chore(deps)(deps): bump the all-npm-patch group with 7 updates - #171
Merged
Merged
Conversation
Bumps the all-npm-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.2` | `2.112.3` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.12.3` | | [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.4` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.9` | `4.23.12` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | Updates `@supabase/supabase-js` from 2.112.2 to 2.112.3 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js) Updates `react-resizable-panels` from 4.12.2 to 4.12.3 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.12.2...4.12.3) Updates `sonner` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](emilkowalski/sonner@v2.0.7...v2.0.8) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.4 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.4) Updates `tsx` from 4.23.9 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.9...v4.23.12) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.112.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: react-resizable-panels dependency-version: 4.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: sonner dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
github-actions
Bot
added
the
safe-automerge
dependabot
Bot
deleted the
dependabot/npm_and_yarn/all-npm-patch-69a0b4ed69
branch
August 24, 2026 17:32
ariffazil
added a commit
that referenced
this pull request
Aug 27, 2026
* chore(deps): merge safe-automerge PR #171 Bumps the all-npm-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.2` | `2.112.3` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.12.3` | | [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.4` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.9` | `4.23.12` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | Updates `@supabase/supabase-js` from 2.112.2 to 2.112.3 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js) Updates `react-resizable-panels` from 4.12.2 to 4.12.3 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.12.2...4.12.3) Updates `sonner` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](emilkowalski/sonner@v2.0.7...v2.0.8) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.4 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.4) Updates `tsx` from 4.23.9 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.9...v4.23.12) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.112.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: react-resizable-panels dependency-version: 4.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: sonner dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): merge safe-automerge PR #172 Bumps the all-npm-minor group with 4 updates: [@hookform/resolvers](https://github.com/react-hook-form/resolvers), [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@hookform/resolvers` from 5.8.0 to 5.9.1 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.8.0...v5.9.1) Updates `input-otp` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/guilhermerodz/input-otp/releases) - [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md) - [Commits](https://github.com/guilhermerodz/input-otp/commits/v1.5.0/packages/input-otp) Updates `lucide-react` from 1.31.0 to 1.33.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react) Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react) --- updated-dependencies: - dependency-name: "@hookform/resolvers" dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: input-otp dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: lucide-react dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * docs(readme): DISPLAY_ONLY ceiling in first fold AAA shows state and queues A2A. It never judges. It never executes. Matches live cockpit, llms.txt, and Observatory. * docs(llms): organ table matches live Holy 8 and DISPLAY_ONLY Stop advertising 13 canonical kernel tools and 9 AAA MCP tools. AAA is A2A, not an MCP organ. Door is /mcp. * feat(cockpit): amanah board state + supply-chain pin gate (E-2) + manifest/skill truth-sync - boards/amanah.{jsonl,py}: runtime work-order state - instructions/gate-promotion.md + registries/supply_chain_pins.json + scripts/supply_chain_gate.py: E-2 pin gate, fail-closed, 7 configs watched, 11 pins - security/skill-manifest.json: truth-sync -1144/+438 (stop advertising retired skills) - README.md + public/llms.txt: DISPLAY_ONLY first fold (converged with origin/main 67cab47/f46d784a) - index.html/llms.json/manifest.json/public/*: regen sync - QWEN_INIT_PROMPT.md, skills/pgvector-sovereign-rag/SKILL.md, src/webmcp.ts: sync fixes - README_SKELETON.md: ZEN README draft (untracked->tracked, F13-approved design) F13 GO 2026-08-25 ('ok go and execute all') — zero-velocity session, automated * docs(readme): ZEN first-fold — DISPLAY_ONLY institution hero; manifest re-stamped live - Hero: 'Display state. Never judge. Never execute.' + four-noun card link - Old full README preserved verbatim: docs/README-FULL.md - [VERIFY] slots closed with live witnesses: amanah board has no execute verb (boards/amanah.py read); :3001 degraded = operator sensor data, not machine - SOT-MANIFEST re-stamped v2026.08.25, live_commit c0b3b98 F13 GO 2026-08-25 ('ok go and execute all') * boards(amanah): queue DID session-key rotation risk (AMH item) — extractive margin from zen-audit F13 GO 2026-08-25 ('audit and zen all') * boards(amanah): queue HERMES Tier-2 hardening + dual-home unification (F13 gates) * chore(wrap): ZEN README fold 2026-08-25 F8 GENIUS, F11 AUDIT, F4 CLARITY. - README.md: ZEN first-fold compression Removed stale SOT-MANIFEST fields (qwen_code/glm_shadow live-resolved) Full technical reference preserved at docs/README-FULL.md Note: audio/ + knowledge-graph/voice-sample/ untracked. i-arif V9 voice artifacts are F13 SOVEREIGN BOUND — DO NOT commit. Present to F13 for sovereign disposition. Receipt: kimi-code/FI-008 autonomous T1 wrap No F13 sovereign action. * refactor(memory): streamline canonical carry_forward, modular intelligence and archive theatre * seal(carry_forward): update sealed state with cron live receipt and clean federation * seal(final): ratify sealed carry_forward state (delta_s <= 0) * feat: MODEL_SHADOWS.md — behavioral shadow ledger for federation model governance Hypothesis-ledger (not truth-ledger) tracking how models fail under pressure. Two-class taxonomy: operational (streaming, token budget, format) vs cognitive (scope diffusion, execution gravity, caution attractor). Entries: MiniMax-M3 (CONFIRMED), MiMo (PRIOR_ONLY), GLM-5.3 (CONFIRMED), Gemini (CONFIRMED), DeepSeek (CONFIRMED), Claude (CONFIRMED), Kimi K3 (HYPOTHESIS). Falsifiable: remove supervision → apply pressure → observe trajectory. * feat(federation): FRAME boundary alignment — Sprint 1 declaration Doctrine (SEAL 2026-08-26, F13 ratification pending): Substrate lives in state plane, not as peer sovereign surface. Identity ≠ location. Consolidate code without erasing identity. Sprint 1 deliverables (declaration phase, T1 AUTO-DO): 1. federation/organs.yaml: FRAME block updated - repo: arifOS (embedded organ) -> ariffazil/AAA - source_path: /root/FRAME -> /root/AAA/federation/frame/ - added identity_preserved block (F1 AMANAH architectural pattern) - added migration_doc pointer 2. federation/frame/.gitkeep: placeholder created for relocated code 3. federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md: full migration plan - doctrine, identity inventory, 4 sprints, reversibility protocol - operational risks + mitigations - F1 AMANAH reversibility at every step Verifications: - YAML parse: VALID - FQ: OPTIMAL (execute=4 verify=9 quotient=2.25) - All changes reversible (T1 AUTO-DO, no code/runtime/systemd touch) Next: Sprint 2 (code relocation, T1) pending F13 ratification. SEAL-976fbde5d93a4119 * feat(federation): FRAME code relocation — Sprint 2 Consolidate arifOS substrate organ into AAA state plane. Sprint 2 deliverables (T1 AUTO-DO, all reversible): - Code copy from /root/FRAME/ to /root/AAA/federation/frame/ - 26 files migrated: src/, tests/, doctrine/, data/, scripts/, .github/ - Systemd unit (frame-organ.service) - LICENSE (AGPL-3.0), Makefile, pyproject.toml - README.md, doctrine/FI_DRIFT_GOVERNANCE.md Verifications: - python3 import: 'import frame_organ' OK from new location - external imports: 0 — package is self-contained, no import rewrites needed - identity preserved: service_unit, python_package, public_port unchanged - /root/FRAME/ untouched — full rollback safety net Identity-preserving relocation: - frame-organ.service: name unchanged - :18085 endpoint: unchanged - frame_organ Python import: unchanged - org.yaml identity_preserved block declares all preservation invariants Doctrine ref: federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md Sprint 3 (systemd ExecStart swap) PENDING — requires 10s announce + F13 ratification. Sprint 4 (GitHub archive of ariffazil/FRAME) PENDING. SEAL-976fbde5d93a4119 * chore: remove codegraph.db from tracking — generated artifact (74MB) graph/codegraph.db is a generated SQLite database built by graph/indexer.py. Added to .gitignore. File remains on disk; rebuildable via indexer. * feat(federation): FRAME runtime swap — Sprint 3 Symlink bridge approach (cleaner than ExecStart path change): - /opt/frame/app/frame_organ → /root/AAA/federation/frame/src/frame_organ - systemd unit unchanged (WorkingDirectory + ExecStart) - service unit name unchanged: frame-organ.service - port unchanged: :18085 - frame_organ Python import: unchanged Systemd unit edits (minimal): - ProtectHome=yes → ProtectHome=read-only (yes bind-mounts /root to /dev/null; ReadOnlyPaths can't grant access to non-existent paths; read-only preserves /root access while keeping the security intent) - ReadOnlyPaths extended to include /root/AAA/federation/frame Verifications (all green): - systemctl status: active - /health: 200, all 6 chambers live - /frame/baseline: 10 organs with health/latency - /frame/probe: 10 healthy, 0 degraded - /frame/drift: STABLE verdict - frame_organ import: loaded from AAA canonical path Identity preservation (verified): - service_unit: frame-organ.service unchanged - python_package: frame_organ unchanged - public_port: 18085 unchanged - license: AGPL-3.0 preserved - doctrine docs: preserved Rollback safety net (preserved): - /opt/frame/app/frame_organ.bak.SPRINT3redux (original code) - /root/AAA/federation/frame/frame-organ.service.bak.pre-Sprint3 (original unit) Eureka captured: 'ProtectHome=yes bind-mounts /root to /dev/null; ReadOnlyPaths cannot grant access to non-existent paths. Use ProtectHome=read-only for surgical read access to /root while preserving the security intent.' Doctrine ref: federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md updated Sprint 4 (GitHub archive of arifazil/FRAME) PENDING — requires F13 + web UI. SEAL-976fbde5d93a4119 * docs(federation): Sprint 4 complete — FRAME archived, deprecation registered Sprint 4 status: SEAL · EXECUTED 2026-08-26 Actions completed: - FRAME README: ARCHIVED notice added (commit f9e9bdb on FRAME repo) - FRAME pushed to origin (2bef2ce..f9e9bdb master) - gh repo archive ariffazil/FRAME --yes → isArchived: true - DEPRECATION_REGISTRY.yaml: ariffazil/FRAME entry added (status: ARCHIVED) - Boundary alignment doc: status table updated (SEAL) Final state of FRAME boundary alignment (4 sprints): Sprint 1 - Declaration: SEAL · committed 0b388b6 · pushed Sprint 2 - Code relocation: SEAL · committed 7b8afbe · pushed Sprint 3 - Runtime swap: SEAL · committed 500ba27 · pushed Sprint 4 - Retire old repo: SEAL · committed f9e9bdb · archived Doctrine: substrate belongs in state plane, not as peer sovereign. Identity preserved end-to-end: systemd unit name, port, Python import, license. SEAL-976fbde5d93a4119 * feat(multimodal): register Gemini 3.7 & multimodal ecosystem, sync router & scars * feat(mcp): seal FastMCP gemini-media deployment, live verifications & path drift scar * chore(skill-consolidation): orphan skill cleanup [F2 evidence] - 283 deleted files in skills/ — orphan skills consolidated to federated mesh - Per-file rationale: /root/forge_work/2026-08-26-zen-mu/per_file_rationale.jsonl - Musyawarah: 2026-08-26-zen-mu (ARCHITECT 333-AGI + AUDITOR 555-ASI) - F13 GO received for T2 cluster [F1 AMANAH] Backup: carry_forward.json.bak-20260825T215449Z-pre-mu-zen-seal [F11 AUDIT] Sovereign lanes EXCLUDED (HERMES/lanes/private/* not in dirty state) [F2 TRUTH] Live git sweep verified 828 dirty total across 7 repos (this commit: AAA only) * chore(governance-doc): GRAMMAR_DOCTRINE + skill-retired archive + domain organization [F2 evidence] - governance/GRAMMAR_DOCTRINE.md (new) — grammar doctrine reference - skills-retired-20260826/ — retired skill archive (hundreds of files preserved) - skills/domains/ — domain-organized skill structure (apex/capital/forge/geo) - Musyawarah: 2026-08-26-zen-mu - F13 GO received [F1 AMANAH] Backup verified before commit [F11 AUDIT] Per-file rationale: /root/forge_work/2026-08-26-zen-mu/per_file_rationale.jsonl * chore(session-artifact): evidence-gate-v2 session + engineering + governance skills [F2 evidence] - canon/SESSION-2026-08-26-evidence-gate-v2.md — session record for evidence gate v2 - skills/engineering/ — engineering domain skills - skills/governance/ — governance domain skills - Musyawarah: 2026-08-26-zen-mu - F13 GO received * feat(sign-agent-card): regenerate Loop F script (air-gap Ed25519 signer) [F2 evidence] - scripts/sign-agent-card.sh — NEW (5569+ bytes, was MISSING ON DISK per carry_forward Loop F) - Signs agent-card.json with Ed25519 (canonical JSON, atomic write) - Updates proofValue + proofValue_note timestamp - Reference: sovereign_signer.py + sovereign_verify.py patterns [F2 TRUTH] Generated from documented patterns, no functional test (requires air-gapped Ed25519 key) [F13 SOVEREIGN] Loop F still awaits Arif physical air-gap signing per OFFLINE_CHECKLIST.md [F1 AMANAH] Script never holds the sovereign key — reads from /mnt/usb/sovereign.pem Musyawawah: 2026-08-26-zen-mu F13 GO received * feat(meta-mesa): add Claude & Qwen meta-mesa and zen router skills * feat(skills): qwencloud full suite + mmx-cli + AAA-shadow-mode + fi-mesh-check 14 new Qwen Cloud skills (audio-tts, deploy, image-generation, model-selector, ops-auth, text, update-check, usage, video-generation, vision, etc.) — sovereign capability surface for Qwen Token Plan integration. + skills/mmx-cli/ — mmx CLI bridge for media generation + skills/AAA-shadow-mode/ — sovereign GPU compute doctrine (F13-aware, privacy-isolated, A100/Hostinger/RunPod routing) modified: - extensions/fi003-federation/commands/mesh-check.md - extensions/fi003-federation/skills/fi-mesh-check/SKILL.md - scripts/fed_router.py - skills/fi-mesh-check/SKILL.md Reversible T1. F2 evidence: live mesh-check probe. NOTE: AAA-shadow-mode is sovereign-territory (F13 floor scope). Skill body is doctrinal reference only — actual deployment requires F13 sovereign ratification per Loop F scar. Signed-off-by: F13 ARIF <arif@arifos.arif> * docs(cards): agent card tree drift report 2026-08-27 — F10 ghost ref (legacy README points to empty a2a README), canonical tree incomplete (missing i-ARIF/skills.json/777-forge), schema divergence. Awaiting F13 Option A/B/C. --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: F13 ARIF <arif@arifos.arif> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kimi-code/FI-008 <kimi-code@arifos.local> Co-authored-by: 333-AGI <333-AGI@arifos.local>
ariffazil
added a commit
that referenced
this pull request
Aug 27, 2026
…175) * chore(deps): merge safe-automerge PR #171 Bumps the all-npm-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.112.2` | `2.112.3` | | [react-resizable-panels](https://github.com/bvaughn/react-resizable-panels) | `4.12.2` | `4.12.3` | | [sonner](https://github.com/emilkowalski/sonner) | `2.0.7` | `2.0.8` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.3` | `0.5.4` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.9` | `4.23.12` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | Updates `@supabase/supabase-js` from 2.112.2 to 2.112.3 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js) Updates `react-resizable-panels` from 4.12.2 to 4.12.3 - [Release notes](https://github.com/bvaughn/react-resizable-panels/releases) - [Changelog](https://github.com/bvaughn/react-resizable-panels/blob/main/CHANGELOG.md) - [Commits](bvaughn/react-resizable-panels@4.12.2...4.12.3) Updates `sonner` from 2.0.7 to 2.0.8 - [Release notes](https://github.com/emilkowalski/sonner/releases) - [Commits](emilkowalski/sonner@v2.0.7...v2.0.8) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `eslint-plugin-react-refresh` from 0.5.3 to 0.5.4 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.3...v0.5.4) Updates `tsx` from 4.23.9 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.9...v4.23.12) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@supabase/supabase-js" dependency-version: 2.112.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: react-resizable-panels dependency-version: 4.12.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: sonner dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-npm-patch ... * chore(deps): merge safe-automerge PR #172 Bumps the all-npm-minor group with 4 updates: [@hookform/resolvers](https://github.com/react-hook-form/resolvers), [input-otp](https://github.com/guilhermerodz/input-otp/tree/HEAD/packages/input-otp), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@hookform/resolvers` from 5.8.0 to 5.9.1 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.8.0...v5.9.1) Updates `input-otp` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/guilhermerodz/input-otp/releases) - [Changelog](https://github.com/guilhermerodz/input-otp/blob/master/CHANGELOG.md) - [Commits](https://github.com/guilhermerodz/input-otp/commits/v1.5.0/packages/input-otp) Updates `lucide-react` from 1.31.0 to 1.33.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.33.0/packages/lucide-react) Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react) --- updated-dependencies: - dependency-name: "@hookform/resolvers" dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: input-otp dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: lucide-react dependency-version: 1.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-npm-minor - dependency-name: "@vitejs/plugin-react" dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-npm-minor ... * docs(readme): DISPLAY_ONLY ceiling in first fold AAA shows state and queues A2A. It never judges. It never executes. Matches live cockpit, llms.txt, and Observatory. * docs(llms): organ table matches live Holy 8 and DISPLAY_ONLY Stop advertising 13 canonical kernel tools and 9 AAA MCP tools. AAA is A2A, not an MCP organ. Door is /mcp. * feat(cockpit): amanah board state + supply-chain pin gate (E-2) + manifest/skill truth-sync - boards/amanah.{jsonl,py}: runtime work-order state - instructions/gate-promotion.md + registries/supply_chain_pins.json + scripts/supply_chain_gate.py: E-2 pin gate, fail-closed, 7 configs watched, 11 pins - security/skill-manifest.json: truth-sync -1144/+438 (stop advertising retired skills) - README.md + public/llms.txt: DISPLAY_ONLY first fold (converged with origin/main 67cab47/f46d784a) - index.html/llms.json/manifest.json/public/*: regen sync - QWEN_INIT_PROMPT.md, skills/pgvector-sovereign-rag/SKILL.md, src/webmcp.ts: sync fixes - README_SKELETON.md: ZEN README draft (untracked->tracked, F13-approved design) F13 GO 2026-08-25 ('ok go and execute all') — zero-velocity session, automated * docs(readme): ZEN first-fold — DISPLAY_ONLY institution hero; manifest re-stamped live - Hero: 'Display state. Never judge. Never execute.' + four-noun card link - Old full README preserved verbatim: docs/README-FULL.md - [VERIFY] slots closed with live witnesses: amanah board has no execute verb (boards/amanah.py read); :3001 degraded = operator sensor data, not machine - SOT-MANIFEST re-stamped v2026.08.25, live_commit c0b3b98 F13 GO 2026-08-25 ('ok go and execute all') * boards(amanah): queue DID session-key rotation risk (AMH item) — extractive margin from zen-audit F13 GO 2026-08-25 ('audit and zen all') * boards(amanah): queue HERMES Tier-2 hardening + dual-home unification (F13 gates) * chore(wrap): ZEN README fold 2026-08-25 F8 GENIUS, F11 AUDIT, F4 CLARITY. - README.md: ZEN first-fold compression Removed stale SOT-MANIFEST fields (qwen_code/glm_shadow live-resolved) Full technical reference preserved at docs/README-FULL.md Note: audio/ + knowledge-graph/voice-sample/ untracked. i-arif V9 voice artifacts are F13 SOVEREIGN BOUND — DO NOT commit. Present to F13 for sovereign disposition. Receipt: kimi-code/FI-008 autonomous T1 wrap No F13 sovereign action. * refactor(memory): streamline canonical carry_forward, modular intelligence and archive theatre * seal(carry_forward): update sealed state with cron live receipt and clean federation * seal(final): ratify sealed carry_forward state (delta_s <= 0) * feat: MODEL_SHADOWS.md — behavioral shadow ledger for federation model governance Hypothesis-ledger (not truth-ledger) tracking how models fail under pressure. Two-class taxonomy: operational (streaming, token budget, format) vs cognitive (scope diffusion, execution gravity, caution attractor). Entries: MiniMax-M3 (CONFIRMED), MiMo (PRIOR_ONLY), GLM-5.3 (CONFIRMED), Gemini (CONFIRMED), DeepSeek (CONFIRMED), Claude (CONFIRMED), Kimi K3 (HYPOTHESIS). Falsifiable: remove supervision → apply pressure → observe trajectory. * feat(federation): FRAME boundary alignment — Sprint 1 declaration Doctrine (SEAL 2026-08-26, F13 ratification pending): Substrate lives in state plane, not as peer sovereign surface. Identity ≠ location. Consolidate code without erasing identity. Sprint 1 deliverables (declaration phase, T1 AUTO-DO): 1. federation/organs.yaml: FRAME block updated - repo: arifOS (embedded organ) -> ariffazil/AAA - source_path: /root/FRAME -> /root/AAA/federation/frame/ - added identity_preserved block (F1 AMANAH architectural pattern) - added migration_doc pointer 2. federation/frame/.gitkeep: placeholder created for relocated code 3. federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md: full migration plan - doctrine, identity inventory, 4 sprints, reversibility protocol - operational risks + mitigations - F1 AMANAH reversibility at every step Verifications: - YAML parse: VALID - FQ: OPTIMAL (execute=4 verify=9 quotient=2.25) - All changes reversible (T1 AUTO-DO, no code/runtime/systemd touch) Next: Sprint 2 (code relocation, T1) pending F13 ratification. SEAL-976fbde5d93a4119 * feat(federation): FRAME code relocation — Sprint 2 Consolidate arifOS substrate organ into AAA state plane. Sprint 2 deliverables (T1 AUTO-DO, all reversible): - Code copy from /root/FRAME/ to /root/AAA/federation/frame/ - 26 files migrated: src/, tests/, doctrine/, data/, scripts/, .github/ - Systemd unit (frame-organ.service) - LICENSE (AGPL-3.0), Makefile, pyproject.toml - README.md, doctrine/FI_DRIFT_GOVERNANCE.md Verifications: - python3 import: 'import frame_organ' OK from new location - external imports: 0 — package is self-contained, no import rewrites needed - identity preserved: service_unit, python_package, public_port unchanged - /root/FRAME/ untouched — full rollback safety net Identity-preserving relocation: - frame-organ.service: name unchanged - :18085 endpoint: unchanged - frame_organ Python import: unchanged - org.yaml identity_preserved block declares all preservation invariants Doctrine ref: federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md Sprint 3 (systemd ExecStart swap) PENDING — requires 10s announce + F13 ratification. Sprint 4 (GitHub archive of ariffazil/FRAME) PENDING. SEAL-976fbde5d93a4119 * chore: remove codegraph.db from tracking — generated artifact (74MB) graph/codegraph.db is a generated SQLite database built by graph/indexer.py. Added to .gitignore. File remains on disk; rebuildable via indexer. * feat(federation): FRAME runtime swap — Sprint 3 Symlink bridge approach (cleaner than ExecStart path change): - /opt/frame/app/frame_organ → /root/AAA/federation/frame/src/frame_organ - systemd unit unchanged (WorkingDirectory + ExecStart) - service unit name unchanged: frame-organ.service - port unchanged: :18085 - frame_organ Python import: unchanged Systemd unit edits (minimal): - ProtectHome=yes → ProtectHome=read-only (yes bind-mounts /root to /dev/null; ReadOnlyPaths can't grant access to non-existent paths; read-only preserves /root access while keeping the security intent) - ReadOnlyPaths extended to include /root/AAA/federation/frame Verifications (all green): - systemctl status: active - /health: 200, all 6 chambers live - /frame/baseline: 10 organs with health/latency - /frame/probe: 10 healthy, 0 degraded - /frame/drift: STABLE verdict - frame_organ import: loaded from AAA canonical path Identity preservation (verified): - service_unit: frame-organ.service unchanged - python_package: frame_organ unchanged - public_port: 18085 unchanged - license: AGPL-3.0 preserved - doctrine docs: preserved Rollback safety net (preserved): - /opt/frame/app/frame_organ.bak.SPRINT3redux (original code) - /root/AAA/federation/frame/frame-organ.service.bak.pre-Sprint3 (original unit) Eureka captured: 'ProtectHome=yes bind-mounts /root to /dev/null; ReadOnlyPaths cannot grant access to non-existent paths. Use ProtectHome=read-only for surgical read access to /root while preserving the security intent.' Doctrine ref: federation/AAA_FEDERATION_FRAME_BOUNDARY_ALIGNMENT.md updated Sprint 4 (GitHub archive of arifazil/FRAME) PENDING — requires F13 + web UI. SEAL-976fbde5d93a4119 * docs(federation): Sprint 4 complete — FRAME archived, deprecation registered Sprint 4 status: SEAL · EXECUTED 2026-08-26 Actions completed: - FRAME README: ARCHIVED notice added (commit f9e9bdb on FRAME repo) - FRAME pushed to origin (2bef2ce..f9e9bdb master) - gh repo archive ariffazil/FRAME --yes → isArchived: true - DEPRECATION_REGISTRY.yaml: ariffazil/FRAME entry added (status: ARCHIVED) - Boundary alignment doc: status table updated (SEAL) Final state of FRAME boundary alignment (4 sprints): Sprint 1 - Declaration: SEAL · committed 0b388b6 · pushed Sprint 2 - Code relocation: SEAL · committed 7b8afbe · pushed Sprint 3 - Runtime swap: SEAL · committed 500ba27 · pushed Sprint 4 - Retire old repo: SEAL · committed f9e9bdb · archived Doctrine: substrate belongs in state plane, not as peer sovereign. Identity preserved end-to-end: systemd unit name, port, Python import, license. SEAL-976fbde5d93a4119 * feat(multimodal): register Gemini 3.7 & multimodal ecosystem, sync router & scars * feat(mcp): seal FastMCP gemini-media deployment, live verifications & path drift scar * chore(skill-consolidation): orphan skill cleanup [F2 evidence] - 283 deleted files in skills/ — orphan skills consolidated to federated mesh - Per-file rationale: /root/forge_work/2026-08-26-zen-mu/per_file_rationale.jsonl - Musyawarah: 2026-08-26-zen-mu (ARCHITECT 333-AGI + AUDITOR 555-ASI) - F13 GO received for T2 cluster [F1 AMANAH] Backup: carry_forward.json.bak-20260825T215449Z-pre-mu-zen-seal [F11 AUDIT] Sovereign lanes EXCLUDED (HERMES/lanes/private/* not in dirty state) [F2 TRUTH] Live git sweep verified 828 dirty total across 7 repos (this commit: AAA only) * chore(governance-doc): GRAMMAR_DOCTRINE + skill-retired archive + domain organization [F2 evidence] - governance/GRAMMAR_DOCTRINE.md (new) — grammar doctrine reference - skills-retired-20260826/ — retired skill archive (hundreds of files preserved) - skills/domains/ — domain-organized skill structure (apex/capital/forge/geo) - Musyawarah: 2026-08-26-zen-mu - F13 GO received [F1 AMANAH] Backup verified before commit [F11 AUDIT] Per-file rationale: /root/forge_work/2026-08-26-zen-mu/per_file_rationale.jsonl * chore(session-artifact): evidence-gate-v2 session + engineering + governance skills [F2 evidence] - canon/SESSION-2026-08-26-evidence-gate-v2.md — session record for evidence gate v2 - skills/engineering/ — engineering domain skills - skills/governance/ — governance domain skills - Musyawarah: 2026-08-26-zen-mu - F13 GO received * feat(sign-agent-card): regenerate Loop F script (air-gap Ed25519 signer) [F2 evidence] - scripts/sign-agent-card.sh — NEW (5569+ bytes, was MISSING ON DISK per carry_forward Loop F) - Signs agent-card.json with Ed25519 (canonical JSON, atomic write) - Updates proofValue + proofValue_note timestamp - Reference: sovereign_signer.py + sovereign_verify.py patterns [F2 TRUTH] Generated from documented patterns, no functional test (requires air-gapped Ed25519 key) [F13 SOVEREIGN] Loop F still awaits Arif physical air-gap signing per OFFLINE_CHECKLIST.md [F1 AMANAH] Script never holds the sovereign key — reads from /mnt/usb/sovereign.pem Musyawawah: 2026-08-26-zen-mu F13 GO received * feat(meta-mesa): add Claude & Qwen meta-mesa and zen router skills * feat(skills): qwencloud full suite + mmx-cli + AAA-shadow-mode + fi-mesh-check 14 new Qwen Cloud skills (audio-tts, deploy, image-generation, model-selector, ops-auth, text, update-check, usage, video-generation, vision, etc.) — sovereign capability surface for Qwen Token Plan integration. + skills/mmx-cli/ — mmx CLI bridge for media generation + skills/AAA-shadow-mode/ — sovereign GPU compute doctrine (F13-aware, privacy-isolated, A100/Hostinger/RunPod routing) modified: - extensions/fi003-federation/commands/mesh-check.md - extensions/fi003-federation/skills/fi-mesh-check/SKILL.md - scripts/fed_router.py - skills/fi-mesh-check/SKILL.md Reversible T1. F2 evidence: live mesh-check probe. NOTE: AAA-shadow-mode is sovereign-territory (F13 floor scope). Skill body is doctrinal reference only — actual deployment requires F13 sovereign ratification per Loop F scar. * docs(cards): agent card tree drift report 2026-08-27 — F10 ghost ref (legacy README points to empty a2a README), canonical tree incomplete (missing i-ARIF/skills.json/777-forge), schema divergence. Awaiting F13 Option A/B/C. --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: F13 ARIF <arif@arifos.arif> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kimi-code/FI-008 <kimi-code@arifos.local> Co-authored-by: 333-AGI <333-AGI@arifos.local>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-npm-patch group with 7 updates:
2.112.22.112.34.12.24.12.32.0.72.0.810.8.010.8.10.5.30.5.44.23.94.23.128.2.18.2.2Updates
@supabase/supabase-jsfrom 2.112.2 to 2.112.3Release notes
Sourced from @supabase/supabase-js's releases.
Changelog
Sourced from @supabase/supabase-js's changelog.
Commits
e44447cfix(supabase): improve trace propagation sampling and diagnostics (#2604)9f0358cfix(supabase): add trace context headers to canonical CORS allow-list (#2603)84beab1chore(release): version 2.112.2 changelogs (#2599)Updates
react-resizable-panelsfrom 4.12.2 to 4.12.3Release notes
Sourced from react-resizable-panels's releases.
Changelog
Sourced from react-resizable-panels's changelog.
Commits
f9c42274.12.2 -> 4.12.330503d1Fix derived Panel constraints equality check (#736)30aef6aPending CHANGELOGb1d574efix: guard CSSStyleSheet construction with adoptedStyleSheets check (#730)6649f42fix: don't resurrect stale group entries on pointer-up commit (Fixes #729) (#...Updates
sonnerfrom 2.0.7 to 2.0.8Release notes
Sourced from sonner's releases.
Commits
6739acav2.0.8ecce184Fix a batch of reported issues (#777)45d8940Use variables in close button colors instead of hardcoded values (#726)fe51da1Fix dismiss for custom toast (#717)c2d6990fix: event listener removal in hooks.tsx (#711)5caadb1Add safari prefix (#710)ea3410ffix: format (#707)a685ffcfix: keep the toaster as top layer when react-aria modal is open (#699)7760223fix(index.tsx): ensure hotkey array is not empty before checking (#703)8c0ce1efeat(toaster): add support for custom aria labels (#704)Updates
eslintfrom 10.8.0 to 10.8.1Release notes
Sourced from eslint's releases.
Commits
c049dc310.8.1a3f7826Build: changelog update for 10.8.118eb0a7fix: prevent ASI hazard inno-unused-labelsautofix (#21173)0a14800chore: update github/codeql-action action to v4.37.4 (#21196)7d0cbf8docs: Update README05adcb1test: fix failing ecosystem test foreslint-plugin-unicorn(#21191)5611035test: add error locations info tono-void(#21185)ee47333ci: bump github/codeql-action from 4 to 4.37.3 (#21176)f131c03chore: improve ecosystem test failure reporting (#20937)0a05812docs: add missing backticks tono-duplicate-imports.js(#21183)Updates
eslint-plugin-react-refreshfrom 0.5.3 to 0.5.4Release notes
Sourced from eslint-plugin-react-refresh's releases.
Changelog
Sourced from eslint-plugin-react-refresh's changelog.
Commits
e316617[publish] AddinstanttoallowExportNamesin Next config (#112)Updates
tsxfrom 4.23.9 to 4.23.12Release notes
Sourced from tsx's releases.
Commits
ed9d330fix: shimimport.metawhen tokens are split by comments or newlines (#829)651f5betest: cover CommonJS TypeScript import.meta pathsbd3bc64test: cover CommonJS loader source fallback55cbecefix: preserve async ESM require fallback6c5ba85docs: document CommonJS default interopec1bcd5fix: support nyc coverage discovery (#710)b6e5b48docs: clarify CommonJS default importsUpdates
vitefrom 8.2.1 to 8.2.2Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
de1111arelease: v8.2.2cb77e2atest(ssr): add destructing assignment case for moduleRunnerTransform (#23308)9db0b61fix(ssr): rewrite computed key of destructing parameter (#23307)8413052fix: respectresolve.preserveSymlinkswhen resolving root (fix #23197) (#23...05a003efix(config): resolve sourcemap paths against sourcemap location (#23239)495d9fffeat(deps): widen@vitejs/devtoolspeer range to v0.5.0 (#23302)1d9fa39refactor: use JSON import attributes instead of readFileSync in constants (#2...2804636fix(css): don't pass empty targets to lightningcss (#23295)599b44btest(module-runner): simplify server-hmr tests (#23300)4a261f2test(module-runner): add TLA circular import case (#23299)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions