chore(deps): bump danger/danger-js from 11.2.0 to 14.0.5

[dependabot]

Bumps danger/danger-js from 11.2.0 to 14.0.5.

Release notes

Sourced from danger/danger-js's releases.

Release 14.0.5

No release notes provided.

Release 14.0.4

No release notes provided.

Release 13.0.10

No release notes provided.

Release 13.0.8

No release notes provided.

Release 13.0.5

No release notes provided.

Release 13.0.4

---

Fun sidenote, it's been exactly a year and we had to update the node version etc

Release 12.3.4

No release notes provided.

Release 12.3.3

No release notes provided.

Release 12.3.2

No release notes provided.

Release 12.3.1

No release notes provided.

Release 12.3.0

No release notes provided.

Release 12.2.1

No release notes provided.

Release 12.2.0

No release notes provided.

Release 12.1.0

It's been 7 years since I looked at danger init and err, the world of CI has changed quite a bit since then. So, Danger JS's init command now knows that GitHub Actions exists and will correctly offer some advice on how to set up a Dangerfile for it. - [@​orta]

---

12.0.1

... (truncated)

Changelog

Sourced from danger/danger-js's changelog.

Main

14.0.0-5

Release faff as I migrate to OIDC deploys for danger - orta

14.0.0

Danger now installs undici 7 by default. undici is what Danger uses to talk to GitHub, GitLab and Bitbucket, and version 7 requires node 20.18.1 or newer — so for most people that is Danger's new effective minimum. Node 18 has not been dropped: you can pin undici back to the 6.x line yourself and everything keeps working. - [@​orta]

The reason for the switch is that it puts you in control of your own undici version. Previously Danger pinned undici to the 6.x line, so if a security advisory landed you had to wait for a Danger release to pick up the fix. undici is now an optional peer dependency accepting ^6.28.0 || ^7, which means moving it in either direction is a supported thing to do rather than a workaround.

• github.reviews now reports the review states GitHub actually sends, so checking for a review that requested changes works - fixes #1443 [@​Socialpranker]
• GitHub: Fetch all pages of pull request reviews #1383 [@​LeonMAG]
• Upgrade to undici 6.27.0 to resolve transitive CVEs - fixes #1517 [@​rjatkins]
• Breaking Default to undici 7, which raises the effective node requirement to 20.18.1. If you are on node 18, add "resolutions": { "undici": "^6.28.0" } (yarn), "overrides": { "undici": "^6.28.0" } (npm), or the same overrides block nested under "pnpm" (pnpm) to your package.json. [@​orta]
• undici is now an optional peer dependency (^6.28.0 || ^7), so you can move it forward yourself to pick up security fixes without waiting for a Danger release [@​orta]
• Removed the undici entry from Danger's own resolutions, which had no effect on people installing Danger [@​orta]
• Danger now runs on node 24 and newer. Signing in as a GitHub App relied on a dependency that used a part of node removed in 24, which crashed Danger on startup before it could do any work. That signing is now done with node's own crypto, so the dependency (and the eleven packages it brought with it) is gone [@​orta]

13.0.9

... (truncated)

Commits

• a236e3b Release 14.0.5
• 5431abe CHANGELOG
• a365522 Add support for deploying via github actions (#1532)
• afbc4c7 Release 14.0.4
• 33a3889 Fix crash on node 24+ by dropping jsonwebtoken
• c0b55a4 CHANGELOG for deploy
• b3a7acd Default to undici 7, make it an optional peer dependency (#1529)
• d763cb8 Fix GitHubReview state values to match the GitHub API (#1525)
• d701f15 fix(github): paginate pull request reviews (#1528)
• 532ea4b Run CI on Node 22 (#1526)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
create-awesome-python-app-website	Ready	Preview	Aug 27, 2026 3:17am

[github-actions]

	Fails
🚫	📋 Missing Section - Please include the section: ## Description in your PR description.
🚫	📋 Missing Section - Please include the section: ## Type of Change in your PR description.
🚫	📋 Missing Section - Please include the section: ## How Has This Been Tested? in your PR description.
🚫	📋 Missing Section - Please include the section: ## Checklist in your PR description.

	Warnings
⚠️	📋 Unchecked Checklist Item - Please check the item: My code follows the style guidelines of this project in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have performed a self-review of my code in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have commented my code, particularly in hard-to-understand areas in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have made corresponding changes to the documentation in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: My changes generate no new warnings in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: Any dependent changes have been merged and published in downstream modules in your PR description.
⚠️	📋 Unchecked Checklist Item - Please check the item: I have checked my code and corrected any misspellings in your PR description.

	Messages
📖	Thanks! We ❤️ small PRs!

Generated by 🚫 dangerJS against 95eef30

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0		0	0.09s
✅ COPYPASTE	jscpd	yes		no		no	1.05s
✅ EDITORCONFIG	editorconfig-checker	172		0		0	0.22s
✅ JAVASCRIPT	standard	1		0		0	1.17s
✅ JSON	jsonlint	9		0		0	0.08s
✅ JSON	npm-package-json-lint	yes		no		no	0.43s
✅ JSON	prettier	9		0		0	0.43s
✅ JSON	v8r	9		0		0	14.2s
✅ MARKDOWN	markdownlint	9		0		0	0.7s
✅ MARKDOWN	markdown-table-formatter	9		0		0	0.31s
✅ REPOSITORY	betterleaks	yes		no		no	0.87s
✅ REPOSITORY	checkov	yes		no		no	15.59s
✅ REPOSITORY	git_diff	yes		no		no	0.02s
✅ REPOSITORY	osv-scanner	yes		no		no	1.57s
✅ REPOSITORY	secretlint	yes		no		no	2.71s
✅ REPOSITORY	trivy	yes		no		no	11.71s
✅ REPOSITORY	trufflehog	yes		no		no	3.21s
✅ SPELL	cspell	173		0		0	4.63s
✅ YAML	prettier	13		0		0	0.71s
✅ YAML	yamllint	13		0		0	0.87s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MARKDOWN_MARKDOWN_LINK_CHECK. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JAVASCRIPT_STANDARD,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,YAML_PRETTIER,YAML_YAMLLINT

Show us your support by starring ⭐ the repository

[ulises-jeremias]

@dependabot rebase

[dependabot]

The base commit for this pull request has not changed.