An open index of dependabot pull requests across open source projects.

Bump the npm group across 3 directories with 4 updates

Merged
Number: #3642
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: October 03, 2025 at 12:37 AM UTC
(2 months ago)
Updated: October 03, 2025 at 12:39 AM UTC
(2 months ago)
Merged: October 03, 2025 at 12:39 AM UTC
(2 months ago)
by github-actions[bot]
Time to Close: 1 minute
Labels:
dependencies javascript
Assignees:
poad
Description:

Bumps the npm group with 4 updates in the /example/app directory: @types/node, pnpm, electron-to-chromium and tapable.
Bumps the npm group with 2 updates in the /example/cdk directory: @types/node and pnpm.
Bumps the npm group with 2 updates in the /package directory: @types/node and pnpm.

Updates @types/node from 24.6.1 to 24.6.2

Commits

Updates pnpm from 10.17.1 to 10.18.0

Release notes

Sourced from pnpm's releases.

pnpm 10.18

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.18.0

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.
Commits

Updates electron-to-chromium from 1.5.228 to 1.5.229

Commits

Updates tapable from 2.2.3 to 2.3.0

Release notes

Sourced from tapable's releases.

v2.3.0

Features

  • [TYPES] Added TypedHookMap type.
Commits

Updates @types/node from 24.6.1 to 24.6.2

Commits

Updates pnpm from 10.17.1 to 10.18.0

Release notes

Sourced from pnpm's releases.

pnpm 10.18

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.18.0

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.
Commits

Updates @types/node from 24.6.1 to 24.6.2

Commits

Updates pnpm from 10.17.1 to 10.18.0

Release notes

Sourced from pnpm's releases.

pnpm 10.18

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.

Platinum Sponsors

Gold Sponsors

... (truncated)

Changelog

Sourced from pnpm's changelog.

10.18.0

Minor Changes

  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #10025.

Patch Changes

  • Retry filesystem operations on EAGAIN errors #9959.
  • Outdated command respects minimumReleaseAge configuration #10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #10037.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
6
Additions:
+50
Deletions:
-50
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
24.6.1 → 24.6.2
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.5.228 → 1.5.229
Update Type:
Patch
Package:
pnpm
Ecosystem:
npm
Version Change:
10.17.1 → 10.18.0
Update Type:
Minor
Package:
tapable
Ecosystem:
npm
Version Change:
2.2.3 → 2.3.0
Update Type:
Minor
Technical Details
ID: 9254983
UUID: 2883443734
Node ID: PR_kwDOH6QSIM6r3dwW
Host: GitHub
Repository: poad/github-cognito-oidc-proxy
Merge State: Unknown