Skip to content

build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.44.1 in the contracts group across 1 directory - #13

Merged
deku2026 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/contracts-bbea05a18c
Sep 21, 2026
Merged

deku2026 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/contracts-bbea05a18c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the contracts group with 1 update in the / directory: @arcforges/proto.

Updates @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.44.1

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from deku2026 as a code owner September 21, 2026 05:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot dependabot Bot changed the title build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.36.1 in the contracts group build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.36.1 in the contracts group across 1 directory Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/contracts-bbea05a18c branch from a0aa3fc to 0b131db Compare September 21, 2026 08:43
@dependabot dependabot Bot changed the title build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.36.1 in the contracts group across 1 directory build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.38.1 in the contracts group across 1 directory Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/contracts-bbea05a18c branch from 0b131db to 0092d3f Compare September 21, 2026 19:06
Bumps the contracts group with 1 update in the / directory: [@arcforges/proto](https://github.com/ArcForges/Contracts/tree/HEAD/src/public/ts/proto).


Updates `@arcforges/proto` from 1.0.0-ci.25.1 to 1.0.0-ci.44.1
- [Commits](https://github.com/ArcForges/Contracts/commits/HEAD/src/public/ts/proto)

---
updated-dependencies:
- dependency-name: "@arcforges/proto"
  dependency-version: 1.0.0-ci.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: contracts
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.38.1 in the contracts group across 1 directory build(deps): bump @arcforges/proto from 1.0.0-ci.25.1 to 1.0.0-ci.44.1 in the contracts group across 1 directory Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/contracts-bbea05a18c branch from 0092d3f to 41241c4 Compare September 21, 2026 23:34

@deku2026 deku2026 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Full review at c3a1e08: captured Dependabot's refresh to Contracts 1.0.0-ci.44.1 and appended the admission commit to that exact bot head. The producer source is 199e61565aff33db425f6148a55a7676388a8e8c and the Hello descriptor is unchanged. The new graph removes duplicate protobuf 2.14.1. All 73 retained/moved input bodies match prior approved bytes; direct locked esbuild produced the independently admitted 73/33/31 parsed/emitted/map closure. Runtime SBOM drops only the redundant version and updates exact Contracts coordinates/integrity. Full legal terms remain; Contracts NOTICE changes only version labels. Existing verifier code, runtime behavior and routing are unchanged. Negative tests still reject omission of the actual protobuf runtime. Old records/profiles remain immutable.

At 38.1 before the bot refresh, local format/lint/type/source/licence, 46 units, 68 tooling tests, one candidate build and 20 static artifact-integrity tests passed. The 44.1 adjustment preserved every compiled input and generator, reused that exact oracle and passed final static profile/source checks; no second local build or runtime test was added. All applicable final 44.1 CI checks passed in 35668719162, including candidate build, dependency review, secret scan and CodeQL. Independent coordinator review of the full diff and refreshed metadata found no findings.

@deku2026
deku2026 merged commit 5b58841 into main Sep 21, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/contracts-bbea05a18c branch September 21, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant