Skip to content

Conversation

@martincostello
Copy link
Member

  • Update lockfile.
  • Bump prettier to 3.7.4.
  • Bump yeoman-environment to 5.1.2.

- Update lockfile.
- Bump prettier to 3.7.4.
- Bump yeoman-environment to 5.1.2.
Copilot AI review requested due to automatic review settings January 1, 2026 10:34
@martincostello martincostello added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the lockfile and bumps two development dependencies to their latest patch/minor versions.

Key Changes

  • Bumps prettier from 3.7.3 to 3.7.4 (patch update)
  • Bumps yeoman-environment from 5.1.1 to 5.1.2 (patch update)
  • Updates transitive dependencies in the lockfile, including various @sigstore packages, @tufjs/models, lodash-es, and several other packages

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates prettier and yeoman-environment versions in devDependencies
package-lock.json Updates lockfile to reflect the dependency changes, including transitive dependency updates and deduplication of nested dependencies

After thoroughly reviewing this pull request, I found no issues with the changes. The PR correctly updates:

  1. Direct dependencies: Both prettier (3.7.3 → 3.7.4) and yeoman-environment (5.1.1 → 5.1.2) are properly updated in both package.json and package-lock.json
  2. Transitive dependencies: All transitive dependency updates appear to be legitimate updates from the dependency tree
  3. Dependency deduplication: The lockfile shows proper deduplication, with nested dependencies like proc-log and minimatch being moved to top-level where appropriate

All version numbers appear valid, and the changes are consistent between package.json and package-lock.json.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@martincostello martincostello merged commit 4ba93df into dev Jan 1, 2026
7 checks passed
@martincostello martincostello deleted the fix-lock-file branch January 1, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

2 participants