Skip to content

chore(deps): bump @casl/ability from 6.8.1 to 7.0.0#164

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/casl/ability-7.0.0
Open

chore(deps): bump @casl/ability from 6.8.1 to 7.0.0#164
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/casl/ability-7.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps @casl/ability from 6.8.1 to 7.0.0.

Release notes

Sourced from @​casl/ability's releases.

@​casl/ability: v7.0.0

7.0.0 (2026-05-21)

⚠ BREAKING CHANGES

  • .possibleRulesFor and .rulesFor return readonly Rule[] type
  • this function is unused in userland and mostly was needed to restore ForbiddenError state in tests
  • renames PureAbility to Ability and dops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
  • Ability matching now treats conditions that semantically match everything the same as rules without conditions.

Bug Fixes

  • defensive protection against undefined returned from rule conditions matcher (3f0ad4b)
  • deps: upgrades @ucast/* to latest version (#1218) (22b00ff)
  • ensure rules index cache is not polluted with not defined actions (#1228) (89c19ba)
  • treats empty conditions object as matches all (#1198) (cedc463), closes #684

Code Refactoring

  • removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
  • renames PureAbility to Ability (#1205) (97beee4)

@​casl/ability: v7.0.0-rc

7.0.0-rc (2026-05-08)

⚠ BREAKING CHANGES

  • this function is unused in userland and mostly was needed to restore ForbiddenError state in tests
  • renames PureAbility to Ability and dops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
  • Ability matching now treats conditions that semantically match everything the same as rules without conditions.

Bug Fixes

Code Refactoring

  • removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
  • renames PureAbility to Ability (#1205) (97beee4)
Changelog

Sourced from @​casl/ability's changelog.

7.0.0 (2026-05-21)

⚠ BREAKING CHANGES

  • .possibleRulesFor and .rulesFor return readonly Rule[] type
  • this function is unused in userland and mostly was needed to restore ForbiddenError state in tests
  • renames PureAbility to Ability and dops default options. In order, to get the previous behavior of Ability class, clients are expected to use createMongoAbility and MongoAbility type
  • Ability matching now treats conditions that semantically match everything the same as rules without conditions.

Bug Fixes

  • defensive protection against undefined returned from rule conditions matcher (3f0ad4b)
  • deps: upgrades @ucast/* to latest version (#1218) (22b00ff)
  • ensure rules index cache is not polluted with not defined actions (#1228) (89c19ba)
  • treats empty conditions object as matches all (#1198) (cedc463), closes #684

Code Refactoring

  • removes getDefaultErrorMessage exported function as unneeded (#1206) (3f56353)
  • renames PureAbility to Ability (#1205) (97beee4)
Commits
  • a4a4a1a chore: release master (#1199)
  • 3f0ad4b fix: defensive protection against undefined returned from rule conditions mat...
  • 89c19ba fix: ensure rules index cache is not polluted with not defined actions (#1228)
  • b51b1b8 chore: allow next as publish branch
  • d875352 chore: fixes release for casl-ability
  • d49daa6 chore: specify dist tag in release script
  • 569bc1e test: refactor tests to ts
  • 22b00ff fix(deps): upgrades @ucast/* to latest version (#1218)
  • fcfde9d chore: fixes package metadata for @​casl/ability
  • 3f56353 refactor: removes getDefaultErrorMessage exported function as unneeded (#1206)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@casl/ability](https://github.com/stalniy/casl/tree/HEAD/packages/casl-ability) from 6.8.1 to 7.0.0.
- [Release notes](https://github.com/stalniy/casl/releases)
- [Changelog](https://github.com/stalniy/casl/blob/master/packages/casl-ability/CHANGELOG.md)
- [Commits](https://github.com/stalniy/casl/commits/@casl/ability@7.0.0/packages/casl-ability)

---
updated-dependencies:
- dependency-name: "@casl/ability"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants