Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 20, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) 9.35.0 -> 9.36.0 age confidence
@types/node (source) 22.18.3 -> 22.18.6 age confidence
@vercel/ncc 0.38.3 -> 0.38.4 age confidence
axios (source) 1.12.0 -> 1.12.2 age confidence
eslint (source) 9.35.0 -> 9.36.0 age confidence
typescript-eslint (source) 8.43.0 -> 8.44.0 age confidence
zod (source) 4.1.8 -> 4.1.9 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.36.0

Compare Source

vercel/ncc (@​vercel/ncc)

v0.38.4

Compare Source

axios/axios (axios)

v1.12.2

Compare Source

Bug Fixes
  • fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)
Contributors to this release

v1.12.1

Compare Source

Bug Fixes
Contributors to this release
eslint/eslint (eslint)

v9.36.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.44.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

colinhacks/zod (zod)

v4.1.9

Compare Source


Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the renovate label Sep 20, 2025
@renovate renovate bot enabled auto-merge (squash) September 20, 2025 01:00
@github-actions
Copy link

Bumps a series of dependencies across both pr-review and pr-summary projects, including axios, zod, ESLint, TypeScript, and related tooling. These updates ensure the latest patch releases are used for improved stability, security, and development workflows.

Walkthrough

  • Chore: Updated axios (1.12.0 → 1.12.2) and zod (4.1.8 → 4.1.9) for bug fixes and performance tweaks.
  • Chore: Upgraded ESLint, @eslint/js, eslint-plugin-* packages, and TypeScript tooling (including @types/node and typescript-eslint) to their latest patch versions.
  • Chore: Bumped @vercel/ncc (0.38.3 → 0.38.4) to align build pipeline with current dependencies.

Model: o4-mini | Prompt Tokens: 978 | Completion Tokens: 711

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here’s a friendly code review with AI-powered guidance. Some observations are educated guesses rather than certainties. Please take what feels helpful and adapt it to your needs. You’re in charge of choosing what works best; AI is here only to help you shine.
Model: o4-mini | Prompt Tokens: 1614 | Completion Tokens: 2851

Comment on lines -25 to +30
"axios": "1.12.0",
"axios": "1.12.2",
"minimatch": "10.0.3",
"mollitia": "0.2.0",
"octokit": "5.0.3",
"parse-diff": "0.11.1",
"zod": "4.1.8"
"zod": "4.1.9"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see that you’ve bumped the exact patch versions for both axios and zod. Pinning to an exact version requires you to manually update every time a patch is released. To reduce maintenance and automatically pick up non-breaking patch releases, consider using a caret (^) range. For example:

"axios": "^1.12.2",
"zod":   "^4.1.9"

Comment on lines -33 to +36
"@eslint/js": "9.35.0",
"@types/node": "22.18.3",
"@vercel/ncc": "0.38.3",
"eslint": "9.35.0",
"@eslint/js": "9.36.0",
"@types/node": "22.18.6",
"@vercel/ncc": "0.38.4",
"eslint": "9.36.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These devDependencies are updated identically across multiple packages. If you’re managing a monorepo or have shared toolchains, you can hoist common devDependencies into a root-level package.json to avoid duplication and ensure consistency:

// root package.json
{
  "workspaces": ["pr-review", "pr-summary"],
  "devDependencies": {
    "@eslint/js":   "^9.36.0",
    "@types/node":  "^22.18.6",
    "@vercel/ncc":  "^0.38.4",
    "eslint":       "^9.36.0",
    // ...other shared plugins
  }
}

Comment on lines -24 to +29
"axios": "1.12.0",
"axios": "1.12.2",
"minimatch": "10.0.3",
"mollitia": "0.2.0",
"octokit": "5.0.3",
"parse-diff": "0.11.1",
"zod": "4.1.8"
"zod": "4.1.9"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see that you’ve bumped the exact patch versions for both axios and zod. Pinning to an exact version requires you to manually update every time a patch is released. To reduce maintenance and automatically pick up non-breaking patch releases, consider using a caret (^) range. For example:

"axios": "^1.12.2",
"zod":   "^4.1.9"

Comment on lines -32 to +35
"@eslint/js": "9.35.0",
"@types/node": "22.18.3",
"@vercel/ncc": "0.38.3",
"eslint": "9.35.0",
"@eslint/js": "9.36.0",
"@types/node": "22.18.6",
"@vercel/ncc": "0.38.4",
"eslint": "9.36.0",

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These devDependencies are updated identically across multiple packages. If you’re managing a monorepo or have shared toolchains, you can hoist common devDependencies into a root-level package.json to avoid duplication and ensure consistency:

// root package.json
{
  "workspaces": ["pr-review", "pr-summary"],
  "devDependencies": {
    "@eslint/js":   "^9.36.0",
    "@types/node":  "^22.18.6",
    "@vercel/ncc":  "^0.38.4",
    "eslint":       "^9.36.0",
    // ...other shared plugins
  }
}

@renovate renovate bot merged commit 440c6d3 into main Sep 20, 2025
13 checks passed
@renovate renovate bot deleted the renovate/non-major-dependencies branch September 20, 2025 01:03
github-actions bot pushed a commit that referenced this pull request Sep 20, 2025
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant