chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #207 · klodr/gmail-mcp

dependabot · 2026-05-25T09:39:50Z

Bumps the dev-dependencies group with 2 updates in the / directory: @vitest/coverage-v8 and typescript-eslint.

Updates @vitest/coverage-v8 from 4.1.6 to 4.1.7

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.7

🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

View changes on GitHub

Commits

a09d472 chore: release v4.1.7
See full diff in compare view

Updates typescript-eslint from 8.59.3 to 8.60.0

Release notes

Sourced from typescript-eslint's releases.

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

rule-tester: added updates of RuleTester from upstream (#12291)

🩹 Fixes

playground TS version selector is not working (#12326, #12325)

❤️ Thank You

Evyatar Daud @StyleShit

Vinccool96

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.59.4

8.59.4 (2026-05-18)

🩹 Fixes

eslint-plugin: [no-floating-promises] stack overflow when using recursive types (#12294)

project-service: throw error cause in getParsedConfigFileFromTSServer (#12321)

typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

Evyatar Daud @StyleShit

Kirk Waiblinger @kirkwaiblinger

lumir

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.60.0 (2026-05-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.59.4 (2026-05-18)

🩹 Fixes

typescript-eslint: export Compatible* types from typescript-eslint to resolve pnpm TS error (#12340)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

f891c29 chore(release): publish 8.60.0
ca6ca14 chore(release): publish 8.59.4
4b927c6 fix(typescript-eslint): export Compatible* types from typescript-eslint to re...
See full diff in compare view

Updates vitest from 4.1.6 to 4.1.7

Release notes

Sourced from vitest's releases.

v4.1.7

🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

View changes on GitHub

Commits

a09d472 chore: release v4.1.7
See full diff in compare view

socket-security · 2026-05-25T09:40:15Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
typescript-eslint@8.59.3 ⏵ 8.60.0	⁺¹	⁺¹
vitest@4.1.6 ⏵ 4.1.7
@vitest/coverage-v8@4.1.6 ⏵ 4.1.7

View full report

socket-security · 2026-05-25T09:40:16Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

codecov · 2026-05-25T09:40:31Z

Bundle Report

Bundle size has no change ✅

codecov · 2026-05-25T09:41:09Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.40%. Comparing base (dc92b55) to head (19ea59a).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #207   +/-   ##
=======================================
  Coverage   99.40%   99.40%           
=======================================
  Files          33       33           
  Lines        1859     1859           
  Branches      530      530           
=======================================
  Hits         1848     1848           
  Misses          9        9           
  Partials        2        2

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update dc92b55...19ea59a. Read the comment docs.

klodr · 2026-05-25T18:57:43Z

@coderabbitai review

coderabbitai · 2026-05-25T18:57:49Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2026-05-25T18:57:51Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 4f2c3521-2758-4a7b-aa20-f0d1e6c731fa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

klodr · 2026-05-26T03:34:23Z

@dependabot rebase

klodr · 2026-05-26T03:45:36Z

@coderabbitai review

coderabbitai · 2026-05-26T03:45:41Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

## Summary Three sanitizer test files (`test/hardening.test.ts`, `test/sanitize.test.ts`, `test/utl-attachment-sanitize.test.ts`) embed invisible/control Unicode codepoints (zero-width spaces, bidi overrides, word-joiner, BOM, NEL) as **literal bytes** to exercise the sanitizer. The `editorconfig-checker` action — recently auto-bumped on the GitHub-hosted runner — now classifies these files as `Wrong character encoding ("binary" instead of "utf-8")` and fails the **required** `EditorConfig check`, blocking Dependabot PRs #205–#208. This replaces the 35 invisible literals with `\uXXXX` escape sequences. **Runtime codepoints are identical** (the TS parser decodes the escapes), so the sanitizer assertions are unchanged — **784 tests still pass**. The files are now pure ASCII. Visible characters (em/en dashes, arrows, emoji, CJK, accented letters) are intentionally left as-is — valid UTF-8, never the cause. ## Type of change - [ ] Bug fix (non-breaking) - [ ] New feature - [ ] Breaking change - [ ] Documentation - [ ] Refactor / chore - [x] Test / CI ## Checklist - [x] Tests pass locally (784/784 vitest) - [x] No behavior change — escapes decode to identical runtime codepoints - [x] No secrets/tokens committed ## Related issues Unblocks #205, #206, #207, #208 (all gated on the same EditorConfig check).

klodr · 2026-05-28T17:38:34Z

@dependabot rebase

…ith 3 updates Bumps the dev-dependencies group with 2 updates in the / directory: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `@vitest/coverage-v8` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/coverage-v8) Updates `typescript-eslint` from 8.59.3 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint) Updates `vitest` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: typescript-eslint dependency-version: 8.59.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

klodr

Reviewed dependency bump, auto-merge enabled — letting CI + CodeRabbit + Scorecard gate the merge.

dependabot · 2026-06-01T22:21:45Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 25, 2026

dependabot Bot requested a review from klodr as a code owner May 25, 2026 09:39

coderabbitai Bot previously approved these changes May 25, 2026

View reviewed changes

klodr enabled auto-merge (squash) May 25, 2026 19:03

klodr disabled auto-merge May 25, 2026 19:04

dependabot Bot changed the title ~~chore(deps-dev): bump the dev-dependencies group with 3 updates~~ chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates May 26, 2026

dependabot Bot dismissed coderabbitai[bot]’s stale review via 04a7450 May 26, 2026 03:36

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-b34509f843 branch from 8e4aa98 to 04a7450 Compare May 26, 2026 03:36

klodr changed the title ~~chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates~~ chore(deps-dev): bump dev-dependencies group (3 updates) May 26, 2026

coderabbitai Bot approved these changes May 26, 2026

View reviewed changes

klodr mentioned this pull request May 28, 2026

test: escape invisible Unicode literals to satisfy editorconfig #210

Merged

9 tasks

dependabot Bot changed the title ~~chore(deps-dev): bump dev-dependencies group (3 updates)~~ chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates May 28, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-b34509f843 branch from 04a7450 to 19ea59a Compare May 28, 2026 17:40

klodr enabled auto-merge (squash) May 28, 2026 17:45

klodr approved these changes Jun 1, 2026

View reviewed changes

dependabot Bot closed this Jun 1, 2026

auto-merge was automatically disabled June 1, 2026 22:21
Pull request was closed

dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-b34509f843 branch June 1, 2026 22:21

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.1.7

🐞 Bug Fixes

View changes on GitHub

v8.60.0

8.60.0 (2026-05-25)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.59.4

8.59.4 (2026-05-18)

🩹 Fixes

❤️ Thank You

8.60.0 (2026-05-25)

8.59.4 (2026-05-18)

🩹 Fixes

❤️ Thank You

v4.1.7

🐞 Bug Fixes

View changes on GitHub

Uh oh!

socket-security Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov Bot commented May 25, 2026

Bundle Report

Uh oh!

codecov Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

klodr commented May 25, 2026

Uh oh!

coderabbitai Bot commented May 25, 2026

Uh oh!

coderabbitai Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

klodr commented May 26, 2026

Uh oh!

klodr commented May 26, 2026

Uh oh!

coderabbitai Bot commented May 26, 2026

Uh oh!

klodr commented May 28, 2026

Uh oh!

klodr left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

socket-security Bot commented May 25, 2026 •

edited

Loading

socket-security Bot commented May 25, 2026 •

edited

Loading

codecov Bot commented May 25, 2026 •

edited

Loading

coderabbitai Bot commented May 25, 2026 •

edited

Loading