chore(deps-dev): Bump the npm-minor-and-patch group with 3 updates by dependabot[bot] · Pull Request #289 · danibsheehan/musing

dependabot · 2026-10-09T09:15:21Z

Bumps the npm-minor-and-patch group with 3 updates: @vitejs/plugin-react, typescript-eslint and vite.

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @vitejs/plugin-react's releases.

[email protected]

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

ac47648 release: [email protected] (#1491)
98277e7 fix(deps): update all non-major dependencies (#1486)
12eddea fix(hmr): better handle compound components (#1484)
3cfb1d1 fix(plugin-react): fix compiler.logDiagnostics (#1483)
6de9915 fix(plugin-react): disable refresh for non-jsx with compiler enabled (#1485)
ee97d2f fix(deps): update all non-major dependencies (#1445)
b0a014d chore: use Babel 8 for babel compiler playgrounds (#1460)
61b650f fix(deps): update react-related dependencies (#1452)
736efe2 chore(deps): update tsdown to v0.23 (#1451)
See full diff in compare view

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)

eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)

eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)

eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)

eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)

project-service: throttle cleanup when opening files (#12934)

type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

d57b8da chore(release): publish 8.71.1
See full diff in compare view

Updates vite from 8.3.2 to 8.3.3

Release notes

Sourced from vite's releases.

v8.3.3

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)

html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)

server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)

server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Changelog

Sourced from vite's changelog.

8.3.3 (2026-10-06)

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)

html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)

server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)

server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Commits

fea5b21 release: v8.3.3 (#23657)
c3e06f9 fix(server): store ids to safeModulePaths rather than URLs (#23656)
ba8b7ab fix(server): check fs.serve for ?vite-wasm-instance (#23655)
22fd1d5 fix(deps): update launch-editor to v2.14.2 (#23654)
7dafd8e fix(html): filename passed to transformIndexHtml should not include queries (...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

github-actions · 2026-10-09T09:15:35Z

app

File	Coverage	Lines	Branches
All files	`77%`	`83%`	`71%`	✅
src/App.tsx	`0%`	`0%`	`100%`	❌
src/components/AppLayout.tsx	`0%`	`0%`	`0%`	❌
src/components/DatabaseCanvas.tsx	`0%`	`0%`	`0%`	❌
src/components/DatabaseEmbedNodeView.tsx	`49%`	`53%`	`45%`	✅
src/components/DatabaseTableView.tsx	`97%`	`100%`	`94%`	✅
src/components/Editor.tsx	`87%`	`95%`	`78%`	✅
src/components/EditorTextFormatBubble.tsx	`25%`	`28%`	`23%`	✅
src/components/PageBlockGutter.tsx	`30%`	`35%`	`24%`	✅
src/components/PageChrome.tsx	`96%`	`100%`	`93%`	✅
src/components/PageDocumentBelowHit.tsx	`81%`	`100%`	`62%`	✅
src/components/PageDocumentEditor.tsx	`57%`	`73%`	`41%`	✅
src/components/PageView.tsx	`60%`	`65%`	`55%`	✅
src/components/Sidebar.tsx	`98%`	`100%`	`97%`	✅
src/components/SidebarSearch.tsx	`94%`	`92%`	`97%`	✅
src/components/SlashMenu.tsx	`86%`	`87%`	`85%`	✅
src/context/WorkspaceContext.tsx	`83%`	`93%`	`73%`	✅
src/extensions/ensureTopLevelBlockIds.ts	`91%`	`100%`	`83%`	✅
src/extensions/musingDatabaseEmbed.ts	`70%`	`90%`	`50%`	✅
src/extensions/wikiLink.ts	`97%`	`95%`	`100%`	✅
src/hooks/useFloatingMenu.ts	`93%`	`97%`	`89%`	✅
src/hooks/usePageIndexing.ts	`95%`	`90%`	`100%`	✅
src/lib/aiClient.ts	`81%`	`86%`	`76%`	✅
src/lib/blockEditorCommands.ts	`96%`	`100%`	`92%`	✅
src/lib/downloadPageDocx.ts	`95%`	`100%`	`90%`	✅
src/lib/editorBlockText.ts	`89%`	`95%`	`83%`	✅
src/lib/editorBubbleMenuPortal.ts	`12%`	`12%`	`0%`	❌
src/lib/emojiSuggestionRender.ts	`31%`	`52%`	`10%`	✅
src/lib/htmlToDocx.ts	`73%`	`85%`	`62%`	✅
src/lib/pageToExportHtml.ts	`97%`	`100%`	`94%`	✅
src/lib/workspaceStorage.ts	`89%`	`93%`	`84%`	✅
src/lib/pageDocument/blockGutterOps.ts	`88%`	`97%`	`79%`	✅
src/lib/pageDocument/blockIdAtSelection.ts	`87%`	`100%`	`75%`	✅
src/lib/pageDocument/lastBlockNeedsBelowHit.ts	`91%`	`100%`	`83%`	✅
src/lib/pageDocument/serializeDocToBlocks.ts	`80%`	`89%`	`71%`	✅
src/lib/pageDocument/tryDeleteEmptyTopLevelBlock.ts	`87%`	`100%`	`75%`	✅
src/types/block.ts	`0%`	`0%`	`0%`	❌
src/types/database.ts	`0%`	`0%`	`0%`	❌
src/types/page.ts	`0%`	`0%`	`0%`	❌

Minimum allowed coverage is 18%

Generated by 🐒 cobertura-action against 68e41ae

github-actions · 2026-10-09T09:15:35Z

PR guide

Auto-generated from changed paths. Fill in Summary and How to verify in the PR description above.

Touches: tooling config

Diff: 2 files changed, 77 insertions(+), 77 deletions(-)

Suggested verify

npm run lint
npm run format:check
npm run test:run or targeted Vitest files for the changed area
npm run build

Checklist (applies to this PR)

No unintended secrets or local-only config committed

Reviewer focus

Dependency, Vite, TypeScript, ESLint, and Prettier changes that can affect local and CI runs

Commits

68e41ae chore(deps-dev): Bump the npm-minor-and-patch group with 3 updates

Files by area

Area	Files
tooling config	2

CI

Required checks: verify runs format/lint/audit/typecheck/test/build as separate per-concern checks for every PR. Coverage tables are posted separately.

Template: pull_request_template.md

github-actions · 2026-10-09T09:16:08Z

Lighthouse CI report

http://localhost:46633/index.html

Thresholds are informational (warn-level) for now; see ./.lighthouserc.json.

Bumps the npm-minor-and-patch group with 3 updates: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/[email protected]/packages/plugin-react) Updates `typescript-eslint` from 8.71.0 to 8.71.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint) Updates `vite` from 8.3.2 to 8.3.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.3/packages/vite) --- updated-dependencies: - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: typescript-eslint dependency-version: 8.71.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: vite dependency-version: 8.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-10-12T15:36:10Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@typescript-eslint/eslint-plugin

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/parser

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/project-service

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/scope-manager

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/tsconfig-utils

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/type-utils

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/types

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/typescript-estree

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/utils

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/visitor-keys

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@vitejs/plugin-react

6.1.2

🟢 7.2

Details

Check	Score	Reason
Code-Review	🟢 3	Found 6/17 approved changesets -- score normalized to 3
Maintained	🟢 10	30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 8	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Security-Policy	🟢 10	security policy file detected
SAST	🟢 10	SAST tool is run on all commits

npm/ignore

7.0.12

🟢 4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/23 approved changesets -- score normalized to 2
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/typescript-eslint

8.71.1

🟢 6.5

Details

Check	Score	Reason
Code-Review	🟢 8	Found 16/20 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/vite

8.3.3

🟢 6.7

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 7	Found 19/25 approved changesets -- score normalized to 7
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	🟢 7	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	⚠️ 1	binaries present in source code
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 4	branch protection is not maximal on development and all release branches
SAST	🟢 9	SAST tool is not run on all commits -- score normalized to 9

Scanned Files

package-lock.json

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 9, 2026

github-actions Bot enabled auto-merge (squash) October 9, 2026 09:15

github-actions Bot added the area: config Dependencies or tooling configuration label Oct 9, 2026

danibsheehan force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-ff32824000 branch from d042169 to 68e41ae Compare October 12, 2026 15:35

github-actions Bot merged commit 3366605 into main Oct 12, 2026
22 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-ff32824000 branch October 12, 2026 15:37

Navigation Menu

Repository navigation

chore(deps-dev): Bump the npm-minor-and-patch group with 3 updates - #289

chore(deps-dev): Bump the npm-minor-and-patch group with 3 updates#289
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-ff32824000

dependabot Bot commented on behalf of github Oct 9, 2026

Uh oh!

github-actions Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 9, 2026

[email protected]

Fix HMR for compound components (#1484)

Fix compiler.logDiagnostics option not working (#1483)

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Fix compiler.logDiagnostics option not working (#1483)

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

❤️ Thank You

8.71.1 (2026-10-05)

v8.3.3

Bug Fixes

8.3.3 (2026-10-06)

Bug Fixes

Uh oh!

github-actions Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR guide

Suggested verify

Checklist (applies to this PR)

Reviewer focus

Commits

Files by area

CI

Uh oh!

github-actions Bot commented Oct 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Lighthouse CI report

Uh oh!

github-actions Bot commented Oct 12, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Fix `compiler.logDiagnostics` option not working (#1483)

Fix `compiler.logDiagnostics` option not working (#1483)

github-actions Bot commented Oct 9, 2026 •

edited

Loading

github-actions Bot commented Oct 9, 2026 •

edited

Loading

github-actions Bot commented Oct 9, 2026 •

edited

Loading