Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps @octokit/rest from 22.0.0 to 22.0.1.

Release notes

Sourced from @​octokit/rest's releases.

v22.0.1

22.0.1 (2025-10-31)

Bug Fixes

  • deps: update octokit monorepo (major) (#538) (ded2f17)
Commits
  • daa3ec9 ci(action): update actions/setup-node action to v6 (#534)
  • 1dec0c7 ci(action): update peter-evans/create-or-update-comment action to v5 (#531)
  • ded2f17 fix(deps): update octokit monorepo (major) (#538)
  • 0e0eaea chore(deps): update dependency @​types/node to v24 (#537)
  • c04acc8 chore(deps): update vitest monorepo to v4 (major) (#536)
  • e6dd306 chore(deps): update dependency undici to v7 (#474)
  • 5f380d0 build(deps-dev): Bump form-data from 4.0.2 to 4.0.4 in /docs (#520)
  • dc6827d build(deps-dev): Bump tar-fs from 2.1.2 to 2.1.3 in /docs (#516)
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 22.0.0 to 22.0.1.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](octokit/rest.js@v22.0.0...v22.0.1)

---
updated-dependencies:
- dependency-name: "@octokit/rest"
  dependency-version: 22.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2025
@dependabot dependabot bot temporarily deployed to branch-preview November 3, 2025 06:38 Inactive
@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

🚀 Deployment Status: Building 🔵

🔗 Quick Actions:


📝 Recent Change Summary

Latest commit: ec6fc98 - Bump @octokit/rest from 22.0.0 to 22.0.1
Build started: 2025-11-03 06:39:07 UTC


📊 Overall Progress

Branch: dependabot/npm_and_yarn/octokit/rest-22.0.1
Status: 🔵 Building in progress
Preview URL (after completion): https://litlfred.github.io/sgex/dependabot-npm_and_yarn-octokit-rest-22.0.1/


💡 Build started for commit ec6fc98. Will update when complete.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

🚀 Deployment Status: Successfully Deployed 🟢

📊 Deployment Information

Workflow: Deploy Feature Branch (🔀 Pull Request)
Action ID: 19026048742
Commit: a6844b4 (view changes)
Workflow Step: Successfully Deployed

🌐 Preview URLs

Open Branch Preview

🔗 Quick Actions

Build Logs

📦 Build Artifacts Status

Artifact Status Description Type
workflow-event-log 🟢 Available GitHub event metadata with links .log
build-logs 🟢 Available Complete timestamped build output .txt
webpack-stats 🟢 Available Webpack compilation statistics .json
bundle-report 🟢 Available Bundle size analysis and recommendations .txt
build-step-log 🟢 Available Build step console output .log
bundle-analysis-step-log 🟢 Available Bundle analysis console output .log

🟢 All artifacts available! Click artifact names above or visit workflow artifacts section.

How to download:

  1. Click any artifact name in the table above
  2. Or visit the workflow run page and scroll to "Artifacts"
  3. Each artifact contains a single log file (no zip extraction needed)

📊 Overall Progress

Branch: dependabot/npm_and_yarn/octokit/rest-22.0.1
Status: 🟢 Live and accessible
Status: Deployment complete - site is ready for testing


📋 Deployment Timeline


💡 This comment is automatically updated as the deployment progresses.

@github-actions github-actions bot requested a deployment to branch-preview-dependabot-npm-and-yarn-octokit-rest-22-0-1 November 3, 2025 06:39 In progress
@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

🔍 Framework Compliance Report

Commit
Workflow
Compliance

Generated: 2025-11-03 06:39:08 UTC
Status: Action Required

📊 Summary

Status Count Percentage
🟢 Compliant 2/22 9%
🟠 Partial 20/22 91%
🔴 Non-compliant 0/22 0%

📦 Nested Layouts (4 components)


⚠️ Recommendations

Consider addressing partial compliance issues to improve code quality.

📚 Resources:

💡 This comment is automatically updated when compliance checks run.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

❌ Dependency Security Check Failed

  **Installation Error:** Unable to install dependencies due to version conflicts.
  
  ```
  Security audit could not be completed due to dependency installation failure.
  ```
  
  ---
  
  ### ❌ Security Status: CHECK FAILED
  
  **Action Required:** Please resolve dependency conflicts before security audit can run.
  
  **How to fix:**
  1. The workflow will be updated to use `--legacy-peer-deps` flag
  2. If issues persist, check for TypeScript version conflicts in package.json
  3. Consider updating peer dependencies to compatible versions
  
  **Need help?** Check the [npm dependency resolution documentation](https://docs.npmjs.com/cli/v8/configuring-npm/package-json#peerdependencies) for more details.

@github-actions
Copy link
Contributor

github-actions bot commented Nov 3, 2025

🔒 Security Check Report

Security Status

🟢 4 passed • 🟡 3 warnings

Security Checks

CheckStatusDetails
NPM Audit🟡1 vulnerabilities found (Critical: 0, High: 0, Moderate: 1, Low: 0)
Outdated Dependencies🟡10 outdated packages (1 major versions behind)
ESLint Security🟢No security-related linting issues
Security Headers🟡Some security headers missing in source
License Compliance🟢No problematic licenses detected
Secret Scanning🟢No potential secrets detected in code
Framework Compliance🟢Framework compliance checks passed

🔍 Action Items

⚠️ NPM Audit - 1 vulnerabilities found (Critical: 0, High: 0, Moderate: 1, Low: 0)

Details:

  • Critical: 0
  • High: 0
  • Moderate: 1
  • Low: 0

Recommendation: Run npm audit fix to automatically fix vulnerabilities

⚠️ Outdated Dependencies - 10 outdated packages (1 major versions behind)

Details:
Major version updates needed for:

  • react-syntax-highlighter

Recommendation: Review outdated packages and update where possible

⚠️ Security Headers - Some security headers missing in source

Details:

Recommendation: Ensure all security headers are properly defined


⚠️ Security Status: WARNINGS

Some security warnings were detected. Please review the action items above.

Last checked: Mon, 03 Nov 2025 06:39:17 GMT


This security check is automatically run on every PR build. Learn more about our security checks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants