chore: bump @octokit/webhooks from 14.1.3 to 14.2.0

[dependabot]

Bumps @octokit/webhooks from 14.1.3 to 14.2.0.

Release notes

Sourced from @​octokit/webhooks's releases.

v14.2.0

14.2.0 (2025-12-03)

Features

• new secret_scanning_alert.assigned, secret_scanning_alert.unassigned, issue_dependencies events (#1189) (b47e4b0)

Commits

• b47e4b0 feat: new secret_scanning_alert.assigned, `secret_scanning_alert.unassigned...
• 5ca3206 ci(action): update github/codeql-action action to v4 (#1178)
• 07b617c ci(action): update actions/setup-node action to v6 (#1179)
• 3e7c815 build(deps): lock file maintenance (#1177)
• be82b3d ci(action): update peter-evans/create-or-update-comment action to v5 (#1175)
• 73ec1fc chore(deps): update vitest monorepo to v4 (major) (#1181)
• 4b4ad0f build(deps): lock file maintenance (#1174)
• 2a24466 ci(action): update actions/checkout action to v5 (#1170)
• aea297e ci(action): update actions/setup-node action to v5 (#1172)
• 302105e build(deps): lock file maintenance (#1168)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​octokit/webhooks since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Deploy preview for team-scope-test ready!

✅ Preview
https://team-scope-test-iyiwlt34z-dietfriends.vercel.app

Built with commit 8805853.
This pull request is being automatically deployed with vercel-action

[cubic-dev-ai]

No issues found across 1 file

_{Requires human review: This PR updates a production dependency (@octokit/webhooks) and involves a significant lockfile change (+293 -220 lines), which requires human review for potential regressions.}

Architecture diagram

sequenceDiagram
    participant GH as GitHub
    participant Srv as App Server
    participant Octo as @octokit/webhooks (v14.2.0)
    participant Log as Event Handlers

    Note over GH,Log: Webhook Delivery Flow

    GH->>Srv: POST /api/github/webhooks
    Note right of GH: Header: X-Hub-Signature-256<br/>Header: X-GitHub-Event

    Srv->>Octo: verifyAndReceive(payload, signature)
    
    Octo->>Octo: Validate HMAC signature

    alt Valid Signature
        Octo->>Octo: CHANGED: Parse event schema
        
        Note over Octo: Support added for:<br/>- issue_dependencies<br/>- secret_scanning_alert.assigned<br/>- secret_scanning_alert.unassigned
        
        Octo-->>Log: Trigger .on(event) callback
        Log->>Log: Execute business logic
        Srv-->>GH: 200 OK
    else Invalid Signature or Malformed
        Octo-->>Srv: Throw Error
        Srv-->>GH: 401 Unauthorized / 400 Bad Request
    end

Loading

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Looks like @octokit/webhooks is up-to-date now, so this is no longer needed.