Skip to content

test(deps): bump the npm group with 2 updates#759

Merged
Ron (rjaegers) merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-599f1f3c7d
Apr 3, 2025
Merged

test(deps): bump the npm group with 2 updates#759
Ron (rjaegers) merged 1 commit intomainfrom
dependabot/npm_and_yarn/npm-599f1f3c7d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2025

Bumps the npm group with 2 updates: @types/node and otpauth.

Updates @types/node from 22.13.12 to 22.13.14

Commits

Updates otpauth from 9.3.6 to 9.4.0

Release notes

Sourced from otpauth's releases.

v9.4.0

What's Changed

New Contributors

Full Changelog: hectorm/otpauth@v9.3.6...v9.4.0

Commits
  • 962ff7f 9.4.0
  • e0f3bb6 Update usage example
  • 81c791f Regenerate package-lock.json file
  • f8ddd72 Bump the npm-development-minor-patch group across 1 directory with 9 updates ...
  • b3f31b4 Bump the github-actions-all group with 4 updates (#602)
  • 1145587 Add "counter" and "remaining" methods to TOTP class (#601)
  • f5f6844 Bump the npm-development-minor-patch group with 7 updates (#597)
  • 4d2b7bc Update dependencies
  • 6175fa8 Bump the github-actions-all group with 4 updates (#595)
  • a114067 Bump the npm-development-minor-patch group with 7 updates (#592)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [otpauth](https://github.com/hectorm/otpauth).


Updates `@types/node` from 22.13.12 to 22.13.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `otpauth` from 9.3.6 to 9.4.0
- [Release notes](https://github.com/hectorm/otpauth/releases)
- [Commits](hectorm/otpauth@v9.3.6...v9.4.0)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: otpauth
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 31, 2025
@dependabot dependabot bot requested a review from a team as a code owner March 31, 2025 08:40
@sonarqubecloud
Copy link
Copy Markdown

@github-actions
Copy link
Copy Markdown
Contributor

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-rust:latest to ghcr.io/philips-software/amp-devcontainer-rust@sha256:712ed07204bd491b8641d0f0772789cceb80dcee0beda660ceac3400a4ae2c58

OS/Platform Previous Size Current Size Delta
linux/amd64 484.90M 484.90M 0.00 (+0.00%)
linux/arm64 623.75M 623.75M 0.00 (+0.00%)

@github-actions
Copy link
Copy Markdown
Contributor

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:latest to ghcr.io/philips-software/amp-devcontainer-cpp@sha256:7627384028ea5d3f717017b1a96835a3a7f39877ff3c0ec59b32f609289b6959

OS/Platform Previous Size Current Size Delta
linux/amd64 701.55M 701.55M 0.00 (+0.00%)
linux/arm64 683.25M 683.25M 0.00 (+0.00%)

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 31, 2025

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 17 0 0 0.06s
✅ DOCKERFILE hadolint 2 0 0 0.42s
✅ GHERKIN gherkin-lint 2 0 0 0.9s
✅ JSON npm-package-json-lint yes no no 0.33s
✅ JSON prettier 15 1 0 0 0.35s
✅ JSON v8r 15 0 0 7.71s
✅ MARKDOWN markdownlint 8 0 0 0 0.92s
✅ MARKDOWN markdown-table-formatter 8 0 0 0 0.21s
✅ REPOSITORY checkov yes no no 15.05s
✅ REPOSITORY gitleaks yes no no 0.27s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 20.7s
✅ REPOSITORY secretlint yes no no 0.98s
✅ REPOSITORY syft yes no no 1.01s
✅ REPOSITORY trivy yes no no 6.85s
✅ REPOSITORY trivy-sbom yes no no 0.08s
✅ REPOSITORY trufflehog yes no no 8.3s
✅ SPELL lychee 59 0 0 11.4s
✅ YAML prettier 22 0 0 0 0.62s
✅ YAML v8r 22 0 0 5.71s
✅ YAML yamllint 22 0 0 0.42s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@github-actions
Copy link
Copy Markdown
Contributor

Test Results

 2 files  ±0   2 suites  ±0   1m 21s ⏱️ +2s
29 tests ±0  29 ✅ ±0  0 💤 ±0  0 ❌ ±0 
31 runs  ±0  31 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 34484f2. ± Comparison against base commit 8491493.

@rjaegers Ron (rjaegers) enabled auto-merge April 3, 2025 09:12
@rjaegers Ron (rjaegers) added this pull request to the merge queue Apr 3, 2025
Merged via the queue into main with commit 7f138dc Apr 3, 2025
21 checks passed
@rjaegers Ron (rjaegers) deleted the dependabot/npm_and_yarn/npm-599f1f3c7d branch April 3, 2025 09:21
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2025

Pull Request Report (#759)

Static measures

Description Value
Number of added lines 16
Number of deleted lines 14
Number of changed files 2
Number of commits 1
Number of reviews 1
Number of comments (w/o review comments) 5
Number of reviews that contains a comment to resolve 0
Number of reviews that requested a change from the author 0
Number of reviews that approved the Pull Request 1
Get the total number of participants of a Pull Request 4

Time related measures

Description Value
PR lead time (from creation to close of PR) 3 Days
Time that was spend on the branch before the PR was created 1 Sec
Time that was spend on the branch before the PR was merged 3 Days
Time to merge after last review 9 Min

Status check related measures

Description Value
Total runtime for last status check run (Workflow for PR) 18.2 Min
Total time spend in last status check run on PR 3 Days

@github-actions
Copy link
Copy Markdown
Contributor

🎉 Hooray! The changes in this pull request went live with the release of v6.0.0 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant