter clientNotificationUrl for create call api
  • Added optional parameter clientNotificationUrl for create participant api

8.3.0 (2025-12-17)


Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

8.2.5 (2025-12-08)

Library - Chores

  • add content write permission (eb07e0d)

8.2.4 (2025-12-08)

Library - Fixes

  • Add edge parameter support for regional authentication (#298) (9f023f4)
  • Regional Endpoint Processing (#296) (b3786ca), closes #297

Library - Chores

  • add npm token for semantic-release authentication (e13b03c)
  • Add trusted publisher (#299) (a544aea)
  • remove registry url (6a1c488)

Api

  • Add twiml_session resource for calls
  • Add twiml_session resource for calls

Monitor

  • Update default output properties

... (truncated)

Commits
  • c534146 chore(release): set package.json to 8.3.1 [skip ci]
  • 0078d78 oaiFix: Updated api definitions
  • 0b63d12 chore(release): set package.json to 8.3.0 [skip ci]
  • e54dc32 oaiFeat: Updated api definitions
  • 96446e3 chore(release): set package.json to 8.2.5 [skip ci]
  • 08c6a79 oaiFix: Updated api definitions
  • eb07e0d chore: add content write permission
  • 76e2267 chore(release): set package.json to 8.2.4 [skip ci]
  • b669b49 oaiFix: Updated api definitions
  • 6a1c488 chore: remove registry url
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [semver](https://github.com/npm/node-semver) to 5.7.2 and updates ancestor dependencies [semver](https://github.com/npm/node-semver) and [@twilio/cli-core](https://github.com/twilio/twilio-cli-core). These dependencies need to be updated together.


Updates `semver` from 5.7.0 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.0...v5.7.2)

Updates `semver` from 7.3.7 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.0...v5.7.2)

Updates `@twilio/cli-core` from 7.27.2 to 8.3.1
- [Release notes](https://github.com/twilio/twilio-cli-core/releases)
- [Changelog](https://github.com/twilio/twilio-cli-core/blob/main/CHANGES.md)
- [Commits](twilio/twilio-cli-core@7.27.2...8.3.1)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 5.7.2
  dependency-type: indirect
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: indirect
- dependency-name: "@twilio/cli-core"
  dependency-version: 8.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants