npm(deps): bump d3-dsv from 2.0.0 to 3.0.1

[dependabot]

Bumps d3-dsv from 2.0.0 to 3.0.1.

Release notes

Sourced from d3-dsv's releases.

v3.0.1

• Update dependencies.
• Make build reproducible.

v3.0.0

• Adopt type: module.

This package now requires Node.js 12 or higher. For more, please read Sindre Sorhus’s FAQ.

Commits

• 3446779 3.0.1
• a4656af update dependencies
• e3a1fc7 related d3/d33; extract copyrights from LICENSE
• 9f22ae7 3.0.0
• a3bb50a Adopt type=module (#81)
• aba1cce link to d3.dsv
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[graymalkin77]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

✅ code/snyk check is complete. No issues have been found. (View Details)

[ls-ramos]

This unfortunately is conflicting with the peer dependency of: @langchain/community@"1.0.3": https://github.com/langchain-ai/langchainjs/blob/main/libs/langchain-community/package.json#L145

That is why the npm install is failing.

We have limited options because of that, since this dependency is not generating any alerts right now on Snyk for example, I would vote to wait to update this until @langchain/community accepts version v3 as peer dependency.

If this update become very important we can open a PR to @langchain/community, fork it or override the dependency version temporally (if we do that we need to test that it will not break anything).

What do you think @pedily @mhdha94 @gamer496 ?

[mhdha94]

@ls-ramos I agree we can close it for now

[dcxn]

If we close it dependabot may just reopen it again in the near future, unless if we tell it to ignore this dependency. We can simply leave it open, the comments we have here provide the extra context :)

[KeiKey]

@dependabot ignore this dependency

[dependabot]

OK, I won't notify you about d3-dsv again, unless you re-open this PR.