chore(deps): bump the patch group across 1 directory with 30 updates by dependabot[bot] · Pull Request #720 · HarperFast/rocksdb-js

dependabot · 2026-07-23T05:23:50Z

Bumps the patch group with 2 updates in the / directory: tar and tsdown.

Updates tar from 7.5.20 to 7.5.21

Commits

0cd9cc3 7.5.21
631ae59 list: prevent unbounded recursion
See full diff in compare view

Updates tsdown from 0.22.9 to 0.22.13

Release notes

Commits

3e1fc63 chore: release v0.22.13
a6c8734 chore: upgrade deps
d30a730 feat(deps): support neverBundle: true to externalize all dependencies
d84c54a fix: prevent tinyexec from modifying PATH
bd7b522 chore: release v0.22.12
85f23ea feat(exe)!: standardize minimum Node.js version
3157082 refactor: reorganize UserConfig interface
466d756 chore: release v0.22.11
a6df89e ci: migrate Void deploy to GitHub OIDC (#1025)
346cb00 feat(deps): add resolveDepSubpath option (#1026)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-darwin-arm64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-darwin-arm64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-darwin-x64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-darwin-x64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-freebsd-x64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-freebsd-x64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-arm-gnu from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-arm-gnu's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-arm-musl from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-arm-musl's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-arm64-gnu from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-arm64-gnu's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-arm64-musl from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-arm64-musl's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-x64-gnu from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-x64-gnu's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-linux-x64-musl from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-linux-x64-musl's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-win32-arm64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-win32-arm64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-codegen/binding-win32-x64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-codegen/binding-win32-x64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-parser/binding-darwin-arm64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-parser/binding-darwin-arm64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI boundary (#136)
217133c 0.7.2
cf726dd fix(ci): publish workspace deps as semver ranges and keep bun.lock fresh (#135)
dc722dd 0.7.1
02f39d5 update deps
367e01c provide license field for binding packages (#133)
Additional commits viewable in compare view

Updates @yuku-parser/binding-darwin-x64 from 0.7.0 to 0.7.4

Release notes

Sourced from @yuku-parser/binding-darwin-x64's releases.

Commits

3329462 0.7.4
4f13964 refactor(tools): emit only referenced field slots in generated decoders
f9efca1 fix(wasm): pass pre-encoded source bytes through to the wasm bindings
8885864 0.7.3
2d4fba9 perf: speed up parse pipeline across the FFI...
Description has been truncated

Bumps the patch group with 2 updates in the / directory: [tar](https://github.com/isaacs/node-tar) and [tsdown](https://github.com/rolldown/tsdown). Updates `tar` from 7.5.20 to 7.5.21 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.20...v7.5.21) Updates `tsdown` from 0.22.9 to 0.22.13 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.9...v0.22.13) Updates `@yuku-codegen/binding-darwin-arm64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-darwin-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-freebsd-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-arm-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-arm-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-arm64-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-arm64-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-x64-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-linux-x64-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-win32-arm64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-codegen/binding-win32-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-darwin-arm64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-darwin-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-freebsd-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-arm-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-arm-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-arm64-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-arm64-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-x64-gnu` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-linux-x64-musl` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-win32-arm64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-parser/binding-win32-x64` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `@yuku-toolchain/types` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `postcss` from 8.5.20 to 8.5.22 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.20...8.5.22) Updates `rolldown-plugin-dts` from 0.27.12 to 0.27.13 - [Release notes](https://github.com/sxzz/rolldown-plugin-dts/releases) - [Commits](sxzz/rolldown-plugin-dts@v0.27.12...v0.27.13) Updates `yuku-ast` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `yuku-codegen` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) Updates `yuku-parser` from 0.7.0 to 0.7.4 - [Release notes](https://github.com/yuku-toolchain/yuku/releases) - [Commits](yuku-toolchain/yuku@v0.7.0...v0.7.4) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: tsdown dependency-version: 0.22.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-darwin-arm64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-darwin-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-freebsd-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-arm-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-arm-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-arm64-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-arm64-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-x64-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-linux-x64-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-win32-arm64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-codegen/binding-win32-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-darwin-arm64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-darwin-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-freebsd-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-arm-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-arm-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-arm64-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-arm64-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-x64-gnu" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-linux-x64-musl" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-win32-arm64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-parser/binding-win32-x64" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@yuku-toolchain/types" dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: postcss dependency-version: 8.5.22 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: rolldown-plugin-dts dependency-version: 0.27.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: yuku-ast dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: yuku-codegen dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: yuku-parser dependency-version: 0.7.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-23T05:24:16Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tsdown@0.22.13
	tar@7.5.21

View full report

cb1kenobi · 2026-07-23T05:43:35Z

    engines: {node: ^22.18.0 || >=24.0.0}
    cpu: [arm64]
    os: [linux]
-    libc: [glibc]


High: lockfile-wide loss of the libc platform constraint

This PR's lockfile diff removes the libc: field from every optional-dependency entry that had one — 48 lines removed, 0 added, taking the real occurrence count from 50 to 0 (the 2 remaining libc: matches in the new lockfile are unrelated detect-libc: 2.1.2 version strings). Most affected packages aren't part of the 30 patch bumps at all and have an unchanged version: @harperfast/rocksdb-js-linux-{arm64,x64}-{glibc,musl}@2.5.0 (this project's own native bindings), plus @oxfmt/*, @oxlint/*, @rolldown/binding-*, and @vitest/utils entries. Pairs such as @harperfast/rocksdb-js-linux-x64-glibc and @harperfast/rocksdb-js-linux-x64-musl now share identical cpu/os with no libc field left to tell pnpm which one belongs on a glibc vs musl Linux host — pnpm loses the ability to reliably pick the correct native binary at install time (e.g. on an Alpine/musl container). The newly-bumped @yuku-codegen/@yuku-parser 0.7.4 gnu/musl entries lose it too.

Suggested fix: regenerate the lockfile from a clean resolution (pnpm install --lockfile-only or pnpm dedupe) and confirm the libc fields reappear before merging; if they don't, this likely indicates a pnpm-version mismatch between whatever regenerated this lockfile and the project's expected pnpm version.

—
Generated by Barber AI

cb1kenobi · 2026-07-23T05:43:35Z

-    "tar": "7.5.20",
-    "tsdown": "0.22.9",
+    "tar": "7.5.21",
+    "tsdown": "0.22.13",


Medium: install currently fails the minimumReleaseAge supply-chain check

pnpm install --frozen-lockfile (and CI's actual install command, pnpm install --ignore-scripts --no-frozen-lockfile) both fail right now with ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION on 28 lockfile entries — the newly-bumped @yuku-codegen/* and @yuku-parser/* 0.7.4 bindings pulled in transitively by this tsdown bump, published 2026-07-22T17:35–17:37Z, inside the 24h minimumReleaseAge cutoff. Same pattern as #712/#714. retry-dependabot.yml will re-run the failed checks once the packages clear the 24h window, so this should self-resolve, but merging before then will fail install.

Suggested fix: no code change needed — hold this PR until the scheduled retry (or a manual re-run) after the packages age past 24h, consistent with the existing mitigation.

—
Generated by Barber AI

dependabot Bot added automated dependencies Pull requests that update a dependency file labels Jul 23, 2026

dependabot Bot requested a review from cb1kenobi as a code owner July 23, 2026 05:23

dependabot Bot added dependencies Pull requests that update a dependency file automated labels Jul 23, 2026

cb1kenobi reviewed Jul 23, 2026

View reviewed changes

cb1kenobi approved these changes Jul 23, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the patch group across 1 directory with 30 updates#720

chore(deps): bump the patch group across 1 directory with 30 updates#720
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-52a258f393

dependabot Bot commented on behalf of github Jul 23, 2026

Uh oh!

socket-security Bot commented Jul 23, 2026

Uh oh!

cb1kenobi Jul 23, 2026

Uh oh!

cb1kenobi Jul 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026

v0.22.13

🚀 Features

🐞 Bug Fixes

v0.22.12

🚨 Breaking Changes

v0.22.11

🚀 Features

v0.22.10

🚀 Features

🐞 Bug Fixes

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance

v0.7.2

🐞 Bug Fixes

v0.7.1

🚀 Features

🏎 Performance

v0.7.4

🐞 Bug Fixes

v0.7.3

🏎 Performance