Skip to content

Bump @google/clasp from 2.5.0 to 3.3.0 - #36

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/google/clasp-3.3.0
Closed

Bump @google/clasp from 2.5.0 to 3.3.0#36
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/google/clasp-3.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @google/clasp from 2.5.0 to 3.3.0.

Release notes

Sourced from @​google/clasp's releases.

v3.3.0

3.3.0 (2026-03-11)

Features

  • push: add timestamp to push success message (#896) (#1127) (8bccc4e)
  • support explicit project, clasp, and extra login scopes (#1122) (811ed60)

Bug Fixes

  • correct typos in src/auth/auth.ts (#1132) (af09d60)
  • detect SERVER_JS basename conflicts (#1120) (f3d9e99)
  • Fix incorrect storage of id_token, add missing awaits for some async operations( #1121) (b0fa745)
  • honor skipSubdirectories in project config (#1117) (732db4c)
  • normalize paths for filePushOrder matching (#1131) (8c7dc52)

v3.2.0

3.2.0 (2026-02-01)

Features

Bug Fixes

  • Improve validation of credential files (511a060)
  • prevent path traversal in remote file synchronization (#1109) (ba6bd66)

v3.1.3

3.1.3 (2025-11-19)

Bug Fixes

  • Add back redirect port to login cmd to be consistent with current documentation (#1094) (9e8f717)
  • Gemini CLI Extension Path Issue (#1097) (b466c57)

v3.1.2

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​google/clasp's changelog.

3.3.0 (2026-03-11)

Features

  • push: add timestamp to push success message (#896) (#1127) (8bccc4e)
  • support explicit project, clasp, and extra login scopes (#1122) (811ed60)

Bug Fixes

  • correct typos in src/auth/auth.ts (#1132) (af09d60)
  • detect SERVER_JS basename conflicts (#1120) (f3d9e99)
  • Fix incorrect storage of id_token, add missing awaits for some async operations( #1121) (b0fa745)
  • honor skipSubdirectories in project config (#1117) (732db4c)
  • normalize paths for filePushOrder matching (#1131) (8c7dc52)

3.2.0 (2026-02-01)

Features

Bug Fixes

  • Improve validation of credential files (511a060)
  • (SECURITY) prevent path traversal in remote file synchronization (#1109) (ba6bd66)

3.1.3 (2025-11-19)

Bug Fixes

  • Add back redirect port to login cmd to be consistent with current documentation (#1094) (9e8f717)
  • Gemini CLI Extension Path Issue (#1097) (b466c57)

3.1.1 (2025-10-31)

Features

  • Add config file to make repo a Gemini CLI extension (#1090) (3b4bb8a)

Bug Fixes

... (truncated)

Commits
  • 31c172d chore(master): release 3.3.0 (#1118)
  • 8c7dc52 fix: normalize paths for filePushOrder matching (#1131)
  • af09d60 fix: correct typos in src/auth/auth.ts (#1132)
  • 8bccc4e feat(push): add timestamp to push success message (#896) (#1127)
  • f3d9e99 fix: detect SERVER_JS basename conflicts (#1120)
  • 811ed60 feat: support explicit project, clasp, and extra login scopes (#1122)
  • b0fa745 fix: Fix incorrect storage of id_token, add missing awaits for some async ope...
  • b225233 show-authorized-user: display OAuth client ID and source (#1116)
  • 732db4c fix: honor skipSubdirectories in project config (#1117)
  • 1ec479b chore(master): release 3.2.0 (#1105)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@dependabot
dependabot Bot requested a review from bryanfawcett as a code owner July 13, 2026 21:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs		 nyuchi-tools 8d2190e Jul 26 2026, 12:53 PM

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/google/clasp-3.3.0 branch from b1f6539 to 5645bbb Compare July 21, 2026 11:51
@bryanfawcett Claude

bryanfawcett commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

·@·d·ependabot r·ebase

Rebasing onto current main — the root lockfile moved when #31 merged (wrangler/hono + @cloudflare/workers-types 5), so this branch needs regenerating before it can go green.

Generated by Claude Code

@dependabot
Bump @google/clasp from 2.5.0 to 3.3.0
8d2190e 
Bumps [@google/clasp](https://github.com/google/clasp) from 2.5.0 to 3.3.0.
- [Release notes](https://github.com/google/clasp/releases)
- [Changelog](https://github.com/google/clasp/blob/master/CHANGELOG.md)
- [Commits](google/clasp@2.5.0...v3.3.0)

---
updated-dependencies:
- dependency-name: "@google/clasp"
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/google/clasp-3.3.0 branch from 5645bbb to 8d2190e Compare July 26, 2026 12:52
@bryanfawcett bryanfawcett mentioned this pull request Jul 27, 2026
Merged
bryanfawcett added a commit that referenced this pull request Jul 27, 2026
@bryanfawcett Bryan Fawcett @claude
build(deps): bump eslint 9→10, @eslint/js 10, globals 17, @google/cla…
4838c5c 
…sp 2→3 (#43)

Combined, verified dependency bump landing the compatible Dependabot
updates together (they cannot be merged individually — the eslint flat
config imports @eslint/js, so eslint and @eslint/js must move in lockstep).

- signature-generator: eslint ^9.39.1 → ^10.7.0, @eslint/js → ^10.0.1,
  globals ^16.5.0 → ^17.7.0 (supersedes #35, #37)
- root: @google/clasp ^2.4.2 → ^3.3.0 (supersedes #36)

Verified: lint clean, site build OK, signature-generator 148 tests and
worker 154 tests pass, typecheck:worker clean.

Excludes signature-generator typescript 5.9→7 (#34): typescript-eslint
8.65 peer-caps typescript <6.1.0, so TS 7 fails dependency resolution and
breaks lint. #34 stays open until typescript-eslint ships TS 7 support.

Co-authored-by: Bryan Fawcett <bot@nyuchi.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
@bryanfawcett Claude

bryanfawcett commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Superseded by #43 (merged) — @google/clasp was bumped to ^3.3.0 there and verified against the full check suite. Closing.

Generated by Claude Code

@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/google/clasp-3.3.0 branch July 27, 2026 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bryanfawcett bryanfawcett Awaiting requested review from bryanfawcett bryanfawcett is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bryanfawcett