Bump brace-expansion to address security notice

Bump picomatch to fix security notice
Bump @octokit/plugin-rest-endpoint-methods from 10.4.1 to 17.0.0 (#590 )
2026-03-29 18:09:06 -04:00 · 2026-03-28 10:16:23 -04:00 · 2026-03-26 14:17:37 -04:00 · 2026-03-26 14:17:07 -04:00
4 changed files with 90 additions and 109 deletions
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,7 +13,7 @@ jobs:
    steps:
      - uses: actions/checkout@v6
        
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v5
        with:
          version: latest

--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,7 +7,7 @@ jobs:
    steps:
    - uses: actions/checkout@v6
      
-    - uses: pnpm/action-setup@v4
+    - uses: pnpm/action-setup@v5
      with:
        version: latest

--- a/package.json
+++ b/package.json
@@ -37,17 +37,19 @@
    },
    "pnpm": {
        "overrides": {
-            "undici": ">=6.24.0"
+            "undici": ">=6.24.0",
+            "picomatch": ">=4.0.4",
+            "brace-expansion": ">=5.0.5"
        }
    },
    "devDependencies": {
        "@biomejs/biome": "2.4.4",
-        "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
+        "@octokit/plugin-rest-endpoint-methods": "^17.0.0",
        "@octokit/request-error": "^7.1.0",
        "@octokit/types": "^16.0.0",
        "@vercel/ncc": "^0.38.4",
-        "@vitest/coverage-v8": "^4.1.0",
+        "@vitest/coverage-v8": "^4.1.2",
        "typescript": "^5.9.3",
-        "vitest": "^4.1.0"
+        "vitest": "^4.1.2"
    }
 }
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,6 +6,8 @@ settings:

 overrides:
  undici: '>=6.24.0'
+  picomatch: '>=4.0.4'
+  brace-expansion: '>=5.0.5'

 importers:

@@ -28,8 +30,8 @@ importers:
        specifier: 2.4.4
        version: 2.4.4
      '@octokit/plugin-rest-endpoint-methods':
-        specifier: ^10.4.1
-        version: 10.4.1(@octokit/core@7.0.6)
+        specifier: ^17.0.0
+        version: 17.0.0(@octokit/core@7.0.6)
      '@octokit/request-error':
        specifier: ^7.1.0
        version: 7.1.0
@@ -40,14 +42,14 @@ importers:
        specifier: ^0.38.4
        version: 0.38.4
      '@vitest/coverage-v8':
-        specifier: ^4.1.0
-        version: 4.1.0(vitest@4.1.0(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)))
+        specifier: ^4.1.2
+        version: 4.1.2(vitest@4.1.2(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)))
      typescript:
        specifier: ^5.9.3
        version: 5.9.3
      vitest:
-        specifier: ^4.1.0
-        version: 4.1.0(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0))
+        specifier: ^4.1.2
+        version: 4.1.2(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0))

 packages:

@@ -325,9 +327,6 @@ packages:
    resolution: {integrity: sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==}
    engines: {node: '>= 20'}

-  '@octokit/openapi-types@20.0.0':
-    resolution: {integrity: sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==}
-
  '@octokit/openapi-types@27.0.0':
    resolution: {integrity: sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==}

@@ -337,12 +336,6 @@ packages:
    peerDependencies:
      '@octokit/core': '>=6'

-  '@octokit/plugin-rest-endpoint-methods@10.4.1':
-    resolution: {integrity: sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==}
-    engines: {node: '>= 18'}
-    peerDependencies:
-      '@octokit/core': '5'
-
  '@octokit/plugin-rest-endpoint-methods@17.0.0':
    resolution: {integrity: sha512-B5yCyIlOJFPqUUeiD0cnBJwWJO8lkJs5d8+ze9QDP6SvfiXSz1BF+91+0MeI1d2yxgOhU/O+CvtiZ9jSkHhFAw==}
    engines: {node: '>= 20'}
@@ -357,9 +350,6 @@ packages:
    resolution: {integrity: sha512-v93h0i1yu4idj8qFPZwjehoJx4j3Ntn+JhXsdJrG9pYaX6j/XRz2RmasMUHtNgQD39nrv/VwTWSqK0RNXR8upA==}
    engines: {node: '>= 20'}

-  '@octokit/types@12.6.0':
-    resolution: {integrity: sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==}
-
  '@octokit/types@16.0.0':
    resolution: {integrity: sha512-sKq+9r1Mm4efXW1FCk7hFSeJo4QKreL/tTbR0rz/qx/r1Oa2VV83LTA/H/MuCOX7uCIJmQVRKBcbmWoySjAnSg==}

@@ -507,43 +497,43 @@ packages:
    resolution: {integrity: sha512-8LwjnlP39s08C08J5NstzriPvW1SP8Zfpp1BvC2sI35kPeZnHfxVkCwu4/+Wodgnd60UtT1n8K8zw+Mp7J9JmQ==}
    hasBin: true

-  '@vitest/coverage-v8@4.1.0':
-    resolution: {integrity: sha512-nDWulKeik2bL2Va/Wl4x7DLuTKAXa906iRFooIRPR+huHkcvp9QDkPQ2RJdmjOFrqOqvNfoSQLF68deE3xC3CQ==}
+  '@vitest/coverage-v8@4.1.2':
+    resolution: {integrity: sha512-sPK//PHO+kAkScb8XITeB1bf7fsk85Km7+rt4eeuRR3VS1/crD47cmV5wicisJmjNdfeokTZwjMk4Mj2d58Mgg==}
    peerDependencies:
-      '@vitest/browser': 4.1.0
-      vitest: 4.1.0
+      '@vitest/browser': 4.1.2
+      vitest: 4.1.2
    peerDependenciesMeta:
      '@vitest/browser':
        optional: true

-  '@vitest/expect@4.1.0':
-    resolution: {integrity: sha512-EIxG7k4wlWweuCLG9Y5InKFwpMEOyrMb6ZJ1ihYu02LVj/bzUwn2VMU+13PinsjRW75XnITeFrQBMH5+dLvCDA==}
+  '@vitest/expect@4.1.2':
+    resolution: {integrity: sha512-gbu+7B0YgUJ2nkdsRJrFFW6X7NTP44WlhiclHniUhxADQJH5Szt9mZ9hWnJPJ8YwOK5zUOSSlSvyzRf0u1DSBQ==}

-  '@vitest/mocker@4.1.0':
-    resolution: {integrity: sha512-evxREh+Hork43+Y4IOhTo+h5lGmVRyjqI739Rz4RlUPqwrkFFDF6EMvOOYjTx4E8Tl6gyCLRL8Mu7Ry12a13Tw==}
+  '@vitest/mocker@4.1.2':
+    resolution: {integrity: sha512-Ize4iQtEALHDttPRCmN+FKqOl2vxTiNUhzobQFFt/BM1lRUTG7zRCLOykG/6Vo4E4hnUdfVLo5/eqKPukcWW7Q==}
    peerDependencies:
      msw: ^2.4.9
-      vite: ^6.0.0 || ^7.0.0 || ^8.0.0-0
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
    peerDependenciesMeta:
      msw:
        optional: true
      vite:
        optional: true

-  '@vitest/pretty-format@4.1.0':
-    resolution: {integrity: sha512-3RZLZlh88Ib0J7NQTRATfc/3ZPOnSUn2uDBUoGNn5T36+bALixmzphN26OUD3LRXWkJu4H0s5vvUeqBiw+kS0A==}
+  '@vitest/pretty-format@4.1.2':
+    resolution: {integrity: sha512-dwQga8aejqeuB+TvXCMzSQemvV9hNEtDDpgUKDzOmNQayl2OG241PSWeJwKRH3CiC+sESrmoFd49rfnq7T4RnA==}

-  '@vitest/runner@4.1.0':
-    resolution: {integrity: sha512-Duvx2OzQ7d6OjchL+trw+aSrb9idh7pnNfxrklo14p3zmNL4qPCDeIJAK+eBKYjkIwG96Bc6vYuxhqDXQOWpoQ==}
+  '@vitest/runner@4.1.2':
+    resolution: {integrity: sha512-Gr+FQan34CdiYAwpGJmQG8PgkyFVmARK8/xSijia3eTFgVfpcpztWLuP6FttGNfPLJhaZVP/euvujeNYar36OQ==}

-  '@vitest/snapshot@4.1.0':
-    resolution: {integrity: sha512-0Vy9euT1kgsnj1CHttwi9i9o+4rRLEaPRSOJ5gyv579GJkNpgJK+B4HSv/rAWixx2wdAFci1X4CEPjiu2bXIMg==}
+  '@vitest/snapshot@4.1.2':
+    resolution: {integrity: sha512-g7yfUmxYS4mNxk31qbOYsSt2F4m1E02LFqO53Xpzg3zKMhLAPZAjjfyl9e6z7HrW6LvUdTwAQR3HHfLjpko16A==}

-  '@vitest/spy@4.1.0':
-    resolution: {integrity: sha512-pz77k+PgNpyMDv2FV6qmk5ZVau6c3R8HC8v342T2xlFxQKTrSeYw9waIJG8KgV9fFwAtTu4ceRzMivPTH6wSxw==}
+  '@vitest/spy@4.1.2':
+    resolution: {integrity: sha512-DU4fBnbVCJGNBwVA6xSToNXrkZNSiw59H8tcuUspVMsBDBST4nfvsPsEHDHGtWRRnqBERBQu7TrTKskmjqTXKA==}

-  '@vitest/utils@4.1.0':
-    resolution: {integrity: sha512-XfPXT6a8TZY3dcGY8EdwsBulFCIw+BeeX0RZn2x/BtiY/75YGh8FeWGG8QISN/WhaqSrE2OrlDgtF8q5uhOTmw==}
+  '@vitest/utils@4.1.2':
+    resolution: {integrity: sha512-xw2/TiX82lQHA06cgbqRKFb5lCAy3axQ4H4SoUFhUsg+wztiet+co86IAMDtF6Vm1hc7J6j09oh/rgDn+JdKIQ==}

  assertion-error@2.0.1:
    resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
@@ -559,8 +549,8 @@ packages:
  before-after-hook@4.0.0:
    resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}

-  brace-expansion@5.0.4:
-    resolution: {integrity: sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==}
+  brace-expansion@5.0.5:
+    resolution: {integrity: sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==}
    engines: {node: 18 || 20 || >=22}

  chai@6.2.2:
@@ -592,7 +582,7 @@ packages:
    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
    engines: {node: '>=12.0.0'}
    peerDependencies:
-      picomatch: ^3 || ^4
+      picomatch: '>=4.0.4'
    peerDependenciesMeta:
      picomatch:
        optional: true
@@ -668,8 +658,8 @@ packages:
  picocolors@1.1.1:
    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}

-  picomatch@4.0.3:
-    resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==}
+  picomatch@4.0.4:
+    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
    engines: {node: '>=12'}

  postcss@8.5.8:
@@ -714,8 +704,8 @@ packages:
    resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
    engines: {node: '>=12.0.0'}

-  tinyrainbow@3.0.3:
-    resolution: {integrity: sha512-PSkbLUoxOFRzJYjjxHJt9xro7D+iilgMX/C9lawzVuYiIdcihh9DXmVibBe8lmcFrRi/VzlPjBxbN7rH24q8/Q==}
+  tinyrainbow@3.1.0:
+    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
    engines: {node: '>=14.0.0'}

  tunnel@0.0.6:
@@ -777,21 +767,21 @@ packages:
      yaml:
        optional: true

-  vitest@4.1.0:
-    resolution: {integrity: sha512-YbDrMF9jM2Lqc++2530UourxZHmkKLxrs4+mYhEwqWS97WJ7wOYEkcr+QfRgJ3PW9wz3odRijLZjHEaRLTNbqw==}
+  vitest@4.1.2:
+    resolution: {integrity: sha512-xjR1dMTVHlFLh98JE3i/f/WePqJsah4A0FK9cc8Ehp9Udk0AZk6ccpIZhh1qJ/yxVWRZ+Q54ocnD8TXmkhspGg==}
    engines: {node: ^20.0.0 || ^22.0.0 || >=24.0.0}
    hasBin: true
    peerDependencies:
      '@edge-runtime/vm': '*'
      '@opentelemetry/api': ^1.9.0
      '@types/node': ^20.0.0 || ^22.0.0 || >=24.0.0
-      '@vitest/browser-playwright': 4.1.0
-      '@vitest/browser-preview': 4.1.0
-      '@vitest/browser-webdriverio': 4.1.0
-      '@vitest/ui': 4.1.0
+      '@vitest/browser-playwright': 4.1.2
+      '@vitest/browser-preview': 4.1.2
+      '@vitest/browser-webdriverio': 4.1.2
+      '@vitest/ui': 4.1.2
      happy-dom: '*'
      jsdom: '*'
-      vite: ^6.0.0 || ^7.0.0 || ^8.0.0-0
+      vite: ^6.0.0 || ^7.0.0 || ^8.0.0
    peerDependenciesMeta:
      '@edge-runtime/vm':
        optional: true
@@ -1010,8 +1000,6 @@ snapshots:
      '@octokit/types': 16.0.0
      universal-user-agent: 7.0.3

-  '@octokit/openapi-types@20.0.0': {}
-
  '@octokit/openapi-types@27.0.0': {}

  '@octokit/plugin-paginate-rest@14.0.0(@octokit/core@7.0.6)':
@@ -1019,11 +1007,6 @@ snapshots:
      '@octokit/core': 7.0.6
      '@octokit/types': 16.0.0

-  '@octokit/plugin-rest-endpoint-methods@10.4.1(@octokit/core@7.0.6)':
-    dependencies:
-      '@octokit/core': 7.0.6
-      '@octokit/types': 12.6.0
-
  '@octokit/plugin-rest-endpoint-methods@17.0.0(@octokit/core@7.0.6)':
    dependencies:
      '@octokit/core': 7.0.6
@@ -1041,10 +1024,6 @@ snapshots:
      fast-content-type-parse: 3.0.0
      universal-user-agent: 7.0.3

-  '@octokit/types@12.6.0':
-    dependencies:
-      '@octokit/openapi-types': 20.0.0
-
  '@octokit/types@16.0.0':
    dependencies:
      '@octokit/openapi-types': 27.0.0
@@ -1141,10 +1120,10 @@ snapshots:

  '@vercel/ncc@0.38.4': {}

-  '@vitest/coverage-v8@4.1.0(vitest@4.1.0(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)))':
+  '@vitest/coverage-v8@4.1.2(vitest@4.1.2(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)))':
    dependencies:
      '@bcoe/v8-coverage': 1.0.2
-      '@vitest/utils': 4.1.0
+      '@vitest/utils': 4.1.2
      ast-v8-to-istanbul: 1.0.0
      istanbul-lib-coverage: 3.2.2
      istanbul-lib-report: 3.0.1
@@ -1152,49 +1131,49 @@ snapshots:
      magicast: 0.5.2
      obug: 2.1.1
      std-env: 4.0.0
-      tinyrainbow: 3.0.3
-      vitest: 4.1.0(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0))
+      tinyrainbow: 3.1.0
+      vitest: 4.1.2(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0))

-  '@vitest/expect@4.1.0':
+  '@vitest/expect@4.1.2':
    dependencies:
      '@standard-schema/spec': 1.1.0
      '@types/chai': 5.2.3
-      '@vitest/spy': 4.1.0
-      '@vitest/utils': 4.1.0
+      '@vitest/spy': 4.1.2
+      '@vitest/utils': 4.1.2
      chai: 6.2.2
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0

-  '@vitest/mocker@4.1.0(vite@7.3.1(@types/node@25.1.0))':
+  '@vitest/mocker@4.1.2(vite@7.3.1(@types/node@25.1.0))':
    dependencies:
-      '@vitest/spy': 4.1.0
+      '@vitest/spy': 4.1.2
      estree-walker: 3.0.3
      magic-string: 0.30.21
    optionalDependencies:
      vite: 7.3.1(@types/node@25.1.0)

-  '@vitest/pretty-format@4.1.0':
+  '@vitest/pretty-format@4.1.2':
    dependencies:
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0

-  '@vitest/runner@4.1.0':
+  '@vitest/runner@4.1.2':
    dependencies:
-      '@vitest/utils': 4.1.0
+      '@vitest/utils': 4.1.2
      pathe: 2.0.3

-  '@vitest/snapshot@4.1.0':
+  '@vitest/snapshot@4.1.2':
    dependencies:
-      '@vitest/pretty-format': 4.1.0
-      '@vitest/utils': 4.1.0
+      '@vitest/pretty-format': 4.1.2
+      '@vitest/utils': 4.1.2
      magic-string: 0.30.21
      pathe: 2.0.3

-  '@vitest/spy@4.1.0': {}
+  '@vitest/spy@4.1.2': {}

-  '@vitest/utils@4.1.0':
+  '@vitest/utils@4.1.2':
    dependencies:
-      '@vitest/pretty-format': 4.1.0
+      '@vitest/pretty-format': 4.1.2
      convert-source-map: 2.0.0
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0

  assertion-error@2.0.1: {}

@@ -1208,7 +1187,7 @@ snapshots:

  before-after-hook@4.0.0: {}

-  brace-expansion@5.0.4:
+  brace-expansion@5.0.5:
    dependencies:
      balanced-match: 4.0.4

@@ -1255,9 +1234,9 @@ snapshots:

  fast-content-type-parse@3.0.0: {}

-  fdir@6.5.0(picomatch@4.0.3):
+  fdir@6.5.0(picomatch@4.0.4):
    optionalDependencies:
-      picomatch: 4.0.3
+      picomatch: 4.0.4

  fsevents@2.3.3:
    optional: true
@@ -1305,7 +1284,7 @@ snapshots:

  minimatch@10.2.4:
    dependencies:
-      brace-expansion: 5.0.4
+      brace-expansion: 5.0.5

  minipass@7.1.3: {}

@@ -1322,7 +1301,7 @@ snapshots:

  picocolors@1.1.1: {}

-  picomatch@4.0.3: {}
+  picomatch@4.0.4: {}

  postcss@8.5.8:
    dependencies:
@@ -1381,10 +1360,10 @@ snapshots:

  tinyglobby@0.2.15:
    dependencies:
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4

-  tinyrainbow@3.0.3: {}
+  tinyrainbow@3.1.0: {}

  tunnel@0.0.6: {}

@@ -1399,8 +1378,8 @@ snapshots:
  vite@7.3.1(@types/node@25.1.0):
    dependencies:
      esbuild: 0.27.4
-      fdir: 6.5.0(picomatch@4.0.3)
-      picomatch: 4.0.3
+      fdir: 6.5.0(picomatch@4.0.4)
+      picomatch: 4.0.4
      postcss: 8.5.8
      rollup: 4.59.0
      tinyglobby: 0.2.15
@@ -1408,26 +1387,26 @@ snapshots:
      '@types/node': 25.1.0
      fsevents: 2.3.3

-  vitest@4.1.0(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)):
+  vitest@4.1.2(@types/node@25.1.0)(vite@7.3.1(@types/node@25.1.0)):
    dependencies:
-      '@vitest/expect': 4.1.0
-      '@vitest/mocker': 4.1.0(vite@7.3.1(@types/node@25.1.0))
-      '@vitest/pretty-format': 4.1.0
-      '@vitest/runner': 4.1.0
-      '@vitest/snapshot': 4.1.0
-      '@vitest/spy': 4.1.0
-      '@vitest/utils': 4.1.0
+      '@vitest/expect': 4.1.2
+      '@vitest/mocker': 4.1.2(vite@7.3.1(@types/node@25.1.0))
+      '@vitest/pretty-format': 4.1.2
+      '@vitest/runner': 4.1.2
+      '@vitest/snapshot': 4.1.2
+      '@vitest/spy': 4.1.2
+      '@vitest/utils': 4.1.2
      es-module-lexer: 2.0.0
      expect-type: 1.3.0
      magic-string: 0.30.21
      obug: 2.1.1
      pathe: 2.0.3
-      picomatch: 4.0.3
+      picomatch: 4.0.4
      std-env: 4.0.0
      tinybench: 2.9.0
      tinyexec: 1.0.2
      tinyglobby: 0.2.15
-      tinyrainbow: 3.0.3
+      tinyrainbow: 3.1.0
      vite: 7.3.1(@types/node@25.1.0)
      why-is-node-running: 2.3.0
    optionalDependencies:
Author	SHA1	Message	Date
Nick Cipollo	e8998be2b1	Bump brace-expansion to address security notice Some checks failed PR Checks / check_pr (push) Has been cancelled Details Test / check_pr (push) Has been cancelled Details	2026-03-29 18:09:06 -04:00
Nick Cipollo	d23a7cb09d	Bump picomatch to fix security notice	2026-03-28 10:16:23 -04:00
dependabot[bot]	d82d180c1d	Bump @octokit/plugin-rest-endpoint-methods from 10.4.1 to 17.0.0 (#590 ) Bumps [@octokit/plugin-rest-endpoint-methods](https://github.com/octokit/plugin-rest-endpoint-methods.js) from 10.4.1 to 17.0.0. - [Release notes](https://github.com/octokit/plugin-rest-endpoint-methods.js/releases) - [Commits](https://github.com/octokit/plugin-rest-endpoint-methods.js/compare/v10.4.1...v17.0.0) --- updated-dependencies: - dependency-name: "@octokit/plugin-rest-endpoint-methods" dependency-version: 17.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-26 14:17:37 -04:00
dependabot[bot]	ba095ececc	Bump pnpm/action-setup from 4 to 5 (#598 ) Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4 to 5. - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v5) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-26 14:17:07 -04:00