chore(deps-dev): Bump the npm group with 5 updates#76
Conversation
Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.0` | `8.62.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.62.1` | | [@vercel/ncc](https://github.com/vercel/ncc) | `0.44.0` | `0.44.1` | | [prettier](https://github.com/prettier/prettier) | `3.9.1` | `3.9.4` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.1` | Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser) Updates `@vercel/ncc` from 0.44.0 to 0.44.1 - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](vercel/ncc@0.44.0...0.44.1) Updates `prettier` from 3.9.1 to 3.9.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.1...3.9.4) Updates `vite` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.1/packages/vite) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@vercel/ncc" dependency-version: 0.44.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: prettier dependency-version: 3.9.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: vite dependency-version: 8.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
LGTM — patch bumps of dev-only tooling (typescript-eslint, prettier, vite, ncc).
Extended reasoning...
Overview
This PR bumps five devDependencies by patch versions only: @typescript-eslint/eslint-plugin and @typescript-eslint/parser (8.62.0 → 8.62.1), @vercel/ncc (0.44.0 → 0.44.1), prettier (3.9.1 → 3.9.4), and vite (8.1.0 → 8.1.1). Only package.json and pnpm-lock.yaml change; no source code is touched.
Security risks
None material. Patch releases from well-known upstream tooling projects; changelogs list bug fixes only. Everything sits under devDependencies and does not ship in the built action bundle.
Level of scrutiny
Low — these are lockfile/dev-tooling patch bumps with no functional impact on runtime code. Dependabot-generated group updates like this are routinely auto-approvable when CI passes.
Other factors
The bug hunting system found no issues. No outstanding reviewer comments. If CI (lint/typecheck/test/build) is green, this is safe to merge without human review.
|
| Experiment | Status | Actions |
|---|---|---|
| Uppercase (py) | ✅ Pass | View GitHub Action Run · View in Langfuse |
| Uppercase (ts) | ✅ Pass | View GitHub Action Run · View in Langfuse |
| Mixed dir (node) | ✅ Pass | View GitHub Action Run · View in Langfuse |
| Mixed dir (python) | ✅ Pass | View GitHub Action Run · View in Langfuse |
| Regression fixture | ❌ Regression | View GitHub Action Run · View in Langfuse |
Details
Bumps the npm group with 5 updates:
8.62.08.62.18.62.08.62.10.44.00.44.13.9.13.9.48.1.08.1.1Updates
@typescript-eslint/eslint-pluginfrom 8.62.0 to 8.62.1Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
Commits
3ea32f4chore(release): publish 8.62.14ecca6dfix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...f3a7ec7chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...301f350fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...ebce2d4fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...Updates
@typescript-eslint/parserfrom 8.62.0 to 8.62.1Release notes
Sourced from @typescript-eslint/parser's releases.
Changelog
Sourced from @typescript-eslint/parser's changelog.
Commits
3ea32f4chore(release): publish 8.62.1Updates
@vercel/nccfrom 0.44.0 to 0.44.1Release notes
Sourced from @vercel/ncc's releases.
Commits
8f0aefdfix: preserve runtime createRequire in ESM builds (#1334)b9c6310chore: Update vm2 to latest version (3.11.5) (#1333)Updates
prettierfrom 3.9.1 to 3.9.4Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
b693cb2Release 3.9.42e92ac0Angular: Format@content(name)->@content (name)to align with other blo...abed2c2Bump Prettier dependency to 3.9.36cfbc00Clean changelog_unreleased3732e1dRelease 3.9.3a74a7b0Allow decorators to be used withdeclareon class fields (#19492)bd9e11aCorrect text identification in liquid syntax (#19489)269eee3Bump Prettier dependency to 3.9.1ec7ccd1Clean changelog_unreleasedUpdates
vitefrom 8.1.0 to 8.1.1Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
4ae9e14release: v8.1.18f925e2fix(bundledDev): skip plugin transform hooks for rolldown-lazy stub modules (...c088511test: enable "manual chunk path" test and remove "worker.format error" test (...62bd7affeat: update dynamic import warning to link to Vite docs (#22823)2dafd3brefactor(css): remove lightningcss null byte bug workaround (#22822)833fc30fix: escape ids with multiple null bytes (#22687)9fa7ab4fix(css): preserve dollar signs in external@importurls with lightningcss ...1113acfrefactor: use pre-defined environments variable to avoid duplicate `Object.va...709eb8efix(bundled-dev): avoid stack overflow onimport.meta.hot.invalidate()(#22...043a810fix: ignore bundled config temp dir (#22800)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions