CHANGE @W-22462048@ Update Node dependencies (minor/patch versions)

[nikhil-mittal-165]

Summary

Monthly refresh of Node dev dependencies for the run-code-analyzer GitHub Action (minor/patch only).

Updated (minor/patch)

• eslint-plugin-github: 6.0.0 → 6.1.1
• eslint-plugin-jest: 29.15.2 → 29.15.5
• prettier: 3.8.4 → 3.9.6
• ts-jest: 29.4.11 → 29.4.12
• typescript-eslint: 8.61.1 → 8.65.0

Skipped (major version bumps — not updated)

• @actions/artifact (5→6), @actions/core (2→3), @actions/exec (2→3), @actions/github (6→9)
• eslint / @eslint/js (9→10), typescript (5→7)
• eslint-plugin-jsonc (2→3), globals (16→17), prettier-eslint (16→17)
• @types/node (keep v22), @vercel/ncc (0.38→0.44)

Test Results

• ✅ Lint clean
• ✅ All tests passing (107/107, 100% coverage)
• ✅ Bundled dist/ unchanged (only dev deps updated)

Notes

Only dev dependencies changed; runtime deps (@actions/*, semver) untouched, so the committed dist/ bundle is unaffected.

[git2gus]

Git2Gus App is installed but the .git2gus/config.json doesn't have right values. You should add the required configuration.

[github-actions]

Salesforce Code Analyzer found 13 violations, including 0 in files changed by this pull request. See job summary page.

[aruntyagiTutu]

Verified diff matches the PR description exactly: only the 5 listed dev dependencies (eslint-plugin-github, eslint-plugin-jest, prettier, ts-jest, typescript-eslint) are bumped by minor/patch in package.json, with a consistent package-lock.json regen. No runtime dependencies or bundled dist/ touched, matching the stated scope. Good, clear PR description with explicit skip-list rationale for major-version bumps and test results. Approving.

[namrata111f]

✅ Code Review Complete

Automated review of this dependency-refresh PR. Verified the actual diff against the PR description — everything checks out.

Verified

• package.json: Exactly 5 dev-dependency bumps, all devDependencies, all minor/patch:
  • eslint-plugin-github ^6.0.0 → ^6.1.1
  • eslint-plugin-jest ^29.15.2 → ^29.15.5
  • prettier ^3.8.4 → ^3.9.6
  • ts-jest ^29.4.11 → ^29.4.12
  • typescript-eslint ^8.61.1 → ^8.65.0
• Runtime deps untouched: No changes to @actions/* or semver in package-lock.json — confirms the claim that the committed dist/ bundle is unaffected. ✅
• Transitive changes: The few extra lock-file version bumps (globals 17.7.0, typescript under eslint-plugin-github, @eslint/core) are all nested under dev-dependency trees (eslint-plugin-github/node_modules/*, @eslint/compat/*), not runtime paths. ✅
• No dist/ changes in the file list, consistent with dev-deps-only.

Notes

• 🟢 Security: All bumps are minor/patch within already-trusted dev tooling; no new runtime attack surface. Major bumps (eslint 9→10, typescript 5→7, @actions/*) were correctly deferred.
• 🟢 Supply chain: Since runtime deps and dist/ are unchanged, this PR carries no shipped-artifact risk.
• 💡 Suggestion: The PR description reports 107/107 tests passing and 100% coverage — consider confirming CI is green on this branch before merge, since lock-file resolution can differ from local.

No blocking issues. LGTM. 🎉

Generated by /code-analyzer-monitor 🤖