Skip to content

chore(deps): lock file maintenance - #208

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/lock-file-maintenance
Aug 8, 2026
Merged

chore(deps): lock file maintenance#208
renovate[bot] merged 1 commit into
mainfrom
renovate/lock-file-maintenance

Conversation

@renovate

@renovate renovate Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 1, 2026
@socket-security

socket-security Bot commented Aug 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednx@​22.7.85910093100100
Added@​types/​semver@​7.8.01001007487100
Added@​types/​node@​25.9.51001008195100
Addedstd-env@​4.2.0991008785100
Addedmarkdown-link-extractor@​4.0.41001008686100
Addedtsdown@​0.22.14981008898100
Addedsherif@​1.13.09910010091100
Addedknip@​6.32.0991009596100
Addedeslint@​9.39.59710010095100
Addedverdaccio@​6.9.29610010098100
Added@​changesets/​cli@​2.31.19710010096100

View full report

@socket-security

socket-security Bot commented Aug 1, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Publisher changed: npm process-warning is now published by climba03003

Author: climba03003

From: pnpm-lock.yamlnpm/verdaccio@6.9.2npm/process-warning@5.1.0

ℹ Read more on: This package | This alert | What is unstable ownership?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/process-warning@5.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm chunk-data

Location: Package overview

From: pnpm-lock.yamlnpm/verdaccio@6.9.2npm/chunk-data@0.1.0

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/chunk-data@0.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@nx-cloud

nx-cloud Bot commented Aug 1, 2026

Copy link
Copy Markdown

View your CI Pipeline Execution ↗ for commit 59ced98

Command Status Duration Result
nx affected --targets=test:eslint,test:sherif,t... ✅ Succeeded 37s View ↗
nx run-many --targets=build --exclude=examples/** ✅ Succeeded 2s View ↗

☁️ Nx Cloud last updated this comment at 2026-08-08 17:12:51 UTC

@nx-cloud

nx-cloud Bot commented Aug 1, 2026

Copy link
Copy Markdown

View your CI Pipeline Execution ↗ for commit 61b0bc3

Command Status Duration Result
nx run-many --targets=build --exclude=examples/** ✅ Succeeded 2s View ↗

☁️ Nx Cloud last updated this comment at 2026-08-01 01:00:32 UTC

@pkg-pr-new

pkg-pr-new Bot commented Aug 1, 2026

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@tanstack/intent@208

commit: 59ced98

@renovate
renovate Bot force-pushed the renovate/lock-file-maintenance branch from 61b0bc3 to ecf046d Compare August 3, 2026 21:21
@renovate
renovate Bot force-pushed the renovate/lock-file-maintenance branch from ecf046d to 59ced98 Compare August 8, 2026 17:11
@renovate
renovate Bot merged commit 756fdc5 into main Aug 8, 2026
8 checks passed
@renovate
renovate Bot deleted the renovate/lock-file-maintenance branch August 8, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants