Skip to content

fix(lambda): bump the octokit group across 1 directory with 6 updates - #5273

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/octokit-67df97edf6
Open

fix(lambda): bump the octokit group across 1 directory with 6 updates#5273
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/octokit-67df97edf6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the octokit group with 6 updates in the /lambdas directory:

Package From To
@octokit/auth-app 8.2.0 8.3.0
@octokit/core 7.0.6 7.0.7
@octokit/plugin-retry 8.0.3 8.1.1
@octokit/plugin-throttling 11.0.3 11.0.5
@octokit/types 13.10.0 17.0.0
@octokit/request 9.2.4 10.0.13

Updates @octokit/auth-app from 8.2.0 to 8.3.0

Release notes

Sourced from @​octokit/auth-app's releases.

v8.3.0

8.3.0 (2026-08-02)

Features

  • deps: allow bigint (int64) repository IDs and update dependency @​octokit/types to v17 (#759) (3df5506)
Commits
  • 3df5506 feat(deps): allow bigint (int64) repository IDs and update dependency @​octoki...
  • 9d2ec47 ci(action): update actions/checkout action to v7 (#754)
  • d149272 build(deps): lock file maintenance (#758)
  • 653732f build(deps): lock file maintenance (#753)
  • b898bcf chore(deps): update dependency esbuild to ^0.28.0 [security] (#751)
  • 9e34287 build(deps): lock file maintenance (#743)
  • fdf6833 chore(deps): update dependency prettier to v3.8.1 (#735)
  • 50cd126 chore(deps): update dependency fetch-mock to v12 (#649)
  • 2b515eb chore(deps): update dependency typescript to v6 (#741)
  • 110df40 chore(deps): update vitest monorepo to v4 (major) (#729)
  • Additional commits viewable in compare view

Updates @octokit/core from 7.0.6 to 7.0.7

Release notes

Sourced from @​octokit/core's releases.

v7.0.7

7.0.7 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#797) (087a093)
Commits
  • 087a093 fix(deps): update dependency @​octokit/types to v17 (#797)
  • e8c8789 ci(action): update actions/create-github-app-token action to v3 (#770)
  • a648383 chore(deps): bump postcss from 8.5.15 to 8.5.23 (#790)
  • 57516b7 chore(deps-dev): bump undici from 7.24.0 to 7.28.0 (#785)
  • c1d1bef chore(deps): bump picomatch from 4.0.3 to 4.0.4 (#772)
  • c60ac22 chore(deps): bump postcss from 8.5.3 to 8.5.15 (#778)
  • 8a9fb20 chore(deps): update dependency esbuild to ^0.28.0 [security] (#782)
  • 83550e2 chore(deps-dev): bump minimatch from 9.0.5 to 9.0.9 (#766)
  • dd8908c chore(deps): bump rollup from 4.41.0 to 4.59.0 (#765)
  • e265d99 chore(deps-dev): bump undici from 7.10.0 to 7.24.0 (#768)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/core since your current version.


Updates @octokit/plugin-retry from 8.0.3 to 8.1.1

Release notes

Sourced from @​octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#685) (a323a9a)

v8.1.0

8.1.0 (2026-02-18)

Features

Commits
  • ed95dae ci(action): update actions/checkout action to v7 (#680)
  • a323a9a fix(deps): update dependency @​octokit/types to v17 (#685)
  • 944c701 ci(action): update actions/setup-node action to v7 (#682)
  • 3a4e3d0 build(deps): lock file maintenance (#684)
  • bae11ba build(deps): lock file maintenance (#679)
  • 433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
  • 03ed096 build(deps): lock file maintenance (#669)
  • 5a0d924 build(deps): lock file maintenance (#664)
  • f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
  • 4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-retry since your current version.


Updates @octokit/plugin-throttling from 11.0.3 to 11.0.5

Release notes

Sourced from @​octokit/plugin-throttling's releases.

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#860) (4859cd1)

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

  • defer Bottleneck instantiation until first request (CF Workers compat) (#850) (d711c52)
Commits
  • 54030a4 ci(action): update actions/setup-node action to v7 (#857)
  • 4859cd1 fix(deps): update dependency @​octokit/types to v17 (#860)
  • d711c52 fix: defer Bottleneck instantiation until first request (CF Workers compat) (...
  • 003e302 chore(deps): update dependency typescript to v7 (#856)
  • d218863 build(deps): lock file maintenance (#859)
  • 0c6f81f build(deps): lock file maintenance (#853)
  • e064466 chore(deps): update dependency esbuild to ^0.28.0 [security] (#852)
  • cb71e45 build(deps): lock file maintenance (#841)
  • 1a64804 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#835)
  • 07c8297 build(deps): lock file maintenance (#833)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-throttling since your current version.


Updates @octokit/types from 13.10.0 to 17.0.0

Release notes

Sourced from @​octokit/types's releases.

v17.0.0

17.0.0 (2026-08-01)

Features

  • drop projects-classic endpoints, add GitHub API endpoints: cache limits (retention & storage) for repos/orgs/enterprises, billing budgets & usage, artifacts deployment metadata, and projectsV2 drafts & fields (#713) (0296144)

BREAKING CHANGES

  • Removed /orgs/{org}/projects
  • Removed /orgs/{org}/settings/billing/actions
  • Removed /orgs/{org}/settings/billing/packages
  • Removed /orgs/{org}/settings/billing/shared-storage
  • Removed /orgs/{org}/teams/{team_slug}/projects
  • Removed /orgs/{org}/teams/{team_slug}/projects/{project_id}
  • Removed /projects/columns/{column_id}
  • Removed /projects/columns/{column_id}/moves
  • Removed /projects/{project_id}
  • Removed /projects/{project_id}/collaborators
  • Removed /projects/{project_id}/collaborators/{username}
  • Removed /projects/{project_id}/collaborators/{username}/permission
  • Removed /repos/{owner}/{repo}/projects
  • Removed /teams/{team_id}/projects
  • Removed /teams/{team_id}/projects/{project_id}
  • Removed /user/projects
  • Removed /users/{username}/projects
  • Removed /users/{username}/settings/billing/actions
  • Removed /users/{username}/settings/billing/packages
  • Removed /users/{username}/settings/billing/shared-storage

v16.0.0

16.0.0 (2025-10-30)

Features

  • add immutable releases, enterprise team membership, enterprise team organization, custom runner images, many type additions and improvements (#693) (dc1ceeb)

BREAKING CHANGES

  • Removed endpoints

v15.0.2

15.0.2 (2025-10-29)

Bug Fixes

... (truncated)

Commits
  • 0296144 feat: drop projects-classic endpoints, add GitHub API endpoints: cache limits...
  • f672eb5 ci(action): update actions/create-github-app-token action to v3 (#702)
  • 5a8840f chore(deps): update dependency npm-run-all2 to v9 (#707)
  • 13d28d7 ci(action): update actions/add-to-project action to v2 (#705)
  • 8303723 ci(action): update actions/checkout action to v7 (#709)
  • de76901 ci(action): update actions/setup-node action to v7 (#711)
  • b61f4ad chore(deps): update dependency handlebars to v4.7.9 [security] (#706)
  • 52c1c75 ci(action): update actions/checkout action to v6 (#697)
  • 9eebb16 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#695)
  • dc1ceeb feat: add immutable releases, enterprise team membership, enterprise team org...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/types since your current version.


Updates @octokit/request from 9.2.4 to 10.0.13

Release notes

Sourced from @​octokit/request's releases.

v10.0.13

10.0.13 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#828) (e127cfe)

v10.0.12

10.0.12 (2026-08-01)

Bug Fixes

  • don't decode application/octet-stream as text when charset is utf-8 (#823) (facf3cb), closes #751

v10.0.11

10.0.11 (2026-06-29)

Bug Fixes

  • handle primitive JSON error bodies without throwing (#820) (554e102), closes #819

v10.0.10

10.0.10 (2026-05-26)

Bug Fixes

  • remove unused fast-content-type-parse dependency (#808) (25b0838)

v10.0.9

10.0.9 (2026-05-12)

Bug Fixes

  • deps: switch to using the "content-type" package for content type parsing (#807) (a9f64a0)

v10.0.8

10.0.8 (2026-02-20)

Bug Fixes

  • use json-with-bigint instead of built-in JSON methods in order to properly support int64's (#798) (f13f5d9)

v10.0.7

10.0.7 (2025-11-13)

... (truncated)

Commits
  • e127cfe fix(deps): update dependency @​octokit/types to v17 (#828)
  • deadf90 ci(action): update actions/setup-node action to v7 (#824)
  • facf3cb fix: don't decode application/octet-stream as text when charset is utf-8 (#823)
  • 554e102 fix: handle primitive JSON error bodies without throwing (#820)
  • 14cf144 build(deps-dev): bump undici from 7.24.0 to 7.28.0 (#813)
  • eccf620 chore(deps): update dependency esbuild to v0.28.1 [security] (#809)
  • 25b0838 fix: remove unused fast-content-type-parse dependency (#808)
  • b3d6b0b chore(deps): update dependency esbuild to ^0.28.0 (#804)
  • 7fdf739 ci(action): update actions/create-github-app-token action to v3 (#801)
  • 58b1f87 ci(action): update actions/add-to-project action to v2 (#806)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/request since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2026 19:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 14, 2026
@github-actions

github-actions Bot commented Aug 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

lambdas/functions/termination-watcher/package.json

PackageVersionLicenseIssue Type
@octokit/request^10.0.13NullUnknown License

lambdas/functions/webhook/package.json

PackageVersionLicenseIssue Type
@octokit/types^17.0.0NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@octokit/auth-app 8.3.0 🟢 6.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/core 7.0.7 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-retry 8.1.1 🟢 7
Details
CheckScoreReason
Maintained🟢 79 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7.2
Details
CheckScoreReason
Maintained🟢 89 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
npm/@octokit/types ^17.0.0 UnknownUnknown
npm/@octokit/auth-app 8.3.0 🟢 6.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/core 7.0.7 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7.2
Details
CheckScoreReason
Maintained🟢 89 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
npm/@octokit/request ^10.0.13 UnknownUnknown
npm/@octokit/types ^17.0.0 UnknownUnknown
npm/@octokit/auth-app 8.3.0 🟢 6.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/auth-oauth-app 9.0.4 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/auth-oauth-device 8.0.4 🟢 6.4
Details
CheckScoreReason
Maintained🟢 1012 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/auth-oauth-user 6.0.3 🟢 6.7
Details
CheckScoreReason
Maintained🟢 79 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
npm/@octokit/core 7.0.7 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/endpoint 11.0.4 🟢 6.8
Details
CheckScoreReason
Security-Policy🟢 9security policy file detected
Maintained🟢 57 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/graphql 9.0.4 🟢 6.9
Details
CheckScoreReason
Security-Policy🟢 9security policy file detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Maintained🟢 911 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/oauth-methods 6.0.4 🟢 6.7
Details
CheckScoreReason
Maintained🟢 1011 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/plugin-retry 8.1.1 🟢 7
Details
CheckScoreReason
Maintained🟢 79 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/plugin-throttling 11.0.5 🟢 7.2
Details
CheckScoreReason
Maintained🟢 89 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 9security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
npm/@octokit/request 10.0.13 🟢 7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 9security policy file detected
Maintained🟢 78 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/@octokit/request-error 7.1.1 🟢 6.6
Details
CheckScoreReason
Maintained🟢 68 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Security-Policy🟢 9security policy file detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
npm/json-with-bigint 3.5.10 UnknownUnknown

Scanned Files

  • lambdas/functions/control-plane/package.json
  • lambdas/functions/termination-watcher/package.json
  • lambdas/functions/webhook/package.json
  • lambdas/yarn.lock

@edersonbrilhante

edersonbrilhante commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
fix(lambda): bump the octokit group across 1 directory with 6 updates
682ae59 
Bumps the octokit group with 6 updates in the /lambdas directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/auth-app](https://github.com/octokit/auth-app.js) | `8.2.0` | `8.3.0` |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.7` |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.0.3` | `8.1.1` |
| [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.3` | `11.0.5` |
| [@octokit/types](https://github.com/octokit/types.ts) | `13.10.0` | `17.0.0` |
| [@octokit/request](https://github.com/octokit/request.js) | `9.2.4` | `10.0.13` |



Updates `@octokit/auth-app` from 8.2.0 to 8.3.0
- [Release notes](https://github.com/octokit/auth-app.js/releases)
- [Commits](octokit/auth-app.js@v8.2.0...v8.3.0)

Updates `@octokit/core` from 7.0.6 to 7.0.7
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.6...v7.0.7)

Updates `@octokit/plugin-retry` from 8.0.3 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](octokit/plugin-retry.js@v8.0.3...v8.1.1)

Updates `@octokit/plugin-throttling` from 11.0.3 to 11.0.5
- [Release notes](https://github.com/octokit/plugin-throttling.js/releases)
- [Commits](octokit/plugin-throttling.js@v11.0.3...v11.0.5)

Updates `@octokit/types` from 13.10.0 to 17.0.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v13.10.0...v17.0.0)

Updates `@octokit/request` from 9.2.4 to 10.0.13
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v9.2.4...v10.0.13)

---
updated-dependencies:
- dependency-name: "@octokit/auth-app"
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: octokit
- dependency-name: "@octokit/core"
  dependency-version: 7.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: octokit
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: octokit
- dependency-name: "@octokit/plugin-throttling"
  dependency-version: 11.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: octokit
- dependency-name: "@octokit/request"
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: octokit
- dependency-name: "@octokit/types"
  dependency-version: 17.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: octokit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/octokit-67df97edf6 branch from 5e15e7a to 682ae59 Compare August 17, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@edersonbrilhante