Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 20, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
publint (source) devDependencies patch 0.3.14 -> 0.3.15 OpenSSF Scorecard

Release Notes

publint/publint (publint)

v0.3.15

Compare Source

Patch Changes
  • Skip file existence checks when crawling subpath imports as they may be dev-only and not used after bundling or publish. This check may be improved in the future when publint can scan for files to see if the subpath imports are used. (0d72997)

  • Handle exports["default"] and exports['default'] for CJS_WITH_ESMODULE_DEFAULT_EXPORT rule (8285f77)


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


Summary by cubic

Updated publint to 0.3.15 to improve package linting accuracy. This reduces false positives on subpath imports and correctly handles exports['default'] in CommonJS with ES module default exports.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot added the dependencies Dependency updates label Oct 20, 2025
@renovate renovate bot enabled auto-merge (squash) October 20, 2025 22:54
@github-actions github-actions bot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Oct 20, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpublint@​0.3.14 ⏵ 0.3.15100 +110081 +193 +3100

View full report

@github-actions
Copy link

📦 Packages

Package NPM Docker
SDK Cli @settlemint/sdk-cli@2.6.2-pr5ebb6f41
SDK The Graph @settlemint/sdk-thegraph@2.6.2-pr5ebb6f41
SDK Portal @settlemint/sdk-portal@2.6.2-pr5ebb6f41
SDK Hasura @settlemint/sdk-hasura@2.6.2-pr5ebb6f41
SDK JS @settlemint/sdk-js@2.6.2-pr5ebb6f41
SDK Utils @settlemint/sdk-utils@2.6.2-pr5ebb6f41
SDK Next @settlemint/sdk-next@2.6.2-pr5ebb6f41
SDK Minio @settlemint/sdk-minio@2.6.2-pr5ebb6f41
SDK IPFS @settlemint/sdk-ipfs@2.6.2-pr5ebb6f41
SDK Blockscout @settlemint/sdk-blockscout@2.6.2-pr5ebb6f41
SDK MCP @settlemint/sdk-mcp@2.6.2-pr5ebb6f41
SDK Viem @settlemint/sdk-viem@2.6.2-pr5ebb6f41
SDK EAS @settlemint/sdk-eas@2.6.2-pr5ebb6f41

@github-actions github-actions bot added qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review status:mergeable Pull request is approved, tests pass, and ready to merge and removed qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review status:approved Pull request has been approved labels Oct 20, 2025
@renovate renovate bot merged commit cb5f32c into main Oct 20, 2025
17 checks passed
@renovate renovate bot deleted the renovate/publint-0.x branch October 20, 2025 22:56
@github-actions github-actions bot added status:merged Pull request has been merged and removed status:mergeable Pull request is approved, tests pass, and ready to merge labels Oct 20, 2025
Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@github-actions github-actions bot added status:mergeable Pull request is approved, tests pass, and ready to merge and removed status:merged Pull request has been merged labels Oct 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:success QA workflow passed successfully status:mergeable Pull request is approved, tests pass, and ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant