Update dependencies#265
Conversation
Bumps [relative-ci/.github](https://github.com/relative-ci/.github) from 1.1.0 to 1.1.1. - [Commits](relative-ci/.github@v1.1.0...v1.1.1) --- updated-dependencies: - dependency-name: relative-ci/.github dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…date-dependencies/relative-ci/dot-github-1.1.1 build(deps): bump relative-ci/.github from 1.1.0 to 1.1.1
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.35.0 to 8.35.1. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.35.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-version: 8.35.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/typescript-eslint-8.35.1 build(deps-dev): bump typescript-eslint from 8.35.0 to 8.35.1
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.7 to 24.0.8. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.8 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.8 build(deps-dev): bump @types/node from 24.0.7 to 24.0.8
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.0.0 to 17.0.1. - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.0.0...v17.0.1) --- updated-dependencies: - dependency-name: dotenv dependency-version: 17.0.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/dotenv-17.0.1 build(deps-dev): bump dotenv from 17.0.0 to 17.0.1
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.30.0 to 9.30.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.30.1/packages/js) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.30.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/eslint/js-9.30.1 build(deps-dev): bump @eslint/js from 9.30.0 to 9.30.1
Bumps [eslint](https://github.com/eslint/eslint) from 9.30.0 to 9.30.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v9.30.0...v9.30.1) --- updated-dependencies: - dependency-name: eslint dependency-version: 9.30.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/eslint-9.30.1 build(deps-dev): bump eslint from 9.30.0 to 9.30.1
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.8 to 24.0.10. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.10 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.10 build(deps-dev): bump @types/node from 24.0.8 to 24.0.10
Bumps [rollup](https://github.com/rollup/rollup) from 4.44.1 to 4.44.2. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.44.1...v4.44.2) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.44.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/rollup-4.44.2 build(deps-dev): bump rollup from 4.44.1 to 4.44.2
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.10 to 24.0.12. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.12 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.12 build(deps-dev): bump @types/node from 24.0.10 to 24.0.12
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.12 to 24.0.13. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.13 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.13 build(deps-dev): bump @types/node from 24.0.12 to 24.0.13
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.30.1 to 9.31.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.31.0/packages/js) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.31.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.13 to 24.0.14. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.14 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.14 build(deps-dev): bump @types/node from 24.0.13 to 24.0.14
Bumps [globals](https://github.com/sindresorhus/globals) from 16.2.0 to 16.3.0. - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.2.0...v16.3.0) --- updated-dependencies: - dependency-name: globals dependency-version: 16.3.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [release-it](https://github.com/release-it/release-it) from 19.0.3 to 19.0.4. - [Release notes](https://github.com/release-it/release-it/releases) - [Changelog](https://github.com/release-it/release-it/blob/main/CHANGELOG.md) - [Commits](release-it/release-it@19.0.3...19.0.4) --- updated-dependencies: - dependency-name: release-it dependency-version: 19.0.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/release-it-19.0.4 build(deps-dev): bump release-it from 19.0.3 to 19.0.4
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.0.1 to 17.2.0. - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.0.1...v17.2.0) --- updated-dependencies: - dependency-name: dotenv dependency-version: 17.2.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [rollup](https://github.com/rollup/rollup) from 4.44.2 to 4.45.1. - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.44.2...v4.45.1) --- updated-dependencies: - dependency-name: rollup dependency-version: 4.45.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.35.1 to 8.37.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.37.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-version: 8.37.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/globals-16.3.0 build(deps-dev): bump globals from 16.2.0 to 16.3.0
…te-dependencies/dotenv-17.2.0 build(deps-dev): bump dotenv from 17.0.1 to 17.2.0
…te-dependencies/eslint/js-9.31.0 build(deps-dev): bump @eslint/js from 9.30.1 to 9.31.0
…te-dependencies/typescript-eslint-8.37.0 build(deps-dev): bump typescript-eslint from 8.35.1 to 8.37.0
…te-dependencies/rollup-4.45.1 build(deps-dev): bump rollup from 4.44.2 to 4.45.1
WalkthroughThe changes update the GitHub Actions workflow to use version 1.1.1 of a custom setup action and increment several development dependency versions in Changes
Possibly related PRs
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✅ Files skipped from review due to trivial changes (1)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Bumps [eslint](https://github.com/eslint/eslint) from 9.30.1 to 9.31.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v9.30.1...v9.31.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 9.31.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
There was a problem hiding this comment.
Actionable comments posted: 0
🔭 Outside diff range comments (1)
.github/workflows/ci.yml (1)
18-18: Pin GitHub Action by commit SHA to mitigate supply-chain riskReferencing
relative-ci/.github/actions/[email protected]by tag allows the author to retag the release. GitHub’s security guidance recommends pinning to the full commit SHA after the first successful run:uses: relative-ci/.github/actions/setup-node-npm@9c1e4e0c3b4d6e1c0c9d2f7f5e8a1b23c4d5e6f7Repeat for every step above to lock the exact code you audited.
[security]
Also applies to: 30-30, 45-45, 83-83, 127-127, 177-177, 225-225
🧹 Nitpick comments (1)
package.json (1)
64-81: Minor: Pinning dev-tooling versions to tags may cause maintenance churnAll devDependencies are pinned to exact patch versions (e.g.,
"eslint": "9.30.1"). While this guarantees reproducibility, it also forces a PR for every patch bump. Consider using caret (^) or tilde (~) ranges for low-risk tooling if you want Dependabot to auto-merge patch updates.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (2)
.github/workflows/ci.yml(1 hunks)package.json(1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)
- GitHub Check: vite v6 / node 18 / ubuntu-latest
🔇 Additional comments (1)
package.json (1)
64-81: Double-check TypeScript/ESLint plugin compatibility
typescriptis now5.8.3, whiletypescript-eslintremains on8.37.0(released before TS 5.8). This combo can surface “Unsupported TypeScript version” warnings and missing rule coverage.
Upgrade to a ≥8.49.xrelease (or the current latest) to stay inside the officially-supported matrix and avoid noisy CI failures.- "typescript-eslint": "8.37.0", + "typescript-eslint": "8.49.0",Run
npm ls @typescript-eslint/parserin CI to confirm the resolved version matches TypeScript 5.8.
…te-dependencies/eslint-9.31.0 build(deps-dev): bump eslint from 9.30.1 to 9.31.0
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.0.14 to 24.0.15. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.0.15 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
…te-dependencies/types/node-24.0.15 build(deps-dev): bump @types/node from 24.0.14 to 24.0.15
Summary by CodeRabbit