Repository navigation
fix(deps): bump the npm group with 5 updates - #177
Conversation
Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [fs-native-extensions](https://github.com/holepunchto/fs-native-extensions) | `1.5.1` | `1.5.2` | | [music-metadata](https://github.com/Borewit/music-metadata) | `12.2.2` | `12.2.3` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.73.0` | `0.74.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.88.0` | `1.89.0` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.151.1` | `4.152.0` | Updates `fs-native-extensions` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/holepunchto/fs-native-extensions/releases) - [Commits](holepunchto/fs-native-extensions@v1.5.1...v1.5.2) Updates `music-metadata` from 12.2.2 to 12.2.3 - [Release notes](https://github.com/Borewit/music-metadata/releases) - [Commits](Borewit/music-metadata@v12.2.2...v12.2.3) Updates `oxfmt` from 0.73.0 to 0.74.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.74.0/npm/oxfmt) Updates `oxlint` from 1.88.0 to 1.89.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.89.0/npm/oxlint) Updates `wrangler` from 4.151.1 to 4.152.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/HEAD/packages/wrangler) --- updated-dependencies: - dependency-name: fs-native-extensions dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm - dependency-name: music-metadata dependency-version: 12.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: oxfmt dependency-version: 0.74.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: oxlint dependency-version: 1.89.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: wrangler dependency-version: 4.152.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
commit: |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1bcd064663
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@oxidezap/whatsapp-rust-bridge": "0.26.1", | ||
| "events": "^3.3.0", | ||
| "fs-native-extensions": "1.5.1", | ||
| "fs-native-extensions": "1.5.2", |
There was a problem hiding this comment.
fix(deps) to release the runtime bump
When this is the only release-worthy change, the chore(deps) commit type prevents release-please from creating a release, so the new runtime dependency remains on main until an unrelated release-triggering commit happens; .github/workflows/release.yml:8-11 explicitly documents that runtime bumps must use fix(deps).
AGENTS.md reference: AGENTS.md:L62-L64
Useful? React with 👍 / 👎.
jlucaso1
changed the title
Bumps the npm group with 5 updates:
1.5.11.5.212.2.212.2.30.73.00.74.01.88.01.89.04.151.14.152.0Updates
fs-native-extensionsfrom 1.5.1 to 1.5.2Commits
ff654741.5.2e314419Fix asynchronousgetAttr()andsetAttr()I/O on Windows (#22)4378d87Audit the workflows on every change (#19)be820a01.5.1 (#17)7d022d3Grant publish permissions to the publish job only (#18)Updates
music-metadatafrom 12.2.2 to 12.2.3Release notes
Sourced from music-metadata's releases.
Commits
8e61c7312.2.3b3437eefix: bound ASF metadata records to their object payloads6b31443fix: validate audio sample tables used by MP4 chapterscb75307fix: respect ASF content description boundaries516e4f9fix: ignore inherited native tag mappings03db3f1fix: prevent orphan MP4 boxes from modifying another track959171efix: preserve arbitrary ID3v2 credit role names2381a11fix: validate ID3v2 chapter frame boundaries67a0aadchore(deps): update strtok3 to 10.6.2b54867drefactor: group regression tests by format and behaviorUpdates
oxfmtfrom 0.73.0 to 0.74.0Release notes
Sourced from oxfmt's releases.
Changelog
Sourced from oxfmt's changelog.
Commits
07ed78frelease(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)Updates
oxlintfrom 1.88.0 to 1.89.0Release notes
Sourced from oxlint's releases.
... (truncated)
Changelog
Sourced from oxlint's changelog.
Commits
07ed78frelease(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)9a424c2fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)Updates
wranglerfrom 4.151.1 to 4.152.0Release notes
Sourced from wrangler's releases.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions