Repository navigation
chore(deps-dev): bump the development-minor-patch group across 1 directory with 9 updates - #281
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…ctory with 9 updates Bumps the development-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.0` | `18.0.8` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.12.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` | | [prisma](https://github.com/prisma/prisma-cli/tree/HEAD/packages/prisma) | `7.10.0` | `7.10.1` | | [turbo](https://github.com/vercel/turborepo) | `2.11.6` | `2.11.8` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.71.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.30` | Updates `@types/node` from 26.6.4 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `dotenv` from 18.0.0 to 18.0.8 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.0...v18.0.8) Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) Updates `prisma` from 7.10.0 to 7.10.1 - [Release notes](https://github.com/prisma/prisma-cli/releases) - [Commits](https://github.com/prisma/prisma-cli/commits/HEAD/packages/prisma) Updates `turbo` from 2.11.6 to 2.11.8 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.6...v2.11.8) Updates `typescript-eslint` from 8.71.0 to 8.71.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) Updates `postcss` from 8.5.28 to 8.5.30 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.30) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: dotenv dependency-version: 18.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: prisma dependency-version: 7.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: turbo dependency-version: 2.11.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: typescript-eslint dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: postcss dependency-version: 8.5.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here. So far, Strix has reviewed 50 pull requests and surfaced 1 security issue across this workspace. |
![graphify-labs[bot]](https://avatars.githubusercontent.com/in/4356270?s=60&v=4){kind=small}
There was a problem hiding this comment.
Graphify reviewed this change.
Worth a look — the grounded gate found no coupling regressions or blocking issues, but 1 advisory finding(s) below merit a look before merge.
Not checked: tests were not run; no formal proof of the changed code.
Graphify review — findings
Bumps patch and minor dev dependencies across the workspace, with vitest moving to 5.0.5 in every package and the root picking up newer eslint, prettier, turbo, typescript-eslint, dotenv, @types/node and postcss. The prisma CLI goes to 7.10.1 in the root and packages/db and pulls in a new engines version, but @prisma/client stays on 7.10.0 in the lockfile, so the CLI and the generated client now run at different versions. The rest of the lockfile churn follows from these bumps.
Worth a look
- Prisma CLI bumped to 7.10.1 while @prisma/client stays at 7.10.0 —
pnpm-lock.yaml:211· Escalate · medium- agreed by 2 of 2 members but NOT verified (no proof, no reproducing execution) — consensus is not a verdict; needs human review
Review partial — this diff was larger than one review pass covers, so later files were not reviewed; some findings may be missing.
Analysis details — impact, health, verification
Impact & health
Graphify review
Impact — 285 functions depend on the 285 functions this change touches.
Health — grade A; no new coupling hotspots.
Verification — 285 functions in the blast radius were not formally verified this run (proofs are advisory here).
Gate & verification
graphify gate
PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.
Advisory (not blocking):
- verification_scope: 285 function(s) in the blast radius were not formally verified this run
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the development-minor-patch group with 9 updates in the / directory:
26.6.426.6.518.0.018.0.810.11.010.12.03.9.93.9.107.10.07.10.12.11.62.11.88.71.08.71.25.0.35.0.58.5.288.5.30Updates
@types/nodefrom 26.6.4 to 26.6.5Commits
Updates
dotenvfrom 18.0.0 to 18.0.8Changelog
Sourced from dotenv's changelog.
Commits
e2fe95e18.0.87aa712atype detail improvement53405b0Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...0b4843achangelog55855abMerge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parityf757811fix(types): allow undefined values in populate outputfde5db2Keep fast-parser unquoting consistent at Unicode line boundaries295320718.0.79944723make more readable for undefined -> nulld455db0Merge branch 'master' of github.com:motdotla/dotenvUpdates
eslintfrom 10.11.0 to 10.12.0Release notes
Sourced from eslint's releases.
Commits
a438ec310.12.032a73f1Build: changelog update for 10.12.0bc51eeefix:prefer-arrow-callbackfalse positive in conditional test (#21373)bbff86cfix: skip lines with multiple comments inmax-lines-per-function(#21332)152067fchore: update ecosystem plugins (#21362)b56d58echore: update github/codeql-action action to v4.38.2 (#21376)67eb586docs: Update READMEbfaea12perf: cache normalized config globals per languageOptions (#21364)322209eci: avoid Nx cache in ecosystem tests and disable failing test (#21369)d166567chore: update dependency prettier to v3.9.9 (#21371)Updates
prettierfrom 3.9.9 to 3.9.10Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
Commits
1172b82Release 3.9.10d014227Updatemicromark-extension-gfm-tableto fix the table parse issue on perfor...953b908Bump Prettier dependency to 3.9.9ad8a6bfClean changelog_unreleasedUpdates
prismafrom 7.10.0 to 7.10.1Commits
Updates
turbofrom 2.11.6 to 2.11.8Release notes
Sourced from turbo's releases.
... (truncated)
Commits
7663d6bpublish 2.11.8 to registryad820cbfix: Disable agent guidance by default (#14490)6e9c65bfix: Prevent Git index refresh during dirty hash collection (#14489)b5fe180feat: Validate sealed native setup baselines (#14482)cb615c3chore: Add copyable Factory snapshot command (#14481)71d0766fix: Upgrade turbo-gen Handlebars to 4.7.10 (#14471)2935202docs: Explain declaring Cargo sources read from outside the crate (#14480)215637cfix: Report inferred framework env vars for deferred tasks in dry runs (#14478)d6d63bdfix: Carry uv tool configuration into pruned workspaces (#14449)768d5bafix: Hash Clippy configuration for Cargo lint tasks (#14448)Updates
typescript-eslintfrom 8.71.0 to 8.71.2Release notes
Sourced from typescript-eslint's releases.
... (truncated)
Changelog
Sourced from typescript-eslint's changelog.
Commits
7488d68chore(release): publish 8.71.2d57b8dachore(release): publish 8.71.1Updates
vitestfrom 5.0.3 to 5.0.5Release notes
Sourced from vitest's releases.
... (truncated)
Commits
7a825dbchore: release v5.0.5 (#11609)6621a72fix: abort all running tests on cancel (#11606)e9c3d72fix: release mocks of finished test files (#11607)8dd67c2fix(browser): run global setup once with instances (#11596)6c5a447fix: run hook cleanups when a later hook fails (#11605)9697b38fix: keep the import frame in native loader errors (#11599)6498b66fix(browser): wait 30s for the browser to close (#11601)f161e6dfix(browser): drop late connections of closed sessions (#11600)fe86a64fix: skip builtin loading in async leak detector (#11598)6ae8e89fix(reporter): end reason'failed'on worker crash (#11568)Updates
postcssfrom 8.5.28 to 8.5.30Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
f1aca7eRelease 8.5.30 version9d83445Update dependencies6c9bc73Fix invalid source map mapping on escaping before new line (#2169)1fd8f88Add missed changes in changeloga7a1f34Release 8.5.29 versionb55a36dUpdate dependencies7647a81Escape </style> in output of non-Root nodes (#2163)7ac9026Do not split list.comma() and list.space() on separators inside comments (#2162)ebffa97Add postcss-smooth-corners plugin57d6401Speed up source map cleaningDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions