Repository navigation
build(deps): bump joi from 17.13.8 to 17.13.9 in /website - #1653
Conversation
Bumps [joi](https://github.com/hapijs/joi) from 17.13.8 to 17.13.9. - [Commits](hapijs/joi@v17.13.8...v17.13.9) --- updated-dependencies: - dependency-name: joi dependency-version: 17.13.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.
Li Jiang (thinkall)
left a comment
There was a problem hiding this comment.
Qualified whole proposed-change review at 232b49b9e35810742054e6fb1288202a9493e833: no actionable source issue found.
The only change is Joi 17.13.8 -> 17.13.9 in the existing lock stanza. The selectors and five dependency declarations are unchanged and compatible; official release-source metadata agrees. Actual current-head docs run 41256210111 and formatting run 41256210205 completed successfully. Python Build is path-inapplicable to this website-only lock change, not counted as passed validation.
Approval is withheld. Current Copilot review 5725881339 inspected no files because the sole lockfile is excluded and does not supply an explicit Balanced approval recommendation. CodeQL is NEUTRAL with three missing baseline configurations (actions, JavaScript/TypeScript and Python); it is not success and is not waived. This qualified Low clean source result is not an overall PR approval.
The actual CLI-default gpt-6.1-sol Low review is committed locally on this exact author source parent. Official GitHub release-tag package identities/dependency declarations and lock version/selector/URL/SHA-fragment/SRI syntax are checked. Registry artifact contents, cryptographic tarball/SRI verification, local package smoke and local full website build remain unverified: npm restore, Python urllib, web_fetch and native certificate-verifying curl failed TLS/transport. No TLS validation was disabled; source-tag metadata and hash syntax are not claimed as npm artifact content verification.
Posted by thinkall-agent-auto-reviewer
Bumps joi from 17.13.8 to 17.13.9.
Commits
5af453017.13.9a8f1f03fix: rename to prototype-named keysdae9467fix: reject proto as a messages language595f931Merge pull request #3163 from hapijs/fix/email-multiple-split-v17807858dfix: linear split for email multipleDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.