Skip to content

chore(deps): omnibus dependency bumps#1502

Open
scasplte2 wants to merge 2 commits into
developfrom
chore/dependabot-omnibus
Open

chore(deps): omnibus dependency bumps#1502
scasplte2 wants to merge 2 commits into
developfrom
chore/dependabot-omnibus

Conversation

@scasplte2

Copy link
Copy Markdown
Contributor

Summary

Consolidates seven open Dependabot PRs into a single review surface so they can all be closed at once.

PR Package Path From To
#1496 follow-redirects root 1.15.11 1.16.0
#1493 follow-redirects action_scripts 1.15.11 1.16.0
#1492 axios action_scripts 1.13.6 1.15.0
#1491 axios root 1.13.6 1.15.0
#1488 lodash root 4.17.23 4.18.1
#1482 brace-expansion action_scripts 1.1.12 1.1.13
#1481 path-to-regexp action_scripts 0.1.12 0.1.13

package.json bumps the two direct deps (axios in both locations). Lockfiles were regenerated with npm install --package-lock-only, which resolved the transitive deps to current versions:

  • root: axios 1.16.0, follow-redirects 1.16.0, lodash 4.18.1
  • action_scripts: axios 1.16.0, follow-redirects 1.16.0, brace-expansion 1.1.13, path-to-regexp 0.1.13

The resolved versions are at-or-above what each individual Dependabot PR proposed.

Closes #1496, #1493, #1492, #1491, #1488, #1482, #1481.

Test plan

  • CI passes (lint + tests)
  • package.json direct-dep ranges still satisfied by resolved versions
  • No transitive downgrades vs. develop

🤖 Generated with Claude Code

Consolidates the following dependabot PRs:

- #1496 follow-redirects 1.15.11 -> 1.16.0 (root)
- #1493 follow-redirects 1.15.11 -> 1.16.0 (action_scripts)
- #1492 axios 1.13.6 -> 1.15.0 (action_scripts)
- #1491 axios 1.13.6 -> 1.15.0 (root)
- #1488 lodash 4.17.23 -> 4.18.1 (root)
- #1482 brace-expansion 1.1.12 -> 1.1.13 (action_scripts)
- #1481 path-to-regexp 0.1.12 -> 0.1.13 (action_scripts)

Resolved versions in the regenerated lockfiles:
- root: axios 1.16.0, follow-redirects 1.16.0, lodash 4.18.1
- action_scripts: axios 1.16.0, follow-redirects 1.16.0,
  brace-expansion 1.1.13, path-to-regexp 0.1.13

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant