chore(deps-dev): bump tmp from 0.2.4 to 0.2.6 - #137
Conversation
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.4 to 0.2.6. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.4...v0.2.6) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.6 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![lifeomic-review-bot[bot]](https://avatars.githubusercontent.com/u/29172293?s=60&v=4){kind=small}
There was a problem hiding this comment.
Upstream: raszi/node-tmp#309 (also v0.2.4…v0.2.6 compare in Dependabot body)
Scope
Bumps direct devDependency tmp from ^0.2.4 to ^0.2.6 and refreshes yarn.lock only (package.json, yarn.lock). Worth merging to adopt upstream path-handling fixes (relative-path checks, tmp.dir() with dir option) for test-only tmpNameSync usage in src/meta-schema.test.ts and src/bin/cli.test.ts without changing runtime dependencies.
CI
Required checks are still pending; approval is not withheld on that basis per review-bot policy.
Regression risk
Patch-level 0.2.x bump with dev-only direct usage and no application source edits—low blast radius.
Residual risks / follow-ups
None — because scope is manifest plus lockfile only, tmp is consumed only in existing tests, and semver stays within 0.2.x.
This review was generated by review-bot.
Bumps tmp from 0.2.4 to 0.2.6.
Commits
41f7159Bump up the versionefa4a06Merge commit from fork7ef2728Check for relative values3d2fe38Bump up the versione162828Merge pull request #309 from fflorent/fix-tmp-dir-with-dirb847d2fFix use of tmp.dir() withdiroptionDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.