Skip to content

⬆️ Update dependency tmp@<0.2.4 to ~0.2.5 - autoclosed#6884

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tmp-0.2.4-0.x
Closed

⬆️ Update dependency tmp@<0.2.4 to ~0.2.5 - autoclosed#6884
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tmp-0.2.4-0.x

Conversation

@renovate

@renovate renovate Bot commented Apr 18, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
tmp@<0.2.4 ~0.2.4~0.2.5 age confidence

Release Notes

raszi/node-tmp (tmp@<0.2.4)

v0.2.5

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 18, 2026
@renovate
renovate Bot requested a review from dubzzz as a code owner April 18, 2026 08:28
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 18, 2026
@changeset-bot

changeset-bot Bot commented Apr 18, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: d3072db

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate renovate Bot changed the title ⬆️ Update dependency tmp@<0.2.4 to v0.2.5 ⬆️ Update dependency tmp@<0.2.4 to ~0.2.5 Apr 18, 2026
@renovate
renovate Bot force-pushed the renovate/tmp-0.2.4-0.x branch from 914fa34 to d3072db Compare April 18, 2026 19:37
@pkg-pr-new

pkg-pr-new Bot commented Apr 18, 2026

Copy link
Copy Markdown
@fast-check/ava

npm i https://pkg.pr.new/@fast-check/ava@6884

fast-check

npm i https://pkg.pr.new/fast-check@6884

@fast-check/jest

npm i https://pkg.pr.new/@fast-check/jest@6884

@fast-check/packaged

npm i https://pkg.pr.new/@fast-check/packaged@6884

@fast-check/poisoning

npm i https://pkg.pr.new/@fast-check/poisoning@6884

@fast-check/vitest

npm i https://pkg.pr.new/@fast-check/vitest@6884

@fast-check/worker

npm i https://pkg.pr.new/@fast-check/worker@6884

commit: d3072db

@codecov

codecov Bot commented Apr 18, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.75%. Comparing base (67afc81) to head (d3072db).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #6884   +/-   ##
=======================================
  Coverage   94.75%   94.75%           
=======================================
  Files         211      211           
  Lines        5778     5778           
  Branches     1527     1528    +1     
=======================================
  Hits         5475     5475           
  Misses        295      295           
  Partials        8        8           
Flag Coverage Δ
tests 94.75% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dubzzz

dubzzz commented Apr 18, 2026

Copy link
Copy Markdown
Owner

@claude prepare a pr to configure renovate in a way that it would not open such prs. I don't want prs changing the overrides, they can be bump but the package.json should stay untouched

@claude

claude Bot commented Apr 18, 2026

Copy link
Copy Markdown
Contributor

Claude finished @dubzzz's task in 2m 31s —— View job


Task: Configure Renovate to skip overrides updates

  • Read current Renovate configuration (.github/renovate.json)
  • Inspect package.json pnpm.overrides section
  • Identify mechanism: add a packageRule matching matchDepTypes: ["pnpm.overrides"] with enabled: false
  • Implement the configuration change
  • Commit and push to a new branch
  • Open the PR

Result

Opened PR #6891🔧 Disable Renovate updates on pnpm overrides.

The new rule appended to .github/renovate.json:

{
  "matchFileNames": ["package.json"],
  "matchDepTypes": ["pnpm.overrides"],
  "enabled": false
}

This stops Renovate from opening PRs (like this one, #6884) that rewrite the override constraint strings in the root package.json. The pnpm.overrides entries already use tilde ranges (set up in #6888), so the resolved versions in pnpm-lock.yaml will continue to receive patch-level bumps via the existing lockFileMaintenance configuration — only the package.json file stays untouched.
· branch: claude/disable-renovate-pnpm-overrides

dubzzz added a commit that referenced this pull request Apr 18, 2026
## Description

Configure Renovate so it stops opening PRs that change the
`pnpm.overrides` entries in the root `package.json`.

These overrides are intentionally pinned via tilde ranges (see #6888) so
that patch-level updates flow naturally through `pnpm-lock.yaml`
(already covered by `lockFileMaintenance`), without rewriting the
constraint string in `package.json` on every patch release. Renovate
currently still opens PRs (e.g. #6884) to bump those override
constraints — this change disables that behavior.

The new `packageRule` matches the `pnpm.overrides` `depType` on the root
`package.json` and disables updates for it. Lockfile maintenance keeps
picking up resolvable patch versions automatically.

## Checklist

— _Don't delete this checklist and make sure you do the following before
opening the PR_

- [x] I have a full understanding of every line in this PR — whether the
code was hand-written, AI-generated, copied from external sources or
produced by any other tool
- [ ] I flagged the impact of my change (minor / patch / major) either
by running `pnpm run bump` or by following the instructions from the
changeset bot
- [x] I kept this PR focused on a single concern and did not bundle
unrelated changes
- [x] I followed the [gitmoji](https://gitmoji.dev/) specification for
the name of the PR, including the package scope (e.g. `🐛(vitest)
Something...`) when the change targets a package other than `fast-check`
- [ ] I added relevant tests and they would have failed without my PR
(when applicable)

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Nicolas DUBIEN <[email protected]>
@renovate renovate Bot changed the title ⬆️ Update dependency tmp@<0.2.4 to ~0.2.5 ⬆️ Update dependency tmp@<0.2.4 to ~0.2.5 - autoclosed Apr 18, 2026
@renovate renovate Bot closed this Apr 18, 2026
@renovate
renovate Bot deleted the renovate/tmp-0.2.4-0.x branch April 18, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant