Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 29, 2025

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: Branch creation - "before 5am on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Dec 29, 2025
@renovate renovate bot requested a review from prisis as a code owner December 29, 2025 01:46
@renovate renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Dec 29, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Dec 29, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Scope: all 8 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 32, reused 0, downloaded 0, added 0
Progress: resolved 62, reused 0, downloaded 0, added 0
Progress: resolved 108, reused 0, downloaded 0, added 0
Progress: resolved 126, reused 0, downloaded 0, added 0
Progress: resolved 147, reused 0, downloaded 0, added 0
Progress: resolved 163, reused 0, downloaded 0, added 0
 WARN  Request took 12012ms: https://registry.npmjs.org/typescript
Progress: resolved 164, reused 0, downloaded 0, added 0
Progress: resolved 178, reused 0, downloaded 0, added 0
Progress: resolved 273, reused 0, downloaded 0, added 0
Progress: resolved 311, reused 0, downloaded 0, added 0
Progress: resolved 379, reused 0, downloaded 0, added 0
Progress: resolved 474, reused 0, downloaded 0, added 0
Progress: resolved 493, reused 0, downloaded 0, added 0
Progress: resolved 499, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/anolilab/javascript-style-guide/packages/eslint-config:
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "[email protected]" (possible package takeover)

This error happened while installing the dependencies of [email protected]

Trust checks are based solely on publish date, not semver. A package cannot be installed if any earlier-published version had stronger trust evidence. Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.

@coderabbitai
Copy link

coderabbitai bot commented Dec 29, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Contributor

Thank you for following the naming conventions! 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c: dependencies Pull requests that adds/updates a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant