Skip to content

Bump the major group across 1 directory with 5 updates - #64

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-a231c6d425
Open

Bump the major group across 1 directory with 5 updates#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/major-a231c6d425

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the major group with 5 updates in the / directory:

Package From To
@sveltejs/adapter-static 3.0.10 4.0.0
@sveltejs/kit 2.70.3 3.0.1
@types/node 24.19.0 26.6.4
msw 2.15.0 3.0.2
typescript 6.0.3 7.0.2

Updates @sveltejs/adapter-static from 3.0.10 to 4.0.0

Release notes

Sourced from @​sveltejs/adapter-static's releases.

@​sveltejs/adapter-static@​4.0.0

Major Changes

  • breaking: require SvelteKit 3 (#15506)

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

  • fix: avoid caching immutable asset 404s when configuring for Vercel (#16626)

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel (#16497)

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

  • chore: use builder.config to access SvelteKit config settings (#16895)

  • Updated dependencies:

    • @​sveltejs/kit@​3.0.0

@​sveltejs/adapter-static@​4.0.0-next.4

Major Changes

  • breaking: require SvelteKit 3

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16286)

  • fix: avoid caching immutable asset 404s when configuring for Vercel

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

  • Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

    • @​sveltejs/kit@​3.0.0-next.15

@​sveltejs/adapter-static@​4.0.0-next.3

Patch Changes

@​sveltejs/adapter-static@​4.0.0-next.2

Patch Changes

... (truncated)

Changelog

Sourced from @​sveltejs/adapter-static's changelog.

4.0.0

Major Changes

  • breaking: require SvelteKit 3 (#15506)

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

  • fix: avoid caching immutable asset 404s when configuring for Vercel (#16626)

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel (#16497)

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

  • chore: use builder.config to access SvelteKit config settings (#16895)

  • Updated dependencies:

    • @​sveltejs/kit@​3.0.0

4.0.0-next.4

Major Changes

  • breaking: require SvelteKit 3

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16286)

  • fix: avoid caching immutable asset 404s when configuring for Vercel

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

  • Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

    • @​sveltejs/kit@​3.0.0-next.15

4.0.0-next.3

Patch Changes

4.0.0-next.2

Patch Changes

... (truncated)

Commits

Updates @sveltejs/kit from 2.70.3 to 3.0.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.0.1

Patch Changes

  • fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

@​sveltejs/kit@​3.0.0

Major Changes

  • breaking: move remote function types to $app/server (#16740)

  • breaking: remove experimental.handleRenderingErrors flag (#16265)

  • breaking: make getRequest and setResponse synchronous (#16280)

  • breaking: TypeScript 6 is now the minimum required version (#15930)

  • breaking: refresh all load functions/queries when clicking a link to the current URL (#16572)

  • breaking: move remote function types to $app/server (#16764)

  • breaking: upgrade to cookie v2. Cookie names must now contain only ASCII characters (#13386)

  • breaking: require Node 22 or newer (#12548)

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

  • breaking: remove the preloadStrategy option. modulepreload will always be used (#15256)

  • breaking: default the cookie path option to '/' (#15398)

  • breaking: remove @sveltejs/kit/node/polyfills (#15430)

  • breaking: add config.kit.output.linkHeaderPreload to preload using the Link header (#15939)

  • breaking: require @sveltejs/vite-plugin-svelte v7 (#15371)

  • breaking: make page.url immutable on a type level (#16256)

  • breaking: remove base, assets, and resolveRoute from $app/paths (#15507)

  • breaking: remove createEntries from the Builder object passed to adapter functions (#15509)

  • breaking: return no content for 204 responses (#16200)

  • breaking: rename Pathname type to Path and Asset to AssetPath (#16430) breaking: remove leading / from Path and AssetPath

  • breaking: handle's resolve is now typed to always return a Promise (#16352)

  • breaking: remove Server constructor and SSRManifest from public types (#16876)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.0.1

Patch Changes

  • fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

3.0.0

Major Changes

  • breaking: move remote function types to $app/server (#16740)

  • breaking: remove experimental.handleRenderingErrors flag (#16265)

  • breaking: make getRequest and setResponse synchronous (#16280)

  • breaking: TypeScript 6 is now the minimum required version (#15930)

  • breaking: refresh all load functions/queries when clicking a link to the current URL (#16572)

  • breaking: move remote function types to $app/server (#16764)

  • breaking: upgrade to cookie v2. Cookie names must now contain only ASCII characters (#13386)

  • breaking: require Node 22 or newer (#12548)

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

  • breaking: remove the preloadStrategy option. modulepreload will always be used (#15256)

  • breaking: default the cookie path option to '/' (#15398)

  • breaking: remove @sveltejs/kit/node/polyfills (#15430)

  • breaking: add config.kit.output.linkHeaderPreload to preload using the Link header (#15939)

  • breaking: require @sveltejs/vite-plugin-svelte v7 (#15371)

  • breaking: make page.url immutable on a type level (#16256)

  • breaking: remove base, assets, and resolveRoute from $app/paths (#15507)

  • breaking: remove createEntries from the Builder object passed to adapter functions (#15509)

  • breaking: return no content for 204 responses (#16200)

  • breaking: rename Pathname type to Path and Asset to AssetPath (#16430) breaking: remove leading / from Path and AssetPath

  • breaking: handle's resolve is now typed to always return a Promise (#16352)

... (truncated)

Commits

Updates @types/node from 24.19.0 to 26.6.4

Commits

Updates msw from 2.15.0 to 3.0.2

Release notes

Sourced from msw's releases.

v3.0.2 (2026-10-03)

Bug Fixes

  • vite: support virtual:msw imports in vitest (#2802) (e73c381e3adc0848fcf9a7ef291b614b06a0d92b) @​kettanaito

v3.0.1 (2026-09-30)

Bug Fixes

  • treat CONNECT requests as the transport mechanism (#2796) (7cad86a03b0ddb2efdec96ce8a49b0ed07d9f4dc) @​kettanaito

v3.0.0 (2026-09-28)

⚠️ BREAKING CHANGES

  • MSW is now ESM-only (#2765).
  • Deprecate support for Node.js v18 and v20 (#2729). The minimal supported Node.js version is v22.
  • msw/native is removed in favor of @msw/react-native.
  • Require TypeScript 5.9 as the minimal version.
  • Deprecate support for TypeScript 5.1 and 5.2 (#2730)
  • worker.stop() returns a Promise (#2724). Awaiting it is relevant only for in-flight critical scenarios.
  • graphql is now exported as msw/graphql (#2691). GraphQL is now handled as a proper optional peer dependency.
  • Removes the handleRequest() utility. Please use the defineNetwork() API instead.
  • GraphQLLinkHandlers type has been renamed to GraphQLLink.
  • The file:// requests now throw in Node.js as they normally do (not supported by fetch).
  • The Content-Length request header is now removed by bypass().
  • HTTP-to-WebSocket upgrade requests performed via fetch() now throw in Node.js as they normally do (not supported by fetch).
  • Cookies are no longer managed in Node.js for better compatibilty. Instead, whatever is the default behavior of your environment that's the cookie behavior you get. This has no effect on the browser.
  • WebSocket connection life cycle event has been renamed to websocket:connection (#2783).
  • onUnhandledRequest option has been renamed to onUnhandledFrame.
  • The library no longer patches setTimeout to circumvent fake timers in test runners. You should advance the fake timers normally for delayed mocked responses to resolve.
  • The library no longer returns a mocked cookie string on request.headers.get('cookie') in the handlers. It returns null in all environments. Please use the cookies resolver argument to have cookie-based logic.

Features

  • Supports Node.js v24 and v26.
  • Supports TypeScript v6.0 and v7.0.
  • You can import individual utilities, like delay or passthrough, from the new msw/utils entrypoint for smaller footprint on your bundle.
  • Support GraphQL v17.0.
  • Support intercepting page navigations and form submissions (#2721).
  • Support GraphQL subscriptions (#285, #2763).
  • Migrate from path-to-regexp to @msw/url (#2678).
  • Remove the following dependencies:
    • graphql
    • path-to-regexp
    • picocolors
    • statuses

... (truncated)

Commits
  • a7fa5f0 chore(release): v3.0.2
  • 01b1084 docs: feature "msw/http" imports in README examples
  • e73c381 fix(vite): support virtual:msw imports in vitest (#2802)
  • 6d6aef1 chore(release): v3.0.1
  • 7cad86a fix: treat CONNECT requests as the transport mechanism (#2796)
  • 975cb45 docs: remove spacing before logo, update description
  • b6b50f0 chore(release): v3.0.0
  • 32cf523 chore: run release job on ubuntu-latest to unlock provenance
  • 2bb4342 feat!: v3.0.0 (#2692)
  • 85f4bf3 docs: add blacksmith mention (#2780)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the major group across 1 directory with 5 updates
7c4a19e 
Bumps the major group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sveltejs/adapter-static](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-static) | `3.0.10` | `4.0.0` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.70.3` | `3.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.19.0` | `26.6.4` |
| [msw](https://github.com/mswjs/msw) | `2.15.0` | `3.0.2` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@sveltejs/adapter-static` from 3.0.10 to 4.0.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-static/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-static@4.0.0/packages/adapter-static)

Updates `@sveltejs/kit` from 2.70.3 to 3.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.0.1/packages/kit)

Updates `@types/node` from 24.19.0 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `msw` from 2.15.0 to 3.0.2
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.15.0...v3.0.2)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@sveltejs/adapter-static"
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: msw
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major
...

Signed-off-by: dependabot[bot] <support@github.com>
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying basicpay with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7c4a19e
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 11, 2026
@socket-security

socket-security Bot commented Oct 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​sveltejs/​adapter-static@​3.0.10 ⏵ 4.0.010010072 +193 +4100
Updated@​types/​node@​24.19.0 ⏵ 26.6.4100 +11008196100
Updated@​sveltejs/​kit@​2.70.3 ⏵ 3.0.199 +110082 +198100
Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
Updatedmsw@​2.15.0 ⏵ 3.0.299 +510010094100

View full report

@socket-security

socket-security Bot commented Oct 11, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Priority Alert  (click "▶" to expand/collapse) Action
Medium priority
License policy violation: npm typescript under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: package.json → npm/typescript@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/typescript@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-aix-ppc64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-aix-ppc64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-aix-ppc64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-darwin-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-darwin-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-darwin-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-darwin-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-darwin-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-darwin-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-freebsd-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-freebsd-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-freebsd-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-freebsd-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-freebsd-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-freebsd-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-arm under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-arm@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-arm@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-loong64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-loong64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-loong64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-mips64el under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-mips64el@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-mips64el@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-ppc64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-ppc64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-ppc64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-riscv64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-riscv64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-riscv64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-s390x under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-s390x@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-s390x@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-linux-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-linux-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-linux-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-netbsd-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-netbsd-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-netbsd-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-netbsd-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-netbsd-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-netbsd-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-openbsd-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-openbsd-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-openbsd-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-openbsd-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-openbsd-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-openbsd-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-sunos-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-sunos-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-sunos-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-win32-arm64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-win32-arm64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-win32-arm64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
License policy violation: npm @typescript/typescript-win32-x64 under MIT-Khronos-old

License: MIT-Khronos-old - The applicable license policy does not permit this license (5) (package/NOTICE.txt)

From: pnpm-lock.yaml → npm/typescript@7.0.2 → npm/@typescript/typescript-win32-x64@7.0.2

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@typescript/typescript-win32-x64@7.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants