Skip to content

[pull] main from renovatebot:main#1034

Merged
pull[bot] merged 3 commits intoryrodriguez25:mainfrom
renovatebot:main
Apr 10, 2026
Merged

[pull] main from renovatebot:main#1034
pull[bot] merged 3 commits intoryrodriguez25:mainfrom
renovatebot:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Apr 10, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

renovate bot and others added 3 commits April 9, 2026 18:31
chore(deps): update dependency esbuild to v0.27.7

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | esbuild | 0.27.5 | 0.27.7 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* chore(workers/repository): report malicious packages before `packageFiles with updates`

As part of future changes, we may modify the `skipReason`s before the
update phase, which means that we should ensure these are correct before
logging out `packageFiles with updates`.

* chore(workers/repository): split malicious dependency checks

We will likely run into two specific cases of malicious dependencies -
you're currently using one, or you're receiving an update to one.

We should make these separate, explicit, cases so users are aware what
`malicious` actually means, and what the path forward is.
chore(deps): update dependency esbuild to v0.28.0

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | esbuild | 0.27.7 | 0.28.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Apr 10, 2026
@pull pull bot added the ⤵️ pull label Apr 10, 2026
@pull pull bot merged commit 9bf3f64 into ryrodriguez25:main Apr 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant