🔒 [Security](deps-dev): Bump @types/node from 20.19.27 to 20.19.34#29
🔒 [Security](deps-dev): Bump @types/node from 20.19.27 to 20.19.34#29dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.19.27 to 20.19.34. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 20.19.34 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
blackboxprogramming
requested review from
Copilot
and removed request for
blackboxprogramming
There was a problem hiding this comment.
Copilot wasn't able to review any files in this pull request.
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| prettier: | ||
| specifier: ^3.7.4 | ||
| version: 3.8.1 |
There was a problem hiding this comment.
The PR description indicates this is a security update for @types/node only, but this change also adds prettier to the lockfile. While the prettier addition appears legitimate (it's declared in package.json with ^3.7.4 and satisfies that constraint), this discrepancy should be clarified. Either the PR description should be updated to mention both changes, or prettier should be added in a separate PR for clarity.
|
Superseded by #30. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/types/node-20.19.34
branch
Bumps @types/node from 20.19.27 to 20.19.34.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)