chore(deps-dev): Bump the npm-minor-and-patch group across 1 directory with 2 updates by dependabot[bot] · Pull Request #285 · danibsheehan/musing

dependabot · 2026-10-07T09:15:31Z

Bumps the npm-minor-and-patch group with 2 updates in the / directory: eslint and jsdom.

Updates eslint from 10.11.0 to 10.12.0

Release notes

v10.12.0

Features

4618052 feat: handle astral letters in new-cap (#21357) (sary)

4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)

bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)

efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)

93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)

02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)

b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)

69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)

686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

67eb586 docs: Update README (GitHub Actions Bot)

5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)

8816c1d docs: Update README (GitHub Actions Bot)

3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

152067f chore: update ecosystem plugins (#21362) (ESLint Bot)

b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])

bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)

322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)

d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])

29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])

39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

182a6e9 chore: update dependency prettier to v3.9.8 (#21352) (renovate[bot])

f995127 chore: remove CLAUDE.md in favor of AGENTS.md (#21339) (Jarren)

b95fb6c chore: update dependency prettier to v3.9.7 (#21347) (renovate[bot])

3782dd4 chore: update ecosystem plugins (#21342) (ESLint Bot)

Commits

a438ec3 10.12.0
32a73f1 Build: changelog update for 10.12.0
bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373)
bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332)
152067f chore: update ecosystem plugins (#21362)
b56d58e chore: update github/codeql-action action to v4.38.2 (#21376)
67eb586 docs: Update README
bfaea12 perf: cache normalized config globals per languageOptions (#21364)
322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369)
d166567 chore: update dependency prettier to v3.9.9 (#21371)
Additional commits viewable in compare view

Updates jsdom from 30.1.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

Updated URLs to support Unicode v18.0.0 in internationalized domain names.

Reduced package size and memory use for CSS property definitions. (@scttcper)

Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@cmdcolin)

Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@scttcper)

Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.

Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.

Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@asamuzaK)

Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@asamuzaK)

Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.

Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().

Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@scttcper)

Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.

Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.

Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@asamuzaK)

Commits

a23bfb7 30.1.2
64a75d2 Update dependencies and dev dependencies
7bf9653 Invalidate styles after CSSOM and control state changes
fe9009c Update focused area handling
a8d28b3 Release windows retained by stylesheet parsing
05a2c01 Deduplicate generated CSS property metadata
1efa190 Reduce generated CSS property data
a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
b2cd235 Update css-color
0542d2b Release idle MutationObserver bookkeeping
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

github-actions · 2026-10-07T09:15:45Z

app

File	Coverage	Lines	Branches
All files	`77%`	`83%`	`71%`	✅
src/App.tsx	`0%`	`0%`	`100%`	❌
src/components/AppLayout.tsx	`0%`	`0%`	`0%`	❌
src/components/DatabaseCanvas.tsx	`0%`	`0%`	`0%`	❌
src/components/DatabaseEmbedNodeView.tsx	`49%`	`53%`	`45%`	✅
src/components/DatabaseTableView.tsx	`97%`	`100%`	`94%`	✅
src/components/Editor.tsx	`87%`	`95%`	`78%`	✅
src/components/EditorTextFormatBubble.tsx	`25%`	`28%`	`23%`	✅
src/components/PageBlockGutter.tsx	`30%`	`35%`	`24%`	✅
src/components/PageChrome.tsx	`96%`	`100%`	`93%`	✅
src/components/PageDocumentBelowHit.tsx	`81%`	`100%`	`62%`	✅
src/components/PageDocumentEditor.tsx	`57%`	`73%`	`41%`	✅
src/components/PageView.tsx	`60%`	`65%`	`55%`	✅
src/components/Sidebar.tsx	`98%`	`100%`	`97%`	✅
src/components/SidebarSearch.tsx	`94%`	`92%`	`97%`	✅
src/components/SlashMenu.tsx	`86%`	`87%`	`85%`	✅
src/context/WorkspaceContext.tsx	`83%`	`93%`	`73%`	✅
src/extensions/ensureTopLevelBlockIds.ts	`91%`	`100%`	`83%`	✅
src/extensions/musingDatabaseEmbed.ts	`70%`	`90%`	`50%`	✅
src/extensions/wikiLink.ts	`97%`	`95%`	`100%`	✅
src/hooks/useFloatingMenu.ts	`93%`	`97%`	`89%`	✅
src/hooks/usePageIndexing.ts	`95%`	`90%`	`100%`	✅
src/lib/aiClient.ts	`81%`	`86%`	`76%`	✅
src/lib/blockEditorCommands.ts	`96%`	`100%`	`92%`	✅
src/lib/downloadPageDocx.ts	`95%`	`100%`	`90%`	✅
src/lib/editorBlockText.ts	`89%`	`95%`	`83%`	✅
src/lib/editorBubbleMenuPortal.ts	`12%`	`12%`	`0%`	❌
src/lib/emojiSuggestionRender.ts	`31%`	`52%`	`10%`	✅
src/lib/htmlToDocx.ts	`73%`	`85%`	`62%`	✅
src/lib/pageToExportHtml.ts	`97%`	`100%`	`94%`	✅
src/lib/workspaceStorage.ts	`89%`	`93%`	`84%`	✅
src/lib/pageDocument/blockGutterOps.ts	`88%`	`97%`	`79%`	✅
src/lib/pageDocument/blockIdAtSelection.ts	`87%`	`100%`	`75%`	✅
src/lib/pageDocument/lastBlockNeedsBelowHit.ts	`91%`	`100%`	`83%`	✅
src/lib/pageDocument/serializeDocToBlocks.ts	`80%`	`89%`	`71%`	✅
src/lib/pageDocument/tryDeleteEmptyTopLevelBlock.ts	`87%`	`100%`	`75%`	✅
src/types/block.ts	`0%`	`0%`	`0%`	❌
src/types/database.ts	`0%`	`0%`	`0%`	❌
src/types/page.ts	`0%`	`0%`	`0%`	❌

Minimum allowed coverage is 18%

Generated by 🐒 cobertura-action against 676bc74

github-actions · 2026-10-07T09:15:46Z

PR guide

Auto-generated from changed paths. Fill in Summary and How to verify in the PR description above.

Touches: tooling config

Diff: 2 files changed, 80 insertions(+), 95 deletions(-)

Suggested verify

npm run lint
npm run format:check
npm run test:run or targeted Vitest files for the changed area
npm run build

Checklist (applies to this PR)

No unintended secrets or local-only config committed

Reviewer focus

Dependency, Vite, TypeScript, ESLint, and Prettier changes that can affect local and CI runs

Commits

676bc74 chore(deps-dev): Bump the npm-minor-and-patch group across 1 directory with 2 updates

Files by area

Area	Files
tooling config	2

CI

Required checks: verify runs format/lint/audit/typecheck/test/build as separate per-concern checks for every PR. Coverage tables are posted separately.

Template: pull_request_template.md

github-actions · 2026-10-07T09:16:29Z

Lighthouse CI report

http://localhost:43735/index.html

Thresholds are informational (warn-level) for now; see ./.lighthouserc.json.

github-actions · 2026-10-08T00:04:52Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@asamuzakjp/css-color

7.1.3

Unknown

npm/@asamuzakjp/dom-selector

9.2.4

Unknown

npm/@csstools/color-helpers

6.1.2

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@csstools/css-calc

3.4.3

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@csstools/css-color-parser

4.2.6

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@csstools/css-parser-algorithms

4.0.2

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@csstools/css-syntax-patches-for-csstree

1.1.15

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@csstools/css-tokenizer

4.0.2

🟢 7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
SAST	🟢 10	SAST tool detected: CodeQL
Binary-Artifacts	🟢 10	no binaries found in the repo
License	🟢 10	license file detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/@exodus/bytes

1.16.0

Unknown

npm/data-urls

8.0.0

🟢 4.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 2/27 approved changesets -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	🟢 3	4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	🟢 10	security policy file detected
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/eslint

10.12.0

🟢 6.4

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 7	Found 18/24 approved changesets -- score normalized to 7
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 1	dependency not pinned by hash detected -- score normalized to 1
License	🟢 10	license file detected
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 9	SAST tool detected but not run on all commits

npm/jsdom

30.1.2

🟢 7

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Code-Review	🟢 3	Found 11/29 approved changesets -- score normalized to 3
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/tr46

7.0.0

🟢 4.6

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 5	5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5
Code-Review	⚠️ 1	Found 4/27 approved changesets -- score normalized to 1
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Packaging	🟢 10	packaging workflow detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	🟢 10	security policy file detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/undici

8.11.2

🟢 8.2

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool	🟢 10	update tool detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 8	binaries present in source code
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Signed-Releases	⚠️ -1	no releases found
Vulnerabilities	🟢 7	3 existing vulnerabilities detected
SAST	🟢 10	SAST tool is run on all commits
License	🟢 10	license file detected
Fuzzing	🟢 10	project is fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging	🟢 10	packaging workflow detected
CI-Tests	🟢 10	30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 58 contributing companies or organizations

npm/whatwg-url

17.2.0

🟢 5

Details

Check	Score	Reason
Maintained	🟢 10	8 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 0	Found 2/30 approved changesets -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Packaging	🟢 10	packaging workflow detected

Scanned Files

package-lock.json

…y with 2 updates Bumps the npm-minor-and-patch group with 2 updates in the / directory: [eslint](https://github.com/eslint/eslint) and [jsdom](https://github.com/jsdom/jsdom). Updates `eslint` from 10.11.0 to 10.12.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.11.0...v10.12.0) Updates `jsdom` from 30.1.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.1.1...v30.1.2) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026

github-actions Bot enabled auto-merge (squash) October 7, 2026 09:15

github-actions Bot added the area: config Dependencies or tooling configuration label Oct 7, 2026

danibsheehan force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-fbffa56c51 branch from 64ea8c7 to c361a11 Compare October 8, 2026 00:04

danibsheehan force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-fbffa56c51 branch from c361a11 to 676bc74 Compare October 8, 2026 00:26

github-actions Bot merged commit 43ddfcf into main Oct 8, 2026
22 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-fbffa56c51 branch October 8, 2026 00:28

Navigation Menu

Repository navigation

chore(deps-dev): Bump the npm-minor-and-patch group across 1 directory with 2 updates - #285

chore(deps-dev): Bump the npm-minor-and-patch group across 1 directory with 2 updates#285
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-fbffa56c51

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

github-actions Bot commented Oct 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026

v10.12.0

Features

Bug Fixes

Documentation

Chores

v30.1.2

Uh oh!

github-actions Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR guide

Suggested verify

Checklist (applies to this PR)

Reviewer focus

Commits

Files by area

CI

Uh oh!

github-actions Bot commented Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Lighthouse CI report

Uh oh!

github-actions Bot commented Oct 8, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

github-actions Bot commented Oct 7, 2026 •

edited

Loading

github-actions Bot commented Oct 7, 2026 •

edited

Loading

github-actions Bot commented Oct 7, 2026 •

edited

Loading