* deps: bump minipass from 4.2.7 to 5.0.0

Bumps [minipass](https://github.com/isaacs/minipass) from 4.2.7 to 5.0.0.
- [Release notes](https://github.com/isaacs/minipass/releases)
- [Changelog](https://github.com/isaacs/minipass/blob/main/CHANGELOG.md)
- [Commits](isaacs/minipass@v4.2.7...v5.0.0)

---
updated-dependencies:
- dependency-name: minipass
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: fixup usage for minipass@5

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: nlf <quitlahok@gmail.com>

* chore: bump @npmcli/template-oss from 4.13.0 to 4.14.1

Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from 4.13.0 to 4.14.1.
- [Release notes](https://github.com/npm/template-oss/releases)
- [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md)
- [Commits](npm/template-oss@v4.13.0...v4.14.1)

---
updated-dependencies:
- dependency-name: "@npmcli/template-oss"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: postinstall for dependabot template-oss PR

* chore: postinstall for dependabot template-oss PR

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: npm CLI robot <npm-cli+bot@github.com>
Co-authored-by: nlf <quitlahok@gmail.com>

Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from 4.14.1 to 4.15.1.
- [Release notes](https://github.com/npm/template-oss/releases)
- [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md)
- [Commits](npm/template-oss@v4.14.1...v4.15.1)

---
updated-dependencies:
- dependency-name: @npmcli/template-oss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

BREAKING CHANGE: this changes the underlying http agents to those
provided by `@npmcli/agent`.  Backwards compatibility should be fully
implemented but due to the scope of this change it was made a breaking
change out of an abundance of caution.

Bumps [@npmcli/template-oss](https://github.com/npm/template-oss) from
4.15.1 to 4.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/npm/template-oss/releases"><code>@​npmcli/template-oss</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v4.18.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.17.0...v4.18.0">4.18.0</a>
(2023-07-18)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/330">#330</a>
use git remote for branch related config (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/337">#337</a>
properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)
(<a
href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/331">#331</a>
block protected branch creations (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h2>v4.17.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.16.0...v4.17.0">4.17.0</a>
(2023-07-07)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
add overwrite false property to added files (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/327">#327</a>
do not add dependabot files when config is falsy (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
determine parser based on target filename (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/325">#325</a>
apply settings to all requested branches (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/324">#324</a>
bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
</ul>
<h2>v4.16.0</h2>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.16.0">4.16.0</a>
(2023-07-05)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/6e02268f12cc65da2180527a6a18f5d737bab6c3"><code>6e02268</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
allow adding latest to other ci versions (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/b83a19a98ec5db85b96e645916dcb65dbc64fbbd"><code>b83a19a</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to disable eslint (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/9606606f0163d56b785620881d5b01985f9218e3"><code>9606606</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to not update npm (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/73d7bf174d34c5d51b87f937daf52b94c9e803c4"><code>73d7bf1</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add release/v branches to all branch CI (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/npm/template-oss/blob/main/CHANGELOG.md"><code>@​npmcli/template-oss</code>'s
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.17.0...v4.18.0">4.18.0</a>
(2023-07-18)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/330">#330</a>
use git remote for branch related config (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/337">#337</a>
properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)
(<a
href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/331">#331</a>
block protected branch creations (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.16.0...v4.17.0">4.17.0</a>
(2023-07-07)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
add overwrite false property to added files (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/327">#327</a>
do not add dependabot files when config is falsy (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/323">#323</a>
determine parser based on target filename (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/325">#325</a>
apply settings to all requested branches (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/324">#324</a>
bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
</ul>
<h2><a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.16.0">4.16.0</a>
(2023-07-05)</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/6e02268f12cc65da2180527a6a18f5d737bab6c3"><code>6e02268</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
allow adding latest to other ci versions (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/b83a19a98ec5db85b96e645916dcb65dbc64fbbd"><code>b83a19a</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to disable eslint (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/9606606f0163d56b785620881d5b01985f9218e3"><code>9606606</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add config option to not update npm (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/73d7bf174d34c5d51b87f937daf52b94c9e803c4"><code>73d7bf1</code></a>
<a href="https://redirect.github.com/npm/template-oss/pull/321">#321</a>
add release/v branches to all branch CI (<a
href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/npm/template-oss/commit/d67bd699b759c766ddf5fd5aecd5c024f38dcfad"><code>d67bd69</code></a>
chore: release 4.18.0</li>
<li><a
href="https://github.com/npm/template-oss/commit/dd9aadf8d96c31066c84905cad07ac89a68ceead"><code>dd9aadf</code></a>
fix: properly quote PR_TITLE (<a
href="https://redirect.github.com/npm/template-oss/issues/337">#337</a>)</li>
<li><a
href="https://github.com/npm/template-oss/commit/f04a76d48e373fb03249973983e45472b26a9691"><code>f04a76d</code></a>
feat: use git remote for branch related config</li>
<li><a
href="https://github.com/npm/template-oss/commit/4662ec31afc77f0e5fdac13d0bf14e23e0e9cb43"><code>4662ec3</code></a>
fix: block protected branch creations</li>
<li><a
href="https://github.com/npm/template-oss/commit/102e1ae9d62646e888c71efe6d86dc491e5ca7ca"><code>102e1ae</code></a>
chore: release 4.17.0</li>
<li><a
href="https://github.com/npm/template-oss/commit/710c25e404df0f5be2ef1a487704e7235db3c348"><code>710c25e</code></a>
fix: do not add dependabot files when config is falsy</li>
<li><a
href="https://github.com/npm/template-oss/commit/4624d9c17e30b4783ef6bfc28a72603cc076f0e7"><code>4624d9c</code></a>
feat: add overwrite false property to added files</li>
<li><a
href="https://github.com/npm/template-oss/commit/449066e1917b5ff113aba396b12986f5db5d25da"><code>449066e</code></a>
fix: determine parser based on target filename</li>
<li><a
href="https://github.com/npm/template-oss/commit/7300da491ec1e596c5ad82434f7975a5e5a70f23"><code>7300da4</code></a>
fix: apply settings to all requested branches</li>
<li><a
href="https://github.com/npm/template-oss/commit/2a5cd532ce26b4fe66a6cb5a8b195c77e2520929"><code>2a5cd53</code></a>
deps: bump <code>@​npmcli/package-json</code> from 3.1.1 to 4.0.0</li>
<li>Additional commits viewable in <a
href="https://github.com/npm/template-oss/compare/v4.15.1...v4.18.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@npmcli/template-oss&package-manager=npm_and_yarn&previous-version=4.15.1&new-version=4.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luke Karrys <luke@lukekarrys.com>

BREAKING CHANGE: support for node 14 has been removed

Bumps [minipass](https://github.com/isaacs/minipass) from 5.0.0 to
7.0.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/isaacs/minipass/blob/main/CHANGELOG.md">minipass's
changelog</a>.</em></p>
<blockquote>
<h1>chernge lerg</h1>
<h2>7.0</h2>
<p>This is a big one, please read carefully before upgrading from
prior versions, especially if you extend Minipass in a subclass.</p>
<h3>Breaking Changes</h3>
<ul>
<li>Rewritten in TypeScript as hybrid esm/cjs build, so a lot of
types changed in subtle ways, and several behaviors got
stricter.</li>
<li>Minipass now inherits from <code>EventEmitter</code> rather than
<code>Stream</code>.
Nothing from the <code>Stream</code> class was ever used by Minipass,
but
it inherited from <code>Stream</code> to pass checks in some stream
libraries that checked <code>instanceof Stream</code>. Unfortunately,
the
type difference in the <code>pipe()</code> method signature made it
challenging to continue doing in TypeScript.</li>
<li>It is no longer possible to change the type of data emitted
after a Minipass stream is instantiated, as this would thwart
TypeScript's static checks. As a consequence:
<ul>
<li>The <code>setEncoding</code> method and the <code>encoding</code>
setter are
deprecated. Encoding may <em>only</em> be set in the constructor
options object.</li>
<li><code>objectMode</code> is no longer inferred by writing something
other
than a string or Buffer. It may <em>only</em> be set in the
constructor options object.</li>
</ul>
</li>
<li>If all existing data consumers are removed, via
<code>stream.unpipe(dest)</code>, <code>stream.removeListener('data',
handler)</code>,
<code>stream.removeAllListeners('data')</code>, and/or
<code>stream.removeAllListeners()</code>, then the data will stop
flowing.
Note that it is still possible to explicitly discard a stream's
data by calling <code>stream.resume()</code> in the absence of any
consumers.</li>
</ul>
<h3>Features and Fixes</h3>
<ul>
<li>Removed a very subtle performance issue that made objectMode
Minipass streams slower in some cases than node core streams.
Minipass is now faster than node core streams for all data
types.</li>
<li>The array returned by <code>stream.collect()</code> for objectMode
streams
will have a <code>dataLength</code> property equal to 0, rather than
undefined.</li>
<li><code>isStream</code> is moved from a static member on the Minipass
class
to a named export.</li>
<li><code>isWritable()</code> and <code>isReadable()</code> methods
added.</li>
</ul>
<h2>6.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/minipass/commit/b220db67d918c9717911ac5a05d427d2da6074d3"><code>b220db6</code></a>
7.0.2</li>
<li><a
href="https://github.com/isaacs/minipass/commit/a7ba1e31c6eeab5afc2fc97acf7ad9afdece4079"><code>a7ba1e3</code></a>
declare return type for concat(), promise(), collect()</li>
<li><a
href="https://github.com/isaacs/minipass/commit/6baaade6726d1cac656426f89f15de631a56b3d1"><code>6baaade</code></a>
7.0.1</li>
<li><a
href="https://github.com/isaacs/minipass/commit/9fc5be045a4c76e2b9aa99f0cb3d12d50a1e2fff"><code>9fc5be0</code></a>
pipe() should always return the dest, even if destroyed</li>
<li><a
href="https://github.com/isaacs/minipass/commit/d63abffc8734d679177d2382ac1841caa82349f3"><code>d63abff</code></a>
7.0.0</li>
<li><a
href="https://github.com/isaacs/minipass/commit/838c8554b1871e239cbb7debfd6c5bdea053ff2d"><code>838c855</code></a>
Rewrite in TypeScript</li>
<li><a
href="https://github.com/isaacs/minipass/commit/98531132ad1d2ce38429002171d7fe45ee977396"><code>9853113</code></a>
fix benchmarks, test against more mp versions</li>
<li><a
href="https://github.com/isaacs/minipass/commit/15ab07809dab7a278f9c79027cf25a3a150b770a"><code>15ab078</code></a>
6.0.2</li>
<li><a
href="https://github.com/isaacs/minipass/commit/0c7b958a800186e63fd87d27e80cc7d93fe60e9e"><code>0c7b958</code></a>
allow symbol as an event type</li>
<li><a
href="https://github.com/isaacs/minipass/commit/6125ceeddb721eb3f69749d4e71953adb48ad37d"><code>6125cee</code></a>
6.0.1</li>
<li>Additional commits viewable in <a
href="https://github.com/isaacs/minipass/compare/v5.0.0...v7.0.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=minipass&package-manager=npm_and_yarn&previous-version=5.0.0&new-version=7.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>