An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group across 1 directory with 5 updates

Open
Number: #1
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 0
Created: June 29, 2025 at 03:18 PM UTC
(5 months ago)
Updated: June 29, 2025 at 03:18 PM UTC
(5 months ago)
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 3 updates in the /.github/actions/local-action directory: @actions/core, @octokit/plugin-paginate-rest and @actions/github.

Updates @actions/core from 1.5.0 to 1.9.1

Changelog

Sourced from @​actions/core's changelog.

1.9.1

  • Randomize delimiter when calling core.exportVariable

1.9.0

  • Added toPosixPath, toWin32Path and toPlatformPath utilities #1102

1.8.2

  • Update to v2.0.1 of @actions/http-client #1087

1.8.1

  • Update to v2.0.0 of @actions/http-client

1.8.0

1.7.0

1.6.0

Commits

Updates @octokit/plugin-paginate-rest from 2.16.3 to 9.2.2

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

  • pkg: pin @octokit/core peerDependency to v5 (#599) (5b84386)

v9.2.0

9.2.0 (2024-02-22)

Features

  • new /orgs/{org}/organization-roles/{role_id}/teams and /orgs/{org}/organization-roles/{role_id}/users endpoints (#594) (75aeaaf)

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

v9.1.2

9.1.2 (2023-10-26)

... (truncated)

Commits
  • e1e4489 fix: ReDos regex vulnerability, reported by @​DayShift (#660)
  • 5b84386 fix(pkg): pin @octokit/core peerDependency to v5 (#599)
  • fa01f94 ci(action): update actions/add-to-project action to v0.6.0 (#598)
  • 75aeaaf feat: new /orgs/{org}/organization-roles/{role_id}/teams and `/orgs/{org}/o...
  • 54d6bcf chore(deps): update dependency prettier to v3.2.5
  • 1bfa2f8 chore(deps): update dependency npm-run-all2 to v6
  • eb4a8fe chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0
  • 11ef779 chore(deps): update dependency esbuild to ^0.20.0
  • 2b6cc98 ci(action): update peter-evans/create-or-update-comment action to v4
  • d7c9de5 chore(deps): update dependency prettier to v3.2.4 (#588)
  • Additional commits viewable in compare view

Updates @actions/github from 5.0.0 to 6.0.1

Changelog

Sourced from @​actions/github's changelog.

6.0.1

  • Dependency updates #2043
  • Add context.runAttempt #1588

6.0.0

  • Support the latest Octokit in @​actions/github #1553
    • Drop support of NodeJS v14, v16

5.1.1

  • Export default octokit options #1188

5.1.0

  • Add additionalPlugins parameter to getOctokit method #1181
  • Dependency updates #1180

5.0.3

    • Update to v2.0.1 of @actions/http-client #1087

5.0.2

  • Update to v2.0.0 of @actions/http-client

5.0.1

Commits

Updates @octokit/request from 5.6.1 to 8.4.1

Release notes

Sourced from @​octokit/request's releases.

v8.4.1

8.4.1 (2025-02-15)

Bug Fixes

v8.4.0

8.4.0 (2024-04-09)

Features

v8.3.1

8.3.1 (2024-04-05)

Bug Fixes

  • upgrade @octokit/endpoint (4e7127c)

v8.3.0

8.3.0 (2024-04-05)

Bug Fixes

Features

v8.2.0

8.2.0 (2024-02-09)

Features

  • add documentation link in error message (#667) (dbfeab2)

v8.1.6

8.1.6 (2023-11-22)

Bug Fixes

... (truncated)

Commits
  • 356411e fix: ReDos regex vulnerability, reported by @​DayShift (#741)
  • abc4955 feat: re-add redirect request option (#636)
  • 4e7127c fix: upgrade @octokit/endpoint
  • 2e67925 feat(security): Add provenance (#685)
  • 6822e8b fix: upgrade @octokit/types
  • dbfeab2 feat: add documentation link in error message (#667)
  • c013de4 docs: fix spelling errors (#671)
  • 3d22c38 chore(deps): update dependency prettier to v3.2.5
  • 984ec17 chore(deps): update dependency esbuild to ^0.20.0
  • 2a9cf78 ci(action): update peter-evans/create-or-update-comment action to v4
  • Additional commits viewable in compare view

Updates @octokit/request-error from 2.1.0 to 5.1.1

Release notes

Sourced from @​octokit/request-error's releases.

v5.1.1

5.1.1 (2025-02-14)

Bug Fixes

v5.1.0

5.1.0 (2024-04-05)

Bug Fixes

  • upgrade @octokit/types to v13 (3af20bd)

Features

v5.0.1

5.0.1 (2023-09-23)

Bug Fixes

  • deps: update dependency @​octokit/types to v12 (#366) (590fc39)

v5.0.0

5.0.0 (2023-07-07)

Bug Fixes

  • deps: update dependency @​octokit/types to v11 (#348) (372097e)

BREAKING CHANGES

  • deps: upgrade @octokit/types to v11

v4.0.2

4.0.2 (2023-06-16)

Bug Fixes

  • deps: update dependency @​octokit/types to v10 (#343) (28b1958)

... (truncated)

Commits
  • b51ed27 test: ReDos regex vulnerability, reported by @​dayshift
  • 12a14f0 fix: ReDos regex vulnerability, reported by @​dayshift
  • 3af20bd fix: upgrade @octokit/types to v13
  • 94147e8 feat(security): Add provenance (#416)
  • 590fc39 fix(deps): update dependency @​octokit/types to v12 (#366)
  • 4b9c57e ci(action): update peter-evans/create-or-update-comment digest to 46da6c0
  • 710afc3 ci(action): update peter-evans/create-or-update-comment digest to 1f6c514
  • c82c8ce ci(action): update peter-evans/create-or-update-comment digest to 223779b
  • ec24ead ci(action): update peter-evans/create-or-update-comment digest to 46846e5 (#362)
  • 365f18d ci(action): update actions/checkout action to v4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+373
Deletions:
-107
Package Dependencies
Ecosystem:
npm
Version Change:
5.0.0 → 6.0.1
Update Type:
Major
Ecosystem:
npm
Version Change:
1.5.0 → 1.9.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
2.16.3 → 9.2.2
Update Type:
Major
Ecosystem:
npm
Version Change:
5.6.1 → 8.4.1
Update Type:
Major
Ecosystem:
npm
Version Change:
2.1.0 → 5.1.1
Update Type:
Major
Technical Details
ID: 2416630
UUID: 2627030529
Node ID: PR_kwDOPD2oWc6clU4B
Host: GitHub
Repository: Modrix27/reference-codeql-query
Merge State: Unknown