Skip to content

Bump the npm group across 3 directories with 7 updates - #86

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-fa5c419664
Jan 25, 2026
Merged

Bump the npm group across 3 directories with 7 updates#86
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-fa5c419664

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 5 updates in the / directory:

Package From To
zod 4.3.5 4.3.6
@stylistic/eslint-plugin 5.7.0 5.7.1
aws-cdk-lib 2.235.1 2.236.0
aws-cdk 2.1102.0 2.1103.0
vite-tsconfig-paths 6.0.4 6.0.5

Bumps the npm group with 5 updates in the /example directory:

Package From To
zod 4.3.5 4.3.6
@stylistic/eslint-plugin 5.7.0 5.7.1
aws-cdk-lib 2.235.1 2.236.0
aws-cdk 2.1102.0 2.1103.0
vite-tsconfig-paths 6.0.4 6.0.5

Bumps the npm group with 2 updates in the /package directory: zod and @stylistic/eslint-plugin.

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6
Commits

Updates @stylistic/eslint-plugin from 5.7.0 to 5.7.1

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.1

5.7.1 (2026-01-23)

Bug Fixes

  • add meta to plugin (#1102) (f9d8a21)
  • deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
  • disable-legacy: disable multiline-comment-style (#1103) (03fc476)
  • no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
  • upgrade deps (#1112) (29a1d0a)

Documentation

Chores

  • extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
  • jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
  • line-comment-position: simplify options initialization (#1106) (4d6b10a)
  • use defaultOptions in rules (#1105) (666e8ee)
Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.1 (2026-01-23)

Bug Fixes

  • add meta to plugin (#1102) (f9d8a21)
  • deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
  • disable-legacy: disable multiline-comment-style (#1103) (03fc476)
  • no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
  • upgrade deps (#1112) (29a1d0a)

Documentation

Chores

  • extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
  • jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
  • line-comment-position: simplify options initialization (#1106) (4d6b10a)
  • use defaultOptions in rules (#1105) (666e8ee)
Commits
  • 5c4b512 chore: release v5.7.1 (main) (#1101)
  • 29a1d0a fix: upgrade deps (#1112)
  • 6a6d30b docs(indent): update deprecation tips (#1109)
  • 62b7247 chore(lint): enable eslint-plugin/no-meta-schema-default internally (#1110)
  • 666e8ee refactor: use defaultOptions in rules (#1105)
  • 55bbd1d refactor(jsx-rules): cleanup meta, use defaultOptions (#1108)
  • 4d6b10a refactor(line-comment-position): simplify options initialization (#1106)
  • a49451f refactor: extract safeReplaceTextBetween to reuse common fix logic (#1104)
  • b250f84 chore: setup eslint-plugin-eslint-plugin, sort meta & createRule (#1107)
  • f9d8a21 fix: add meta to plugin (#1102)
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.235.1 to 2.236.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.236.0

Features

Bug Fixes

  • apigatewayv2: use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes (#36710) (fe6eb0b)
  • batch: undeprecate useOptimalInstanceClasses property (#36353) (3485d53), closes #36291 #36291
  • core: resources allocate unnecessary string tokens upon instantiation (#36692) (59d4928)
  • core: tree.json unintentionally includes telemetry metadata (#36748) (87fd86b)
  • scheduler: scheduleName returns undefined when imported from ARN (#36400) (752bd9b), closes #36361
  • recent change to IAlarmAction breaks too many implementors (#36695) (0c5b0db)

Alpha modules (2.236.0-alpha.0)

Features

  • bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
  • bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
  • bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
  • mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
  • sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

  • eks-v2-alpha: ensure kubectl provider access entry is depended upon by downstream resources (#36734) (e104f45), closes #34898 #34897
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.236.0-alpha.0 (2026-01-23)

Features

  • bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
  • bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
  • bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
  • mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
  • sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

  • eks-v2-alpha: ensure kubectl provider access entry is depended upon by downstream resources (#36734) (e104f45), closes #34898 #34897

2.235.1-alpha.0 (2026-01-19)

2.235.0-alpha.0 (2026-01-15)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: The User Pool Client will be replaced and new Resource Server and Domain resources will be added for existing Gateway stacks using the default Cognito authorizer.

Checklist

Bug Fixes

  • bedrock-agentcore-alpha: default Cognito User Pool for AgentCore Gateway is not set up for M2M authentication. (#36323) (5a5605a)

2.234.1-alpha.0 (2026-01-08)

2.234.0-alpha.0 (2026-01-08)

Features

  • msk-alpha: support express broker for Kafka v3.9 (#36450) (afcc953)

Bug Fixes

  • elasticache-alpha: deployment fails when serverlessCacheName or userGroupId is not specified (#36459) (b3f62f7), closes #36458
  • elasticache-alpha: security group for ServerlessCache does not use default endpoint port (#35738) (79d91ad)

... (truncated)

Commits
  • b2add3f chore: update analytics metadata blueprints
  • 867adc8 chore(deps): bump the npm_and_yarn group across 2 directories with 1 update (...
  • 9b4065c chore(mixins-preview): track mixin usage (#36743)
  • 87fd86b fix(core): tree.json unintentionally includes telemetry metadata (#36748)
  • 0fe7635 chore: yarn upgrade dependencies requiring intervention (#36747)
  • e8ad85b feat(ecs): add capacityOptionType (Spot support) to ManagedInstancesCapacityP...
  • 041cc0e chore: npm-check-updates && yarn upgrade (#36691)
  • 6380446 chore(rds): add new enum values for rds (#36730)
  • b3c858b chore(lambda): add new enum values for lambda (#36729)
  • d3b87fe chore(kms): add new enum values for kms (#36728)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1102.0 to 2.1103.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1103.0

2.1103.0 (2026-01-25)

Features

Bug Fixes

  • chokidar and npm rely on outdated version of tar (#1059) (ba59816)
Commits
  • ba59816 fix: chokidar and npm rely on outdated version of tar (#1059)
  • 88e95b9 chore(deps): bump @​smithy/node-config-provider from 4.3.6 to 4.3.8 (#1037)
  • 4048c55 chore(deps): bump diff from 7.0.0 to 8.0.3 (#1026)
  • 892e7f2 chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1054)
  • 91be9f1 feat(cli): add --[no-]color flag to control output colorization (#1030)
  • See full diff in compare view

Updates vite-tsconfig-paths from 6.0.4 to 6.0.5

Commits

Updates @aws-cdk/asset-awscli-v1 from 2.2.261 to 2.2.263

Commits

Updates fsevents from 2.3.2 to 2.3.3

Release notes

Sourced from fsevents's releases.

Release v2.3.3

Released to npm as v2.3.3

Commits

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6
Commits

Updates @stylistic/eslint-plugin from 5.7.0 to 5.7.1

Release notes

Sourced from @​stylistic/eslint-plugin's releases.

v5.7.1

5.7.1 (2026-01-23)

Bug Fixes

  • add meta to plugin (#1102) (f9d8a21)
  • deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
  • disable-legacy: disable multiline-comment-style (#1103) (03fc476)
  • no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
  • upgrade deps (#1112) (29a1d0a)

Documentation

Chores

  • extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
  • jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
  • line-comment-position: simplify options initialization (#1106) (4d6b10a)
  • use defaultOptions in rules (#1105) (666e8ee)
Changelog

Sourced from @​stylistic/eslint-plugin's changelog.

5.7.1 (2026-01-23)

Bug Fixes

  • add meta to plugin (#1102) (f9d8a21)
  • deps: revert eslint-visitor-keys and espree to compatible versions (#1111) (572f1ab)
  • disable-legacy: disable multiline-comment-style (#1103) (03fc476)
  • no-whitespace-before-property: detect whitespace in TSIndexedAccessType with parens (#1099) (60aafcb)
  • upgrade deps (#1112) (29a1d0a)

Documentation

Chores

  • extract safeReplaceTextBetween to reuse common fix logic (#1104) (a49451f)
  • jsx-rules: cleanup meta, use defaultOptions (#1108) (55bbd1d)
  • line-comment-position: simplify options initialization (#1106) (4d6b10a)
  • use defaultOptions in rules (#1105) (666e8ee)
Commits
  • 5c4b512 chore: release v5.7.1 (main) (#1101)
  • 29a1d0a fix: upgrade deps (#1112)
  • 6a6d30b docs(indent): update deprecation tips (#1109)
  • 62b7247 chore(lint): enable eslint-plugin/no-meta-schema-default internally (#1110)
  • 666e8ee refactor: use defaultOptions in rules (#1105)
  • 55bbd1d refactor(jsx-rules): cleanup meta, use defaultOptions (#1108)
  • 4d6b10a refactor(line-comment-position): simplify options initialization (#1106)
  • a49451f refactor: extract safeReplaceTextBetween to reuse common fix logic (#1104)
  • b250f84 chore: setup eslint-plugin-eslint-plugin, sort meta & createRule (#1107)
  • f9d8a21 fix: add meta to plugin (#1102)
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.235.1 to 2.236.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.236.0

Features

Bug Fixes

  • apigatewayv2: use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes (#36710) (fe6eb0b)
  • batch: undeprecate useOptimalInstanceClasses property (#36353) (3485d53), closes #36291 #36291
  • core: resources allocate unnecessary string tokens upon instantiation (#36692) (59d4928)
  • core: tree.json unintentionally includes telemetry metadata (#36748) (87fd86b)
  • scheduler: scheduleName returns undefined when imported from ARN (#36400) (752bd9b), closes #36361
  • recent change to IAlarmAction breaks too many implementors (#36695) (0c5b0db)

Alpha modules (2.236.0-alpha.0)

Features

  • bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
  • bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
  • bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
  • mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
  • sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

  • eks-v2-alpha: ensure kubectl provider access entry is depended upon by downstream resources (#36734) (e104f45), closes #34898 #34897
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.236.0-alpha.0 (2026-01-23)

Features

  • bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
  • bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
  • bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
  • mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
  • sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

  • eks-v2-alpha: ensure kubectl provider access entry is depended upon by downstream resources (#36734) (e104f45), closes #34898 #34897

2.235.1-alpha.0 (2026-01-19)

2.235.0-alpha.0 (2026-01-15)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: The User Pool Client will be replaced and new Resource Server and Domain resources will be added for existing Gateway stacks using the default Cognito authorizer.

Checklist

Bug Fixes

  • bedrock-agentcore-alpha: default Cognito User Pool for AgentCore Gateway is not set up for M2M authentication. (#36323) (5a5605a)

2.234.1-alpha.0 (2026-01-08)

2.234.0-alpha.0 (2026-01-08)

Features

  • msk-alpha: support express broker for Kafka v3.9 (#36450) (afcc953)

Bug Fixes

  • elasticache-alpha: deployment fails when serverlessCacheName or userGroupId is not specified (#36459) (b3f62f7), closes #36458
  • elasticache-alpha: security group for ServerlessCache does not use default endpoint port (#35738) (79d91ad)

... (truncated)

Commits
  • b2add3f chore: update analytics metadata blueprints
  • 867adc8 chore(deps): bump the npm_and_yarn group across 2 directories with 1 update (...
  • 9b4065c chore(mixins-preview): track mixin usage (#36743)
  • 87fd86b fix(core): tree.json unintentionally includes telemetry metadata (#36748)
  • 0fe7635 chore: yarn upgrade dependencies requiring intervention (#36747)
  • e8ad85b feat(ecs): add capacityOptionType (Spot support) to ManagedInstancesCapacityP...
  • 041cc0e chore: npm-check-updates && yarn upgrade (#36691)
  • 6380446 chore(rds): add new enum values for rds (#36730)
  • b3c858b chore(lambda): add new enum values for lambda (#36729)
  • d3b87fe chore(kms): add new enum values for kms (#36728)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1102.0 to 2.1103.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1103.0

2.1103.0 (2026-01-25)

Features

Bug Fixes

  • chokidar and npm rely on outdated version of tar (#1059) (ba59816)
Commits
  • ba59816 fix: chokidar and npm rely on outdated version of tar (#1059)
  • 88e95b9 chore(deps): bump @​smithy/node-config-provider from 4.3.6 to 4.3.8 (#1037)
  • 4048c55 chore(deps): bump diff from 7.0.0 to 8.0.3 (#1026)
  • 892e7f2 chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1054)
  • 91be9f1 feat(cli): add --[no-]color flag to control output colorization (#1030)
  • See full diff in compare view

Updates vite-tsconfig-paths from 6.0.4 to 6.0.5

Commits

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • <...

    Description has been truncated

Bumps the npm group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.7.0` | `5.7.1` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.235.1` | `2.236.0` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1102.0` | `2.1103.0` |
| [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `6.0.4` | `6.0.5` |

Bumps the npm group with 5 updates in the /example directory:

| Package | From | To |
| --- | --- | --- |
| [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.7.0` | `5.7.1` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.235.1` | `2.236.0` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1102.0` | `2.1103.0` |
| [vite-tsconfig-paths](https://github.com/aleclarson/vite-tsconfig-paths) | `6.0.4` | `6.0.5` |

Bumps the npm group with 2 updates in the /package directory: [zod](https://github.com/colinhacks/zod) and [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin).


Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@stylistic/eslint-plugin` from 5.7.0 to 5.7.1
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.1/packages/eslint-plugin)

Updates `aws-cdk-lib` from 2.235.1 to 2.236.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.236.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1102.0 to 2.1103.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1103.0/packages/aws-cdk)

Updates `vite-tsconfig-paths` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases)
- [Commits](aleclarson/vite-tsconfig-paths@v6.0.4...v6.0.5)

Updates `@aws-cdk/asset-awscli-v1` from 2.2.261 to 2.2.263
- [Release notes](https://github.com/cdklabs/awscdk-asset-awscli/releases)
- [Commits](cdklabs/awscdk-asset-awscli@awscli-v1v2.2.261...awscli-v1v2.2.263)

Updates `fsevents` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/fsevents/fsevents/releases)
- [Commits](fsevents/fsevents@v2.3.2...v2.3.3)

Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@stylistic/eslint-plugin` from 5.7.0 to 5.7.1
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.1/packages/eslint-plugin)

Updates `aws-cdk-lib` from 2.235.1 to 2.236.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.236.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1102.0 to 2.1103.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1103.0/packages/aws-cdk)

Updates `vite-tsconfig-paths` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/aleclarson/vite-tsconfig-paths/releases)
- [Commits](aleclarson/vite-tsconfig-paths@v6.0.4...v6.0.5)

Updates `zod` from 4.3.5 to 4.3.6
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.5...v4.3.6)

Updates `@stylistic/eslint-plugin` from 5.7.0 to 5.7.1
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1103.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite-tsconfig-paths
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@aws-cdk/asset-awscli-v1"
  dependency-version: 2.2.263
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: fsevents
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1103.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vite-tsconfig-paths
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 25, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) January 25, 2026 18:25
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@stylistic/eslint-plugin 5.7.1 UnknownUnknown
npm/aws-cdk 2.1103.0 UnknownUnknown
npm/aws-cdk-lib 2.236.0 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
SAST🟢 9SAST tool detected but not run on all commits
Binary-Artifacts⚠️ 0binaries present in source code
Fuzzing🟢 10project is fuzzed
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/vite-tsconfig-paths 6.0.5 🟢 4.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Maintained🟢 1024 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
npm/zod 4.3.6 🟢 3.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 017 existing vulnerabilities detected
npm/@stylistic/eslint-plugin 5.7.1 UnknownUnknown
npm/zod 4.3.6 🟢 3.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 017 existing vulnerabilities detected
npm/@aws-cdk/asset-awscli-v1 2.2.263 UnknownUnknown
npm/@stylistic/eslint-plugin 5.7.1 UnknownUnknown
npm/aws-cdk 2.1103.0 UnknownUnknown
npm/aws-cdk-lib 2.236.0 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
SAST🟢 9SAST tool detected but not run on all commits
Binary-Artifacts⚠️ 0binaries present in source code
Fuzzing🟢 10project is fuzzed
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/vite-tsconfig-paths 6.0.5 🟢 4.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Maintained🟢 1024 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
npm/zod 4.3.6 🟢 3.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/29 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 017 existing vulnerabilities detected

Scanned Files

  • example/package.json
  • package/package.json
  • pnpm-lock.yaml

@github-actions
github-actions Bot merged commit f899116 into main Jan 25, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-fa5c419664 branch January 25, 2026 18:26
This was referenced Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant