Visitar URL original
chore(deps): lock file maintenance by renovate[bot] · Pull Request #1650 · jdx/usage · GitHub
Skip to content

Repository navigation

chore(deps): lock file maintenance - #1650

Merged
renovate[bot] merged 2 commits into
mainfrom
renovate/lock-file-maintenance-lockfile-maintenance
Nov 12, 2026
Merged

chore(deps): lock file maintenance#1650
renovate[bot] merged 2 commits into
mainfrom
renovate/lock-file-maintenance-lockfile-maintenance

Conversation

@renovate

@renovate renovate Bot commented Nov 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • Only on Thursday (* * * * 4)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) November 12, 2026 07:57
@greptile-apps

greptile-apps Bot commented Nov 12, 2026

Copy link
Copy Markdown
Contributor

This PR does not match any of the 1 configured review trigger rule.

@coderabbitai

coderabbitai Bot commented Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Central YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8c26122f-2f05-4be3-970a-1e8bddbb6f15

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@socket-security

socket-security Bot commented Nov 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​oxfmt@​0.76.0 ⏵ 0.78.0941008896 +2100
Updatedcargo/​toml@​1.2.0%2Bspec-1.1.0 ⏵ 1.2.1+spec-1.1.010010093100100
Addedcargo/​syn@​3.0.10100100100100100

View full report

@socket-security

socket-security Bot commented Nov 12, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Priority Alert  (click "▶" to expand/collapse) Action
Medium priority
License policy violation: cargo ar_archive_writer

License: Apache-2.0 WITH LLVM-exception - The applicable license policy does not permit this license (5) (ar_archive_writer-0.5.5/Cargo.toml)

License: Apache-2.0 WITH LLVM-exception - The applicable license policy does not permit this license (5) (ar_archive_writer-0.5.5/LICENSE.txt)

From: Cargo.lock → cargo/expr-lang@2.1.0 → cargo/ar_archive_writer@0.5.5

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/ar_archive_writer@0.5.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn

View full report

@renovate
renovate Bot merged commit bd6ffda into main Nov 12, 2026
15 checks passed
@renovate
renovate Bot deleted the renovate/lock-file-maintenance-lockfile-maintenance branch November 12, 2026 08:11
@mise-en-dev mise-en-dev mentioned this pull request Nov 12, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants