Skip to content

chore(deps): update Action Node.js type definitions - #1323

Merged
mldangelo-oai merged 1 commit into
mainfrom
dependabot/npm_and_yarn/github-action/types/node-26.6.3
Oct 6, 2026
Merged

mldangelo-oai merged 1 commit into
mainfrom
dependabot/npm_and_yarn/github-action/types/node-26.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Update the GitHub Action's Node.js development type definitions from 24.13.4 to 26.6.3.

Changes

  • Update the pinned @types/node development dependency and lockfile.
  • Update its undici-types dependency from 7.18.2 to 8.9.0.
  • Preserve the Action's Node 24 runtime requirement and public interface.

Testing

  • Independently verified publication dates and all four old/new package archive integrity hashes against npm and the lockfile.
  • Verified that both packages contain declarations rather than runtime JavaScript and introduce no installation hooks. The minimum TypeScript version remains 5.6, compatible with the existing 5.9.3 compiler.
  • Local Action validation and final current-head CI results are recorded in the approval review before merge.

Risk and rollout

This is a major type-definition update, so compatibility is checked with the existing compiler and the Action's Node 24 test environment before merge. Both packages satisfy the existing seven-day cooldown: @types/node 26.6.3 was published September 25, 2026, and undici-types 8.9.0 July 24. No runtime dependency, accepted input, or runtime default changes.

Public disclosure review

  • No customer, partner, prospect, or user identities, data, or identifying details are included.
  • No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
  • I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-06T06:28:36.596868Z dcd8b1e New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/github-action/types/node-26.6.3 branch 2 times, most recently from 0a1d1a9 to 77d9b06 Compare October 6, 2026 05:47
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.13.4 to 26.6.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/github-action/types/node-26.6.3 branch from 77d9b06 to dcd8b1e Compare October 6, 2026 06:27
@mldangelo-oai mldangelo-oai changed the title chore(deps-dev): bump @types/node from 24.13.4 to 26.6.3 in /github-action chore(deps): update Action Node.js type definitions Oct 6, 2026

@mldangelo-oai mldangelo-oai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the exact head dcd8b1e. Both updated packages satisfy the seven-day cooldown. Verified all four old/new package archive integrity hashes, upstream declaration changes, unchanged TypeScript 5.6 minimum, absence of installation hooks, and compatibility of the Action call sites with Node 24.

Local validation passed on Node 24: clean dependency installation; Action validation including TypeScript 5.9.3 typechecking, 135 tests, metadata, generated documentation, and distribution consistency; published CLI integration; and the packaged Linux dry-run/cleanup smoke test. Current-head required CI passed, and all review threads are resolved. Reviewed the public PR material and artifacts for sensitive information. No compatibility repair was needed.

@mldangelo-oai
mldangelo-oai merged commit 9f5bd49 into main Oct 6, 2026
85 of 102 checks passed
@mldangelo-oai
mldangelo-oai deleted the dependabot/npm_and_yarn/github-action/types/node-26.6.3 branch October 6, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant