Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates - #28

Merged
unbraind merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-caeb32d6d6
May 16, 2026
Merged

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#28
unbraind merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-caeb32d6d6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 5 updates in the / directory:

Package From To
@sentry/cli 3.4.1 3.4.2
@types/node 25.6.0 25.8.0
@vitest/coverage-v8 4.1.5 4.1.6
tsx 4.21.0 4.22.0
vitest 4.1.5 4.1.6

Updates @sentry/cli from 3.4.1 to 3.4.2

Release notes

Sourced from @​sentry/cli's releases.

3.4.2

Fixes

  • (snapshots) Stop sending Sentry auth token to Objectstore (#3286)
  • (js) Fix argument injection in JavaScript API's serializeOptions. String/number options now validate input types and prevent Array.prototype.concat() from flattening array values into separate CLI arguments. (#3287)

3.4.2-snapshot.20260511.9081115

Snapshot build from master at 9081115.

3.4.2-snapshot.20260511.4052e78

Snapshot build from master at 4052e78.

3.4.2-snapshot.20260511.04c061a

Snapshot build from master at 04c061a.

3.4.2-snapshot.20260511.f5db2f6

Snapshot build from master at f5db2f6.

3.4.2-snapshot.20260508.660e98b

Snapshot build from master at 660e98b.

3.4.2-snapshot.20260505.848b63a

Snapshot build from master at 848b63a.

3.4.2-snapshot.20260505.54eefbd

Snapshot build from master at 54eefbd.

3.4.2-snapshot.20260505.5b673e5

Snapshot build from master at 5b673e5.

3.4.2-snapshot.20260505.4e81e6a

Snapshot build from master at 4e81e6a.

3.4.2-snapshot.20260505.d23f02b

Snapshot build from master at d23f02b.

3.4.2-snapshot.20260505.c937179

Snapshot build from master at c937179.

3.4.2-snapshot.20260505.c3e59a9

Snapshot build from master at c3e59a9.

3.4.2-snapshot.20260430.b383d38

Snapshot build from master at b383d38.

3.4.2-snapshot.20260428.3a7d03f

Snapshot build from master at 3a7d03f.

3.4.2-snapshot.20260428.b797278

Snapshot build from master at b797278.

Changelog

Sourced from @​sentry/cli's changelog.

3.4.2

Fixes

  • (snapshots) Stop sending Sentry auth token to Objectstore (#3286)
  • (js) Fix argument injection in JavaScript API's serializeOptions. String/number options now validate input types and prevent Array.prototype.concat() from flattening array values into separate CLI arguments. (#3287)
Commits
  • e3f5f55 release: 3.4.2
  • f5db2f6 build(deps): Update openssl dependency (#3294)
  • 4052e78 build(deps): Bump rand (#3296)
  • 04c061a build(js): Update fast-uri (#3295)
  • 9081115 fix(js): Prevent argument injection via type coercion in serializeOptions (#3...
  • 660e98b ref(upload): Remove redundant function parameter (#3280)
  • 54eefbd build(rust): Update Rust toolchain to 1.95 (#3271)
  • cbaec55 build(deps): bump actions/create-github-app-token from 2.2.1 to 3.1.1 (#3267)
  • c937179 meta: Prevent script injection in rust-toolchain-update workflow (#3284)
  • d23f02b meta: Prevent potential shell injection in GitHub Actions workflow (#3283)
  • Additional commits viewable in compare view

Updates @types/node from 25.6.0 to 25.8.0

Commits

Updates @vitest/coverage-v8 from 4.1.5 to 4.1.6

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates tsx from 4.21.0 to 4.22.0

Release notes

Sourced from tsx's releases.

v4.22.0

4.22.0 (2026-05-14)

Features

This release is also available on:

v4.21.1

4.21.1 (2026-05-14)

Bug Fixes

  • support Node 20.11/21.2 import.meta paths (acf3d8f)
  • support Node.js 24.15.0 (c1d2d45)
  • support Node.js 26.1.0 and 25.9.0 (1d7e528)

This release is also available on:

Commits
  • b29f6ee feat: upgrade esbuild to 0.28 (#789)
  • 0dd17e9 test: cover registerHooks loader composition
  • acf3d8f fix: support Node 20.11/21.2 import.meta paths
  • 4bbef80 test: cover configDir paths without baseUrl
  • dddc5ce test: cover sync-hook watch reruns and cleanup retries
  • 09e8f8c test: assert CLI runs without warnings
  • 1d7e528 fix: support Node.js 26.1.0 and 25.9.0
  • c1d2d45 fix: support Node.js 24.15.0
  • d04672d test: update node version feature gates
  • abd863f build: bundle get-tsconfig v5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.


Updates vitest from 4.1.5 to 4.1.6

Release notes

Sourced from vitest's releases.

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • a8fd24c chore: release v4.1.6
  • 18af98c fix(browser): simplify orchestrator otel carrier (#10285)
  • 3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group across 1 directory w…
c6c7fee 
…ith 5 updates

Bumps the dev-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/cli](https://github.com/getsentry/sentry-cli) | `3.4.1` | `3.4.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `25.8.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.5` | `4.1.6` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` |



Updates `@sentry/cli` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/getsentry/sentry-cli/releases)
- [Changelog](https://github.com/getsentry/sentry-cli/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-cli@3.4.1...3.4.2)

Updates `@types/node` from 25.6.0 to 25.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8)

Updates `tsx` from 4.21.0 to 4.22.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.22.0)

Updates `vitest` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest)

---
updated-dependencies:
- dependency-name: "@sentry/cli"
  dependency-version: 3.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsx
  dependency-version: 4.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 16, 2026
@unbraind
unbraind merged commit 7f02421 into main May 16, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-caeb32d6d6 branch May 16, 2026 16:01
unbraind added a commit that referenced this pull request May 16, 2026
@unbraind @claude
feat(create): accept positional title argument; resolve stale Sentry …
decc807 
…cluster

Positional title in pm create (pm-7vm9):
- pm create "Fix login bug" --type Issue now works without --title flag
- Action signature accepts optional positional title; falls back to --title
- Help payload still flags title as required via description [required] marker
- requireStringOption error guidance mentions positional shortcut

Audit hygiene:
- .gitignore: add *.cpuprofile/*.heapprofile/*.heapsnapshot patterns;
  remove stray pm-list.cpuprofile profiling artifact from worktree
- pm-2723 closed after merging Dependabot PRs #24 (prod) and #28 (dev)
- pm-p7av closed after resolving 10 stale Sentry issues
  (PM-CLI-N/H/K/J/M/F/D/G/E/C) bound to v2026.5.10 with no recurrence
  across 6+ days; PM-CLI-A/9 ollama embedding timeouts remain under pm-ibp7
- pm-hosd opened to track follow-up: pm init --with-packages flag

Verification:
- 1306 tests pass across 92 files (focused: create-command 28,
  error-guidance 21, help-runtime 21)
- pnpm typecheck passes
- check-secrets passes; pm health (fast path) ok=true
- pm --version 244ms; pm list 441ms; pm search 988ms

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
unbraind added a commit that referenced this pull request Jun 4, 2026
@unbraind
Address package smoke and SDK review feedback
1bfacca 
Harden the external package smoke harness with script-relative repo root resolution, spawn error reporting, global temp root creation, cleanup guards, and invocable action reporting.

Make activateExtensionForTest tolerate malformed manifest capabilities and default-exported manifests, with regression coverage.

Record review-response evidence on pm-vnjh and route package-owned pm-changelog follow-ups upstream as issues #26, #27, and #28.
unbraind added a commit that referenced this pull request Jul 7, 2026
@unbraind @claude
chore(pm): review pass #28 — novelty-detection subsystem candidate, f…
3854fc2 
…lag-hint defect evidence, warning-drift counts

Verification: PRs 477-479 reconciled, all 15 open GH issues covered,
4 in_progress items are live SDK-first work, release 2026.7.7 healthy.
New: pm-vvib candidate #12 (per-author watermark change salience),
pm-gdi7 verified incomplete '--format valid on' suggester hint,
fresh validate drift counts on pm-j8z6/pm-e9zh.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DB9M42qpgshPb5aiSTJtx5
@unbraind

unbraind commented Aug 4, 2026

Copy link
Copy Markdown
Owner

PM context: pm-2723. Historical linkage verified during the 2026-08-04 ecosystem review. This comment records canonical context only; it does not reopen or change this artifact.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@unbraind