chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm by dependabot[bot] · Pull Request #475 · cameri/nostream

dependabot · 2026-04-15T23:41:59Z

Removes @tootallnate/once. It's no longer used after updating ancestor dependencies @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm. These dependencies need to be updated together.

Removes @tootallnate/once

Updates semantic-release from 19.0.5 to 25.0.3

Release notes

Sourced from semantic-release's releases.

v25.0.3
25.0.3 (2026-01-30)
Bug Fixes
deps: remove deprecated semver-diff (#3980) (f404124)
v25.0.2
25.0.2 (2025-11-07)
Bug Fixes
deps: update dependency read-package-up to v12 (#3935) (1494cb9)
v25.0.1
25.0.1 (2025-10-19)
Bug Fixes
deps: update to the latest version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958
v25.0.1-beta.3
25.0.1-beta.3 (2025-10-19)
Bug Fixes
deps: update to latest npm plugin (a96aced)
v25.0.1-beta.2
25.0.1-beta.2 (2025-10-19)
Bug Fixes
deps: update to the stable version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958
v25.0.1-beta.1
25.0.1-beta.1 (2025-10-16)
Bug Fixes
deps: update to the beta of the npm plugin (c770748), closes semantic-release/npm#958

... (truncated)

Commits

f404124 fix(deps): remove deprecated semver-diff (#3980)
fef7e34 docs: warn against using registry-url in setup-node (#4024)
699d470 chore(deps): update dependency lockfile-lint to v5 (#4022)
c7c6f7a chore(deps): update dependency tempy to v3.1.2 (#4021)
1ce5088 ci(action): update github/codeql-action action to v4.32.0 (#4019)
9bb0d87 chore(deps): lock file maintenance (#4016)
490171c chore(deps): update npm to v11.8.0 (#4015)
f6411e9 chore(deps): update dependency prettier to v3.8.1 (#4014)
c71c576 chore(deps): update dependency publint to v0.3.17 (#4013)
989e18c chore(deps): update dependency tempy to v3.1.1 (#4012)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for semantic-release since your current version.

Updates @semantic-release/github from 8.0.6 to 8.1.0

Release notes

Sourced from @semantic-release/github's releases.

v8.1.0
8.1.0 (2023-05-28)
Features
add 'draftRelease' option (#379) (3c42e02)
v8.0.9
8.0.9 (2023-05-28)
Bug Fixes
deps: update dependency https-proxy-agent to v7 (#636) (0f12010)
v8.0.8
Bug Fixes
Use Octokit for request retries and throttling to prevent rate limit errors (#487) (3dc59ec)
v8.0.7
8.0.7 (2022-11-28)
Bug Fixes
deps: update dependency fs-extra to v11 (8bba5f0)

Commits

3c42e02 feat: add 'draftRelease' option (#379)
0f12010 fix(deps): update dependency https-proxy-agent to v7 (#636)
3dc59ec fix: use retry and throttle octokit plugins (#487)
94a0a7b chore(deps): update dependency sinon to v15.1.0 (#633)
8efe794 chore(deps): lock file maintenance (#626)
31e65c6 chore(deps): pin dependencies (#625)
b804981 chore(deps): update dependency semantic-release to v21.0.2 (#623)
cf73cad chore(deps): update dependency nock to v13.3.1 (#621)
8ee5a57 chore(deps): lock file maintenance (#618)
c03b19d chore(deps): update dependency sinon to v15.0.4 (#617)
Additional commits viewable in compare view

Updates @semantic-release/npm from 9.0.1 to 13.1.5

Release notes

Sourced from @semantic-release/npm's releases.

v13.1.5
13.1.5 (2026-03-01)
Bug Fixes
deps: update dependency normalize-url to v9 (#1095) (daec492)
v13.1.4
13.1.4 (2026-02-06)
Bug Fixes
deps: update dependency @actions/core to v3 (#1085) (17abfe1)
v13.1.3
13.1.3 (2025-12-12)
Bug Fixes
deps: update dependency @actions/core to v2 (#1055) (fa4a3ab)
v13.1.2
13.1.2 (2025-11-14)
Bug Fixes
deps: update dependency read-pkg to v10 (#1032) (f3f1a00)
v13.1.1
13.1.1 (2025-10-19)
Bug Fixes
publish-dry-run: temporarily remove the addition of dry-running the publish step (30bd176)
v13.1.0
13.1.0 (2025-10-19)
Features
trusted-publishing: verify auth, considering OIDC vs tokens from various registries (e3319f1), closes #958
trusted-publishing: refine the messages for related errors (316ce21), closes #958
trusted-publishing: make request to verify if OIDC token exchange can succeed (c80ecb0), closes #958
trusted-publishing: pass id-token as bearer header for github actions (d83b727), closes #958
trusted-publishing: pass id-token as bearer header for gitlab pipelines (6d1c3cf), closes #958

... (truncated)

Commits

daec492 fix(deps): update dependency normalize-url to v9 (#1095)
af8362f chore(deps): update dependency strip-ansi to v7.2.0 (#1098)
7354e11 chore(deps): update node.js to v24 (#1027)
2c4d2c9 chore(deps): update npm to v11.11.0 (#1097)
95ba689 chore(deps): update dependency c8 to v11 (#1096)
5d32912 chore(deps): update npm to v11.10.1 (#1094)
54f908c chore(deps): lock file maintenance (#1093)
91e1f14 chore(deps): update npm to v11.10.0 (#1092)
0d7d37e chore(deps): lock file maintenance (#1089)
c5411cc chore(deps): update npm to v11.9.0 (#1088)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @semantic-release/npm since your current version.

socket-security · 2026-04-15T23:42:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@semantic-release/github@8.0.6 ⏵ 8.1.0				^-3
	@semantic-release/npm@9.0.1 ⏵ 13.1.5

View full report

…ase/github and @semantic-release/npm Removes [@tootallnate/once](https://github.com/TooTallNate/once). It's no longer used after updating ancestor dependencies [@tootallnate/once](https://github.com/TooTallNate/once), [semantic-release](https://github.com/semantic-release/semantic-release), [@semantic-release/github](https://github.com/semantic-release/github) and [@semantic-release/npm](https://github.com/semantic-release/npm). These dependencies need to be updated together. Removes `@tootallnate/once` Updates `semantic-release` from 19.0.5 to 25.0.3 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v19.0.5...v25.0.3) Updates `@semantic-release/github` from 8.0.6 to 8.1.0 - [Release notes](https://github.com/semantic-release/github/releases) - [Commits](semantic-release/github@v8.0.6...v8.1.0) Updates `@semantic-release/npm` from 9.0.1 to 13.1.5 - [Release notes](https://github.com/semantic-release/npm/releases) - [Commits](semantic-release/npm@v9.0.1...v13.1.5) --- updated-dependencies: - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect - dependency-name: semantic-release dependency-version: 25.0.3 dependency-type: direct:development - dependency-name: "@semantic-release/github" dependency-version: 8.1.0 dependency-type: direct:development - dependency-name: "@semantic-release/npm" dependency-version: 13.1.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

cameri · 2026-04-18T01:11:02Z

@copilot can you make it so the commitlint rule allows commit messages longer than 120 characters? that way dependabot commits don't always fail commitlint

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/8fd4f1ef-8d4e-40ac-8770-92d86970c6f8 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T01:12:00Z

@copilot can you make it so the commitlint rule allows commit messages longer than 120 characters? that way dependabot commits don't always fail commitlint

Done in 475e69b. Added 'header-max-length': [0, 'always'] to commitlint.config.js, which disables the header length check entirely (severity 0 = off), so dependabot commit messages of any length will pass.

cameri · 2026-04-18T01:16:01Z

@copilot now commitlint is failing with this error:
✖ body's lines must not be longer than 250 characters [body-max-line-length]
let's disable body-max-line-length as well.

Agent-Logs-Url: https://github.com/cameri/nostream/sessions/28a54739-9bec-4cf0-9167-ef3c6eaf3736 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T01:16:45Z

@copilot now commitlint is failing with this error:
✖ body's lines must not be longer than 250 characters [body-max-line-length]
let's disable body-max-line-length as well.

Done in 4687e0d. Changed body-max-line-length severity from 2 (error) to 0 (off) in commitlint.config.js.

cameri · 2026-04-18T04:49:30Z

@copilot resolve the merge conflicts in this pull request

…rn/multi-8794fb37d7 # Conflicts: # package-lock.json Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilot · 2026-04-18T04:51:11Z

@copilot resolve the merge conflicts in this pull request

Done in e391730. The only conflict was in package-lock.json — resolved by merging origin/main and regenerating the lockfile with npm install --package-lock-only.

coveralls · 2026-04-18T04:54:52Z

Coverage Report for CI Build 24597261388

Coverage remained the same at 49.987%

Details

Coverage remained the same as the base build.
Patch coverage: No coverable lines changed in this PR.
No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

Coverage Stats


Relevant Lines:	2756
Covered Lines:	1435
Line Coverage:	52.07%
Relevant Branches:	1109
Covered Branches:	497
Branch Coverage:	44.82%
Branches in Coverage %:	Yes
Coverage Strength:	9.23 hits per line

💛 - Coveralls

dependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 15, 2026

dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-8794fb37d7 branch from 0c121da to 43ef6f6Compare April 17, 2026 03:24

Copilotstarted work on behalf of cameri April 18, 2026 01:11 View session

chore: disable header-max-length commitlint rule
475e69b
Agent-Logs-Url: https://github.com/cameri/nostream/sessions/8fd4f1ef-8d4e-40ac-8770-92d86970c6f8 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilotfinished work on behalf of cameri April 18, 2026 01:12

CopilotAI requested a review from cameri April 18, 2026 01:12

Merge branch 'main' into dependabot/npm_and_yarn/multi-8794fb37d7
0800ebb

Copilotstarted work on behalf of cameri April 18, 2026 01:16 View session

chore: disable body-max-line-length commitlint rule
4687e0d
Agent-Logs-Url: https://github.com/cameri/nostream/sessions/28a54739-9bec-4cf0-9167-ef3c6eaf3736 Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

Copilotfinished work on behalf of cameri April 18, 2026 01:17

cameri previously approved these changes Apr 18, 2026
View reviewed changes

Copilotstarted work on behalf of cameri April 18, 2026 04:49 View session

Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…
e391730
…rn/multi-8794fb37d7 # Conflicts: # package-lock.json Co-authored-by: cameri <378886+cameri@users.noreply.github.com>

CopilotAI dismissed cameri’s stale review via e391730April 18, 2026 04:51

Copilotfinished work on behalf of cameri April 18, 2026 04:51

CopilotAI requested a review from cameri April 18, 2026 04:51

cameri approved these changes Apr 18, 2026
View reviewed changes

cameri merged commit 862cc29 into mainApr 18, 2026
10 checks passed

cameri deleted the dependabot/npm_and_yarn/multi-8794fb37d7 branch April 18, 2026 04:54

Navigation Menu

chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm - #475

chore(deps): bump @tootallnate/once, semantic-release, @semantic-release/github and @semantic-release/npm#475
cameri merged 5 commits into
mainfrom
dependabot/npm_and_yarn/multi-8794fb37d7

dependabotBot commented on behalf of githubApr 15, 2026•
edited
Loading

Uh oh!

socket-securityBot commented Apr 15, 2026•
edited
Loading

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

Uh oh!

coveralls commented Apr 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabotBot commented on behalf of githubApr 15, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v25.0.3

25.0.3 (2026-01-30)

Bug Fixes

v25.0.2

25.0.2 (2025-11-07)

Bug Fixes

v25.0.1

25.0.1 (2025-10-19)

Bug Fixes

v25.0.1-beta.3

25.0.1-beta.3 (2025-10-19)

Bug Fixes

v25.0.1-beta.2

25.0.1-beta.2 (2025-10-19)

Bug Fixes

v25.0.1-beta.1

25.0.1-beta.1 (2025-10-16)

Bug Fixes

v8.1.0

8.1.0 (2023-05-28)

Features

v8.0.9

8.0.9 (2023-05-28)

Bug Fixes

v8.0.8

Bug Fixes

v8.0.7

8.0.7 (2022-11-28)

Bug Fixes

v13.1.5

13.1.5 (2026-03-01)

Bug Fixes

v13.1.4

13.1.4 (2026-02-06)

Bug Fixes

v13.1.3

13.1.3 (2025-12-12)

Bug Fixes

v13.1.2

13.1.2 (2025-11-14)

Bug Fixes

v13.1.1

13.1.1 (2025-10-19)

Bug Fixes

v13.1.0

13.1.0 (2025-10-19)

Features

Uh oh!

socket-securityBot commented Apr 15, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

cameri commented Apr 18, 2026

Uh oh!

CopilotAI commented Apr 18, 2026

Uh oh!

Uh oh!

coveralls commented Apr 18, 2026

Coverage Report for CI Build 24597261388

Coverage remained the same at 49.987%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Reviewers

Assignees

Labels

Projects

dependabotBot commented on behalf of githubApr 15, 2026•
edited
Loading

socket-securityBot commented Apr 15, 2026•
edited
Loading