build: Bump the internal-tooling group across 1 directory with 3 updates by dependabot[bot] · Pull Request #50 · NeiRo21/solid-client-authn-webext

dependabot · 2026-11-11T16:16:34Z

Bumps the internal-tooling group with 3 updates in the / directory: @inrupt/base-rollup-config, @inrupt/internal-test-env and @inrupt/jest-jsdom-polyfills.

Updates @inrupt/base-rollup-config from 4.1.5 to 4.1.6

Release notes

Sourced from @inrupt/base-rollup-config's releases.

v4.1.6

What's Changed

Dependencies updates

Full Changelog: inrupt/typescript-sdk-tools@v4.1.5...v4.1.6

Commits

d34ea1b Release v4.1.6 (#1911)
0464909 chore(deps): bump follow-redirects and nx (#1910)
1d79a84 chore(deps): bump next from 16.4.0 to 16.4.2 (#1901)
a2490fa chore(deps-dev): bump @next/eslint-plugin-next from 16.4.0 to 16.4.2 (#1905)
7b254e3 chore(deps): bump react-dom from 19.3.0 to 19.3.1 (#1902)
8654912 chore(deps): bump dotenv from 18.0.7 to 18.0.8 (#1903)
a51d581 chore(deps): bump undici from 8.11.2 to 8.12.2 (#1908)
5dc39b4 chore(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 (#1904)
b7b81d7 chore(deps): bump rollup from 4.64.6 to 4.64.7 (#1907)
0a4080b chore(deps): bump react from 19.3.0 to 19.3.1 (#1906)
Additional commits viewable in compare view

Updates @inrupt/internal-test-env from 4.1.5 to 4.1.6

Release notes

Sourced from @inrupt/internal-test-env's releases.

v4.1.6

What's Changed

Dependencies updates

Full Changelog: inrupt/typescript-sdk-tools@v4.1.5...v4.1.6

Commits

d34ea1b Release v4.1.6 (#1911)
0464909 chore(deps): bump follow-redirects and nx (#1910)
1d79a84 chore(deps): bump next from 16.4.0 to 16.4.2 (#1901)
a2490fa chore(deps-dev): bump @next/eslint-plugin-next from 16.4.0 to 16.4.2 (#1905)
7b254e3 chore(deps): bump react-dom from 19.3.0 to 19.3.1 (#1902)
8654912 chore(deps): bump dotenv from 18.0.7 to 18.0.8 (#1903)
a51d581 chore(deps): bump undici from 8.11.2 to 8.12.2 (#1908)
5dc39b4 chore(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 (#1904)
b7b81d7 chore(deps): bump rollup from 4.64.6 to 4.64.7 (#1907)
0a4080b chore(deps): bump react from 19.3.0 to 19.3.1 (#1906)
Additional commits viewable in compare view

Updates @inrupt/jest-jsdom-polyfills from 4.1.5 to 4.1.6

Release notes

Sourced from @inrupt/jest-jsdom-polyfills's releases.

v4.1.6

What's Changed

Dependencies updates

Full Changelog: inrupt/typescript-sdk-tools@v4.1.5...v4.1.6

Commits

d34ea1b Release v4.1.6 (#1911)
0464909 chore(deps): bump follow-redirects and nx (#1910)
1d79a84 chore(deps): bump next from 16.4.0 to 16.4.2 (#1901)
a2490fa chore(deps-dev): bump @next/eslint-plugin-next from 16.4.0 to 16.4.2 (#1905)
7b254e3 chore(deps): bump react-dom from 19.3.0 to 19.3.1 (#1902)
8654912 chore(deps): bump dotenv from 18.0.7 to 18.0.8 (#1903)
a51d581 chore(deps): bump undici from 8.11.2 to 8.12.2 (#1908)
5dc39b4 chore(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 (#1904)
b7b81d7 chore(deps): bump rollup from 4.64.6 to 4.64.7 (#1907)
0a4080b chore(deps): bump react from 19.3.0 to 19.3.1 (#1906)
Additional commits viewable in compare view

github-actions · 2026-11-11T16:16:49Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/@inrupt/base-rollup-config

4.1.6

Unknown

npm/@inrupt/internal-test-env

4.1.6

Unknown

npm/@inrupt/jest-jsdom-polyfills

4.1.6

Unknown

npm/@inrupt/solid-client-authn-node

5.0.3

🟢 6.7

Details

Check	Score	Reason
Security-Policy	🟢 10	security policy file detected
Code-Review	🟢 10	all changesets reviewed
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Pinned-Dependencies	🟢 5	dependency not pinned by hash detected -- score normalized to 5
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Packaging	🟢 10	packaging workflow detected
Branch-Protection	⚠️ 1	branch protection is not maximal on development and all release branches
SAST	⚠️ -1	internal error: internal error: Client.Checks.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: Although you appear to have the correct authorization credentials, the `AikidoSec` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.

npm/dotenv

18.0.9

🟢 4.8

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 4	Found 9/22 approved changesets -- score normalized to 4
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Maintained	🟢 10	30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 9	security policy file detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

package-lock.json

NeiRo21 · 2026-11-11T16:25:38Z

@dependabot rebase

NeiRo21 · 2026-11-11T16:31:17Z

@dependabot recreate

Bumps the internal-tooling group with 3 updates in the / directory: [@inrupt/base-rollup-config](https://github.com/inrupt/typescript-sdk-tools), [@inrupt/internal-test-env](https://github.com/inrupt/typescript-sdk-tools) and [@inrupt/jest-jsdom-polyfills](https://github.com/inrupt/typescript-sdk-tools). Updates `@inrupt/base-rollup-config` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/inrupt/typescript-sdk-tools/releases) - [Commits](inrupt/typescript-sdk-tools@v4.1.5...v4.1.6) Updates `@inrupt/internal-test-env` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/inrupt/typescript-sdk-tools/releases) - [Commits](inrupt/typescript-sdk-tools@v4.1.5...v4.1.6) Updates `@inrupt/jest-jsdom-polyfills` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/inrupt/typescript-sdk-tools/releases) - [Commits](inrupt/typescript-sdk-tools@v4.1.5...v4.1.6) --- updated-dependencies: - dependency-name: "@inrupt/base-rollup-config" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: internal-tooling - dependency-name: "@inrupt/internal-test-env" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: internal-tooling - dependency-name: "@inrupt/jest-jsdom-polyfills" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: internal-tooling ... Signed-off-by: dependabot[bot] <support@github.com>

NeiRo21

uuid dependency is required and mustn't be removed.

dependabot Bot requested a review from NeiRo21 as a code owner November 11, 2026 16:16

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026

NeiRo21 previously approved these changes Nov 11, 2026

View reviewed changes

dependabot Bot changed the title ~~Bump the internal-tooling group with 3 updates~~ build: Bump the internal-tooling group across 1 directory with 3 updates Nov 11, 2026

dependabot Bot dismissed NeiRo21’s stale review via e091f40 November 11, 2026 16:27

dependabot Bot force-pushed the dependabot/npm_and_yarn/internal-tooling-a73211931d branch from a456528 to e091f40 Compare November 11, 2026 16:27

dependabot Bot force-pushed the dependabot/npm_and_yarn/internal-tooling-a73211931d branch from e091f40 to 98e8817 Compare November 11, 2026 16:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/internal-tooling-a73211931d branch from 98e8817 to 351ded4 Compare November 11, 2026 16:34

NeiRo21 requested changes Nov 12, 2026

View reviewed changes

Navigation Menu

Repository navigation

build: Bump the internal-tooling group across 1 directory with 3 updates - #50

build: Bump the internal-tooling group across 1 directory with 3 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/internal-tooling-a73211931d

dependabot Bot commented on behalf of github Nov 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Nov 11, 2026 •

edited

Loading

Uh oh!

NeiRo21 commented Nov 11, 2026

Uh oh!

NeiRo21 commented Nov 11, 2026

Uh oh!

NeiRo21 left a comment

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.1.6

What's Changed

v4.1.6

What's Changed

v4.1.6

What's Changed

Uh oh!

github-actions Bot commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

NeiRo21 commented Nov 11, 2026

Uh oh!

NeiRo21 commented Nov 11, 2026

Uh oh!

NeiRo21 left a comment

Choose a reason for hiding this comment

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 11, 2026 •

edited

Loading

github-actions Bot commented Nov 11, 2026 •

edited

Loading