Repository navigation
chore(deps-dev): bump the npm-minor-patch group across 1 directory with 2 updates - #20
Merged
TheStreamCode merged 1 commit intoOct 14, 2026
Conversation
dependabot
Bot
added
the
dependencies
6 of 8 tasks
TheStreamCode
added a commit
that referenced
this pull request
Oct 14, 2026
## Summary Fixes the failing pm audit gate on CI. The full-tree audit ( pm audit --audit-level=high) fails with 1 high-severity advisory on transitive �race-expansion 5.0.9 (GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p), reached via eslint -> minimatch -> brace-expansion. Unblocks #19 and #20, which fail on the same gate for the same pre-existing reason. ## Changes - package-lock.json: �race-expansion 5.0.9 -> 5.0.12 via pm audit fix (3 lines, no package.json change, no runtime code touched) ## Testing - [x] pm run lint && npm test passes (178 pass, 0 fail, 2 skipped) - [x] Tested on Windows - [ ] Tested on macOS / Linux (covered by the CI matrix) - [ ] Verified with at least one real provider (N/A: lockfile-only change, no runtime behavior affected) - [x] pm audit --audit-level=high and pm audit --omit=dev --audit-level=high both report 0 vulnerabilities ## Checklist - [x] PR is focused on a single concern - [x] README.md updated if user-facing behavior changed (N/A: no behavior change) - [x] No API keys or credentials in code or examples - [x] New provider entries document the base URL, model behavior, and authentication requirements (N/A: no provider changes) - [x] Credential environment names are registered and tested when authentication is required (N/A) ## Notes - After merge, re-running checks on #19 and #20 (or rebasing them) should turn them green.
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-minor-patch-85f0e6eacf
branch
2 times, most recently
from
October 14, 2026 19:16
ef07dc9 to
5953306
Compare
…th 2 updates Bumps the npm-minor-patch group with 2 updates in the / directory: [eslint](https://github.com/eslint/eslint) and [globals](https://github.com/sindresorhus/globals). Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `globals` from 17.12.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.12.0...v17.13.0) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/npm-minor-patch-85f0e6eacf
branch
from
October 14, 2026 19:18
5953306 to
d3d2183
Compare
TheStreamCode
deleted the
dependabot/npm_and_yarn/npm-minor-patch-85f0e6eacf
branch
October 14, 2026 20:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-patch group with 2 updates in the / directory: eslint and globals.
Updates
eslintfrom 10.11.0 to 10.12.0Release notes
Sourced from eslint's releases.
Commits
a438ec310.12.032a73f1Build: changelog update for 10.12.0bc51eeefix:prefer-arrow-callbackfalse positive in conditional test (#21373)bbff86cfix: skip lines with multiple comments inmax-lines-per-function(#21332)152067fchore: update ecosystem plugins (#21362)b56d58echore: update github/codeql-action action to v4.38.2 (#21376)67eb586docs: Update READMEbfaea12perf: cache normalized config globals per languageOptions (#21364)322209eci: avoid Nx cache in ecosystem tests and disable failing test (#21369)d166567chore: update dependency prettier to v3.9.9 (#21371)Updates
globalsfrom 17.12.0 to 17.13.0Release notes
Sourced from globals's releases.
Commits
ce512bc17.13.0b007369Update globals (2026-10-01) (#354)16cb1feMeta tweaks