build(deps): bump @tootallnate/once from 2.0.0 to 2.0.1

[dependabot]

Bumps @tootallnate/once from 2.0.0 to 2.0.1.

Release notes

Sourced from @​tootallnate/once's releases.

v2.0.1

Patch Changes

• a1e5e2d: Fix promise hang when AbortSignal is aborted

Changelog

Sourced from @​tootallnate/once's changelog.

2.0.1

Patch Changes

• a1e5e2d: Fix promise hang when AbortSignal is aborted

Commits

• bcbb21d ci: fix OIDC publishing — Node 24, npm latest, provenance
• dc24387 Version Packages (2.x) (#12)
• b8a6f80 CI: test all Node versions on Linux only
• dabcc0f ci: drop EOL Node.js 14.x/16.x, add 22.x
• b464efc Update CI: modern Node versions, fix macOS ARM64 compat
• a1e5e2d Fix promise hang when AbortSignal is aborted
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tootallnate/once since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[lifeomic-review-bot]

Scope

Dependabot updates only yarn.lock (canonical changedFiles): @tootallnate/once now resolves to 2.0.1 (patch from 2.0.0); no application or deploy config paths in scope.

CI

Required checks were pending when context was gathered; this review does not restate that as a code blocker—branch protection gates merge.

Regression risk

Patch release addresses a promise hang when an AbortSignal aborts; semver patch implies a narrow, low-blast-radius dependency fix with upside for abort-aware callers.

Upstream

Upstream: TooTallNate/once (package repo and release/compare references in Dependabot prMeta.body).

Bugbot coordination

existingComments supplied no inline, review, or issue threads; there was nothing to reconcile or dedupe from prior bot/human discussion in this artifact.

Residual risks / follow-ups

None — because the change set is lockfile-only for a transitive patch semver bump, securitySensitivePaths is empty (no deterministic high-touch escalation), §2.9 does not apply to dependency-only bumps without new app/config data sinks, and scope stays aligned with changedFiles.

This review was generated by review-bot.