Bump degit from 2.8.6 to 3.8.0

[dependabot]

Bumps degit from 2.8.6 to 3.8.0.

Changelog

Sourced from degit's changelog.

3.8.0

• Add --repo-name / -r flag to clone into a directory named after the repository (#42).
• Support glob patterns in the remove action's files list behind the allowGlobs flag (#148).

3.7.1

• Reject remove and keep directives that resolve to the destination root, preventing a degit.json action from deleting the whole clone.
• Fix --help crash on Node 20.10 caused by import.meta.dirname being undefined before Node 20.11.
• Fix interactive cache prompt crash on corrupt access.json.

3.7.0

• Redownload cached tar archives when extraction fails with any tar/zlib error, not only TAR_BAD_ARCHIVE (#41).
• Added files option to clone only specific files or directories (#129).

3.6.6

• Support GitLab nested groups by probing candidate user/repo paths at runtime (#76).
• Clarify --cache flag and default offline fallback behavior in help text and README (#314).
• Add a JSON Schema for degit.json at schemas/degit.schema.json.
• Decode URL-encoded subdirectory segments in full repository URLs (#477).

3.6.5

• Fix interactive mode crash when the cache directory does not exist (#345).
• Add repository aliases to the CLI (#362).
• Respect repo.subdir and report the correct mode when using mode: 'git' (#349).
• Throw an error instead of creating an empty destination when the requested subdirectory does not exist in git mode (#331).

3.6.4

• Add --version / -V flag to print the package version.

3.6.3

• Accept full subdirectory URLs containing branch path segments such as /tree/main/... (#370).

3.6.2

• Fix Bitbucket subdirectory clones that silently create an empty directory (#371).

3.6.1

• Load degit.json as JSON instead of an executable module.
• Fix HTTPS clones with explicit refs throwing a ReferenceError.

3.6.0

• Add gitlab://host/user/repo syntax for cloning from self-hosted GitLab instances (thanks to @​dnldsht for the original PR #361).

... (truncated)

Commits

• See full diff in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​degit@​2.8.6 ⏵ 3.9.0	+3		-1	+1

View full report