Repository navigation
chore(deps): bump the minor-and-patch group with 12 updates - #479
Closed
dependabot[bot] wants to merge 2 commits into
Closed
dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
Bumps the minor-and-patch group with 12 updates: | Package | From | To | | --- | --- | --- | | [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `4.0.1` | `4.2.0` | | [turbo](https://github.com/vercel/turborepo) | `2.11.4` | `2.11.6` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.71.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.2` | `5.0.3` | | [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.4` | `3.24.5` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.23.0` | `8.23.1` | | [chalk](https://github.com/chalk/chalk) | `6.0.0` | `6.0.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.48.0` | `1.50.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.1` | `8.3.2` | | [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1141.0` | `3.1145.0` | | [@google-cloud/secret-manager](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-secretmanager) | `7.1.0` | `7.1.1` | Updates `eslint-plugin-security` from 4.0.1 to 4.2.0 - [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-security@eslint-plugin-security-v4.0.1...eslint-plugin-security-v4.2.0) Updates `turbo` from 2.11.4 to 2.11.6 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.4...v2.11.6) Updates `typescript-eslint` from 8.70.1 to 8.71.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint) Updates `vitest` from 5.0.2 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) Updates `mysql2` from 3.24.4 to 3.24.5 - [Release notes](https://github.com/sidorares/node-mysql2/releases) - [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md) - [Commits](sidorares/node-mysql2@v3.24.4...v3.24.5) Updates `pg` from 8.23.0 to 8.23.1 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg) Updates `chalk` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v6.0.0...v6.0.1) Updates `lucide-react` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.50.0/packages/lucide-react) Updates `@types/node` from 26.6.3 to 26.6.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `vite` from 8.3.1 to 8.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite) Updates `@aws-sdk/client-secrets-manager` from 3.1141.0 to 3.1145.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1145.0/clients/client-secrets-manager) Updates `@google-cloud/secret-manager` from 7.1.0 to 7.1.1 - [Release notes](https://github.com/googleapis/google-cloud-node/releases) - [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-secretmanager/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-node/commits/dlp-v7.1.1/packages/google-cloud-secretmanager) --- updated-dependencies: - dependency-name: eslint-plugin-security dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: turbo dependency-version: 2.11.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.71.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: mysql2 dependency-version: 3.24.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pg dependency-version: 8.23.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: chalk dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: lucide-react dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-secrets-manager" dependency-version: 3.1145.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@google-cloud/secret-manager" dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
package-lock.json regenerated with `npm install --package-lock-only` from main's lockfile (source-map-js 1.2.2, #482) and this branch's package.json. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016PyNv48vpYUw2HhpjYFNUi
Contributor
|
·@·d·ependabot r·ecreate Generated by Claude Code |
Contributor
|
Superseded by #487: the same 12 bumps (this PR's package.json changes verbatim), with the lockfile regenerated on current main. This PR conflicted after #482–#485, and its build gate didn't run after the branch was updated. Closing this one. Dependabot will close or refresh its own group once main has these versions. Generated by Claude Code |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/minor-and-patch-ff3021936e
branch
October 6, 2026 16:39
huyplb
added a commit
that referenced
this pull request
Oct 6, 2026
chore(deps): bump the minor-and-patch group with 12 updates (supersedes #479)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 12 updates:
4.0.14.2.02.11.42.11.68.70.18.71.05.0.25.0.33.24.43.24.58.23.08.23.16.0.06.0.11.48.01.50.026.6.326.6.48.3.18.3.23.1141.03.1145.07.1.07.1.1Updates
eslint-plugin-securityfrom 4.0.1 to 4.2.0Release notes
Sourced from eslint-plugin-security's releases.
Changelog
Sourced from eslint-plugin-security's changelog.
Commits
a204dfbchore: release 4.2.0 🚀 (#229)17082bbfeat: add TypeScript type definitions (#215)abc25ddci: remove Twitter announcement step fromrelease-pleaseworkflow (#226)c80f6b5chore: release 4.1.0 🚀 (#224)baead41fix: use valid rule meta types (#219)81a6c2dfeat: detect-invisible-characters rule (#212)9735451ci: fix the CI failure inpr.yml(#218)48134bafix: handle all ECMAScript line terminators (#221)1f8de13chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 (#223)2727df0chore(deps): bump brace-expansion (#216)Updates
turbofrom 2.11.4 to 2.11.6Release notes
Sourced from turbo's releases.
... (truncated)
Commits
fcd1213publish 2.11.6 to registry90718d1fix: Infer single-package mode for query commands (#14351)a409ce5fix: Complete taskquerymetadata for non-script entrypoints (#14350)bc7c148feat: Filter tasks by tags in the CLI (#14345)49d1607feat: Filterquerytasks and packages by tags (#14344)fba5351feat: Expose task and package tags inquery(#14343)b4570e0test: Deflake untracked scan-scope assertions (#14348)fa107aadocs: Point security.txt to Vercel HackerOne program (#14346)0deb0e7fix: Upgrade brace-expansion to latest compatible releases (#14347)d44edbefeat: Add task tags with configuration inheritance (#14342)Updates
typescript-eslintfrom 8.70.1 to 8.71.0Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
8695664chore(release): publish 8.71.0Updates
vitestfrom 5.0.2 to 5.0.3Release notes
Sourced from vitest's releases.
Commits
33cadeachore: release v5.0.3 (#11409)346d389fix(vm): don't reuse scripts across vite environments (#11395)f6c9a49fix(deps): pinwhy-is-node-runningto3.2.1to avoid users running into `...062c75dchore: fix standalone docs build, update exports maps (#11394)caf2887fix(vm): do not optimize deps from index.html (fix #11329) (#11360)50312ebfix(pool): preserve unique pool ids whengroupOrderis set (#11392)7c36748fix(browser): ignore page crash while cancelling (#11386)92ba7fcfix: scope cache key generators to projects (fix #11281) (#11301)38f9885fix(cache): revalidate imports of cached modules (#11381)b24585ffix: don't retry whentest.failsexpectedly failed (#11219)Updates
mysql2from 3.24.4 to 3.24.5Release notes
Sourced from mysql2's releases.
Changelog
Sourced from mysql2's changelog.
Commits
e224afechore(master): release 3.24.5 (#4577)64ff7ccbuild(deps-dev): bump@types/nodefrom 26.6.2 to 26.6.3 (#4578)c3f9872build(deps-dev): bump rollup in the rollup group across 1 directory (#4572)4476371build(deps-dev): bump prettier in the prettier group across 1 directory (#4571)3fc1b4abuild(deps-dev): bump@types/nodefrom 26.6.2 to 26.6.3 in /website (#4579)6fcd60abuild(deps): bump undici from 7.29.0 to 7.30.0 in /website (#4576)1705203build(deps): bump lucide-react from 1.47.0 to 1.48.0 in /website (#4575)e1cb755build(deps-dev): bump prettier from 3.9.8 to 3.9.9 in /website (#4574)84425a1build(deps): bump sass from 1.104.1 to 1.105.0 in /website (#4573)b1c39c8fix: strip the brackets from an IPv6 host in a connection URI (#4570)Updates
pgfrom 8.23.0 to 8.23.1Changelog
Sourced from pg's changelog.
Commits
0980cefPublish2759b2cfix(pg): run a named statement with an empty text more than once (#3781)7feb7dffix(pg): expose detail and hint on errors from the native client (#3780)9683053fix(pg): do not treat Sync as connection ending (#3772)4589038fix: validate server certificate against host when connecting to an IP addres...9808955cleanup: Fix typo in comment2b02f64fix: avoid mutating query config (#3720)0cef6afReject portal based queries in pipeline mode instead of misrouting rows (#3737)2991480Deprecate serializing invalidDates (#3731)c940d7cFail pipelined queries when the connection dies instead of hanging (#3736)Updates
chalkfrom 6.0.0 to 6.0.1Release notes
Sourced from chalk's releases.
Commits
47fc05a6.0.19c93a04Fix inconsistent coercion of two arguments8960adaMeta tweaksUpdates
lucide-reactfrom 1.48.0 to 1.50.0Release notes
Sourced from lucide-react's releases.
Commits
e042fecfix(packages): declare@types/reactas an optional peer dependency (#4892)Updates
@types/nodefrom 26.6.3 to 26.6.4Commits
Updates
vitefrom 8.3.1 to 8.3.2Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
1003321release: v8.3.2 (#23623)24bd331fix(worker): align worker urls in client and server when using terser (#23614)94d0080perf: only register time middleware when debug logging is enabled (#23621)89574f6perf: avoid encoding intermediate source maps (#23461)5a3a010fix(server): release previous environments after initialization (#23499)1929b4cdocs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)6894f5cfix(server): handle file watcher errors without crashing (#23503)cf5c028perf(build): avoid quadratic link scan in the preload helper (#23510)bba3bb8fix: mergebuild.rolldownOptions.output.minifycorrectly (#23536)5e4b9cafix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...Updates
@aws-sdk/client-secrets-managerfrom 3.1141.0 to 3.1145.0Release notes
Sourced from @aws-sdk/client-secrets-manager's releases.