chore: bump napi-build from 2.3.2 to 2.4.0 - #122
Conversation
Bumps [napi-build](https://github.com/napi-rs/napi-rs) from 2.3.2 to 2.4.0. - [Release notes](https://github.com/napi-rs/napi-rs/releases) - [Commits](napi-rs/napi-rs@napi-build-v2.3.2...napi-build-v2.4.0) --- updated-dependencies: - dependency-name: napi-build dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 74b23d534e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| [[package]] | ||
| name = "napi-build" | ||
| version = "2.3.2" | ||
| version = "2.4.0" |
There was a problem hiding this comment.
Updating only Cargo.lock leaves the generated provenance artifacts stale: a repo-wide search shows provenance/sbom.cdx.json and provenance/THIRD-PARTY-NOTICES.txt still record napi-build as 2.3.2 with the old checksum, while .github/workflows/ci.yml treats Cargo.lock as a provenance-changing file. This dependency PR will either fail the provenance check or, if bypassed, publish inaccurate SBOM/notices; please regenerate the provenance artifacts with the lockfile bump.
Useful? React with 👍 / 👎.
Bumps napi-build from 2.3.2 to 2.4.0.
Release notes
Sourced from napi-build's releases.
Commits
58bd87fchore: release (#3414)9da8723chore(release): publish8d22196chore(deps): update dependency oxc-parser to ^0.142.0 (#3422)abc30fbbuild(deps): bump postcss from 8.5.17 to 8.5.23 (#3421)5542139build(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 (#3418)dc4ee8cbuild(deps): bump fast-uri from 3.1.3 to 3.1.4 (#3419)050d985feat(async-runtime): drain-linger surface + lock-free scheduler internals (#3...e0b8708chore(deps): update dependency oxc-parser to ^0.141.0 (#3417)fc84940chore(deps): update actions/setup-node action to v7 (#3413)ee598dbbuild(deps): bump protobufjs from 7.6.4 to 7.6.5 (#3410)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)