build(deps-dev): bump @humanfs/node from 0.16.7 to 0.16.8 - #928
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) from 0.16.7 to 0.16.8. - [Release notes](https://github.com/humanwhocodes/humanfs/releases) - [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node) --- updated-dependencies: - dependency-name: "@humanfs/node" dependency-version: 0.16.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
✅ Deploy Preview for phillips-seldon ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Copilot wasn't able to review any files in this pull request.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
![phillips-pr-review-agent[bot]](https://avatars.githubusercontent.com/u/12517380?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependabot bump: @humanfs/node 0.16.7 → 0.16.8
I would approve this PR. This is a safe, low-risk patch update.
What changed (package-lock.json only):
| Package | Old | New |
|---|---|---|
@humanfs/node |
0.16.7 | 0.16.8 |
@humanfs/core (transitive) |
0.19.1 | 0.19.2 |
@humanfs/types (new transitive) |
— | 0.15.0 |
Assessment:
- All three packages are marked
"dev": true— they are never included in the published@phillips/seldonnpm package or any end-user bundle. @humanfs/nodeis used by ESLint 9's flat-config file-system layer — it has no presence insrc/, component code, or test utilities.- The two upstream fixes (symlinks copied correctly in
copy()/copyAll(); type dependencies included at runtime) are purely internal to ESLint's file handling and have no impact on component tests, the Vite build, or the published artefact. - The addition of
@humanfs/typesas a runtime dependency of@humanfs/coreis the primary structural change — it ensures type information is available at runtime rather than only at compile time, which resolves the upstream issue #145. - No
package.jsondependenciesorpeerDependenciesare touched; no lockfile resolution conflicts; Dependabot compatibility score is included in the PR body.
No concerns. Safe to merge.
davidicus
left a comment
davidicus
left a comment
There was a problem hiding this comment.
@dependabot squash and merge
|
Tip All tests passed and all changes approved!🟢 UI Tests: 490 tests unchanged |
|
🚀 Storybook preview is ready. • Preview: undefined |
Dependency Upgrade Risk Assessment:
|
| Factor | Assessment |
|---|---|
| Version change | Patch only (0.16.7 → 0.16.8) |
| Breaking changes | None |
| Usage scope | Dev dependency — not in consumer bundle |
| Codebase impact | Transitively used by ESLint tooling only; no direct usage in component or build code |
| Nature of changes | Pure bug fixes (type resolution + symlink handling) |
| Test coverage | Bug fixes with upstream tests; no API changes |
This library is only exercised during local development and CI linting passes. The fixes in this patch are defensive improvements to internal type handling and file copy behavior, neither of which surface to the component library consumers or the UI.
Suggested Regression Tests
Before merging, confirm the following:
- Run
npm run lint(or the equivalent ESLint command) to verify ESLint's flat config still loads and runs successfully with no errors related to file system operations - Run
npm run buildto confirm the component library builds without errors - Run
npm run testto confirm all unit tests pass - Run
npm run typecheckto confirm TypeScript compilation is clean - Verify CI passes on this PR (lint, build, test, typecheck stages)
No functional or UI regression testing is needed — this upgrade affects only dev tooling, not runtime component behavior.
https://claude.ai/code/session_015iuCxz7YJ2LMxRyxArHX25
Generated by Claude Code
Bumps @humanfs/node from 0.16.7 to 0.16.8.
Release notes
Sourced from @humanfs/node's releases.
Changelog
Sourced from @humanfs/node's changelog.
Commits
e96070echore: release main (#146)22bbaa4Merge commit from fork956ce7afix: Include type dependencies at runtimeDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.