chore(deps-dev): bump the dependencies group with 4 updates #263
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
Bumps the dependencies group with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [typescript](https://github.com/microsoft/TypeScript). Updates `@types/node` from 24.5.2 to 24.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.44.0 to 8.45.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.45.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.44.0 to 8.45.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.45.0/packages/parser) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 24.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.45.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.45.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
dependabot
bot
added
dependencies
✓ Safe to upgradeI recommend merging this upgrade because these are routine minor and patch version updates to development tooling dependencies. The four packages being upgraded (TypeScript compiler, Node.js type definitions, and two TypeScript ESLint packages) are all legitimate packages from official sources with no actual security issues. The security alerts mentioned in the analysis are false positives referring to typosquatting packages with similar names that are NOT present in this project. These updates include bug fixes and maintain compatibility with the project's Node.js requirement of version 16.15.0 or higher. All packages remain within compatible version ranges as confirmed by the TypeScript ESLint compatibility matrix. What we checked
Dependency UsageThese four packages are development dependencies that provide the foundational tooling infrastructure for the OpenFGA JavaScript SDK: TypeScript compiles the entire SDK codebase from TypeScript to JavaScript for distribution, @types/node provides Node.js type definitions used throughout the SDK's source files, and @typescript-eslint/eslint-plugin and @typescript-eslint/parser work together in the ESLint configuration to enforce code quality standards across all TypeScript files. These tools support the SDK's build pipeline, linting workflow, and type-safe development experience but do not directly contribute to the authorization and fine-grained access control functionality delivered to end users. ChangesTypeScript upgraded with bug fixes for known issues. The typescript-eslint packages updated with improvements to several rules including
View 36 more changes
References (8)[1]: Legitimate @types/node package upgraded from 24.5.2 to 24.6.2 (NOT the malicious 'types-node' typosquat) Line 32 in dc8cf2e [2]: Legitimate @typescript-eslint/eslint-plugin upgraded from 8.44.0 to 8.45.0 (NOT the malicious '@typescript_eslinter/eslint' typosquat) Line 34 in dc8cf2e [3]: TypeScript upgraded from 5.9.2 to 5.9.3 - patch release with bug fixes Line 40 in dc8cf2e [4]: Project requires Node.js >=16.15.0, which is compatible with all updated dependencies that support Node.js versions 16, 18, and 20 Line 58 in dc8cf2e [5]: Official TypeScript ESLint compatibility matrix confirms TypeScript 5.9.3 is fully compatible with @typescript-eslint packages version 8.45.0 (source link) [6]: Package lock confirms @types/node version 24.6.2 is installed from official npm registry Line 1381 in dc8cf2e [7]: Package lock confirms TypeScript version 5.9.3 is installed from official npm registry with Apache-2.0 license Line 5311 in dc8cf2e [8]: Package lock confirms @typescript-eslint/eslint-plugin version 8.45.0 is installed from official npm registry Line 1422 in dc8cf2e fossabot analyzed this PR using dependency research. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Note Free review on us!CodeRabbit is offering free reviews until Wed Oct 08 2025 to showcase some of the refinements we've made. Comment |
1 participant
Bumps the dependencies group with 4 updates: @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser and typescript.
Updates
@types/nodefrom 24.5.2 to 24.6.2Commits
Updates
@typescript-eslint/eslint-pluginfrom 8.44.0 to 8.45.0Release notes
Sourced from
@typescript-eslint/eslint-plugin's releases.Changelog
Sourced from
@typescript-eslint/eslint-plugin's changelog.Commits
255e9e2chore(release): publish 8.45.0967764efix(eslint-plugin): [prefer-nullish-coalescing] ignoreBooleanCoercion should ...f2eeb9dfeat(eslint-plugin): expose rule name via RuleModule interface (#11616)590fac6fix(eslint-plugin): [no-base-to-string] check if superclass is ignored (#11617)c198052chore(release): publish 8.44.1c392a0dfix(eslint-plugin): [await-thenable] should not report passing values to prom...20c3d97fix(eslint-plugin): [no-unsafe-enum-comparison] support unions of literals (#...4fde781fix(eslint-plugin): [no-base-to-string] make ignoredTypeNames match type name...Updates
@typescript-eslint/parserfrom 8.44.0 to 8.45.0Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
255e9e2chore(release): publish 8.45.0c198052chore(release): publish 8.44.1Updates
typescriptfrom 5.9.2 to 5.9.3Release notes
Sourced from typescript's releases.
Commits
c63de15Bump version to 5.9.3 and LKG8428ca4🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...a131cac🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...0424333🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)bdb641a🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...0d9b9b9🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...2dce0c5Intentionally regress one buggy declaration output to an older version (#62163)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions