Repository navigation
chore(deps-dev): bump the development-minor-patch group with 5 updates - #279
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the development-minor-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [dotenv](https://github.com/motdotla/dotenv) | `18.0.0` | `18.0.6` | | [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.12.0` | | [turbo](https://github.com/vercel/turborepo) | `2.11.6` | `2.11.7` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.71.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.28` | `8.5.29` | Updates `dotenv` from 18.0.0 to 18.0.6 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v18.0.0...v18.0.6) Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `turbo` from 2.11.6 to 2.11.7 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.11.6...v2.11.7) Updates `typescript-eslint` from 8.71.0 to 8.71.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint) Updates `postcss` from 8.5.28 to 8.5.29 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.28...8.5.29) --- updated-dependencies: - dependency-name: dotenv dependency-version: 18.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: turbo dependency-version: 2.11.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: typescript-eslint dependency-version: 8.71.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: postcss dependency-version: 8.5.29 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
This workspace has reached the limit of 50 included PR reviews during your trial. Upgrade to continue receiving PR security reviews. So far, Strix has reviewed 50 pull requests and surfaced 1 security issue across this workspace. |
![graphify-labs[bot]](https://avatars.githubusercontent.com/in/4356270?s=60&v=4){kind=small}
There was a problem hiding this comment.
Graphify reviewed this change.
No issues found by static checks — no coupling regressions or blocking issues in the code graph. That is not the same as safe to merge: see what was not checked.
Not checked: tests were not run; no formal proof of the changed code.
Graphify review — findings
Bumps patch and minor dev tooling across the monorepo: eslint to 10.12.0, typescript-eslint to 8.71.1, turbo to 2.11.7 and dotenv to 18.0.6 at the root, plus postcss to 8.5.29 in the web app. The lockfile picks up the matching transitive updates, including acorn and ignore.
No blocking issues surfaced.
Analysis details — impact, health, verification
Impact & health
Graphify review
Impact — 126 functions depend on the 126 functions this change touches.
Health — grade A; no new coupling hotspots.
Verification — 126 functions in the blast radius were not formally verified this run (proofs are advisory here).
Gate & verification
graphify gate
PASS — objectively clean (no health regressions, tests not run — proofs not run this pass (advisory)). Grounded, not self-assessed.
Advisory (not blocking):
- verification_scope: 126 function(s) in the blast radius were not formally verified this run
Bumps the development-minor-patch group with 5 updates:
18.0.018.0.610.11.010.12.02.11.62.11.78.71.08.71.18.5.288.5.29Updates
dotenvfrom 18.0.0 to 18.0.6Changelog
Sourced from dotenv's changelog.
Commits
5d7cc3918.0.6750ba03changelogcaa14f0Merge pull request #1069 from kevin9327/populate-parse-boolean-optionsa8b9720fix: parse debug and override in populate like config does05215e018.0.525bdd0achangelog2d640d2Merge pull request #1066 from AyanAta42/masterc84e2b4Merge pull request #1068 from matzehecht/fix-typescript570146aOptimize fast parser comment scanning4aa0665add typescript module declaration for dotenv/configUpdates
eslintfrom 10.11.0 to 10.12.0Release notes
Sourced from eslint's releases.
Commits
a438ec310.12.032a73f1Build: changelog update for 10.12.0bc51eeefix:prefer-arrow-callbackfalse positive in conditional test (#21373)bbff86cfix: skip lines with multiple comments inmax-lines-per-function(#21332)152067fchore: update ecosystem plugins (#21362)b56d58echore: update github/codeql-action action to v4.38.2 (#21376)67eb586docs: Update READMEbfaea12perf: cache normalized config globals per languageOptions (#21364)322209eci: avoid Nx cache in ecosystem tests and disable failing test (#21369)d166567chore: update dependency prettier to v3.9.9 (#21371)Updates
turbofrom 2.11.6 to 2.11.7Release notes
Sourced from turbo's releases.
Commits
547747fpublish 2.11.7 to registry3ce82f5fix: Ignore Vercel OIDC token rotation in .env.local cache inputs (#14356)8cc3ccechore: Update with-vite-module-federation example (#14349)41387defix: Pass SDKROOT through to repository tasks (#14353)3a2072cchore: Release Turborepo 2.11.6 (#14352)Updates
typescript-eslintfrom 8.71.0 to 8.71.1Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
d57b8dachore(release): publish 8.71.1Updates
postcssfrom 8.5.28 to 8.5.29Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
a7a1f34Release 8.5.29 versionb55a36dUpdate dependencies7647a81Escape </style> in output of non-Root nodes (#2163)7ac9026Do not split list.comma() and list.space() on separators inside comments (#2162)ebffa97Add postcss-smooth-corners plugin57d6401Speed up source map cleaning7e46a03Speed up parser7f5c417Improve </style> protection for the case when beffore nodes have different parts7ba9051Fix useless ESLint warning12b4161Update dependenciesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions