Comparing changes

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.31.3` -> `v3.31.4` | `v3.31.5` | --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.31.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.3...v3.31.4) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.4 - 18 Nov 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.4/CHANGELOG.md) for more information. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/textlint/textlint).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [rossjrw/pr-preview-action](https://redirect.github.com/rossjrw/pr-preview-action) | action | patch | `v1.6.2` -> `v1.6.3` | --- ### Release Notes <details> <summary>rossjrw/pr-preview-action (rossjrw/pr-preview-action)</summary> ### [`v1.6.3`](https://redirect.github.com/rossjrw/pr-preview-action/releases/tag/v1.6.3) [Compare Source](https://redirect.github.com/rossjrw/pr-preview-action/compare/v1.6.2...v1.6.3) #### Updates - Bump JamesIves/github-pages-deploy-action to v4.7.4 by [@katexochen](https://redirect.github.com/katexochen) in [#119](https://redirect.github.com/rossjrw/pr-preview-action/issues/119) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/textlint/textlint).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.31.4` -> `v3.31.5` | `v3.31.6` | --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.31.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.4...v3.31.5) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.5 - 24 Nov 2025 - Update default CodeQL bundle version to 2.23.6. [#3321](https://redirect.github.com/github/codeql-action/pull/3321) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.5/CHANGELOG.md) for more information. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/textlint/textlint).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Dependabot cannot resolve js-yaml security updates due to conflicting version constraints: `@textlint/linter-formatter` requires `^3.14.2` while `rc-config-loader` (transitive dependency) requires `^4.1.0`. ## Changes - **Dependency update**: Bumped `js-yaml` from `^3.14.2` to `^4.1.0` in `@textlint/linter-formatter` - **Type definitions**: Updated `@types/js-yaml` from `^3.12.10` to `^4.0.0` - **API migration**: Changed `yaml.safeDump()` to `yaml.dump()` in tap formatter (v4 API) ```diff - output += prefix + yaml.safeDump(diagnostic).split("\n").join(`\n${prefix}`); + output += prefix + yaml.dump(diagnostic).split("\n").join(`\n${prefix}`); ``` Both packages now use `[email protected]`, unblocking dependabot's ability to apply security patches. > [!WARNING] > > <details> > <summary>Firewall rules blocked me from connecting to one or more addresses (expand for details)</summary> > > #### I tried to connect to the following addresses, but was blocked by firewall rules: > > - `https://api.github.com//advisories` > - Triggering command: `/home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js` (http block) > > If you need me to access, download, or install something from one of these locations, you can either: > > - Configure [Actions setup steps](https://gh.io/copilot/actions-setup-steps) to set up my environment, which run before the firewall is enabled > - Add the appropriate URLs or hosts to the custom allowlist in this repository's [Copilot coding agent settings](https://github.com/textlint/textlint/settings/copilot/coding_agent) (admins only) > > </details>  <details> <summary>Original prompt</summary> > > ---- > > *This section details on the original issue you should resolve* > > <issue_title>Inconsistent js-yaml dependency, not resolvable by dependabot</issue_title> > <issue_description>textlint appears to have two different, inconsistent dependencies on `js-yaml`, which is causing dependabot to raise a security alert in my repo, but then be unable to resolve it. Screenshot: > <img width="727" height="207" alt="Image" src="https://github.com/user-attachments/assets/9cd9a743-4295-4b70-b1f5-9762aea32094" /> > > The inconsistency comes from these two places in textlint code: > > 1. Direct dependency on "^3.14.2" here: https://github.com/textlint/textlint/blob/master/packages/%40textlint/linter-formatter/package.json#L43 > 2. Transitive dependency on `[email protected]` here: https://github.com/textlint/textlint/blob/master/packages/textlint/package.json#L71... which is in turn is dependent on `js-yaml` "^4.1.0" here: https://github.com/azu/rc-config-loader/blob/master/package.json#L61 > > The syntax "^3.14.2" means it can use any version of js-yaml >= 3.14.2, but less than v4.x.x... which is inconptable with the `[email protected]` requirement that `js-yaml` be version 4.1.0 or higher.</issue_description> > > <agent_instructions>update js-yaml in linter-formatter</agent_instructions> > > ## Comments on the Issue (you are @copilot in this section) > > <comments> > </comments> > </details> - Fixes #1844  --- ✨ Let Copilot coding agent [set things up for you](https://github.com/textlint/textlint/issues/new?title=✨+Set+up+Copilot+instructions&body=Configure%20instructions%20for%20this%20repository%20as%20documented%20in%20%5BBest%20practices%20for%20Copilot%20coding%20agent%20in%20your%20repository%5D%28https://gh.io/copilot-coding-agent-tips%29%2E%0A%0A%3COnboard%20this%20repo%3E&assignees=copilot) — coding agent works faster and does higher quality work when set up for your repo. --------- Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: azu <[email protected]>

@renovate

## What's Changed ### CI * chore(deps): update patch updates by @renovate[bot] in #1830 * chore(deps): update github/codeql-action action to v3.31.4 by @renovate[bot] in #1834 * chore(deps): update rossjrw/pr-preview-action action to v1.6.3 by @renovate[bot] in #1838 * chore(deps): update peter-evans/create-pull-request action to v7.0.9 by @renovate[bot] in #1840 * chore(deps): update github/codeql-action action to v3.31.5 by @renovate[bot] in #1841 ### Dependency Updates * chore(deps): update pnpm to v10.21.0 by @renovate[bot] in #1826 * chore(deps): update eslint to ^8.46.4 (patch) by @renovate[bot] in #1827 * chore(deps): update dependency @types/node to ^24.10.1 by @renovate[bot] in #1828 * chore(deps): update pnpm to v10.22.0 by @renovate[bot] in #1829 * chore(deps): update dependency lerna to ^9.0.1 by @renovate[bot] in #1831 * chore(deps): update eslint to ^8.47.0 (minor) by @renovate[bot] in #1832 * chore(deps): update dependency @types/react to ^18.3.27 by @renovate[bot] in #1833 * fix(deps): update minor updates (minor) by @renovate[bot] in #1836 * fix(deps): update patch updates (patch) by @renovate[bot] in #1835 * chore(deps): update pnpm to v10.23.0 by @renovate[bot] in #1837 * chore(deps): update dependency @types/lodash to ^4.17.21 by @renovate[bot] in #1839 * chore(deps): update eslint to ^8.48.0 (patch) by @renovate[bot] in #1842 * Fix js-yaml version conflict preventing dependabot updates by @Copilot in #1845 ### Other Changes * chore(deps): update node.js to v22.21.1 by @renovate[bot] in #1802 ## New Contributors * @Copilot made their first contribution in #1845 **Full Changelog**: v15.4.0...v15.4.1 Co-authored-by: azu <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Comparing changes

Open a pull request

Commits on Nov 17, 2025

Commits on Nov 18, 2025

Commits on Nov 19, 2025

Commits on Nov 21, 2025

Commits on Nov 24, 2025

Commits on Nov 25, 2025

Commits on Nov 26, 2025

Commits on Nov 27, 2025

Commits on Nov 28, 2025

Commits on Nov 29, 2025

Commits on Dec 1, 2025

Commits on Dec 3, 2025

This comparison is taking too long to generate.

Uh oh!