chore(deps-dev): Bump @octokit/auth-app from 8.1.2 to 8.2.0#845
Merged
Conversation
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
006b562 to
958dde2
Compare
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
958dde2 to
7a3b3a6
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
7a3b3a6 to
21ddf71
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
21ddf71 to
af01ecb
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
af01ecb to
caa96e3
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
caa96e3 to
b59b791
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
b59b791 to
111f737
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
111f737 to
b11483f
Compare
wrsmith108
added a commit
that referenced
this pull request
May 3, 2026
Adds 10 ecosystem groups under the npm block, mirroring the existing typescript-eslint group's update-types: [minor, patch] pattern (major bumps still surface individually for human review): - aws-sdk (@aws-sdk/*) - hono (@hono/*, hono) - astro (astro, @astrojs/*) - vercel (@vercel/*, vercel) - smithy (@smithy/*) - supabase (@supabase/*) - octokit (@octokit/*, octokit) - opentelemetry (@opentelemetry/*) - vitest (vitest, @vitest/*) - types (@types/*) Open Dependabot PRs #841, #842, #844, #845 (@octokit/*, @opentelemetry/*) specifically would have batched into 2 PRs instead of 4 with these groups. Adds package-ecosystem: 'docker' block on monthly cadence, mirroring the github-actions block shape. Surfaces base-image CVEs (currently node:22-slim per Dockerfile:20) as targeted PRs instead of accumulating silently between manual rebuilds. Reviewer-fatigue rationale: every Dependabot PR routes to a single named reviewer (ryansmith108). Batching reduces PR count → reduces rubberstamp risk on the supply-chain hardening posture established in SMI-3864/3985 (Wave 1) and SMI-4651 (vendor trust tier). Verification: - python yaml.safe_load → 3 ecosystem blocks, 11 npm groups, valid - docker exec skillsmith-dev-1 npm run audit:standards → 51 pass, 6 warnings, 0 fail (89% compliance, unchanged) - dependabot.yml is data-only; structural verification via GitHub UI after merge will confirm batched PRs land on next Monday run. Refs: SMI-4666 SMI-4669 Co-authored-by: Ryan Smith <wrsmith108@users.noreply.github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
b11483f to
6f624a7
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
6f624a7 to
6a9e20c
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
6a9e20c to
3ab6488
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
3ab6488 to
e9e118c
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
e9e118c to
50c6102
Compare
Member
|
@dependabot rebase |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
cc13b30 to
d418009
Compare
Member
|
@dependabot recreate |
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
d418009 to
459ac6e
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
459ac6e to
7601526
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
7601526 to
055a71f
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
055a71f to
bd388aa
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
bd388aa to
706aa28
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
706aa28 to
1b5f68d
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
1b5f68d to
4a61f4e
Compare
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
4a61f4e to
6cf94b0
Compare
Re-applied after SMI-4784 lockfile drift on auto-rebase. Co-Authored-By: claude-flow <ruv@ruv.net> Co-Authored-By: Claude <noreply@anthropic.com>
wrsmith108
force-pushed
the
dependabot/npm_and_yarn/octokit/auth-app-8.2.0
branch
from
6cf94b0 to
26b7b70
Compare
E2E Test Results
|
E2E Test ResultsE2E Test Results - May 14, 2026Summary
Test Results
Generated by skillsmith E2E test suite |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps @octokit/auth-app from 8.1.2 to 8.2.0.
Release notes
Sourced from @octokit/auth-app's releases.
Commits
6201580feat: handling exp is too far in the future (#699)5b218afAdd enterprise installation route to JWT-authenticated routes (#736)4486c10build(deps-dev): bump vite from 7.1.7 to 7.1.11 (#728)e1fecc4build(deps): bump glob from 10.4.5 to 10.5.0 (#733)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@octokit/auth-appsince your current version.[skip-impl-check]