Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #4182 · github/codeql-action · GitHub
Open Graph Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #4182 · github/codeql-action
X Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #4182 · github/codeql-action
Description: Bumps the npm-minor group with 4 updates in the / directory: @actions/cache, eslint-plugin-jsdoc, typescript-eslint and tsx.
Updates @actions/cache from 5.2.0 to 5.3.0
Changelog
Sourced from @actions/cache's changelog.
5.3.0
Isolate Windows BSD tar scratch files for concurrent cache list and extract operations, preventing calls from sharing cache.tar #2497.
Update compatible runtime and development dependencies and resolve npm audit findings.
Commits
See full diff in compare view
Updates eslint-plugin-jsdoc from 64.5.2 to 64.5.4
Release notes
Sourced from eslint-plugin-jsdoc's releases.
v64.5.4
64.5.4 (2026-09-19)
Bug Fixes
no-unnecessary-type-assertion: only try typescript if the rule is enabled; fixes #1773 (3c1c209)
v64.5.3
64.5.3 (2026-09-18)
Bug Fixes
for @link targets, check properties within export class declarations; fixes #1771 (2d85fed)
Commits
3c1c209 fix(no-unnecessary-type-assertion): only try typescript if the rule is enab...
a142875 chore: update jsdoccomment, typescript-eslint/utils, comment-parser, devDeps
2d85fed fix: for @link targets, check properties within export class declarations; fi...
f1f318a chore: update ncurc format
See full diff in compare view
Updates typescript-eslint from 8.70.0 to 8.70.1
Release notes
Sourced from typescript-eslint's releases.
v8.70.1
8.70.1 (2026-09-21)
🩹 Fixes
ast-spec: narrow import attribute keys to identifiers and strings (#12879)
eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
rule-tester: test the final autofix output instead of the first pass (#12867)
scope-manager: merge implicit global definitions (#12809)
type-utils: match package specifiers on whole path components (#12838)
typescript-estree: resolve symlinked paths when matching files to projects (#12725)
typescript-estree: add missing < token opening type arguments (#12821)
typescript-estree: require string literal import attribute values (#12894)
website: prevent playground from breaking down after opening link with the .js file type (#12777)
❤️ Thank You
Amin @amiin-dev
Brad Zacher @bradzacher
Cameron
Diptajoy Mistry @diptomistry
Evyatar Daud @StyleShit
Grit @Grit03
Hugo @hugop95
Josh Goldberg ✨
Michael Naumov @mnaoumov
Mikhail Baev @baevm
Om Rawat
overlookmotel
Sanath @sansynx
Shinji
stoicism @stoicism02
Vinccool96
Younsang Na @nayounsang
김채영 @cchaeyoung
송재욱
See GitHub Releases for more information.
... (truncated)
Changelog
Sourced from typescript-eslint's changelog.
8.70.1 (2026-09-21)
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
Commits
23d38ce chore(release): publish 8.70.1
eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
8c80531 chore: fix typos in comments and docs (#12846)
b6b86a1 chore: migrate to nx 23.2.0 (#12843)
See full diff in compare view
Updates tsx from 4.23.13 to 4.23.15
Release notes
Sourced from tsx's releases.
v4.23.15
4.23.15 (2026-09-20)
Bug Fixes
exclude bare builtins from namespace inheritance (38e1588)
expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
make namespaced register() overloads portable for declaration emit (562c434)
This release is also available on:
npm package (@latest dist-tag)
v4.23.14
4.23.14 (2026-09-20)
Bug Fixes
restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)
This release is also available on:
npm package (@latest dist-tag)
Commits
ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view
Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name
Ignore Conditions
@actions/cache
[>= 6.a, < 7]
eslint-plugin-jsdoc
[>= 63.a, < 64]
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps the npm-minor group with 4 updates in the / directory: @actions/cache, eslint-plugin-jsdoc, typescript-eslint and tsx. Updates @actions/cache from 5.2.0 to 5.3.0 Changelog Sourced from @act...
X Description: Bumps the npm-minor group with 4 updates in the / directory: @actions/cache, eslint-plugin-jsdoc, typescript-eslint and tsx. Updates @actions/cache from 5.2.0 to 5.3.0 Changelog Sourced from @act...
Opengraph URL: https://github.com/github/codeql-action/pull/4182
X: @github
Domain: github.com
| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:5b33aab1-67af-c50e-1b01-66ea1db1dbd5 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | C658:ABE51:77667B:9BD00B:6AED3361 |
| html-safe-nonce | 0450a3a4e4349df4cbab0ac46a23533952a82189ee4252c0ba19d808217b5f34 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDNjU4OkFCRTUxOjc3NjY3Qjo5QkQwMEI6NkFFRDMzNjEiLCJ2aXNpdG9yX2lkIjoiMzUzNDE5MjQ2OTI3MzgxNzk1MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 4bf6516796a1cdcdbeed2e50bc24f25fa078031ed3c26d1fb781099c261efe78 |
| hovercard-subject-tag | pull_request:4694093789 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4182/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps the npm-minor group with 4 updates in the / directory: @actions/cache, eslint-plugin-jsdoc, typescript-eslint and tsx. Updates @actions/cache from 5.2.0 to 5.3.0 Changelog Sourced from @act... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 26c92a9388ddfad3fa88d132b5d5f0b4747030233dcc4e5efb05f1cbae152184 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/github/codeql-action git https://github.com/github/codeql-action.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 259445878 |
| octolytics-dimension-repository_nwo | github/codeql-action |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 259445878 |
| octolytics-dimension-repository_network_root_nwo | github/codeql-action |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | c629ad99c254d306375fc8354d04321c2c362236 |
| ui-target | canary-1 |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width