Skip to content

chore(monorepo): update auto-merge non-major dependencies - #7

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies
Open

chore(monorepo): update auto-merge non-major dependencies#7
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Feb 5, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@storm-software/config (source) ^1.138.19^1.138.69 age confidence pnpm.catalog.default patch
@storm-software/config-tools (source) ^1.190.82^1.190.133 age confidence pnpm.catalog.default patch
@storm-software/cspell (source) ^0.46.150^0.46.200 age confidence pnpm.catalog.default patch
@storm-software/eslint (source) ^0.170.115^0.170.168 age confidence pnpm.catalog.default patch
@storm-software/git-tools (source) ^2.131.90^2.131.141 age confidence pnpm.catalog.default patch
@storm-software/linting-tools (source) ^1.134.12^1.134.63 age confidence pnpm.catalog.default patch
@storm-software/markdownlint (source) ^0.30.238^0.30.288 age confidence pnpm.catalog.default patch
@storm-software/pnpm-tools (source) ^0.7.93^0.7.147 age confidence pnpm.catalog.default patch
@storm-software/prettier (source) ^0.59.135^0.59.186 age confidence pnpm.catalog.default patch
@storm-software/tsconfig (source) ^0.48.149^0.48.199 age confidence pnpm.catalog.default patch
actions/checkout v4.3.1v4.4.0 age confidence action minor
eslint (source) ^10.6.0^10.8.1 age confidence pnpm.catalog.default minor
node (source) >=24.16.0>=24.19.0 age confidence engines minor
pnpm (source) 11.9.011.22.0 age confidence packageManager minor
pnpm (source) >=11.9.0>=11.22.0 age confidence engines minor
prettier (source) ^3.9.4^3.9.6 age confidence pnpm.catalog.default patch
shogo82148/actions-create-release v1.9.0v1.9.1 age confidence action patch

Release Notes

storm-software/storm-ops (@​storm-software/config)

v1.138.69

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.285

v1.138.68

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.284

v1.138.67

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.283

v1.138.66

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.282

v1.138.65

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.281

v1.138.64

Compare Source

Miscellaneous
  • monorepo: Update workspace package dependencies (23b021d2c)
Updated Dependencies
  • Updated testing-tools to v1.119.280

v1.138.63

Compare Source

Bug Fixes
  • git-tools: Added prettier-plugin-sh dependency to package (618da22c4)
Updated Dependencies
  • Updated testing-tools to v1.119.279

v1.138.62

Compare Source

Bug Fixes
  • eslint: Resolve issues with built eslint configuration packages (38a4294c6)
Updated Dependencies
  • Updated testing-tools to v1.119.278

v1.138.61

Compare Source

Bug Fixes
  • esbuild: Resolve issue with bundled package import paths (b1efcaf7e)
Updated Dependencies
  • Updated testing-tools to v1.119.277

v1.138.60

Compare Source

Miscellaneous
  • eslint: Update build process to use tsdown package (e714f6822)
Updated Dependencies
  • Updated testing-tools to v1.119.276

v1.138.59

Compare Source

Bug Fixes
  • eslint: Remove incorrectly bundled dependency (7619f2dfe)
Updated Dependencies
  • Updated testing-tools to v1.119.275

v1.138.58

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.274

v1.138.57

Compare Source

Bug Fixes
  • monorepo: Resolved issues around duplicate dependency versions (64ab34d45)
  • monorepo: Update all repository packages to resolve hoisting issues (8dca67b78)
Updated Dependencies
  • Updated testing-tools to v1.119.273

v1.138.56

Compare Source

Bug Fixes
  • monorepo: Further updates to resolve inlined dependency issues (53d8e155d)
Updated Dependencies
  • Updated testing-tools to v1.119.272

v1.138.55

Compare Source

Bug Fixes
  • eslint: Resolve issue with invalid mdast-util-to-string version (9eed4dff9)
Updated Dependencies
  • Updated testing-tools to v1.119.271

v1.138.54

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.270

v1.138.53

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.269

v1.138.52

Compare Source

Bug Fixes
  • monorepo: Resolve issue with multiple ajv versions (8b585981b)
  • eslint: Resolve issue with invalid ajv dependency version (123da824b)
Updated Dependencies
  • Updated testing-tools to v1.119.268

v1.138.51

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.267

v1.138.50

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfile (8d9825be1)
Bug Fixes
  • eslint: Resolve issue with invalid dependency versions (9813a20e4)
Updated Dependencies
  • Updated testing-tools to v1.119.266

v1.138.49

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' peer dependencies (8826d672f)
Updated Dependencies
  • Updated testing-tools to v1.119.265

v1.138.48

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue with missing package dependencies (8183837f8)
Updated Dependencies
  • Updated testing-tools to v1.119.264

v1.138.47

Compare Source

Bug Fixes
  • prettier: Resolve issue causing exclude files from being part of release (137627bfa)
Updated Dependencies
  • Updated testing-tools to v1.119.263

v1.138.46

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)
Updated Dependencies
  • Updated testing-tools to v1.119.262

v1.138.45

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)
Updated Dependencies
  • Updated testing-tools to v1.119.261

v1.138.44

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)
Updated Dependencies
  • Updated testing-tools to v1.119.260

v1.138.43

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated testing-tools to v1.119.259

v1.138.42

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated testing-tools to v1.119.258

v1.138.41

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)
Updated Dependencies
  • Updated testing-tools to v1.119.257

v1.138.38

Compare Source

Miscellaneous
  • git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)
Updated Dependencies
  • Updated testing-tools to v1.119.254

v1.138.36

Compare Source

Miscellaneous
  • bun-tools: Display full error details during update (f1c4902a7)
Updated Dependencies
  • Updated testing-tools to v1.119.252

v1.138.35

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.251

v1.138.29

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfiles (cf18a1819)
  • workspace-tools: Rename prod profile to release for consistency (7c676ed98)
Updated Dependencies
  • Updated testing-tools to v1.119.245

v1.138.28

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (07018210f)
Updated Dependencies
  • Updated testing-tools to v1.119.244

v1.138.27

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (e3ad71111)
Updated Dependencies
  • Updated testing-tools to v1.119.243

v1.138.26

Compare Source

Bug Fixes
  • monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)
Updated Dependencies
  • Updated testing-tools to v1.119.242

v1.138.23

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (8cfa3011d)
Updated Dependencies
  • Updated testing-tools to v1.119.239

v1.138.22

Compare Source

Miscellaneous
  • monorepo: Disable treefmt to prevent build issues (0d2e21f3f)
Updated Dependencies
  • Updated testing-tools to v1.119.238

v1.138.21

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.237

v1.138.20

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (94184a932)
  • monorepo: Update workspace packages' dependencies (5580e18dc)
Updated Dependencies
  • Updated testing-tools to v1.119.236
storm-software/storm-ops (@​storm-software/config-tools)

v1.190.133

Compare Source

Updated Dependencies
  • Updated config to v1.138.69
  • Updated testing-tools to v1.119.285

v1.190.132

Compare Source

Updated Dependencies
  • Updated config to v1.138.68
  • Updated testing-tools to v1.119.284

v1.190.131

Compare Source

Updated Dependencies
  • Updated config to v1.138.67
  • Updated testing-tools to v1.119.283

v1.190.130

Compare Source

Updated Dependencies
  • Updated config to v1.138.66
  • Updated testing-tools to v1.119.282

v1.190.129

Compare Source

Miscellaneous
  • bun-tools: Update storm-bun to include improved error logging (97d65d1d3)

v1.190.128

Compare Source

Updated Dependencies
  • Updated config to v1.138.65
  • Updated testing-tools to v1.119.281

v1.190.127

Compare Source

Miscellaneous
  • monorepo: Update workspace package dependencies (23b021d2c)
Updated Dependencies
  • Updated config to v1.138.64
  • Updated testing-tools to v1.119.280

v1.190.126

Compare Source

Bug Fixes
  • git-tools: Added prettier-plugin-sh dependency to package (618da22c4)
Updated Dependencies
  • Updated config to v1.138.63
  • Updated testing-tools to v1.119.279

v1.190.125

Compare Source

Bug Fixes
  • eslint: Resolve issues with built eslint configuration packages (38a4294c6)
Updated Dependencies
  • Updated config to v1.138.62
  • Updated testing-tools to v1.119.278

v1.190.124

Compare Source

Bug Fixes
  • esbuild: Resolve issue with bundled package import paths (b1efcaf7e)
Updated Dependencies
  • Updated config to v1.138.61
  • Updated testing-tools to v1.119.277

v1.190.123

Compare Source

Miscellaneous
  • eslint: Update build process to use tsdown package (e714f6822)
Updated Dependencies
  • Updated config to v1.138.60
  • Updated testing-tools to v1.119.276

v1.190.122

Compare Source

Bug Fixes
  • eslint: Remove incorrectly bundled dependency (7619f2dfe)
Updated Dependencies
  • Updated config to v1.138.59
  • Updated testing-tools to v1.119.275

v1.190.121

Compare Source

Miscellaneous
  • config-tools: Update workspace package distribution files (b67c6aec6)
Bug Fixes
  • monorepo: Resolve issue with invalid dependency versions (e4206a676)
Updated Dependencies
  • Updated config to v1.138.58
  • Updated testing-tools to v1.119.274

v1.190.120

Compare Source

Bug Fixes
  • monorepo: Resolved issues around duplicate dependency versions (64ab34d45)
  • monorepo: Update all repository packages to resolve hoisting issues (8dca67b78)
Updated Dependencies
  • Updated config to v1.138.57
  • Updated testing-tools to v1.119.273

v1.190.119

Compare Source

Bug Fixes
  • monorepo: Further updates to resolve inlined dependency issues (53d8e155d)
Updated Dependencies
  • Updated config to v1.138.56
  • Updated testing-tools to v1.119.272

v1.190.118

Compare Source

Bug Fixes
  • eslint: Resolve issue with invalid mdast-util-to-string version (9eed4dff9)
Updated Dependencies
  • Updated config to v1.138.55
  • Updated testing-tools to v1.119.271

v1.190.117

Compare Source

Bug Fixes
  • eslint: Resolve issue with invalid ajv dependency version (bac188714)
Updated Dependencies
  • Updated config to v1.138.54
  • Updated testing-tools to v1.119.270

v1.190.116

Compare Source

Updated Dependencies
  • Updated config to v1.138.53
  • Updated testing-tools to v1.119.269

v1.190.115

Compare Source

Miscellaneous
  • monorepo: Update workspace's devenv modules (15dc34c13)
Bug Fixes
  • monorepo: Resolve issue with multiple ajv versions (8b585981b)
Updated Dependencies
  • Updated config to v1.138.52
  • Updated testing-tools to v1.119.268

v1.190.114

Compare Source

Miscellaneous
  • monorepo: Update pnpm-lock.yaml file (e351f3d97)
Bug Fixes
  • git-tools: Resolve issue with overriden mdast-util-to-string dependency (3d577cc7f)
Updated Dependencies
  • Updated config to v1.138.51
  • Updated testing-tools to v1.119.267

v1.190.113

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfile (8d9825be1)
Bug Fixes
  • build-tools: Resolve issue with deprecated Nx package APIs (897964540)
  • eslint: Resolve issue with invalid dependency versions (9813a20e4)
Updated Dependencies
  • Updated config to v1.138.50
  • Updated testing-tools to v1.119.266

v1.190.112

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' peer dependencies (8826d672f)
Updated Dependencies
  • Updated config to v1.138.49
  • Updated testing-tools to v1.119.265

v1.190.111

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue with missing package dependencies (8183837f8)
Updated Dependencies
  • Updated config to v1.138.48
  • Updated testing-tools to v1.119.264

v1.190.110

Compare Source

Bug Fixes
  • prettier: Resolve issue causing exclude files from being part of release (137627bfa)
Updated Dependencies
  • Updated config to v1.138.47
  • Updated testing-tools to v1.119.263

v1.190.109

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)
Updated Dependencies
  • Updated config to v1.138.46
  • Updated testing-tools to v1.119.262

v1.190.108

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)
Continuous Integration
  • monorepo: Update SHA hashes for workflow versions (76f60f359)
Updated Dependencies
  • Updated config to v1.138.45
  • Updated testing-tools to v1.119.261

v1.190.107

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)
Updated Dependencies
  • Updated config to v1.138.44
  • Updated testing-tools to v1.119.260

v1.190.106

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.43
  • Updated testing-tools to v1.119.259

v1.190.105

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.42
  • Updated testing-tools to v1.119.258

v1.190.104

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)
Updated Dependencies
  • Updated config to v1.138.41
  • Updated testing-tools to v1.119.257

v1.190.101

Compare Source

Miscellaneous
  • git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)
Updated Dependencies
  • Updated config to v1.138.38
  • Updated testing-tools to v1.119.254

v1.190.99

Compare Source

Miscellaneous
  • devenv-modules: Update devenv modules inputs (d71083ab0)
  • bun-tools: Display full error details during update (f1c4902a7)
Updated Dependencies
  • Updated config to v1.138.36
  • Updated testing-tools to v1.119.252

v1.190.98

Compare Source

Miscellaneous
  • monorepo: Updated release workflow to have correct permissions (42db452c2)
Updated Dependencies
  • Updated config to v1.138.35
  • Updated testing-tools to v1.119.251

v1.190.92

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfiles (cf18a1819)
  • workspace-tools: Rename prod profile to release for consistency (7c676ed98)
Updated Dependencies
  • Updated config to v1.138.29
  • Updated testing-tools to v1.119.245

v1.190.91

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (07018210f)
Updated Dependencies
  • Updated config to v1.138.28
  • Updated testing-tools to v1.119.244

v1.190.90

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (e3ad71111)
Updated Dependencies
  • Updated config to v1.138.27
  • Updated testing-tools to v1.119.243

v1.190.89

Compare Source

Bug Fixes
  • monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)
Updated Dependencies
  • Updated config to v1.138.26
  • Updated testing-tools to v1.119.242

v1.190.86

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (8cfa3011d)
Updated Dependencies
  • Updated config to v1.138.23
  • Updated testing-tools to v1.119.239

v1.190.85

Compare Source

Miscellaneous
  • monorepo: Disable treefmt to prevent build issues (0d2e21f3f)
Updated Dependencies
  • Updated config to v1.138.22
  • Updated testing-tools to v1.119.238

v1.190.84

Compare Source

Updated Dependencies
  • Updated config to v1.138.21
  • Updated testing-tools to v1.119.237

v1.190.83

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (94184a932)
  • monorepo: Update workspace packages' dependencies (5580e18dc)
Updated Dependencies
  • Updated config to v1.138.20
  • Updated testing-tools to v1.119.236
storm-software/storm-ops (@​storm-software/cspell)

v0.46.200

Compare Source

Miscellaneous
  • prettier: Update method of importing plugins (21b27c0cd)

v0.46.199

Compare Source

v0.46.198

Compare Source

v0.46.197

Compare Source

v0.46.196

Compare Source

v0.46.195

Compare Source

Miscellaneous
  • monorepo: Update workspace package dependencies (23b021d2c)

v0.46.194

Compare Source

Bug Fixes
  • git-tools: Added prettier-plugin-sh dependency to package (618da22c4)

v0.46.193

Compare Source

Bug Fixes
  • eslint: Resolve issues with built eslint configuration packages (38a4294c6)

v0.46.192

Compare Source

Bug Fixes
  • esbuild: Resolve issue with bundled package import paths (b1efcaf7e)

[`v0.46.19

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Feb 5, 2025
@renovate
renovate Bot requested review from a team and sullivanpj as code owners February 5, 2025 00:07
@renovate
renovate Bot enabled auto-merge February 5, 2025 00:07
@renovate renovate Bot changed the title chore(monorepo): update mathieudutour/github-tag-action action to v6.2 chore(monorepo): update auto-merge non-major dependencies Feb 8, 2025
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 8ae5522 to a190775 Compare February 8, 2025 07:55
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from a190775 to 6d25018 Compare March 17, 2025 15:34
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 6d25018 to 6ec5fd3 Compare August 4, 2025 22:43
@renovate
renovate Bot requested a review from a team as a code owner August 4, 2025 22:43
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 6ec5fd3 to 560801b Compare October 8, 2025 22:48
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 560801b to df0dea3 Compare March 14, 2026 08:48
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from df0dea3 to eca5c08 Compare July 2, 2026 12:01
@renovate renovate Bot changed the title chore(monorepo): update auto-merge non-major dependencies chore(monorepo): update node.js to >=24.18.0 Jul 2, 2026
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from eca5c08 to 106db9e Compare July 4, 2026 11:59
@renovate renovate Bot changed the title chore(monorepo): update node.js to >=24.18.0 chore(monorepo): update auto-merge non-major dependencies Jul 4, 2026
@socket-security

socket-security Bot commented Jul 4, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @pnpm/network.ca-file is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/linting-tools@1.134.63npm/@pnpm/network.ca-file@1.0.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@pnpm/network.ca-file@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm formatly is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/linting-tools@1.134.63npm/formatly@0.3.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/formatly@0.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm string-width is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/eslint@0.170.168npm/string-width@8.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/string-width@8.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm underscore is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/git-tools@2.131.141npm/underscore@1.13.8

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/underscore@1.13.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 106db9e to c8b82c0 Compare July 8, 2026 03:43
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 390fc3a to eb1cc81 Compare July 18, 2026 19:28
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from eb1cc81 to b417926 Compare July 25, 2026 15:30
Comment thread action.yml
Comment on lines 53 to 65
@@ -60,7 +60,7 @@ runs:
fetch-depth: 0
token: ${{ inputs.storm-bot-github-token }}

- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
name: Checkout [Default Branch]
if: ${{ github.event_name != 'pull_request' }}
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 52de170 to 136539d Compare August 7, 2026 07:52
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 0210d54 to 3f03ce0 Compare August 11, 2026 04:17
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 3f03ce0 to e796466 Compare August 16, 2026 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant