Bump the production-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #739 · changesets/action

dependabot · 2026-10-01T05:53:32Z

Bumps the production-dependencies group with 5 updates in the / directory:

Package	From	To
@changesets/get-release-plan	`5.0.0`	`5.0.2`
@changesets/git	`4.0.0`	`4.0.1`
@changesets/read	`1.0.0`	`1.0.1`
@octokit/core	`7.0.7`	`7.0.8`
tinyexec	`1.3.0`	`1.3.1`

Updates @changesets/get-release-plan from 5.0.0 to 5.0.2

Release notes

Sourced from @changesets/get-release-plan's releases.

@changesets/get-release-plan@5.0.2

Patch Changes

Updated dependencies [e522996]:

@changesets/config@4.0.1

@changesets/get-release-plan@5.0.1

Patch Changes

Updated dependencies []:

@changesets/read@1.0.1

Changelog

Sourced from @changesets/get-release-plan's changelog.

5.0.2

Patch Changes

Updated dependencies [e522996]:

@changesets/config@4.0.1

5.0.1

Patch Changes

Updated dependencies []:

@changesets/read@1.0.1

Commits

c9269c0 Version Packages (#2291)
d7e4a2d Version Packages (#2266)
See full diff in compare view

Updates @changesets/git from 4.0.0 to 4.0.1

Release notes

Sourced from @changesets/git's releases.

@changesets/git@4.0.1

Patch Changes

#2277 059f70a Thanks @trueberryless! - Fix commit mismatch on similar changeset files.

Changelog

Sourced from @changesets/git's changelog.

4.0.1

Patch Changes

#2277 059f70a Thanks @trueberryless! - Fix commit mismatch on similar changeset files.

Commits

d7e4a2d Version Packages (#2266)
059f70a fix(git): wrong changeset file commit (#2277)
See full diff in compare view

Updates @changesets/read from 1.0.0 to 1.0.1

Release notes

Sourced from @changesets/read's releases.

@changesets/read@1.0.1

Patch Changes

Updated dependencies [059f70a]:

@changesets/git@4.0.1

Changelog

Sourced from @changesets/read's changelog.

1.0.1

Patch Changes

Updated dependencies [059f70a]:

@changesets/git@4.0.1

Commits

d7e4a2d Version Packages (#2266)
See full diff in compare view

Updates @octokit/core from 7.0.7 to 7.0.8

Release notes

Sourced from @octokit/core's releases.

v7.0.8

7.0.8 (2026-08-30)

Bug Fixes

deps: update dependency @octokit/types to v18 (#800) (9729779)

Commits

9729779 fix(deps): update dependency @octokit/types to v18 (#800)
d6abb6e ci(action): update actions/setup-node action to v7 (#788)
See full diff in compare view

Updates tinyexec from 1.3.0 to 1.3.1

Release notes

Sourced from tinyexec's releases.

1.3.1

What's Changed

chore(deps-dev): bump the development-dependencies group across 1 directory with 4 updates by @dependabot[bot] in tinylibs/tinyexec#163

chore(deps-dev): bump the development-dependencies group with 2 updates by @dependabot[bot] in tinylibs/tinyexec#165

fix: resolve node_modules/.bin from nodeOptions.cwd instead of current process cwd by @iiroj in tinylibs/tinyexec#166

chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in tinylibs/tinyexec#167

chore(deps-dev): bump the development-dependencies group with 3 updates by @dependabot[bot] in tinylibs/tinyexec#171

Full Changelog: tinylibs/tinyexec@1.3.0...1.3.1

Commits

57073a3 chore(deps-dev): bump the development-dependencies group with 3 updates (#171)
0d3152e chore(deps-dev): bump the development-dependencies group with 4 updates (#167)
98a84af fix: resolve node_modules/.bin from nodeOptions.cwd instead of current pr...
e7ebd7f chore(deps-dev): bump the development-dependencies group with 2 updates (#165)
2f8b005 chore(deps-dev): bump the development-dependencies group across 1 directory w...
See full diff in compare view

changeset-bot · 2026-10-01T05:53:37Z

⚠️ No Changeset found

Latest commit: f018763

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-10-01T05:53:49Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@changesets/get-release-plan@5.0.0 ⏵ 5.0.2			⁺¹	^-2
	@octokit/core@7.0.7 ⏵ 7.0.8	⁺¹

View full report

Bumps the production-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@changesets/get-release-plan](https://github.com/changesets/changesets/tree/HEAD/packages/get-release-plan) | `5.0.0` | `5.0.2` | | [@changesets/git](https://github.com/changesets/changesets/tree/HEAD/packages/git) | `4.0.0` | `4.0.1` | | [@changesets/read](https://github.com/changesets/changesets/tree/HEAD/packages/read) | `1.0.0` | `1.0.1` | | [@octokit/core](https://github.com/octokit/core.js) | `7.0.7` | `7.0.8` | | [tinyexec](https://github.com/tinylibs/tinyexec) | `1.3.0` | `1.3.1` | Updates `@changesets/get-release-plan` from 5.0.0 to 5.0.2 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/get-release-plan/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/[email protected]/packages/get-release-plan) Updates `@changesets/git` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/git/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/[email protected]/packages/git) Updates `@changesets/read` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/packages/read/CHANGELOG.md) - [Commits](https://github.com/changesets/changesets/commits/@changesets/[email protected]/packages/read) Updates `@octokit/core` from 7.0.7 to 7.0.8 - [Release notes](https://github.com/octokit/core.js/releases) - [Commits](octokit/core.js@v7.0.7...v7.0.8) Updates `tinyexec` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/tinylibs/tinyexec/releases) - [Commits](tinylibs/tinyexec@1.3.0...1.3.1) --- updated-dependencies: - dependency-name: "@changesets/get-release-plan" dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@changesets/git" dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@changesets/read" dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@octokit/core" dependency-version: 7.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: tinyexec dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

dependabot Bot changed the title ~~Bump the production-dependencies group with 5 updates~~ Bump the production-dependencies group across 1 directory with 5 updates Oct 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-e2898612d1 branch from f7b90a6 to f018763 Compare October 1, 2026 09:22

bluwy approved these changes Oct 1, 2026

View reviewed changes

bluwy added this pull request to the merge queue Oct 1, 2026

Merged via the queue into main with commit f019168 Oct 1, 2026
8 checks passed

bluwy deleted the dependabot/npm_and_yarn/production-dependencies-e2898612d1 branch October 1, 2026 09:36

Navigation Menu

Uh oh!

Bump the production-dependencies group across 1 directory with 5 updates - #739

Bump the production-dependencies group across 1 directory with 5 updates#739
bluwy merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-e2898612d1

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​changesets/get-release-plan@​5.0.2

Patch Changes

@​changesets/get-release-plan@​5.0.1

Patch Changes

5.0.2

Patch Changes

5.0.1

Patch Changes

@​changesets/git@​4.0.1

Patch Changes

4.0.1

Patch Changes

@​changesets/read@​1.0.1

Patch Changes

1.0.1

Patch Changes

v7.0.8

7.0.8 (2026-08-30)

Bug Fixes

1.3.1

What's Changed

Uh oh!

changeset-bot Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

`@changesets/get-release-plan@5`.0.2

`@changesets/get-release-plan@5`.0.1

`@changesets/git@4`.0.1

`@changesets/read@1`.0.1

changeset-bot Bot commented Oct 1, 2026 •

edited

Loading

socket-security Bot commented Oct 1, 2026 •

edited

Loading