Skip to content

Lock file maintenance (release-v0.7) - #3487

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-v0.7from
konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies
Open

Lock file maintenance (release-v0.7)#3487
red-hat-konflux[bot] wants to merge 1 commit into
release-v0.7from
konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies

Conversation

@red-hat-konflux

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 04:59 AM (* 0-4 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 11, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:04 AM UTC · Completed 4:16 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 11, 2026

Copy link
Copy Markdown

Looks good to me

Previous run

Looks good to me

Previous run (2)

Looks good to me

Previous run (3)

Looks good to me


Labels: PR modifies package-lock.json (dependency lockfile maintenance)

Previous run (4)

Looks good to me

Previous run (5)

Looks good to me

Previous run (6)

Review

Findings

Low

  • [supply-chain] package-lock.json — lodash is bumped from 4.17.21 to 4.18.1. Verified as a legitimate release (April 2026) under renewed OpenJS Foundation governance, containing security fixes for CVE-2025-13465 (prototype pollution in _.unset/_.omit) and CVE-2026-4800 (code injection in _.template).

  • [supply-chain] package-lock.json — Routine dependency version bumps via Renovate bot: binary-extensions, chokidar, fast-glob, fastq, fsevents, picomatch, reusify, yaml. All resolved URLs point to registry.npmjs.org with sha512 integrity hashes. No anomalies detected.

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Aug 11, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from 17c6e66 to 6dfa051 Compare August 11, 2026 04:21
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 11, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:22 AM UTC · Completed 4:28 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@codecov

codecov Bot commented Aug 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
generative 69.55% <ø> (ø)
integration 69.55% <ø> (ø)
unit 69.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from 6dfa051 to 69cf6dd Compare August 16, 2026 04:45
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 16, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:46 AM UTC · Completed 4:56 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from 69cf6dd to 10937b5 Compare August 19, 2026 04:07
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 19, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:08 AM UTC · Completed 4:15 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the dependencies Pull requests that update a dependency file label Aug 19, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from 10937b5 to 60a36bb Compare August 19, 2026 04:27
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 19, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:28 AM UTC · Completed 4:34 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from 60a36bb to cae47e1 Compare August 26, 2026 04:08
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:09 AM UTC · Completed 4:20 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.47

fullsend-ai-review[bot]

This comment was marked as outdated.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-v0.7-release-v0.7/lock-file-maintenance-npm-dependencies branch from cae47e1 to 2c0b03f Compare August 27, 2026 04:23
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 27, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:24 AM UTC · Completed 4:30 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.48

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ready-for-merge All reviewers approved — ready to merge release-v0.7 renovate size: M

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants