Skip to content

PR 73: build(deps): bump the npm_and_yarn group with 6 updates #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 3, 2025

Bumps the npm_and_yarn group with 6 updates:

Package From To
@octokit/request-error 3.0.3 6.1.8
@actions/github 5.1.1 6.0.0
@octokit/core 4.2.4 6.1.5
@octokit/request 5.6.3 8.4.1
@octokit/plugin-paginate-rest 2.21.3 9.2.2
undici 5.28.4 5.29.0

Updates @octokit/request-error from 3.0.3 to 6.1.8

Release notes

Sourced from @​octokit/request-error's releases.

v6.1.8

6.1.8 (2025-04-10)

Bug Fixes

  • deps: update dependency @​octokit/types to v14 (#505) (ab4ea7b)

v6.1.7

6.1.7 (2025-02-13)

Bug Fixes

  • ReDos regex vulnerability, reported by @​DayShift (d558320874a4bc8d356babf1079e6f0056a59b9e)

v6.1.6

6.1.6 (2024-12-29)

Bug Fixes

  • deps: bump @octokit/types to fix Deno compat (#483) (e01d470)

v6.1.5

6.1.5 (2024-09-24)

Bug Fixes

  • types: add explicit | undefined to optional fields (#462) (43fc3bd)

v6.1.4

6.1.4 (2024-07-11)

Bug Fixes

  • improve perf of request error instantiations (#444) (ba04ffa)

v6.1.3

6.1.3 (2024-07-11)

Bug Fixes

v6.1.2

6.1.2 (2024-07-10)

... (truncated)

Commits
  • ab4ea7b fix(deps): update dependency @​octokit/types to v14 (#505)
  • 7eba3d2 chore(deps): update dependency tinybench to v4 (#501)
  • 549624b build(deps): bump vite from 6.2.2 to 6.2.5 (#504)
  • 11c1adc build(deps): lock file maintenance (#502)
  • de5f24d chore(deps): update dependency prettier to v3.5.3 (#499)
  • ef66347 build(deps): lock file maintenance (#500)
  • 787201d build(deps): lock file maintenance (#498)
  • 5ab6a76 chore(deps): update dependency prettier to v3.5.2 (#497)
  • f8f8c4a build(deps): lock file maintenance (#496)
  • eee2491 chore(deps): update dependency prettier to v3.5.1 (#493)
  • Additional commits viewable in compare view

Updates @actions/github from 5.1.1 to 6.0.0

Changelog

Sourced from @​actions/github's changelog.

6.0.0

  • Support the latest Octokit in @​actions/github #1553
    • Drop support of NodeJS v14, v16
Commits

Updates @octokit/core from 4.2.4 to 6.1.5

Release notes

Sourced from @​octokit/core's releases.

v6.1.5

6.1.5 (2025-04-10)

Bug Fixes

  • deps: update dependency @​octokit/types to v14 (#731) (3700c41)

v6.1.4

6.1.4 (2025-02-13)

Bug Fixes

  • deps: bump Octokit dependencies vulnerable to ReDos (#723) (582d8bd)

v6.1.3

6.1.3 (2025-01-03)

Bug Fixes

  • deps: bump Octokit dependencies to fix Deno compat (#715) (e2b21bb)

v6.1.2

6.1.2 (2024-04-09)

Bug Fixes

v6.1.1

6.1.1 (2024-04-03)

Bug Fixes

  • deps: update dependency @​octokit/types to v13 (ade2813)

v6.1.0

6.1.0 (2024-04-03)

Features

... (truncated)

Commits
  • 3700c41 fix(deps): update dependency @​octokit/types to v14 (#731)
  • fcfe306 chore(deps): bump vite from 6.1.0 to 6.2.5 (#729)
  • 59c0138 ci(prettier): use Node LTS instead of Node v16 (#727)
  • 7304860 chore(deps): update dependency prettier to v3.5.3 (#726)
  • 768204c chore(deps): update dependency prettier to v3.5.2 (#725)
  • 3105ee1 chore(deps): update dependency semantic-release-plugin-update-version-in-file...
  • 2ddb327 chore(deps): update dependency prettier to v3.5.1 (#722)
  • 582d8bd fix(deps): bump Octokit dependencies vulnerable to ReDos (#723)
  • 4c21074 chore(deps): update dependency esbuild to ^0.25.0 (#721)
  • 5fa1fe1 chore(deps-dev): bump vitest and @​vitest/coverage-v8 (#720)
  • Additional commits viewable in compare view

Updates @octokit/request from 5.6.3 to 8.4.1

Release notes

Sourced from @​octokit/request's releases.

v8.4.1

8.4.1 (2025-02-15)

Bug Fixes

v8.4.0

8.4.0 (2024-04-09)

Features

v8.3.1

8.3.1 (2024-04-05)

Bug Fixes

  • upgrade @octokit/endpoint (4e7127c)

v8.3.0

8.3.0 (2024-04-05)

Bug Fixes

Features

v8.2.0

8.2.0 (2024-02-09)

Features

  • add documentation link in error message (#667) (dbfeab2)

v8.1.6

8.1.6 (2023-11-22)

Bug Fixes

... (truncated)

Commits
  • 356411e fix: ReDos regex vulnerability, reported by @​DayShift (#741)
  • abc4955 feat: re-add redirect request option (#636)
  • 4e7127c fix: upgrade @octokit/endpoint
  • 2e67925 feat(security): Add provenance (#685)
  • 6822e8b fix: upgrade @octokit/types
  • dbfeab2 feat: add documentation link in error message (#667)
  • c013de4 docs: fix spelling errors (#671)
  • 3d22c38 chore(deps): update dependency prettier to v3.2.5
  • 984ec17 chore(deps): update dependency esbuild to ^0.20.0
  • 2a9cf78 ci(action): update peter-evans/create-or-update-comment action to v4
  • Additional commits viewable in compare view

Updates @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

  • pkg: pin @octokit/core peerDependency to v5 (#599) (5b84386)

v9.2.0

9.2.0 (2024-02-22)

Features

  • new /orgs/{org}/organization-roles/{role_id}/teams and /orgs/{org}/organization-roles/{role_id}/users endpoints (#594) (75aeaaf)

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

v9.1.2

9.1.2 (2023-10-26)

... (truncated)

Commits
  • e1e4489 fix: ReDos regex vulnerability, reported by @​DayShift (#660)
  • 5b84386 fix(pkg): pin @octokit/core peerDependency to v5 (#599)
  • fa01f94 ci(action): update actions/add-to-project action to v0.6.0 (#598)
  • 75aeaaf feat: new /orgs/{org}/organization-roles/{role_id}/teams and `/orgs/{org}/o...
  • 54d6bcf chore(deps): update dependency prettier to v3.2.5
  • 1bfa2f8 chore(deps): update dependency npm-run-all2 to v6
  • eb4a8fe chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0
  • 11ef779 chore(deps): update dependency esbuild to ^0.20.0
  • 2b6cc98 ci(action): update peter-evans/create-or-update-comment action to v4
  • d7c9de5 chore(deps): update dependency prettier to v3.2.4 (#588)
  • Additional commits viewable in compare view

Updates undici from 5.28.4 to 5.29.0

Release notes

Sourced from undici's releases.

v5.29.0

What's Changed

Full Changelog: nodejs/undici@v5.28.5...v5.29.0

v5.28.5

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

Full Changelog: nodejs/undici@v5.28.4...v5.28.5

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the npm_and_yarn group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@octokit/request-error](https://github.com/octokit/request-error.js) | `3.0.3` | `6.1.8` |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) | `5.1.1` | `6.0.0` |
| [@octokit/core](https://github.com/octokit/core.js) | `4.2.4` | `6.1.5` |
| [@octokit/request](https://github.com/octokit/request.js) | `5.6.3` | `8.4.1` |
| [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) | `2.21.3` | `9.2.2` |
| [undici](https://github.com/nodejs/undici) | `5.28.4` | `5.29.0` |


Updates `@octokit/request-error` from 3.0.3 to 6.1.8
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v3.0.3...v6.1.8)

Updates `@actions/github` from 5.1.1 to 6.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `@octokit/core` from 4.2.4 to 6.1.5
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v4.2.4...v6.1.5)

Updates `@octokit/request` from 5.6.3 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v5.6.3...v8.4.1)

Updates `@octokit/plugin-paginate-rest` from 2.21.3 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v2.21.3...v9.2.2)

Updates `undici` from 5.28.4 to 5.29.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.28.4...v5.29.0)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-version: 6.1.8
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@actions/github"
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/core"
  dependency-version: 6.1.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 9.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 5.29.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@BinaryServ BinaryServ changed the title build(deps): bump the npm_and_yarn group with 6 updates PR 73: build(deps): bump the npm_and_yarn group with 6 updates May 3, 2025
@BinaryServ
Copy link
Collaborator


Automatic Self-Check - #73

The details of our automated scan for your pull request are listed below. If our scan detected errors, they must be corrected before this pull request will be advanced to the review stage:




About

This pull request includes the following information:

Category Value
Title build(deps): bump the npm_and_yarn group with 6 updates
Created 05.03.2025 10:03 AM UTC
ID #73
Author dependabot[bot]
Repo delete-deploy-env-action
Branch dependabot/npm_and_yarn/npm_and_yarn-33f869426c main
Added Files 0
Modified Files 2
Renamed Files 0
Copied Files 0
Deleted Files 0



❌ Skipped Files

Tip

The following file(s) have been skipped:


  • package-lock.json
  • package.json



This check was done automatically. Do NOT open a new PR for re-validation. Instead, to trigger this check again, make a change to your PR and wait a few minutes, or close and re-open it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants