Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 21, 2025

Bumps @octokit/plugin-paginate-rest from 2.21.3 to 9.2.2.

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v9.2.2

9.2.2 (2025-02-15)

Bug Fixes

v9.2.1

9.2.1 (2024-03-01)

Bug Fixes

  • pkg: pin @octokit/core peerDependency to v5 (#599) (5b84386)

v9.2.0

9.2.0 (2024-02-22)

Features

  • new /orgs/{org}/organization-roles/{role_id}/teams and /orgs/{org}/organization-roles/{role_id}/users endpoints (#594) (75aeaaf)

v9.1.5

9.1.5 (2023-12-04)

Bug Fixes

v9.1.4

9.1.4 (2023-11-12)

Bug Fixes

v9.1.3

9.1.3 (2023-11-09)

Bug Fixes

v9.1.2

9.1.2 (2023-10-26)

... (truncated)

Commits
  • e1e4489 fix: ReDos regex vulnerability, reported by @​DayShift (#660)
  • 5b84386 fix(pkg): pin @octokit/core peerDependency to v5 (#599)
  • fa01f94 ci(action): update actions/add-to-project action to v0.6.0 (#598)
  • 75aeaaf feat: new /orgs/{org}/organization-roles/{role_id}/teams and `/orgs/{org}/o...
  • 54d6bcf chore(deps): update dependency prettier to v3.2.5
  • 1bfa2f8 chore(deps): update dependency npm-run-all2 to v6
  • eb4a8fe chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0
  • 11ef779 chore(deps): update dependency esbuild to ^0.20.0
  • 2b6cc98 ci(action): update peter-evans/create-or-update-comment action to v4
  • d7c9de5 chore(deps): update dependency prettier to v3.2.4 (#588)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

  • Chores

    • Updated an internal dependency to maintain compatibility and reliability.
  • Notes

    • No user-facing changes or new features in this release.

✏️ Tip: You can customize this high-level summary in your review settings.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 21, 2025
@vercel
Copy link

vercel bot commented Nov 21, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments
Project Deployment Preview Comments Updated (UTC)
pipedream-docs Ignored Ignored Dec 8, 2025 4:12pm
pipedream-docs-redirect-do-not-edit Ignored Ignored Dec 8, 2025 4:12pm

@adolfo-pd adolfo-pd added the User submitted Submitted by a user label Nov 21, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 21, 2025

Walkthrough

A dependency version for @octokit/plugin-paginate-rest was updated from ^2.17.0 to ^9.2.2 in the components/github package.json file. No code modifications or public entity declarations were altered.

Changes

Cohort / File(s) Summary
Dependency Update
components/github/package.json
Updated @octokit/plugin-paginate-rest from ^2.17.0 to ^9.2.2

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

  • Note: While the diff itself is straightforward, verify that the major version bump (2.x → 9.x) does not introduce breaking changes affecting the components/github module's integration points or API usage.

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description is auto-generated by Dependabot and lacks the required 'WHY' section from the repository template, providing only technical details without rationale. Add a 'WHY' section explaining the business or technical rationale for upgrading this dependency, such as security fixes, performance improvements, or compatibility requirements.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title directly and accurately describes the main change: bumping a specific dependency from one version to another.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/octokit/plugin-paginate-rest-9.2.2

Comment @coderabbitai help to get the list of available commands and usage tips.

@pipedream-component-development
Copy link
Collaborator

Thank you so much for submitting this! We've added it to our backlog to review, and our team has been notified.

@pipedream-component-development
Copy link
Collaborator

Thanks for submitting this PR! When we review PRs, we follow the Pipedream component guidelines. If you're not familiar, here's a quick checklist:

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/octokit/plugin-paginate-rest-9.2.2 branch 2 times, most recently from aa232bb to 534a5bf Compare December 5, 2025 14:51
Bumps [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) from 2.21.3 to 9.2.2.
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v2.21.3...v9.2.2)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 9.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/octokit/plugin-paginate-rest-9.2.2 branch from 534a5bf to 48893b2 Compare December 8, 2025 16:12
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between aa232bb and 48893b2.

📒 Files selected for processing (1)
  • components/github/package.json (1 hunks)
🧰 Additional context used
🧠 Learnings (1)
📚 Learning: 2024-12-12T19:23:09.039Z
Learnt from: jcortes
Repo: PipedreamHQ/pipedream PR: 14935
File: components/sailpoint/package.json:15-18
Timestamp: 2024-12-12T19:23:09.039Z
Learning: When developing Pipedream components, do not add built-in Node.js modules like `fs` to `package.json` dependencies, as they are native modules provided by the Node.js runtime.

Applied to files:

  • components/github/package.json
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (4)
  • GitHub Check: Verify TypeScript components
  • GitHub Check: Publish TypeScript components
  • GitHub Check: pnpm publish
  • GitHub Check: Lint Code Base

Comment on lines 13 to +14
"@octokit/core": "^4.2.4",
"@octokit/plugin-paginate-rest": "^2.17.0",
"@octokit/plugin-paginate-rest": "^9.2.2",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash

# Check the actual package.json file first
echo "=== Current package.json dependencies ==="
cat components/github/package.json | grep -A 2 "@octokit"

echo ""
echo "=== Fetching peerDependencies for @octokit/plugin-paginate-rest v9.2.2 ==="
npm view "@octokit/plugin-paginate-rest@9.2.2" peerDependencies --json 2>/dev/null || echo "npm view failed, trying alternative method"

echo ""
echo "=== Package info for @octokit/plugin-paginate-rest v9.2.2 ==="
npm view "@octokit/plugin-paginate-rest@9.2.2" --json 2>/dev/null | jq '.peerDependencies // .peerDeps // "No peerDependencies field"'

Repository: PipedreamHQ/pipedream

Length of output: 466


Update @octokit/core to v5 to resolve peer dependency conflict.

@octokit/plugin-paginate-rest v9.2.2 has a peer dependency requirement of @octokit/core v5, but package.json currently specifies @octokit/core ^4.2.4. This version mismatch will cause peer dependency conflicts during installation. Update line 13 to "@octokit/core": "^5.0.0" or later to satisfy the peer dependency constraint.

🤖 Prompt for AI Agents
In components/github/package.json around lines 13 to 14, the @octokit/core
dependency is pinned to ^4.2.4 which conflicts with
@octokit/plugin-paginate-rest v9.2.2's peer requirement of @octokit/core v5;
update the @octokit/core entry to a v5-compatible range such as "^5.0.0" (or
later) in package.json and run npm/yarn install to verify the peer dependency
conflict is resolved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code User submitted Submitted by a user

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants