Skip to content

chore(deps): bump the dependencies group across 1 directory with 9 updates #235

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 23, 2025

Bumps the dependencies group with 8 updates in the / directory:

Package From To
axios 1.9.0 1.10.0
jose 5.10.0 6.0.11
@types/node 22.15.2 24.0.3
@typescript-eslint/eslint-plugin 8.31.0 8.34.1
jest 29.7.0 30.0.2
@types/jest 29.5.14 30.0.0
nock 14.0.4 14.0.5
ts-jest 29.3.2 29.4.0

Updates axios from 1.9.0 to 1.10.0

Release notes

Sourced from axios's releases.

Release v1.10.0

Release notes:

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

Changelog

Sourced from axios's changelog.

1.10.0 (2025-06-14)

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

Commits

Updates jose from 5.10.0 to 6.0.11

Release notes

Sourced from jose's releases.

v6.0.11

Fixes

  • typ checking edge-cases when it contains a slash (/) character (31e4baf)

v6.0.10

Refactor

  • removed unused claims methods (74719cf)
  • reorganize jwt claim set utils (1f12d88)

v6.0.9

Documentation

  • add more symbol document, ignore ts-private fields (8b73687)
  • bump typedoc (6163a8b)
  • drop cdnjs links in README (a910038)
  • drop denoland/x links in README and add jsr (3662b9e)
  • fix key export links from docs/README.md (c8edfc2)

Refactor

  • always assume structuredClone is present (f7898a9)
  • hide internal private fields and drop ProduceJWT inheritance (ab18881)
  • less objects when JWE JWT Replicated Header Parameters are used (c763a0e)

v6.0.8

Fixes

  • export [customFetch] symbol from the default entrypoint (1615614), closes #762

v6.0.7

Documentation

  • improve generate key/secret and import function descriptions (cd06359)

Fixes

  • use [customFetch] when provided to createRemoteJWKSet (35f6509), closes #760

v6.0.6

Refactor

Documentation

... (truncated)

Changelog

Sourced from jose's changelog.

6.0.11 (2025-05-05)

Fixes

  • typ checking edge-cases when it contains a slash (/) character (31e4baf)

6.0.10 (2025-03-12)

Refactor

  • removed unused claims methods (74719cf)
  • reorganize jwt claim set utils (1f12d88)

6.0.9 (2025-03-11)

Documentation

  • add more symbol document, ignore ts-private fields (8b73687)
  • bump typedoc (6163a8b)
  • drop cdnjs links in README (a910038)
  • drop denoland/x links in README and add jsr (3662b9e)
  • fix key export links from docs/README.md (c8edfc2)

Refactor

  • always assume structuredClone is present (f7898a9)
  • hide internal private fields and drop ProduceJWT inheritance (ab18881)
  • less objects when JWE JWT Replicated Header Parameters are used (c763a0e)

6.0.8 (2025-02-26)

Fixes

  • export [customFetch] symbol from the default entrypoint (1615614), closes #762

6.0.7 (2025-02-25)

Documentation

  • improve generate key/secret and import function descriptions (cd06359)

Fixes

... (truncated)

Commits
  • 69b7960 chore(release): 6.0.11
  • 31e4baf fix: typ checking edge-cases when it contains a slash (/) character
  • bb9f7be test: refactor env.ts
  • 0540102 test: fixup to use env.supported in rsaes.ts
  • 0a81a9a test: fixup to only call env.supported once in aes.ts
  • 085762f test: move all supported checks to env.ts
  • 05bd090 chore: bump packages
  • 7c1cf51 test: update X25519 expectations
  • 3873767 chore: bump packages
  • 2b42c58 chore: update require(esm) note
  • Additional commits viewable in compare view

Updates @types/node from 22.15.2 to 24.0.3

Commits

Updates @typescript-eslint/eslint-plugin from 8.31.0 to 8.34.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.34.1

8.34.1 (2025-06-16)

🩹 Fixes

  • types: add 2026/17 to EcmaVersion (#11304)
  • typescript-estree: emit a Literal instead of Identifier for constructor when the identifier is a string (#11299)
  • visitor-keys: bump eslint-visitor-keys dependency (#11294)

❤️ Thank You

  • David Archibald
  • overlookmotel
  • Tao

You can read about our versioning strategy and releases on our website.

v8.34.0

8.34.0 (2025-06-09)

🚀 Features

  • type-utils: deprecated getSourceFileOfNode function (#11284)

🩹 Fixes

  • typescript-estree: change the token type of null from Keyword to Null (#11283)
  • typescript-estree: add validation to interface extends (#11271)
  • visitor-keys: fix visitor keys order (#11279)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.33.1

8.33.1 (2025-06-02)

🩹 Fixes

  • exclude docs/ directory from eslint-plugin package (#11251)
  • project-service: add missing typescript peer dependency (#11265)

❤️ Thank You

  • JounQin
  • roottool

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.34.1 (2025-06-16)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.34.0 (2025-06-09)

🩹 Fixes

  • typescript-estree: add validation to interface extends (#11271)

❤️ Thank You

  • Tao

You can read about our versioning strategy and releases on our website.

8.33.1 (2025-06-02)

🩹 Fixes

  • exclude docs/ directory from eslint-plugin package (#11251)

❤️ Thank You

  • roottool

You can read about our versioning strategy and releases on our website.

8.33.0 (2025-05-26)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.32.1 (2025-05-12)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] check for indirect circular types in aliased mapped types (#11177)
  • eslint-plugin: [consistent-indexed-object-style] adjust auto-fixer to generate valid syntax for TSMappedType with no type annotation (#11180)
  • eslint-plugin: [no-deprecated] support computed member access (#10867)
  • eslint-plugin: [no-unnecessary-type-conversion] shouldn't have fixable property (#11194)

❤️ Thank You

... (truncated)

Commits
  • ccd0791 chore(release): publish 8.34.1
  • 3a8369d chore(eslint-plugin): switch auto-generated test cases to hand-written in no-...
  • 2fbae48 chore(eslint-plugin): switch auto-generated test cases to hand-written in str...
  • 8a69a33 chore(eslint-plugin): switch auto-generated test cases to hand-written in pre...
  • 58ce73f chore(eslint-plugin): switch auto-generated test cases to hand-written in no-...
  • f9d4d10 chore(eslint-plugin): switch auto-generated test cases to hand-written in no-...
  • 8915a47 chore(release): publish 8.34.0
  • 8208974 docs: rename "directive comments" to "comment directives" (#11268)
  • 685e530 fix(typescript-estree): add validation to interface extends (#11271)
  • 0f5c59c chore(eslint-plugin): [prefer-optional-chain] fix comment placement (#11269)
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.31.0 to 8.34.1

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.34.1

8.34.1 (2025-06-16)

🩹 Fixes

  • types: add 2026/17 to EcmaVersion (#11304)
  • typescript-estree: emit a Literal instead of Identifier for constructor when the identifier is a string (#11299)
  • visitor-keys: bump eslint-visitor-keys dependency (#11294)

❤️ Thank You

  • David Archibald
  • overlookmotel
  • Tao

You can read about our versioning strategy and releases on our website.

v8.34.0

8.34.0 (2025-06-09)

🚀 Features

  • type-utils: deprecated getSourceFileOfNode function (#11284)

🩹 Fixes

  • typescript-estree: change the token type of null from Keyword to Null (#11283)
  • typescript-estree: add validation to interface extends (#11271)
  • visitor-keys: fix visitor keys order (#11279)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.33.1

8.33.1 (2025-06-02)

🩹 Fixes

  • exclude docs/ directory from eslint-plugin package (#11251)
  • project-service: add missing typescript peer dependency (#11265)

❤️ Thank You

  • JounQin
  • roottool

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.34.1 (2025-06-16)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.34.0 (2025-06-09)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.33.1 (2025-06-02)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.33.0 (2025-05-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.32.1 (2025-05-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.32.0 (2025-05-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.31.1 (2025-04-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates jest from 29.7.0 to 30.0.2

Release notes

Sourced from jest's releases.

30.0.2

What's Changed

Fixes

  • [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
  • [jest-util] Make garbage collection protection property writable (#15689)

Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

Jest 30.0.1

What's Changed

Features

  • [jest-resolver] Implement the defaultAsyncResolver (#15679)

Fixes

  • [jest-resolver] Resolve builtin modules correctly (#15683)
  • [jest-environment-node, jest-util] Avoid setting globals cleanup protection symbol when feature is off (#15684)

Chore & Maintenance

  • [*] Remove and deprecate jest-repl package (#15673)
  • [jest-resolver] Replace custom isBuiltinModule with node's isBuiltin (#15685)

New Contributors

Full Changelog: https://github.com/jestjs/jest/blob/main/CHANGELOG.md

Jest 30

Today we are happy to announce the release of Jest 30. This release features a substantial number of changes, fixes, and improvements. While it is one of the largest major releases of Jest ever, we admit that three years for a major release is too long. In the future, we are aiming to make more frequent major releases to keep Jest great for the next decade.

If you want to skip all the news and just get going, run npm install jest@^30.0.0 and follow the migration guide: Upgrading from Jest 29 to 30.

Read the full blog post

Features

  • [*] Renamed globalsCleanupMode to globalsCleanup and --waitNextEventLoopTurnForUnhandledRejectionEvents to --waitForUnhandledRejections
  • [expect] Add ArrayOf asymmetric matcher for validating array elements. (#15567)
  • [babel-jest] Add option excludeJestPreset to allow opting out of babel-preset-jest (#15164)
  • [expect] Revert #15038 to fix expect(fn).toHaveBeenCalledWith(expect.objectContaining(...)) when there are multiple calls (#15508)
  • [jest-circus, jest-cli, jest-config] Add waitNextEventLoopTurnForUnhandledRejectionEvents flag to minimise performance impact of correct detection of unhandled promise rejections introduced in #14315 (#14681)
  • [jest-circus] Add a waitBeforeRetry option to jest.retryTimes (#14738)
  • [jest-circus] Add a retryImmediately option to jest.retryTimes (#14696)
  • [jest-circus, jest-jasmine2] Allow setupFilesAfterEnv to export an async function (#10962)
  • [jest-circus, jest-test-result] Add startedAt timestamp in TestCaseResultObject within onTestCaseResult (#15145)

... (truncated)

Changelog

Sourced from jest's changelog.

30.0.2

Fixes

  • [jest-matcher-utils] Make 'deepCyclicCopyObject' safer by setting descriptors to a null-prototype object (#15689)
  • [jest-util] Make garbage collection protection property writable (#15689)

30.0.1

Features

  • [jest-resolver] Implement the defaultAsyncResolver (#15679)

Fixes

  • [jest-resolver] Resolve builtin modules correctly (#15683)
  • [jest-environment-node, jest-util] Avoid setting globals cleanup protection symbol when feature is off (#15684)

Chore & Maintenance

  • [*] Remove and deprecate jest-repl package (#15673)
  • [jest-resolver] Replace custom isBuiltinModule with node's isBuiltin (#15685)

30.0.0

Features

  • [*] Renamed globalsCleanupMode to globalsCleanup and --waitNextEventLoopTurnForUnhandledRejectionEvents to --waitForUnhandledRejections
  • [expect] Add ArrayOf asymmetric matcher for validating array elements. (#15567)
  • [babel-jest] Add option excludeJestPreset to allow opting out of babel-preset-jest (#15164)
  • [expect] Revert #15038 to fix expect(fn).toHaveBeenCalledWith(expect.objectContaining(...)) when there are multiple calls (#15508)
  • [jest-circus, jest-cli, jest-config] Add waitNextEventLoopTurnForUnhandledRejectionEvents flag to minimise performance impact of correct detection of unhandled promise rejections introduced in #14315 (#14681)
  • [jest-circus] Add a waitBeforeRetry option to jest.retryTimes (#14738)
  • [jest-circus] Add a retryImmediately option to jest.retryTimes (#14696)
  • [jest-circus, jest-jasmine2] Allow setupFilesAfterEnv to export an async function (#10962)
  • [jest-circus, jest-test-result] Add startedAt timestamp in TestCaseResultObject within onTestCaseResult (#15145)
  • [jest-cli] Export buildArgv (#15310)
  • [jest-config] [BREAKING] Add mts and cts to default moduleFileExtensions config (#14369)
  • [jest-config] [BREAKING] Update testMatch and testRegex default option for supporting mjs, cjs, mts, and cts (#14584)
  • [jest-config] Loads config file from provided path in package.json (#14044)
  • [jest-config] Allow loading jest.config.cts files (#14070)
  • [jest-config] Show rootDir in error message when a preset fails to load (#15194)
  • [jest-config] Support loading TS config files using esbuild-register via docblock loader (#15190)
  • [jest-config] Allow passing TS config loader options via docblock comment (#15234)
  • [jest-config] If Node is running with type stripping enabled, do not require a TS loader (#15480)
  • [@jest/core] Group together open handles with the same stack trace (#13417, & #14789)
  • [@jest/core] Add perfStats to surface test setup overhead (#14622)
  • [@jest/core] [BREAKING] Changed --filter to accept an object with shape { filtered: Array<string> } to match documentation (#13319)
  • [@jest/core] Support --outputFile option for --listTests (#14980)
  • [@jest/core] Stringify Errors properly with --json flag (#15329)

... (truncated)

Commits

Updates @types/jest from 29.5.14 to 30.0.0

Commits

Updates nock from 14.0.4 to 14.0.5

Release notes

Sourced from nock's releases.

v14.0.5

14.0.5 (2025-05-30)

Bug Fixes

  • use of a fetch() recording that uses gzip compression is missing the headers, Possible EventEmitter memory leak when used together with MongoDBContainer (#2869) (90b2a04)
Commits
  • 90b2a04 fix: use of a fetch() recording that uses gzip compression is missing the hea...
  • e6a4ee5 Update readme examples for removeInterceptor (#2858)
  • See full diff in compare view

Updates ts-jest from 29.3.2 to 29.4.0

Release notes

Sourced from ts-jest's releases.

v29.4.0

Please refer to CHANGELOG.md for details.

v29.3.4

Please refer to CHANGELOG.md for details.

v29.3.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.0 (2025-06-11)

Features

29.3.4 (2025-05-16)

Bug Fixes

  • fix: fix TsJestTransformerOptions type (3b11e29), closes #4247
  • fix(cli): fix wrong path for preset creator fns (249eb2c)
  • fix(config): disable rewriteRelativeImportExtensions always (9b1f472), closes #4855

29.3.3 (2025-05-14)

Bug Fixes

  • fix(cli): init config with preset creator functions (cdd3039), closes #4840
  • fix(config): disable isolatedDeclarations (5d6b35f), closes #4847
Commits
  • f692f74 chore(release): 29.4.0
  • 84e093e feat: support Jest 30
  • 2d6fe5c build(deps): Update dependency eslint-plugin-jsdoc to ^50.8.0
  • 83c6d35 build(deps): Update dependency eslint-plugin-jest to ^28.13.3
  • 94797d0 build(deps): Update dependency @​vitejs/plugin-react-swc to ^3.10.2
  • 9a9bd5c build(deps): Update ESLint packages to ^8.34.0
  • cbd81fd build(deps): Update dependency eslint-plugin-jest to ^28.13.0
  • 1d3fb0d build(deps): Update dependency @​types/node to v20.19.0
  • 32efecb build(deps): Update docusaurus monorepo to ^3.8.1
  • 5133d48 build: upgrade docusaurus to 3.8
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.9.0` | `1.10.0` |
| [jose](https://github.com/panva/jose) | `5.10.0` | `6.0.11` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.15.2` | `24.0.3` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.31.0` | `8.34.1` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.0.2` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.14` | `30.0.0` |
| [nock](https://github.com/nock/nock) | `14.0.4` | `14.0.5` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.3.2` | `29.4.0` |



Updates `axios` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.9.0...v1.10.0)

Updates `jose` from 5.10.0 to 6.0.11
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.10.0...v6.0.11)

Updates `@types/node` from 22.15.2 to 24.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.31.0 to 8.34.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.34.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.31.0 to 8.34.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.34.1/packages/parser)

Updates `jest` from 29.7.0 to 30.0.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.0.2/packages/jest)

Updates `@types/jest` from 29.5.14 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `nock` from 14.0.4 to 14.0.5
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](nock/nock@v14.0.4...v14.0.5)

Updates `ts-jest` from 29.3.2 to 29.4.0
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.3.2...v29.4.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jose
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 24.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.34.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.34.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@types/jest"
  dependency-version: 30.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: nock
  dependency-version: 14.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ts-jest
  dependency-version: 29.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 23, 2025
@dependabot dependabot bot requested a review from a team as a code owner June 23, 2025 06:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 23, 2025
Copy link

coderabbitai bot commented Jun 23, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert (click for details)
Warn High
[email protected] has a License Policy Violation.

License: CC-BY-4.0 (npm metadata)

License: CC-BY-4.0 (package/LICENSE)

License: CC-BY-4.0 (package/package.json)

From: package-lock.jsonnpm/[email protected]npm/[email protected]npm/[email protected]

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants