chore: update dependencies in package.json#374
Conversation
virgofx
commented
Feb 16, 2026
- upgraded minimatch from ^10.1.1 to ^10.2.0
- upgraded p-limit from ^7.2.0 to ^7.3.0
- upgraded which from ^6.0.0 to ^6.0.1
- upgraded @biomejs/biome from ^2.3.11 to ^2.4.1
- upgraded @types/node from ^24.10.4 to ^24.10.13
- upgraded @vitest/coverage-v8 from ^4.0.16 to ^4.0.18
- upgraded openai from ^6.16.0 to ^6.22.0
- upgraded prettier from ^3.7.4 to ^3.8.1
- upgraded textlint from ^15.5.0 to ^15.5.1
- upgraded vitest from ^4.0.15 to ^4.0.18
- upgraded minimatch from ^10.1.1 to ^10.2.0 - upgraded p-limit from ^7.2.0 to ^7.3.0 - upgraded which from ^6.0.0 to ^6.0.1 - upgraded @biomejs/biome from ^2.3.11 to ^2.4.1 - upgraded @types/node from ^24.10.4 to ^24.10.13 - upgraded @vitest/coverage-v8 from ^4.0.16 to ^4.0.18 - upgraded openai from ^6.16.0 to ^6.22.0 - upgraded prettier from ^3.7.4 to ^3.8.1 - upgraded textlint from ^15.5.0 to ^15.5.1 - upgraded vitest from ^4.0.15 to ^4.0.18
📋 Release Plan
📝 Changelog
|
|
There was a problem hiding this comment.
Pull request overview
This PR updates the project’s Node.js/TypeScript toolchain and runtime dependencies, keeping the Terraform Module Releaser GitHub Action and its developer tooling current.
Changes:
- Bumped several direct dependencies/devDependencies in
package.json(e.g., minimatch, p-limit, which, Biome, Vitest, OpenAI SDK, Prettier, Textlint, Node types). - Regenerated
package-lock.jsonto align resolved/transitive dependency versions with the updated ranges. - Added a Trivy config to exclude scanning the
tf-modulesdirectory.
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates declared dependency versions for runtime and dev tooling. |
| package-lock.json | Updates the lockfile to reflect the new resolved dependency graph. |
| .github/linters/trivy.yaml | Configures Trivy to skip scanning tf-modules. |
| scan: | ||
| skip-dirs: | ||
| - "tf-modules" |
There was a problem hiding this comment.
The PR title/description indicate only dependency updates, but this PR also introduces a new Trivy configuration file to skip scanning tf-modules. Please either mention this change in the PR description/title or move it to a separate PR to keep the scope clear.


