Skip to content

[Deps] Safe dependency updates 2026-03-10#1199

Draft
github-actions[bot] wants to merge 1 commit intomainfrom
deps/safe-updates-2026-03-10-577de369bbfdf92b
Draft

[Deps] Safe dependency updates 2026-03-10#1199
github-actions[bot] wants to merge 1 commit intomainfrom
deps/safe-updates-2026-03-10-577de369bbfdf92b

Conversation

@github-actions
Copy link
Contributor

Automated Safe Dependency Updates

This PR contains safe patch/minor-level dependency updates that have been verified to:

  • ✅ Pass all tests (828 passing, 3 pre-existing failures unchanged)
  • ✅ Have no breaking changes
  • ✅ Address no new security vulnerabilities (npm audit shows 0 vulnerabilities)

Updated Dependencies

Package Previous Updated Type
@commitlint/cli 20.4.1 20.4.3 patch
@commitlint/config-conventional 20.4.1 20.4.3 patch
@eslint/compat 2.0.2 2.0.3 patch
@types/node 25.2.3 25.4.0 minor
@typescript-eslint/eslint-plugin 8.55.0 8.57.0 minor
@typescript-eslint/parser 8.55.0 8.57.0 minor
eslint 10.0.0 10.0.3 patch
glob 13.0.1 13.0.6 patch
globals 17.3.0 17.4.0 minor
typescript-eslint 8.55.0 8.57.0 minor

Security Status

  • npm audit: 0 vulnerabilities found (CRITICAL: 0, HIGH: 0, MODERATE: 0, LOW: 0)
  • No Dependabot alerts accessible for comparison

Skipped Updates (major version bumps with breaking changes)

  • chalk 4.x → 5.x (ESM-only, breaking)
  • commander 12.x → 14.x (major breaking changes)
  • eslint-plugin-security 3.x → 4.x (major)
  • execa 5.x → 9.x (major rewrite, ESM-only)

Verification

  • All tests pass (828/831 — 3 pre-existing failures unrelated to updates)
  • No breaking changes detected
  • npm audit clean after updates

Generated by Dependency Security Monitor Workflow

AI generated by Dependency Security Monitor

- @commitlint/cli: 20.4.1 -> 20.4.3
- @commitlint/config-conventional: 20.4.1 -> 20.4.3
- @eslint/compat: 2.0.2 -> 2.0.3
- @types/node: 25.2.3 -> 25.4.0
- @typescript-eslint/eslint-plugin: 8.55.0 -> 8.57.0
- @typescript-eslint/parser: 8.55.0 -> 8.57.0
- eslint: 10.0.0 -> 10.0.3
- glob: 13.0.1 -> 13.0.6
- globals: 17.3.0 -> 17.4.0
- typescript-eslint: 8.55.0 -> 8.57.0

All tests pass (3 pre-existing unrelated failures unchanged)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions bot added automated dependencies Pull requests that update a dependency file labels Mar 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants