Skip to content

Conversation

@ncalteen
Copy link
Contributor

@ncalteen ncalteen commented Dec 4, 2025

No description provided.

dependabot bot and others added 8 commits November 14, 2025 23:33
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the npm-development group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.9.2` | `24.10.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.2` | `8.48.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.2` | `8.48.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.0` | `9.39.1` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.0.1` | `29.2.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.3` |
| [rollup](https://github.com/rollup/rollup) | `4.52.5` | `4.53.3` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.5` | `29.4.6` |


Updates `@types/node` from 24.9.2 to 24.10.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@typescript-eslint/eslint-plugin` from 8.46.2 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.46.2 to 8.48.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/parser)

Updates `eslint` from 9.39.0 to 9.39.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.0...v9.39.1)

Updates `eslint-plugin-jest` from 29.0.1 to 29.2.1
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v29.0.1...v29.2.1)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `prettier` from 3.6.2 to 3.7.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.3)

Updates `rollup` from 4.52.5 to 4.53.3
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.52.5...v4.53.3)

Updates `ts-jest` from 29.4.5 to 29.4.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.5...v29.4.6)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.10.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: eslint
  dependency-version: 9.39.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: eslint-plugin-jest
  dependency-version: 29.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
- dependency-name: prettier
  dependency-version: 3.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: rollup
  dependency-version: 4.53.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-development
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-development
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) from 1.4.1 to 2.0.0.
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.0/packages/compat)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@ncalteen ncalteen self-assigned this Dec 4, 2025
@ncalteen ncalteen requested a review from a team as a code owner December 4, 2025 19:00
Copilot AI review requested due to automatic review settings December 4, 2025 19:00
Copilot finished reviewing on behalf of ncalteen December 4, 2025 19:01
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request attempts to upgrade the project to Node.js 24, including a major version bump (3.0.0 → 4.0.0) and updates to various dependencies and GitHub Actions workflows. However, Node.js 24 does not exist as of January 2025, making this PR premature and non-functional.

Key issues identified:

  • Node.js 24 has not been released yet (expected in 2026)
  • The action runtime node24 is not available in GitHub Actions
  • The specified version 24.11.1 in .node-version does not exist

Changes made:

  • Updated package version from 3.0.0 to 4.0.0
  • Updated multiple development dependencies to their latest versions
  • Changed action runtime from node20 to node24
  • Updated .node-version from 22.9.0 to 24.11.1
  • Updated GitHub workflows to use actions/checkout@v6
  • Regenerated dist/index.js with bundled dependencies

Reviewed changes

Copilot reviewed 8 out of 10 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.node-version Updated to non-existent Node.js version 24.11.1
action.yml Changed runtime to non-existent node24
package.json Bumped major version to 4.0.0 and updated devDependencies
package-lock.json Updated lockfile with new dependency versions
dist/index.js Regenerated bundled distribution file
.github/workflows/*.yml Updated to use actions/checkout@v6

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link

github-actions bot commented Dec 4, 2025

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.09s
✅ JSON jsonlint 5 0 0 0.43s
✅ JSON npm-package-json-lint yes no no 0.94s
✅ JSON prettier 5 0 0 1.15s
✅ JSON v8r 5 0 0 7.68s
✅ MARKDOWN markdownlint 1 0 0 1.39s
✅ REPOSITORY checkov yes no no 24.7s
✅ REPOSITORY gitleaks yes no no 1.34s
✅ REPOSITORY git_diff yes no no 0.07s
❌ REPOSITORY grype yes 14 no 47.64s
✅ REPOSITORY secretlint yes no no 1.15s
✅ REPOSITORY syft yes no no 9.67s
✅ REPOSITORY trivy-sbom yes no no 5.49s
✅ REPOSITORY trufflehog yes no no 32.13s
✅ TYPESCRIPT prettier 9 0 0 1.1s
✅ YAML prettier 13 0 0 0.84s
✅ YAML v8r 13 0 0 8.7s
✅ YAML yamllint 13 0 0 0.69s

Detailed Issues

❌ REPOSITORY / grype - 14 errors
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) from=syft
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
error purl scheme is not "pkg": ""
NAME    INSTALLED  FIXED IN          TYPE       VULNERABILITY   SEVERITY  EPSS          RISK   
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-61723  High      < 0.1% (6th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-61725  High      < 0.1% (6th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-58185  Medium    < 0.1% (8th)  < 0.1  
stdlib  go1.23.10  *1.23.12, 1.24.6  go-module  CVE-2025-47907  High      < 0.1% (4th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-58186  Medium    < 0.1% (6th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-61724  Medium    < 0.1% (6th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-47912  Medium    < 0.1% (5th)  < 0.1  
stdlib  go1.23.10  *1.23.12, 1.24.6  go-module  CVE-2025-47906  Medium    < 0.1% (4th)  < 0.1  
stdlib  go1.23.10  *1.24.9, 1.25.3   go-module  CVE-2025-58187  High      < 0.1% (1st)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-58188  High      < 0.1% (1st)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-58189  Medium    < 0.1% (4th)  < 0.1  
stdlib  go1.23.10  *1.24.11, 1.25.5  go-module  CVE-2025-61729  High      < 0.1% (1st)  < 0.1  
stdlib  go1.23.10  *1.23.11, 1.24.5  go-module  CVE-2025-4674   High      < 0.1% (0th)  < 0.1  
stdlib  go1.23.10  *1.24.8, 1.25.2   go-module  CVE-2025-58183  Medium    < 0.1% (1st)  < 0.1
[0047] ERROR discovered vulnerabilities at or above the severity threshold

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,TYPESCRIPT_PRETTIER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

@ncalteen ncalteen merged commit 9210b14 into main Dec 4, 2025
11 of 12 checks passed
@ncalteen ncalteen deleted the ncalteen/node24 branch December 4, 2025 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants