Skip to content

fix(lambda): bump the octokit group across 1 directory with 6 updates - #5273

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/octokit-67df97edf6
Open

fix(lambda): bump the octokit group across 1 directory with 6 updates#5273
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/octokit-67df97edf6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the octokit group with 6 updates in the /lambdas directory:

Package From To
@octokit/auth-app 8.2.0 8.3.1
@octokit/core 7.0.6 7.0.8
@octokit/plugin-retry 8.0.3 8.1.1
@octokit/plugin-throttling 11.0.3 11.0.5
@octokit/types 13.10.0 18.0.0
@octokit/request 9.2.4 10.0.16

Updates @octokit/auth-app from 8.2.0 to 8.3.1

Release notes

Sourced from @​octokit/auth-app's releases.

v8.3.1

8.3.1 (2026-09-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v18 (#761) (2bb6310)

v8.3.0

8.3.0 (2026-08-02)

Features

  • deps: allow bigint (int64) repository IDs and update dependency @​octokit/types to v17 (#759) (3df5506)
Commits
  • 2bb6310 fix(deps): update dependency @​octokit/types to v18 (#761)
  • 2327287 chore(deps): update dependency typescript to v7 (#755)
  • 3df5506 feat(deps): allow bigint (int64) repository IDs and update dependency @​octoki...
  • 9d2ec47 ci(action): update actions/checkout action to v7 (#754)
  • d149272 build(deps): lock file maintenance (#758)
  • 653732f build(deps): lock file maintenance (#753)
  • b898bcf chore(deps): update dependency esbuild to ^0.28.0 [security] (#751)
  • 9e34287 build(deps): lock file maintenance (#743)
  • fdf6833 chore(deps): update dependency prettier to v3.8.1 (#735)
  • 50cd126 chore(deps): update dependency fetch-mock to v12 (#649)
  • Additional commits viewable in compare view

Updates @octokit/core from 7.0.6 to 7.0.8

Release notes

Sourced from @​octokit/core's releases.

v7.0.8

7.0.8 (2026-08-30)

Bug Fixes

  • deps: update dependency @​octokit/types to v18 (#800) (9729779)

v7.0.7

7.0.7 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#797) (087a093)
Commits
  • 9729779 fix(deps): update dependency @​octokit/types to v18 (#800)
  • d6abb6e ci(action): update actions/setup-node action to v7 (#788)
  • 087a093 fix(deps): update dependency @​octokit/types to v17 (#797)
  • e8c8789 ci(action): update actions/create-github-app-token action to v3 (#770)
  • a648383 chore(deps): bump postcss from 8.5.15 to 8.5.23 (#790)
  • 57516b7 chore(deps-dev): bump undici from 7.24.0 to 7.28.0 (#785)
  • c1d1bef chore(deps): bump picomatch from 4.0.3 to 4.0.4 (#772)
  • c60ac22 chore(deps): bump postcss from 8.5.3 to 8.5.15 (#778)
  • 8a9fb20 chore(deps): update dependency esbuild to ^0.28.0 [security] (#782)
  • 83550e2 chore(deps-dev): bump minimatch from 9.0.5 to 9.0.9 (#766)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/core since your current version.


Updates @octokit/plugin-retry from 8.0.3 to 8.1.1

Release notes

Sourced from @​octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#685) (a323a9a)

v8.1.0

8.1.0 (2026-02-18)

Features

Commits
  • ed95dae ci(action): update actions/checkout action to v7 (#680)
  • a323a9a fix(deps): update dependency @​octokit/types to v17 (#685)
  • 944c701 ci(action): update actions/setup-node action to v7 (#682)
  • 3a4e3d0 build(deps): lock file maintenance (#684)
  • bae11ba build(deps): lock file maintenance (#679)
  • 433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
  • 03ed096 build(deps): lock file maintenance (#669)
  • 5a0d924 build(deps): lock file maintenance (#664)
  • f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
  • 4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-retry since your current version.


Updates @octokit/plugin-throttling from 11.0.3 to 11.0.5

Release notes

Sourced from @​octokit/plugin-throttling's releases.

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#860) (4859cd1)

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

  • defer Bottleneck instantiation until first request (CF Workers compat) (#850) (d711c52)
Commits
  • 54030a4 ci(action): update actions/setup-node action to v7 (#857)
  • 4859cd1 fix(deps): update dependency @​octokit/types to v17 (#860)
  • d711c52 fix: defer Bottleneck instantiation until first request (CF Workers compat) (...
  • 003e302 chore(deps): update dependency typescript to v7 (#856)
  • d218863 build(deps): lock file maintenance (#859)
  • 0c6f81f build(deps): lock file maintenance (#853)
  • e064466 chore(deps): update dependency esbuild to ^0.28.0 [security] (#852)
  • cb71e45 build(deps): lock file maintenance (#841)
  • 1a64804 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#835)
  • 07c8297 build(deps): lock file maintenance (#833)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-throttling since your current version.


Updates @octokit/types from 13.10.0 to 18.0.0

Release notes

Sourced from @​octokit/types's releases.

v18.0.0

18.0.0 (2026-08-29)

Features

  • update endpoints with major additions as of 2026-08-24 (#723) (c4b93f2)

BREAKING CHANGES

  • remove deprecated endpoints

v17.0.0

17.0.0 (2026-08-01)

Features

  • drop projects-classic endpoints, add GitHub API endpoints: cache limits (retention & storage) for repos/orgs/enterprises, billing budgets & usage, artifacts deployment metadata, and projectsV2 drafts & fields (#713) (0296144)

BREAKING CHANGES

  • Removed /orgs/{org}/projects
  • Removed /orgs/{org}/settings/billing/actions
  • Removed /orgs/{org}/settings/billing/packages
  • Removed /orgs/{org}/settings/billing/shared-storage
  • Removed /orgs/{org}/teams/{team_slug}/projects
  • Removed /orgs/{org}/teams/{team_slug}/projects/{project_id}
  • Removed /projects/columns/{column_id}
  • Removed /projects/columns/{column_id}/moves
  • Removed /projects/{project_id}
  • Removed /projects/{project_id}/collaborators
  • Removed /projects/{project_id}/collaborators/{username}
  • Removed /projects/{project_id}/collaborators/{username}/permission
  • Removed /repos/{owner}/{repo}/projects
  • Removed /teams/{team_id}/projects
  • Removed /teams/{team_id}/projects/{project_id}
  • Removed /user/projects
  • Removed /users/{username}/projects
  • Removed /users/{username}/settings/billing/actions
  • Removed /users/{username}/settings/billing/packages
  • Removed /users/{username}/settings/billing/shared-storage

v16.0.0

16.0.0 (2025-10-30)

Features

... (truncated)

Commits
  • c4b93f2 feat: update endpoints with major additions as of 2026-08-24 (#723)
  • 4d46114 chore(deps): Temporarily disable docs generation/publish in release workflow...
  • dd020c1 build(deps-dev): remove semantic-release, bump prettier (#719)
  • 8b92916 build(deps-dev): bump markdown-it from 14.1.0 to 14.3.0 (#717)
  • f88ca90 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#718)
  • 66f2dd6 build(deps-dev): bump brace-expansion from 2.0.1 to 2.0.2 (#715)
  • ce4890d build(deps-dev): bump linkify-it from 5.0.0 to 5.0.2 (#716)
  • afd965b build(deps-dev): bump npm from 11.6.2 to 11.19.0 (#714)
  • e9121d4 build(deps-dev): bump lodash-es from 4.17.21 to 4.17.23 (#700)
  • 0296144 feat: drop projects-classic endpoints, add GitHub API endpoints: cache limits...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/types since your current version.


Updates @octokit/request from 9.2.4 to 10.0.16

Release notes

Sourced from @​octokit/request's releases.

v10.0.16

10.0.16 (2026-08-30)

Bug Fixes

  • deps: update dependency @​octokit/types to v18 (#834) (723070e)

v10.0.15

10.0.15 (2026-08-21)

Bug Fixes

  • deps: update dependency content-type to v3 (#833) (963f5fb)

v10.0.14

10.0.14 (2026-08-17)

Bug Fixes

  • deps: update dependency json-with-bigint and undici [security] (#830) (9e5fee0), fixes #831

v10.0.13

10.0.13 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#828) (e127cfe)

v10.0.12

10.0.12 (2026-08-01)

Bug Fixes

  • don't decode application/octet-stream as text when charset is utf-8 (#823) (facf3cb), closes #751

v10.0.11

10.0.11 (2026-06-29)

Bug Fixes

  • handle primitive JSON error bodies without throwing (#820) (554e102), closes #819

v10.0.10

10.0.10 (2026-05-26)

... (truncated)

Commits
  • 723070e fix(deps): update dependency @​octokit/types to v18 (#834)
  • 963f5fb fix(deps): update dependency content-type to v3 (#833)
  • f9b5147 chore(deps): update dependency typescript to v7 (#822)
  • 9e5fee0 fix(deps): update dependency json-with-bigint and undici [security] (#830)
  • 3a99e00 chore(deps): update dependency prettier to v3.9.6 (#794)
  • 9282200 ci(action): update actions/checkout action to v7 (#812)
  • e127cfe fix(deps): update dependency @​octokit/types to v17 (#828)
  • deadf90 ci(action): update actions/setup-node action to v7 (#824)
  • facf3cb fix: don't decode application/octet-stream as text when charset is utf-8 (#823)
  • 554e102 fix: handle primitive JSON error bodies without throwing (#820)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/request since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2026 19:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 14, 2026
@github-actions

github-actions Bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@octokit/auth-app 8.3.1 🟢 6.8
Details
CheckScoreReason
Maintained🟢 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/core 7.0.8 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-retry 8.1.1 🟢 6.8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 67 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/types ^18.0.0 UnknownUnknown
npm/@octokit/auth-app 8.3.1 🟢 6.8
Details
CheckScoreReason
Maintained🟢 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/core 7.0.8 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 67 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/request ^10.0.16 UnknownUnknown
npm/@octokit/types ^18.0.0 UnknownUnknown
npm/@octokit/auth-app 8.3.1 🟢 6.8
Details
CheckScoreReason
Maintained🟢 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 9security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/auth-oauth-app 9.0.5 🟢 6.8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review🟢 10all changesets reviewed
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/auth-oauth-device 8.0.5 🟢 5.9
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/auth-oauth-user 6.0.4 🟢 6.6
Details
CheckScoreReason
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/core 7.0.8 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/endpoint 11.0.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/graphql 9.0.5 🟢 6.8
Details
CheckScoreReason
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/oauth-methods 6.0.5 🟢 6.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1010 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/plugin-retry 8.1.1 🟢 6.8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 67 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/request 10.0.16 🟢 7.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1010 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
npm/@octokit/request-error 7.1.2 🟢 6.9
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Security-Policy🟢 9security policy file detected
Maintained🟢 911 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/content-type 3.1.0 🟢 7.2
Details
CheckScoreReason
Maintained🟢 88 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 8
Code-Review🟢 5Found 16/30 approved changesets -- score normalized to 5
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 9security policy file detected
SAST🟢 9SAST tool detected but not run on all commits
npm/json-with-bigint 3.5.12 UnknownUnknown

Scanned Files

  • lambdas/functions/control-plane/package.json
  • lambdas/functions/termination-watcher/package.json
  • lambdas/functions/webhook/package.json
  • lambdas/yarn.lock

@edersonbrilhante

edersonbrilhante commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch 2 times, most recently from 682ae59 to 3a5a7e2 Compare August 21, 2026 19:45
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch 2 times, most recently from 441bcbb to ade7345 Compare September 2, 2026 13:56
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch 2 times, most recently from c036d4f to a404a17 Compare September 7, 2026 14:05
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch from a404a17 to 9efc9ac Compare September 11, 2026 19:45
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch from 9efc9ac to d53bd7e Compare September 18, 2026 19:51
@dependabot
fix(lambda): bump the octokit group across 1 directory with 6 updates
a1bf8ef 
Bumps the octokit group with 6 updates in the /lambdas directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/auth-app](https://github.com/octokit/auth-app.js) | `8.2.0` | `8.3.1` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.8` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.0.3` | `8.1.1` |
| [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.3` | `11.0.5` |
| [@octokit/types](https://github.com/octokit/types.ts) | `13.10.0` | `18.0.0` |
| [@octokit/request](https://github.com/octokit/request.js) | `9.2.4` | `10.0.16` |



Updates `@octokit/auth-app` from 8.2.0 to 8.3.1
- [Release notes](https://github.com/octokit/auth-app.js/releases)
- [Commits](octokit/auth-app.js@v8.2.0...v8.3.1)

Updates `@octokit/core` from 7.0.6 to 7.0.8
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.6...v7.0.8)

Updates `@octokit/plugin-retry` from 8.0.3 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](octokit/plugin-retry.js@v8.0.3...v8.1.1)

Updates `@octokit/plugin-throttling` from 11.0.3 to 11.0.5
- [Release notes](https://github.com/octokit/plugin-throttling.js/releases)
- [Commits](octokit/plugin-throttling.js@v11.0.3...v11.0.5)

Updates `@octokit/types` from 13.10.0 to 18.0.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v13.10.0...v18.0.0)

Updates `@octokit/request` from 9.2.4 to 10.0.16
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v9.2.4...v10.0.16)

---
updated-dependencies:
- dependency-name: "@octokit/auth-app"
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: octokit
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: octokit
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: octokit
- dependency-name: "@octokit/plugin-throttling"
  dependency-version: 11.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: octokit
- dependency-name: "@octokit/request"
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: octokit
- dependency-name: "@octokit/types"
  dependency-version: 17.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: octokit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch from d53bd7e to a1bf8ef Compare September 22, 2026 14:15

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@edersonbrilhante