chore(deps-dev): bump the npm-development group across 1 directory with 7 updates - #68
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: cd1c67a9ad
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "license": "BlueOak-1.0.0", | ||
| "dependencies": { | ||
| "brace-expansion": "^5.0.5" | ||
| "brace-expansion": "^5.0.8" |
There was a problem hiding this comment.
Align the brace-expansion override with minimatch
With this bump, @typescript-eslint/typescript-estree now pulls in minimatch@10.2.6, whose lockfile dependency requires brace-expansion: ^5.0.8, but the existing override in package.json still forces that subtree to brace-expansion@5.0.6 (npm ls --package-lock-only @typescript-eslint/typescript-estree minimatch brace-expansion reports it as overridden). In lint/CI paths that exercise typescript-eslint's glob matching, this keeps running a version outside minimatch's declared compatible range and below the patched floor for the brace-expansion DoS advisory, so the dependency update does not actually pick up the intended patched transitive dependency. Update or remove the override so the lockfile installs 5.0.8 or newer.
Useful? React with 👍 / 👎.
cd1c67a to
8eae9b8
Compare
…th 7 updates Bumps the npm-development group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/express-serve-static-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express-serve-static-core) | `5.1.2` | `5.1.3` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.25` | | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.11.0` | | [nock](https://github.com/nock/nock) | `14.0.16` | `14.0.17` | | [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.68.0` | Updates `@types/express-serve-static-core` from 5.1.2 to 5.1.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/express-serve-static-core) Updates `@types/lodash` from 4.17.24 to 4.17.25 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `globals` from 17.7.0 to 17.11.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.11.0) Updates `nock` from 14.0.16 to 14.0.17 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](nock/nock@v14.0.16...v14.0.17) Updates `prettier` from 3.9.5 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.5...3.9.6) Updates `ts-jest` from 29.4.11 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12) Updates `typescript-eslint` from 8.64.0 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@types/express-serve-static-core" dependency-version: 5.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@types/lodash" dependency-version: 4.17.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: globals dependency-version: 17.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: nock dependency-version: 14.0.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <support@github.com>
8eae9b8 to
868725d
Compare
Bumps the npm-development group with 7 updates in the / directory:
5.1.25.1.34.17.244.17.2517.7.017.11.014.0.1614.0.173.9.53.9.629.4.1129.4.128.64.08.68.0Updates
@types/express-serve-static-corefrom 5.1.2 to 5.1.3Commits
Updates
@types/lodashfrom 4.17.24 to 4.17.25Commits
Updates
globalsfrom 17.7.0 to 17.11.0Release notes
Sourced from globals's releases.
Commits
8c5992717.11.061eafbfAddreact-nativeglobals (#337)7bed4af17.10.0f468407AddGM_cookieto Greasemonkey globals (#349)8e7b93517.9.05a958edUpdate globals (2026-08-01) (#348)36c765917.8.07394811Update globals (2026-07-01) (#347)Updates
nockfrom 14.0.16 to 14.0.17Release notes
Sourced from nock's releases.
Commits
1ee467cfix: remove interceptor from scope.interceptors on nock.removeInterceptor (#2...da20f4bchore(deps): bump actions/checkout from 6 to 7 (#2987)Updates
prettierfrom 3.9.5 to 3.9.6Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
8f0c950Release 3.9.6e910764Update changelogec3f1c7Update typescript-eslint to v8.65.0 (#19675)73d2efcUpdate Yuku parser to v0.7.0 (#19664)dd5e24ePreserve quotes forTSMethodSignaturenodes namednew(#19621)c03ab4eUpdate dependency eslint-plugin-unicorn to v72 (#19633)b74dd53Update Yuku parser to v0.6.5 (#19654)f1b594eUpdate dependency eslint-plugin-simple-import-sort to v14 (#19655)0d9dfb6Update Yuku parser to v0.6.4 (#19650)3bbb815Removetypescript-onlydirectory (#19636)Updates
ts-jestfrom 29.4.11 to 29.4.12Release notes
Sourced from ts-jest's releases.
Changelog
Sourced from ts-jest's changelog.
Commits
3f05625chore(release): 29.4.12df28b27docs: clarify TypeScript version prerequisitesc8a614adocs: mention TypeScript 7 setup in README06c79d4fix: address TypeScript 7 review feedbackf107460docs: explain TypeScript 7 compatibility setup3388227test(e2e): add TypeScript compatibility matrix891dc73fix(compiler): support TypeScript 7 compatibility aliaseseb135ebbuild(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examplesd5d80a3ci: pin google osv scan action at v2.3.56bf293fbuild(deps): bump shell-quote from 1.8.4 to 1.10.0 in /websiteUpdates
typescript-eslintfrom 8.64.0 to 8.68.0Release notes
Sourced from typescript-eslint's releases.
... (truncated)
Changelog
Sourced from typescript-eslint's changelog.
Commits
8f4e00achore(release): publish 8.68.055f6d5dchore: enable source maps (#12677)20a261fchore(release): publish 8.67.0c245fbbfeat(typescript-eslint): export basic globs for using tseslint (#12105)3b155bbchore: use typescript 7 for typechecking (#12601)e51b11bchore(release): publish 8.66.063ba81bchore(release): publish 8.65.0eaf4576feat: add warning when TS 7 is detected (#12529)0d06406chore: add attw validation to repo (#12437)c2386e4chore(deps): update dependency prettier to v3.9.5 (#12486)