Skip to content

chore(deps): bump the npm-deps group across 1 directory with 4 updates - #418

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-b05a2b9eb2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-deps-b05a2b9eb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 4 updates in the / directory: yaml, @cyclonedx/cyclonedx-library, @vitest/coverage-v8 and vitest.

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

  • Limit recursive merge aliases (#685, #713)
  • Simplify line unfolding during quoted string parsing (#714)
Commits

Updates @cyclonedx/cyclonedx-library from 10.2.0 to 10.3.0

Release notes

Sourced from @​cyclonedx/cyclonedx-library's releases.

10.3.0

Added

  • Support CycloneDX 1.7.2 (#1519 via #1520)
  • Pulled SPDX license IDs v1.0-3.29.0 (via #1395)

#1519: CycloneDX/cyclonedx-javascript-library#1519 #1520: CycloneDX/cyclonedx-javascript-library#1520


What's Changed

Full Changelog: CycloneDX/cyclonedx-javascript-library@v10.2.0...v10.3.0

Changelog

Sourced from @​cyclonedx/cyclonedx-library's changelog.

10.3.0 -- 2026-09-17

  • Added
    • Support CycloneDX 1.7.2 (#1519 via #1520)
    • Pulled SPDX license IDs v1.0-3.29.0 (via #1395)

#1519: CycloneDX/cyclonedx-javascript-library#1519 #1520: CycloneDX/cyclonedx-javascript-library#1520

Commits
  • 6d2a52f 10.3.0
  • 01293cf chore: prep v10.3.0
  • 877a821 feat: support CycloneDX 1.7.2 (#1520)
  • d152d99 chore(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#1496)
  • d81d47f chore(deps): bump knip from 6.32.2 to 6.34.0 in /tools/test-dependencies (#1518)
  • 42f6658 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#1516)
  • 6b9adad chore(deps): bump knip from 6.32.1 to 6.32.2 in /tools/test-dependencies (#1512)
  • See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.0 to 5.0.2

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates vitest from 5.0.0 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026
@joepetjr joepetjr added the needs-operator Autoland hard-denied this PR; human merge required label Sep 24, 2026
@joepetjr

Copy link
Copy Markdown
Collaborator

Hard-denied (hard-deny: protected path family) and ready to merge -- all checks green.

Offending paths:

  • package-lock.json
  • package.json

Human merge:
sudo gh-merge-approved 418 --repo Back-Road-Creative/rigscore --wait --yes

Bumps the npm-deps group with 4 updates in the / directory: [yaml](https://github.com/eemeli/yaml), [@cyclonedx/cyclonedx-library](https://github.com/CycloneDX/cyclonedx-javascript-library), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

Updates `@cyclonedx/cyclonedx-library` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-javascript-library/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-javascript-library/blob/main/HISTORY.md)
- [Commits](CycloneDX/cyclonedx-javascript-library@v10.2.0...v10.3.0)

Updates `@vitest/coverage-v8` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `vitest` from 5.0.0 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: "@cyclonedx/cyclonedx-library"
  dependency-version: 10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-deps-b05a2b9eb2 branch from 7453352 to ab44477 Compare October 1, 2026 20:37
@joepetjr

joepetjr commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator

Hard-denied (hard-deny: protected path family) and ready to merge -- all checks green.

Offending paths:

  • package-lock.json
  • package.json

Human merge (all 2 ready hard-denied PRs in Back-Road-Creative/rigscore):
sudo gh-merge-batch Back-Road-Creative/rigscore 418 419 --wait --yes

This PR alone:
sudo gh-merge-approved 418 --repo Back-Road-Creative/rigscore --wait --yes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs-operator Autoland hard-denied this PR; human merge required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant