chore(deps): bump lint-staged from 16.3.2 to 16.4.0#302
chore(deps): bump lint-staged from 16.3.2 to 16.4.0#302dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 16.3.2 to 16.4.0. - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v16.3.2...v16.4.0) --- updated-dependencies: - dependency-name: lint-staged dependency-version: 16.4.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
✔️ Bundle Size Analysis
Bundle breakdown |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — straightforward Dependabot lockfile bump for lint-staged.
Extended reasoning...
Overview
This is an automated Dependabot PR that bumps lint-staged from 16.3.2 to 16.4.0. The only file changed is pnpm-lock.yaml. The upstream changes include replacing micromatch with picomatch (reducing dependencies), a tinyexec update to prefer local node_modules/.bin, and a CRLF line-ending fix. A transitive @sourcegraph/amp version also shifted in the lockfile.
Security risks
No security risks. This is a dev-dependency lockfile update generated by Dependabot. lint-staged is only used during pre-commit hooks and does not run in production.
Level of scrutiny
Minimal scrutiny required. This is a lockfile-only change for a dev tool, within the same minor version range (^16.2.7), generated by a trusted automation (Dependabot). No source code or configuration changes.
Other factors
No bugs were found. No outstanding reviewer comments. No CODEOWNERS concerns for pnpm-lock.yaml. The PR timeline shows no prior reviews from me or any human reviewer, only bot comments about label issues and usage limits.
Bumps lint-staged from 16.3.2 to 16.4.0.
Release notes
Sourced from lint-staged's releases.
Changelog
Sourced from lint-staged's changelog.
Commits
445f9ddchore(changeset): released91be60docs: update readme to use picomatchb392a9frefactor: extractmatchFilesand add unit tests687fc90refactor: replace micromatch with picomatch26dadf9chore(changeset): release9d6e827build(deps): update dependencies8aea986chore(changeset): release0109e8dfix: strip Git CRLF warning from outputDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)