Skip to content

fix(deps): update all dependencies - #220

Open
renovate[bot] wants to merge 3 commits into
mainfrom
renovate/all
Open

fix(deps): update all dependencies#220
renovate[bot] wants to merge 3 commits into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@1stg/common-config (source) ^13.0.1 → ^15.0.0 age confidence devDependencies major
@actions/core (source) ^2.0.3 → ^3.0.0 age confidence dependencies major
@actions/exec (source) ^1.1.1 → ^3.0.0 age confidence dependencies major
@changesets/changelog-github (source) ^0.5.1 → ^0.7.0 age confidence devDependencies minor
@commitlint/cli (source) ^19.8.0 → ^21.0.0 age confidence devDependencies major
@gitbeaker/rest (source) ^42.2.0 → ^43.0.0 age confidence dependencies major
@pkgr/rollup (source) ^6.0.3 → ^7.0.0 age confidence devDependencies major
@types/web ^0.0.228 → ^0.0.354 age confidence devDependencies patch
@vitest/coverage-istanbul (source) 3.1.2 → 4.1.10 age confidence devDependencies major
actions/checkout v4 → v7 age confidence action major
actions/setup-node v4.4.0 → v7.0.0 age confidence action major
autofix-ci/action (changelog) 2891949 → c5b2d67 action digest
clean-pkg-json ^1.2.1 → ^2.0.0 age confidence devDependencies major
commander ^13.1.0 → ^15.0.0 age confidence dependencies major
dotenv ^16.5.0 → ^17.0.0 age confidence dependencies major
eslint (source) ^9.24.0 → ^10.0.0 age confidence devDependencies major
global-agent ^3.0.0 → ^4.0.0 age confidence dependencies major
nano-staged ^0.8.0 → ^1.0.0 age confidence devDependencies major
npm-run-all2 ^7.0.2 → ^9.0.0 age confidence devDependencies major
p-limit ^6.2.0 → ^7.0.0 age confidence dependencies major
size-limit ^11.2.0 → ^13.0.0 age confidence devDependencies major
size-limit-preset-node-lib (source) ^0.3.0 → ^0.4.0 age confidence devDependencies minor
typescript (source) ^5.8.3 → ^7.0.0 age confidence devDependencies major
yarn (source) 4.9.1 → 4.18.0 age confidence packageManager minor

Release Notes

1stG/configs (@​1stg/common-config)

v15.0.0

Compare Source

Major Changes
Patch Changes

v14.3.0

Compare Source

Minor Changes
Patch Changes

v14.2.0

Compare Source

Minor Changes
Patch Changes

v14.1.0

Compare Source

Minor Changes
Patch Changes

v14.0.0

Compare Source

Major Changes
Patch Changes

v13.1.0

Compare Source

Minor Changes
Patch Changes
actions/toolkit (@​actions/core)

v3.0.1

  • Bump undici from 6.23.0 to 6.24.1 #​2348

v3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
actions/toolkit (@​actions/exec)

v3.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()

v2.0.0

changesets/changesets (@​changesets/changelog-github)

v0.7.0

Compare Source

Minor Changes

v0.6.0

Compare Source

Minor Changes
Patch Changes

v0.5.2

Compare Source

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v21.2.0

Compare Source

Features
  • resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#​4859) (fdb566f)

v21.1.0

Compare Source

Features

21.0.2 (2026-05-29)

Bug Fixes

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

v21.0.2

Compare Source

Bug Fixes

v21.0.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v21.0.0

Compare Source

BREAKING CHANGES
  • drop node v18 and v20 support
  • Bump engines to >=v22 in all 39 package.json files
  • Update @​types/node to ^22.0.0
  • Update CI matrix to [22, 24]
  • Update Ubuntu baseline job to ubuntu:26.04
  • Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
  • Update pre-commit hook to use --ignore-engines
  • Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/cli

20.5.2 (2026-04-25)

Note: Version bump only for package @​commitlint/cli

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.0

Compare Source

Bug Fixes

20.4.4 (2026-03-12)

Note: Version bump only for package @​commitlint/cli

20.4.3 (2026-03-03)

Bug Fixes

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

20.4.1 (2026-02-02)

Note: Version bump only for package @​commitlint/cli

v20.4.4

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.3

Compare Source

Bug Fixes

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.0

Compare Source

Features

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/cli

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.1.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.0.0

Compare Source

Note: Version bump only for package @​commitlint/cli

19.8.1 (2025-05-08)

Bug Fixes

v19.8.1

Compare Source

Bug Fixes
jdalrymple/gitbeaker (@​gitbeaker/rest)

v43.8.0

Compare Source

🎉 This release contains work from a new contributor! 🎉

Thank you, Matěj Smíšek (@​matejsmisek), for all your work!

✨ Feature
Authors: 2

v43.7.0

Compare Source

🐛 Bug Fix
🗃️ Typescript Definitions
  • @gitbeaker/core
📚 Documentation
Authors: 2

v43.6.0

Compare Source

🎉 This release contains work from a new contributor! 🎉

Thank you, Daniel Rentz (@​danielrentz), for all your work!

✨ Feature
🗃️ Typescript Definitions
📚 Documentation
Authors: 2

v43.5.0

Compare Source

🎉 This release contains work from a new contributor! 🎉

Thank you, null@​lanthier, for all your work!

🔒 Security
📚 Documentation
Authors: 3

v43.4.0

Compare Source

🎉 This release contains work from new contributors! 🎉

Thanks for all your work!

❤️ null@​tcasebiw

❤️ Florian Imdahl (@​ffflorian)

✨ Feature
🔨 Technical Debt
🔒 Security
📚 Documentation
Authors: 4

v43.3.0

Compare Source

🚨 Tests
Authors: 1

v43.2.0

Compare Source

🐛 Bug Fix
Authors: 1

v43.1.0

Compare Source

🐛 Bug Fix
  • @gitbeaker/cli, @gitbeaker/core
Authors: 1

v43.0.0

Compare Source

🎉 This release contains work from new contributors! 🎉

Thanks for all your work!

❤️ kang (@​kang8)

❤️ Aidin Abedi (@​aidinabedi)

💥 Breaking Change
  • Enhance error messaging in GitbeakerRequestError to clearly display only the description context #​3731 (@​kang8)
✨ Feature
🐛 Bug Fix
🔨 Technical Debt
⚠️ Pushed to main
Authors: 3

v42.5.0

Compare Source

✨ Feature
Authors: 2

v42.4.1

Compare Source

🗃️ Typescript Definitions
  • @gitbeaker/core
Authors: 1

v42.4.0

Compare Source

🐛 Bug Fix
  • @gitbeaker/core
Authors: 1

v42.3.0

Compare Source

🎉 This release contains work from a new contributor! 🎉

Thank you, Zack (@​zk-kb4), for all your work!

✨ Feature
Authors: 1
un-ts/pkgr (@​pkgr/rollup)

v7.1.0

Compare Source

Minor Changes

v7.0.1

Compare Source

Patch Changes

v7.0.0

Compare Source

Major Changes
Patch Changes

v6.0.4

Compare Source

Patch Changes
microsoft/TypeScript-DOM-Lib-Generator (@​types/web)

v0.0.354

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.353

Compare Source

asynciterable.d.ts

No changes

index.d.ts

Modified

  • HTMLAnchorElement
    • Removed: hreflang, target, type
  • HTMLAreaElement
    • Removed: target
Non-value types
  • FullscreenOptions
    • Added: keyboardLock
  • GPUPipelineLayoutDescriptor
    • Added: immediateSize
  • HTMLHyperlinkElementUtils
    • Added: target
  • HyperlinkElementUtils
    • Added: hreflang, type

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

Modified

  • HTMLAnchorElement
    • Removed: hreflang, target, type
  • HTMLAreaElement
    • Removed: target
Non-value types
  • FullscreenOptions
    • Added: keyboardLock
  • GPUPipelineLayoutDescriptor
    • Added: immediateSize
  • HTMLHyperlinkElementUtils
    • Added: target
  • HyperlinkElementUtils
    • Added: hreflang, type

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

Modified

  • HTMLAnchorElement
    • Removed: hreflang, target, type
  • HTMLAreaElement
    • Removed: target
Non-value types
  • FullscreenOptions
    • Added: keyboardLock
  • GPUPipelineLayoutDescriptor
    • Added: immediateSize
  • HTMLHyperlinkElementUtils
    • Added: target
  • HyperlinkElementUtils
    • Added: hreflang, type

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

Modified

  • HTMLAnchorElement
    • Removed: hreflang, target, type
  • HTMLAreaElement
    • Removed: target
Non-value types
  • FullscreenOptions
    • Added: keyboardLock
  • GPUPipelineLayoutDescriptor
    • Added: immediateSize
  • HTMLHyperlinkElementUtils
    • Added: target
  • HyperlinkElementUtils
    • Added: hreflang, type

ts5.9/iterable.d.ts

No changes

v0.0.352

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.351

Compare Source

asynciterable.d.ts

No changes

index.d.ts

Modified

  • Notification
    • Added: actions

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

Modified

  • Notification
    • Added: actions

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

Modified

  • Notification
    • Added: actions

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

Modified

  • Notification
    • Added: actions

ts5.9/iterable.d.ts

No changes

v0.0.350

Compare Source

asynciterable.d.ts

No changes

index.d.ts

Modified

  • Element
    • Added: setHTML
Non-value types
  • HTMLOrSVGElement
    • Removed: autofocus, dataset, nonce, tabIndex, blur, focus

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

Modified

  • Element
    • Added: setHTML
Non-value types
  • HTMLOrSVGElement
    • Removed: autofocus, dataset, nonce, tabIndex, blur, focus

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

Modified

  • Element
    • Added: setHTML
Non-value types
  • HTMLOrSVGElement
    • Removed: autofocus, dataset, nonce, tabIndex, blur, focus

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

Modified

  • Element
    • Added: setHTML
Non-value types
  • HTMLOrSVGElement
    • Removed: autofocus, dataset, nonce, tabIndex, blur, focus

ts5.9/iterable.d.ts

No changes

v0.0.349

Compare Source

asynciterable.d.ts

No changes

index.d.ts

No changes

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

No changes

ts5.5/iterable.d.ts

No changes

ts5.6/asynciterable.d.ts

No changes

ts5.6/index.d.ts

No changes

ts5.6/iterable.d.ts

No changes

ts5.9/asynciterable.d.ts

No changes

ts5.9/index.d.ts

No changes

ts5.9/iterable.d.ts

No changes

v0.0.348

Compare Source

asynciterable.d.ts

No changes

index.d.ts

New interfaces

  • DocumentPictureInPicture
  • DocumentPictureInPictureEvent
  • Origin
  • Serial
  • SerialPort

Modified

  • GPUSupportedLimits
    • Added: maxStorageBuffersInFragmentStage, maxStorageBuffersInVertexStage, maxStorageTexturesInFragmentStage, maxStorageTexturesInVertexStage
  • PerformanceResourceTiming
    • Added: contentType
  • Window
    • Added: documentPictureInPicture
Non-value types
  • AnimationEventInit
    • Added: animation
  • SanitizerConfig
    • Added: processingInstructions, removeProcessingInstructions
  • TransitionEventInit
    • Added: animation
  • CanvasTextDrawingStyles
    • Added: lang

iterable.d.ts

No changes

ts5.5/asynciterable.d.ts

No changes

ts5.5/index.d.ts

New interfaces

  • DocumentPictureInPicture
  • DocumentPictureInPictureEvent
  • Origin
  • Serial
  • `Se

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot

changeset-bot Bot commented Jun 1, 2025 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: b67a4b5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai

coderabbitai Bot commented Jun 1, 2025

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@codesandbox-ci

codesandbox-ci Bot commented Jun 1, 2025

Copy link
Copy Markdown

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

@socket-security

socket-security Bot commented Jun 1, 2025 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​1stg/​common-config@​13.0.1 ⏵ 15.0.0581005485 +3100
Updatedsize-limit-preset-node-lib@​0.3.0 ⏵ 0.4.06710078 +179100
Updated@​pkgr/​rollup@​6.0.3 ⏵ 7.1.073 +110067 +188 +7100
Updated@​changesets/​changelog-github@​0.5.1 ⏵ 0.7.010010068 +193100
Updated@​commitlint/​cli@​19.8.0 ⏵ 21.2.11001007396 -1100
Updatedclean-pkg-json@​1.2.1 ⏵ 2.0.081 +2100100 +188 +6100
Updatedsize-limit@​10.0.3 ⏵ 13.0.2100 +110082 +290 +9100
Updated@​vitest/​coverage-istanbul@​3.1.2 ⏵ 4.1.109910082 +1598100
Updatednano-staged@​0.8.0 ⏵ 1.0.2100100100 +2783100
Updatedglobal-agent@​3.0.0 ⏵ 4.1.398 +1100100 +183100
Updated@​actions/​exec@​1.1.1 ⏵ 3.0.01001008884100
Updated@​actions/​core@​2.0.3 ⏵ 3.0.19910010086100
Updatedcommander@​13.1.0 ⏵ 15.0.0100 +1100100 +187100
Addeddotenv@​17.4.29910010087100
Updatedp-limit@​4.0.0 ⏵ 7.3.1100 +1100100 +187 -1100
Updated@​gitbeaker/​rest@​42.2.0 ⏵ 43.8.0100 +110010087100
Updatedtypescript@​5.8.3 ⏵ 7.0.29910089 -1100 +1100 +10
Updated@​types/​web@​0.0.228 ⏵ 0.0.35410010090 +196100
Updatednpm-run-all2@​7.0.2 ⏵ 9.0.399 +1100100 +291 +5100
Updatedsemver@​7.7.1 ⏵ 7.8.5100 +1100100 +191100
Updatedeslint@​9.24.0 ⏵ 10.8.097 +1010010095 -1100

View full report

@pkg-pr-new

pkg-pr-new Bot commented Jun 1, 2025 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/changesets-gitlab@220

commit: b67a4b5

@sonarqubecloud

sonarqubecloud Bot commented Jun 1, 2025

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate

renovate Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@socket-security

socket-security Bot commented Jul 29, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm chrono-node is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@1stg/common-config@15.0.0 → npm/chrono-node@2.9.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/chrono-node@2.9.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm css-tree is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@1stg/common-config@15.0.0 → npm/css-tree@3.2.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/css-tree@3.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@1stg/common-config@15.0.0 → npm/eslint-plugin-jsdoc@63.3.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.3.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

📊 Package size report   -0.03%↓

File Before After
lib/comment.js.map 7.5 kB -0.26%↓7.5 kB
lib/git-utils.js.map 2.2 kB 0.5%↑2.2 kB
lib/index.cjs 40.3 kB -0.07%↓40.3 kB
lib/main.js.map 3.1 kB -0.29%↓3.1 kB
lib/read-changeset-state.js.map 767 B 0.7%↑772 B
lib/utils.js.map 4.8 kB -0.1%↓4.8 kB
package.json 3.4 kB 0.06%↑3.4 kB
Total (Includes all files) 134.0 kB -0.03%↓134.0 kB
Tarball size 33.7 kB -0.12%↓33.6 kB
Unchanged files
File Size
index.d.cts 73 B
lib/api.d.ts 99 B
lib/api.js 899 B
lib/api.js.map 1.0 kB
lib/cli.d.ts 39 B
lib/cli.js 734 B
lib/cli.js.map 932 B
lib/comment.d.ts 247 B
lib/comment.js 10.0 kB
lib/context.d.ts 74 B
lib/context.js 138 B
lib/context.js.map 228 B
lib/env.d.ts 70 B
lib/env.js 857 B
lib/env.js.map 778 B
lib/get-changed-packages.d.ts 305 B
lib/get-changed-packages.js 4.8 kB
lib/get-changed-packages.js.map 4.7 kB
lib/git-utils.d.ts 646 B
lib/git-utils.js 1.7 kB
lib/index.d.ts 274 B
lib/index.js 241 B
lib/index.js.map 249 B
lib/main.d.ts 153 B
lib/main.js 3.6 kB
lib/read-changeset-state.d.ts 252 B
lib/read-changeset-state.js 650 B
lib/run.d.ts 1.1 kB
lib/run.js 8.8 kB
lib/run.js.map 8.1 kB
lib/types.d.ts 1.2 kB
lib/types.js 44 B
lib/types.js.map 102 B
lib/utils.d.ts 1.6 kB
lib/utils.js 4.2 kB
LICENSE 1.1 kB
README.md 11.8 kB

🤖 This report was automatically generated by pkg-size-action

@sonarqubecloud

sonarqubecloud Bot commented Jul 29, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@codacy-production

codacy-production Bot commented Jul 29, 2026

Copy link
Copy Markdown

Not up to standards ⛔

🔴 Issues 1 high · 1 medium

Alerts:
⚠ 2 issues (≤ 0 issues of at least minor severity)

Results:
2 new issues

Category Results
Security 1 medium
1 high

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants