Bump eslint-plugin-turbo from 2.5.6 to 2.6.3 #4471
Conversation
Bumps [eslint-plugin-turbo](https://github.com/vercel/turborepo/tree/HEAD/packages/eslint-plugin-turbo) from 2.5.6 to 2.6.3. - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](https://github.com/vercel/turborepo/commits/v2.6.3/packages/eslint-plugin-turbo) --- updated-dependencies: - dependency-name: eslint-plugin-turbo dependency-version: 2.6.3 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
![kiloconnect[bot]](https://avatars.githubusercontent.com/in/2193792?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ No Issues Found
3 files reviewed | Confidence: 95% | Recommendation: Merge
Review Details
Files: cli/package.json, packages/config-eslint/package.json, pnpm-lock.yaml
Change Type: Dependency update (eslint-plugin-turbo 2.5.6 → 2.6.3)
Checked:
- ✅ Version bump is a minor version update (safe)
- ✅ No breaking changes expected
- ✅ Release notes indicate bug fixes and security improvements
- ✅ Lock file correctly reflects the version changes
- ✅ No source code modifications required
Notes:
- This update includes a security fix for command injection in
turbo-ignore(vercel/turborepo#11154) - The lock file also shows incidental transitive dependency updates (
@types/nodepatch bump)
Bumps eslint-plugin-turbo from 2.5.6 to 2.6.3.
Release notes
Sourced from eslint-plugin-turbo's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-turbo's changelog.
... (truncated)
Commits
13612aapublish 2.6.3 to registry2ceec77release(turborepo): 2.6.3-canary.0 (#11191)abff3a9release(turborepo): 2.6.2 (#11189)11a141erelease(turborepo): 2.6.2-canary.2 (#11187)fdb52a7release(turborepo): 2.6.2-canary.0 (#11185)e3bdb02release(turborepo): 2.6.1 (#11099)bd53f07release(turborepo): 2.6.1-canary.3 (#11096)ee469d4release(turborepo): 2.6.1-canary.2 (#11093)4548e5erelease(turborepo): 2.6.1-canary.1 (#11057)5da94fcrelease(turborepo): 2.6.1-canary.0 (#11052)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eslint-plugin-turbo since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)