chore(deps-dev): bump @changesets/cli from 3.0.1 to 3.0.3 in the npm-minor-patch group across 1 directory - #1267
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
changed the title
0275a17 to
42d016a
Compare
miravoss26
left a comment
miravoss26
left a comment
There was a problem hiding this comment.
Dependabot bump: @changesets/cli 3.0.1 → 3.0.2 (dev dependency), plus its transitive lockfile entries (apply-release-plan, git, read).
- Dev-only tooling, no runtime code touched, no new attack surface.
- Lockfile integrity hashes present and consistent with the version bump.
Safe to merge from my read.
42d016a to
f1b1f58
Compare
miravoss26
left a comment
miravoss26
left a comment
There was a problem hiding this comment.
Straight patch dependency bump (@changesets/cli 3.0.1 → 3.0.2, transitive @changesets/* patch bumps), package-lock.json + package.json only. No source touched, no new deps beyond the transitive changesets patches, nothing security-relevant. Safe to merge from my read.
4a0d185 to
ed3b8c0
Compare
miravoss26
left a comment
miravoss26
left a comment
There was a problem hiding this comment.
Dependabot patch bump: @changesets/cli 3.0.1 → 3.0.2 (npm-minor-patch group), devDependency only. package.json range and package-lock.json are consistent with the bump; changelog is a small patch (pre-exit review message + transitive apply-release-plan/git/read bumps) — no behavior change to shipped code.
Security: no secrets, no new dependencies, no runtime/network surface touched — build-tooling only.
CI green across the board (relevant checks SUCCESS, others correctly SKIPPED for a deps-only diff). Safe to merge from my read.
4d483d9 to
1639f9d
Compare
miravoss26
left a comment
miravoss26
left a comment
There was a problem hiding this comment.
Dependabot patch bump: @changesets/cli 3.0.1 → 3.0.2 (dev dependency only, plus its transitive @changesets/* bumps in the lockfile).
Correctness: package.json/package-lock.json only, no source changes. Upstream changelog is patch-level (pre-exit review message, dependency bumps) — nothing behavior-affecting for this repo's build.
Security: dev-only tooling, no runtime surface, no new top-level deps. All CI checks green (brand-cleanup, changeset-check, hygiene, test suite).
Safe to merge from my read.
1639f9d to
ec55857
Compare
miravoss26
left a comment
miravoss26
left a comment
There was a problem hiding this comment.
Dependabot dev-dependency patch bump: @changesets/cli 3.0.1 → 3.0.2 (pulls transitive patch bumps on @changesets/apply-release-plan, git, read). package.json + lockfile only.
- No prod code touched, dev-only tooling.
- No secrets, no new network destinations, no authz surface.
- CI green across the board.
Safe to merge from my read.
Bumps the npm-minor-patch group with 1 update in the / directory: [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli). Updates `@changesets/cli` from 3.0.1 to 3.0.3 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli) --- updated-dependencies: - dependency-name: "@changesets/cli" dependency-version: 3.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
ec55857 to
24bff73
Compare
2 participants
Bumps the npm-minor-patch group with 1 update in the / directory: @changesets/cli.
Updates
@changesets/clifrom 3.0.1 to 3.0.3Release notes
Sourced from @changesets/cli's releases.
Changelog
Sourced from @changesets/cli's changelog.
Commits
c9269c0Version Packages (#2291)ca9d110Fix pnpm 10 publishing with npm 12 (#2276)7be7fdeBuild(deps): Bump the production-dependencies group across 1 directory with 6...b430ce0Move e2e tests to an on-demand workspace (#2275)93314a8test: add happy path tests foradd(#2289)d13a39etest: use inline snapshots for publish plan tests (#2284)d7e4a2dVersion Packages (#2266)68affeeUpgrade to Vitest 5 (#2281)5eeb012Build(deps): Bump human-id in the production-dependencies group (#2279)a0a4dc6Add review message on pre exit (#2270)