Skip to content

chore(deps-dev): bump the dependencies group with 2 updates - #119

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-852671bb2a
Oct 4, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-852671bb2a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: @types/node and pm-ops.

Updates @types/node from 26.6.2 to 26.6.3

Commits

Updates pm-ops from 2026.9.28 to 2026.9.29

Release notes

Sourced from pm-ops's releases.

pm-ops v2026.09.29

Changelog

2026.9.29 - 2026-09-29

Fixed

  • Release completeness audit fails a release it just created because the GitHub Release list lags creation (ops-eys5)

2026.9.28 - 2026-09-28

Fixed

  • Hoisted broken pm-ops can bypass merge-driver install guard (ops-jzp5)

2026.9.26 - 2026-09-26

Fixed

  • A publish that npm accepts late is reported as failed and the GitHub Release is skipped on bun mirror lag (ops-ssnr)
  • The guarded launcher template reads a pm-ops directory without package.json as an omit-dev install and skips the merge drivers (ops-eyi8)

Other

  • Certify pm CLI 2026.9.23 and adopt the guarded pm-ops merge-driver launcher (ops-me3v)

2026.9.18 - 2026-09-18

Added

  • Ship canonical strict ESLint and duplication gates from pm-ops (ops-4phd)
  • Ship the merge-driver install step as the canonical pm-ops/merge-driver export (ops-crgk)

Fixed

  • pm CLI 2026.9.11 drops every pm-ops command, because its new core ops group collides at group level (ops-k9iv)

Other

2026.9.11 - 2026-09-11

Added

  • Publish the canonical lifecycle policy contract every fleet repo enforces (ops-xgdt)

Fixed

  • A retroactive completeness contract induced twelve placeholder evidence fields and then locked them in (ops-utza)

... (truncated)

Changelog

Sourced from pm-ops's changelog.

2026.9.29 - 2026-09-29

Fixed

  • Release completeness audit fails a release it just created because the GitHub Release list lags creation (ops-eys5)
Commits
  • 5ea8406 Release pm-ops v2026.09.29
  • 20f6060 Release pm-ops v2026.09.28-1
  • 02de8a5 Merge pull request #130 from unbraind/fix/release-audit-confirms-new-releases...
  • 90480da Treat a by-tag release read that names another tag as unreadable, and name pm...
  • bdc647a Confirm a release the GitHub list has not caught up with before calling it mi...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps dev dependencies @types/node to 26.6.3 and pm-ops to 2026.9.29. The pm-ops update fixes the release completeness audit failing a release it just created when the GitHub Release list hasn't caught up yet.

Written for commit 738448e. Summary will update on new commits.

Review in cubic

Bumps the dependencies group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [pm-ops](https://github.com/unbraind/pm-ops).


Updates `@types/node` from 26.6.2 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `pm-ops` from 2026.9.28 to 2026.9.29
- [Release notes](https://github.com/unbraind/pm-ops/releases)
- [Changelog](https://github.com/unbraind/pm-ops/blob/main/CHANGELOG.md)
- [Commits](unbraind/pm-ops@v2026.09.28...v2026.09.29)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pm-ops
  dependency-version: 2026.9.29
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@greptile-apps

greptile-apps Bot commented Oct 4, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@coderabbitai

coderabbitai Bot commented Oct 4, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 66ab89b1-2a56-4c7f-ae93-24ac249297e7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions
github-actions Bot enabled auto-merge (squash) October 4, 2026 16:51
@github-actions
github-actions Bot merged commit afb8877 into main Oct 4, 2026
9 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-852671bb2a branch October 4, 2026 16:53
unbraind added a commit that referenced this pull request Oct 4, 2026
* Keep pm packages in the pm-toolchain Dependabot group

After #118 Dependabot put pm-ops into the generic dependencies group, where
it was capped at 2026.9.29 by itself instead of moving with
@unbrained/pm-cli. The dependencies group now excludes the pm-toolchain
patterns so the groups are disjoint.

Closes pm-v1it with the auto-merge proof from #119.

pm item: pm-v1it

* Allow-list minor and patch updates and document the auto-merge permissions

Review feedback: an update that fetch-metadata cannot classify must not
auto-merge, so the condition now requires semver-minor or semver-patch
outside the calendar-versioned pm-toolchain group. The job's write scopes
are documented, the dependencies group selects every package explicitly,
and the item's acceptance criteria name the pm-toolchain exception.

pm item: pm-v1it

---------

Co-authored-by: SteveBot <1153461+unbraind@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants