Repository navigation
deps: bump the linting group across 1 directory with 4 updates - #882
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
the
dependencies
Iris gate — 1 of 2 tripped
|
| Trace | Verdict | Basis | Rules, classes or missing inputs | Evidence |
|---|---|---|---|---|
e4c39647a6b276c59e0194c21864e34d |
failed | detector_veto + risk_over_loss |
no_pii, pii_leak, credential_leak | no_pii: AWS Access Key (output 45–65) |
| Verdict basis | Traces |
|---|---|
detector_veto |
2 |
clean |
1 |
Unjudged questions: task_completed (3), tool_use_correct (3) — a trace that did not carry what a rule needs.
tests/fixtures/ci-gate/traces.ndjson · 3 evaluated · dataset release-gate: 2 in the gate · exit 1 · what the bases mean
Iris gate — 1 stored, nothing tripped
|
| Verdict basis | Traces |
|---|---|
clean |
1 |
Unjudged questions: task_completed (1), tool_use_correct (1) — a trace that did not carry what a rule needs.
tests/fixtures/ci-gate/clean.ndjson · 1 evaluated · exit 0 · what the bases mean
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/linting-f12051f6ec
branch
3 times, most recently
from
October 22, 2026 17:58
3e7591b to
ae94489
Compare
Bumps the linting group with 4 updates in the / directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [eslint](https://github.com/eslint/eslint) and [prettier](https://github.com/prettier/prettier). Updates `@typescript-eslint/eslint-plugin` from 8.71.0 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.71.0 to 8.72.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/parser) Updates `eslint` from 10.11.0 to 10.13.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.13.0) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: linting - dependency-name: "@typescript-eslint/parser" dependency-version: 8.71.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: linting - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: linting - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: linting ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/linting-f12051f6ec
branch
from
October 25, 2026 20:27
ae94489 to
3d9be4a
Compare
irparent
added a commit
that referenced
this pull request
Oct 25, 2026
Lockfile-only updates within the existing package.json ranges. vitest and @vitest/coverage-v8 move together (they pin each other exactly), as do the typescript-eslint parser and plugin. Each package is at the newest patch on the line its PR proposed that is at least five days old (the repo's Dependabot cooldown); @modelcontextprotocol/sdk 1.32.2 (published 2026-10-23) is left for the next run. vite stays 8.3.5: #880's own lockfile had written it back to 8.3.4. - @eslint-community/eslint-utils 4.9.1 -> 4.10.1 - @modelcontextprotocol/sdk 1.32.0 -> 1.32.1 - @playwright/test 1.63.0 -> 1.64.1 - @types/node 26.6.3 -> 26.6.5 - @typescript-eslint/eslint-plugin 8.71.0 -> 8.71.2 - @typescript-eslint/parser 8.71.0 -> 8.71.2 - @typescript-eslint/project-service 8.71.0 -> 8.71.2 - @typescript-eslint/scope-manager 8.71.0 -> 8.71.2 - @typescript-eslint/tsconfig-utils 8.71.0 -> 8.71.2 - @typescript-eslint/type-utils 8.71.0 -> 8.71.2 - @typescript-eslint/types 8.71.0 -> 8.71.2 - @typescript-eslint/typescript-estree 8.71.0 -> 8.71.2 - @typescript-eslint/utils 8.71.0 -> 8.71.2 - @typescript-eslint/visitor-keys 8.71.0 -> 8.71.2 - @vitest/coverage-v8 5.0.3 -> 5.0.5 - @vitest/istanbul-lib-coverage 1.0.1 -> 1.0.2 - @vitest/istanbul-lib-report 1.0.1 -> 1.0.2 - @vitest/mocker 5.0.3 -> 5.0.5 - @vitest/spy 5.0.3 -> 5.0.5 - acorn 8.16.0 -> 8.19.0 - ast-v8-to-istanbul 1.0.6 -> 1.0.7 - content-disposition 1.0.1 -> 2.0.1 - eslint 10.11.0 -> 10.13.0 - eslint > ajv 6.14.0 -> 6.15.0 - express 5.2.1 -> 5.3.0 - express-rate-limit 8.7.0 -> 8.7.1 - express > content-type 2.1.0 (new nested copy) - magic-string 1.4.2 -> 1.4.3 - minimatch 10.2.5 -> 10.2.6 - nanoid 3.3.19 -> 3.3.20 - obug 2.2.1 -> 3.0.0 - pino 10.3.1 -> 10.4.0 - pino > real-require 1.0.0 (new nested copy) - playwright 1.63.0 -> 1.64.1 - playwright-core 1.63.0 -> 1.64.1 - postcss 8.5.28 -> 8.5.31 - prettier 3.9.9 -> 3.9.10 - safe-regex2 5.1.1 -> 5.1.2 - tinybench 6.2.0 -> 6.2.2 - tinyrainbow 3.1.1 -> 3.2.0 - vitest 5.0.3 -> 5.0.5 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
irparent
added a commit
that referenced
this pull request
Oct 25, 2026
… updates (#901) * build: pnpm 11 and later build Iris from a clone again; two dependency updates unblocked - pnpm 11 stopped reading settings from package.json, so `pnpm install` refused the install scripts of better-sqlite3 and esbuild (ERR_PNPM_IGNORED_BUILDS) and exited 1 on pnpm 11 and 12, and `pnpm install && pnpm run build`, the command Glama runs, never built. The allow-list moves back to pnpm-workspace.yaml, as `allowBuilds` (pnpm 11 and later) and `onlyBuiltDependencies` (pnpm 10). Checked in node:22 from a clean tree on pnpm 10.34.9, 11.28.8 and 12.15.0: install and build exit 0, better-sqlite3 loads, and check-tools-listed lists all 12 tools. The fresh-clone-build job now runs on pnpm 10 and on the newest pnpm, and requires the native module to have been built. - jsdom 30.1.3 reports the computed `background` shorthand in full, so two dashboard badge tests compare `backgroundColor` instead (unblocks #893). - openai 3 is ignored in examples/otel-recipes: llama-index-llms-openai 0.8.2 and 0.8.3 both declare openai<3 (#851). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps: the root lockfile, Dependabot #869 #880 #881 #882 in one Lockfile-only updates within the existing package.json ranges. vitest and @vitest/coverage-v8 move together (they pin each other exactly), as do the typescript-eslint parser and plugin. Each package is at the newest patch on the line its PR proposed that is at least five days old (the repo's Dependabot cooldown); @modelcontextprotocol/sdk 1.32.2 (published 2026-10-23) is left for the next run. vite stays 8.3.5: #880's own lockfile had written it back to 8.3.4. - @eslint-community/eslint-utils 4.9.1 -> 4.10.1 - @modelcontextprotocol/sdk 1.32.0 -> 1.32.1 - @playwright/test 1.63.0 -> 1.64.1 - @types/node 26.6.3 -> 26.6.5 - @typescript-eslint/eslint-plugin 8.71.0 -> 8.71.2 - @typescript-eslint/parser 8.71.0 -> 8.71.2 - @typescript-eslint/project-service 8.71.0 -> 8.71.2 - @typescript-eslint/scope-manager 8.71.0 -> 8.71.2 - @typescript-eslint/tsconfig-utils 8.71.0 -> 8.71.2 - @typescript-eslint/type-utils 8.71.0 -> 8.71.2 - @typescript-eslint/types 8.71.0 -> 8.71.2 - @typescript-eslint/typescript-estree 8.71.0 -> 8.71.2 - @typescript-eslint/utils 8.71.0 -> 8.71.2 - @typescript-eslint/visitor-keys 8.71.0 -> 8.71.2 - @vitest/coverage-v8 5.0.3 -> 5.0.5 - @vitest/istanbul-lib-coverage 1.0.1 -> 1.0.2 - @vitest/istanbul-lib-report 1.0.1 -> 1.0.2 - @vitest/mocker 5.0.3 -> 5.0.5 - @vitest/spy 5.0.3 -> 5.0.5 - acorn 8.16.0 -> 8.19.0 - ast-v8-to-istanbul 1.0.6 -> 1.0.7 - content-disposition 1.0.1 -> 2.0.1 - eslint 10.11.0 -> 10.13.0 - eslint > ajv 6.14.0 -> 6.15.0 - express 5.2.1 -> 5.3.0 - express-rate-limit 8.7.0 -> 8.7.1 - express > content-type 2.1.0 (new nested copy) - magic-string 1.4.2 -> 1.4.3 - minimatch 10.2.5 -> 10.2.6 - nanoid 3.3.19 -> 3.3.20 - obug 2.2.1 -> 3.0.0 - pino 10.3.1 -> 10.4.0 - pino > real-require 1.0.0 (new nested copy) - playwright 1.63.0 -> 1.64.1 - playwright-core 1.63.0 -> 1.64.1 - postcss 8.5.28 -> 8.5.31 - prettier 3.9.9 -> 3.9.10 - safe-regex2 5.1.1 -> 5.1.2 - tinybench 6.2.0 -> 6.2.2 - tinyrainbow 3.1.1 -> 3.2.0 - vitest 5.0.3 -> 5.0.5 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps(dashboard): Dependabot #891 #893 in one package.json takes the ranges #891 and #893 set, plus @typescript-eslint/parser ^8.71.2 to match the plugin it pairs with. The storybook addons lock at 10.6.3, the version storybook itself is already on. - @asamuzakjp/css-color 7.1.2 -> 7.1.7 - @asamuzakjp/dom-selector 9.2.2 -> 10.0.4 - @csstools/css-calc 3.4.1 -> 3.4.3 - @csstools/css-color-parser 4.2.4 -> 4.2.6 - @csstools/css-parser-algorithms 4.0.1 -> 4.0.2 - @csstools/css-syntax-patches-for-csstree 1.1.14 -> 1.1.15 - @storybook/addon-docs 10.6.1 -> 10.6.3 - @storybook/builder-vite 10.6.1 -> 10.6.3 - @storybook/react 10.6.1 -> 10.6.3 - @storybook/react-dom-shim 10.6.1 -> 10.6.3 - @storybook/react-vite 10.6.1 -> 10.6.3 - @testing-library/user-event 14.6.7 -> 14.6.8 - @typescript-eslint/eslint-plugin 8.71.0 -> 8.71.2 - @typescript-eslint/parser 8.71.0 -> 8.71.2 - @typescript-eslint/project-service 8.71.0 -> 8.71.2 - @typescript-eslint/scope-manager 8.71.0 -> 8.71.2 - @typescript-eslint/tsconfig-utils 8.71.0 -> 8.71.2 - @typescript-eslint/type-utils 8.71.0 -> 8.71.2 - @typescript-eslint/types 8.71.0 -> 8.71.2 - @typescript-eslint/typescript-estree 8.71.0 -> 8.71.2 - @typescript-eslint/utils 8.71.0 -> 8.71.2 - @typescript-eslint/visitor-keys 8.71.0 -> 8.71.2 - @vitejs/plugin-react 6.1.1 -> 6.1.2 - @vitest/mocker 5.0.3 -> 5.0.5 - @vitest/spy 5.0.3 -> 5.0.5 - data-urls 7.0.0 -> 8.0.0 - eslint 10.11.0 -> 10.13.0 - jsdom 30.1.1 -> 30.1.3 - jsdom > whatwg-url 17.1.2 (nested copy removed; the hoisted copy now satisfies it) - lucide-react 1.52.0 -> 1.58.0 - magic-string 1.4.2 -> 1.4.3 - obug 2.2.1 -> 3.0.0 - react 19.3.0 -> 19.3.1 - react-dom 19.3.0 -> 19.3.1 - resolve 1.22.12 -> 1.22.13 - tinybench 6.2.0 -> 6.2.2 - tr46 6.0.0 -> 7.0.0 - vitest 5.0.3 -> 5.0.5 - whatwg-url 16.0.1 -> 17.3.0 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps(website): Dependabot #872 #874 #895 in one package.json takes the ranges #874 and #895 set; eslint-config-next stays an exact 16.4.2, the version next is on. - @babel/generator 7.29.7 -> 7.29.8 - @babel/helpers 7.29.7 -> 7.29.10 - @babel/parser 7.29.7 -> 7.29.9 - @babel/traverse 7.29.7 -> 7.29.10 - @babel/types 7.29.7 -> 7.29.8 - @next/eslint-plugin-next 16.3.8 -> 16.4.2 - @radix-ui/primitive 1.1.7 -> 1.2.0 - @radix-ui/react-collection 1.1.15 -> 1.2.0 - @radix-ui/react-collection > @radix-ui/react-compose-refs 1.1.5 (nested copy removed; the hoisted copy now satisfies it) - @radix-ui/react-compose-refs 1.1.5 (new nested copy) - @radix-ui/react-context 1.2.2 -> 1.3.0 - @radix-ui/react-direction 1.1.4 -> 1.2.0 - @radix-ui/react-presence 1.1.10 -> 1.1.11 - @radix-ui/react-primitive 2.1.10 -> 2.2.0 - @radix-ui/react-roving-focus 1.1.19 -> 1.2.1 - @radix-ui/react-roving-focus > @radix-ui/react-compose-refs 1.1.5 (nested copy removed; the hoisted copy now satisfies it) - @radix-ui/react-slot 1.3.3 -> 1.5.0 - @radix-ui/react-slot > @radix-ui/react-compose-refs 1.1.5 (nested copy removed; the hoisted copy now satisfies it) - @radix-ui/react-tabs 1.1.21 -> 1.2.1 - @radix-ui/react-toggle 1.1.18 -> 1.2.1 - @radix-ui/react-use-callback-ref 1.1.4 -> 1.1.5 - @radix-ui/react-use-controllable-state 1.2.6 -> 1.3.0 - @radix-ui/react-visually-hidden 1.2.11 -> 1.2.13 - @types/node 26.6.3 -> 26.6.5 - baseline-browser-mapping 2.11.20 -> 2.11.30 - browserslist 4.28.8 -> 4.29.4 - caniuse-lite 1.0.30001810 -> 1.0.30001817 - electron-to-chromium 1.5.420 -> 1.5.462 - eslint-config-next 16.3.8 -> 16.4.2 - eslint-plugin-react-hooks 7.0.1 -> 7.1.1 - node-releases 2.0.54 -> 2.0.59 - update-browserslist-db 1.3.2 -> 1.3.4 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps(sdk): Dependabot #878 devDependencies take the ranges #878 set; the open peer ranges are unchanged. ai locks at 7.0.147, the newest patch at least five days old (7.0.148 to 7.0.153 are newer). - @ai-sdk/gateway 4.0.103 -> 4.0.120 - @ai-sdk/provider 4.0.21 -> 4.0.31 - @ai-sdk/provider-utils 5.0.53 -> 5.0.64 - @anthropic-ai/sdk 0.131.0 -> 0.132.1 - ai 7.0.127 -> 7.0.147 - openai 7.27.0 -> 7.30.1 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps(langchain): Dependabot #879 devDependencies take the ranges #879 set; the peer range is unchanged. @langchain/core locks at 1.2.19, the newest patch at least five days old (1.2.20 is newer); langsmith 0.11 is what core 1.2.19 requires. - @langchain/core 1.2.14 -> 1.2.19 - @langchain/langgraph 1.4.18 -> 1.4.21 - @langchain/langgraph-checkpoint 1.1.5 -> 1.2.0 - @langchain/langgraph-sdk 1.12.0 -> 1.12.5 - @langchain/langgraph-sdk > p-queue 9.3.3 -> 9.3.5 - langsmith 0.10.5 -> 0.11.0 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * ci: Dependabot #873 #877 #883 in one The same pins those PRs proposed (commit sha and version comment), applied to every workflow as it is now, ci.yml included after #899. The four codeql-action steps in codeql.yml and scorecard.yml move together, as CodeQL requires. 73 lines in 12 workflows; no old pin is left. - actions/setup-node v7.0.0 (8207627) -> v7.1.0 (949feb2), 43 lines - actions/upload-artifact v7.0.1 (043fb46) -> v7.0.2 (cf430e0), 13 lines - actions/download-artifact v8.0.1 (3e5f45b) -> v8.0.2 (9000827), 12 lines - github/codeql-action init, autobuild, analyze, upload-sarif v4.38.2 (2892aa5) -> v4.39.0 (6f2ac81), 4 lines - ossf/scorecard-action v2.4.4 (2d11466) -> v2.5.0 (fa7117d), 1 line Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * deps(examples): Dependabot #902, zod 4.6.5 -> 4.6.7 in the OpenTelemetry JS recipe (GHSA-mrhx-c7xc-m3w5) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the linting group with 4 updates in the / directory: @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint and prettier.
Updates
@typescript-eslint/eslint-pluginfrom 8.71.0 to 8.72.0Release notes
Sourced from @typescript-eslint/eslint-plugin's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/eslint-plugin's changelog.
... (truncated)
Commits
a4c2603chore(release): publish 8.72.0c6eb98cfeat(eslint-plugin): [await-thenable] addallowMixedPromiseArraysoption (#...b382b74fix(type-utils): discriminateAnyType crashes when calling getAwaitedType on a...79edd89fix(eslint-plugin): [require-array-sort-compare] ignore extra this type argum...e7d57ddfix(eslint-plugin): [require-array-sort-compare] check tuples (#13058)2d107aefix(eslint-plugin): use isTypeLiteralType instead of type.isLiteral() to incl...e4695b3feat(eslint-plugin): lazy load rules (#13010)a1a912bfix(eslint-plugin): [no-deprecated] report deprecated properties in object li...1edc975fix(eslint-plugin): [prefer-readonly-parameter-types] check where allowed typ...61cb700chore: fix alleslint-plugin-internal/no-multiple-lines-of-errors(#12893)Updates
@typescript-eslint/parserfrom 8.71.0 to 8.72.0Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
Commits
a4c2603chore(release): publish 8.72.07488d68chore(release): publish 8.71.2d57b8dachore(release): publish 8.71.1Updates
eslintfrom 10.11.0 to 10.13.0Release notes
Sourced from eslint's releases.
... (truncated)
Commits
4637f9810.13.096df05cBuild: changelog update for 10.13.04783a68docs: Update READMEb59d889chore: update github/codeql-action action to v4.38.3 (#21412)95e51a0ci: re-enable@typescript-eslint/typescript-eslintin ecosystem tests (#21410)317fcb3chore: update ecosystem plugins (#21409)48d5cc4feat: report references inside IIFEs inno-use-before-define(#21238)43f0ac9docs: clarify parameter description ingetText(#21287)a39d9fbfeat: addglobalThistono-obj-calls(#21382)b92decfperf: skip no-redeclare scan for single-declaration variables (#21365)Updates
prettierfrom 3.9.9 to 3.9.10Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
Commits
1172b82Release 3.9.10d014227Updatemicromark-extension-gfm-tableto fix the table parse issue on perfor...953b908Bump Prettier dependency to 3.9.9ad8a6bfClean changelog_unreleased