chore(deps-dev): bump the development-dependencies group with 4 updates #171

dependabot · 2025-11-24T06:12:55Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the development-dependencies group with 4 updates: @types/node, @types/sinon, rimraf and typescript-eslint.

Updates @types/node from 24.10.0 to 24.10.1

Commits

See full diff in compare view

Updates @types/sinon from 17.0.4 to 21.0.0

Commits

See full diff in compare view

Updates rimraf from 6.1.0 to 6.1.2

Commits

cd45498 6.1.2
fe9a962 glob@13
30dc9d8 6.1.1
9dffc3e update glob
b6462ea mock platform properly in test/index.ts
668309f ci: update typedoc action
See full diff in compare view

Updates typescript-eslint from 8.46.3 to 8.47.0

Release notes

Sourced from typescript-eslint's releases.

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

eslint-plugin: [no-unused-private-class-members] new extension rule (#10913)

❤️ Thank You

Brad Zacher @bradzacher

You can read about our versioning strategy and releases on our website.

v8.46.4

8.46.4 (2025-11-10)

🩹 Fixes

eslint-plugin: [no-deprecated] fix double-report on computed literal identifiers (#11006, #10958)

eslint-plugin: handle override modifier in promise-function-async fixer (#11730)

parser: error when both projectService and project are set (#11333)

❤️ Thank You

Evgeny Stepanovych @undsoft

Kentaro Suzuki @sushichan044

Maria Solano @MariaSolOs

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.47.0 (2025-11-17)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.4 (2025-11-10)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

28cf803 chore(release): publish 8.47.0
843f144 chore(release): publish 8.46.4
7c6944e chore: fix typos (#11744)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon), [rimraf](https://github.com/isaacs/rimraf) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `@types/node` from 24.10.0 to 24.10.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/sinon` from 17.0.4 to 21.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `rimraf` from 6.1.0 to 6.1.2 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.1.0...v6.1.2) Updates `typescript-eslint` from 8.46.3 to 8.47.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.47.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.10.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/sinon" dependency-version: 21.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: rimraf dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: typescript-eslint dependency-version: 8.47.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2025-11-24T06:14:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Quality	Maintenance
@types/express@4.17.21
@types/sinon@17.0.4 ⏵ 21.0.0		^-1
@types/node@24.10.0 ⏵ 20.12.7
@types/node@24.10.0 ⏵ 24.10.1	⁺¹
express@4.21.2
typescript@5.4.5

View full report

socket-security · 2025-11-24T06:14:20Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `safer-buffer` is 94.0% likely obfuscated Confidence: 0.94 Location: Package overview From: test/apps/express-typescript/package-lock.json → `npm/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

basti1302 · 2025-11-24T11:00:03Z

Action Severity Alert (click "▶" to expand/collapse)
Warn
Obfuscated code: npm safer-buffer is 94.0% likely obfuscated

It's test code only - test/apps/express-typescript/package-lock.json, this alert is irrelevant.

dependabot · 2025-11-24T11:00:06Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

basti1302 · 2025-11-24T11:01:05Z

@dependabot reopen

(closed accidentally)

dependabot · 2025-11-24T11:01:08Z

Beginning January 27, 2026, Dependabot will no longer support the @dependabot reopen command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

sonarqubecloud · 2025-11-24T11:06:02Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2025-12-01T06:34:58Z

🎉 This PR is included in version 3.0.8 🎉

The release is available on:

Your semantic-release bot 📦🚀

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 24, 2025

dependabot bot requested a review from a team as a code owner November 24, 2025 06:12

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 24, 2025

basti1302 closed this Nov 24, 2025

dependabot bot deleted the dependabot/npm_and_yarn/development-dependencies-e755adc779 branch November 24, 2025 11:00

dependabot bot reopened this Nov 24, 2025

dependabot bot restored the dependabot/npm_and_yarn/development-dependencies-e755adc779 branch November 24, 2025 11:01

basti1302 enabled auto-merge (rebase) November 24, 2025 11:02

basti1302 merged commit f220f8b into main Nov 24, 2025
21 checks passed

basti1302 deleted the dependabot/npm_and_yarn/development-dependencies-e755adc779 branch November 24, 2025 11:02

github-actions bot added the released label Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the development-dependencies group with 4 updates #171

chore(deps-dev): bump the development-dependencies group with 4 updates #171

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 24, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 24, 2025 •

edited

Loading

Uh oh!

basti1302 commented Nov 24, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

basti1302 commented Nov 24, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Uh oh!

sonarqubecloud bot commented Nov 24, 2025

Uh oh!

github-actions bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps-dev): bump the development-dependencies group with 4 updates #171

chore(deps-dev): bump the development-dependencies group with 4 updates #171

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.47.0

8.47.0 (2025-11-17)

🚀 Features

❤️ Thank You

v8.46.4

8.46.4 (2025-11-10)

🩹 Fixes

❤️ Thank You

8.47.0 (2025-11-17)

8.46.4 (2025-11-10)

Uh oh!

socket-security bot commented Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

basti1302 commented Nov 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

basti1302 commented Nov 24, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Uh oh!

sonarqubecloud bot commented Nov 24, 2025

Quality Gate passed

Uh oh!

github-actions bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Nov 24, 2025 •

edited

Loading

socket-security bot commented Nov 24, 2025 •

edited

Loading

socket-security bot commented Nov 24, 2025 •

edited

Loading

basti1302 commented Nov 24, 2025 •

edited

Loading