Skip to content

chore(monorepo): update auto-merge non-major dependencies#6

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies
Open

chore(monorepo): update auto-merge non-major dependencies#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jun 29, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@storm-software/config (source) ^1.138.10^1.138.46 age confidence pnpm.catalog.default patch
@storm-software/config-tools (source) ^1.190.73^1.190.109 age confidence pnpm.catalog.default patch
@storm-software/cspell (source) ^0.46.141^0.46.177 age confidence pnpm.catalog.default patch
@storm-software/eslint (source) ^0.170.106^0.170.143 age confidence pnpm.catalog.default patch
@storm-software/git-tools (source) ^2.131.80^2.131.117 age confidence pnpm.catalog.default patch
@storm-software/linting-tools (source) ^1.134.3^1.134.39 age confidence pnpm.catalog.default patch
@storm-software/markdownlint (source) ^0.30.229^0.30.265 age confidence pnpm.catalog.default patch
@storm-software/pnpm-tools (source) ^0.7.84^0.7.120 age confidence pnpm.catalog.default patch
@storm-software/prettier (source) ^0.59.126^0.59.162 age confidence pnpm.catalog.default patch
@storm-software/tsconfig (source) ^0.48.140^0.48.176 age confidence pnpm.catalog.default patch
actions/checkout v5.0.1v5.1.0 age confidence action minor
actions/checkout v4.3.1v4.4.0 age confidence action minor
actions/checkout v3.6.0v3.7.0 age confidence action minor
cachix/install-nix-action v31.10.6v31.11.0 age confidence action minor
eslint (source) ^10.5.0^10.8.0 age confidence pnpm.catalog.default minor
github/codeql-action v3.36.3v3.37.3 age confidence action minor
node (source) 26.3.026.5.0 age confidence minor
node (source) >=26.3.0>=26.5.0 age confidence engines minor
pnpm (source) 11.1.211.17.0 age confidence packageManager minor
pnpm (source) >=11.1.2>=11.17.0 age confidence engines minor
prettier (source) ^3.8.4^3.9.6 age confidence pnpm.catalog.default minor

Release Notes

storm-software/storm-ops (@​storm-software/config)

v1.138.46

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)
Updated Dependencies
  • Updated testing-tools to v1.119.262

v1.138.45

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)
Updated Dependencies
  • Updated testing-tools to v1.119.261

v1.138.44

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)
Updated Dependencies
  • Updated testing-tools to v1.119.260

v1.138.43

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated testing-tools to v1.119.259

v1.138.42

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated testing-tools to v1.119.258

v1.138.41

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)
Updated Dependencies
  • Updated testing-tools to v1.119.257

v1.138.38

Compare Source

Miscellaneous
  • git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)
Updated Dependencies
  • Updated testing-tools to v1.119.254

v1.138.36

Compare Source

Miscellaneous
  • bun-tools: Display full error details during update (f1c4902a7)
Updated Dependencies
  • Updated testing-tools to v1.119.252

v1.138.35

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.251

v1.138.29

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfiles (cf18a1819)
  • workspace-tools: Rename prod profile to release for consistency (7c676ed98)
Updated Dependencies
  • Updated testing-tools to v1.119.245

v1.138.28

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (07018210f)
Updated Dependencies
  • Updated testing-tools to v1.119.244

v1.138.27

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (e3ad71111)
Updated Dependencies
  • Updated testing-tools to v1.119.243

v1.138.26

Compare Source

Bug Fixes
  • monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)
Updated Dependencies
  • Updated testing-tools to v1.119.242

v1.138.23

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (8cfa3011d)
Updated Dependencies
  • Updated testing-tools to v1.119.239

v1.138.22

Compare Source

Miscellaneous
  • monorepo: Disable treefmt to prevent build issues (0d2e21f3f)
Updated Dependencies
  • Updated testing-tools to v1.119.238

v1.138.21

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.237

v1.138.20

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (94184a932)
  • monorepo: Update workspace packages' dependencies (5580e18dc)
Updated Dependencies
  • Updated testing-tools to v1.119.236

v1.138.19

Compare Source

Miscellaneous
  • monorepo: Update repository packages' dependencies (6f81fb5b5)
Updated Dependencies
  • Updated testing-tools to v1.119.235

v1.138.18

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue applying the cargo project name parameter (f927214be)
Updated Dependencies
  • Updated testing-tools to v1.119.234

v1.138.17

Compare Source

Miscellaneous
  • monorepo: Upgrade workspace packages' dependencies (fcc009e9d)
Updated Dependencies
  • Updated testing-tools to v1.119.233

v1.138.16

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.232

v1.138.15

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (5b4faf445)
Features
  • npm-tools: Updated getVersion function to allow retries and timeout options (c1ebc0184)
Updated Dependencies
  • Updated testing-tools to v1.119.231

v1.138.14

Compare Source

Bug Fixes
  • pnpm-tools: Resolve issue with replace statement when formatting semver (f9e233720)
Updated Dependencies
  • Updated testing-tools to v1.119.230

v1.138.13

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (ab5da025e)
Updated Dependencies
  • Updated testing-tools to v1.119.229

v1.138.12

Compare Source

Updated Dependencies
  • Updated testing-tools to v1.119.228

v1.138.11

Compare Source

Miscellaneous
  • monorepo: Regenerate workspace packages' README.md files (1090c1b70)
Updated Dependencies
  • Updated testing-tools to v1.119.227
storm-software/storm-ops (@​storm-software/config-tools)

v1.190.109

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)
Updated Dependencies
  • Updated config to v1.138.46
  • Updated testing-tools to v1.119.262

v1.190.108

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)
Continuous Integration
  • monorepo: Update SHA hashes for workflow versions (76f60f359)
Updated Dependencies
  • Updated config to v1.138.45
  • Updated testing-tools to v1.119.261

v1.190.107

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)
Updated Dependencies
  • Updated config to v1.138.44
  • Updated testing-tools to v1.119.260

v1.190.106

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.43
  • Updated testing-tools to v1.119.259

v1.190.105

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.42
  • Updated testing-tools to v1.119.258

v1.190.104

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)
Updated Dependencies
  • Updated config to v1.138.41
  • Updated testing-tools to v1.119.257

v1.190.101

Compare Source

Miscellaneous
  • git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)
Updated Dependencies
  • Updated config to v1.138.38
  • Updated testing-tools to v1.119.254

v1.190.99

Compare Source

Miscellaneous
  • devenv-modules: Update devenv modules inputs (d71083ab0)
  • bun-tools: Display full error details during update (f1c4902a7)
Updated Dependencies
  • Updated config to v1.138.36
  • Updated testing-tools to v1.119.252

v1.190.98

Compare Source

Miscellaneous
  • monorepo: Updated release workflow to have correct permissions (42db452c2)
Updated Dependencies
  • Updated config to v1.138.35
  • Updated testing-tools to v1.119.251

v1.190.92

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfiles (cf18a1819)
  • workspace-tools: Rename prod profile to release for consistency (7c676ed98)
Updated Dependencies
  • Updated config to v1.138.29
  • Updated testing-tools to v1.119.245

v1.190.91

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (07018210f)
Updated Dependencies
  • Updated config to v1.138.28
  • Updated testing-tools to v1.119.244

v1.190.90

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (e3ad71111)
Updated Dependencies
  • Updated config to v1.138.27
  • Updated testing-tools to v1.119.243

v1.190.89

Compare Source

Bug Fixes
  • monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)
Updated Dependencies
  • Updated config to v1.138.26
  • Updated testing-tools to v1.119.242

v1.190.86

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (8cfa3011d)
Updated Dependencies
  • Updated config to v1.138.23
  • Updated testing-tools to v1.119.239

v1.190.85

Compare Source

Miscellaneous
  • monorepo: Disable treefmt to prevent build issues (0d2e21f3f)
Updated Dependencies
  • Updated config to v1.138.22
  • Updated testing-tools to v1.119.238

v1.190.84

Compare Source

Updated Dependencies
  • Updated config to v1.138.21
  • Updated testing-tools to v1.119.237

v1.190.83

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (94184a932)
  • monorepo: Update workspace packages' dependencies (5580e18dc)
Updated Dependencies
  • Updated config to v1.138.20
  • Updated testing-tools to v1.119.236

v1.190.82

Compare Source

Miscellaneous
  • monorepo: Update repository packages' dependencies (6f81fb5b5)
Bug Fixes
  • monorepo: Resolve typing issues resulting from Nx upgrade (82b59fcc9)
Updated Dependencies
  • Updated config to v1.138.19
  • Updated testing-tools to v1.119.235

v1.190.81

Compare Source

Miscellaneous
  • monorepo: Update formatting in package.json file (d46f84d43)
Bug Fixes
  • workspace-tools: Resolve issue applying the cargo project name parameter (f927214be)
Updated Dependencies
  • Updated config to v1.138.18
  • Updated testing-tools to v1.119.234

v1.190.80

Compare Source

Miscellaneous
  • monorepo: Upgrade workspace packages' dependencies (fcc009e9d)
Continuous Integration
  • monorepo: Update clean owners workflow action (2f3d525b4)
Updated Dependencies
  • Updated config to v1.138.17
  • Updated testing-tools to v1.119.233

v1.190.79

Compare Source

Updated Dependencies
  • Updated config to v1.138.16
  • Updated testing-tools to v1.119.232

v1.190.78

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (5b4faf445)
Features
  • npm-tools: Updated getVersion function to allow retries and timeout options (c1ebc0184)
Updated Dependencies
  • Updated config to v1.138.15
  • Updated testing-tools to v1.119.231

v1.190.77

Compare Source

Bug Fixes
  • pnpm-tools: Resolve issue with replace statement when formatting semver (f9e233720)
Updated Dependencies
  • Updated config to v1.138.14
  • Updated testing-tools to v1.119.230

v1.190.76

Compare Source

Miscellaneous
  • monorepo: Reformat workspace packages' package.json files (ca6f03b66)
  • monorepo: Update workspace packages' dependencies (ab5da025e)
Updated Dependencies
  • Updated config to v1.138.13
  • Updated testing-tools to v1.119.229

v1.190.75

Compare Source

Miscellaneous
  • monorepo: Lint workspace package files (952a75243)
Updated Dependencies
  • Updated config to v1.138.12
  • Updated testing-tools to v1.119.228

v1.190.74

Compare Source

Miscellaneous
  • monorepo: Regenerate workspace packages' README.md files (1090c1b70)
Updated Dependencies
  • Updated config to v1.138.11
  • Updated testing-tools to v1.119.227
storm-software/storm-ops (@​storm-software/cspell)

v0.46.177

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)

v0.46.176

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)

v0.46.175

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)

v0.46.174

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)

v0.46.173

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)

v0.46.172

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue importing pnpm-tools and bun-tools in release executor (86856d0bd)

v0.46.169

Compare Source

Miscellaneous
  • git-tools: Added nested bun and pnpm modules for lefthook (1a543f7f5)

v0.46.167

Compare Source

Miscellaneous
  • bun-tools: Display full error details during update (f1c4902a7)

v0.46.166

Compare Source

v0.46.160

Compare Source

Miscellaneous
  • monorepo: Update workspace's lockfiles (cf18a1819)
  • workspace-tools: Rename prod profile to release for consistency (7c676ed98)

v0.46.159

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (07018210f)

v0.46.158

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (e3ad71111)

v0.46.157

Compare Source

Bug Fixes
  • monorepo: Set NX_PREFER_NODE_STRIP_TYPES to false to resolve release issue (6d8d78727)

v0.46.154

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (8cfa3011d)

v0.46.153

Compare Source

Miscellaneous
  • monorepo: Disable treefmt to prevent build issues (0d2e21f3f)

v0.46.152

Compare Source

v0.46.151

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (94184a932)
  • monorepo: Update workspace packages' dependencies (5580e18dc)

v0.46.150

Compare Source

Miscellaneous
  • monorepo: Update repository packages' dependencies (6f81fb5b5)

v0.46.149

Compare Source

Bug Fixes
  • workspace-tools: Resolve issue applying the cargo project name parameter (f927214be)

v0.46.148

Compare Source

Miscellaneous
  • monorepo: Upgrade workspace packages' dependencies (fcc009e9d)

v0.46.147

Compare Source

v0.46.146

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (5b4faf445)
Features
  • npm-tools: Updated getVersion function to allow retries and timeout options (c1ebc0184)

v0.46.145

Compare Source

Bug Fixes
  • pnpm-tools: Resolve issue with replace statement when formatting semver (f9e233720)

v0.46.144

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (ab5da025e)

v0.46.143

Compare Source

v0.46.142

Compare Source

Miscellaneous
  • monorepo: Regenerate workspace packages' README.md files (1090c1b70)
storm-software/storm-ops (@​storm-software/eslint)

v0.170.143

Compare Source

Bug Fixes
  • package-constants: Resolve issue with incorrect package prefix (24eb88022)
Updated Dependencies
  • Updated config to v1.138.46
  • Updated config-tools to v1.190.109
  • Updated eslint-plugin-banner to v0.0.74
  • Updated eslint-plugin-pnpm to v0.0.72
  • Updated eslint-plugin-tsdoc to v0.0.72
  • Updated package-constants to v0.1.122
  • Updated tsdoc to v0.13.262

v0.170.142

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' dependencies (c5d409dab)
Updated Dependencies
  • Updated config to v1.138.45
  • Updated config-tools to v1.190.108
  • Updated eslint-plugin-banner to v0.0.73
  • Updated eslint-plugin-pnpm to v0.0.71
  • Updated eslint-plugin-tsdoc to v0.0.71
  • Updated package-constants to v0.1.121
  • Updated tsdoc to v0.13.261

v0.170.141

Compare Source

Miscellaneous
  • monorepo: Added back the missing bin property from package.json files (338c62167)
Updated Dependencies
  • Updated config to v1.138.44
  • Updated config-tools to v1.190.107
  • Updated eslint-plugin-banner to v0.0.72
  • Updated eslint-plugin-pnpm to v0.0.70
  • Updated eslint-plugin-tsdoc to v0.0.70
  • Updated package-constants to v0.1.120
  • Updated tsdoc to v0.13.260

v0.170.140

Compare Source

Miscellaneous
  • monorepo: Update workspace packages' README.md files (85e8622c2)
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.43
  • Updated config-tools to v1.190.106
  • Updated eslint-plugin-banner to v0.0.71
  • Updated eslint-plugin-pnpm to v0.0.69
  • Updated eslint-plugin-tsdoc to v0.0.69
  • Updated package-constants to v0.1.119
  • Updated tsdoc to v0.13.259

v0.170.139

Compare Source

Miscellaneous
  • workspace-tools: Ensure exec command is run via package manager (7e2a93628)
Updated Dependencies
  • Updated config to v1.138.42
  • Updated config-tools to v1.190.105
  • Updated eslint-plugin-banner to v0.0.70
  • Updated eslint-plugin-pnpm to v0.0.68
  • Updated eslint-plugin-tsdoc to v0.0.68
  • Updated package-constants to v0.1.118
  • Updated tsdoc to v0.13.258

v0.170.138

Compare Source

Bug Fixes
  • workspace-tools: Resolve i

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Upgrade or downgrade of project dependencies. label Jun 29, 2025
@renovate
renovate Bot requested review from a team and sullivanpj as code owners June 29, 2025 03:48
Comment thread .github/workflows/on-push-create-release.yml Fixed
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from be97271 to 15f088e Compare March 6, 2026 17:33
@renovate
renovate Bot requested a review from a team as a code owner March 6, 2026 17:33
@renovate renovate Bot changed the title chore(monorepo): update mathieudutour/github-tag-action action to v6.2 chore(monorepo): update auto-merge non-major dependencies to v6.2 Jun 5, 2026
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 15f088e to e4a6bcd Compare June 18, 2026 09:08
@renovate renovate Bot changed the title chore(monorepo): update auto-merge non-major dependencies to v6.2 chore(monorepo): update auto-merge non-major dependencies Jun 18, 2026
Comment thread .github/workflows/git-guardian.yml Fixed
Comment thread .github/workflows/release.yml Fixed
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from e4a6bcd to f8b73e7 Compare June 18, 2026 10:04
Comment thread .github/workflows/git-guardian.yml Fixed
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from f8b73e7 to f239c0b Compare June 18, 2026 11:20
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from f239c0b to a683026 Compare June 18, 2026 14:03
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from a683026 to c663eb5 Compare June 19, 2026 06:44
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from c663eb5 to 4a3b720 Compare June 21, 2026 07:15
@socket-security

socket-security Bot commented Jun 21, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @nx/workspace is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/git-tools@2.131.117npm/@storm-software/eslint@0.170.143npm/@nx/workspace@23.0.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@nx/workspace@23.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @storm-software/config-tools is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.jsonnpm/@storm-software/config-tools@1.190.109

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@storm-software/config-tools@1.190.109. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @storm-software/git-tools is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.jsonnpm/@storm-software/git-tools@2.131.117

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@storm-software/git-tools@2.131.117. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm nx is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/git-tools@2.131.117npm/@storm-software/eslint@0.170.143npm/nx@23.0.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/nx@23.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm string-width is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@storm-software/eslint@0.170.143npm/string-width@8.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/string-width@8.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 4a3b720 to 755f5af Compare June 24, 2026 03:02
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 755f5af to af6db9c Compare June 27, 2026 03:57
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from af6db9c to dfb62f5 Compare July 1, 2026 20:03
@renovate
renovate Bot temporarily deployed to production July 1, 2026 20:03 Inactive
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from dfb62f5 to 8d2d76a Compare July 2, 2026 13:39
@renovate
renovate Bot temporarily deployed to production July 2, 2026 13:40 Inactive
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 8d2d76a to 13f3a89 Compare July 3, 2026 20:25
@renovate
renovate Bot temporarily deployed to production July 3, 2026 20:25 Inactive
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 13f3a89 to 1cd0fb7 Compare July 5, 2026 00:06
@renovate
renovate Bot temporarily deployed to production July 5, 2026 00:06 Inactive
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 1cd0fb7 to 80f9972 Compare July 8, 2026 03:55
@renovate
renovate Bot temporarily deployed to production July 8, 2026 03:55 Inactive
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 80f9972 to 8431ad6 Compare July 16, 2026 08:10
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from 8431ad6 to d0a435f Compare July 18, 2026 16:17
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch from d0a435f to 51a97b1 Compare July 25, 2026 06:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Upgrade or downgrade of project dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant