deps: bump the dependency-updates group across 1 directory with 9 updates #1763

dependabot · 2025-11-03T05:12:49Z

Bumps the dependency-updates group with 9 updates in the / directory:

Package	From	To
@octokit/plugin-retry	`8.0.2`	`8.0.3`
@octokit/plugin-throttling	`11.0.2`	`11.0.3`
@octokit/rest	`22.0.0`	`22.0.1`
@npmcli/template-oss	`4.26.0`	`4.28.0`
eslint-plugin-primer-react	`8.3.0`	`8.4.0`
eslint-plugin-react-hooks	`7.0.0`	`7.0.1`
minimatch	`10.0.3`	`10.1.1`
tar	`7.5.1`	`7.5.2`
tap	`21.1.1`	`21.1.3`

Updates @octokit/plugin-retry from 8.0.2 to 8.0.3

Release notes

Sourced from @octokit/plugin-retry's releases.

v8.0.3

8.0.3 (2025-10-31)

Bug Fixes

deps: update dependency @octokit/types to v16 (#650) (03f2add)

Commits

03f2add fix(deps): update dependency @octokit/types to v16 (#650)
112467a ci(action): update actions/checkout action to v5 (#638)
fef5474 ci(action): update peter-evans/create-or-update-comment action to v5 (#644)
7c99a5e chore(deps): update vitest monorepo to v4 (major) (#648)
14d0b3b ci(action): update actions/setup-node action to v6 (#646)
843b86c ci(action): update github/codeql-action action to v4 (#645)
See full diff in compare view

Updates @octokit/plugin-throttling from 11.0.2 to 11.0.3

Release notes

Sourced from @octokit/plugin-throttling's releases.

v11.0.3

11.0.3 (2025-10-31)

Bug Fixes

deps: update dependency @octokit/types to v16 (#811) (d87092d)

Commits

c253528 chore(deps): update dependency node to v24 (#809)
d87092d fix(deps): update dependency @octokit/types to v16 (#811)
e3de64b ci(action): update github/codeql-action action to v4 (#805)
0673f3e ci(action): update actions/setup-node action to v6 (#806)
See full diff in compare view

Updates @octokit/rest from 22.0.0 to 22.0.1

Release notes

Sourced from @octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

deps: update octokit monorepo (major) (#538) (ded2f17)

Commits

daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
ded2f17 fix(deps): update octokit monorepo (major) (#538)
0e0eaea chore(deps): update dependency @types/node to v24 (#537)
c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
e6dd306 chore(deps): update dependency undici to v7 (#474)
5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
See full diff in compare view

Updates @npmcli/template-oss from 4.26.0 to 4.28.0

Release notes

Sourced from @npmcli/template-oss's releases.

v4.28.0

4.28.0 (2025-10-29)

Features

dccde95 #537 adds script to run tests with node 20 correctly (@owlstronaut)

v4.27.1

4.27.1 (2025-10-20)

Bug Fixes

c9ae7dc #535 some test folders need quotes for correct globbing (#535) (@owlstronaut)

v4.27.0

4.27.0 (2025-10-20)

Features

2e563b4 #533 adds coverageThreshold as a config, uses non-workspace dir for tests (#533) (@owlstronaut)

v4.26.1

4.26.1 (2025-10-20)

Bug Fixes

eeb4266 #531 uses ci-friendly startsWith instead of fromJSON (#531) (@owlstronaut)

Changelog

Sourced from @npmcli/template-oss's changelog.

4.28.0 (2025-10-29)

Features

dccde95 #537 adds script to run tests with node 20 correctly (@owlstronaut)

4.27.1 (2025-10-20)

Bug Fixes

c9ae7dc #535 some test folders need quotes for correct globbing (#535) (@owlstronaut)

4.27.0 (2025-10-20)

Features

2e563b4 #533 adds coverageThreshold as a config, uses non-workspace dir for tests (#533) (@owlstronaut)

4.26.1 (2025-10-20)

Bug Fixes

eeb4266 #531 uses ci-friendly startsWith instead of fromJSON (#531) (@owlstronaut)

Commits

2ccf10d chore: release 4.28.0 (#538)
dccde95 feat: adds script to run tests with node 20 correctly
008c2fa chore: release 4.27.1 (#536)
c9ae7dc fix: some test folders need quotes for correct globbing (#535)
7a1d571 chore: release 4.27.0 (#534)
2e563b4 feat: adds coverageThreshold as a config, uses non-workspace dir for tests (#...
adf1df0 chore: release 4.26.1 (#532)
eeb4266 fix: uses ci-friendly startsWith instead of fromJSON (#531)
See full diff in compare view

Updates eslint-plugin-primer-react from 8.3.0 to 8.4.0

Release notes

Sourced from eslint-plugin-primer-react's releases.

v8.4.0

Minor Changes

#437 9270d40 Thanks @copilot-swe-agent! - Add spread-props-first rule to ensure spread props come before other props

Changelog

Sourced from eslint-plugin-primer-react's changelog.

8.4.0

Minor Changes

#437 9270d40 Thanks @copilot-swe-agent! - Add spread-props-first rule to ensure spread props come before other props

Commits

68e5f73 Version Packages (#438)
9270d40 Add eslint rule to ensure spread props come before other props (#437)
368f49c Bump @typescript-eslint/utils from 8.45.0 to 8.46.1 (#431)
2cd54df Bump eslint from 9.37.0 to 9.38.0 (#432)
970bfb6 Bump actions/checkout from 4 to 5 (#391)
See full diff in compare view

Updates eslint-plugin-react-hooks from 7.0.0 to 7.0.1

Changelog

Sourced from eslint-plugin-react-hooks's changelog.

7.0.1

Disallowed passing inline useEffectEvent values as JSX props to guard against accidental propagation. (#34820 by @jf-eirinha)

Switch to export = so eslint-plugin-react-hooks emits correct types for consumers in Node16 ESM projects. (#34949 by @karlhorky)

Tightened the typing of configs.flat so the configs export is always defined. (#34950 by @poteto)

Fix named import runtime errors. (#34951, #34953 by @karlhorky)

Commits

See full diff in compare view

Updates minimatch from 10.0.3 to 10.1.1

Changelog

Sourced from minimatch's changelog.

change log

10.1

Add magicalBraces option for escape

Fix makeRe when partial: true is set.

Fix makeRe when pattern ends in a final ** path part.

10.0

Require node 20 or 22 and higher

9.0

No default export, only named exports.

8.0

Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions

Bump required Node.js version

7.4

Add escape() method

Add unescape() method

Add Minimatch.hasMagic() method

7.3

Add support for posix character classes in a unicode-aware way.

7.2

Add windowsNoMagicRoot option

7.1

Add optimizationLevel configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so most things that matched with optimizationLevel 1 or 0 should match with level 2 as well. However, level 1 is the default, out of an abundance of caution.

7.0

Preprocess patterns to simplify complicated patterns and reduce out .. pattern portions where possible. Note that this means

... (truncated)

Commits

5b83372 10.1.1
7ed71cd do not require * to match something if already matching something
30efec4 fix some typedoc comments and export types
7a71a90 10.1.0
8bc631a changelog 10.1
0a0a7a1 Added missing periods for text consistency
a1b68f2 docs: fix typo
6b88277 remove unnecessary types for brace-expansion
0d27f1c Support magicalBraces option in escape/unescape
281de34 prettier
Additional commits viewable in compare view

Updates tar from 7.5.1 to 7.5.2

Commits

d9ea73a 7.5.2
5e1a8e6 Fix sync tar.list when file size reduces while reading
0fbeaed formatting
2dbacfe add types for make-tar util
c5865d3 remove unused taprc file
bdb3809 header: only read from ustar block if not specified in Pax
d094cd7 BlueOak-1.0.0
4a6ae72 Verify invulnerability to tarmageddon attack
See full diff in compare view

Updates tap from 21.1.1 to 21.1.3

Commits

eaa5ba4 update versions
92e73b8 abstract out argvRelative for easier usage
8575fa9 update versions
410c01b changelog for patch release
b2f457a formatting
4949934 update workflows
f614961 core: relativize argv entries that are under cwd
5cea7d7 update parser license
cbeb315 update versions
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tap	[>= 18.a, < 19]
tap	[>= 19.a, < 20]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the dependency-updates group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.0.2` | `8.0.3` | | [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.2` | `11.0.3` | | [@octokit/rest](https://github.com/octokit/rest.js) | `22.0.0` | `22.0.1` | | [@npmcli/template-oss](https://github.com/npm/template-oss) | `4.26.0` | `4.28.0` | | [eslint-plugin-primer-react](https://github.com/primer/eslint-plugin-primer-react) | `8.3.0` | `8.4.0` | | [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `7.0.0` | `7.0.1` | | [minimatch](https://github.com/isaacs/minimatch) | `10.0.3` | `10.1.1` | | [tar](https://github.com/isaacs/node-tar) | `7.5.1` | `7.5.2` | | [tap](https://github.com/tapjs/tapjs) | `21.1.1` | `21.1.3` | Updates `@octokit/plugin-retry` from 8.0.2 to 8.0.3 - [Release notes](https://github.com/octokit/plugin-retry.js/releases) - [Commits](octokit/plugin-retry.js@v8.0.2...v8.0.3) Updates `@octokit/plugin-throttling` from 11.0.2 to 11.0.3 - [Release notes](https://github.com/octokit/plugin-throttling.js/releases) - [Commits](octokit/plugin-throttling.js@v11.0.2...v11.0.3) Updates `@octokit/rest` from 22.0.0 to 22.0.1 - [Release notes](https://github.com/octokit/rest.js/releases) - [Commits](octokit/rest.js@v22.0.0...v22.0.1) Updates `@npmcli/template-oss` from 4.26.0 to 4.28.0 - [Release notes](https://github.com/npm/template-oss/releases) - [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md) - [Commits](npm/template-oss@v4.26.0...v4.28.0) Updates `eslint-plugin-primer-react` from 8.3.0 to 8.4.0 - [Release notes](https://github.com/primer/eslint-plugin-primer-react/releases) - [Changelog](https://github.com/primer/eslint-plugin-primer-react/blob/main/CHANGELOG.md) - [Commits](primer/eslint-plugin-primer-react@v8.3.0...v8.4.0) Updates `eslint-plugin-react-hooks` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks) Updates `minimatch` from 10.0.3 to 10.1.1 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v10.0.3...v10.1.1) Updates `tar` from 7.5.1 to 7.5.2 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.1...v7.5.2) Updates `tap` from 21.1.1 to 21.1.3 - [Release notes](https://github.com/tapjs/tapjs/releases) - [Commits](https://github.com/tapjs/tapjs/compare/tap@21.1.1...tap@21.1.3) --- updated-dependencies: - dependency-name: "@octokit/plugin-retry" dependency-version: 8.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependency-updates - dependency-name: "@octokit/plugin-throttling" dependency-version: 11.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependency-updates - dependency-name: "@octokit/rest" dependency-version: 22.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependency-updates - dependency-name: "@npmcli/template-oss" dependency-version: 4.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependency-updates - dependency-name: eslint-plugin-primer-react dependency-version: 8.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependency-updates - dependency-name: eslint-plugin-react-hooks dependency-version: 7.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependency-updates - dependency-name: minimatch dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependency-updates - dependency-name: tar dependency-version: 7.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependency-updates - dependency-name: tap dependency-version: 21.1.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependency-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the Dependencies Pull requests that update a dependency file label Nov 3, 2025

dependabot bot requested a review from a team as a code owner November 3, 2025 05:12

chore: postinstall for dependabot template-oss PR

b2d4828

wraithgar merged commit 08a2409 into main Nov 5, 2025

wraithgar deleted the dependabot/npm_and_yarn/main/dependency-updates-7df45506de branch November 5, 2025 23:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the dependency-updates group across 1 directory with 9 updates #1763

deps: bump the dependency-updates group across 1 directory with 9 updates #1763

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps: bump the dependency-updates group across 1 directory with 9 updates #1763

deps: bump the dependency-updates group across 1 directory with 9 updates #1763

Conversation

dependabot bot commented on behalf of github Nov 3, 2025

v8.0.3

8.0.3 (2025-10-31)

Bug Fixes

v11.0.3

11.0.3 (2025-10-31)

Bug Fixes

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

v4.28.0

4.28.0 (2025-10-29)

Features

v4.27.1

4.27.1 (2025-10-20)

Bug Fixes

v4.27.0

4.27.0 (2025-10-20)

Features

v4.26.1

4.26.1 (2025-10-20)

Bug Fixes

4.28.0 (2025-10-29)

Features

4.27.1 (2025-10-20)

Bug Fixes

4.27.0 (2025-10-20)

Features

4.26.1 (2025-10-20)

Bug Fixes

v8.4.0

Minor Changes

8.4.0

Minor Changes

7.0.1

change log

10.1

10.0

9.0

8.0

7.4

7.3

7.2

7.1

7.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants