Skip to content

chore(deps): combined dependabot dep bumps#170

Merged
mtoy-googly-moogly merged 1 commit intomainfrom
chore/combined-dependabot
Apr 19, 2026
Merged

chore(deps): combined dependabot dep bumps#170
mtoy-googly-moogly merged 1 commit intomainfrom
chore/combined-dependabot

Conversation

@mtoy-googly-moogly
Copy link
Copy Markdown
Contributor

@mtoy-googly-moogly mtoy-googly-moogly commented Apr 19, 2026

Summary

Combines 5 open dependabot PRs into a single lockfile update so CI only runs once. Produced by running npm update on the target packages rather than merging the stale dependabot branches (which were based on older main and conflicted heavily).

Replaces:

Not included: #132 (eslint 8→9, gts 3→7, @typescript-eslint 5→8). Major-version bumps with known breaking changes (eslint flat config) — needs a dedicated review.

Test plan

  • npm run build succeeds
  • npm test passes (only the pre-existing packaged-version e2e mismatch fails, unrelated)
  • CI green
  • Close superseded dependabot PRs after merge

🤖 Generated with Claude Code

…brace-expansion, picomatch

Combines the following dependabot PRs into a single lockfile update:
- #167 follow-redirects 1.15.9 -> 1.16.0
- #165 axios 1.11.0 -> 1.15.0
- #163 fast-xml-parser, @aws-sdk/client-s3, @aws-sdk/client-sts, @aws-sdk/credential-provider-node
- #160 brace-expansion 1.1.12 -> 1.1.13
- #157 picomatch 2.3.1 -> 2.3.2

Does not include #132 (eslint 8->9 + gts 3->7 major bumps), which needs
a dedicated review.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant