Automated Safe Dependency Updates
This PR contains safe patch-level dependency updates that have been verified to:
- ✅ Pass all tests (pre-existing failures unrelated to these changes)
- ✅ Have no breaking changes
- ✅ Zero vulnerabilities reported by
npm audit
Updated Dependencies
| Package |
Previous |
Updated |
Type |
@babel/preset-env |
7.29.2 |
7.29.5 |
patch |
@commitlint/cli |
20.5.0 |
20.5.3 |
patch |
@commitlint/config-conventional |
20.5.0 |
20.5.3 |
patch |
@eslint/compat |
2.0.5 |
2.1.0 |
minor |
@types/node |
25.6.0 |
25.8.0 |
patch |
@typescript-eslint/eslint-plugin |
8.58.2 |
8.59.3 |
patch |
@typescript-eslint/parser |
8.58.2 |
8.59.3 |
patch |
| ajv |
8.18.0 |
8.20.0 |
minor |
| babel-jest |
30.3.0 |
30.4.1 |
patch |
| eslint |
10.2.1 |
10.4.0 |
minor |
| globals |
17.5.0 |
17.6.0 |
minor |
| jest |
30.3.0 |
30.4.2 |
patch |
| typescript-eslint |
8.58.2 |
8.59.3 |
patch |
Security Fixes Included
No CVEs addressed — npm audit reported 0 vulnerabilities before and after.
Skipped (major version bumps requiring manual review)
@commitlint/cli / @commitlint/config-conventional: v20 → v21
chalk: v4 → v5 (ESM-only)
commander: v12 → v14
esbuild: v0.25 → v0.28
eslint-plugin-security: v3 → v4
execa: v5 → v9 (ESM-only, breaking API changes)
markdownlint-cli2: v0.21 → v0.22
typescript: v5 → v6
Verification
Generated by Dependency Security Monitor Workflow
To route changes like this to a review issue instead of blocking, configure protected-files: fallback-to-issue in your workflow configuration.
Generated by Dependency Security Monitor · ● 5.8M · ◷
Automated Safe Dependency Updates
This PR contains safe patch-level dependency updates that have been verified to:
npm auditUpdated Dependencies
@babel/preset-env@commitlint/cli@commitlint/config-conventional@eslint/compat@types/node@typescript-eslint/eslint-plugin@typescript-eslint/parserSecurity Fixes Included
No CVEs addressed —
npm auditreported 0 vulnerabilities before and after.Skipped (major version bumps requiring manual review)
@commitlint/cli/@commitlint/config-conventional: v20 → v21chalk: v4 → v5 (ESM-only)commander: v12 → v14esbuild: v0.25 → v0.28eslint-plugin-security: v3 → v4execa: v5 → v9 (ESM-only, breaking API changes)markdownlint-cli2: v0.21 → v0.22typescript: v5 → v6Verification
npm auditreports 0 vulnerabilitiesGenerated by Dependency Security Monitor Workflow
Warning
Protected Files
This was originally intended as a pull request, but the patch modifies protected files. These files may affect project dependencies, CI/CD pipelines, or agent behaviour. Please review the changes carefully before creating the pull request.
Click here to create the pull request once you have reviewed the changes
Protected files
package-lock.jsonTo route changes like this to a review issue instead of blocking, configure
protected-files: fallback-to-issuein your workflow configuration.