FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump the npm-minor group with 7 updates by dependabot[bot] · Pull Request #3397 · github/codeql-action · GitHub

/ codeql-action Public

Bump the npm-minor group with 7 updates - #3397

Merged
mbg merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-70139cb906
Jan 19, 2026
ConversationCommits (2)ChecksFiles changed
Merged

Bump the npm-minor group with 7 updates#3397
mbg merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-70139cb906

Conversation

dependabot Bot commented on behalf of github Jan 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 7 updates:

Package From To
@actions/artifact 5.0.1 5.0.2
@actions/cache 5.0.1 5.0.2
@actions/core 2.0.1 2.0.2
@actions/http-client 3.0.0 3.0.1
@eslint/compat 2.0.0 2.0.1
@typescript-eslint/eslint-plugin 8.52.0 8.53.0
@typescript-eslint/parser 8.52.0 8.53.0

Updates @actions/artifact from 5.0.1 to 5.0.2

Changelog

Sourced from @​actions/artifact's changelog.

@​actions/artifact Releases

Commits

Updates @actions/cache from 5.0.1 to 5.0.2

Changelog

Sourced from @​actions/cache's changelog.

@​actions/cache Releases

Commits

Updates @actions/core from 2.0.1 to 2.0.2

Changelog

Sourced from @​actions/core's changelog.

@​actions/core Releases

Commits

Updates @actions/http-client from 3.0.0 to 3.0.1

Changelog

Sourced from @​actions/http-client's changelog.

3.0.1

  • Add support for ACTIONS_ORCHESTRATION_ID in user-agent and default user-agent #2229
Commits Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​actions/http-client since your current version.


Updates @eslint/compat from 2.0.0 to 2.0.1

Release notes

Sourced from @​eslint/compat's releases.

compat: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1

migrate-config: v2.0.1

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.0 to ^2.0.1
    • devDependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Changelog

Sourced from @​eslint/compat's changelog.

2.0.1 (2026-01-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.0.0 to ^1.0.1
Commits

Updates @typescript-eslint/eslint-plugin from 8.52.0 to 8.53.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

  • eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
  • eslint-plugin: add rule [strict-void-return] (#9707)
  • project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

  • eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
  • eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
  • typescript-estree: forbid type-only import with both default and named specifiers (#11930)
  • typescript-estree: fix syntax check for using declaration (#11910)
  • typescript-estree: forbid invalid class implements (#11934)
  • typescript-estree: forbid invalid "import equals" declaration (#11936)
  • typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.53.0 (2026-01-12)

🚀 Features

  • eslint-plugin: add rule [strict-void-return] (#9707)
  • eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)

🩹 Fixes

  • eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
  • eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
  • typescript-estree: forbid invalid extends and implements in interface declaration (#11935)
  • typescript-estree: forbid invalid class implements (#11934)
  • typescript-estree: forbid type-only import with both default and named specifiers (#11930)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • 3021ede chore(release): publish 8.53.0
  • 722ab62 fix(eslint-plugin): [no-useless-default-assignment] fix false positive for pa...
  • 92fcf3e feat(eslint-plugin): add rule [strict-void-return] (#9707)
  • 3fb0381 docs(eslint-plugin): [no-useless-default-assignment] fix misformatted link (#...
  • 62ee26e feat(eslint-plugin): [no-unused-vars] add a fixer to remove unused imports (#...
  • c4d5a56 fix(eslint-plugin): replace unclear "error typed" with more helpful descrip...
  • 3ac7735 fix(typescript-estree): forbid invalid extends and implements in interfac...
  • a8b924b fix(typescript-estree): forbid invalid class implements (#11934)
  • a98ec1f fix(typescript-estree): forbid type-only import with both default and named s...
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.52.0 to 8.53.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.53.0

8.53.0 (2026-01-12)

🚀 Features

  • eslint-plugin: [no-unused-vars] add a fixer to remove unused imports (#11922)
  • eslint-plugin: add rule [strict-void-return] (#9707)
  • project-service: allow passing Partial<ts.server.ServerHost> to project service (#11932)

🩹 Fixes

  • eslint-plugin: replace unclear "error typed" with more helpful description (#11704)
  • eslint-plugin: [no-useless-default-assignment] fix false positive for parameters corresponding to a rest parameter (#11916)
  • typescript-estree: forbid type-only import with both default and named specifiers (#11930)
  • typescript-estree: fix syntax check for using declaration (#11910)
  • typescript-estree: forbid invalid class implements (#11934)
  • typescript-estree: forbid invalid "import equals" declaration (#11936)
  • typescript-estree: forbid invalid extends and implements in interface declaration (#11935)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.53.0 (2026-01-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits
Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@eslint/compat [>= 1.2.a, < 1.3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bump the npm-minor group with 7 updates
c8914af 
Bumps the npm-minor group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `5.0.1` | `5.0.2` |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.0.1` | `5.0.2` |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.1` | `2.0.2` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `3.0.0` | `3.0.1` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.52.0` | `8.53.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.52.0` | `8.53.0` |


Updates `@actions/artifact` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact)

Updates `@actions/cache` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@actions/core` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/http-client` from 3.0.0 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@typescript-eslint/eslint-plugin` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/cache"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/core"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Jan 12, 2026
dependabot Bot requested a review from a team as a code owner January 12, 2026 21:53
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Jan 12, 2026
github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Jan 12, 2026

github-actions Bot commented Jan 12, 2026

Copy link
Copy Markdown
Contributor

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

github-actions Bot marked this pull request as draft January 12, 2026 21:55
mbg marked this pull request as ready for review January 19, 2026 11:24
Copilot AI review requested due to automatic review settings January 19, 2026 11:24
mbg enabled auto-merge January 19, 2026 11:24
Copilot AI reviewed Jan 19, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

This PR updates 7 npm dependencies in the npm-minor group, including @actions toolkit packages and TypeScript ESLint packages. The changes include version bumps in package.json and corresponding updates in package-lock.json. The generated JavaScript files in the lib/ directory reflect these dependency updates through bundled code.

Changes:

  • Updated @actions packages (artifact, cache, core, http-client) to latest patch versions
  • Updated @eslint/compat and @eslint/core to latest patch versions
  • Updated @typescript-eslint/eslint-plugin to 8.53.0

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 1 comment.

File Description
package.json Updated dependency versions for 6 packages in dependencies and devDependencies
package-lock.json Resolved and locked all transitive dependency updates corresponding to package.json changes
lib/*.js Generated JavaScript bundles reflecting the updated dependencies (not reviewed per coding guidelines)

Comment thread package.json
"@types/sinon": "^21.0.0",
"@typescript-eslint/eslint-plugin": "^8.52.0",
"@typescript-eslint/eslint-plugin": "^8.53.0",
"@typescript-eslint/parser": "^8.48.0",

Copilot AI Jan 19, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

The @typescript-eslint/parser version in package.json remains at ^8.48.0 and was not updated, but @typescript-eslint/eslint-plugin was updated to ^8.53.0 on line 64. This creates a version mismatch between the two related packages. According to the @typescript-eslint/eslint-plugin peerDependencies (visible in package-lock.json line 2287), it requires "@typescript-eslint/parser": "^8.53.0", but package.json specifies ^8.48.0. This mismatch could lead to peer dependency warnings or compatibility issues.

Suggested change
"@typescript-eslint/parser": "^8.48.0",
"@typescript-eslint/parser": "^8.53.0",

Copilot uses AI. Check for mistakes.
mbg merged commit f687ebf into main Jan 19, 2026
240 checks passed
mbg deleted the dependabot/npm_and_yarn/npm-minor-70139cb906 branch January 19, 2026 11:46
This was referenced Jan 23, 2026
Merged
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
mbg mbg approved these changes

Assignees

No one assigned

Labels

size/XS Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL