Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates - #57

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d065130636
Closed

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d065130636

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates in the / directory: fs-extra and otpauth.

Updates fs-extra from 11.3.4 to 11.3.6

Changelog

Sourced from fs-extra's changelog.

11.3.6 / 2026-06-29

  • Fix handling of symlinked destination ancestors in copy/move methods (#1071, #1073)
  • Docs typo fixed (#1074)

11.3.5 / 2026-05-06

  • Fix ensureLink*/ensureSymlink* identical file detection on Windows (#1068)
  • Fix error handling in timestamp preservation code (#1065, #1069)
  • Fix potential file descriptor leak on error in synchronous timestamp preservation code (#1066)
Commits

Updates otpauth from 9.5.0 to 9.5.1

Release notes

Sourced from otpauth's releases.

v9.5.1

What's Changed

Full Changelog: hectorm/otpauth@v9.5.0...v9.5.1

Commits
  • 4903d3d 9.5.1
  • b5c6df7 Add 7 day cooldown for new dependency versions
  • 01f7caf Update dependencies
  • adff202 Bump the npm-development-minor-patch group across 1 directory with 8 updates ...
  • 0e4fa84 Bump @​noble/hashes in the npm-production-minor-patch group (#688)
  • b7f24c9 Bump the github-actions-all group with 4 updates (#692)
  • 80b053d Bump flatted from 3.3.3 to 3.4.2 (#682)
  • 4d0f0cc Bump picomatch from 4.0.3 to 4.0.4 (#684)
  • 2f0e384 Bump the github-actions-all group with 5 updates (#685)
  • 7097f14 Bump the npm-development-minor-patch group across 1 directory with 8 updates ...
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jun 2, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 7 packages with OpenSSF Scorecard issues.

View full job summary

@github-actions

github-actions Bot commented Jun 2, 2026

Copy link
Copy Markdown

📊 Test Coverage Report

Metric Coverage CI Gate Target
Lines 86.4% (11426/13228) 75% 80%
Statements 86.4% (11426/13228) 75% 80%
Branches 80.4% (1382/1719) 70% 80%
Functions 🟡 78.3% (257/328) 80%

🟡 CI gate passed — coverage below 80% target

Files below 80% coverage
File Lines Functions Branches
src/middlewares/guardrail/GuardrailInterceptorHook.ts 76.6% 100.0% 73.0%
src/middlewares/guardrail/GuardrailMiddleware.ts 75.6% 66.7% 68.2%
src/middlewares/guardrail/GuardrailScanner.ts 93.4% 100.0% 64.3%
src/middlewares/guardrail/GuardrailWriteScannerHook.ts 71.0% 100.0% 78.2%
src/middlewares/guardrail/ModerationGuardHook.ts 74.8% 100.0% 58.8%
src/middlewares/guardrail/guards/canary-tracker.ts 98.0% 80.0% 66.7%
src/middlewares/guardrail/guards/content-moderation.ts 78.4% 100.0% 90.6%
src/middlewares/guardrail/guards/sensitive-paths.ts 94.1% 100.0% 77.3%
src/middlewares/guardrail/scanners/HeuristicScanner.ts 100.0% 100.0% 75.0%
src/middlewares/guardrail/scanners/RegexScanner.ts 90.3% 100.0% 78.6%
src/middlewares/guardrail/storage/ConfigStore.ts 88.0% 71.4% 80.0%
src/middlewares/guardrail/storage/DecisionLog.ts 70.3% 40.0% 100.0%
src/middlewares/hitl/Interceptor.ts 89.8% 83.3% 75.7%
src/middlewares/hitl/index.ts 85.8% 54.5% 66.7%
src/middlewares/hitl/script-content-loader.ts 47.8% 0.0% 100.0%
src/middlewares/hitl/tool-interceptor.ts 89.5% 100.0% 70.9%
src/middlewares/hitl/approval/ApprovalQueue.ts 79.7% 81.3% 78.6%
src/middlewares/hitl/approval/Arbitrator.ts 36.1% 25.0% 91.7%
src/middlewares/hitl/approval/TotpManager.ts 93.9% 87.5% 71.4%
src/middlewares/hitl/approval/approval-commands.ts 84.8% 100.0% 72.7%
src/middlewares/hitl/scoring/IrreversibilityScorer.ts 95.6% 100.0% 75.0%
src/middlewares/hitl/storage/BrowserSessionStore.ts 94.7% 100.0% 72.5%
src/middlewares/hitl/storage/DecisionLog.ts 70.6% 25.0% 100.0%
src/middlewares/hitl/storage/PolicyStore.ts 89.4% 85.7% 64.3%
src/middlewares/hitl/storage/StatsTracker.ts 91.2% 71.4% 80.0%
src/middlewares/pii-sanitizer/PiiSanitizerMiddleware.ts 75.7% 58.3% 74.2%
src/middlewares/pii-sanitizer/PolicyEngine.ts 96.6% 100.0% 70.6%
src/middlewares/pii-sanitizer/ScannerEngine.ts 70.0% 85.7% 87.5%
src/middlewares/pii-sanitizer/storage/DlpStore.ts 70.6% 18.2% 100.0%
src/middlewares/tool-call-limit/ToolCallLimitMiddleware.ts 86.8% 72.2% 86.4%
src/middlewares/tool-call-limit/storage/LimitPolicyStore.ts 74.6% 50.0% 75.0%

Generated by CI on commit 5043bbb

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-d065130636 branch from e172c2f to 172ef0c Compare June 23, 2026 22:31
…rectory with 2 updates

Bumps the production-dependencies group with 2 updates in the / directory: [fs-extra](https://github.com/jprichardson/node-fs-extra) and [otpauth](https://github.com/hectorm/otpauth).


Updates `fs-extra` from 11.3.4 to 11.3.6
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](jprichardson/node-fs-extra@11.3.4...11.3.6)

Updates `otpauth` from 9.5.0 to 9.5.1
- [Release notes](https://github.com/hectorm/otpauth/releases)
- [Commits](hectorm/otpauth@v9.5.0...v9.5.1)

---
updated-dependencies:
- dependency-name: fs-extra
  dependency-version: 11.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: otpauth
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-d065130636 branch from 172ef0c to 958bf7d Compare July 6, 2026 10:08
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-d065130636 branch July 29, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant