Skip to content

chore(deps): update magic tooling - #78

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/magic-tooling
Aug 19, 2026
Merged

chore(deps): update magic tooling#78
renovate[bot] merged 1 commit into
mainfrom
renovate/magic-tooling

Conversation

@renovate

@renovate renovate Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Age Confidence
GSTJ/magic action patch v1.19.2v1.19.4 age confidence
magic-codemods (source) devDependencies patch 1.1.51.1.6 age confidence

Release Notes

GSTJ/magic (GSTJ/magic)

v1.19.4

Compare Source

The release publishes magic-codemods@1.1.6. The repo release is v1.19.4,
and v1 moves onto it.

Security

magic-kebab now refuses tracked source paths with symbolic-link components or
multiple hard links. Its import rewriter previously followed a link and could
change a file outside the repository during --write. Source reads and writes
also use O_NOFOLLOW file descriptors and compare the opened inode with the
tracked path before editing.

v1.19.3

Compare Source

  • fix(security): isolate Maestro workspaces from labels (#​33)
  • fix(security): update nanoid to 3.3.18 [skip release] (#​32)
  • fix(security): update DOMPurify to 3.4.13 [skip release] (#​31)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot merged commit c0a6cbf into main Aug 19, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/magic-tooling branch August 19, 2026 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants