Repository navigation
chore(deps-dev): bump the development-dependencies group across 1 directory with 7 updates - #633
dependabot[bot] wants to merge 3 commits into
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1a795858c5
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "ajv": "8.20.0", | ||
| "ajv-formats": "3.0.1", | ||
| "electron": "44.9.1", | ||
| "electron": "45.1.0", |
There was a problem hiding this comment.
This changes the desktop runtime to Electron 45.1.0, but the checked-in macOS codesign/office review artifacts are bound to Electron 44.9.1. The packaged codesign host only grants its proof when the runtime tuple exactly matches that review, so packaged macOS office/codesign operations will lose host coverage and fail closed until the native artifacts and their review evidence are regenerated for Electron 45.
Useful? React with 👍 / 👎.
| electron-builder@26.18.0: | ||
| resolution: {integrity: sha512-ASgIuQnOq4RuD8jMhS9hI0LS3EMRT1I/M5R6utqifB/BHN80IcCjBdt+DED+NmNPvmBgEtrlExXZitNdA7kXOg==} |
There was a problem hiding this comment.
The lockfile now resolves electron-builder to 26.18.0, while both release extraction paths explicitly reject anything other than electron-builder/app-builder-lib 26.15.3 (final_artifact_builder_version_mismatch). Consequently, Windows packaging/final-artifact extraction will abort before producing or verifying an installer until those pinned-tool checks and their associated vendor evidence are updated together with this dependency.
Useful? React with 👍 / 👎.
dependabot
Bot
changed the title
8b6683f to
5fc65a4
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 5fc65a440e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "ajv": "8.20.0", | ||
| "ajv-formats": "3.0.1", | ||
| "electron": "44.9.1", | ||
| "electron": "45.2.1", |
There was a problem hiding this comment.
This commit now pins Electron 45.2.1, but the checked-in macOS review evidence still records and approves Electron 44.9.1 (docs/release/macos-source-review-2026-11-02.md). The packaged office/codesign validation binds its runtime tuple to that evidence, so macOS packaging and packaged native operations will fail closed until the native artifacts and review records are regenerated for Electron 45.2.1.
Useful? React with 👍 / 👎.
…ectory with 7 updates Bumps the development-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` | | [@electron/osx-sign](https://github.com/electron/osx-sign) | `2.7.1` | `2.7.2` | | [electron](https://github.com/electron/electron) | `44.9.1` | `45.2.1` | | [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) | `26.15.3` | `26.18.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` | | [expo-doctor](https://github.com/expo/expo/tree/HEAD/packages/expo-doctor) | `1.21.4` | `1.21.5` | | [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `8.0.7` | `8.0.10` | Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@electron/osx-sign` from 2.7.1 to 2.7.2 - [Release notes](https://github.com/electron/osx-sign/releases) - [Commits](electron/osx-sign@v2.7.1...v2.7.2) Updates `electron` from 44.9.1 to 45.2.1 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v44.9.1...v45.2.1) Updates `electron-builder` from 26.15.3 to 26.18.0 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/electron-builder@26.18.0/packages/electron-builder/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.18.0/packages/electron-builder) Updates `vite` from 8.3.4 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) Updates `expo-doctor` from 1.21.4 to 1.21.5 - [Release notes](https://github.com/expo/expo/releases) - [Changelog](https://github.com/expo/expo/blob/main/packages/expo-doctor/CHANGELOG.md) - [Commits](https://github.com/expo/expo/commits/expo-doctor@1.21.5/packages/expo-doctor) Updates `@babel/parser` from 8.0.7 to 8.0.10 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.10/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 8.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@electron/osx-sign" dependency-version: 2.7.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: electron dependency-version: 45.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: electron-builder dependency-version: 26.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: expo-doctor dependency-version: 1.21.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
5fc65a4 to
7f2fc75
Compare
Bumps the development-dependencies group with 7 updates in the / directory:
26.6.526.6.62.7.12.7.244.9.145.2.126.15.326.18.08.3.48.3.51.21.41.21.58.0.78.0.10Updates
@types/nodefrom 26.6.5 to 26.6.6Commits
Updates
@electron/osx-signfrom 2.7.1 to 2.7.2Release notes
Sourced from @electron/osx-sign's releases.
Commits
a760994fix: resolve identity name when signing with a certificate hash (#454)4b6ede6build(deps-dev): bump vitest to 5.0.5 (#467)0fa0e3fci: bump electron/secret-service-action to v1.1.0 (#466)04bbc48ci: bump electron/semantic-trusted-release to v1.1.2 (#465)551c2c6build(deps-dev): bump@electron/getto ^5.0.0 (#461)c953119ci: bump pinned Node.js to 22.23.4 security release (#464)4c62486build(deps-dev): bump vite from 8.3.0 to 8.3.3 (#463)c25ab28build(deps): bump source-map-js from 1.2.1 to 1.2.2 (#460)f8b3ad6build(deps-dev): bump oxfmt to 0.71.0 (#459)222d790ci: set cache-mode on release workflows (#449)Updates
electronfrom 44.9.1 to 45.2.1Release notes
Sourced from electron's releases.
... (truncated)
Commits
f81ca3dchore: cherry-pick 3 changes from chromium (#55523)19f462dchore: update patches (#55516)b4b23b2chore: bump chromium to 156.0.8078.75 (45-x-y) (#55419)9b4c399chore: cherry-pick 17 changes from chromium, dawn, skia and v8 (#55491)0d466effeat: support chrome.storage.sync in extensions (#55253)f932043feat: add Menu.setHighlightColors() for Windows (#55493)c74df06chore: batch backport of #55443, #55441, #55442, #55406, #55381 (#55470)07fe76cfix: preserve fractional window opacity (#55499)fa3673fdocs: fix netLog.stopLogging() examples (#55497)6671dcefix: handle cancelled and Save As DevTools saves correctly (#55485)Updates
electron-builderfrom 26.15.3 to 26.18.0Release notes
Sourced from electron-builder's releases.
... (truncated)
Changelog
Sourced from electron-builder's changelog.
... (truncated)
Commits
e2a8604chore(deploy): Release v26.18.0 (electron-updater@6.8.11) (v26) (#10250)5cdf017chore(deploy): Release v26.17.0 (electron-updater@6.8.10) (v26) (#10191)7d3b30fchore(deploy): Release v26.16.1 (#10165)f461097chore(deploy): Release v26.16.0 (#10059)ce825f1chore(deploy): Release v26.15.7 (#10005)026bbdachore(deploy): Release v26.15.6 (#9952)8d4a578chore(deploy): Release v26.15.5 (#9938)3332d51chore(deploy): Release v26.15.4 (#9919)Updates
vitefrom 8.3.4 to 8.3.5Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
981f07frelease: v8.3.5 (#23856)0d86b34fix(resolve): support subpath imports with multiple#(#23631)6a02780perf(ssr): extract inline source maps without a regexp (#23775)8e890e1fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)197daf6fix(bundled-dev): declare utf-8 charset in fallback page (#23846)4d16e7cfix(build): include preload dependencies to chunk import map hashing (#23793)df7b40erefactor(dev): consolidate moduleURL to file path utilities (#23828)a162990refactor(dev): use ModuleURLs throughout HTML transforms (#23815)6116689refactor(dev): separate import resolution from URL conversion (#23791)446954crefactor(dev): share ModuleURL and BrowserURL conversions (#23790)Updates
expo-doctorfrom 1.21.4 to 1.21.5Changelog
Sourced from expo-doctor's changelog.
Commits
63dabd3Version packages (main) (#51700)e180d56chore(internal-scripts): Renameexpo-module-scriptsto `@expo/internal-scri...Updates
@babel/parserfrom 8.0.7 to 8.0.10Release notes
Sourced from @babel/parser's releases.
... (truncated)
Changelog
Sourced from @babel/parser's changelog.