Skip to content

chore(deps): lock file maintenance#21

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/lock-file-maintenance
Open

chore(deps): lock file maintenance#21
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/lock-file-maintenance

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Dec 1, 2022

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 of the month, every 12 months (* * 1 */12 *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 0061390 to 5001920 Compare January 18, 2023 01:08
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 5001920 to ff72a1d Compare March 11, 2023 12:54
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from ff72a1d to 0354c44 Compare August 10, 2025 14:34
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Aug 10, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedprettier-plugin-packagejson@​2.3.0 ⏵ 2.5.22100 +110082 +1486100
Updated@​semantic-release/​changelog@​6.0.1 ⏵ 6.0.3991009089100
Updatedtypescript@​4.9.3 ⏵ 4.9.5100100909890
Updatedprettier@​2.8.0 ⏵ 2.8.892 +71009895100

View full report

@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch 2 times, most recently from 2d45f31 to 119e9ce Compare August 19, 2025 14:36
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 119e9ce to 6ee93dd Compare September 25, 2025 15:58
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 6ee93dd to f6a30f5 Compare October 21, 2025 10:52
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from f6a30f5 to 681ad4a Compare November 10, 2025 21:35
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Nov 10, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @pnpm/network.ca-file is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.jsonnpm/semantic-release@19.0.5npm/@pnpm/network.ca-file@1.0.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@pnpm/network.ca-file@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 681ad4a to 9b46583 Compare December 3, 2025 18:03
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 9b46583 to eb80c36 Compare December 31, 2025 16:35
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch 2 times, most recently from c24c9e1 to 50f6f3f Compare January 23, 2026 18:34
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 50f6f3f to f231996 Compare February 2, 2026 19:56
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from f231996 to 64811af Compare February 12, 2026 10:51
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 64811af to c14eae7 Compare March 5, 2026 18:15
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch 2 times, most recently from 8a6fde8 to 37f311c Compare April 8, 2026 17:57
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from 37f311c to c85d482 Compare April 29, 2026 14:44
@renovate renovate Bot force-pushed the renovate/lock-file-maintenance branch from c85d482 to 7a40f5c Compare May 12, 2026 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants