Skip to content

build: Bump the external-types group across 1 directory with 2 updates - #51

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/external-types-598a2ff817
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/external-types-598a2ff817

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •

Copy link
Copy Markdown

Bumps the external-types group with 2 updates in the / directory: @types/dotenv-flow and @types/firefox-webext-browser.

Updates @types/dotenv-flow from 3.3.3 to 4.1.0

Commits

Updates @types/firefox-webext-browser from 120.0.5 to 143.0.1

Commits

@dependabot
dependabot Bot requested a review from NeiRo21 as a code owner November 11, 2026 16:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 11, 2026
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@types/dotenv-flow 4.1.0 UnknownUnknown
npm/@types/firefox-webext-browser 143.0.1 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 9Found 28/29 approved changesets -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
npm/@types/firefox-webext-browser ^143.0.1 UnknownUnknown

Scanned Files

  • package-lock.json
  • packages/webext/package.json

@dependabot dependabot Bot changed the title Bump the external-types group with 2 updates build: Bump the external-types group across 1 directory with 2 updates Nov 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/external-types-598a2ff817 branch from 9cce883 to 7c51140 Compare November 11, 2026 16:27
Bumps the external-types group with 2 updates in the / directory: [@types/dotenv-flow](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dotenv-flow) and [@types/firefox-webext-browser](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/firefox-webext-browser).


Updates `@types/dotenv-flow` from 3.3.3 to 4.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dotenv-flow)

Updates `@types/firefox-webext-browser` from 120.0.5 to 143.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/firefox-webext-browser)

---
updated-dependencies:
- dependency-name: "@types/dotenv-flow"
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: external-types
- dependency-name: "@types/firefox-webext-browser"
  dependency-version: 143.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: external-types
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/external-types-598a2ff817 branch from 7c51140 to d859471 Compare November 11, 2026 16:35

@NeiRo21 NeiRo21 left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@types/firefox-webext-browser version shouldn't be bumped, as older versions need to be supported.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant