Skip to content

Bump the npm group across 3 directories with 6 updates - #73

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-ac95aa960b
Jan 11, 2026
Merged

Bump the npm group across 3 directories with 6 updates#73
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-ac95aa960b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 6 updates in the / directory:

Package From To
@eslint/compat 2.0.0 2.0.1
@stylistic/eslint-plugin 5.6.1 5.7.0
@types/node 25.0.3 25.0.6
aws-cdk-lib 2.234.0 2.234.1
@hono/node-server 1.19.7 1.19.8
vite-tsconfig-paths 6.0.3 6.0.4

Bumps the npm group with 6 updates in the /example directory:

Package From To
@eslint/compat 2.0.0 2.0.1
@stylistic/eslint-plugin 5.6.1 5.7.0
@types/node 25.0.3 25.0.6
aws-cdk-lib 2.234.0 2.234.1
@hono/node-server 1.19.7 1.19.8
vite-tsconfig-paths 6.0.3 6.0.4

Bumps the npm group with 3 updates in the /package directory: @eslint/compat, @stylistic/eslint-plugin and @types/node.

Updates @eslint/compat from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1

migrate-config: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.0 to ^2.0.1
    • devDependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Changelog

Sourced from @​eslint/compat's changelog.

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Commits

Updates @stylistic/eslint-plugin from 5.6.1 to 5.7.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.0

5.7.0 (2026-01-09)

Features

  • customize: allow indent option as full rule options (#1091) (ab50c71)
  • deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
  • dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
  • eol-last: improve to make language-agnostic (#1051) (9152494)
  • linebreak-style: improve to make language-agnostic (#1050) (132926d)
  • type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
  • update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

  • list-style: replace text range with delimiter directly (#1062) (c2ac348)
  • object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

Build Related

  • deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
  • deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
  • deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

  • docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
  • indent: simplify handling of TSConditionalType (#1075) (233c967)
  • indent: simplify handling of TSMappedType (#1073) (30b6bb3)
  • member-delimiter-style: use auto-generated types (#1089) (580164b)
  • padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
  • replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
  • test-utils: replace language conditionals with a config object (#1064) (e78a122)
  • utils: simplify type guards, cleanup typings & docs (#1086) (843428e)
Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.0 (2026-01-09)

Features

  • customize: allow indent option as full rule options (#1091) (ab50c71)
  • deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
  • dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
  • eol-last: improve to make language-agnostic (#1051) (9152494)
  • linebreak-style: improve to make language-agnostic (#1050) (132926d)
  • type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
  • update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

  • list-style: replace text range with delimiter directly (#1062) (c2ac348)
  • object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

Build Related

  • deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
  • deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
  • deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

  • docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
  • indent: simplify handling of TSConditionalType (#1075) (233c967)
  • indent: simplify handling of TSMappedType (#1073) (30b6bb3)
  • member-delimiter-style: use auto-generated types (#1089) (580164b)
  • padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
  • replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
  • test-utils: replace language conditionals with a config object (#1064) (e78a122)
  • utils: simplify type guards, cleanup typings & docs (#1086) (843428e)
Commits
  • 94ba6b3 chore: release v5.7.0 (main) (#1060)
  • 172ef89 feat: update deps, support @​typescript-eslint/parser >=8.48.0 (#1095)
  • ab50c71 feat(customize): allow indent option as full rule options (#1091)
  • 77e1370 refactor: replace hasCommentsBetween with sourceCode.commentsExistBetween...
  • 6494fdc chore: cleanup unused constants (#1093)
  • a80aefb refactor(padding-line-between-statements): use auto-generated types (#1090)
  • 580164b refactor(member-delimiter-style): use auto-generated types (#1089)
  • 622b888 feat: deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#...
  • 1aaf61f feat(type-annotation-spacing): allow ignore check arrow (#1080)
  • d73c03e fix(object-curly-spacing): allow space before comment in multi-line objects (...
  • Additional commits viewable in compare view

Updates @types/node from 25.0.3 to 25.0.6

Commits

Updates aws-cdk-lib from 2.234.0 to 2.234.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.234.1

Bug Fixes

  • RuntimeError: apiEndpoint is not configured on the imported HttpApi (revert of "chore(apigatewayv2): reference interfaces") (#36623) (1c10d49), closes aws/aws-cdk#36378

Alpha modules (2.234.1-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.234.1-alpha.0 (2026-01-08)

2.234.0-alpha.0 (2026-01-08)

Features

  • msk-alpha: support express broker for Kafka v3.9 (#36450) (afcc953)

Bug Fixes

  • elasticache-alpha: deployment fails when serverlessCacheName or userGroupId is not specified (#36459) (b3f62f7), closes #36458
  • elasticache-alpha: security group for ServerlessCache does not use default endpoint port (#35738) (79d91ad)

2.233.0-alpha.0 (2025-12-18)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users.
  • elasticache-alpha: The engine property in NoPasswordUserProps has been removed.

Bug Fixes

  • bedrock-agentcore-alpha: runtime construct incorrectly forces default lifecycleConfiguration values (#36379) (7954354), closes #36376
  • elasticache-alpha: the default engine for NoPasswordUser contradict in the docs (#35920) (495fa37), closes #35847
  • mixins-preview: improving delivery source and delivery destination creation (#36314) (86092ab)

2.232.2-alpha.0 (2025-12-12)

2.232.1-alpha.0 (2025-12-05)

2.232.0-alpha.0 (2025-12-04)

Bug Fixes

  • bedrock-agentcore-alpha: use static construct ID for asset-based runtime artifacts (#36241) (e2bdddd), closes #35968
  • mixins-preview: service exports are different then in aws-cdk-lib (#36201) (5858006), closes #36210
  • mixins-preview: strongly-typed ConstructSelector interface (#36266) (1d2f473)

2.231.0-alpha.0 (2025-12-01)

Features

... (truncated)

Commits
  • 1c10d49 fix: RuntimeError: apiEndpoint is not configured on the imported HttpApi (r...
  • See full diff in compare view

Updates @hono/node-server from 1.19.7 to 1.19.8

Release notes

Sourced from @​hono/node-server's releases.

v1.19.8

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.7...v1.19.8

Commits

Updates vite-tsconfig-paths from 6.0.3 to 6.0.4

Commits
  • f91de32 chore: release v6.0.4
  • 232f17c fix: move vite to dependencies
  • 8ecf047 fix: initialize resolvers before dependency pre-bundling occurs
  • See full diff in compare view

Updates @eslint/compat from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1

migrate-config: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.0 to ^2.0.1
    • devDependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Changelog

Sourced from @​eslint/compat's changelog.

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Commits

Updates @stylistic/eslint-plugin from 5.6.1 to 5.7.0

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.0

5.7.0 (2026-01-09)

Features

  • customize: allow indent option as full rule options (#1091) (ab50c71)
  • deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
  • dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
  • eol-last: improve to make language-agnostic (#1051) (9152494)
  • linebreak-style: improve to make language-agnostic (#1050) (132926d)
  • type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
  • update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

  • list-style: replace text range with delimiter directly (#1062) (c2ac348)
  • object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

Build Related

  • deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
  • deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
  • deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

  • docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
  • indent: simplify handling of TSConditionalType (#1075) (233c967)
  • indent: simplify handling of TSMappedType (#1073) (30b6bb3)
  • member-delimiter-style: use auto-generated types (#1089) (580164b)
  • padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
  • replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
  • test-utils: replace language conditionals with a config object (#1064) (e78a122)
  • utils: simplify type guards, cleanup typings & docs (#1086) (843428e)
Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.0 (2026-01-09)

Features

  • customize: allow indent option as full rule options (#1091) (ab50c71)
  • deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#1071) (622b888)
  • dot-location: support MetaProperty, TSQualifiedName, TSImportType, JSXMemberExpression (#1063) (c296e42)
  • eol-last: improve to make language-agnostic (#1051) (9152494)
  • linebreak-style: improve to make language-agnostic (#1050) (132926d)
  • type-annotation-spacing: allow ignore check arrow (#1080) (1aaf61f)
  • update deps, support @​typescript-eslint/parser >=8.48.0 (#1095) (172ef89)

Bug Fixes

  • list-style: replace text range with delimiter directly (#1062) (c2ac348)
  • object-curly-spacing: allow space before comment in multi-line objects (#1076) (d73c03e)

Documentation

Build Related

  • deps: bump actions/checkout from 5 to 6 (#1061) (767efe4)
  • deps: bump actions/download-artifact from 6 to 7 (#1067) (272e75d)
  • deps: bump actions/upload-artifact from 5 to 6 (#1068) (50239e3)

Chores

  • docs: extract local vite plugins from vite.config.ts (#1081) (79e6c6b)
  • indent: simplify handling of TSConditionalType (#1075) (233c967)
  • indent: simplify handling of TSMappedType (#1073) (30b6bb3)
  • member-delimiter-style: use auto-generated types (#1089) (580164b)
  • padding-line-between-statements: use auto-generated types (#1090) (a80aefb)
  • replace hasCommentsBetween with sourceCode.commentsExistBetween (#1094) (77e1370)
  • test-utils: replace language conditionals with a config object (#1064) (e78a122)
  • utils: simplify type guards, cleanup typings & docs (#1086) (843428e)
Commits
  • 94ba6b3 chore: release v5.7.0 (main) (#1060)
  • 172ef89 feat: update deps, support @​typescript-eslint/parser >=8.48.0 (#1095)
  • ab50c71 feat(customize): allow indent option as full rule options (#1091)
  • 77e1370 refactor: replace hasCommentsBetween with sourceCode.commentsExistBetween...
  • 6494fdc chore: cleanup unused constants (#1093)
  • a80aefb refactor(padding-line-between-statements): use auto-generated types (#1090)
  • 580164b refactor(member-delimiter-style): use auto-generated types (#1089)
  • 622b888 feat: deprecate jsx-sort-props in favor of eslint-plugin-perfectionist (#...
  • 1aaf61f feat(type-annotation-spacing): allow ignore check arrow (#1080)
  • d73c03e fix(object-curly-spacing): allow space before comment in multi-line objects (...
  • Additional commits viewable in compare view

Updates @types/node from 25.0.3 to 25.0.6

Commits

Updates aws-cdk-lib from 2.234.0 to 2.234.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.234.1

Bug Fixes

  • RuntimeError: apiEndpoint is not configured on the imported HttpApi (revert of "chore(apigatewayv2): reference interfaces") (#36623) (1c10d49), closes aws/aws-cdk#36378

Alpha modules (2.234.1-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.234.1-alpha.0 (2026-01-08)

2.234.0-alpha.0 (2026-01-08)

Features

  • msk-alpha: support express broker for Kafka v3.9 (#36450) (afcc953)

Bug Fixes

  • elasticache-alpha: deployment fails when serverlessCacheName or userGroupId is not specified (#36459) (b3f62f7), closes #36458
  • elasticache-alpha: security group for ServerlessCache does not use default endpoint port (#35738) (79d91ad)

2.233.0-alpha.0 (2025-12-18)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users.
  • elasticache-alpha: The engine property in NoPasswordUserProps has been removed.

Bug Fixes

  • bedrock-agentcore-alpha: runtime construct incorrectly forces default lifecycleConfiguration values (#36379) (7954354), closes #36376
  • elasticache-alpha: the default engine for NoPasswordUser contradict in the docs (#35920) (495fa37), closes #35847
  • mixins-preview: improving delivery source and delivery destination creation (#36314) (86092ab)

2.232.2-alpha.0 (2025-12-12)

2.232.1-alpha.0 (2025-12-05)

2.232.0-alpha.0 (2025-12-04)

Bug Fixes

  • bedrock-agentcore-alpha: use static construct ID for asset-based runtime artifacts (#36241) (e2bdddd), closes #35968
  • mixins-preview: service exports are different then in aws-cdk-lib (#36201) (5858006), closes #36210
  • mixins-preview: strongly-typed ConstructSelector interface (#36266) (1d2f473)

2.231.0-alpha.0 (2025-12-01)

Features

... (truncated)

Commits
  • 1c10d49 fix: RuntimeError: apiEndpoint is not configured on the imported HttpApi (r...
  • See full diff in compare view

Updates @hono/node-server from 1.19.7 to 1.19.8

Release notes

Sourced from @​hono/node-server's releases.

v1.19.8

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.7...v1.19.8

Commits

Updates vite-tsconfig-paths from 6.0.3 to 6.0.4

Commits
  • f91de32 chore: release v6.0.4
  • 232f17c fix: move vite to dependencies
  • 8ecf047 fix: initialize resolvers before dependency pre-bundling occurs
  • See full diff in compare view

Updates @eslint/compat from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1

migrate-config: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.0 to ^2.0.1
    • devDependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Changelog

Sourced from @​eslint/compat's changelog.

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Commits

Bumps the npm group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.6.1` | `5.7.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.3` | `25.0.6` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.234.0` | `2.234.1` |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.7` | `1.19.8` |
| [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `6.0.3` | `6.0.4` |

Bumps the npm group with 6 updates in the /example directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.6.1` | `5.7.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.3` | `25.0.6` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.234.0` | `2.234.1` |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.19.7` | `1.19.8` |
| [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `6.0.3` | `6.0.4` |

Bumps the npm group with 3 updates in the /package directory: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat), [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@stylistic/eslint-plugin` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.0/packages/eslint-plugin)

Updates `@types/node` from 25.0.3 to 25.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `aws-cdk-lib` from 2.234.0 to 2.234.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.234.1/packages/aws-cdk-lib)

Updates `@hono/node-server` from 1.19.7 to 1.19.8
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.7...v1.19.8)

Updates `vite-tsconfig-paths` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases)
- [Commits](aleclarson/vite-tsconfig-paths@v6.0.3...v6.0.4)

Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@stylistic/eslint-plugin` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.0/packages/eslint-plugin)

Updates `@types/node` from 25.0.3 to 25.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `aws-cdk-lib` from 2.234.0 to 2.234.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.234.1/packages/aws-cdk-lib)

Updates `@hono/node-server` from 1.19.7 to 1.19.8
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.7...v1.19.8)

Updates `vite-tsconfig-paths` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases)
- [Commits](aleclarson/vite-tsconfig-paths@v6.0.3...v6.0.4)

Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@stylistic/eslint-plugin` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.0/packages/eslint-plugin)

Updates `@types/node` from 25.0.3 to 25.0.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.234.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite-tsconfig-paths
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.234.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite-tsconfig-paths
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 11, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) January 11, 2026 18:22
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
@hono/node-server1.19.8NullUnknown License
@types/node25.0.6NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@eslint/compat 2.0.1 UnknownUnknown
npm/@hono/node-server 1.19.8 UnknownUnknown
npm/@stylistic/eslint-plugin 5.7.0 UnknownUnknown
npm/@types/node 25.0.6 🟢 7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk-lib 2.234.1 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
Vulnerabilities⚠️ 023 existing vulnerabilities detected
npm/vite-tsconfig-paths 6.0.4 🟢 4.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1021 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Vulnerabilities⚠️ 032 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@eslint/compat 2.0.1 UnknownUnknown
npm/@stylistic/eslint-plugin 5.7.0 UnknownUnknown
npm/@types/node 25.0.6 🟢 7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@eslint/compat 2.0.1 UnknownUnknown
npm/@hono/node-server 1.19.8 UnknownUnknown
npm/@stylistic/eslint-plugin 5.7.0 UnknownUnknown
npm/@types/node 25.0.6 🟢 7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk-lib 2.234.1 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
Vulnerabilities⚠️ 023 existing vulnerabilities detected
npm/eslint-visitor-keys 5.0.0 UnknownUnknown
npm/espree 11.0.0 UnknownUnknown
npm/vite-tsconfig-paths 6.0.4 🟢 4.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1021 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Vulnerabilities⚠️ 032 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • example/package.json
  • package/package.json
  • pnpm-lock.yaml

@github-actions
github-actions Bot merged commit 8109ece into main Jan 11, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-ac95aa960b branch January 11, 2026 18:23
This was referenced Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant