Automated Safe Dependency Updates
This PR contains safe patch-level dependency updates verified to pass the full test suite with no new failures introduced.
Updated Dependencies
| Package |
Previous |
Updated |
Type |
| jest |
30.4.2 |
30.5.0 |
patch |
| babel-jest |
30.4.1 |
30.5.0 |
patch |
| eslint |
10.9.0 |
10.9.1 |
patch |
All updates fall within the existing ^ semver ranges already declared in package.json, so only package-lock.json changed.
Security Fixes Included
None — npm audit reported 0 vulnerabilities both before and after this update. No open Dependabot alerts could be retrieved (token lacks security_events scope for this repo), and no HIGH/CRITICAL CVEs were found via npm audit.
Verification
Notes
- No
--build-local/Docker verification performed (not required for a devDependency-only lockfile update).
- Larger available upgrades (e.g.,
chalk 4→6, commander 12→15, execa 5→10, typescript 5→7, @babel/core 7→8) are major version bumps with likely breaking changes and were intentionally not applied in this conservative pass.
Generated by Dependency Security Monitor Workflow
To route changes like this to a review issue instead of blocking, configure protected-files: fallback-to-issue in your workflow configuration.
Generated by Dependency Security Monitor · copilot · auto · 30 AIC · ⊞ 13.2K · ◷
Automated Safe Dependency Updates
This PR contains safe patch-level dependency updates verified to pass the full test suite with no new failures introduced.
Updated Dependencies
All updates fall within the existing
^semver ranges already declared inpackage.json, so onlypackage-lock.jsonchanged.Security Fixes Included
None —
npm auditreported 0 vulnerabilities both before and after this update. No open Dependabot alerts could be retrieved (token lackssecurity_eventsscope for this repo), and no HIGH/CRITICAL CVEs were found vianpm audit.Verification
npm audit— 0 vulnerabilities before and afternpm test— Test Suites: 325 passed / 4 failed, Tests: 5239 passed / 27 failedsrc/enclave/mount-policy.test.ts, a/var/tmppath issue) fail identically onmainHEAD (f3c7fd9) without this change — pre-existing, unrelated to this updatetsc) succeeds; lint runs with pre-existing warnings only (0 errors)Notes
--build-local/Docker verification performed (not required for a devDependency-only lockfile update).chalk4→6,commander12→15,execa5→10,typescript5→7,@babel/core7→8) are major version bumps with likely breaking changes and were intentionally not applied in this conservative pass.Generated by Dependency Security Monitor Workflow
Warning
Protected Files
This was originally intended as a pull request, but the patch modifies protected files. These files may affect project dependencies, CI/CD pipelines, or agent behaviour. Please review the changes carefully before creating the pull request.
Click here to create the pull request once you have reviewed the changes
Protected files
package-lock.jsonTo route changes like this to a review issue instead of blocking, configure
protected-files: fallback-to-issuein your workflow configuration.