chore(deps): bump the npm-deps group across 1 directory with 8 updates #3099
StepSecurity Actions Security / StepSecurity Required Checks
succeeded
Jan 7, 2026 in 4s
StepSecurity Required Checks
Finished StepSecurity Required Checks
- NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
- NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
- Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
- Script Injection Check - Checks for script injection vulnerabilities in the PR
Details
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ Script Injection Vulnerabilities Check
No Script Injection vulnerabilities found in this PR.
✅ Pwn Request Vulnerabilities Check
No Pwn Request vulnerabilities found in this PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR
| Package Name | Previous Version | Current Version | file | Current Version Release Date |
|---|---|---|---|---|
| ws | 8.18.3 | 8.19.0 | package-lock.json | 2026-01-05T20:28:13Z |
| ws | 8.18.3 | 8.19.0 | package.json | 2026-01-05T20:28:13Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:46Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:46Z |
| @typescript-eslint/eslint-plugin | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:40Z |
| @typescript-eslint/type-utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:28Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/parser | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| ts-api-utils | 2.1.0 | 2.4.0 | package-lock.json | 2026-01-02T14:18:38Z |
| globals | 16.5.0 | 17.0.0 | package.json | 2026-01-01T18:01:38Z |
| globals | 16.5.0 | 17.0.0 | package-lock.json | 2026-01-01T18:01:38Z |
| @eslint-community/eslint-utils | 4.9.0 | 4.9.1 | package-lock.json | 2025-12-31T14:49:52Z |
| got | 14.6.5 | 14.6.6 | package-lock.json | 2025-12-30T12:02:09Z |
| got | 14.6.5 | 14.6.6 | package.json | 2025-12-30T12:02:09Z |
| selfsigned | 5.2.0 | 5.4.0 | package-lock.json | 2025-12-23T14:50:37Z |
| selfsigned | 5.2.0 | 5.4.0 | package.json | 2025-12-23T14:50:37Z |
| chai | 6.2.1 | 6.2.2 | package-lock.json | 2025-12-22T21:26:03Z |
| chai | 6.2.1 | 6.2.2 | package.json | 2025-12-22T21:26:03Z |
| sinon | 21.0.0 | 21.0.1 | package-lock.json | 2025-12-19T14:18:41Z |
| sinon | 21.0.0 | 21.0.1 | package.json | 2025-12-19T14:18:41Z |
| @eslint-community/regexpp | 4.12.1 | 4.12.2 | package-lock.json | 2025-10-22T11:56:00Z |
| @sinonjs/samsam | 8.0.2 | 8.0.3 | package-lock.json | 2025-07-25T07:58:08Z |
⏲️ History
Previous invocation results of same check:
✅ Script Injection Vulnerabilities Check
No Script Injection vulnerabilities found in this PR.
✅ Pwn Request Vulnerabilities Check
No Pwn Request vulnerabilities found in this PR.
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR
| Package Name | Previous Version | Current Version | file | Current Version Release Date |
|---|---|---|---|---|
| ws | 8.18.3 | 8.19.0 | package-lock.json | 2026-01-05T20:28:13Z |
| ws | 8.18.3 | 8.19.0 | package.json | 2026-01-05T20:28:13Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:46Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:46Z |
| @typescript-eslint/eslint-plugin | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:40Z |
| @typescript-eslint/type-utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:28Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/parser | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| ts-api-utils | 2.1.0 | 2.4.0 | package-lock.json | 2026-01-02T14:18:38Z |
| globals | 16.5.0 | 17.0.0 | package-lock.json | 2026-01-01T18:01:38Z |
| globals | 16.5.0 | 17.0.0 | package.json | 2026-01-01T18:01:38Z |
| @eslint-community/eslint-utils | 4.9.0 | 4.9.1 | package-lock.json | 2025-12-31T14:49:52Z |
| got | 14.6.5 | 14.6.6 | package.json | 2025-12-30T12:02:09Z |
| got | 14.6.5 | 14.6.6 | package-lock.json | 2025-12-30T12:02:09Z |
| selfsigned | 5.2.0 | 5.4.0 | package-lock.json | 2025-12-23T14:50:37Z |
| selfsigned | 5.2.0 | 5.4.0 | package.json | 2025-12-23T14:50:37Z |
| chai | 6.2.1 | 6.2.2 | package-lock.json | 2025-12-22T21:26:03Z |
| chai | 6.2.1 | 6.2.2 | package.json | 2025-12-22T21:26:03Z |
| sinon | 21.0.0 | 21.0.1 | package.json | 2025-12-19T14:18:41Z |
| sinon | 21.0.0 | 21.0.1 | package-lock.json | 2025-12-19T14:18:41Z |
| @eslint-community/regexpp | 4.12.1 | 4.12.2 | package-lock.json | 2025-10-22T11:56:00Z |
| @sinonjs/samsam | 8.0.2 | 8.0.3 | package-lock.json | 2025-07-25T07:58:08Z |
⏲️ History
Previous invocation results of same check:
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ Script Injection Vulnerabilities Check
No Script Injection vulnerabilities found in this PR.
✅ Pwn Request Vulnerabilities Check
No Pwn Request vulnerabilities found in this PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR
| Package Name | Previous Version | Current Version | file | Current Version Release Date |
|---|---|---|---|---|
| ws | 8.18.3 | 8.19.0 | package.json | 2026-01-05T20:28:13Z |
| ws | 8.18.3 | 8.19.0 | package-lock.json | 2026-01-05T20:28:13Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:46Z |
| typescript-eslint | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:46Z |
| @typescript-eslint/eslint-plugin | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:40Z |
| @typescript-eslint/type-utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:28Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/parser | 8.50.0 | 8.52.0 | package-lock.json | 2026-01-05T17:07:21Z |
| @typescript-eslint/utils | 8.50.0 | 8.52.0 | package.json | 2026-01-05T17:07:21Z |
| ts-api-utils | 2.1.0 | 2.4.0 | package-lock.json | 2026-01-02T14:18:38Z |
| globals | 16.5.0 | 17.0.0 | package.json | 2026-01-01T18:01:38Z |
| globals | 16.5.0 | 17.0.0 | package-lock.json | 2026-01-01T18:01:38Z |
| @eslint-community/eslint-utils | 4.9.0 | 4.9.1 | package-lock.json | 2025-12-31T14:49:52Z |
| got | 14.6.5 | 14.6.6 | package.json | 2025-12-30T12:02:09Z |
| got | 14.6.5 | 14.6.6 | package-lock.json | 2025-12-30T12:02:09Z |
| selfsigned | 5.2.0 | 5.4.0 | package-lock.json | 2025-12-23T14:50:37Z |
| selfsigned | 5.2.0 | 5.4.0 | package.json | 2025-12-23T14:50:37Z |
| chai | 6.2.1 | 6.2.2 | package.json | 2025-12-22T21:26:03Z |
| chai | 6.2.1 | 6.2.2 | package-lock.json | 2025-12-22T21:26:03Z |
| sinon | 21.0.0 | 21.0.1 | package-lock.json | 2025-12-19T14:18:41Z |
| sinon | 21.0.0 | 21.0.1 | package.json | 2025-12-19T14:18:41Z |
| @eslint-community/regexpp | 4.12.1 | 4.12.2 | package-lock.json | 2025-10-22T11:56:00Z |
| @sinonjs/samsam | 8.0.2 | 8.0.3 | package-lock.json | 2025-07-25T07:58:08Z |
⏲️ History
Previous invocation results of same check:
Loading