Skip to content

[Deps] Safe dependency updates (2026-08-29) #7848

Description

@github-actions

Automated Safe Dependency Updates

This PR contains safe patch-level dependency updates verified to pass the full test suite with no new failures introduced.

Updated Dependencies

Package Previous Updated Type
jest 30.4.2 30.5.0 patch
babel-jest 30.4.1 30.5.0 patch
eslint 10.9.0 10.9.1 patch

All updates fall within the existing ^ semver ranges already declared in package.json, so only package-lock.json changed.

安全 Fixes Included

None — npm audit reported 0 vulnerabilities both before and after this update. No open Dependabot alerts could be retrieved (token lacks security_events scope for this repo), and no HIGH/CRITICAL CVEs were found via npm audit.

Verification

  • npm audit — 0 vulnerabilities before and after
  • npm test — Test Suites: 325 passed / 4 failed, Tests: 5239 passed / 27 failed
  • Confirmed the 4 failing suites (all in src/enclave/mount-policy.test.ts, a /var/tmp path issue) fail identically on main HEAD (f3c7fd9) without this change — pre-existing, unrelated to this update
  • Build (tsc) succeeds; lint runs with pre-existing warnings only (0 errors)

Notes

  • No --build-local/Docker verification performed (not required for a devDependency-only lockfile update).
  • Larger available upgrades (e.g., chalk 4→6, commander 12→15, execa 5→10, typescript 5→7, @babel/core 7→8) are major version bumps with likely breaking changes and were intentionally not applied in this conservative pass.

Generated by Dependency 安全 Monitor Workflow


Warning

Protected Files

This was originally intended as a pull request, but the patch modifies protected files. These files may affect project dependencies, CI/CD pipelines, or agent behaviour. Please review the changes carefully before creating the pull request.

Click here to create the pull request once you have reviewed the changes

Protected files
  • package-lock.json

To route changes like this to a review issue instead of blocking, configure protected-files: fallback-to-issue in your workflow configuration.

Generated by Dependency 安全 Monitor · copilot · auto · 30 AIC · ⊞ 13.2K ·

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    项目

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions