fix(deps): update npm to v5 - - package.json (major) #8490
Triggered via pull request
December 1, 2025 18:43
renovate[bot]
edited
#900
Status
Success
Total duration
1m 2s
Artifacts
–
pr-lint.yml
on: pull_request_target
Validate & Label PR
54s
Annotations
2 errors and 4 warnings
|
Validate & Label PR
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/b1476f6e6eb133afa41ed8589daba6dc69b4d3f5/dist/index.js:7146:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/b1476f6e6eb133afa41ed8589daba6dc69b4d3f5/dist/index.js:61885:18)
{
name: 'AggregateError',
event: {
id: '19833637419',
name: 'pull_request_target',
payload: {
action: 'edited',
changes: {
body: {
from: 'This PR contains the following updates:\n' +
'\n' +
'| Package | Change | Age | Confidence |\n' +
'|---|---|---|---|\n' +
'| [@vitejs/plugin-react](https://redirect.github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme) ([source](https://redirect.github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react)) | [`^4.7.0` -> `^5.1.1`](https://renovatebot.com/diffs/npm/@vitejs%2fplugin-react/4.7.0/5.1.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |\n' +
'| [chai](http://chaijs.com) ([source](https://redirect.github.com/chaijs/chai)) | [`^4.5.0` -> `^5.3.3`](https://renovatebot.com/diffs/npm/chai/4.5.0/5.3.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |\n' +
'| [chai-http](https://redirect.github.com/chaijs/chai-http) | [`^4.4.0` -> `^5.1.2`](https://renovatebot.com/diffs/npm/chai-http/4.4.0/5.1.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |\n' +
'| [express](https://expressjs.com/) ([source](https://redirect.github.com/expressjs/express)) | [`^4.21.2` -> `^5.1.0`](https://renovatebot.com/diffs/npm/express/4.21.2/5.1.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |\n' +
'| [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`^4.5.14` -> `^5.4.21`](https://renovatebot.com/diffs/npm/vite/4.5.14/5.4.21) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |\n' +
'\n' +
'---\n' +
'\n' +
'### Release Notes\n' +
'\n' +
'<details>\n' +
'<summary>vitejs/vite-plugin-react (@​vitejs/plugin-react)</summary>\n' +
'\n' +
'### [`v5.1.1`](https://redirect.github.com/vitejs/vite-plugin-react/blob/HEAD/packages/plugin-react/CHANGELOG.md#511-2025-11-12)\n' +
'\n' +
'[Compare Source](https://redirect.github.com/vitejs/vite-plugin-react/compare/3e5a3742e94be975cbcec230fbab5e801b80dc5b...23db72731b7c9c3d57a8188f0395d2ec90a6e2f6)\n' +
'\n' +
'##### Update code to support newer `rolldown-vite` ([#​976](https://redirect.github.com/vitejs/vite-plugin-react/pull/976))\n' +
'\n' +
'`rolldown-vite
|
|
Validate & Label PR
Resource not accessible by integration
{
name: 'HttpError',
id: '19833637419',
status: 403,
response: {
url: 'https://api.github.com/repos/finos/git-proxy/releases',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Mon, 01 Dec 2025 18:44:06 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': 'C82A:21405D:2C56143:C5FCBCA:692DE1F6',
'x-ratelimit-limit': '5000',
'x-ratelimit-remaining': '4986',
'x-ratelimit-reset': '1764618199',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '14',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/finos/git-proxy/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.4.0 octokit-core.js/3.6.0 Node.js/20.19.5 (linux; x64)',
'x-github-delivery': '19833637419',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"target_commitish":"refs/heads/main","name":"Version 1.20.0","tag_name":"v1.20.0","body":"### What\'s Changed\\n\\n## 🚀 Features\\n\\n- feat: config schema for missing properties @kriswest (#1243)\\n- feat: improve login page flexibility @jescalada (#1227)\\n- feat: push speed optimizations @jescalada (#1189)\\n- feat: Create admin protected endpoint for creating users @dcoric (#981)\\n- feat: don\'t forward requests for unknown repos @kriswest (#1164)\\n- feat: implement formatting checks to CI @fabiovincenzi (#1153)\\n- feat: JWT `apiAuthentication` UI integration @jescalada (#1096)\\n- feat(key on repo url): support git hosts other than GitHub + multiple forks @kriswest (#1043)\\n\\n## 🐛 Bug Fixes\\n\\n- fix: proxy preparations mismatch bug @jescalada (#1284)\\n- fix(deps): update npm - - package.json @[renovate[bot]](https://github.com/apps/renovate) (#1252)\\n- fix: empty pagination @andypols (#1274)\\n- fix: broken user links @andypols (#1268)\\n- fix: Plugin loader tests @jescalada (#1262)\\n- fix: correct and simplify git push/pull request classification using content-type headers @kriswest (#1249)\\n- fix: the npm check-types failures @andypols (#1254)\\n- fix: infinite loop in UserList component @andypols (#1255)\\n- fix: escape literals in scan diff @kriswest (#1251)\\n- fix(deps): update npm - - package.json @[renovate[bot]](https://github.com/apps/renovate) (#1236)\\n- fix: rename definitions/authentication in schema to make it more inutitive @kriswest (#1231)\\n- fix: bug in using API_BASE with URL @andypols (#1228)\\n- fix: \\"MongoServerError: The _id cannot be changed\\" when updating users @andypols (#1230)\\n- fix(deps): update dependency env-paths to v3 - - package.json @[renovate[bot]](https://github.com/apps/renovate) (#1216)\\n- fix: linter warnings and CI failure @jescalada (#1218)\\n- fix(deps): update dependenc
|
|
Validate & Label PR
"pull_request_target.edited" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)
|
|
Validate & Label PR
"pull_request_target.synchronize" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)
|
|
Validate & Label PR
"pull_request_target.reopened" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)
|
|
Validate & Label PR
"pull_request_target.opened" is not a known webhook name (https://developer.github.com/v3/activity/events/types/)
|