Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Build(deps): Bump the npm-production group with 4 updates #222

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Oct 3, 2025
Merged

Build(deps): Bump the npm-production group with 4 updates #222

merged 2 commits into from
Oct 3, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025 •
edited
Loading

Bumps the npm-production group with 4 updates: @octokit/core, commander, tsx and yaml.

Updates @octokit/core from 7.0.3 to 7.0.5

Release notes

Sourced from @​octokit/core's releases.

v7.0.5

7.0.5 (2025-09-29)

Bug Fixes

  • deps: update octokit dependencies, and @​sinonjs/fake-timers (#749) (14d23a1)

v7.0.4

7.0.4 (2025-09-16)

Bug Fixes

  • deps: update dependency @​octokit/types to v15 (#748) (03b6c28)
Commits
  • 14d23a1 fix(deps): update octokit dependencies, and @​sinonjs/fake-timers (#749)
  • e4d0776 ci(action): update actions/setup-node action to v5 (#746)
  • 03b6c28 fix(deps): update dependency @​octokit/types to v15 (#748)
  • 4951837 ci(action): update actions/checkout action to v5 (#745)
  • f576bc8 chore(deps): bump vite from 6.3.5 to 6.3.6 (#747)
  • 9c425e3 chore(deps): update dependency prettier to v3.6.2 (#743)
  • See full diff in compare view

Updates commander from 14.0.0 to 14.0.1

Release notes

Sourced from commander's releases.

v14.0.1

Fixed

  • broken markdown link in README (#2369)

Changed

  • improve code readability by using optional chaining (#2394)
  • use more idiomatic code with object spread instead of Object.assign() (#2395)
  • improve code readability using string.endsWith() instead of string.slice() (#2396)
  • refactor .parseOptions() to process args array in-place (#2409)
  • change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
  • update (dev) dependencies
Changelog

Sourced from commander's changelog.

[14.0.1] (2025-09-12)

Fixed

  • broken markdown link in README (#2369)

Changed

  • improve code readability by using optional chaining (#2394)
  • use more idiomatic code with object spread instead of Object.assign() (#2395)
  • improve code readability using string.endsWith() instead of string.slice() (#2396)
  • refactor .parseOptions() to process args array in-place (#2409)
  • change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
  • update (dev) dependencies
Commits

Updates tsx from 4.20.3 to 4.20.6

Release notes

Sourced from tsx's releases.

v4.20.6

4.20.6 (2025-09-26)

Bug Fixes

  • properly hide relaySignal from process.listeners() (#741) (710a424)

This release is also available on:

v4.20.5

4.20.5 (2025-08-24)

Bug Fixes

  • handle ambiguous packages (796053a)

This release is also available on:

v4.20.4

4.20.4 (2025-08-12)

Bug Fixes

This release is also available on:

Commits
  • 710a424 fix: properly hide relaySignal from process.listeners() (#741)
  • 20b91c4 docs: make sponsors dynamic
  • 08dcd59 chore: move vercel settings to root
  • e6d1a47 docs: obfuscate aside classname
  • de2719d style: remove unused variable
  • 13f2954 chore: upgrade docs deps
  • 0504525 chore: upgrade manten
  • 132fdd8 test: assert require.cache
  • f057e7d test: require loop
  • a6f8f9f refactor: getFormat to handle all formats
  • Additional commits viewable in compare view

Updates yaml from 2.8.0 to 2.8.1

Release notes

Sourced from yaml's releases.

v2.8.1

  • Preserve empty block literals (#634)
Commits
  • 1dc3c3b 2.8.1
  • 5bbb1cb chore: Add explicit jest-resolve@29 dev dependency to keep Node.js 15 compati...
  • b3ba632 chore: Refresh lockfile
  • de8a0ab fix: Preserve empty block literals (#634)
  • 81eb3bf docs: Update site intro
  • ef23196 docs: Update README & docs/CONTRIBUTING
  • aa29f42 docs: Note that schema can be a Schema
  • cad823e docs: Update instructions on vulnerability reporting
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependabot Dependabot issues and PRs npm Node.js issues and PRs labels Oct 1, 2025
@dependabot dependabot bot requested a review from ncalteen as a code owner October 1, 2025 11:04
@dependabot dependabot bot added dependabot Dependabot issues and PRs npm Node.js issues and PRs labels Oct 1, 2025
@github-actions
Copy link

github-actions bot commented Oct 1, 2025 •
edited
Loading

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.14s
✅ JAVASCRIPT prettier 19 0 0 1.04s
✅ JSON npm-package-json-lint yes no no 1.36s
✅ JSON prettier 31 0 0 3.6s
✅ MARKDOWN markdownlint 10 0 0 1.02s
✅ REPOSITORY checkov yes no no 24.61s
✅ REPOSITORY gitleaks yes no no 1.62s
✅ REPOSITORY git_diff yes no no 0.04s
✅ REPOSITORY grype yes no no 47.12s
✅ REPOSITORY secretlint yes no no 1.24s
✅ REPOSITORY syft yes no no 6.82s
✅ REPOSITORY trivy yes no no 11.56s
✅ REPOSITORY trivy-sbom yes no no 5.75s
✅ REPOSITORY trufflehog yes no no 29.86s
✅ TYPESCRIPT prettier 109 0 0 4.85s
✅ YAML prettier 25 0 0 1.27s
✅ YAML yamllint 25 0 0 1.01s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-production-8c332272de branch from d37b714 to c9706f6 Compare October 3, 2025 14:26
@dependabot
Build(deps): Bump the npm-production group with 4 updates
6a96718 
Bumps the npm-production group with 4 updates: [@octokit/core](https://github.com/octokit/core.js), [commander](https://github.com/tj/commander.js), [tsx](https://github.com/privatenumber/tsx) and [yaml](https://github.com/eemeli/yaml).


Updates `@octokit/core` from 7.0.3 to 7.0.5
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.3...v7.0.5)

Updates `commander` from 14.0.0 to 14.0.1
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.0...v14.0.1)

Updates `tsx` from 4.20.3 to 4.20.6
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.20.3...v4.20.6)

Updates `yaml` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.0...v2.8.1)

---
updated-dependencies:
- dependency-name: "@octokit/core"
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: commander
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: tsx
  dependency-version: 4.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: yaml
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm-production-8c332272de branch from c9706f6 to 6a96718 Compare October 3, 2025 14:30
@ncalteen ncalteen merged commit e9ba0ec into main Oct 3, 2025
14 checks passed
@ncalteen ncalteen deleted the dependabot/npm_and_yarn/npm-production-8c332272de branch October 3, 2025 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ncalteen ncalteen ncalteen approved these changes

Assignees

No one assigned

Labels

dependabot Dependabot issues and PRs npm Node.js issues and PRs

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ncalteen