Skip to content

chore(monorepo): update auto-merge non-major dependencies - #6

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies
Open

chore(monorepo): update auto-merge non-major dependencies#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jan 3, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@microsoft/api-extractor (source) ^7.49.2 → ^7.58.12 age confidence pnpm.catalog.default minor
@nx/devkit (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/eslint-plugin (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/jest (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/js (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/plugin (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/workspace (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@swc-node/register 1.11.1 → 1.12.1 age confidence pnpm.catalog.default minor
@swc/core (source) 1.15.8 → 1.15.47 age confidence pnpm.catalog.default patch
@swc/helpers (source) 0.5.19 → 0.5.23 age confidence pnpm.catalog.default patch
@swc/wasm ^1.11.24 → ^1.15.47 age confidence pnpm.catalog.default minor
@types/web ^0.0.302 → ^0.0.354 age confidence pnpm.catalog.default patch
cookie >=0.7.0 → >=0.7.2 age confidence pnpm-workspace.overrides patch
debug >=4.4.0 → >=4.4.3 age confidence pnpm-workspace.overrides patch
defu ^6.1.4 → ^6.1.7 age confidence pnpm.catalog.default patch
follow-redirects >=1.15.9 → >=1.16.0 age confidence pnpm-workspace.overrides minor
got >=14.4.5 → >=14.6.6 age confidence pnpm-workspace.overrides minor
jiti ^2.4.2 → ^2.7.0 age confidence pnpm.catalog.default minor
markdown-it >=14.1.0 → >=14.3.0 age confidence pnpm-workspace.overrides minor
node (source) 24.11.1 → 24.18.1 age confidence minor
node (source) >=24.11.1 → >=24.18.1 age confidence engines minor
node-addon-api ^8.8.0 → ^8.9.1 age confidence pnpm.catalog.default minor
node-gyp ^13.0.0 → ^13.0.1 age confidence pnpm.catalog.default patch
parse-path >=7.0.0 → >=7.1.0 age confidence pnpm-workspace.overrides minor
path-to-regexp >=0.1.12 → >=0.2.5 age confidence pnpm-workspace.overrides minor
pnpm (source) 10.26.0 → 10.34.5 age confidence packageManager minor
pnpm (source) >=10.24.0 → >=10.34.5 age confidence engines minor
shell-quote >=1.8.2 → >=1.10.0 age confidence pnpm-workspace.overrides minor
simple-git (source) >=3.27.0 → >=3.36.0 age confidence pnpm-workspace.overrides minor
ts-jest (source) 29.4.6 → 29.4.12 age confidence pnpm.catalog.default patch
tsup (source) ^8.3.5 → ^8.5.1 age confidence pnpm.catalog.default minor
unbuild ^3.3.1 → ^3.6.1 age confidence pnpm.catalog.default minor
verdaccio (source) 6.6.2 → 6.9.0 age confidence pnpm.catalog.default minor

Release Notes

microsoft/rushstack (@​microsoft/api-extractor)

v7.58.12

Compare Source

Tue, 21 Jul 2026 02:53:22 GMT

Patches
  • Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.

v7.58.11

Compare Source

Fri, 17 Jul 2026 00:15:59 GMT

Version update only

v7.58.10

Compare Source

Thu, 16 Jul 2026 00:16:13 GMT

Version update only

v7.58.9

Compare Source

Sat, 13 Jun 2026 00:16:18 GMT

Version update only

v7.58.8

Compare Source

Mon, 08 Jun 2026 15:15:49 GMT

Patches
  • Add support for new d.ts extension format when using TS moduleResolution 'bundler' or 'nodenext'.

v7.58.7

Compare Source

Mon, 20 Apr 2026 23:31:13 GMT

Version update only

v7.58.6

Compare Source

Mon, 20 Apr 2026 15:15:24 GMT

Patches
  • Fix an issue where empty lines were included in DTS rollups in place of API items that were trimmed.

v7.58.5

Compare Source

Sat, 18 Apr 2026 03:47:10 GMT

Version update only

v7.58.4

Compare Source

Sat, 18 Apr 2026 00:15:16 GMT

Patches
  • Bump semver.

v7.58.3

Compare Source

Fri, 17 Apr 2026 15:14:57 GMT

Patches
  • Remove dependecy on lodash.

v7.58.2

Compare Source

Thu, 09 Apr 2026 00:15:07 GMT

Version update only

v7.58.1

Compare Source

Sat, 04 Apr 2026 00:14:00 GMT

Patches

v7.58.0

Compare Source

Wed, 01 Apr 2026 15:13:38 GMT

Minor changes
  • Upgrade the bundled compiler engine to TypeScript 5.9.3

v7.57.8

Compare Source

Tue, 31 Mar 2026 15:14:14 GMT

Version update only

v7.57.7

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches
  • Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

v7.57.6

Compare Source

Wed, 25 Feb 2026 21:39:42 GMT

Patches

v7.57.5

Compare Source

Wed, 25 Feb 2026 00:34:29 GMT

Version update only

v7.57.4

Compare Source

Tue, 24 Feb 2026 01:13:27 GMT

Version update only

v7.57.3

Compare Source

Mon, 23 Feb 2026 00:42:21 GMT

Patches
  • Add missing "./extends/*.json" to the package.json "exports" field so that "@​microsoft/api-extractor/extends/tsdoc-base.json" is importable.

v7.57.2

Compare Source

Fri, 20 Feb 2026 16:14:49 GMT

Patches
  • Bump minimatch from 10.1.2 to 10.2.1

v7.57.1

Compare Source

Fri, 20 Feb 2026 00:15:03 GMT

Patches
  • Add "node" condition before "import" in the "exports" map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via "import". Fixes #​5644.

v7.57.0

Compare Source

Thu, 19 Feb 2026 00:04:52 GMT

Minor changes
  • Normalize package layout. CommonJS is now under lib-commonjs, DTS is now under lib-dts, and ESM is now under lib-esm. Imports to lib still work as before, handled by the "exports" field in package.json.

v7.56.3

Compare Source

Sat, 07 Feb 2026 01:13:26 GMT

Patches
  • Upgrade lodash dependency from ~4.17.15 to ~4.17.23.

v7.56.2

Compare Source

Wed, 04 Feb 2026 20:42:47 GMT

Patches
  • Update minimatch dependency from 10.0.3 to 10.1.2

v7.56.1

Compare Source

Wed, 04 Feb 2026 16:13:27 GMT

Version update only

v7.56.0

Compare Source

Fri, 30 Jan 2026 01:16:12 GMT

Minor changes
  • Fix an issue where destructured parameters produced an incorrect parameter name

v7.55.5

Compare Source

Thu, 08 Jan 2026 01:12:30 GMT

Patches
  • Fix missing 'export' keyword for namespace re-exports that produced invalid TypeScript output

v7.55.2

Compare Source

Sat, 06 Dec 2025 01:12:28 GMT

Version update only

v7.55.1

Compare Source

Fri, 21 Nov 2025 16:13:56 GMT

Version update only

v7.55.0

Compare Source

Wed, 12 Nov 2025 01:12:56 GMT

Minor changes
  • Bump the @microsoft/tsdoc dependency to ~0.16.0.
  • Bump the @microsoft/tsdoc-config dependency to ~0.18.0.

v7.54.0

Compare Source

Tue, 04 Nov 2025 08:15:14 GMT

Minor changes
  • Add a new setting IExtractorInvokeOptions.printApiReportDiff that makes build logs easier to diagnose by printing a diff of any changes to API report files (*.api.md).
  • Add a --print-api-report-diff CLI flag that causes a diff of any changes to API report files (*.api.md) to be printed.

v7.53.3

Compare Source

Fri, 24 Oct 2025 00:13:38 GMT

Version update only

v7.53.2

Compare Source

Wed, 22 Oct 2025 00:57:54 GMT

Version update only

v7.53.1

Compare Source

Wed, 08 Oct 2025 00:13:28 GMT

Version update only

v7.53.0

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes
  • Normalize import of builtin modules to use the node: protocol.

v7.52.15

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

v7.52.14

Compare Source

Tue, 30 Sep 2025 20:33:51 GMT

Version update only

v7.52.13

Compare Source

Fri, 12 Sep 2025 15:13:07 GMT

Patches
  • Fixes a bug in ExtractorAnalyzer._isExternalModulePath where type import declarations were not resolved.

v7.52.12

Compare Source

Thu, 11 Sep 2025 00:22:31 GMT

Version update only

v7.52.11

Compare Source

Tue, 19 Aug 2025 20:45:02 GMT

Patches
  • Fix self-package import resolution by removing outDir/declarationDir from compiler options

v7.52.10

Compare Source

Fri, 01 Aug 2025 00:12:48 GMT

Patches
  • Upgrades the minimatch dependency from ~3.0.3 to 10.0.3 across the entire Rush monorepo to address a Regular Expression Denial of Service (ReDoS) vulnerability in the underlying brace-expansion dependency.

v7.52.9

Compare Source

Wed, 23 Jul 2025 20:55:57 GMT

Version update only

v7.52.8

Compare Source

Tue, 13 May 2025 02:09:20 GMT

Patches
  • Fixes API extractor error handling when changed APIs are encountered and the "--local" flag is not specified

v7.52.7

Compare Source

Thu, 01 May 2025 15:11:33 GMT

Patches
  • Fix an issue where default exports were sometimes trimmed incorrectly in .api.md files when using reportVariants (GitHub #​4775)

v7.52.6

Compare Source

Thu, 01 May 2025 00:11:12 GMT

Version update only

v7.52.5

Compare Source

Mon, 21 Apr 2025 22:24:25 GMT

Version update only

v7.52.4

Compare Source

Thu, 17 Apr 2025 00:11:21 GMT

Patches
  • Update documentation for extends

v7.52.3

Compare Source

Fri, 04 Apr 2025 18:34:35 GMT

Patches
  • Add support for customizing which TSDoc tags appear in API reports

v7.52.2

Compare Source

Tue, 25 Mar 2025 15:11:15 GMT

Version update only

v7.52.1

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

v7.52.0

Compare Source

Tue, 11 Mar 2025 00:11:25 GMT

Minor changes
  • Upgrade the bundled compiler engine to TypeScript 5.8.2

v7.51.1

Compare Source

Sat, 01 Mar 2025 05:00:09 GMT

Patches
  • Include triple-slash references marked with preserve="true" from files that only contain re-exports. There was a behavior change in TypeScript 5.5, where only triple-slash references that are explicitly marked with preserve="true" are emitted into declaration files. This change adds support for placing these references in files that only contain re-exports, like the API entrypoint file.

v7.51.0

Compare Source

Thu, 27 Feb 2025 01:10:39 GMT

Minor changes
  • Add a docModel.releaseTagsToTrim property to api-extractor.json to specify which release tags should be trimmed when the doc model is produced.

v7.50.1

Compare Source

Sat, 22 Feb 2025 01:11:11 GMT

Patches
  • Upgrade the bundled compiler engine to TypeScript 5.7.3

v7.50.0

Compare Source

Wed, 12 Feb 2025 01:10:52 GMT

Minor changes
  • Update merge behavior for derived configurations to allow overriding array properties
nrwl/nx (@​nx/devkit)

v23.1.1

Compare Source

23.1.1 (2026-07-30)
🚀 Features
  • core: derive stable repo key from normalized remote and relative path (#​36439)
  • repo: add react + vite + vitest + playwright example (#​35921)
🩹 Fixes
  • angular-rspack: speed up builds and align behavior with the esbuild application builder (#​36268, #​34936)
  • bundling: support TypeScript esbuildConfig files in the esbuild executor (#​36352, #​36349)
  • bundling: acknowledge @​swc/core build scripts when configuring rollup (#​36412)
  • core: speed up npm lockfile parsing (#​36216)
  • core: speed up lockfile parsing and catalog resolution (#​36223)
  • core: show performance report recommendations only when actionable (#​36344)
  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#​36280)
  • core: prevent shell injection in nx import (#​36348)
  • core: correct the 22.6.0 gitignore and analytics migration wiring (#​36356)
  • core: support npm 12 and pnpm in the package provenance check (#​36354, #​36338)
  • core: honor pnpm minimumReleaseAge config on pnpm 11 (#​36335, #​36330)
  • core: support pnpm 11 patched dependency hashes (#​36360)
  • core: resolve name refs copied into pattern-matched target arrays (#​36359)
  • core: resolve source-loaded plugin transitive workspace imports (#​36296)
  • core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#​36302)
  • core: include continuous and default-config dependencies in show target (#​36374)
  • core: make unit tests pass locally regardless of invoking package manager (#​35994)
  • core: respect --aiAgents none to skip AI agent file generation (#​34944, #​34692)
  • core: use --config.frozen-lockfile=false for pnpm add during migrate (#​36337)
  • core: run selected projects with --exclude-task-dependencies (#​35562)
  • core: stop passing git revisions through a shell in affected commands (#​36379)
  • core: collect trickling watcher bursts fully on daemon force-flush (#​36391)
  • core: report tasks running in another Nx process in the inline TUI (#​36341)
  • core: stop ratatui cursor queries from racing the TUI event stream (#​36318)
  • core: render critical-path tasks as a nested list in the job summary (#​36394)
  • core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#​36411)
  • core: support multiple brace groups in workspace glob matching (#​36395)
  • core: handle CRLF line endings in pnpm multi-document lockfiles (#​36419, #​35828, #​35840)
  • core: correct glob pattern expansion for ZeroOrOne groups (#​31857)
  • core: stop re-querying confirmed cache misses in task orchestrator (#​36301, #​35632)
  • core: sample project graph perf span telemetry per session at 10% (#​36420)
  • core: strip terminal query sequences when replaying task output (#​36432)
  • core: preserve FORCE_COLOR=0 intent for forked child tasks (#​35293)
  • core: handle colons in target name when resolving inputs to generate graph (#​36429, #​33710)
  • core: merge default plugins through the source-map-aware merge path (#​36257)
  • core: keep nx migrate on the requested version when release-age gates interfere (#​36444)
  • core: avoid bogus duplicate project name errors when generating nested apps (#​36458)
  • core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#​36497)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#​36507, #​36474)
  • core: parse pnpm lockfiles that omit the packages block (#​36512)
  • core: keep real dependencies when omitting peers from npm temp installs (#​36518)
  • devkit: resolve ensurePackage against the workspace (#​36496)
  • docker: run release pipeline docker commands without a shell (#​36505)
  • js: support private methods and static blocks in babel preset (#​36218, #​36205)
  • js: parse pnpm/npm publish JSON containing braces in file paths (#​36241, #​36236)
  • js: resolve the verdaccio bin through its package.json (#​36479)
  • js: resolve package and extension-less tsconfig extends read from the tree (#​36271)
  • linter: keep override parser when convert-to-flat-config uses FlatCompat (#​36363)
  • linter: use projectService for typed linting in flat configs (#​35727)
  • misc: resolve CSS url() assets on Windows in postcss-cli-resources (#​36353, #​36336)
  • misc: suppress outdated disclaimer for unsupported AI agents with AGENTS.md (#​36324, #​36264)
  • misc: bump ci-workflow generator to node 24 and current action majors (#​36364)
  • misc: preserve package alias keys in generated package.json (#​35207)
  • misc: prevent crash when opening browser in Podman+WSL container (#​34639)
  • module-federation: do not cache static remote assets in the dev-server plugin (#​36279, #​36278)
  • module-federation: strip version suffix from npm dependency names for bun compatibility (#​34960)
  • react-native: include migration docs in the built package (#​36378)
  • release: only extract body issue references linked via closing keywords (#​36326, #​123)
  • release: align VersionDataEntry dependency types with VersionActions to allow null values (#​35932, #​35913)
  • repo: bump decompress to safe version (#​36333)
  • repo: drop stale e2e dependsOn overrides that omit the local registry (#​36482)
  • repo: serialize cypress installs and skip the binary when unused (#​36493)
  • rspack: lazy-load @​rspack/core in create-compiler to avoid eager ESM resolution (#​36476)
  • storybook: update configuration generator nx.json (#​34880, #​34879)
  • testing: add @​swc/core when configuring jest with the swc compiler (#​36409)
  • vite: prevent watch false leaking into dev server config (#​36080, #​36078)
  • vitest: honor watch config and keep --ui open in the test executor (#​36237, #​30263)
  • vitest: generate root vitest.config.ts instead of deprecated vitest.workspace (#​36316, #​36311)
  • vitest: prevent out-of-memory crash during atomized test graph creation (#​36339, #​36315)
  • webpack: disable extractComments on the swc terser minimizer (#​36238, #​36233)
  • webpack: bundle non-buildable library subpaths with fallback-array exports (#​36313, #​36309)
  • webpack: propagate watch option from executor to webpack config (#​34927, #​22945)
❤️ Thank You

v23.1.0

Compare Source

23.1.0 (2026-07-13)
🚀 Features
🩹 Fixes
  • angular: resolve esbuild option paths relative to the workspace root (#​36017, #​35936)
  • angular: bump prescribed angular version to 22.0.4 (#​36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#​36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#​36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#​36057, #​35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#​36217, #​35017)
  • core: avoid tsconfig path false positives for sibling project roots (#​35796, #​35795, #​35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#​36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#​36051)
  • core: format AI-edited files after agentic migrations (#​36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#​36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#​36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#​36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#​36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#​35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#​36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#​36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#​36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#​36132, #​36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#​35666, #​35635)
  • core: support ${configDir} in tsconfig path alias resolution (#​36037, #​35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#​36020, #​35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#​35747)
  • core: exclude direct-dependency overrides from generated package.json (#​36040, #​35675)
  • core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#​36142, #​36067)
  • core: run the nx.bat wrapper for dot-nx setup on windows (#​36048)
  • core: refine the end-of-run performance report recommendations (#​36127, #​36077)
  • core: speed up bun lockfile parsing (#​36198)
  • core: set NX_CLI_SET in batch worker processes (#​36214, #​36210)
  • core: use standard utm params on performance-report links (#​36226)
  • core: preserve comments in catalog YAML updates (#​35733)
  • core: box JsonFileSet payload to keep HashInstruction small (#​36247, #​35248, #​36244, #​36152)
  • core: share workspace fileset hash results instead of deep-cloning per task (#​36244, #​34971, [#​34942](https://

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team January 3, 2026 12:01
@renovate renovate Bot added the dependencies Upgrade or downgrade of project dependencies. label Jan 3, 2026
@renovate
renovate Bot requested review from a team and sullivanpj as code owners January 3, 2026 12:01
@renovate
renovate Bot enabled auto-merge (squash) January 3, 2026 12:01
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from c0d78db to d5f63c6 Compare January 8, 2026 06:59
@socket-security

socket-security Bot commented Jan 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm verdaccio-audit is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/verdaccio@6.9.0 → npm/verdaccio-audit@13.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/verdaccio-audit@13.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 17fbdc4 to bce6bcd Compare January 13, 2026 19:16
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 8 times, most recently from 68da564 to a3c403f Compare January 22, 2026 07:45
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from bb7d6a8 to ac7ea5a Compare January 28, 2026 18:52
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from 338335f to 08b596c Compare February 14, 2026 11:50
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 93b21ce to 41eefb4 Compare February 22, 2026 03:46
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 9e263a0 to 58ad5bf Compare March 2, 2026 06:22
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 195ab9e to 75c782c Compare March 14, 2026 09:34
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 5c1aa86 to f084a77 Compare March 31, 2026 18:31
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 0f691e9 to 3e339e6 Compare April 19, 2026 03:10
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 305748c to cf208d0 Compare May 6, 2026 11:28
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 6ffff96 to 42ff586 Compare May 8, 2026 16:01
@socket-security

socket-security Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​swc/​helpers@​0.5.231001007284100
Added@​nx/​js@​23.1.1761009299100
Added@​nx/​jest@​23.1.1761009299100
Added@​nx/​eslint-plugin@​23.1.1771009299100
Added@​nx/​plugin@​23.1.1771009299100
Added@​nx/​workspace@​23.1.1771009199100
Added@​swc-node/​register@​1.12.19810010090100
Added@​types/​web@​0.0.3541001009096100
Added@​nx/​devkit@​23.1.1981009299100
Added@​swc/​core@​1.15.479210010096100
Addedts-jest@​29.4.12971009593100
Addedverdaccio@​6.9.09610010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sullivanpj sullivanpj Awaiting requested review from sullivanpj sullivanpj is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Upgrade or downgrade of project dependencies.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants