Skip to content

chore(deps-dev): bump the pm-toolchain group with 2 updates - #135

Merged
github-actions[bot] merged 7 commits into
mainfrom
dependabot/npm_and_yarn/pm-toolchain-5f962d9fd5
Oct 19, 2026
Merged

github-actions[bot] merged 7 commits into
mainfrom
dependabot/npm_and_yarn/pm-toolchain-5f962d9fd5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the pm-toolchain group with 2 updates: pm-changelog and pm-ops.

Updates pm-changelog from 2026.10.5 to 2026.10.12

Release notes

Sourced from pm-changelog's releases.

pm-changelog v2026.10.12

2026.10.12 - 2026-10-12

Added

  • Changelog entries can use resolution prose, and --check warns about defect-shaped titles (pmc-d3ds)

Fixed

  • Refuse explicit partial-read envelopes supplied to changelog generation (pmc-n4qu)
  • Make node-entrypoint fixture teardown reliable (pmc-node-teardown-226)
Changelog

Sourced from pm-changelog's changelog.

2026.10.12 - 2026-10-12

Added

  • Changelog entries can use resolution prose, and --check warns about defect-shaped titles (pmc-d3ds)

Fixed

  • Refuse explicit partial-read envelopes supplied to changelog generation (pmc-n4qu)
  • Make node-entrypoint fixture teardown reliable (pmc-node-teardown-226)
Commits
  • e1cb885 Release pm-changelog v2026.10.12
  • b57d639 docs: reconcile delivered changelog feature evidence
  • d29b589 Prefer resolution prose for changelog entries and warn on defect titles (#231)
  • 5af8dd7 chore(deps-dev): bump marked (#234)
  • a9477d4 chore(deps-dev): bump pm-ops (#233)
  • 2443794 chore(deps-dev): bump @​unbrained/pm-cli (#232)
  • 998688d Close pmc-n4qu after #229 merged (#230)
  • 878bf76 Refuse explicit partial-read receipts and unproven certificates in caller JSO...
  • f5ed3ab Close pmc-node-teardown-226 after #227 merged (#228)
  • 1d4f493 Keep fixture telemetry workers out of the node-entrypoint teardown (#227)
  • See full diff in compare view

Updates pm-ops from 2026.10.6 to 2026.10.12

Release notes

Sourced from pm-ops's releases.

pm-ops v2026.10.12

Changelog

2026.10.12 - 2026-10-12

Added

  • Repair an incomplete release triple, instead of only reporting it every day (ops-3j1z)

Fixed

  • Make historical Windows proof evidence available in fresh clones (ops-kw02)

Other

  • Certify pm-ops on PM CLI/SDK 2026.10.10 with linear declaration scanner (ops-hiee)

2026.10.5 - 2026-10-05

Fixed

  • Cover .tsx, .mts and .cts sources in the docstring and duplication gates, excluding ambient .d.mts/.d.cts declarations (ops-zq8c)

Other

  • Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (ops-k1lf)

2026.9.29 - 2026-09-29

Fixed

  • Release completeness audit fails a release it just created because the GitHub Release list lags creation (ops-eys5)

2026.9.28 - 2026-09-28

Fixed

  • Hoisted broken pm-ops can bypass merge-driver install guard (ops-jzp5)

2026.9.26 - 2026-09-26

Fixed

  • A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (ops-ssnr)
  • The guarded launcher template reads a pm-ops directory without package.json as an omit-dev install and skips the merge drivers (ops-eyi8)

Other

  • Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (ops-me3v)

... (truncated)

Changelog

Sourced from pm-ops's changelog.

2026.10.12 - 2026-10-12

Added

  • Repair an incomplete release triple, instead of only reporting it every day (ops-3j1z)

Fixed

  • Make historical Windows proof evidence available in fresh clones (ops-kw02)

Other

  • Certify pm-ops on PM CLI/SDK 2026.10.10 with linear declaration scanner (ops-hiee)

2026.10.5 - 2026-10-05

Fixed

  • Cover .tsx, .mts and .cts sources in the docstring and duplication gates, excluding ambient .d.mts/.d.cts declarations (ops-zq8c)

Other

  • Auto-merge green Dependabot updates and group the pm toolchain into one daily PR (ops-k1lf)

2026.9.29 - 2026-09-29

Fixed

  • Release completeness audit fails a release it just created because the GitHub Release list lags creation (ops-eys5)

2026.9.28 - 2026-09-28

Fixed

  • Hoisted broken pm-ops can bypass merge-driver install guard (ops-jzp5)

2026.9.26 - 2026-09-26

Fixed

  • A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (ops-ssnr)
  • The guarded launcher template reads a pm-ops directory without package.json as an omit-dev install and skips the merge drivers (ops-eyi8)

Other

  • Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (ops-me3v)

2026.9.18 - 2026-09-18

Added

... (truncated)

Commits
  • ca604a7 Release pm-ops v2026.10.12
  • ece5761 Close tracker items delivered by merged pull requests (#157)
  • 126c7bc Make dependency acceptance self-syncing across SDK bumps (#155)
  • 33824d6 chore(deps): bump the codeql-actions group across 1 directory with 2 updates ...
  • a456302 feat: repair incomplete release triples from verified npm evidence (#150)
  • 69700b0 chore(deps-dev): bump pm-changelog (#153)
  • 223621f Fix Windows proof fixtures after squash merges (#156)
  • 3fca1f2 Audit nested publishers with linear parsing and preserve consumer Git config ...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps the pm-toolchain dev dependencies to their 2026.10.12 releases.

  • pm-changelog adds resolution prose support, --check warnings for defect-shaped titles, and now requires @unbrained/pm-cli >= 2026.10.4.
  • pm-ops can repair incomplete release triples and makes historical Windows proof evidence available in fresh clones. Its merge-driver launcher now skips install during npm pack and npm publish, preserving the packing clone's Git config, and the launcher test no longer expects git's built-in text, binary, and union drivers.

Written for commit bd28382. Summary will update on new commits.

View guided diff Turn on auto-fix

Bumps the pm-toolchain group with 2 updates: [pm-changelog](https://github.com/unbraind/pm-changelog) and [pm-ops](https://github.com/unbraind/pm-ops).


Updates `pm-changelog` from 2026.10.5 to 2026.10.12
- [Release notes](https://github.com/unbraind/pm-changelog/releases)
- [Changelog](https://github.com/unbraind/pm-changelog/blob/main/CHANGELOG.md)
- [Commits](unbraind/pm-changelog@v2026.10.5...v2026.10.12)

Updates `pm-ops` from 2026.10.6 to 2026.10.12
- [Release notes](https://github.com/unbraind/pm-ops/releases)
- [Changelog](https://github.com/unbraind/pm-ops/blob/main/CHANGELOG.md)
- [Commits](unbraind/pm-ops@v2026.10.06...v2026.10.12)

---
updated-dependencies:
- dependency-name: pm-changelog
  dependency-version: 2026.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pm-toolchain
- dependency-name: pm-ops
  dependency-version: 2026.10.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pm-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026
@greptile-apps

greptile-apps Bot commented Oct 16, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@coderabbitai

coderabbitai Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 2ae40238-5206-4a94-bb47-792283d74f9c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions
github-actions Bot enabled auto-merge (squash) October 16, 2026 08:14
@unbraind
unbraind disabled auto-merge October 16, 2026 10:18
@github-actions
github-actions Bot enabled auto-merge (squash) October 16, 2026 10:18
unbraind and others added 2 commits October 19, 2026 07:49
…tation

pm-cli 2026.10.15 and later declare merge=text (git's built-in driver) in
.gitattributes. Git supplies text, binary and union without registration, so
the launcher test must not expect them in git config. Same filter as pm-web.
@github-actions
github-actions Bot merged commit 6bcdd59 into main Oct 19, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/pm-toolchain-5f962d9fd5 branch October 19, 2026 06:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant