Skip to content

Update non-major dependencies#67

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/non-major-dependencies
Nov 1, 2025
Merged

Update non-major dependencies#67
renovate[bot] merged 1 commit intomainfrom
renovate/non-major-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 1, 2025

This PR contains the following updates:

Package Change Age Confidence
@eslint/js (source) 9.38.0 -> 9.39.0 age confidence
@types/node (source) 22.18.12 -> 22.18.13 age confidence
axios (source) 1.12.2 -> 1.13.1 age confidence
eslint (source) 9.38.0 -> 9.39.0 age confidence
minimatch 10.0.3 -> 10.1.1 age confidence
octokit 5.0.4 -> 5.0.5 age confidence

Release Notes

eslint/eslint (@​eslint/js)

v9.39.0

Compare Source

axios/axios (axios)

v1.13.1

Compare Source

Bug Fixes
  • http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#​7193) (bcd5581)
Contributors to this release

v1.13.0

Compare Source

Bug Fixes
Features
Contributors to this release

1.12.2 (2025-09-14)

Bug Fixes
  • fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)
Contributors to this release

1.12.1 (2025-09-12)

Bug Fixes
Contributors to this release
eslint/eslint (eslint)

v9.39.0

Compare Source

isaacs/minimatch (minimatch)

v10.1.1

Compare Source

v10.1.0

Compare Source

octokit/octokit.js (octokit)

v5.0.5

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the renovate label Nov 1, 2025
@renovate renovate bot enabled auto-merge (squash) November 1, 2025 03:09
@github-actions
Copy link

github-actions bot commented Nov 1, 2025

This update bumps several key dependencies and development tools across both pr-review and pr-summary packages to their latest minor versions, ensuring compatibility, security patches, and linting improvements.

Walkthrough

  • Chore: Upgraded runtime libraries (axios, minimatch, octokit) to incorporate the newest patches.
  • Chore: Bumped ESLint, @eslint/js, and related plugins for up-to-date code quality checks.
  • Chore: Updated TypeScript node definitions for improved development experience.

Model: o4-mini | Prompt Tokens: 826 | Completion Tokens: 511

Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for letting me review your code. With AI support I’ve provided suggestions and highlighted areas to explore, though these are ideas rather than certainties. Feel free to adapt whatever resonates with you. You know your project best, and your choices shape the outcome. AI is here to support, not dictate, so trust your instincts as you move forward.
Model: o4-mini | Prompt Tokens: 1396 | Completion Tokens: 1639

Comment on lines -25 to +26
"axios": "1.12.2",
"minimatch": "10.0.3",
"axios": "1.13.1",
"minimatch": "10.1.1",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider consolidating dependency version updates across your monorepo rather than bumping each package.json independently. You can leverage npm workspaces and a single root package.json to define shared dependency versions. This reduces drift and ensures consistency:

{
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "axios": "^1.13.1",
    "minimatch": "^10.1.1",
    "octokit": "^5.0.5"
  }
}

Comment on lines -25 to +26
"axios": "1.12.2",
"minimatch": "10.0.3",
"axios": "1.13.1",
"minimatch": "10.1.1",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You’re pinning exact versions without range specifiers. Using caret ranges (e.g., ^1.13.1) allows patch and minor updates automatically, improving security and reducing manual maintenance. For example:

"axios": "^1.13.1",
"minimatch": "^10.1.1",
"octokit": "^5.0.5"

Comment on lines -33 to +36
"@eslint/js": "9.38.0",
"@types/node": "22.18.12",
"@eslint/js": "9.39.0",
"@types/node": "22.18.13",
"@vercel/ncc": "0.38.4",
"eslint": "9.38.0",
"eslint": "9.39.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

DevDependencies for ESLint and Typescript types are updated; to streamline, consider grouping and aligning plugin versions as well. You could also factor out shared lint config in a @your-org/eslint-config package to avoid duplicating version bumps:

{
  "devDependencies": {
    "@eslint/js": "^9.39.0",
    "eslint": "^9.39.0",
    "@your-org/eslint-config": "^1.0.0"
  }
}

Comment on lines -24 to +25
"axios": "1.12.2",
"minimatch": "10.0.3",
"axios": "1.13.1",
"minimatch": "10.1.1",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same dependency bumps appear here. Consider centralizing shared dependencies via npm workspaces to keep versions in sync and simplify updates. Refer to the root package.json for a unified version matrix.

@renovate renovate bot merged commit 2c2f9c6 into main Nov 1, 2025
13 checks passed
@renovate renovate bot deleted the renovate/non-major-dependencies branch November 1, 2025 03:10
github-actions bot pushed a commit that referenced this pull request Nov 1, 2025
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

Comments