Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 21, 2025

Bumps glob to 10.5.0 and updates ancestor dependencies glob, semantic-release and @semantic-release/npm. These dependencies need to be updated together.

Updates glob from 10.4.5 to 10.5.0

Commits

Updates semantic-release from 24.2.8 to 25.0.2

Release notes

Sourced from semantic-release's releases.

v25.0.2

25.0.2 (2025-11-07)

Bug Fixes

  • deps: update dependency read-package-up to v12 (#3935) (1494cb9)

v25.0.1

25.0.1 (2025-10-19)

Bug Fixes

v25.0.1-beta.3

25.0.1-beta.3 (2025-10-19)

Bug Fixes

  • deps: update to latest npm plugin (a96aced)

v25.0.1-beta.2

25.0.1-beta.2 (2025-10-19)

Bug Fixes

v25.0.1-beta.1

25.0.1-beta.1 (2025-10-16)

Bug Fixes

v25.0.1-alpha.4

... (truncated)

Commits
  • 1494cb9 fix(deps): update dependency read-package-up to v12 (#3935)
  • b79ff4c Merge pull request #3931 from Simek/patch-1
  • ddfe3cb Merge pull request #3932 from Deltamir/docs-add-semantic-release-uv-community...
  • adac0b7 Merge pull request #3920 from semantic-release/installation
  • 8b68108 update Node version in npx command example
  • 15293df docs(plugins): add semantic-release-uv community plugin in plugins list
  • bfc6d4d docs: Update minimal required Node version
  • 8d7d8ed chore(deps): update dependency @​types/node to v24.10.0 (#3929)
  • 809126c chore(deps): lock file maintenance (#3928)
  • d1affd3 chore(deps): update dependency got to v14.6.2 (#3927)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semantic-release since your current version.


Updates @semantic-release/npm from 12.0.2 to 13.1.2

Release notes

Sourced from @​semantic-release/npm's releases.

v13.1.2

13.1.2 (2025-11-14)

Bug Fixes

v13.1.1

13.1.1 (2025-10-19)

Bug Fixes

  • publish-dry-run: temporarily remove the addition of dry-running the publish step (30bd176)

v13.1.0

13.1.0 (2025-10-19)

Features

  • trusted-publishing: verify auth, considering OIDC vs tokens from various registries (e3319f1), closes #958
  • trusted-publishing: refine the messages for related errors (316ce21), closes #958
  • trusted-publishing: make request to verify if OIDC token exchange can succeed (c80ecb0), closes #958
  • trusted-publishing: pass id-token as bearer header for github actions (d83b727), closes #958
  • trusted-publishing: pass id-token as bearer header for gitlab pipelines (6d1c3cf), closes #958
  • trusted-publishing: handle failure to retrieve id-token in the context of github actions (b673257), closes #958
  • auth-error: update messaging for auth failure to be less token specific (e24967d)
  • auth: attempt a dry-run publish to determine auth status (841dc67)

Bug Fixes

  • trusted-publishing: uri encode the package name for the token exchange request (3dd95d0), closes #958
  • auth: throw appropriate error when auth context fails to enable publishing (f5c8d85)
  • auth: throw error if dry-run publish determines lack of auth (8f88e9d)
  • verify-auth: enable the publish dry-run to work for projects publishing from a sub-directory (e7d684c)

v13.1.0-beta.3

13.1.0-beta.3 (2025-10-18)

Features

  • trusted-publishing: refine the messages for related errors (316ce21), closes #958

v13.1.0-beta.2

13.1.0-beta.2 (2025-10-18)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​semantic-release/npm since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade release tooling in packages/openai-adapters to keep the release pipeline current and enable improvements for trusted publishing. Also bumps a transitive glob dependency.

  • Dependencies
    • semantic-release: 24.2.8 → 25.0.2
    • @semantic-release/npm: 12.0.2 → 13.1.2
    • glob: 10.4.5 → 10.5.0 (indirect)

Written for commit c55f3f2. Summary will update automatically on new commits.

Bumps [glob](https://github.com/isaacs/node-glob) to 10.5.0 and updates ancestor dependencies [glob](https://github.com/isaacs/node-glob), [semantic-release](https://github.com/semantic-release/semantic-release) and [@semantic-release/npm](https://github.com/semantic-release/npm). These dependencies need to be updated together.


Updates `glob` from 10.4.5 to 10.5.0
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v10.4.5...v10.5.0)

Updates `semantic-release` from 24.2.8 to 25.0.2
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v24.2.8...v25.0.2)

Updates `@semantic-release/npm` from 12.0.2 to 13.1.2
- [Release notes](https://github.com/semantic-release/npm/releases)
- [Commits](semantic-release/npm@v12.0.2...v13.1.2)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
- dependency-name: semantic-release
  dependency-version: 25.0.2
  dependency-type: direct:development
- dependency-name: "@semantic-release/npm"
  dependency-version: 13.1.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 21, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 21, 2025 20:54
@dependabot dependabot bot requested review from sestinj and removed request for a team November 21, 2025 20:54
@dosubot dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Nov 21, 2025
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@github-project-automation github-project-automation bot moved this from Todo to In Progress in Issues and PRs Nov 21, 2025
@dosubot dosubot bot added the lgtm This PR has been approved by a maintainer label Nov 21, 2025
@RomneyDa RomneyDa merged commit ddd1746 into main Nov 21, 2025
57 of 60 checks passed
@RomneyDa RomneyDa deleted the dependabot/npm_and_yarn/packages/openai-adapters/multi-b790c25e44 branch November 21, 2025 22:32
@github-project-automation github-project-automation bot moved this from In Progress to Done in Issues and PRs Nov 21, 2025
@github-actions github-actions bot locked and limited conversation to collaborators Nov 21, 2025
@sestinj
Copy link
Contributor

sestinj commented Nov 25, 2025

🎉 This PR is included in version 1.6.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@sestinj
Copy link
Contributor

sestinj commented Nov 26, 2025

🎉 This PR is included in version 1.36.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code lgtm This PR has been approved by a maintainer released size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants