chore(deps): bundle minor and patch dependency updates#79
Merged
Conversation
Bundle all in-range (minor/patch) dependency updates into a single change, matching the repo's dependabot grouping policy (production: patch; development: minor + patch). - @rollup/rollup-linux-x64-gnu 4.60.4 -> 4.62.2 - @types/node 25.9.1 -> 25.9.4 - eslint 10.4.1 -> 10.5.0 - eslint-plugin-jest 29.15.2 -> 29.15.3 - globals 17.6.0 -> 17.7.0 - prettier 3.8.3 -> 3.8.5 - rollup 4.60.4 -> 4.62.2 - semver 7.8.0 -> 7.8.5 - typescript-eslint 8.60.0 -> 8.62.0 Rebuild dist/ from the updated dependency tree. Lint, format, and the full test suite (41 tests, 100% coverage) pass; dist/ rebuilds deterministically.
This was referenced Jun 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Bundles all in-range (minor/patch) npm dependency updates into a single PR, matching this repo's
dependabot.ymlgrouping policy (production: patch; development: minor + patch).dist/is rebuilt from the updated dependency tree.Updated dependencies
@rollup/rollup-linux-x64-gnu@types/nodeeslinteslint-plugin-jestglobalsprettierrollupsemvertypescript-eslintOnly one production dependency changes (
semver, patch), so the.licenses/cache is unaffected.Validation
npm run lint— cleannpm run format:check— cleannpm test— 41 tests pass, 100% coveragedist/rebuilt and verified reproducible/deterministic (matches thecheck-distgate)Out of scope (major bumps, left for deliberate review)
These are outside the repo's automated dependabot policy (no auto-majors) and carry breaking-change risk, so they are not included here:
@types/node25 → 26js-yaml4 → 5prettier-eslint16 → 17 (resolves the dev-onlyminimatchReDoS audit advisories via its transitivetypescript-estree)🤖 Generated with Claude Code
Generated by Claude Code
Need help on this PR? Tag
/codesmithwith what you need. Autofix is disabled.