An open index of dependabot pull requests across open source projects.

chore(deps): bump @yao-pkg/pkg from 6.8.0 to 6.10.1

Open
Number: #937
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: November 24, 2025 at 05:06 AM UTC
(7 months ago)
Updated: November 24, 2025 at 06:37 AM UTC
(7 months ago)
Labels:
dependencies javascript
Description:

Bumps @yao-pkg/pkg from 6.8.0 to 6.10.1.

Release notes

Sourced from @​yao-pkg/pkg's releases.

Release 6.10.1

6.10.1 (2025-11-01)

Bug Fixes

  • avoid EEXIST on race condition in createDirRecursively and copyFolderRecursiveSync (#154) (36ea8b1)

Release 6.10.0

6.10.0 (2025-10-29)

Features

  • automatically create output directory with --sea option (#182) (68b19ec)
  • bump fetch 3.5.30 with node 24.11.0 and 22.21.1 (1853549)

Release 6.9.0

6.9.0 (2025-10-15)

Features

  • bump fetch with node 22.20.0 and 24.10.0 support (73fcf64)
Changelog

Sourced from @​yao-pkg/pkg's changelog.

6.10.1 (2025-11-01)

Bug Fixes

  • avoid EEXIST on race condition in createDirRecursively and copyFolderRecursiveSync (#154) (36ea8b1)

6.10.0 (2025-10-29)

Features

  • automatically create output directory with --sea option (#182) (68b19ec)
  • bump fetch 3.5.30 with node 24.11.0 and 22.21.1 (1853549)

6.9.0 (2025-10-15)

Features

  • bump fetch with node 22.20.0 and 24.10.0 support (73fcf64)

6.7.0 (2025-09-26)

Features

  • bump fetch v3.5.25 with node 20.19.5, 22.19.0, and 24.8.0, special thanks to @​faulpeltz (7ce1085)

Documentation

  • behavior of ignore on dotfiles (#170) (de1e819)
  • instructions for injecting Windows exe metadata (#174) (14e7df0)

6.6.0 (2025-07-19)

Features

  • pkg-fetch@3.5.24 with Node.js versions 20.19.4 and 22.17.1 (6a04030)

Documentation

  • add guidance on unsupported architectures to README.md (#160) (c22e442)

6.5.1 (2025-05-17)

Bug Fixes

  • bump pkg-fetch to address issues related to mismatching shas (8f38df7)

6.5.0 (2025-05-15)

Features

... (truncated)

Commits
  • eaa9ddf Release 6.10.1
  • 36ea8b1 fix: avoid EEXIST on race condition in createDirRecursively and copyFolderRec...
  • b46f5cb vhore: add GitHub Actions workflow for pkg development environment setup
  • be71fe7 Release 6.10.0
  • 1853549 feat: bump fetch 3.5.30 with node 24.11.0 and 22.21.1
  • 68b19ec feat: automatically create output directory with --sea option (#182)
  • cd7a545 Release 6.9.0
  • 73fcf64 feat: bump fetch with node 22.20.0 and 24.10.0 support
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[!NOTE]
Upgrade @yao-pkg/pkg from 6.8.0 to 6.10.1, updating lockfile and related pkg-fetch dependency.

  • Dependencies:
    • Bump @yao-pkg/pkg to 6.10.1 in pnpm-workspace.yaml and pnpm-lock.yaml.
    • Update transitive @yao-pkg/pkg-fetch to 3.5.30 and refresh lockfile entries.
    • Align TypeScript ESLint peer/version metadata in lockfile.

Written by Cursor Bugbot for commit 20391a2d623215be5561d62fe64b98eabf756ad6. Configure here.

Package Dependencies
Ecosystem:
npm
Version Change:
6.8.0 → 6.10.1
Update Type:
Minor
Technical Details
ID: 11309718
UUID: 3657100243
Node ID: PR_kwDOIREOSc61GwLp
Host: GitHub
Repository: SocketDev/socket-cli