Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates - #65

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dev-dependencies-4a0e8a85f2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dev-dependencies-4a0e8a85f2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 5 updates in the / directory:

Package From To
@types/bun 1.4.3 1.4.4
turbo 2.11.9 2.11.10
typescript 6.0.3 7.0.2
autumn-js 1.5.8 1.5.18
@workos-inc/node 11.0.0 12.0.0

Updates @types/bun from 1.4.3 to 1.4.4

Commits

Updates turbo from 2.11.9 to 2.11.10

Release notes

Sourced from turbo's releases.

Turborepo v2.11.10

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

Commits
  • e521641 publish 2.11.10 to registry
  • aaf5a3a fix: Distrust compromised eMudhra intermediate certificates (#14876)
  • 9816503 fix: Exit quietly when turbo ls output is piped to a closed reader (#14868)
  • af866e5 feat: Enable WebMCP for Turborepo docs (#14828)
  • b42cc68 chore: Remove CODEOWNERS file (#14810)
  • 921155f fix: Restore cached symlinks when outputs are already on disk (#14807)
  • 9330903 docs: Generate the sitemap from Geistdocs sources (#14865)
  • 6048038 fix: Keep task env vars in the hash when globalEnv excludes inferred vars (#1...
  • 57ecce3 fix: Parse pnpm 8 single-project lockfiles (#14806)
  • d926d6a fix: Match package configuration files and directory inputs in task-level aff...
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates autumn-js from 1.5.8 to 1.5.18

Commits

Updates @workos-inc/node from 11.0.0 to 12.0.0

Release notes

Sourced from @​workos-inc/node's releases.

v12.0.0

12.0.0 (2026-10-23)

⚠ BREAKING CHANGES

  • sso: Make nullable Profile fields nullable instead of optional (#1737)
  • events: Add the 28 event types the spec defines but the SDK lacked (#1739)
  • Deserialize API timestamps as Date objects (#1736)
  • vault: Remove stale duplicate object interfaces (#1738)
  • Align enum and nullable types with the API spec (#1735)
  • events: Add UnknownEvent to the Event union (#1734)
  • admin-portal: Rename adminEmails to itContactEmails (#1730)
  • Port DirectorySync to oagen (#1626)
  • feature-flags: Evaluate ordered targeting rules (#1717)

Features

  • Add widgets:pipes:manage to WidgetScope type (#1609) (aa38974)
  • admin-portal: Rename adminEmails to itContactEmails (#1730) (e988e79)
  • Deserialize API timestamps as Date objects (#1736) (5457d95)
  • events: Add the 28 event types the spec defines but the SDK lacked (#1739) (b9ffc7e)
  • events: Add UnknownEvent to the Event union (#1734) (a6b9c3d)
  • events: Type agent blueprint, instance and registration events (#1729) (77590af)
  • feature-flags: Evaluate ordered targeting rules (#1717) (1b305bd)
  • Port DirectorySync to oagen (#1626) (54ce2fa)
  • user-management: Add verifyAccessToken (#1733) (893c926)

Bug Fixes

  • Align enum and nullable types with the API spec (#1735) (c7687a4)
  • directory-sync: Add name to DirectoryUser (#1731) (5fc7c80)
  • drop before cursor on follow-up autoPagination requests (#1720) (14d5e40)
  • feature-flags: Keep polling when no error listener is attached (#1728) (6b826e3)
  • Prevent throwing an error when succesfully whitelisting someone (#1716) (8e4c639)
  • reject malformed and future webhook timestamps (#1723) (ad8bff2)
  • sso: Make nullable Profile fields nullable instead of optional (#1737) (6d4bf79)
  • user-management: Expose nested user on OrganizationMembership (#1732) (b30f7ba)
  • vault: Remove stale duplicate object interfaces (#1738) (0d3c887)
Changelog

Sourced from @​workos-inc/node's changelog.

12.0.0 (2026-10-23)

⚠ BREAKING CHANGES

  • sso: Make nullable Profile fields nullable instead of optional (#1737)
  • events: Add the 28 event types the spec defines but the SDK lacked (#1739)
  • Deserialize API timestamps as Date objects (#1736)
  • vault: Remove stale duplicate object interfaces (#1738)
  • Align enum and nullable types with the API spec (#1735)
  • events: Add UnknownEvent to the Event union (#1734)
  • admin-portal: Rename adminEmails to itContactEmails (#1730)
  • Port DirectorySync to oagen (#1626)
  • feature-flags: Evaluate ordered targeting rules (#1717)

Features

  • Add widgets:pipes:manage to WidgetScope type (#1609) (aa38974)
  • admin-portal: Rename adminEmails to itContactEmails (#1730) (e988e79)
  • Deserialize API timestamps as Date objects (#1736) (5457d95)
  • events: Add the 28 event types the spec defines but the SDK lacked (#1739) (b9ffc7e)
  • events: Add UnknownEvent to the Event union (#1734) (a6b9c3d)
  • events: Type agent blueprint, instance and registration events (#1729) (77590af)
  • feature-flags: Evaluate ordered targeting rules (#1717) (1b305bd)
  • Port DirectorySync to oagen (#1626) (54ce2fa)
  • user-management: Add verifyAccessToken (#1733) (893c926)

Bug Fixes

  • Align enum and nullable types with the API spec (#1735) (c7687a4)
  • directory-sync: Add name to DirectoryUser (#1731) (5fc7c80)
  • drop before cursor on follow-up autoPagination requests (#1720) (14d5e40)
  • feature-flags: Keep polling when no error listener is attached (#1728) (6b826e3)
  • Prevent throwing an error when succesfully whitelisting someone (#1716) (8e4c639)
  • reject malformed and future webhook timestamps (#1723) (ad8bff2)
  • sso: Make nullable Profile fields nullable instead of optional (#1737) (6d4bf79)
  • user-management: Expose nested user on OrganizationMembership (#1732) (b30f7ba)
  • vault: Remove stale duplicate object interfaces (#1738) (0d3c887)
Commits
  • 980b401 chore(main): release 12.0.0 (#1722)
  • 6d4bf79 fix(sso)!: Make nullable Profile fields nullable instead of optional (#1737)
  • aa38974 feat: Add widgets:pipes:manage to WidgetScope type (#1609)
  • b9ffc7e feat(events)!: Add the 28 event types the spec defines but the SDK lacked (#1...
  • 5457d95 feat!: Deserialize API timestamps as Date objects (#1736)
  • 0d3c887 fix(vault)!: Remove stale duplicate object interfaces (#1738)
  • c7687a4 fix!: Align enum and nullable types with the API spec (#1735)
  • 893c926 feat(user-management): Add verifyAccessToken (#1733)
  • b30f7ba fix(user-management): Expose nested user on OrganizationMembership (#1732)
  • a6b9c3d feat(events)!: Add UnknownEvent to the Event union (#1734)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates the dev-dependencies group: @types/bun, turbo, typescript (6.0.3 → 7.0.2), autumn-js, and @workos-inc/node (11.0.0 → 12.0.0). The bun.lock and all package manifests are updated accordingly, and the workos and autumn emulator package versions are bumped.

Migration

  • typescript 7.0 is the new native (Go-based) compiler, so verify tsc --build and editor integrations still work across all packages.
  • @workos-inc/node 12.0.0 contains breaking changes: API timestamps now deserialize as Date objects, several Profile fields changed from optional to nullable, adminEmails was renamed to itContactEmails, and DirectorySync was regenerated.
  • autumn-js 1.5.8 → 1.5.18 pulls in zod 4.6.7 transitively, which deduplicates the lockfile entry previously resolved via jira.js.

Written for commit eebec8c. Summary will update on new commits.

Turn on auto-fix

…ith 5 updates

Bumps the dev-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.3` | `1.4.4` |
| [turbo](https://github.com/vercel/turborepo) | `2.11.9` | `2.11.10` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [autumn-js](https://github.com/useautumn/autumn) | `1.5.8` | `1.5.18` |
| [@workos-inc/node](https://github.com/workos/workos-node) | `11.0.0` | `12.0.0` |



Updates `@types/bun` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `turbo` from 2.11.9 to 2.11.10
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.11.9...v2.11.10)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `autumn-js` from 1.5.8 to 1.5.18
- [Commits](https://github.com/useautumn/autumn/commits)

Updates `@workos-inc/node` from 11.0.0 to 12.0.0
- [Release notes](https://github.com/workos/workos-node/releases)
- [Changelog](https://github.com/workos/workos-node/blob/main/CHANGELOG.md)
- [Commits](workos/workos-node@v11.0.0...v12.0.0)

---
updated-dependencies:
- dependency-name: "@types/bun"
  dependency-version: 1.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.11.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: autumn-js
  dependency-version: 1.5.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@workos-inc/node"
  dependency-version: 12.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@greptile-apps

greptile-apps Bot commented Nov 2, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.4.3 ⏵ 1.4.41001004893100
Updatedautumn-js@​1.5.8 ⏵ 1.5.1810010082 -198100
Updatedturbo@​2.11.9 ⏵ 2.11.101001008597100
Updatedtypescript@​6.0.3 ⏵ 7.0.29910089 -1100100 +10
Updated@​workos-inc/​node@​11.0.0 ⏵ 12.0.099 +110010098 -1100

View full report

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 9, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/dev-dependencies-4a0e8a85f2 branch November 9, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants