Skip to content

Conversation

@cq-bot
Copy link
Contributor

@cq-bot cq-bot commented Feb 1, 2026

This PR contains the following updates:

Package Type Update Change Pending
tempy devDependencies patch 3.1.0 -> 3.1.1 3.1.2

Release Notes

sindresorhus/tempy (tempy)

v3.1.1

Compare Source

  • Harden options to prevent path traversal when passed untrusted input 85acab9
    • This is not fixing any vulnerability since these options are not meant to accept untrusted input.
    • Thanks to Shachar Menashe at JFrog for reporting.


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@cq-bot cq-bot added the automerge Add to automerge PRs once requirements are met label Feb 1, 2026
@kodiakhq kodiakhq bot merged commit 5cbc054 into main Feb 1, 2026
10 checks passed
@kodiakhq kodiakhq bot deleted the renovate/tempy-3.x-lockfile branch February 1, 2026 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge Add to automerge PRs once requirements are met

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants