chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm by dependabot[bot] · Pull Request #475 · cameri/nostream

dependabot · 2026-04-15T23:41:59Z

Removes @tootallnate/once. It's no longer used after updating ancestor dependencies @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm. These dependencies need to be updated together.

Removes @tootallnate/once

Updates semantic-release from 19.0.5 to 25.0.3

Release notes

Sourced from semantic-release's releases.

v25.0.3

25.0.3 (2026-01-30)

Bug Fixes

deps: remove deprecated semver-diff (#3980) (f404124)

v25.0.2

25.0.2 (2025-11-07)

Bug Fixes

deps: update dependency read-package-up to v12 (#3935) (1494cb9)

v25.0.1

25.0.1 (2025-10-19)

Bug Fixes

deps: update to the latest version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958

v25.0.1-beta.3

25.0.1-beta.3 (2025-10-19)

Bug Fixes

deps: update to latest npm plugin (a96aced)

v25.0.1-beta.2

25.0.1-beta.2 (2025-10-19)

Bug Fixes

deps: update to the stable version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958

v25.0.1-beta.1

25.0.1-beta.1 (2025-10-16)

Bug Fixes

deps: update to the beta of the npm plugin (c770748), closes semantic-release/npm#958

... (truncated)

Commits

f404124 fix(deps): remove deprecated semver-diff (#3980)
fef7e34 docs: warn against using registry-url in setup-node (#4024)
699d470 chore(deps): update dependency lockfile-lint to v5 (#4022)
c7c6f7a chore(deps): update dependency tempy to v3.1.2 (#4021)
1ce5088 ci(action): update github/codeql-action action to v4.32.0 (#4019)
9bb0d87 chore(deps): lock file maintenance (#4016)
490171c chore(deps): update npm to v11.8.0 (#4015)
f6411e9 chore(deps): update dependency prettier to v3.8.1 (#4014)
c71c576 chore(deps): update dependency publint to v0.3.17 (#4013)
989e18c chore(deps): update dependency tempy to v3.1.1 (#4012)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semantic-release since your current version.

Updates @semantic-release/github from 8.0.6 to 8.1.0

Release notes

Sourced from @semantic-release/github's releases.

v8.1.0

8.1.0 (2023-05-28)

Features

add 'draftRelease' option (#379) (3c42e02)

v8.0.9

8.0.9 (2023-05-28)

Bug Fixes

deps: update dependency https-proxy-agent to v7 (#636) (0f12010)

v8.0.8

Bug Fixes

Use Octokit for request retries and throttling to prevent rate limit errors (#487) (3dc59ec)

v8.0.7

8.0.7 (2022-11-28)

Bug Fixes

deps: update dependency fs-extra to v11 (8bba5f0)

Commits

3c42e02 feat: add 'draftRelease' option (#379)
0f12010 fix(deps): update dependency https-proxy-agent to v7 (#636)
3dc59ec fix: use retry and throttle octokit plugins (#487)
94a0a7b chore(deps): update dependency sinon to v15.1.0 (#633)
8efe794 chore(deps): lock file maintenance (#626)
31e65c6 chore(deps): pin dependencies (#625)
b804981 chore(deps): update dependency semantic-release to v21.0.2 (#623)
cf73cad chore(deps): update dependency nock to v13.3.1 (#621)
8ee5a57 chore(deps): lock file maintenance (#618)
c03b19d chore(deps): update dependency sinon to v15.0.4 (#617)
Additional commits viewable in compare view

Updates @semantic-release/npm from 9.0.1 to 13.1.5

Release notes

Sourced from @semantic-release/npm's releases.

v13.1.5

13.1.5 (2026-03-01)

Bug Fixes

deps: update dependency normalize-url to v9 (#1095) (daec492)

v13.1.4

13.1.4 (2026-02-06)

Bug Fixes

deps: update dependency @actions/core to v3 (#1085) (17abfe1)

v13.1.3

13.1.3 (2025-12-12)

Bug Fixes

deps: update dependency @actions/core to v2 (#1055) (fa4a3ab)

v13.1.2

13.1.2 (2025-11-14)

Bug Fixes

deps: update dependency read-pkg to v10 (#1032) (f3f1a00)

v13.1.1

13.1.1 (2025-10-19)

Bug Fixes

publish-dry-run: temporarily remove the addition of dry-running the publish step (30bd176)

v13.1.0

13.1.0 (2025-10-19)

Features

trusted-publishing: verify auth, considering OIDC vs tokens from various registries (e3319f1), closes #958

trusted-publishing: refine the messages for related errors (316ce21), closes #958

trusted-publishing: make request to verify if OIDC token exchange can succeed (c80ecb0), closes #958

trusted-publishing: pass id-token as bearer header for github actions (d83b727), closes #958

trusted-publishing: pass id-token as bearer header for gitlab pipelines (6d1c3cf), closes #958

... (truncated)

Commits

daec492 fix(deps): update dependency normalize-url to v9 (#1095)
af8362f chore(deps): update dependency strip-ansi to v7.2.0 (#1098)
7354e11 chore(deps): update node.js to v24 (#1027)
2c4d2c9 chore(deps): update npm to v11.11.0 (#1097)
95ba689 chore(deps): update dependency c8 to v11 (#1096)
5d32912 chore(deps): update npm to v11.10.1 (#1094)
54f908c chore(deps): lock file maintenance (#1093)
91e1f14 chore(deps): update npm to v11.10.0 (#1092)
0d7d37e chore(deps): lock file maintenance (#1089)
c5411cc chore(deps): update npm to v11.9.0 (#1088)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @semantic-release/npm since your current version.

socket-security · 2026-04-15T23:42:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@semantic-release/github@8.0.6 ⏵ 8.1.0				^-3
	@semantic-release/npm@9.0.1 ⏵ 13.1.5

View full report

…ase/github and @semantic-release/npm Removes [@tootallnate/once](https://github.com/TooTallNate/once). It's no longer used after updating ancestor dependencies [@tootallnate/once](https://github.com/TooTallNate/once), [semantic-release](https://github.com/semantic-release/semantic-release), [@semantic-release/github](https://github.com/semantic-release/github) and [@semantic-release/npm](https://github.com/semantic-release/npm). These dependencies need to be updated together. Removes `@tootallnate/once` Updates `semantic-release` from 19.0.5 to 25.0.3 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v19.0.5...v25.0.3) Updates `@semantic-release/github` from 8.0.6 to 8.1.0 - [Release notes](https://github.com/semantic-release/github/releases) - [Commits](semantic-release/github@v8.0.6...v8.1.0) Updates `@semantic-release/npm` from 9.0.1 to 13.1.5 - [Release notes](https://github.com/semantic-release/npm/releases) - [Commits](semantic-release/npm@v9.0.1...v13.1.5) --- updated-dependencies: - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: semantic-release dependency-version: 25.0.3 dependency-type: direct:development - dependency-name: "@semantic-release/github" dependency-version: 8.1.0 dependency-type: direct:development - dependency-name: "@semantic-release/npm" dependency-version: 13.1.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

cameri · 2026-04-18T01:11:02Z

@copilot can you make it so the commitlint rule allows commit messages longer than 120 characters? that way dependabot commits don't always fail commitlint

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/8fd4f1ef-8d4e-40ac-8770-92d86970c6f8 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T01:12:00Z

@copilot can you make it so the commitlint rule allows commit messages longer than 120 characters? that way dependabot commits don't always fail commitlint

Done in 475e69b. Added 'header-max-length': [0, 'always'] to commitlint.config.js, which disables the header length check entirely (severity 0 = off), so dependabot commit messages of any length will pass.

cameri · 2026-04-18T01:16:01Z

@copilot now commitlint is failing with this error:
✖ body's lines must not be longer than 250 characters [body-max-line-length]
let's disable body-max-line-length as well.

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/28a54739-9bec-4cf0-9167-ef3c6eaf3736 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T01:16:45Z

@copilot now commitlint is failing with this error:
✖ body's lines must not be longer than 250 characters [body-max-line-length]
let's disable body-max-line-length as well.

Done in 4687e0d. Changed body-max-line-length severity from 2 (error) to 0 (off) in commitlint.config.js.

cameri · 2026-04-18T04:49:30Z

@copilot resolve the merge conflicts in this pull request

…rn/multi-8794fb37d7 # Conflicts: # package-lock.json Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T04:51:11Z

@copilot resolve the merge conflicts in this pull request

Done in e391730. The only conflict was in package-lock.json — resolved by merging origin/main and regenerating the lockfile with npm install --package-lock-only.

coveralls · 2026-04-18T04:54:52Z

Coverage Report for CI Build 24597261388

Coverage remained the same at 49.987%

Details

Coverage remained the same as the base build.
Patch coverage: No coverable lines changed in this PR.
No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

Coverage Stats


Relevant Lines:	2756
Covered Lines:	1435
Line Coverage:	52.07%
Relevant Branches:	1109
Covered Branches:	497
Branch Coverage:	44.82%
Branches in Coverage %:	Yes
Coverage Strength:	9.23 hits per line

💛 - Coveralls

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 15, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8794fb37d7 branch from 0c121da to 43ef6f6 Compare April 17, 2026 03:24

Copilot started work on behalf of cameri April 18, 2026 01:11 View session

chore: disable header-max-length commitlint rule

475e69b

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/8fd4f1ef-8d4e-40ac-8770-92d86970c6f8 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot finished work on behalf of cameri April 18, 2026 01:12

Copilot AI requested a review from cameri April 18, 2026 01:12

Merge branch 'main' into dependabot/npm_and_yarn/multi-8794fb37d7

0800ebb

Copilot started work on behalf of cameri April 18, 2026 01:16 View session

chore: disable body-max-line-length commitlint rule

4687e0d

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/28a54739-9bec-4cf0-9167-ef3c6eaf3736 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot finished work on behalf of cameri April 18, 2026 01:17

cameri previously approved these changes Apr 18, 2026

View reviewed changes

Copilot started work on behalf of cameri April 18, 2026 04:49 View session

Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…

e391730

…rn/multi-8794fb37d7 # Conflicts: # package-lock.json Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot AI dismissed cameri’s stale review via e391730 April 18, 2026 04:51

Copilot finished work on behalf of cameri April 18, 2026 04:51

Copilot AI requested a review from cameri April 18, 2026 04:51

cameri approved these changes Apr 18, 2026

View reviewed changes

cameri merged commit 862cc29 into main Apr 18, 2026
10 checks passed

cameri deleted the dependabot/npm_and_yarn/multi-8794fb37d7 branch April 18, 2026 04:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm#475

chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm#475
cameri merged 5 commits intomainfrom
dependabot/npm_and_yarn/multi-8794fb37d7

dependabot Bot commented on behalf of github Apr 15, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

Uh oh!

coveralls commented Apr 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot Bot commented on behalf of github Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v25.0.3

25.0.3 (2026-01-30)

Bug Fixes

v25.0.2

25.0.2 (2025-11-07)

Bug Fixes

v25.0.1

25.0.1 (2025-10-19)

Bug Fixes

v25.0.1-beta.3

25.0.1-beta.3 (2025-10-19)

Bug Fixes

v25.0.1-beta.2

25.0.1-beta.2 (2025-10-19)

Bug Fixes

v25.0.1-beta.1

25.0.1-beta.1 (2025-10-16)

Bug Fixes

v8.1.0

8.1.0 (2023-05-28)

Features

v8.0.9

8.0.9 (2023-05-28)

Bug Fixes

v8.0.8

Bug Fixes

v8.0.7

8.0.7 (2022-11-28)

Bug Fixes

v13.1.5

13.1.5 (2026-03-01)

Bug Fixes

v13.1.4

13.1.4 (2026-02-06)

Bug Fixes

v13.1.3

13.1.3 (2025-12-12)

Bug Fixes

v13.1.2

13.1.2 (2025-11-14)

Bug Fixes

v13.1.1

13.1.1 (2025-10-19)

Bug Fixes

v13.1.0

13.1.0 (2025-10-19)

Features

Uh oh!

socket-security Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

Copilot AI commented Apr 18, 2026

Uh oh!

Uh oh!

coveralls commented Apr 18, 2026

Coverage Report for CI Build 24597261388

Coverage remained the same at 49.987%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Reviewers

Assignees

Labels

Projects

dependabot Bot commented on behalf of github Apr 15, 2026 •

edited

Loading

socket-security Bot commented Apr 15, 2026 •

edited

Loading