Dependabot collection #99
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 83923549f688e42b34d0b90ee94725f7c30532fc to b2e6519679e446e7bb7c3466d70f13a6b5461fcd. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8392354...b2e6519) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [type-fest](https://github.com/sindresorhus/type-fest) from 4.36.0 to 4.37.0. - [Release notes](https://github.com/sindresorhus/type-fest/releases) - [Commits](sindresorhus/type-fest@v4.36.0...v4.37.0) --- updated-dependencies: - dependency-name: type-fest dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.25.0 to 8.26.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [eslint](https://github.com/eslint/eslint) from 9.21.0 to 9.22.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v9.21.0...v9.22.0) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
….22.0' into dependabot-collection
…pt-eslint-8.26.0' into dependabot-collection
…t-4.37.0' into dependabot-collection
Signed-off-by: Jens Reinecke <[email protected]>
Signed-off-by: Jens Reinecke <[email protected]>
Signed-off-by: Jens Reinecke <[email protected]>
(yarn.lock only to keep engine check happy) Signed-off-by: Jens Reinecke <[email protected]>
Collaborator
Author
|
@JonatanAntoni , should we also add |
JonatanAntoni
requested changes
Mar 12, 2025
Member
Indeed, once we get actual runtime dependencies listed in the TPIP report, the specific versions are taken from the lock file. Hence, the lock file shall be on the trigger list. |
Collaborator
Author
Thanks for confirming, will update the TPIP flow separately. |
jreineckearm
commented
Mar 12, 2025
Collaborator
Author
jreineckearm
left a comment
jreineckearm
left a comment
There was a problem hiding this comment.
Using GithHub frontend for requested updates.
JonatanAntoni
approved these changes
Mar 13, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes
N/A
Changes
yarn.lock-only to keep VS Code engine version check happy)Additionally bumped the three
typescript-eslintdependencies to 8.26.1 which was released yesterday.Note: Bundling all dependabot PRs into one to avoid tedious
dependabot rebasesession.Screenshots
Checklist