Bump the npm-minor group across 1 directory with 3 updates by dependabot[bot] · Pull Request #3964 · github/codeql-action

dependabot · 2026-06-17T17:55:34Z

Bumps the npm-minor group with 3 updates in the / directory: semver, @types/node and typescript-eslint.

Updates semver from 7.8.1 to 7.8.4

Release notes

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

e583226 #874 reject numeric segments after x-ranges (@pupuking723)

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

046da7f #872 align caret includePrerelease lower bounds (#872) (@wayyoungboy)

Chores

3485dda #866 bump @npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@dependabot[bot])

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

bea6028 #870 increment dotted prerelease identifiers (#870) (@liuzemei, @SheldonNeo)

Changelog

Sourced from semver's changelog.

7.8.4 (2026-06-09)

Bug Fixes

e583226 #874 reject numeric segments after x-ranges (@pupuking723)

7.8.3 (2026-06-08)

Bug Fixes

046da7f #872 align caret includePrerelease lower bounds (#872) (@wayyoungboy)

Chores

3485dda #866 bump @npmcli/eslint-config from 6.0.1 to 7.0.0 (#866) (@dependabot[bot])

7.8.2 (2026-06-04)

Bug Fixes

bea6028 #870 increment dotted prerelease identifiers (#870) (@liuzemei, @SheldonNeo)

Commits

8640bd6 chore: release 7.8.4 (#875)
e583226 fix: reject numeric segments after x-ranges
6b77aa8 chore: release 7.8.3 (#873)
3485dda chore: bump @npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)
046da7f fix: align caret includePrerelease lower bounds (#872)
efafcf8 chore: release 7.8.2 (#871)
bea6028 fix: increment dotted prerelease identifiers (#870)
See full diff in compare view

Updates @types/node from 20.19.41 to 20.19.42

Commits

See full diff in compare view

Updates typescript-eslint from 8.60.1 to 8.61.0

Release notes

Sourced from typescript-eslint's releases.

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

ast-spec: change type of UnaryExpression.prefix to always true (#12372)

ast-spec: tighten types of ArrowFunction, YieldExpression, TSTypePredicate (#12373)

🩹 Fixes

rule-schema-to-typescript-types: respect ECMAScript line terminators (#12374)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

lumir

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.61.0 (2026-06-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

16a5b24 chore(release): publish 8.61.0
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
@types/node	[>= 25.a, < 26]
@types/node	[>= 24.a, < 25]
@types/node	[>= 22.a, < 23]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor group with 3 updates in the / directory: [semver](https://github.com/npm/node-semver), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `semver` from 7.8.1 to 7.8.4 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.8.1...v7.8.4) Updates `@types/node` from 20.19.41 to 20.19.42 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `typescript-eslint` from 8.60.1 to 8.61.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: semver dependency-version: 7.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@types/node" dependency-version: 20.19.42 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: typescript-eslint dependency-version: 8.61.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-17T17:58:08Z

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

Copilot

✅ Ready to approve

It is a straightforward dependency/version bump with consistent updates across package.json and package-lock.json (including the workspace).

Note: this review does not count toward required approvals for merging.

Warning

Copilot's review of this pull request may be incomplete because some of the changed files are excluded by your Copilot content exclusion settings. See Excluding content from Copilot for details.

Pull request overview

This Dependabot PR bumps a small set of npm dependencies used by the CodeQL Action and its pr-checks workspace, keeping the repository’s tooling and dependency graph current.

Changes:

Update semver from ^7.8.1 to ^7.8.4.
Update @types/node from ^20.19.41 to ^20.19.42 (root + pr-checks workspace).
Update typescript-eslint from ^8.60.1 to ^8.61.0 and refresh the lockfile accordingly.

File summaries

File	Description
pr-checks/package.json	Bumps `@types/node` for the `pr-checks` workspace.
package.json	Updates dependency versions (`semver`, `@types/node`, `typescript-eslint`).
package-lock.json	Updates resolved versions/integrity for the bumped packages across the workspace lockfile.
lib/entry-points.js	Generated JS output updated (content excluded; and `lib/` changes are not reviewed per repo guidance).

Copilot's findings

Files excluded by content exclusion policy (1)

lib/entry-points.js

Files reviewed: 2/4 changed files
Comments generated: 0

Note

Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Jun 17, 2026

dependabot Bot requested a review from a team as a code owner June 17, 2026 17:55

github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Jun 17, 2026

Rebuild

80de837

github-actions Bot marked this pull request as draft June 17, 2026 17:58

mbg marked this pull request as ready for review June 17, 2026 18:44

Copilot AI review requested due to automatic review settings June 17, 2026 18:44

mbg approved these changes Jun 17, 2026

View reviewed changes

Copilot started reviewing on behalf of mbg June 17, 2026 18:44 View session

mbg enabled auto-merge June 17, 2026 18:44

Copilot AI approved these changes Jun 17, 2026

View reviewed changes

mbg added this pull request to the merge queue Jun 17, 2026

Merged via the queue into main with commit 0bae987 Jun 17, 2026
218 checks passed

mbg deleted the dependabot/npm_and_yarn/npm-minor-dc44a34bad branch June 17, 2026 19:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm-minor group across 1 directory with 3 updates#3964

Bump the npm-minor group across 1 directory with 3 updates#3964
mbg merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-dc44a34bad

dependabot Bot commented on behalf of github Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Jun 17, 2026

v7.8.4

7.8.4 (2026-06-09)

Bug Fixes

v7.8.3

7.8.3 (2026-06-08)

Bug Fixes

Chores

v7.8.2

7.8.2 (2026-06-04)

Bug Fixes

7.8.4 (2026-06-09)

Bug Fixes

7.8.3 (2026-06-08)

Bug Fixes

Chores

7.8.2 (2026-06-04)

Bug Fixes

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

🩹 Fixes

❤️ Thank You

8.61.0 (2026-06-08)

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

✅ Ready to approve

Copilot's findings

Files excluded by content exclusion policy (1)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants