Skip to content

Update non-major dependencies - #120

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major-dependencies
Open

Update non-major dependencies#120
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented May 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
@eslint/js (source) 9.39.4 → 9.39.5 age confidence devDependencies patch
@octokit/plugin-retry 8.1.0 → 8.1.1 age confidence dependencies patch
@octokit/plugin-throttling 11.0.3 → 11.0.5 age confidence dependencies patch
@sap-ai-sdk/ai-api (source) 2.10.0 → 2.14.0 age confidence dependencies minor
@sap-ai-sdk/orchestration (source) 2.10.0 → 2.14.0 age confidence dependencies minor
@types/node (source) 24.12.4 → 24.13.3 age confidence devDependencies minor
@vercel/ncc 0.38.4 → 0.45.0 age confidence devDependencies minor
actions/checkout v7.0.0 → v7.0.1 age confidence action patch
actions/setup-node v6.4.0 → v6.5.0 age confidence action minor
eslint (source) 9.39.4 → 9.39.5 age confidence devDependencies patch
eslint-plugin-sonarjs (source) 4.0.3 → 4.2.0 age confidence devDependencies minor
minimatch 10.2.5 → 10.2.6 age confidence dependencies patch
prettier (source) 3.8.3 → 3.9.6 age confidence devDependencies minor
tsx (source) 4.22.3 → 4.23.12 age confidence devDependencies minor
typescript-eslint (source) 8.59.4 → 8.67.0 age confidence devDependencies minor

Release Notes

eslint/eslint (@​eslint/js)

v9.39.5

Compare Source

Bug Fixes

Documentation

Chores

  • 458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#​21077) (Francesco Trotta)
  • 202117b chore: package.json update for @​eslint/js release (Jenkins)
  • d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#​21074) (Francesco Trotta)
  • 7b431a7 chore: override re2 dependency for @metascraper/helpers (#​21068) (Milos Djermanovic)
  • daf7791 chore: pin fflate@​0.8.2 (#​20895) (Milos Djermanovic)
  • daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#​20829) (Milos Djermanovic)
  • 116d4be ci: unpin Node.js 25.x in CI (#​20619) (Copilot)
octokit/plugin-retry.js (@​octokit/plugin-retry)

v8.1.1

Compare Source

Bug Fixes
octokit/plugin-throttling.js (@​octokit/plugin-throttling)

v11.0.5

Compare Source

Bug Fixes

v11.0.4

Compare Source

Bug Fixes
  • defer Bottleneck instantiation until first request (CF Workers compat) (#​850) (d711c52)
SAP/ai-sdk-js (@​sap-ai-sdk/ai-api)

v2.14.0

Compare Source

Patch Changes

v2.13.0

Compare Source

Patch Changes

v2.12.0

Compare Source

Patch Changes

v2.11.0

Compare Source

Patch Changes
SAP/ai-sdk-js (@​sap-ai-sdk/orchestration)

v2.14.0

Compare Source

Minor Changes
  • b986b70: [feat] Add reasoning content support to the Orchestration client.
    reasoning_content fields were added on response, streaming delta, and assistant message types.
    The getReasoningContent() and getDeltaReasoningContent() convenience functions return the reasoning text from model responses.
  • b986b70: [feat] Added overrideConfig field to OrchestrationConfigRef to pass a PartialOrchestrationConfig that overrides parts of the stored orchestration configuration at request time.
    Streaming via .stream() now automatically sets stream.enabled = true in the partial configuration override, so clients using a stored orchestration configuration reference no longer require streaming to be pre-configured in the stored configuration.
  • cca7edd: [feat] Add GcpVertexAiEmbeddingModel type with gemini-embedding to @sap-ai-sdk/core.
    Add GcpVertexAiEmbeddingModel to the EmbeddingModel union in @sap-ai-sdk/orchestration.
Patch Changes

v2.13.0

Compare Source

Patch Changes

v2.12.0

Compare Source

Patch Changes

v2.11.0

Compare Source

Minor Changes
  • f72bb58: [feat] Update orchestration specification to v0.131.3
Patch Changes
vercel/ncc (@​vercel/ncc)

v0.45.0

Compare Source

v0.44.1

Compare Source

Bug Fixes

v0.44.0

Compare Source

Features

v0.43.0

Compare Source

Changes
actions/checkout (actions/checkout)

v7.0.1

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

SonarSource/SonarJS (eslint-plugin-sonarjs)

v4.2.0

Compare Source

v4.1.0

Compare Source

isaacs/minimatch (minimatch)

v10.2.6

Compare Source

prettier/prettier (prettier)

v3.9.6

Compare Source

v3.9.5

Compare Source

diff

Markdown: Cap ordered list mark at 999,999,999 (#​19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text

1234567890123456789012) text

<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text

1234567890123456789012) text

<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text

1234567890123456789012) text
Markdown: Avoid corrupting empty link with title (#​19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](<> "title")

<!-- Prettier 3.9.4 -->
[link]( "title")

<!-- Prettier 3.9.5 -->
[link](<> "title")
Less: Remove extra spaces after [ in map lookups (#​19503 by @​kovsu)
// Input
.foo {
  color: #theme[ primary];
  color: #theme[@name];
  color: #theme[@@name];
}

// Prettier 3.9.4
.foo {
  color: #theme[ primary];
  color: #theme[ @name];
  color: #theme[ @@name];
}

// Prettier 3.9.5
.foo {
  color: #theme[primary];
  color: #theme[@name];
  color: #theme[@@name];
}
CSS: Prevent addition space in type() with + (#​19516 by @​bigandy)

This fixes the addition space before + in CSS type() declaration. For example type(<number>+) was being converted into type(<number> +) which is invalid CSS and does not work.

/* Input */
div {
  border-radius: attr(br type(<length>+));
}

/* Prettier 3.9.4 */
div {
  border-radius: attr(br type(<length> +));
}

/* Prettier 3.9.5 */
div {
  border-radius: attr(br type(<length>+));
}
Less: Remove spaces between merge markers and colons (#​19517 by @​kovsu)
// Input
a {
  box-shadow  +  : 0 0 1px #&#8203;000;
}

// Prettier 3.9.4
a {
  box-shadow+  : 0 0 1px #&#8203;000;
}

// Prettier 3.9.5
a {
  box-shadow+: 0 0 1px #&#8203;000;
}
Markdown: Preserve wiki links with aliases (#​19527 by @​kovsu)
<!-- Input -->
[[Foo:Bar]]

<!-- Prettier 3.9.4 -->
[[Foo]]

<!-- Prettier 3.9.5 -->
[[Foo:Bar]]
TypeScript: Fix comments being dropped on shorthand type import/export specifiers (#​19565 by @​kirkwaiblinger)
// Input
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";

// Prettier 3.9.4
Error: Comment "comment" was not printed. Please report this error!

// Prettier 3.9.5
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";
Miscellaneous: Preserving comments' placement property (#​19567 by @​Janther)

Prettier@​3.9.0 deleted an undocumented property on comments, which was already used by plugins, comment.placement is now available again after comment attach.

Flow: Stop enforcing empty module declaration to break (#​19568 by @​fisker)
// Input
declare module "foo" {}

// Prettier 3.9.4
declare module "foo" {
}

// Prettier 3.9.5
declare module "foo" {}
Angular: Support expression for exhaustive typechecking (#​19571 by @​fisker)
<!-- Input -->
@switch (state.mode) {
  @default never(state);
}

<!-- Prettier 3.9.4 -->
@switch (state.mode) {
  @default never;
}

<!-- Prettier 3.9.5 -->
@switch (state.mode) {
  @default never(state);
}
TypeScript: Ignore comments inside mapped type when checking type parameter comments (#​19572 by @​fisker)
// Input
foo<{
  // comment
  [key in keyof Foo]: number
}>();

// Prettier 3.9.4
foo<
  {
    // comment
    [key in keyof Foo]: number;
  }
>();

// Prettier 3.9.5
foo<{
  // comment
  [key in keyof Foo]: number;
}>();
Less: Fix adjacent block comments being corrupted (#​19574 by @​kovsu)
// Input
/* a *//* b */
/* a */* {
  color: red;
}

// Prettier 3.9.4
/* a */
/* b */
/* a * {
  color: red;
}

// Prettier 3.9.5
/* a */ /* b */
/* a */
* {
  color: red;
}
JavaScript: Handle dangling comments in SwitchStatement (#​19581 by @​fisker)
// Input
switch (foo) {
 // comment
}

// Prettier 3.9.4
switch (
  foo
  // comment
) {
}

// Prettier 3.9.5
switch (foo) {
  // comment
}
TypeScript: Remove space in comment-only object type (#​19583 by @​fisker)
// Input
var foo = {
  /* comment */
};
type Foo = {
  /* comment */
};

// Prettier 3.9.4
var foo = {/* comment */};
type Foo = { /* comment */ };

// Prettier 3.9.5
var foo = {/* comment */};
type Foo = {/* comment */};

v3.9.4

Compare Source

v3.9.3

Compare Source

v3.9.2

Compare Source

v3.9.1

Compare Source

v3.9.0

Compare Source

diff

🔗 Release Notes

v3.8.5

Compare Source

v3.8.4

Compare Source

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#​17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a

  - b

- c

  - d

<!-- Prettier 3.8.3 -->
- a
  - b
- c
  - d

<!-- Prettier 3.8.4 -->
- a

  - b

- c

  - d
privatenumber/tsx (tsx)

v4.23.12

Compare Source

Bug Fixes

This release is also available on:

v4.23.11

Compare Source

v4.23.10

Compare Source

Bug Fixes

This release is also available on:

v4.23.9

Compare Source

Bug Fixes
  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

Compare Source

Bug Fixes
  • preserve package subpath resolution (be1315e)
  • preserve typeless ESM dependency exports (70dfc5e)

This release is also available on:

v4.23.7

Compare Source

Bug Fixes
  • prevent tsImport cache collisions (4e5a138)

This release is also available on:

v4.23.6

Compare Source

v4.23.5

Compare Source

v4.23.4

Compare Source

Bug Fixes
  • cli: allow async process.once() signal handlers to finish (#​827) (2afc7bb)

This release is also available on:

v4.23.3

Compare Source

Bug Fixes

This release is also available on:

v4.23.2

Compare Source

v4.23.1

Compare Source

Bug Fixes
  • support tsImport after global preload (8d4ffc2)
  • watch: avoid clearing piped output (95d0672)
  • watch: treat script and dependency paths literally (79fddde)
Performance Improvements
  • index transform cache lazily (e818ad6)
  • load esbuild lazily in CLI (d067938)
  • map Node TypeScript formats directly (cdcc623)
  • use sync module hooks on Node v22.22.3+ (f8992f1)

This release is also available on:

v4.23.0

Compare Source

Bug Fixes
Features

This release is also available on:

v4.22.5

Compare Source

Bug Fixes
  • isolate hook state per async module.register() registration (a305f36)

This release is also available on:

v4.22.4

Compare Source

Bug Fixes
  • resolve CommonJS directory requires inside dependencies (#​803) (1ce8463)

This release is also available on:

typescript-eslint/typescript-eslint (typescript-eslint)

v8.67.0

Compare Source

🚀 Features
  • typescript-eslint: export basic globs for using tseslint (#​12105)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.65.0

Compare Source

🚀 Features
  • add warning when TS 7 is detected (#​12529)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

Compare Source

8.64.0 (2026-07-13)

🚀 Features
  • support parsing import defer (#​12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#​12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#​12543)
🩹 Fixes
  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#​12512)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

Compare Source

🚀 Features
  • remove redundant package.json "files" (#​12444)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.60.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label May 30, 2026
@renovate
renovate Bot enabled auto-merge (squash) May 30, 2026 01:06
@github-actions

github-actions Bot commented May 30, 2026

Copy link
Copy Markdown

Updated the AI SDK and linting tooling to their latest minor releases across both the PR review and summary services for consistency and to incorporate recent fixes and improvements.

Walkthrough

  • Chore: Bumped @sap-ai-sdk/ai-api and @sap-ai-sdk/orchestration from v2.10.0 to v2.11.0 in both pr-review and pr-summary, ensuring access to the latest enhancements.
  • Chore: Upgraded typescript-eslint from v8.59.4 to v8.60.0, bringing in updated linting rules and bug fixes.

Model: o4-mini-2025-04-16 | Prompt Tokens: 672 | Completion Tokens: 404

github-actions[bot]
github-actions Bot reviewed May 30, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enjoy this friendly AI-assisted code review. Some suggestions come from predictions and may not always be perfect. Feel free to choose the ideas that fit your style. Your choices guide the process, and AI is here to help.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1204 | Completion Tokens: 1921

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",

@github-actions github-actions Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using a caret (^) range for SDK dependencies so you automatically receive compatible patch updates without manually bumping each time. For example:

"@sap-ai-sdk/ai-api": "^2.11.0",
"@sap-ai-sdk/orchestration": "^2.11.0",

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",

@github-actions github-actions Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Before upgrading to 2.11.0, verify the upstream changelog for any breaking changes or required migration steps. You could add a comment or link to the changelog in your release notes:

# Upgrade @sap-ai-sdk to 2.11.0
- See https://github.com/SAP/ai-sdk/releases/tag/v2.11.0 for breaking changes

Comment thread pr-review/package.json Outdated
"tsx": "4.22.3",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.60.0",

@github-actions github-actions Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the SDK bump, consider using a caret range for the ESLint plugin dependency to get minor fixes automatically:

"typescript-eslint": "^8.60.0",

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +23
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",

@github-actions github-actions Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workspace also upgrades the SAP AI SDK. To keep versioning consistent across workspaces and simplify future bumps, you might extract these shared dependencies into the root package.json or a shared configs file.

Comment thread pr-summary/package.json Outdated
"tsx": "4.22.3",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.60.0",

@github-actions github-actions Bot May 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ensure that bumping typescript-eslint here aligns with your overall ESLint config. If you have a centralized ESLint setup, consider updating it in one place instead of per-package.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from a9b07a7 to ab6d417 Compare May 31, 2026 14:26
@github-actions

github-actions Bot commented May 31, 2026

Copy link
Copy Markdown

This update standardizes dependency versions across both the pr-review and pr-summary packages, ensuring that core AI SDK modules, tooling runtimes, and linting plugins are aligned to their latest patch releases for improved stability and compatibility.

Walkthrough

  • Chore: Updated SAP AI SDK modules (@sap-ai-sdk/ai-api and @sap-ai-sdk/orchestration) to v2.11.0 across pr-review and pr-summary for minor enhancements and compatibility improvements.
  • Chore: Upgraded TSX runtime from 4.22.3 to 4.22.4 to incorporate recent stability and performance fixes in both packages.
  • Chore: Bumped typescript-eslint plugin to 8.60.0 to ensure up-to-date linting rules and code quality consistency.

Model: o4-mini-2025-04-16 | Prompt Tokens: 756 | Completion Tokens: 949 | Diff Range: a9b07a7...ab6d417

github-actions[bot]
github-actions Bot reviewed May 31, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We’ve assembled a friendly, AI-powered review of your code with practical suggestions. Treat each point as a flexible idea rather than a strict rule. Choose what aligns with your goals and style. You’re in control of the final decisions, and AI is here to support you every step of the way.
Model: o4-mini-2025-04-16 | Prompt Tokens: 924 | Completion Tokens: 2148 | Diff Range: a9b07a7...ab6d417

Comment thread pr-review/package.json Outdated
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"tsx": "4.22.4",

@github-actions github-actions Bot May 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like you’re bumping the tsx version explicitly rather than using a semver range. For better flexibility and to automatically pick up compatible patch/minor updates, consider using a caret prefix. This way you’ll avoid manual bumps for every small release.

-    "tsx": "4.22.4",
+    "tsx": "^4.22.4",

Comment thread pr-summary/package.json Outdated
Comment on lines 37 to 43
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.60.0",
"yaml": "2.9.0"

@github-actions github-actions Bot May 31, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see the same set of ESLint and Prettier dependencies repeated in both pr-review and pr-summary packages. You could centralize shared devDependencies in a workspace root to avoid duplication and ensure consistency across all sub-packages.

For example, in your monorepo root package.json:

{
  "name": "my-monorepo",
  "private": true,
  "workspaces": [
    "pr-review",
    "pr-summary"
  ],
  "devDependencies": {
    "eslint-plugin-sonarjs": "^4.0.3",
    "eslint-plugin-unicorn": "^64.0.0",
    "prettier": "^3.8.3",
    "tsx": "^4.22.4",
    "typescript": "^6.0.3",
    "@typescript-eslint/eslint-plugin": "^8.60.0",
    "yaml": "^2.9.0"
  }
}

Then remove these entries from each sub-package’s devDependencies. This reduces maintenance overhead and keeps versions in sync.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from ab6d417 to 11f7224 Compare June 8, 2026 03:57
@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown

This update refreshes CI workflows by upgrading the actions/checkout step and synchronizes package dependencies for pr-summary and pr-review modules. All internal SDKs, HTTP clients, and dev toolchains receive minor version bumps to align with the latest releases. This ensures more stable builds and up-to-date linting, without changing external behavior.

Walkthrough

  • Chore: Upgrades GitHub Actions checkout to v6.0.3, improving overall CI stability.
  • Chore: Bumps internal @sap-ai-sdk packages and axios to latest minor releases for bugfixes and enhancements.
  • Chore: Updates development tooling (TypeScript, Node types, ESLint, tsx) to keep linting and builds current.

Model: o4-mini-2025-04-16 | Prompt Tokens: 1883 | Completion Tokens: 1258 | Diff Range: ab6d417...11f7224

github-actions[bot]
github-actions Bot reviewed Jun 8, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for sharing your code. I’ve added AI-powered suggestions to help you refine your work. These are ideas, not hard rules—feel free to pick what suits you. Your expertise and choices drive the final outcome. Let me know if you’d like more feedback or support.
Model: o4-mini-2025-04-16 | Prompt Tokens: 2764 | Completion Tokens: 2959 | Diff Range: ab6d417...11f7224

Comment thread .github/workflows/build.yaml Outdated
Comment on lines 23 to 26
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
ref: ${{ env.SOURCE_BRANCH }}
path: source-folder

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The actions/checkout step is pinned to a specific commit SHA multiple times, making maintenance harder when bumping versions. You can use the version tag (e.g., v6) and DRY out the repeated checkout configuration by leveraging YAML anchors or environment variables. For example:

env:
  CHECKOUT_VERSION: v6

jobs:
  prepare:
    steps:
      - name: Checkout source branch
        &checkout-source
        uses: actions/checkout@${{ env.CHECKOUT_VERSION }}
        with:
          ref: ${{ env.SOURCE_BRANCH }}
          path: source-folder

      - name: Checkout release branch
        <<: *checkout-source
        with:
          ref: ${{ env.RELEASE_BRANCH }}
          path: release-folder

Comment thread .github/workflows/code-quality.yaml Outdated
Comment on lines 23 to 26
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
- name: Setup Node
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
with:

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the build workflow, the checkout step is repeated and pinned to a commit SHA. You can improve readability and reduce duplication by using the tag actions/checkout@v6 and introducing a YAML anchor or an environment variable:

env:
  CHECKOUT_ACTION: v6

jobs:
  lint:
    steps:
      - name: Checkout source branch
        &checkout-step
        uses: actions/checkout@${{ env.CHECKOUT_ACTION }}
        with:
          path: [pr-summary, pr-review]

      # Reuse for another job
      - name: Checkout source branch again
        <<: *checkout-step

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +25
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.17.0",

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pinning dependencies to exact versions prevents receiving patch updates automatically. Consider using caret ranges (^) to allow non-breaking updates:

- "@sap-ai-sdk/ai-api": "2.11.0",
- "@sap-ai-sdk/orchestration": "2.11.0",
- "axios": "1.17.0",
+ "@sap-ai-sdk/ai-api": "^2.11.0",
+ "@sap-ai-sdk/orchestration": "^2.11.0",
+ "axios": "^1.17.0",

Comment thread pr-review/package.json Outdated
Comment on lines +33 to +34
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@types/node": "24.13.1",

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependencies in devDependencies are not sorted alphabetically, which can make diffs noisy. Also apply caret ranges for consistency:

- "@types/node": "24.13.1",
+ "@types/node": "^24.13.1",

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.17.0",

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As with the review workflow, use caret ranges for your production dependencies to allow automatic patch and minor upgrades:

- "@sap-ai-sdk/ai-api": "2.11.0",
- "@sap-ai-sdk/orchestration": "2.11.0",
- "axios": "1.17.0",
+ "@sap-ai-sdk/ai-api": "^2.11.0",
+ "@sap-ai-sdk/orchestration": "^2.11.0",
+ "axios": "^1.17.0",

Comment thread pr-summary/package.json Outdated
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@types/node": "24.13.1",

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorting devDependencies alphabetically and using caret ranges will keep your manifest tidy and ensure minor/patch updates:

- "@types/node": "24.13.1",
+ "@types/node": "^24.13.1",

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 11f7224 to fda456f Compare June 8, 2026 20:04
@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown

Updated the GitHub workflows to use the latest checkout action and bumped several package versions in the PR summary and review modules. These changes keep CI processes aligned with the most recent enhancements and ensure that internal SDKs and tooling dependencies are up-to-date for improved stability and security.

Walkthrough

  • Chore: Upgraded actions/checkout to v6.0.3 across build and code-quality workflows for consistency and the latest security patches.
  • Chore: Updated internal dependencies in both pr-summary and pr-review packages (SAP AI SDKs, axios, Node types, TSX, ESLint plugins, TypeScript ESLint) to their newest minor releases.
  • Chore: No user-facing functionality changed; these are under-the-hood maintenance updates.

Model: o4-mini-2025-04-16 | Prompt Tokens: 1883 | Completion Tokens: 629 | Diff Range: 11f7224...fda456f

github-actions[bot]
github-actions Bot reviewed Jun 8, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This review provides gentle AI-assisted feedback on your code. Insights are predictions rather than facts, so pick the ideas that work best for you. You remain in control, with AI here to support your choices.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1156 | Completion Tokens: 1982 | Diff Range: 11f7224...fda456f

Comment thread pr-review/package.json
Comment on lines 32 to 44
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It’s better to use semantic version ranges (e.g., caret ^) rather than pinning exact versions. This allows you to receive backward-compatible patches automatically and helps with maintenance.

For example, you could update your devDependencies to:

"devDependencies": {
  "@eslint/js": "^9.39.4",
  "@types/node": "^24.13.1",
  "@vercel/ncc": "^0.38.4",
  "eslint": "^9.39.4",
  "eslint-plugin-import": "^2.32.0",
  "eslint-plugin-sonarjs": "^4.0.3",
  "eslint-plugin-unicorn": "^64.0.0",
  "prettier": "^3.8.3",
  "tsx": "^4.22.4",
  "typescript": "^6.0.3",
  "typescript-eslint": "^8.61.0",
  "yaml": "^2.9.0"
}

Comment thread pr-review/package.json Outdated
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package typescript-eslint isn’t an official publish; you likely intended to use the scoped ESLint plugin and parser packages. Update to:

"devDependencies": {
  "@typescript-eslint/eslint-plugin": "^8.61.0",
  "@typescript-eslint/parser": "^8.61.0"
}

This ensures ESLint properly picks up your TypeScript rules and syntax parsing.

Comment thread pr-summary/package.json
Comment on lines 31 to 44
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"
}

@github-actions github-actions Bot Jun 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since both pr-review and pr-summary share identical devDependencies, consider hoisting them to the workspace root package.json (if you’re using npm/yarn workspaces or pnpm). This reduces duplication and keeps versions consistent across packages.

Example in root package.json:

"workspaces": ["pr-review", "pr-summary"],
"devDependencies": {
  // move all shared devDependencies here
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from fda456f to 3b9af6a Compare June 9, 2026 17:15
@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

Updated GitHub workflows to use the latest actions/checkout release and bumped various internal and development dependencies in both pr-review and pr-summary packages to their newest patch and minor versions.

Walkthrough

  • Chore: Upgraded actions/checkout steps from v6.0.2 to v6.0.3 across build and code-quality workflows.
  • Chore: Bumped @sap-ai-sdk/ai-api, @sap-ai-sdk/orchestration, and axios to 2.11.0 and 1.17.0 respectively.
  • Chore: Updated devDependencies (@types/node, @vercel/ncc, prettier, tsx, typescript-eslint) to their latest versions for improved tooling.

Model: o4-mini-2025-04-16 | Prompt Tokens: 1945 | Completion Tokens: 435 | Diff Range: fda456f...3b9af6a

github-actions[bot]
github-actions Bot reviewed Jun 9, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We’ve put together a friendly code review with AI backed ideas to help you refine your work. These pointers are suggestions, not absolute truths. Feel free to choose what matches your style. You’re in charge of the final decisions and AI is here just to support your progress.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1234 | Completion Tokens: 4105 | Diff Range: fda456f...3b9af6a

Comment thread pr-review/package.json Outdated
Comment on lines +33 to +35
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.44.0",

@github-actions github-actions Bot Jun 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You updated several devDependency versions with exact pinned versions. To allow automatic non-breaking updates and avoid frequent manual bumps, consider using caret ranges. For example:

"devDependencies": {
  "@types/node": "^24.13.1",
  "@vercel/ncc": "^0.44.0",
  "prettier": "^3.8.4",
  "tsx": "^4.22.4",
  "typescript-eslint": "^8.61.0"
}

Comment thread pr-review/package.json
Comment on lines 32 to 44
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"

@github-actions github-actions Bot Jun 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The devDependencies section isn’t sorted, which can make diffs harder to read and maintain. Alphabetical ordering of keys improves readability and minimizes merge conflicts. For example:

"devDependencies": {
  "@eslint/js": "9.39.4",
  "@types/node": "24.13.1",
  "@vercel/ncc": "0.44.0",
  "eslint": "9.39.4",
  "eslint-plugin-import": "2.32.0",
  "eslint-plugin-sonarjs": "4.0.3",
  "eslint-plugin-unicorn": "64.0.0",
  "prettier": "3.8.4",
  "tsx": "4.22.4",
  "typescript": "6.0.3",
  "typescript-eslint": "8.61.0",
  "yaml": "2.9.0"
}

Comment thread pr-summary/package.json Outdated
Comment on lines +32 to +34
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.44.0",

@github-actions github-actions Bot Jun 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the other package, these dependencies are pinned exactly. Switching to caret ranges helps pick up compatible patches and minor updates automatically:

"devDependencies": {
  "@types/node": "^24.13.1",
  "@vercel/ncc": "^0.44.0",
  "prettier": "^3.8.4",
  "tsx": "^4.22.4",
  "typescript-eslint": "^8.61.0"
}

Comment thread pr-summary/package.json
Comment on lines 31 to 43
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"

@github-actions github-actions Bot Jun 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The devDependencies block is unsorted, which can complicate reviews. Keeping keys in alphabetical order ensures consistency:

"devDependencies": {
  "@eslint/js": "9.39.4",
  "@types-node": "24.13.1",
  "@vercel/ncc": "0.44.0",
  "eslint": "9.39.4",
  "eslint-plugin-import": "2.32.0",
  "eslint-plugin-sonarjs": "4.0.3",
  "eslint-plugin-unicorn": "64.0.0",
  "prettier": "3.8.4",
  "tsx": "4.22.4",
  "typescript": "6.0.3",
  "typescript-eslint": "8.61.0",
  "yaml": "2.9.0"
}

Comment thread pr-review/package.json
Comment on lines 31 to 46
},
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.1",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"
}
}

@github-actions github-actions Bot Jun 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The same devDependencies are repeated across both packages, which increases maintenance overhead and the chance of version drift. Consider adopting a shared configuration or npm workspaces to centralize these dependencies. For example, add at the root package.json:

{
  "workspaces": [
    "pr-review",
    "pr-summary"
  ],
  "devDependencies": {
    "@types/node": "^24.13.1",
    "@vercel/ncc": "^0.44.0",
    // ... other shared devDependencies
  }
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 3b9af6a to 73972f6 Compare June 10, 2026 23:13
@github-actions

github-actions Bot commented Jun 10, 2026

Copy link
Copy Markdown

Updated GitHub workflows to use the latest checkout action and bumped several package versions to pull in minor enhancements and fixes. No end-user functionality changed; this update keeps our CI/CD and SDKs up to date.

Walkthrough

  • Chore: Upgraded actions/checkout to v6.0.3 in build.yaml and code-quality.yaml
  • Chore: Bumped @sap-ai-sdk/ai-api, @sap-ai-sdk/orchestration, and axios in both pr-summary and pr-review
  • Chore: Updated devDependencies (@types/node, @vercel/ncc, prettier, tsx, typescript-eslint) for consistency and tooling improvements

Model: o4-mini-2025-04-16 | Prompt Tokens: 1945 | Completion Tokens: 300 | Diff Range: 3b9af6a...73972f6

github-actions[bot]
github-actions Bot reviewed Jun 10, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for sharing your code. I’ve provided some AI-powered suggestions to help you improve readability and functionality. Please treat these as optional recommendations rather than absolute rules. Feel free to adapt or ignore anything that doesn’t fit your style or goals. You know your project best, and your choices drive the final outcome—AI support is here to empower your process.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1234 | Completion Tokens: 2408 | Diff Range: 3b9af6a...73972f6

Comment thread pr-review/package.json Outdated
Comment on lines +33 to +35
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",

@github-actions github-actions Bot Jun 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see that you’ve pinned several devDependencies to exact patch versions (e.g., "@types/node": "24.13.2", "@vercel/ncc": "0.44.0"). To allow non-breaking updates (bug fixes, performance improvements), consider using caret ranges. For example:

"devDependencies": {
  "@types/node": "^24.13.2",
  "@vercel/ncc": "^0.44.0",
  // ...other entries
}

This helps keep your tools up-to-date without frequent manual bumps.

Comment thread pr-summary/package.json Outdated
Comment on lines +32 to +34
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",

@github-actions github-actions Bot Jun 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the other package, you’re using exact versions for these devDependencies. Switching to caret ranges ensures you automatically pick up minor and patch releases, e.g.:

"devDependencies": {
  "@types/node": "^24.13.2",
  "@vercel/ncc": "^0.44.0",
  // ...
}

This approach reduces maintenance overhead while avoiding breaking changes.

Comment thread pr-review/package.json
Comment on lines 32 to 45
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.0",
"yaml": "2.9.0"
}

@github-actions github-actions Bot Jun 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both pr-review and pr-summary share an identical set of devDependencies and version updates. To DRY up your configuration, consider hoisting these to a root package.json (using workspaces) or creating a shared ESLint/TypeScript config package. For example, in your monorepo root:

{
  "workspaces": ["pr-review", "pr-summary"],
  "devDependencies": {
    "eslint": "^9.39.4",
    "prettier": "^3.8.4",
    "typescript": "^6.0.3",
    // ...other shared tools
  }
}

Then reference them in child packages with:

"devDependencies": {
  "@your-scope/shared-config": "workspace:*",
  "tsx": "workspace:*
}

This ensures consistency and avoids duplicate version bumps across packages.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 73972f6 to 0de5008 Compare June 20, 2026 07:58
@github-actions

github-actions Bot commented Jun 20, 2026

Copy link
Copy Markdown

Updated the GitHub CI workflows to use the latest checkout action and bumped core and dev dependencies across PR summarization and review packages to their newest minor releases, ensuring compatibility improvements and the latest bug fixes.

Walkthrough

  • Chore: Upgraded actions/checkout from v6.0.2 to v6.0.3 in build and code-quality workflows
  • Chore: Updated @sap-ai-sdk/ai-api, @sap-ai-sdk/orchestration, and axios to newer minor versions in both PR packages
  • Chore: Bumped devDependencies (@types/node, @vercel/ncc, eslint-plugin-sonarjs, prettier, tsx, typescript-eslint) for improved tooling and type support

Model: o4-mini-2025-04-16 | Prompt Tokens: 1979 | Completion Tokens: 628 | Diff Range: 73972f6...0de5008

github-actions[bot]
github-actions Bot reviewed Jun 20, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enjoy a supportive code review powered by AI. Some insights are projections, not certainties, so feel free to adopt what resonates. Your judgment guides the outcome—AI is here to assist.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1730 | Completion Tokens: 3021 | Diff Range: 73972f6...0de5008

Comment thread pr-review/package.json
Comment on lines -23 to 28
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.18.0",
"minimatch": "10.2.5",
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Jun 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider switching from fixed version pins to semver ranges (e.g. ^2.11.0) for your dependencies to automatically pick up non-breaking patch releases. Also, sorting the entries alphabetically improves readability and maintainability. For example:

"dependencies": {
  "@octokit/plugin-retry": "^8.1.0",
  "@octokit/plugin-throttling": "^11.0.3",
  "@octokit/webhooks": "^13.9.1",
  "@sap-ai-sdk/ai-api": "^2.11.0",
  "@sap-ai-sdk/orchestration": "^2.11.0",
  "axios": "^1.18.0",
  "minimatch": "^10.2.5",
  "mollitia": "^0.2.0",
  "octokit": "^5.0.5"
}

Comment thread pr-review/package.json
Comment on lines -34 to 44
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.1.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.1",
"yaml": "2.9.0"

@github-actions github-actions Bot Jun 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After bumping devDependencies, regenerate and commit your lockfile (e.g., npm install or yarn install) to ensure consistent installs across environments. Additionally, consider specifying a Node.js engine range to prevent unexpected breakages:

"engines": {
  "node": ">=16.0.0 <19.0.0"
}

Comment thread pr-summary/package.json
Comment on lines -22 to 27
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.18.0",
"minimatch": "10.2.5",
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Jun 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As with the other package, use semver ranges (^ or ~) instead of exact version pins and keep the list sorted alphabetically. This approach helps you automatically receive non-breaking updates and keeps the file tidy. For example:

"dependencies": {
  "@octokit/plugin-retry": "^8.1.0",
  "@octokit/plugin-throttling": "^11.0.3",
  "@octokit/webhooks": "^13.9.1",
  "@sap-ai-sdk/ai-api": "^2.11.0",
  "@sap-ai-sdk/orchestration": "^2.11.0",
  "axios": "^1.18.0",
  "minimatch": "^10.2.5",
  "mollitia": "^0.2.0",
  "octokit": "^5.0.5"
}

Comment thread pr-summary/package.json
Comment on lines -33 to 43
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.1.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.61.1",
"yaml": "2.9.0"

@github-actions github-actions Bot Jun 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remember to update and commit the lockfile after bumping devDependencies. If these bumps include ESLint, Prettier, or TypeScript updates, run your linting and build scripts (e.g., npm run lint and npm run build) to catch any new issues early.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 0de5008 to 7513417 Compare June 21, 2026 09:48
@github-actions

github-actions Bot commented Jun 21, 2026

Copy link
Copy Markdown

This update standardizes CI workflows and dependency versions across the project to ensure compatibility with the latest tools and libraries.

Walkthrough

  • Chore: Bumped actions/checkout to v7.0.0 in build and code-quality workflows for improved stability.
  • Chore: Upgraded SDKs (@sap-ai-sdk/ai-api, @sap-ai-sdk/orchestration) and Axios for minor enhancements and bug fixes.
  • Chore: Updated devDependencies (@types/node, @vercel/ncc, eslint-plugin-sonarjs, prettier, tsx, typescript-eslint) to current patch/minor releases.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2014 | Completion Tokens: 604 | Diff Range: 0de5008...7513417

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 7513417 to 09e481d Compare June 22, 2026 20:05
@github-actions

github-actions Bot commented Jun 22, 2026

Copy link
Copy Markdown

Updated dependencies in both pr-review and pr-summary packages. Upgraded core AI SDK modules, HTTP client, build tools, and linting-related devDependencies to the latest minor and patch versions for better compatibility and developer experience.

Walkthrough

  • Chore: Bumped @sap-ai-sdk/ai-api & orchestration from 2.10.0 to 2.11.0 and axios from 1.16.1 to 1.18.1 to ensure up-to-date API integrations.
  • Chore: Upgraded devDependencies—including TypeScript, ESLint, Prettier, tsx, ncc, and eslint-plugin-sonarjs—to streamline builds and maintain code-quality standards.

Model: o4-mini-2025-04-16 | Prompt Tokens: 1070 | Completion Tokens: 806 | Diff Range: 7513417...09e481d

github-actions[bot]
github-actions Bot reviewed Jun 22, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Get a supportive review of your code powered by AI. Some tips are based on educated guesses and may not apply perfectly, so adapt them to your needs. You remain in control, with AI serving as a helpful resource.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1730 | Completion Tokens: 2132 | Diff Range: 0de5008...09e481d

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +25
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.18.1",

@github-actions github-actions Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider switching from fixed version pins to a caret (^) range for these SDK and Axios dependencies. This allows your project to automatically receive backward-compatible updates and security patches without manual bumps. For example:

{
  "dependencies": {
    "@sap-ai-sdk/ai-api": "^2.11.0",
    "@sap-ai-sdk/orchestration": "^2.11.0",
    "axios": "^1.18.1"
  }
}

This approach reduces maintenance overhead and improves security posture.

Comment thread pr-review/package.json Outdated
Comment on lines +34 to +43
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.1.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.62.0",

@github-actions github-actions Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

DevDependencies have been updated to newer patch versions, but you might simplify upgrades by using caret (^) version ranges here as well. It ensures you pick up minor and patch fixes automatically. For instance:

- "@types/node": "24.13.2"
+ "@types/node": "^24.13.2"
- "@vercel/ncc": "0.44.0"
+ "@vercel/ncc": "^0.44.0"
- "eslint-plugin-sonarjs": "4.1.0"
+ "eslint-plugin-sonarjs": "^4.1.0"
- "prettier": "3.8.4"
+ "prettier": "^3.8.4"
- "tsx": "4.22.4"
+ "tsx": "^4.22.4"
- "typescript-eslint": "8.62.0"
+ "typescript-eslint": "^8.62.0"

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.11.0",
"@sap-ai-sdk/orchestration": "2.11.0",
"axios": "1.18.1",

@github-actions github-actions Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the other package, consider using caret ranges for the bumped dependencies to receive non-breaking updates automatically. Example:

{
  "dependencies": {
    "@sap-ai-sdk/ai-api": "^2.11.0",
    "@sap-ai-sdk/orchestration": "^2.11.0",
    "axios": "^1.18.1"
  }
}

Comment thread pr-summary/package.json Outdated
Comment on lines +33 to +42
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"@types/node": "24.13.2",
"@vercel/ncc": "0.44.0",
"eslint": "9.39.4",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.1.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.8.4",
"tsx": "4.22.4",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.62.0",

@github-actions github-actions Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Align devDependencies with caret ranges to reduce manual version management. For example:

- "@types/node": "24.13.2"
+ "@types/node": "^24.13.2"
- "@vercel/ncc": "0.44.0"
+ "@vercel/ncc": "^0.44.0"
- "eslint-plugin-sonarjs": "4.1.0"
+ "eslint-plugin-sonarjs": "^4.1.0"
- "prettier": "3.8.4"
+ "prettier": "^3.8.4"
- "tsx": "4.22.4"
+ "tsx": "^4.22.4"
- "typescript-eslint": "8.62.0"
+ "typescript-eslint": "^8.62.0"

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 09e481d to b6724aa Compare June 24, 2026 08:52
@github-actions

github-actions Bot commented Jun 24, 2026

Copy link
Copy Markdown

Dependency versions have been bumped across both pr-review and pr-summary packages to incorporate the latest AI SDK, HTTP client, and development tooling releases. These updates bring in minor feature improvements, bug fixes, and security patches without altering end-user functionality.

Walkthrough

  • Chore: Upgraded @sap-ai-sdk/ai-api and @sap-ai-sdk/orchestration from 2.10.0 to 2.12.0
  • Chore: Updated axios from 1.16.1 to 1.18.1 for improved request handling
  • Chore: Bumped devDependencies (@types/node, @vercel/ncc, eslint-plugin-sonarjs, prettier, tsx, typescript-eslint) to their latest patch versions for toolchain stability and code quality enhancements

Model: o4-mini-2025-04-16 | Prompt Tokens: 1070 | Completion Tokens: 709 | Diff Range: 09e481d...b6724aa

github-actions[bot]
github-actions Bot reviewed Jun 24, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We’ve put together a supportive AI-assisted review of your code. These suggestions are ideas, not set in stone. Feel free to pick what suits your project. You’re the expert—AI is here to help you shine.
Model: o4-mini-2025-04-16 | Prompt Tokens: 1046 | Completion Tokens: 2706 | Diff Range: 09e481d...b6724aa

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +25
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.12.0",
"@sap-ai-sdk/orchestration": "2.12.0",
"axios": "1.18.1",

@github-actions github-actions Bot Jun 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You’re currently pinning dependencies to exact versions, which can lead to manual updates for every minor or patch release. Consider using caret (^) ranges in your package.json to automatically receive non-breaking updates. For example:

"dependencies": {
  "@sap-ai-sdk/ai-api": "^2.12.0",
  "@sap-ai-sdk/orchestration": "^2.12.0",
  "axios": "^1.18.1"
}

Comment thread pr-review/package.json Outdated
Comment on lines 20 to 28
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.12.0",
"@sap-ai-sdk/orchestration": "2.12.0",
"axios": "1.18.1",
"minimatch": "10.2.5",
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Jun 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pr-review and pr-summary share many of the same dependencies at the same versions. In a monorepo setup, you can extract common dependencies into the root package.json and leverage workspaces to avoid duplication, simplify version management, and ensure consistency across packages. For example:

{
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "@sap-ai-sdk/ai-api": "^2.12.0",
    "@sap-ai-sdk/orchestration": "^2.12.0",
    "axios": "^1.18.1"
  }
}

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.12.0",
"@sap-ai-sdk/orchestration": "2.12.0",
"axios": "1.18.1",

@github-actions github-actions Bot Jun 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You’re currently pinning dependencies to exact versions, which can lead to manual updates for every minor or patch release. Consider using caret (^) ranges in your package.json to automatically receive non-breaking updates. For example:

"dependencies": {
  "@sap-ai-sdk/ai-api": "^2.12.0",
  "@sap-ai-sdk/orchestration": "^2.12.0",
  "axios": "^1.18.1"
}

Comment thread pr-summary/package.json Outdated
Comment on lines 19 to 27
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"axios": "1.16.1",
"@sap-ai-sdk/ai-api": "2.12.0",
"@sap-ai-sdk/orchestration": "2.12.0",
"axios": "1.18.1",
"minimatch": "10.2.5",
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Jun 24, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pr-summary and pr-review share many of the same dependencies at the same versions. In a monorepo setup, you can extract common dependencies into the root package.json and leverage workspaces to avoid duplication, simplify version management, and ensure consistency across packages. For example:

{
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "@sap-ai-sdk/ai-api": "^2.12.0",
    "@sap-ai-sdk/orchestration": "^2.12.0",
    "axios": "^1.18.1"
  }
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 90ea89d to 5a6ff08 Compare August 5, 2026 11:37
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

This patch modernizes the CI setup by updating GitHub Actions for source/release checkout and Node environment provisioning, and aligns package dependencies in the pr-summary and pr-review modules with their latest minor/patch releases. These maintenance changes keep workflows and tooling in sync with upstream improvements and security fixes.

Walkthrough

  • Chore: Upgraded actions/checkout to v7.0.1 and actions/setup-node to v6.5.0 across build and code-quality workflows.
  • Chore: Bumped core libraries (@octokit plugins, SAP AI SDK, axios, minimatch) in both pr-summary and pr-review for enhanced reliability.
  • Chore: Updated dev dependencies (ESLint, Prettier, TypeScript, ncc, tsx) to current versions for consistent linting and builds.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 1211 | Diff Range: 90ea89d...5a6ff08

github-actions[bot]
github-actions Bot reviewed Aug 5, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello, I took a look at your code with a little help from AI and added some suggestions. Feel free to pick and choose what makes sense—you know your project best. AI is here to help, and you’re in charge of deciding what works for you.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 2554 | Diff Range: 90ea89d...5a6ff08

Comment thread pr-review/package.json
Comment on lines +20 to +21
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use semver ranges instead of pinning exact versions. Pinning to exact versions ("8.1.1") forces a manual bump for every non–breaking release. You can allow non–breaking updates automatically by using a caret range (^). For example:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5"

Comment thread pr-summary/package.json
Comment on lines +19 to +20
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use semver ranges instead of pinning exact versions. Pinning to exact versions ("8.1.1") forces a manual bump for every non–breaking release. You can allow non–breaking updates automatically by using a caret range (^). For example:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5"

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +24
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similarly, the SAP AI SDK packages are pinned exactly, which will require manual updates on every patch. Consider switching to caret ranges:

"@sap-ai-sdk/ai-api": "^2.13.0",
"@sap-ai-sdk/orchestration": "^2.13.0"

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +23
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similarly, the SAP AI SDK packages are pinned exactly, which will require manual updates on every patch. Consider switching to caret ranges:

"@sap-ai-sdk/ai-api": "^2.13.0",
"@sap-ai-sdk/orchestration": "^2.13.0"

Comment thread pr-review/package.json
Comment on lines -33 to +36
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There’s a lot of duplication in devDependencies across both package.json files. To keep versions in sync and reduce maintenance overhead, consider using npm workspaces or moving shared devDependencies into a root-level package.json. This centralizes version management and prevents drift.

Comment thread pr-summary/package.json
Comment on lines -32 to +35
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There’s a lot of duplication in devDependencies across both package.json files. To keep versions in sync and reduce maintenance overhead, consider using npm workspaces or moving shared devDependencies into a root-level package.json. This centralizes version management and prevents drift.

Comment thread pr-review/package.json
Comment on lines 17 to 46
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"
},
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.2.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.9.6",
"tsx": "4.23.7",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"
}
}

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For reproducible installs and to avoid noisy diffs in package.json when dependencies change, commit the generated lockfile (package-lock.json or yarn.lock) to version control. This also speeds up CI installs by caching exact dependency trees.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 5a6ff08 to 9201c38 Compare August 5, 2026 15:51
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

CI/CD workflows have been updated to use the latest GitHub Actions (actions/checkout v7.0.1, actions/setup-node v6.5.0) and package dependencies in both pr-summary and pr-review have been bumped to their newest minor versions. These upgrades enhance build stability, performance, and security while ensuring compatibility with the latest tools.

Walkthrough

  • Chore: Upgraded actions/checkout to v7.0.1 and actions/setup-node to v6.5.0 in build and code-quality pipelines.
  • Chore: Bumped Octokit plugins and SAP AI SDK modules in pr-summary and pr-review for improved API reliability.
  • Chore: Updated development tooling (ESLint, Prettier, tsx, TypeScript ESLint plugin, @vercel/ncc) to leverage the latest fixes and features.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 777 | Diff Range: 5a6ff08...9201c38

github-actions[bot]
github-actions Bot reviewed Aug 5, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I’m happy to share friendly feedback on your code backed by AI guidance. These suggestions come from patterns in the data, not absolute certainties, so feel free to adopt what aligns with your style. You’re in charge of every choice and AI is here simply to support you.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 4370 | Diff Range: 5a6ff08...9201c38

Comment thread pr-review/package.json
Comment on lines 17 to 30
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Multiple dependencies are duplicated between pr-review and pr-summary. Extract shared dependencies to the monorepo root using npm/yarn workspaces to avoid duplication:

// root package.json
{
  "private": true,
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "axios": "^1.16.1",
    "@actions/core": "^3.0.1",
    "@actions/github": "^9.1.1",
    "@octokit/action": "^7.0.2",
    "@octokit/plugin-retry": "^8.1.1",
    "@octokit/plugin-throttling": "^11.0.5",
    "@octokit/webhooks": "^13.9.1",
    "@sap-ai-sdk/ai-api": "^2.13.0",
    "@sap-ai-sdk/orchestration": "^2.13.0",
    "minimatch": "^10.2.6",
    "mollitia": "^0.2.0",
    "octokit": "^5.0.5",
    "parse-diff": "^0.12.0",
    "zod": "^4.4.3"
  }
}

Comment thread pr-review/package.json
Comment on lines -20 to +26
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many dependencies are pinned to exact patch versions, which prevents automatic ingestion of non-breaking fixes. Consider using semver ranges (^ for major.minor.patch or ~ for minor.patch) to allow safe updates:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "~11.0.5",
"@sap-ai-sdk/ai-api": "^2.13.0",
"minimatch": "~10.2.6"

Comment thread pr-review/package.json
Comment on lines 17 to 32
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"
},
"devDependencies": {

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sort dependencies and devDependencies alphabetically to improve readability and reduce merge conflicts:

"dependencies": {
  "@actions/core": "^3.0.1",
  "@actions/github": "^9.1.1",
  "@octokit/action": "^7.0.2",
  "@octokit/plugin-retry": "^8.1.1",
  "@octokit/plugin-throttling": "^11.0.5",
  "@octokit/webhooks": "^13.9.1",
  "@sap-ai-sdk/ai-api": "^2.13.0",
  "@sap-ai-sdk/orchestration": "^2.13.0",
  "axios": "^1.16.1",
  "minimatch": "^10.2.6",
  "mollitia": "^0.2.0",
  "octokit": "^5.0.5",
  "parse-diff": "^0.12.0",
  "zod": "^4.4.3"
}

Comment thread pr-summary/package.json
Comment on lines 16 to 29
"dependencies": {
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As with pr-review, pr-summary shares almost identical dependencies. Centralize shared deps at the workspace root to ensure consistency and reduce duplication:

// root package.json
{
  "private": true,
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@actions/github": "^9.1.1",
    "@octokit/action": "^7.0.2",
    "@octokit/plugin-retry": "^8.1.1",
    "@octokit/plugin-throttling": "^11.0.5",
    "@octokit/webhooks": "^13.9.1",
    "@sap-ai-sdk/ai-api": "^2.13.0",
    "@sap-ai-sdk/orchestration": "^2.13.0",
    "axios": "^1.16.1",
    "minimatch": "^10.2.6",
    "mollitia": "^0.2.0",
    "octokit": "^5.0.5",
    "parse-diff": "^0.12.0",
    "zod": "^4.4.3"
  }
}

Comment thread pr-summary/package.json
Comment on lines -19 to +25
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Avoid pinning to exact patch versions to benefit from non-breaking fixes. Use semver ranges in dependencies:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "~11.0.5",
"@sap-ai-sdk/ai-api": "^2.13.0",
"minimatch": "~10.2.6"

Comment thread pr-summary/package.json
Comment on lines 31 to 44
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.2.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.9.6",
"tsx": "4.23.8",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"
}

@github-actions github-actions Bot Aug 5, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sort devDependencies alphabetically to maintain a consistent ordering and reduce merge conflicts:

"devDependencies": {
  "@eslint/js": "^9.39.5",
  "@types/node": "^24.13.3",
  "@vercel/ncc": "^0.44.1",
  "eslint": "^9.39.5",
  "eslint-plugin-import": "^2.32.0",
  "eslint-plugin-sonarjs": "^4.2.0",
  "eslint-plugin-unicorn": "^64.0.0",
  "prettier": "^3.9.6",
  "tsx": "^4.23.8",
  "typescript": "^6.0.3",
  "typescript-eslint": "^8.66.0",
  "yaml": "^2.9.0"
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 9201c38 to eec7e32 Compare August 6, 2026 09:07
@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

This update refreshes CI pipelines and package dependencies across the repository, ensuring the latest GitHub Actions components and library versions are in use for more reliable builds and security patches.

Walkthrough

  • Chore: Upgraded actions/checkout to v7.0.1 and actions/setup-node to v6.5.0 in all workflows for improved stability.
  • Chore: Bumped core dependencies in pr-review and pr-summary packages: @octokit plugins, @sap-ai-sdk modules, minimatch, and axios.
  • Chore: Updated devDependencies including ESLint, TypeScript, Prettier, tsx, and Vercel ncc to their latest patch releases.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 610 | Diff Range: 9201c38...eec7e32

github-actions[bot]
github-actions Bot reviewed Aug 6, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This AI-assisted code review aims to offer friendly suggestions and insights. Some recommendations are based on predictions rather than certainties so trust what makes sense for you. You guide the direction—AI support is here to enhance your expertise, not override your choices.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 3070 | Diff Range: 9201c38...eec7e32

Comment thread pr-review/package.json
Comment on lines 17 to 30
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using semver ranges (e.g., caret ^ or tilde ~) instead of pinning to exact patch versions. This allows you to automatically receive non-breaking updates and security patches without manual version bumps.

For example:

{
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@actions/github": "^9.1.1",
    "@octokit/plugin-retry": "^8.1.1",
    "@octokit/plugin-throttling": "^11.0.5",
    "@sap-ai-sdk/ai-api": "^2.13.0",
    "minimatch": "^10.2.6"
    // …
  }
}

Comment thread pr-summary/package.json
Comment on lines 16 to 29
"dependencies": {
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similarly, in pr-summary/package.json you may want to switch to semver ranges instead of exact pins. This ensures you pick up backwards-compatible fixes automatically.

{
  "dependencies": {
    "@actions/core": "^3.0.1",
    "@octokit/plugin-retry": "^8.1.1",
    "@sap-ai-sdk/orchestration": "^2.13.0",
    "minimatch": "^10.2.6"
    // …
  }
}

Comment thread pr-review/package.json
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like you’re including the old standalone octokit (v5.0.5) alongside @octokit/* packages. If you’re not using any APIs from that legacy package, you can remove it to reduce bundle size and avoid confusion:

-  "octokit": "5.0.5",

Comment thread pr-review/package.json
Comment on lines -33 to 37
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",

@github-actions github-actions Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since both pr-review and pr-summary share almost identical dev dependencies, you might consider hoisting these into a root workspace package.json. This centralizes version management and reduces duplication:

// root package.json
{
  "private": true,
  "workspaces": ["pr-review", "pr-summary"],
  "devDependencies": {
    "eslint": "^9.39.5",
    "@vercel/ncc": "^0.44.1",
    "typescript": "^6.0.3",
    "prettier": "^3.9.6"
    // …
  }
}

Comment thread pr-review/package.json
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"
}
}

@github-actions github-actions Bot Aug 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add an engines field to specify the supported Node.js version range. This helps contributors and CI pipelines use a compatible runtime:

{
  "engines": {
    "node": ">=16 <20"
  }
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from eec7e32 to 117e147 Compare August 7, 2026 04:59
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown

Core CI workflows and package dependencies have been bumped to their latest patch versions to improve stability, leverage bug fixes, and ensure compatibility.

Walkthrough

  • Chore: Upgraded GitHub Actions checkout to v7.0.1 and setup-node to v6.5.0 across build and code-quality workflows.
  • Chore: Updated core dependencies in pr-review and pr-summary (Octokit plugins, SAP AI SDK, minimatch) to their latest patch releases.
  • Chore: Bumped devDependencies (ESLint, TypeScript, ncc, prettier, tsx, eslint-plugin-sonarjs) for improved linting and build processes.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 739 | Diff Range: eec7e32...117e147

github-actions[bot]
github-actions Bot reviewed Aug 7, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Your AI-powered code review shares helpful suggestions while leaving the final call in your hands. Some observations are educated guesses rather than certainties. Feel free to incorporate ideas that resonate with you and discard or adapt those that don’t align with your vision. You’re in charge—AI is here to support.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 4698 | Diff Range: eec7e32...117e147

Comment thread pr-review/package.json
Comment on lines -20 to +21
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You’ve updated the Octokit plugins to newer patch versions. To allow non-breaking patch updates in the future and maintain consistency, consider using caret (^) version ranges. Also, after bumping, verify that request retrying and throttling behavior remain unchanged.

Example:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-review/package.json Outdated
Comment on lines +23 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bumping the @sap-ai-sdk packages from 2.10.0 to 2.13.0 can include new features or breaking changes. Ensure that any orchestration or AI API usage is still compatible. You may want to run the SDK’s migration guide or tests after this upgrade. Consider also switching to caret ranges:

"@sap-ai-sdk/ai-api": "^2.13.0",
"@sap-ai-sdk/orchestration": "^2.13.0",

Comment thread pr-review/package.json
"@sap-ai-sdk/orchestration": "2.13.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For the minimatch patch bump, consider using a caret range so that future non-breaking fixes can be pulled in automatically:

"minimatch": "^10.2.6",

Comment thread pr-review/package.json
Comment on lines -33 to 44
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.2.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.9.6",
"tsx": "4.23.10",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The development dependencies have multiple manual version bumps. To improve maintainability, you can sort these entries alphabetically and automate updates with npm-check-updates (npx npm-check-updates -u) or Dependabot. Here's how a sorted snippet might look:

"devDependencies": {
  "@eslint/js": "^9.39.5",
  "@types/node": "^24.13.3",
  "@vercel/ncc": "^0.44.1",
  "eslint": "^9.39.5",
  "eslint-plugin-import": "2.32.0",
  "eslint-plugin-sonarjs": "^4.2.0",
  "eslint-plugin-unicorn": "64.0.0",
  "prettier": "^3.9.6",
  "tsx": "^4.23.10",
  "typescript": "6.0.3",
  "typescript-eslint": "^8.66.0",
  "yaml": "2.9.0"
}

Comment thread pr-review/package.json Outdated
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The @vercel/ncc bump from 0.38 to 0.44 includes significant fixes and performance changes. Confirm your build output remains correct, especially if you rely on --source-map or other flags. If needed, adjust your build script accordingly.

Comment thread pr-review/package.json Outdated
"tsx": "4.23.10",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like you’re using typescript-eslint, which is not the official package name. Typically you use @typescript-eslint/eslint-plugin (and/or @typescript-eslint/parser). Please verify the intended package and update:

"@typescript-eslint/eslint-plugin": "^8.66.0",

Comment thread pr-summary/package.json
Comment on lines -19 to +20
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mirrors the Octokit plugin updates here—consider caret ranges for future patch upgrades and verify retry/throttling behavior:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-summary/package.json Outdated
Comment on lines +22 to +23
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.13.0",
"@sap-ai-sdk/orchestration": "2.13.0",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same note for the @sap-ai-sdk packages: ensure compatibility with version 2.13.0 and consider caret ranges:

"@sap-ai-sdk/ai-api": "^2.13.0",
"@sap-ai-sdk/orchestration": "^2.13.0",

Comment thread pr-summary/package.json
Comment on lines -32 to 43
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.2.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.9.6",
"tsx": "4.23.10",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

DevDependencies updates are duplicated across package.json files. To avoid drift, consider centralizing shared deps in a workspace root or using a single source of truth. Automation with Dependabot or npm-check-updates can keep them in sync.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 117e147 to 6da3dfc Compare August 7, 2026 09:43
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown

This change updates CI pipelines to the newest GitHub Action versions for checkout (v7.0.1) and Node setup (v6.5.0), ensuring more reliable builds and code-quality checks. Both pr-review and pr-summary packages have their dependencies bumped—Octokit plugins, SAP AI SDK, linting, build tools, and TypeScript—aligning with the latest fixes and performance enhancements.

Walkthrough

  • Chore: Upgraded actions/checkout to v7.0.1 and actions/setup-node to v6.5.0 across build and code-quality workflows.
  • Chore: Bumped pr-review and pr-summary dependencies (Octokit, SAP AI SDK, minimatch) and dev tools (ESLint, Prettier, TypeScript, etc.) to the latest patch/minor releases.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 1097 | Diff Range: 117e147...6da3dfc

github-actions[bot]
github-actions Bot reviewed Aug 7, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We’re here to support your coding by offering AI-enhanced feedback. These suggestions are based on predictions rather than absolutes, so feel free to adapt or discard them as you see fit. Ultimately your expertise guides the final outcome and AI is just a helpful tool.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 3572 | Diff Range: 117e147...6da3dfc

Comment thread pr-review/package.json
Comment on lines -20 to +21
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using semantic version ranges (e.g., caret ^) instead of pinning exact versions. This allows non-breaking updates without manual bumps.

For example, change:

"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

to:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-summary/package.json
Comment on lines -19 to +20
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similarly here, switch to caret ranges to automatically pick up patch and minor fixes while preventing unexpected breaking changes:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-review/package.json
Comment on lines 17 to 30
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependencies appear unsorted, which can lead to merge conflicts and harder diffs. Alphabetical ordering improves readability. For example:

 {
-  "dependencies": {
-    "@actions/core": "3.0.1",
-    "@actions/github": "9.1.1",
+  "dependencies": {
+    "@actions/core": "^3.0.1",
+    "@actions/github": "^9.1.1",
     ...
 }

Comment thread pr-review/package.json
Comment on lines -33 to +36
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both pr-review and pr-summary share identical devDependencies. To DRY up and maintain consistency, consider hoisting these into a root-level package.json using workspaces:

// root package.json
{
  "private": true,
  "workspaces": ["pr-review", "pr-summary"],
  "devDependencies": {
    "@eslint/js": "^9.39.5",
    "eslint": "^9.39.5",
    "@types/node": "^24.13.3",
    "@vercel/ncc": "^0.44.1",
    "eslint-plugin-sonarjs": "^4.2.0",
    "prettier": "^3.9.6",
    "tsx": "^4.23.10",
    "typescript-eslint": "^8.66.0"
  }
}

Comment thread pr-review/package.json
Comment on lines 17 to 46
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"
},
"devDependencies": {
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",
"eslint-plugin-import": "2.32.0",
"eslint-plugin-sonarjs": "4.0.3",
"eslint-plugin-sonarjs": "4.2.0",
"eslint-plugin-unicorn": "64.0.0",
"prettier": "3.8.3",
"tsx": "4.22.3",
"prettier": "3.9.6",
"tsx": "4.23.10",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",
"yaml": "2.9.0"
}
}

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Now that you’ve upgraded and hoisted dependencies, be sure to regenerate and commit lockfiles to keep CI and local installs in sync:

# from repo root
dpnpm install   # or npm/yarn install depending on your setup
git add pr-review/package-lock.json pr-summary/package-lock.json

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 6da3dfc to 1aca901 Compare August 7, 2026 13:05
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown

This update bumps GitHub Actions to their latest patch releases and aligns package dependencies with newer versions. Workflows now use actions/checkout@v7.0.1 and actions/setup-node@v6.5.0. Both the pr-review and pr-summary packages receive minor version upgrades for Octokit plugins, SAP AI SDK modules, ESLint tooling, TypeScript, and associated utilities.

Walkthrough

  • Chore: Upgraded actions/checkout from v7.0.0 to v7.0.1 across all workflows
  • Chore: Updated actions/setup-node from v6.4.0 to v6.5.0 for PR summary and review
  • Chore: Bumped dependencies in pr-review and pr-summary (Octokit, SAP AI SDK, minimatch, axios)
  • Chore: Updated devDependencies (ESLint, TypeScript, Prettier, TSX, ncc, plugins)

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 405 | Diff Range: 6da3dfc...1aca901

github-actions[bot]
github-actions Bot reviewed Aug 7, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here’s a gentle code review with AI support. Some observations are educated guesses, not definitive facts, so adopt the suggestions that resonate with you. You stay in charge—AI is here to help and empower your choices.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 4610 | Diff Range: 6da3dfc...1aca901

Comment thread pr-review/package.json
Comment on lines -20 to +21
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using caret (^) version ranges to automatically include future patch updates. This reduces the need for manual bumps for each patch release.

Example:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-review/package.json Outdated
"tsx": "4.23.11",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Identify and correct the invalid typescript-eslint package. The official scoped packages are @typescript-eslint/parser and @typescript-eslint/eslint-plugin. Update your devDependencies accordingly:

"devDependencies": {
  "@typescript-eslint/parser": "^8.66.0",
  "@typescript-eslint/eslint-plugin": "^8.66.0",
  // other entries
}

Comment thread pr-review/package.json
Comment on lines 17 to 30
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sort dependencies alphabetically to improve readability and maintain consistent ordering. For example:

"dependencies": {
  "@actions/core": "3.0.1",
  "@actions/github": "9.1.1",
  "@octokit/plugin-retry": "8.1.1",
  // ... remaining entries in order
}

Comment thread pr-summary/package.json
Comment on lines -19 to +20
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using caret (^) version ranges to automatically include future patch updates. This reduces the need for manual bumps for each patch release.

Example:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-summary/package.json Outdated
"tsx": "4.23.11",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.66.0",

@github-actions github-actions Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Identify and correct the invalid typescript-eslint package. The official scoped packages are @typescript-eslint/parser and @typescript-eslint/eslint-plugin. Update your devDependencies accordingly:

"devDependencies": {
  "@typescript-eslint/parser": "^8.66.0",
  "@typescript-eslint/eslint-plugin": "^8.66.0",
  // other entries
}

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 1aca901 to 95bf796 Compare August 10, 2026 04:24
@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown

This update upgrades CI workflows to use the latest patch releases of the checkout and Node setup actions, and bumps a range of dependencies in the pr-review and pr-summary packages for improved stability and compatibility.

Walkthrough

  • Chore: Updated actions/checkout to v7.0.1 and actions/setup-node to v6.5.0 in build and code-quality workflows
  • Chore: Bumped core and dev dependencies (Octokit, SAP AI SDK, ESLint, TypeScript, Prettier, TSX, and related plugins) in both pr-review and pr-summary packages to their latest patch versions

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 469 | Diff Range: 1aca901...95bf796

github-actions[bot]
github-actions Bot reviewed Aug 10, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You’re receiving a supportive code review enhanced by AI assistance. These suggestions are intended to guide you, but they’re not absolute truths—feel free to adopt what fits your style and needs. You remain in control of all decisions, with AI here to offer extra perspective.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 3310 | Diff Range: 1aca901...95bf796

Comment thread pr-review/package.json
Comment on lines 17 to 30
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I notice that all dependencies are pinned to exact versions. To allow non-breaking patch and minor updates automatically (and reduce manual bumps), consider using caret (^) version ranges. For example:

"dependencies": {
  "@octokit/plugin-retry": "^8.1.1",
  "@octokit/plugin-throttling": "^11.0.5",
  "@sap-ai-sdk/ai-api": "^2.14.0",
  "minimatch": "^10.2.6",
  // ...other dependencies
}

Comment thread pr-review/package.json
Comment on lines -23 to +24
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The @sap-ai-sdk/ai-api and @sap-ai-sdk/orchestration packages have been bumped from 2.10.0 to 2.14.0 (a four‐minor‐version jump). Please verify there are no breaking changes introduced in these releases and run your full test suite against the new SDK. If you encounter issues, consider locking to the previous minor version until you can address any API changes.

Comment thread pr-summary/package.json
Comment on lines 16 to 29
"dependencies": {
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the other package, dependencies here are pinned exactly. Adopting caret (^) ranges will help automatically pick up non-breaking updates. For example:

"dependencies": {
  "@octokit/plugin-retry": "^8.1.1",
  "@octokit/plugin-throttling": "^11.0.5",
  "@sap-ai-sdk/orchestration": "^2.14.0",
  "minimatch": "^10.2.6",
  // ...other dependencies
}

Comment thread pr-summary/package.json
Comment on lines -22 to +23
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The SDK dependencies were upgraded from 2.10.0 to 2.14.0. Ensure compatibility by running all relevant tests and reviewing the SDK changelog for any breaking changes. If needed, lock to a specific minor version until you’ve adapted your code.

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 95bf796 to bd14e30 Compare August 10, 2026 19:49
@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown

This update standardizes and modernizes the CI pipelines by bumping core GitHub Actions and Node setup versions, while also refreshing key dependencies across the AI-assisted PR tools. It ensures compatibility with recent SDK releases, patches bugs, and improves build stability and code quality.

Walkthrough

  • Chore: Upgraded CI actions to checkout@7.0.1 and setup-node@6.5.0 for more reliable and faster workflows.
  • Chore: Bumped AI SDKs, Octokit plugins, ESLint, Prettier, TSX, and TypeScript toolchain to latest patches for bug fixes and compatibility.
  • Refactor: Harmonized build and code-quality workflow steps and paths to improve maintainability and consistency.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 1388 | Diff Range: 95bf796...bd14e30

github-actions[bot]
github-actions Bot reviewed Aug 10, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I’ve given your code a friendly AI-powered review. These suggestions are based on predictive insights rather than certainties, so feel free to choose what resonates with your approach. You remain the decision maker—AI simply offers a helping hand.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 2479 | Diff Range: 95bf796...bd14e30

Comment thread pr-review/package.json
Comment on lines -20 to +21
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To reduce churn on every patch release and allow backcompat bugfixes to flow through, consider using caret ranges (^) instead of exact pins. This way you get minor/patch updates automatically without frequent manual bumps:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-summary/package.json
Comment on lines -19 to +20
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same suggestion here: switch to caret ranges for these two packages so that patch-level fixes are picked up automatically between releases:

"@octokit/plugin-retry": "^8.1.1",
"@octokit/plugin-throttling": "^11.0.5",

Comment thread pr-review/package.json
Comment on lines -33 to +36
"@eslint/js": "9.39.4",
"@types/node": "24.12.4",
"@vercel/ncc": "0.38.4",
"eslint": "9.39.4",
"@eslint/js": "9.39.5",
"@types/node": "24.13.3",
"@vercel/ncc": "0.44.1",
"eslint": "9.39.5",

@github-actions github-actions Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You have the same ESLint-related devDependencies in both sub-packages. To avoid version drift and simplify updates, consider moving your shared lint setup into a central config (e.g. a top-level eslint-config-myorg) and extending it in each package. Example of a slimmed-down root .eslintrc.js:

module.exports = {
  root: true,
  extends: [
    'eslint:recommended',
    'plugin:import/recommended',
    'plugin:sonarjs/recommended',
    'plugin:unicorn/recommended'
  ],
};

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from bd14e30 to 973d734 Compare August 12, 2026 01:34
@github-actions

github-actions Bot commented Aug 12, 2026

Copy link
Copy Markdown

This update refreshes CI workflows by bumping GitHub Actions components and synchronizes dependency versions across the pr-summary and pr-review packages. It ensures the build and code-quality jobs leverage the latest patches for checkout and Node setup, and that SDKs, tooling, and linters stay up to date for reliability and maintainability.

Walkthrough

  • Chore: Upgrade actions/checkout from v7.0.0 to v7.0.1 and actions/setup-node from v6.4.0 to v6.5.0.
  • Chore: Bump Octokit plugins and SAP AI SDK (ai-api, orchestration) to current releases.
  • Chore: Refresh devDependencies (ESLint, Prettier, ncc, tsx, typescript-eslint) in both packages.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 705 | Diff Range: bd14e30...973d734

@renovate
renovate Bot force-pushed the renovate/non-major-dependencies branch from 973d734 to ff66c37 Compare August 13, 2026 04:49
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown

Updated CI workflows now point to the latest checkout and Node setup actions, and both PR summary and review packages have been upgraded to current dependency versions for improved stability and maintenance.

Walkthrough

  • Chore: Updated GitHub Actions (checkout → v7.0.1, setup-node → v6.5.0) in build and code-quality pipelines.
  • Chore: Bumped core libraries and SDKs (Octokit plugins, SAP AI SDK), along with dev tooling (TypeScript, ESLint, Prettier, ncc, tsx) in pr-summary and pr-review.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2615 | Completion Tokens: 786 | Diff Range: 973d734...ff66c37

github-actions[bot]
github-actions Bot reviewed Aug 13, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a friendly code review supported by AI. The suggestions come from predictive analysis and may not apply in every situation. Feel free to adopt what resonates with your style and goals. Your expertise and judgment set the direction—AI is here to offer guidance and support.

Model: o4-mini-2025-04-16 | Prompt Tokens: 2038 | Completion Tokens: 3378 | Diff Range: bd14e30...ff66c37

Comment thread pr-review/package.json
Comment on lines -20 to +21
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updating dependencies with exact version pins can lead to more manual maintenance for patch releases. Consider using a caret (^) to automatically include minor and patch updates, improving future patch adoption:

{
  "dependencies": {
    "@octokit/plugin-retry": "^8.1.1",
    "@octokit/plugin-throttling": "^11.0.5"
  }
}

Comment thread pr-review/package.json
Comment on lines 17 to +24
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/action": "7.0.2",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I notice identical version bumps across both package.json files. To avoid duplication and drift, consider centralizing shared dependencies using npm workspaces or a shared base package.json. For example:

{
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "@sap-ai-sdk/ai-api": "^2.14.0",
    "@sap-ai-sdk/orchestration": "^2.14.0"
  }
}

Comment thread pr-review/package.json
Comment on lines 27 to 28
"mollitia": "0.2.0",
"octokit": "5.0.5",

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package octokit is on v5 and uses an unscoped name. Consider migrating to the modern scoped core package for better maintenance and features:

"dependencies": {
  "@octokit/core": "^4.0.0"
}

Comment thread pr-review/package.json
"tsx": "4.23.12",
"typescript": "6.0.3",
"typescript-eslint": "8.59.4",
"typescript-eslint": "8.67.0",

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The devDependency typescript-eslint appears unscoped and may not install the intended tools. You likely need the two official scoped packages instead:

"devDependencies": {
  "@typescript-eslint/parser": "^8.67.0",
  "@typescript-eslint/eslint-plugin": "^8.67.0"
}

Comment thread pr-review/package.json
Comment on lines 45 to 46
}
}

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After updating package.json versions, regenerate your lockfile to ensure consistency and avoid mismatches:

npm install      # regenerates package-lock.json
# or
yarn install     # regenerates yarn.lock

Comment thread pr-summary/package.json
Comment on lines 16 to 30
"dependencies": {
"@actions/core": "3.0.1",
"@actions/github": "9.1.1",
"@octokit/plugin-retry": "8.1.0",
"@octokit/plugin-throttling": "11.0.3",
"@octokit/plugin-retry": "8.1.1",
"@octokit/plugin-throttling": "11.0.5",
"@octokit/webhooks": "13.9.1",
"@sap-ai-sdk/ai-api": "2.10.0",
"@sap-ai-sdk/orchestration": "2.10.0",
"@sap-ai-sdk/ai-api": "2.14.0",
"@sap-ai-sdk/orchestration": "2.14.0",
"axios": "1.16.1",
"minimatch": "10.2.5",
"minimatch": "10.2.6",
"mollitia": "0.2.0",
"octokit": "5.0.5",
"parse-diff": "0.12.0",
"zod": "4.4.3"
},

@github-actions github-actions Bot Aug 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Similar to the pr-review package, you’re manually mirroring version bumps here. To improve maintainability, centralize common dependencies in a root-level package.json with npm workspaces:

{
  "workspaces": ["pr-review", "pr-summary"],
  "dependencies": {
    "minimatch": "^10.2.6",
    "axios": "^1.16.1"
  }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants